last executing test programs:

4m7.908932872s ago: executing program 1 (id=1713):
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$inet6(0xa, 0x3, 0x4) (async)
r1 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e3, &(0x7f0000000180)={r1, r2}) (async)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x4) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c)
write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x43, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x403, 0x0, 0x0, 0x0, 0x80}, {0x1, 0x0, 0x0, 0x6cc, 0xffffffffffffffa4}, {0x0, 0x0, 0x0, 0x7}, 0x7, 0xfffffffd, 0x0, 0x0, 0x1, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x6c}, 0x2, @in=@private=0xa010102, 0x0, 0x4, 0x1, 0x0, 0x0, 0x93}}, 0xe8) (async)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCSPGRP(r5, 0x8902, 0x0)
socket$inet(0x2, 0x3, 0xa) (async)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a5c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000031c0008800c00024000000000000000050c00014000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfe, 0x400}, 0xc)
ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, 0x0)
socket$netlink(0x10, 0x3, 0x10) (async)
r8 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r8, 0x0, 0x0)
unshare(0x24060400)
socket$nl_route(0x10, 0x3, 0x0)

4m7.694922306s ago: executing program 1 (id=1717):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x922, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb15e}}]}, 0x50}}, 0x4)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x0, 0x22, 0x0, &(0x7f0000000080)="3d25ab555b19c4cbd0017085080040fee5a990ec7661bcf85f9871eb5f7eef2d45f0", 0x0, 0x304a0000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

4m6.01952662s ago: executing program 1 (id=1724):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0)
bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0x4, 0x3}, 0x6)
writev(r1, &(0x7f0000000680)=[{&(0x7f00000000c0)="c6af09ff4e890c7cd88f8bc82571faacea15929a9408a54a27c2d010860ea2d7aa724d46389feb25abe583cbef54c96f67d9a47e9fb2530745cc75990b29b8e49fe8a8611634382b8b64d75cfce2965c8d1f51c0ade585", 0x57}, {&(0x7f0000000140)="65a718fbe63e5584aea09d05d1de0b8e239232c0b190b710416851b9a54ba062a7200b0fc702ca83b12a53118493b895356d900983617591d02bd03cdd2531c0734a5dc0f93984946e7be00e24295949d866d1027c50111d0f529254b19d3ab7958898c0cbcfc71aa6e80300a33546e41dc51c0ae8a871df8471ca9bf6232fd818c2d27536702801cee800f5076dabd9c6947e2eaaab91cb100ab616b5b862e0a774687d3ed6157c1e9d70e9be47eb7660bbe1d913037b247685a7be4eb02726abb7fc96", 0xc4}, {&(0x7f0000000700)="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", 0x315}, {&(0x7f0000000380)="1b6fcdaf4558dfdb37d5feb39d5a03d7482ffa495c868e4b3571f592caa0f18d85d47d5960aa268d28880c68c7f6969131ed434817136ca7e8a44db61a39152904ed162e91e6d6445e0ab4c2f7af86e5653a9530fd9aa9f8bfb2e438467b17a21a70b4e0c47c119170e63dcc20fed64ad0042bd4c4ad4d4f5e62e4e24e95", 0x7e}, {&(0x7f0000000400)="36e71c5301e5460aa7ee75787e48b8c0ae0f2084f5e3c9122890b82f5fcad51d99b6ea2ca24a5f84e524f835b0fcfb0f4f849a9c2dc8b7968223642aa120b68e7ad0f5a388e1d1700a8ab0cdd1e630faecb11872c24634ad47d24838975b46776f85498abdf4d41dac596e4e83c41d29768f559db83633b727b0c63fe076e4ae1d90d18d78eabbc6c3c905eb42d5e80fd27f0f1897128526d737a6d4a86acbda13b3ab74af9713deed072b005ba974effb664e8531e704b359487fb224b790cbb582b1c3f82291d142ee261dec3c927a150b2681243b88e298c2494a8f7052b52c553b19e4d74d2d06", 0xe9}, {&(0x7f0000000500)="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", 0xfe}, {&(0x7f0000000600)="67b881af76b1c2a82f0dbe239962a1eff00bd4c8e6afe3771c4090c107864c2684a5faff401d0d2a6c8bf90bc156e48df7c88762a993defe4e75a5b3307e4570c661c1240628c867ed9e54f436e4", 0x4e}], 0x7)
write(r1, &(0x7f0000000000)="09000000010000", 0x7)
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001a0000022cbd7000fcdbdf2502002000", @ANYRES32=0x0, @ANYBLOB="00000000080002000000000014000100fe7100000000000000000000000000bb"], 0x38}, 0x1, 0x0, 0x0, 0x8044001}, 0x2000)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'ip_vti0\x00', <r5=>0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000440)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x1, 0x4, {{0x5, 0x4, 0x1, 0x17, 0x14, 0x64, 0x0, 0x80, 0x0, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}}}}})
close(r3)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "fa"}]}, @NFTA_CMP_OP={0x8}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "a8"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0)
r8 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1}}], 0x48}, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xce}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x79ef}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000020}, 0x40)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040))
ioctl$TUNSETLINK(r0, 0x400454cd, 0x6)

4m5.466415083s ago: executing program 1 (id=1733):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x96}, 0x20) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1, r0}, 0xc)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r3, 0x0, 0x0}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
unshare(0x22020400) (async)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80)
bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@o_path={0x0, r5}, 0x18)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000510000000400000002"], 0x50) (async)
socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r6, &(0x7f0000000a40)="01007ebf0ff106a17c8f23738d80032254e1b7158e0296ed5fb89b6e928910fff729152698583072f5dbd53a3400e2961de3a19c3186fbdc314bf33b1278f8baf89d69d3c8c8da", &(0x7f00000001c0)=@udp=r7, 0x1}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x21, 0x6, 0x7, 0x101, 0x10100, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r8}, 0x4)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r9, 0x7a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0}}, 0x35)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r11, &(0x7f0000000200), 0xffffffc1) (async)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r14=>0x0}) (async)
r15 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_int(r15, 0x29, 0x11, 0x0, &(0x7f00000000c0)) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x30, r13, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xfffffe00, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x5, 0x6}]}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r11, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0x28, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x7}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2bb}, @map_val={0x18, 0x6, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xe5db}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @call={0x85, 0x0, 0x0, 0x78}, @map_fd={0x18, 0x3, 0x1, 0x0, r8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xd}, @ldst={0x0, 0x0, 0x1, 0x0, 0x6, 0x10, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000500)='GPL\x00', 0x4, 0x92, &(0x7f0000000540)=""/146, 0x41100, 0x70, '\x00', r10, 0x18, r11, 0x8, &(0x7f0000000600)={0x1, 0xfffffffe}, 0x8, 0x10, &(0x7f0000000640)={0x2, 0x1, 0x5, 0x2}, 0x10, 0xf017, r4, 0x0, &(0x7f0000000680), 0x0, 0x10, 0xa}, 0x94)

4m5.178547507s ago: executing program 1 (id=1734):
r0 = socket(0xa, 0x5, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x34000}], 0x1, &(0x7f00000007c0)=[@init={0x18, 0x84, 0x0, {0x8000, 0xf, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x89, 0x9, 0x2, 0xd}}], 0x38, 0x4008000}, 0x28008841)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000080)
getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f00000000c0)={<r8=>0x0, 0x5877339e}, &(0x7f0000000200)=0x8)
setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x190)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9, <r11=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r10}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r11}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r10}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r11}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r10}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={r11, &(0x7f00000005c0)}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={r8, 0x3c, &(0x7f00000002c0)=[@in6={0xa, 0x4e20, 0x81, @local, 0xffff}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0xd, @empty}]}, &(0x7f0000000340)=0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$unix(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/50, 0x32}, {&(0x7f0000000400)=""/83, 0x53}], 0x2}, 0x2)
sendmsg$IPCTNL_MSG_CT_DELETE(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000000201030000000000000000000200000018000180140001800c000100ac1414bb080002080a0101010c0019800800010006"], 0x38}, 0x1, 0x0, 0x0, 0x10050}, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x7, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000640)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000740)=0xe8)
sendmsg$nl_generic(r5, &(0x7f0000003280)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003240)={&(0x7f0000001f80)={0x12a8, 0x28, 0x400, 0x70bd2a, 0x25dfdbff, {0x18}, [@typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="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", @nested={0x113, 0x95, 0x0, 0x1, [@typed={0x14, 0x68, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x11, 0x0}}, @generic="53f567d2bfc0e6234eb79a1c99643043470b9b473eb4cad9bf", @generic="add830d1bc833668fc3728e8671d6df60ff21e8d336cb3c2b797f36dbc8bdb2a9d5cfa6f12bacc2af6a18cd3664adeaba26a8f30fe753a0488c209bb156ff49b0bae3484bd184e971f0e5ec5afaa1fda8336173618874f271f1bf48d98bf6f967e022f15540d18bf769e127b6ba9484a6360c2fcd925acb1c2a0b727b55bc7e91a082abb1e4a3a675f97", @typed={0xd, 0x2c, 0x0, 0x0, @str='#*,%\xe2/\n\xac\x00'}, @typed={0x8, 0x40, 0x0, 0x0, @uid}, @generic="a9be93f7bd718269f2cb4f9b65cce63cb76c34555ad56a0f8134ef30ca81c0f908ce181781000cc86fb1eb76642485ff33ba029964cdb1881b07d5cf49b4e43e"]}, @typed={0x8, 0x3b, 0x0, 0x0, @uid=r14}, @nested={0x9a, 0x147, 0x0, 0x1, [@nested={0x4, 0x127}, @nested={0x4, 0xac}, @nested={0x4, 0x99}, @nested={0x4, 0xb2}, @typed={0x8, 0x58, 0x0, 0x0, @u32=0x8}, @generic="37f31ae324cd36d6cad5dfb30902719b9c2a7a28ac26cf40edf0ff4d72c1be03303c71efec2e7f4145d808777ea78d05f3c882af850a78fe92fbc71d7ada1ea3c320fa9b5335d7baf005a70e85a81f1f0ed202fe7e87950773222893f03ff1fad8b6600787873354a251407855920cdc", @generic="f35a3a3d1789027da83e", @nested={0x4, 0xf2}]}, @generic="bbcf98f8db3fde8c3b6f573d2647abcc172777c7b23fefcc612be0aa9cce6ada7ad838a167859c8f29d5d4cb047edd99598365a1e4662a8bc0971cfdedbbd752f244dc9bf830fec5306d1f6cb17ee064ba09af95dbb64029b0b349a7ef30321c6b1b301671b7085d0d0883340b38080cab3285ecd3186094aafb173ccd246b320efd156e43397d5d9107361a6bae63320b4c6a2f5a88be459a72fa8ea05b9b9f89a8e70a5206c55c65a51f3a712c0abb323f4f23c64b760d2e9b26273237a7b635f46a7d8fab514eb54f0c4fa829f17d475da40f"]}, 0x12a8}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
r15 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r15, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xfff3, 0x2}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)

4m4.828340078s ago: executing program 1 (id=1738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES64=r3, @ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa6b}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000040000100fcff070004000000010000000400488014000180100010800c000f80080091002d2e260008000200", @ANYRES32=r5, @ANYBLOB="5280c8b7170b7c021f7a2c5a6cd612cea8f8bf3caff02d593a9bcbaa01d230ff765ea0c5e5acc4304a1bdcaa5d26170fb3e819d8c1d504fa76e95b93fa1dbec0307545395c880f253d180b74c1c3f717e8b8daad2cf8f7e69e7a605112840c44288f92528b98f14c7e085d869da314eafcdaa5a635bb6ab7960e022df68fa228e4bc4d32357e"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4012)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000c0a6c6cae545d7fdca6fb7671fcd289117b952b9eb16165c2afda53d046690d2bf09c8743af23f3f9ef32c48aaf0cac6e0cc1472f77a88ef3fd0caca6adcdbd0a17889017c4b9506d925091cd4bb9c3b6035956e60ee26044623387c1bdf9ca2f7ee0c05358e80feee1c477fb5ad6e11a14a", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r7 = socket(0x23, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0xffffffff, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x108)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x40}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r4, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000"], 0x50}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000005c0)={0x0, 0x33, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4004850)
recvmsg(r10, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r8)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESDEC=r9, @ANYBLOB="4897ab64311c904a75fa2a79f7f4cd8dbd98ef713f75b599f351181fa32a7557f8b15c7af6937a93eaf1b78b3bec09148d4b97bd0670d24dac60438a12b207d0702259e91db396ae84538961aae1f67ffb5fd7971532402a3b116c179e93da516ec1fb61ffad05568e9df0047eb5b5c477f0914426be4eda4092c8850342e31aa64b9bcc3e9d17936945181eb6d244f180cca1bbcd4d2e85741bd817326a093cc57fdb2ab3f926a6df755e8a34376ced48e054e72c2e7ee07739adad4a3f96ea502ba6100df87e138c711e855015e853a33bea946692927d334ed218beb2f85189ef0f4aabff1017", @ANYBLOB="eb29e7d372dcd7bbcd985c557f20d0a5a01a7db996a88e19b3b322ed7f2f294a61bb6ed08f03000000d3d0044b82ef3544072b7804803af8c236816f0aa584e431a1c3880520405b38b59754ffbdb311fdcc71011a011103dcf99aeb8e0b0f3446bc114b7e88ae7a95bb4ca01e61eaace874c47f936e8befc544c36b2f6ddcd2e5e1e88b47eadeb55c50ee6c7b8f052b7d292a972407f1a0abd6672dc5a22ab572654b4fd381d58ace4ab550cc29fd124f44955a", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x40080d5}, 0x40001)

3m49.76007666s ago: executing program 32 (id=1738):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, <r2=>0x0}, &(0x7f0000000200)=0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYRES32=r1, @ANYRES8=r0, @ANYRESOCT=r1, @ANYRES64=r3, @ANYRES64=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa6b}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000040000100fcff070004000000010000000400488014000180100010800c000f80080091002d2e260008000200", @ANYRES32=r5, @ANYBLOB="5280c8b7170b7c021f7a2c5a6cd612cea8f8bf3caff02d593a9bcbaa01d230ff765ea0c5e5acc4304a1bdcaa5d26170fb3e819d8c1d504fa76e95b93fa1dbec0307545395c880f253d180b74c1c3f717e8b8daad2cf8f7e69e7a605112840c44288f92528b98f14c7e085d869da314eafcdaa5a635bb6ab7960e022df68fa228e4bc4d32357e"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4012)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000108fdffffff0000000800000000c0a6c6cae545d7fdca6fb7671fcd289117b952b9eb16165c2afda53d046690d2bf09c8743af23f3f9ef32c48aaf0cac6e0cc1472f77a88ef3fd0caca6adcdbd0a17889017c4b9506d925091cd4bb9c3b6035956e60ee26044623387c1bdf9ca2f7ee0c05358e80feee1c477fb5ad6e11a14a", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r7 = socket(0x23, 0x2, 0x0)
setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000080)={0xffffffff, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x108)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x40}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000280)=0xc9, 0x4)
readv(r4, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1)
sendmsg$can_bcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES64=0x0], 0x80}}, 0x0)
r9 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000"], 0x50}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000005c0)={0x0, 0x33, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4004850)
recvmsg(r10, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
sendmsg$IPSET_CMD_LIST(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r8)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYRES16, @ANYRESDEC=0x0, @ANYRESDEC=r9, @ANYBLOB="4897ab64311c904a75fa2a79f7f4cd8dbd98ef713f75b599f351181fa32a7557f8b15c7af6937a93eaf1b78b3bec09148d4b97bd0670d24dac60438a12b207d0702259e91db396ae84538961aae1f67ffb5fd7971532402a3b116c179e93da516ec1fb61ffad05568e9df0047eb5b5c477f0914426be4eda4092c8850342e31aa64b9bcc3e9d17936945181eb6d244f180cca1bbcd4d2e85741bd817326a093cc57fdb2ab3f926a6df755e8a34376ced48e054e72c2e7ee07739adad4a3f96ea502ba6100df87e138c711e855015e853a33bea946692927d334ed218beb2f85189ef0f4aabff1017", @ANYBLOB="eb29e7d372dcd7bbcd985c557f20d0a5a01a7db996a88e19b3b322ed7f2f294a61bb6ed08f03000000d3d0044b82ef3544072b7804803af8c236816f0aa584e431a1c3880520405b38b59754ffbdb311fdcc71011a011103dcf99aeb8e0b0f3446bc114b7e88ae7a95bb4ca01e61eaace874c47f936e8befc544c36b2f6ddcd2e5e1e88b47eadeb55c50ee6c7b8f052b7d292a972407f1a0abd6672dc5a22ab572654b4fd381d58ace4ab550cc29fd124f44955a", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x40080d5}, 0x40001)

6.611288617s ago: executing program 0 (id=3590):
r0 = socket$packet(0x11, 0x3, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000009700000005000000850000005000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r1}, 0xc)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0xfffe, 0x7, 0x10000, 0x1, 0x0, 0x0, 0x80000000}, 0x1c)
mmap(&(0x7f0000ff4000/0x2000)=nil, 0x2000, 0x7fa962bffffe, 0x13012, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b1, &(0x7f0000000000)={'bond0\x00', 0x200})
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000900)=0xffffffffffffffff, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r7, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0)
r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000400)='GPL\x00', 0xd, 0x1000, &(0x7f0000002cc0)=""/4096, 0x40f00, 0x40, '\x00', 0x0, 0x0, r8, 0x19c00, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x0, 0x2, 0x5b, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r7, @ANYBLOB="08000200ac1414aab2c9f47d6e50a2c07a479bf12fd42027dead2f2f50ff3b7132d50bccd92a63e9416d0e2fe2081304928c1f5edd44b546691a02"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r9 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r9, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r10 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0)

6.175900557s ago: executing program 0 (id=3593):
r0 = socket(0x27, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
getsockopt$TIPC_SOCK_RECVQ_DEPTH(r0, 0x10f, 0x84, &(0x7f0000000080), &(0x7f0000000100)=0x4) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x9, 0x2, 0x61, 0x9}]}}]}}]}, 0x44}}, 0x2004c850) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000070000000000000000000000180900002020702500000000002020207b1af8ff00000000bda004000000000027000000f8ffffffb702000008000000b7030000000004002500f8ff0600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28}, 0x94)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

5.995680148s ago: executing program 0 (id=3594):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r1}}, 0x40)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003e7dfffff08300008a00000000000000010000000000000049060000000000000400000000000000000000000000000000000000000000000000000000000000b5ca000000ffffff070000000000000000000000000000000700000000000000ff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700"/320])
socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f0000000180)={0x6, @private=0xa010100, 0x4e21, 0x1, 'nq\x00', 0x0, 0x10001, 0x9}, 0x2c)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
socket$nl_route(0x10, 0x3, 0x0)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
ioctl$sock_ax25_SIOCADDRT(r7, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]})
socket$inet6(0xa, 0x80000, 0x2)

2.471081075s ago: executing program 5 (id=3599):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3, 0x3, 0x81, 0x31da, 0x0, 0xfffffffd, 0xfffff800, 0x4, 0xa}}}}]}, 0x58}}, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r10, 0x80, 0x6e, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800c0001006d8000766c616e00140002800800030002000000080001001000000008000500", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4200000021200000240012800c0001006d8000766c616e00140002800800030002000000080001001000000008000500", @ANYRES32=r8, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

2.401896573s ago: executing program 2 (id=3602):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000040)={0xac, 0x82})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x63, 0x8, 0x1, 0x8, 0x0, [@private1, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local]}, 0x48)
r2 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, &(0x7f0000000100)=[0x7, 0x7])
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000140)={'mangle\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0)={0xa, 0x2}, 0x2)
write$cgroup_int(r0, &(0x7f0000000200)=0x1ed800, 0x12)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4)
writev(r1, &(0x7f0000001600)=[{&(0x7f00000002c0)="7dd7d09d693afecfede2de6199ffb0536f5dbc02b5f4e87ab30a302f5f3f7b6cbb5531c1af4429bc78f09ebc3aeb2735b942c5b7491311e5f2fba94889edaba3018cb275595823eb343afb014687c08771e0586dd809d5", 0x57}, {&(0x7f0000000340)="da225c2a2832193e2c3a7a9852d96cd096adb6f134005a4f5d55d0279567180a6a121fb127ed959a534977b8d923b4c529c495922ef0c94791a25fd3ea062a5ac14fedc44eabaea6e492eb38b4da4efd143e8d5f0dfe9f06e940b390f9e3e01f", 0x60}, {&(0x7f00000003c0)="fdf961a1a0c6b0ca3031357b792a7f1a8ed484eb061235c54d99a2ef8de8c6df6dec7e285869bf7464b748c6e50c5666bf25a9fa06652e79cb94de3571d60e042c38059c5e51cb2310000bb8fbe70f7bcaf8507cd8d2fcc6abb573711ca76924836e9c673bd453563fd9a7546d629211487e58f821017db9a6dacc2b495bcb42fdd983c6951153746e7c53227d85e8f59dd7556cfa3d60ca1da6500723ac9a97762b77047b95c49199590cf1686130d44b913aba19e4b4c3913da207f02f80295f609cd5486a96961c5f613d15a1b74aaf623c8c1f5b190ce5dbfd3279a94d7c72a0fbb4aed5541a83bb1f45119595fb303a4fdf5dc1da1193a6d0ce7ef5090bd7e047f470bf23fc6b950c2a05933f1190cfa6ee9e5a0450929c13812db00ed0200cc320c556afcf70aee0f4aa4ff28ac2fb357459b2a0309b30620bf85815ca1b831244ce782618dc4d5a3866bcb6a3cc7aa136e183bfc074e91fdb4d38eff2f607c26b3a02a64d3322764cb10c35d475c6adfb2fafc24bf5afa53dc72711c95a1116b87fcd125f6ef4dd6d5952a780243870ab335fee8b6e658cef18ee220b2ef4552d3d98a79bc9ec9333e684459948ca9bd4c07d4ab87a130d162297c16f4fb74d8febdb93f9ec4db592a6ad696c519519df9bffb3a9a702515ce75d2aa5f55363c83f94b5722fd00f382e7befd53cfa11db0c1cad5def7669802034f1bf2362548d0c973c73636d12a0652cacfb40d73a9751c68f4a92d3ad169517b3f0397e654141e7d2bd2ab650d9abf145a1fe11d50ab268b582ba76d93ab5f93db6d96daadb58ec9dd8e4767e5f1f36e574d81a22192d0f2cb612c02d7a44fbe0b49c2d1b41fd914deff1aa649806cc537ec77bf2c87d6fc7f3e7d512033578eca3c1f3ef0564ee2427023e758b4a1e8ed0ee040c1d1dad47ddf34c2a4e446857d4b829d5cffdfe82ff8c7a1e87d7286aed047f712dff3a5e52513c5db0da4fa9c807e531d7a813d38a9222677b79b4a80aeea8b06f9169943ad3b879feee72f06745d45baef1ee742226fb25cfe1cf53c77d4bbf5e05a05fd21980d832e4c8126601b3fe8d71d1ad47b7fb68d1e150083d515e1d6d71c05bcdb0067403cfe5550b5bdcad8202e75caca9f311c3b74d626252750b849c5bf4b79828e8ca82f96eb841f9c683e00682383ddabcebd04af46df0284d079d33fd317fb445fd552842bd541f0e93d8500c984c1eeb320e830c7084431cba9c02e2e08b052c9248149c738a8a9bb81e2d3f37a1c7cabc522702af9ef76748b7051ec057654a6de35fe9a9540148da9643c6232a4e85910bfa0c234e5a60b752bcbef7e8ab566cc0c61a60f4c6ebab2fa5879175c7880fbd10241e8eb5e061876b5ec93938602fa28a7d031c04602f3ca3c8022fb026d35196f214a0b57f8f0ddf7ae388b2ea3dbd04da82bcd279fdf6ac3b28beacb3beb729615b309d88bf0bbc89285bc4128a69a3c058f59eed094905ba471b65991bb03952a7a175bc4882b69104affb50f821e2f358b5b63e4a1951ce2487a860164672ceaab253d5d2a08d6471afa75adc1fc20a18d045b55a9fd9a6619e9255aa29012482948eb76059689a9e6cfa35804ac17446eee9845ea26ebf0d96dcdfd7848eb69b855f954e21d3affaae7a027fb68fdddb1c48d3c03555dd0336d5c569a4c9d3c1c4761b75eac2f9d8e358c8c98cecafa8516a9b5d499fabb0a14c445c391344e2dbe78e691af7996f6787cbbd87a9b3e6127dba444fab926108aec3ab4e305b6c0728227ddd8381bc4f59ff6a3ca86aab3d75847d8d90de065ea639c16528f1de022d00793754ff8d651c5d8e0e60f26940627530d2df461c4bc2408c3f12aeae00a50e7e72dd3f8e009564888da0a1977bfc23ad37f7d8b7ffd4ca31c774aa71a4751544ea7823e7a45fdb45df58d9d05eb0e147a44ed41c6d18793c2d27ff5c76edb3271bfaa65668139525907f0d7f5f4211b947b51544927dbdeccead24c6bcf96e20ba962558357fa762d0f246f8944be37555a30cedd46b65d2caabfdce046a5070f333865db87bd21a92e68728e1d20af4c5f65a46f6ce8bd64d995c33eb6d24385f2b8037b5cedf8d71d587cf6c77a0ac965a2f3a3631441de48a5852dd7ac672496e6be9c7521ca70b37daaf6e4f03b8c0a4a7ab0ad4eb0b6548ccb9059e2cd6394c88c7b2b412f9888088e6a4edd92f1fbfe57455ed2c1a9f327f811e20c4fc9b31a98054abf2e217bd15cab361d54a223bdf6e3e2668b51e80b5414dfb8b318db2db6069e9128836a1f766441d730bf026a1e294581e926f40b30a6ee66fec032e762fe080a3e2e0ee80f5fb63f7fc2cd542c2bb012f465fe226aef41b8b946fd9bac440e275dfcfc105da7dfa44877288baad019696edd59f9cf84b6a1e8302b915bb952f488595d5c3cd13b9c5f049999525ef0d25fc1cb6681cb69832635d6095c7402b4fd598c1e04b1d6fccc6a71f38161495a5631c27710c2e01c5c17f4554deb539b1fbadc266759bb03afcc72772a2bf8cbcc071dff99e268ac4ed7bba7c8b04d39d78f715f01d23a1fb7576e5fc2a14f6114b0ccd6264ce3256f327b82e4dfc20abb3c3531992ffd86514a82e93b12e1756401372291cf2d6deb3cea3f82ec83e91a55e892cf3b7d27819c26cb93907a2ab77b1277ff9944496aa5ff0b306fef2e72cf361a9f46de31742cc4a4ac1f2200ce2f48e9d809a09e26ad96c6342572089bce7007aa1ab18c9c38b4890b9980b143d547933aa4f923e2e0095705f0ddcdb7546ae70fba92db1c2d1d7d582d40e6b75ad94323abbc6e1e0ebf0effd398533b67b2936c75ec8527a1972a52744fe181d83bc889c458c90865dcc776e96bbf77655621f055712771a648c33294a1b0b7ca6ab906adfec202e2f4e852a1d92a74ea6f807db71307f8ae3d600735a8faaeb115449dc8b48d95ba1f71cb2f8f3848221949ccfdc6edfec4e57f3657f403e903e1ba6f60dc54aaf8214175a044bbe6178ed22986cf68e9f57764e0202b34af7ed2a423291e4a9b1654a336bee199c33f83a0e24e76d74b66a456408f42b0c865f73e2c81431e0b37475ca9f6de50324a00a5850e1705404a5b8dba269c0d5a73c9c42c79c364a567566a8f9a2aa934ade4be077c7c29e2f54a17805b82b6e4ab5fab9dee1191ab4f04807b60378f04b642d8a2d9eb3c30eb62db3abfe68cc9399a2d82be3e95cc153d336e50abadde8df899706968913030f187a78042ca8cc15f15b6b7076957ad47a48c85892a0a0516a79a424a5dc6ac7c4737538438ec4050f14bd74a494dceb799d419fa96542acf2a0664c580f807ada0d30479e56a0aa92a0cbd1a2305f32a335a89e303bec52a49042a748c212d6f4b6d7e7c00c2f40728b492231e30a5ad40152d5a02b420cde4865d38d5a1f9762744762ff65a9005b9edc563d619b6e999360299fdfcfda7805e1a07a4589e10727f9b6c3261696ca274a26c02323a79de7a3e1fb663431698ffa9a15500cc22ea0b09c4d2245725e4474bb5e6dfd1f08a776f79f5862ab5fee26c1f85be6fe3b0afad70f5be5d901ae2537801d9c7a1a700bcb8824b39413438344adade809e48ccff01ff731611233e699d5b8139880778755e0a1ef7b85ed059921386752aafd1cd6c4084d3583a4356b0585c75bb7c2adfa6bfa0aed3cd77286c61eae4e91a1e140b8c7e8ff348ee5f2dcde6c4df248a4ec3e14ab03ca98f8dd48bd95eb66cc7fc4aaace297e30e702ec876f1605c1fd4698e0fb327474efd79a1bcc7e05b475be27f8c3d9655bad4aeade8fb16b3146d3ae681873d9d2b7b4b352aaff362ff12a167301deb806f12a7eb29c89df8622b4475259f04b9629341b5607b99f6a0ea572bf2535e739b20de43c6b556f69a8eca38811b7f80822be22f15d84384119ba10426b7d58e280357a2abd05cc8da77e0da33fbef32518f958b85c35556bcd9cca1306150d6dbe0ba8e04224eb2dd2f798469d67d4289fba937040db410852fb2c32a57e93464ce1eb3d629b059610095c7106c7bbfb142e82e143cf50e62c015c6fe93acc667bb5ce28872828576ab9c1ea0a771963a256f06dfed85c86b4dd0940b2a9d5e36086e72c2910f332e2512654bfe4c108833150b323eb6d4d15718f75214c23c05c2a10e7ea7407e9ce60547c2382f36bc062cbd2e63d524e45b0b91862b1add68fd1d7b945c52290a9d42dd5383c17cc2165b6afe00bd54cf49eb50a56612900285c424c0ba4f9b49768b826dff32a7d96eae38625e17cb3efc8d2fe282761e5dd96943cb8371d6e53a3b81d40030da70c87d9d2b8dd783c1913b06f1cac5167d7850b9af2d613df99ed532d561cadfd075f60a9ac751ef627a7d9cc9dc34c2b6455a173523165c877dcf0a26d6b7d75a26c77a9ad564ba543810f0adea6d29e5e8c305cb8f56651a2e483a7a92a6f049ab680aca92560f5467cb935002baa47dd3fa2819786dfc4fc02d718486b08a63cf2aa6da153c0c5005ea1ab28182f045f3389bd38ef57882cbc3120240519aaf8c88bfbccc38e160dd9ecd2fc16cbe1caee30b2a7c551ec8d09a1f3c8af6b2d64546da1080c31fa9cf48efbfea66d0ecf1ded15b5f5cdc2939d8fb04ccad608d7c2780eba11596f72bf517c00454ec7c871c963379112c3879e20fb71f1fa299a90f94f3bfe570e887a16b9ec0819fed18b4a666c88539ae060660a6f58427aabe2eb1344923012750cac88534d46600afb8bdc0f1bdeb7d2cb3ffb7485db7ee99756fef78a827f72982f5c2fb65dfdbb2c8734af69e3f32351343eb9c1cbfb97a7449c820e5133fe6cf789bca6982d1043a6c2c1944343eceeb3469cd4444a0260afe36ce89f32c028458c96dba1459828300d08a6e9d0ce5cdfb872d4133332d224dd7c89d58399792c2a5ae07b8550c6e11313e52af8dfcfb3e74a058a6e38cb5c3f9b044c16c9965a649dae82cbb44b8096c20b3f145bb3494ed0cfbee0302fd110f12342d3341312b10c609b3222e8aa5282c1fb27dfc72b84ff03b10f3a9454bf9099ef688430a693bd1fd879fb724a4f146e8f00e2a64f5ee5f3c44b54882b3a6231d55829a57abc6b88586ad6fe2ef6b83e46c77b2d337c7b8dbadd5afe71b1bd8bdfbe80b5c95812e67ba9057dd41f3614f8d6132aa56f6f2d6d5a85850f300227960d06d3c050eb0b39a38093323762a5ddfb11418a4d966aa3af8c70ed5337e09a7aebc6ab5119e8ffb89fa3e3f224c2a1171fc0daa2f8045153a21fd1dd63545c3d61cd57ae5f456261cf733eddc2e2eb78681d10d554c9e5064bd1639a3884da61658904b402e45d57addb4cf3c66ad94819a0be92cf9654cfbe6eb921ea92c03f72fd6e7156ffc40e23c9dd0a0058ab6f9f653336b6160b83fabed4772600e80901bcaa17abcae57bfd7b470c74f2867c7236247f33184d3cde5923524b46591c0571924df55302935941ade1203ff468f5b955b7874181303d4efce90811adc986dca943c1ba55735f1451b952c04f574cb1b13b5a0d00064a0ecd000d8d23714039e49167791c3ee5dffb6bc865b2766d7cee2fb92d85e5866ba686c992b85307bdc9ed8aeccabeab084cfc6f16a86d362bb22fe6e557d94fe692eb8ca73223bf3f1cfa6946020c802944813747477f8e960c01702b40fa09040fc0ec1416d9d56fa6dd7becf70559e2a4353e7bc8c74028df9188573e5fc85dcea9dc65ad99606f3d457e70dbecf7ee6bb1d8d4739e9c42a5d1556a3306e04", 0x1000}, {&(0x7f00000013c0)="3d5dc44d8cb8f9e17219b6c4aebc1f85c4109c7c8b5a3e42d26391e3749bad200c1094002cc9ac21dc5d401785eeff55d7a5ab4cf4eb0730da44332b32a629f046313288c086a52282283b418d7a18fbb03497d90a251a84772c99017a3c3f2533238c397f3556e5b2286fb78944dd17e8c9e16279f88ca952bb470c7010a6d9dadcdec2be83959a811986cd3b5626ec5106a33803b3a456b4", 0x99}, {&(0x7f0000001480)="d2cc9fa784ec529230f73c506529e6d5713f5c900758d554e649e7c27c6a087918f6956a8cd445e534ef6f71ca9dec19d4b3b6266ca0f282b6fbd4d382f9c73763735dc15d8f6b48dfb79e97a880fce03bc4fe37c8d7cbd5a3b0", 0x5a}, {&(0x7f0000001500)="fc48dfcc9bbdf062501d55be3e10526c7cbf27a2f265a3c8f5e4461e990d4680c37e74dae85fa8d26b26f40cd69b6d88a8dd6f9843d814cda0922e0b16f5a58729592603180ca882db9dda22db00762d1b266fc903462e7bfd2a29dcf3f206833a68e62fd4ed790930c4b3a3aca0d632ceec70b5eb048f4d9beaaf9cc629886986f55449be68917d7989387c9dd8e2d97cf0dc264f22aad9206b3957", 0x9c}, {&(0x7f00000015c0)="b2941d5abd09e6a807", 0x9}], 0x7)
mmap(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x2, 0x40010, r1, 0x8a9cc000)
setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000001680)=@fragment={0xff, 0x0, 0xe1, 0x1, 0x0, 0x3, 0x68}, 0x8)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r4, &(0x7f0000001700)='syz1\x00', 0x1ff)
ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000001740)={0x1})
sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000001840)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x6}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008000)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)=@getchain={0x4c, 0x66, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0x4, 0xe}, {0xe, 0xfff1}}, [{0x8, 0xb, 0xa0}, {0x8, 0xb, 0x7ff}, {0x8}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x8000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000001e80)={{<r6=>r2, &(0x7f0000001a00)='mangle\x00', 0x900, &(0x7f0000001a40)={@align=0x9, {0x3, 0xcebe, 0x1, 0xe}}, 0x4, &(0x7f0000001a80), &(0x7f0000001ac0)=0x4}, 0x4, &(0x7f0000001e00)=[{0x2, 0x8, &(0x7f0000001b00)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', &(0x7f0000001b40)="7e3c05abc07ef625f020", 0xa, 0xc}, {0x3, 0x8a, &(0x7f0000001b80)='%#\x00', &(0x7f0000001bc0)="97a0dd4ee02749baaa763a7dda4944350adafb25c573caaf98ea0c1182a015d25dd3d9852c1d5fe2657871866950f01c55289faed9ff03f62d1db09ab926a94f771a17334ba4e577d9b13210a62e6eed6f2e3ed0a1934ff1961bd302e95a25fafcce4d7d7127c87ebb660635851eb104bfb99ad4047fc24e0ec6a152aa56d7f34f36d805c3f7d56f6031dae74fa77b8b93e5fce568d5332fd6a1887d1e84", 0x9e, 0x20}, {0x2, 0x7, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)="ff392ab33a8fa231a0f5072d6d11c3a7956fd629a3a72885389d9c23d7721e7282c45bbec87bdb5cc38f593328690d8a137a23afabf32644f041c97495e1273a49a6466a2f246e175e9845179d0a980022aa54e4afcc4b0b7d399eabc0962e8cbeb5d997", 0x64, 0x18}, {0x3, 0x1, &(0x7f0000001d40)='blkio.bfq.io_service_bytes\x00', &(0x7f0000001d80)="3314c701f529d9d9f028edca1e86c79b0bacc7f5c1bd314541bc4cf73b4b5b8cfdd91dc016ca30e5bf797ecf8683e781e8cb32879c4ca1b52716dd5fc8e8e052df3507694b7c145a587976b0c44c0bfbb1bc185bf31625f9b8b17853da74d7b473f0608c45492c14e839122603e50f42ccf260", 0x73, 0x48}]})
syz_genetlink_get_family_id$l2tp(&(0x7f00000019c0), r6)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001f40), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001f80)={'batadv_slave_1\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000002040)={'ip6tnl0\x00', &(0x7f0000001fc0)={'syztnl2\x00', <r9=>0x0, 0x29, 0x1, 0xff, 0xe7d, 0x29, @mcast1, @private2, 0x700, 0x7800, 0x9, 0xc0}})
getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000002080)=<r10=>0x0, &(0x7f00000020c0)=0x4)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000021c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20800}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x5c, r7, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000002200))
ioctl$SIOCAX25DELUID(r6, 0x89e2, &(0x7f0000002240)={0x3, @bcast})

2.228030123s ago: executing program 2 (id=3603):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, 0x24}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001b00850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x1c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x7}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x5, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.189383123s ago: executing program 3 (id=3604):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xb, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x83}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
writev(r0, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052c33bec0c49ee12b56b36e6c5be956e7791334289cd58966289930fe24f617b6c", 0x8d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2d3edc698914eaa6fb32bf9bab8b33a", 0x34}], 0x2) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @loopback, 0x1}, 0x1c)

2.090989684s ago: executing program 4 (id=3605):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r1=>r0})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="a0f106003d332c4800000000", @ANYRES8=r2, @ANYRES32=0x0], 0x44}, 0x1, 0x0, 0x0, 0x84}, 0x40080)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000126bd7000fbdbdf05000000000000000800030003bc0000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x800)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id, 0x10)
socket$packet(0x11, 0x3, 0x300)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x10, @void}, 0x10)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @empty, 0xffffffff}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = accept(r5, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x2)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x2}, 0x8)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
sendmsg$nl_route(r1, 0x0, 0x1406c030)
recvfrom(r6, &(0x7f00000000c0)=""/60, 0x3c, 0x10040, 0x0, 0x0)

2.026589885s ago: executing program 3 (id=3606):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x158, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xed, 0x10000007}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xb, [0x10, 0x31, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'tunl0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448)
r2 = socket(0x2, 0x3, 0x6)
bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4)
sendto$inet(r2, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
sendto$inet(r2, &(0x7f0000001b40)="08ba810a10d69bfad8c22e8786d8ad9993d210135222cf43a16774cdcf28376516", 0x21, 0x0, &(0x7f0000002400)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18)
r3 = accept4(r0, 0x0, 0x0, 0x80000)
sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x20, 0x0, 0x300, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC, @NL80211_ATTR_MAC={0x0, 0x6, @broadcast}]}, 0xfffffef3}, 0x1, 0x0, 0x0, 0x20004080}, 0x0)

2.015725894s ago: executing program 5 (id=3607):
r0 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$kcm(0x10, 0x3, 0x10)
ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(r0, 0x40109441, &(0x7f0000000040)={0x5, 0x1, 0x5})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="03009000"})
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) (async)
getsockopt$packet_int(r4, 0x107, 0x15, 0x0, &(0x7f00000000c0)) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000090a01040000000000000000000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff0008000800000000390c000b400000000000000008140000001000010000000000000000000084000a"], 0x78}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000007000000010001000900000005"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0}, 0x90) (async)
unshare(0x22020400)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_udp_int(r7, 0x11, 0x66, 0x0, 0x0) (async)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)="22aade3881663766110ea1f88a9c69b63ba7d3e31998d72f9d7f0f96c5947f99125abc277fae154c5290f85b8ab00d2c39fde388d115797722a06258c1c95437b9c9d594bc16fd746e9118b37c23fdc5a7b7c49db431b5652f513888c17c95fafa9487251b00000000000000", &(0x7f0000000180)="94459af857f627c8f09e2d72bfb525e275f4c95ee890c51b594154cffd8d2097e17acf3d2d8906dce06801b0ee040caefb7975ac5187d6779617718eb4eac3a3dc827ea7bcca79e0ca342d", 0xfffffff7, r6}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r6}, 0x38)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xffffffffffffff67) (async)
ioctl$sock_netdev_private(r2, 0x8924, &(0x7f0000000000))
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000006c0)="1400000016000b63d25a80f77311d12022508ec9a280c1877fb9494b3efd6422b3a1471c070000000000000036a8ec7284e9dfa4b143947091460dfed9682a69b7bf85496a94ac7112c28b08d44b0045d1fcb429e2ec1e9c50e35076de3005251d18ff1c7cc04617871e6bf72833bbcb401f3b770a565f40920055535cd3bf29b167a87d03372f25f602f6d4241d514230dbedc2fbf390266b0d031f00977dc116e966d4b0c2106b8febbfc97038253fc92255723d706166950fa8", 0xbb}], 0x1}, 0x20000080) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118aa000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.923219347s ago: executing program 0 (id=3608):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = accept4$x25(r2, &(0x7f0000000080)={0x9, @remote}, &(0x7f0000000180)=0x12, 0x80400)
ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f00000001c0)={'macvtap0\x00'})
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x8}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$packet(0x11, 0x2, 0x300)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r9, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r10=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x39}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
setsockopt$packet_int(r7, 0x107, 0xc, &(0x7f00000000c0)=0xffffffee, 0x4)
sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a010100000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe8000000000000000000000000000aa6c010000fbffffff0200020000000000000000000000ffff7f000001fc020000000000000000000000000000fc020000000000000000000000000001ffffffff0000000000230000000000003c000000000000000a0002"], 0xec}}, 0x0)

1.514549559s ago: executing program 3 (id=3609):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
close(0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, &(0x7f0000000200), 0x806000)
r2 = socket$pptp(0x18, 0x1, 0x2)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e", 0xa2}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r4=>0x0})
unshare(0x2a020400) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000100000000cf746e12f4a288781e205b2903ddffeeac0f246577b9352d701b6da3730a05caef4645e88cbb0563081d378a6f7d68e482a9630976bf8d93b5a1f029a26700523bd64281bb3c5339a62d9625fc51d1c5e1c96d4440fdd642ff9cff611002badd304910608b351b2258e5aa48e806844ac24b84e8a07abc11ba71efc4f1d0955c24ffd8004742be4a5b7d6758f463dc3e0a9c70cfa6d61b8cff5a3fc60450973b8508f0e597b150e7", @ANYRES8=r2], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000015c0)=ANY=[@ANYBLOB="340000001000010000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x34}, 0x1, 0x0, 0x0, 0x8044051}, 0x4010) (async)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000080)=0xfffffffd, 0x4)
ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x9) (async)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async)
mmap(&(0x7f0000868000/0xf000)=nil, 0xf000, 0x0, 0x10, r0, 0x0) (async, rerun: 64)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r8 = socket(0x400000000010, 0x3, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r9, 0x0, 0x0) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r11, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r10], 0x38}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYRES8=r10], &(0x7f0000000480)='syzkaller\x00', 0x100002, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)

1.279744214s ago: executing program 3 (id=3610):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x20010, r0, 0x8f43c000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7fff}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x25b}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x120000}]}, 0x48}, 0x1, 0x0, 0x0, 0x22000011}, 0x800)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10000804)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x130, 0x4, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x54, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x12}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x60}]}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2cef}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_GRE_REPLIED={0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0xc385}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9b1a}, @CTA_TIMEOUT_SCTP_SHUTDOWN_ACK_SENT={0x8, 0x7, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x20000841}, 0x804)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x38, 0xd, 0x6, 0x3, 0x0, 0x0, {0x4, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x488c1}, 0x4000004)
r5 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000640)="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", 0x1000)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000001640)={<r7=>0x0, 0x8}, &(0x7f0000001680)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000016c0)={r7, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}}, 0x1, 0x5}, &(0x7f0000001780)=0x90)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f00000017c0)={0x0, ""/256, <r8=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000019c0)={{r8, 0x3bb82b65, 0x7f, 0x5, 0x1, 0xfffffffffffffe00, 0x1, 0x8, 0x10001, 0x7ff, 0x1000, 0x10, 0xd0000000000000, 0x8000000000000000, 0x7}})
r9 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000002a00)={'erspan0\x00', &(0x7f00000029c0)={'sit0\x00', <r10=>0x0, 0x80, 0x7800, 0x7, 0x4, {{0x7, 0x4, 0x0, 0x9, 0x1c, 0x66, 0x0, 0xfe, 0x2b, 0x0, @empty, @remote, {[@generic={0x7, 0x7, "1239c48029"}]}}}}})
setsockopt$MRT6_DEL_MIF(r9, 0x29, 0xcb, &(0x7f0000002a40)={0x1, 0x1, 0x5, r10, 0x9a2e}, 0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002b40)={'sit0\x00', &(0x7f0000002a80)={'gre0\x00', r10, 0x20, 0x700, 0x0, 0x7f, {{0x23, 0x4, 0x1, 0x3, 0x8c, 0x68, 0x0, 0xb5, 0x4, 0x0, @loopback, @private=0xa010102, {[@rr={0x7, 0x1b, 0x4f, [@remote, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @rr={0x7, 0xf, 0x4a, [@private=0xa010100, @rand_addr=0x64010100, @private=0xa010101]}, @noop, @cipso={0x86, 0x31, 0xffffffffffffffff, [{0x0, 0xc, "90a488a6501fd5771820"}, {0x6, 0x3, 's'}, {0x2, 0xd, "4f0ac0530c4074bfb37158"}, {0x0, 0xf, "96086c8b73ac039bc9a2688ced"}]}, @timestamp_prespec={0x44, 0x1c, 0xcf, 0x3, 0x5, [{@broadcast}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x31c3}, {@multicast2, 0x8}]}]}}}}})
read(r1, &(0x7f0000002b80)=""/4096, 0x1000)
setsockopt$TIPC_MCAST_REPLICAST(0xffffffffffffffff, 0x10f, 0x86)
ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000003b80)={0x2, 0x9, 0x10001})
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000003bc0), 0x2, 0x0)
read$nci(r11, &(0x7f0000003c00)=""/4096, 0x1000)
getpeername$llc(0xffffffffffffffff, &(0x7f0000004c00)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000004c40)=0x10)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000004c80)=[@timestamp, @window={0x3, 0xbf, 0x6}, @timestamp, @mss={0x2, 0x7}, @mss={0x2, 0x1}, @timestamp, @mss={0x2, 0x8}], 0x7)
sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000004dc0)={&(0x7f0000004cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004d40)={0x3c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.179908091s ago: executing program 2 (id=3611):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020500020a0000000000000000190000030006000000000002004e2164010100000000000000000002000100000004d5000008010000000003000500cd000000020000"], 0x50}, 0x1, 0x7}, 0x0)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'veth1_to_batadv\x00', {0x2, 0x0, @loopback}})
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00'})
r3 = socket(0x1d, 0x2, 0x6)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'erspan0\x00', <r5=>0x0})
bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r5, 0x3, {0x1, 0xf0, 0x1}, 0xfe}, 0x18)
openat$cgroup_ro(r2, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="b8000000100001006cbd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4db20200305b0100140003006e657464657673696d300000000000007800168074000180100006"], 0xb8}, 0x1, 0x0, 0x0, 0x44010}, 0x4000040)

1.179285561s ago: executing program 0 (id=3612):
socket$packet(0x11, 0x3, 0x300) (async)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x30, 0x1, 0x81, 0xfffff024}, {0x6}]}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x110}, 0x1, 0x0, 0x0, 0x815}, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000540)="b9e403c6631e39495aa05dc7cf1c", 0x0, 0x7ab, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xffe0}, {0x2, 0xffff}, {0x0, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000740)=0xe8)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@updpolicy={0x164, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x3, 0xa, 0x80, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e23, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x11, r7, r8}, {0xfd, 0x224, 0x8, 0x0, 0xb1, 0x9, 0x0, 0x8}, {0x6, 0x1, 0x7, 0x200}, 0x6, 0x6e6bb8, 0x1, 0x0, 0x3, 0x1}}]}, 0x164}}, 0x2c000010) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=@updpolicy={0x164, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x3, 0xa, 0x80, 0x20, 0x87}, {0x0, 0x7fffffffffffffff, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4, 0x200000000000000}, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@mcast2, 0x4e23, 0x0, 0x4e20, 0x0, 0x2, 0xa0, 0x20, 0x11, r7, r8}, {0xfd, 0x224, 0x8, 0x0, 0xb1, 0x9, 0x0, 0x8}, {0x6, 0x1, 0x7, 0x200}, 0x6, 0x6e6bb8, 0x1, 0x0, 0x3, 0x1}}]}, 0x164}}, 0x2c000010)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) (async)
sendmsg$nl_xfrm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
r12 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r12, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4)
setsockopt$packet_int(r12, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4)
sendmsg$NFT_BATCH(r11, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYBLOB="00080000001200000a000100ffffffffffff0000140035006d616373656330"], 0x40}, 0x1, 0x0, 0x0, 0x20000801}, 0x40008)

1.170647048s ago: executing program 5 (id=3613):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb0100"], 0x0, 0x58, 0x0, 0xa}, 0x28)
setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000040)=0xa, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0xc, 0x10}, {0x2}}}, 0x24}}, 0x0)

1.098084294s ago: executing program 4 (id=3614):
r0 = socket(0x2, 0x80805, 0xfffeffff)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0xa7e, 0x70}, 0x2c)
syz_emit_ethernet(0x7c, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6003000000462f00fc000000000000000000000000000000ff0200000200000000000001042081000000892f"], 0x0)
bind$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x3}}, 0x10)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000100), 0x10)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r2, &(0x7f0000000140), 0x10)
socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'dh\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0xf6c12eb8213c0b07, 0xcd, 0x1}}, 0x44)

943.174174ms ago: executing program 5 (id=3615):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r0 = socket$kcm(0x11, 0x3, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x400002}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x58}}, 0x1020) (async, rerun: 64)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 64)
sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r3, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=',', 0x30}], 0x1}, 0x20008110)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0004000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f30455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async)
r7 = socket(0x10, 0x3, 0x0) (async)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, &(0x7f00000006c0)={'filter\x00', 0x7, 0x4, 0x3e0, 0x100, 0x0, 0x2f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@arp={@multicast1, @remote, 0xffffffff, 0x0, 0xd, 0x4, {@empty, {[0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0xffff, 0x1512, 0x52, 0x1, 0x92f, 'veth1_virt_wifi\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x80}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x44, 0x2, {0xffffffffffffe8d8}}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @loopback, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) (async)
r9 = socket(0x10, 0x803, 0x0) (async)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x38, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000000}]}}]}, 0x38}}, 0x24040084)
r12 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x25dfdbff, {0x60, 0x0, 0x0, r13, {0x0, 0x4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x44040) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x43}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffa}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94)

941.44654ms ago: executing program 2 (id=3616):
socket(0xa, 0x5, 0x0) (async)
r0 = socket(0xa, 0x5, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000100)=0x8) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={<r1=>0x0}, &(0x7f0000000100)=0x8)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x15, 0x1, 0xffffffff, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x200040c1}, 0x0)
accept$alg(r0, 0x0, 0x0)
sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000ff73d414031000010000000600000005a600000200fd5109e68c114c5070740000060000000400000033e179ad4e39011abca32cca338b4c2d2aa8c2ed7e251e0e6a44d05e46f5bd30111e6e6d956d4048a2f5fd87d755e84b4248a72728e39b93029c640065faaeadf227bb293f858a5d35061ed99d3f547bfdfde3c8e584602448596ae3bd43cf8961fe051917eb41e6110a3cb2ae93fb0f2b9d2f0a81bd823e22d179d54c0bcd2e01ed63db5dbab81606f6c4f1ba6b45de", @ANYRES32=r1], 0x30, 0x4008000}, 0x28008841)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000), 0x8)

894.599884ms ago: executing program 4 (id=3617):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000100)={'nr0\x00', 0x400})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x17, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x74e}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffff81}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x7, 0x1021, &(0x7f0000001900)=""/4129, 0x0, 0x68, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94)

796.675761ms ago: executing program 0 (id=3618):
r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r9=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=<r11=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=<r12=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=<r13=>0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0100ac00", @ANYRES16=r0, @ANYBLOB="00042bbd7000fbdbdf251e00000008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRESDEC=r1, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="f2ff0101", @ANYRES32=r12, @ANYBLOB="080004000000000008000100", @ANYRES32=r13, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x40004)
r14 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000000)="6848b27b6acd812dce3d01d190a3cab1ad4657f4b5", 0x15}], 0x2}, 0x0)

707.559237ms ago: executing program 2 (id=3619):
r0 = socket(0xa, 0x3, 0x3a)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', <r2=>0x0})
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r5, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@ipv4_newrule={0x15, 0x20, 0x1, 0x70bd2d, 0x25dfdbee, {0x2, 0x20, 0x10, 0x8, 0x7, 0x0, 0x0, 0x5, 0x1000e}, [@FRA_SRC={0x8, 0x2, @rand_addr=0x64010101}, @FRA_DST={0x0, 0x1, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80640c1}, 0x4000000)
setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x2c, @broadcast, 0x4e23, 0x3, 'ovf\x00', 0x35, 0x10, 0x7c}, 0x2c)

704.003006ms ago: executing program 4 (id=3620):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r0, &(0x7f0000000380)={0x10, 0x0, 0x25dfdbff, 0x40000}, 0xc)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
bind$netlink(r1, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x4000000}, 0xc) (async)
close(0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket(0x840000000002, 0x3, 0xff)
sendmsg$rds(r2, &(0x7f0000003a80)={&(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000200)=""/41, 0xfd83}], 0x1, 0x0, 0x0, 0x8000}, 0x48004)

702.499672ms ago: executing program 5 (id=3621):
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRESHEX, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x404, 0x4)

555.598526ms ago: executing program 4 (id=3622):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
r0 = socket$netlink(0x10, 0x3, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x800, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0xe0)

537.123137ms ago: executing program 5 (id=3623):
pipe(&(0x7f0000000600)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x8, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0xe, 0x0, &(0x7f0000000140)="00ad48cc42cb29fc99d41a08320a", 0x0, 0x2004, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
write(r1, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socket$nl_route(0x10, 0x3, 0x0)
accept4$llc(r1, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x10, 0x180800)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @ipv4=@private=0xa010102}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bond0\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @dev}, @IFLA_MTU={0x8, 0x4, 0x4000ff2}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x0, 0x6, 0xffffffff, @vifc_lcl_ifindex=r8, @multicast1}, 0x10)
splice(r0, 0x0, r5, 0x0, 0x5, 0x2)

303.269854ms ago: executing program 2 (id=3624):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180200001a00000000000000000000008500000036000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cd00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip6_vti0\x00', &(0x7f00000007c0)={'syztnl0\x00', <r4=>0x0, 0x4, 0x80, 0x5, 0x6, 0x41, @mcast1, @private1, 0x10, 0x1, 0x2, 0x4}})
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000ec0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f0000000e80)={&(0x7f0000000f00)=ANY=[@ANYBLOB="1f0ff4827730020000", @ANYRES16=r3, @ANYBLOB="00032bbd7000fcdbdf250100000004000300a80002801c0001800800010006000000080001000100000008000100010000000c0001800800010009000000040001800c00018008000100030000001c000180080001000100000008000100060000000800010005000000340001800800010007000000080001000500000008000100010000000800010007000000080001000500000008000100040000001c000180080001000100000008000100050000000800010004000000040003001400018008000100", @ANYRES32=r4, @ANYBLOB="080003000000000004000300d0000280140001800800010005000000080001000800000014000180080001000200000008000100010000002c00018008000100070000000800010004000000080001000300000008000100010000000800010006000000340001800800010008000000080001000300000008000100080000000800010008000000080001000300000008000100030000004400018008000100080000000800010007000000080001001000000008000100060000000800010008000000080001000200000008000100000000000800010002000000040003007c00028044000180080001000700000008000100000000000800010000000000080001000400000008000100010000000800010004000000080001000600000008000100000000003400018008000100020000000800010008000000080001000600000008000100060000000800010005000000080001000300000004000300"], 0x230}, 0x1, 0x0, 0x0, 0x880}, 0x400c000)
r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x22, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001000000000000000722e000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bf0300000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="000000000000000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000d537fcfffcffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x1, 0xcb, &(0x7f0000000400)=""/203, 0x41000, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x1000, 0xdef, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1], &(0x7f00000005c0)=[{0x3, 0x2, 0xa, 0x8}, {0x3, 0x1, 0xc, 0x2}, {0x4, 0x5, 0x2, 0x7}, {0x1, 0x4, 0xf, 0xc}, {0x5, 0x3, 0xe, 0x1}, {0x0, 0x3, 0x7, 0x3}, {0x5, 0x4, 0xf}, {0x1, 0x3, 0x2, 0x4}], 0x10, 0x4}, 0x94)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000700)={@dev, <r7=>0x0}, &(0x7f0000000740)=0x14)
syz_emit_ethernet(0x6e, &(0x7f0000000880)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x38, 0x3a, 0x1, @local, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0x200, 0x2c, 0xff, @loopback, @local, [@routing={0x2c, 0x0, 0x0, 0x5}]}}}}}}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={r6, r7, 0x25, 0x0, @void}, 0x10)

244.329022ms ago: executing program 3 (id=3625):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x40}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r1)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYRES16, @ANYRES16=r3, @ANYBLOB="4897ab64311c904a75fa2a79f7f4cd8dbd98ef713f75b599f351181fa32a7557f8b15c7af6937a93eaf1b78b3bec09148d4b97bd0670d24dac60438a12b207d0702259e91db396ae84538961aae1f67ffb5fd7971532402a3b116c179e93da516ec1fb61ffad05568e9df0047eb5b5c477f0914426be4eda4092c8850342e31aa64b9bcc3e9d17936945181eb6d244f180cca1bbcd4d2e85741bd817326a093cc57fdb2a", @ANYRES8=r2, @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x40008d5}, 0x40001)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="38000000f3020300000000000000000002000008080003400000000308000340000000030c00020000000000000000044ae50000000000d9"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8011}, 0x8080)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0, 0x3, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x27, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

51.193924ms ago: executing program 4 (id=3626):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0xa0, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x8c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newtaction={0xa0, 0x30, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x6a00}, [{0x8c, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x22}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async)
mmap(&(0x7f0000d30000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
mmap(&(0x7f0000f6e000/0x1000)=nil, 0x1000, 0x3000006, 0x12, r3, 0x5c2a7000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000003, 0x28011, r4, 0xac9d4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000)

0s ago: executing program 3 (id=3627):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x24020400)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0xfffffdd4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000200))
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000001c40)=0x4)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000500)=0xffff0080)
r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911171000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)

kernel console output (not intermixed with test programs):

tes leftover after parsing attributes in process `syz.2.2298'.
[  412.098605][T15492] netlink: 'syz.2.2298': attribute type 5 has an invalid length.
[  412.143011][T15492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2298'.
[  412.236488][T15492] geneve2: entered promiscuous mode
[  412.266743][T15492] geneve2: entered allmulticast mode
[  412.285056][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5730 ms
[  412.294703][    C0] lec:lec_tx_timeout: lec0
[  412.300077][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  412.313014][ T8372] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  412.336799][ T8372] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  412.364019][ T8372] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  412.393127][ T8372] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  412.594202][T15504] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2300'.
[  412.683673][T15515] netlink: 'syz.0.2303': attribute type 3 has an invalid length.
[  412.729076][T15515] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2303'.
[  412.764015][T15515] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2303'.
[  412.784611][T15519] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2303'.
[  412.817655][T15518] batadv_slave_0: entered promiscuous mode
[  412.837411][T15518] batadv_slave_0: entered allmulticast mode
[  412.874202][T15522] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2305'.
[  413.313002][T15540] xt_l2tp: missing protocol rule (udp|l2tpip)
[  413.462381][T15555] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'.
[  413.519498][T15555] bond0: entered promiscuous mode
[  413.617090][T15565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2315'.
[  413.658188][T15565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2315'.
[  413.668357][T15556] ±ÿ speed is unknown, defaulting to 1000
[  413.699281][T15565] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2315'.
[  413.994436][T15570] ±ÿ speed is unknown, defaulting to 1000
[  414.106069][T15581] netlink: 'syz.2.2318': attribute type 1 has an invalid length.
[  414.728003][T15601] netlink: 'syz.5.2323': attribute type 10 has an invalid length.
[  414.773380][T15601] batadv0: entered promiscuous mode
[  414.792616][T15601] batadv0: entered allmulticast mode
[  414.799747][T15601] bridge0: port 3(batadv0) entered blocking state
[  414.806760][T15601] bridge0: port 3(batadv0) entered disabled state
[  414.819025][T15601] bridge0: port 3(batadv0) entered blocking state
[  414.825884][T15601] bridge0: port 3(batadv0) entered forwarding state
[  414.877178][   T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  414.886628][   T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  415.228957][T15606] 5nè: entered promiscuous mode
[  415.258165][T15629] xt_TCPMSS: Only works on TCP SYN packets
[  415.282105][T15619] syzkaller1: entered promiscuous mode
[  415.319040][T15619] syzkaller1: entered allmulticast mode
[  415.480324][T15626] bridge0: port 3(batadv0) entered disabled state
[  415.530625][T15626] bridge_slave_1: left allmulticast mode
[  415.547710][T15626] bridge_slave_1: left promiscuous mode
[  415.561133][T15626] bridge0: port 2(bridge_slave_1) entered disabled state
[  415.639880][T15626] bridge_slave_0: left allmulticast mode
[  415.676999][T15626] bridge_slave_0: left promiscuous mode
[  415.682973][T15626] bridge0: port 1(bridge_slave_0) entered disabled state
[  416.509206][T15682] netlink: 'syz.0.2342': attribute type 1 has an invalid length.
[  416.766609][T15676] ±ÿ speed is unknown, defaulting to 1000
[  416.931374][T15702] ipvlan0: entered promiscuous mode
[  416.959638][T15702] bridge0: port 3(ipvlan0) entered blocking state
[  416.967334][T15702] bridge0: port 3(ipvlan0) entered disabled state
[  416.983581][T15702] ipvlan0: entered allmulticast mode
[  416.993123][T15702] bridge0: entered allmulticast mode
[  417.008214][T15702] ipvlan0: left allmulticast mode
[  417.019530][T15702] bridge0: left allmulticast mode
[  417.126345][T15703] ipvlan0: entered promiscuous mode
[  417.149537][T15703] bridge0: port 3(ipvlan0) entered blocking state
[  417.159958][T15725] __nla_validate_parse: 9 callbacks suppressed
[  417.159979][T15725] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2349'.
[  417.180562][T15703] bridge0: port 3(ipvlan0) entered disabled state
[  417.188780][T15703] ipvlan0: entered allmulticast mode
[  417.194124][T15703] bridge0: entered allmulticast mode
[  417.203494][T15703] ipvlan0: left allmulticast mode
[  417.209430][T15703] bridge0: left allmulticast mode
[  417.291343][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2350'.
[  417.325200][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  417.333431][    C0] lec:lec_tx_timeout: lec0
[  417.343415][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  417.466918][ T8398] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.500943][ T8398] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.512535][T15734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2351'.
[  417.612235][T15732] sit2: entered allmulticast mode
[  417.676574][ T8398] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.694062][ T8398] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  417.808470][T15745] xt_hashlimit: invalid rate
[  417.963661][T15736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.076259][T15756] ±ÿ speed is unknown, defaulting to 1000
[  418.103438][T15752] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2357'.
[  418.157806][T15752] netem: incorrect gi model size
[  418.181585][T15752] netem: change failed
[  418.199566][T15762] sctp: [Deprecated]: syz.0.2359 (pid 15762) Use of int in max_burst socket option deprecated.
[  418.199566][T15762] Use struct sctp_assoc_value instead
[  418.783023][T15774] ±ÿ speed is unknown, defaulting to 1000
[  418.952740][T15788] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2362'.
[  419.158987][T15808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2366'.
[  419.226599][T15808] ip6gre2: entered promiscuous mode
[  419.260970][T15808] ip6gre2: entered allmulticast mode
[  420.112861][T15839] tipc: Started in network mode
[  420.125599][T15839] tipc: Node identity 22a27486b219, cluster identity 4711
[  420.167484][T15839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  420.296034][T15844] syzkaller0: entered promiscuous mode
[  420.302822][T15844] syzkaller0: entered allmulticast mode
[  420.309606][T15844] tipc: Resetting bearer <eth:syzkaller0>
[  420.373288][T15856] bond10: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  420.387178][T15856] bond10 (unregistering): Released all slaves
[  420.434165][T15837] tipc: Resetting bearer <eth:syzkaller0>
[  422.356227][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  422.364268][    C0] lec:lec_tx_timeout: lec0
[  422.369442][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  423.156959][T15837] tipc: Disabling bearer <eth:syzkaller0>
[  423.177762][T15876] veth0_virt_wifi: entered allmulticast mode
[  423.185704][ T8234] tipc: Node number set to 2428204166
[  423.348754][T15889] 8021q: VLANs not supported on ip_vti0
[  423.404119][T15895] netlink: 'syz.5.2388': attribute type 1 has an invalid length.
[  423.493349][T15895] 8021q: adding VLAN 0 to HW filter on device bond1
[  423.618666][T15909] netlink: 165 bytes leftover after parsing attributes in process `syz.3.2390'.
[  423.637747][T15908] bridge_slave_1: left allmulticast mode
[  423.655597][T15908] bridge_slave_1: left promiscuous mode
[  423.666069][T15908] bridge0: port 2(bridge_slave_1) entered disabled state
[  423.917366][T15927] netlink: 'syz.5.2394': attribute type 1 has an invalid length.
[  423.958638][T15908] bridge_slave_0: left allmulticast mode
[  423.976917][T15927] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.986838][T15908] bridge_slave_0: left promiscuous mode
[  423.998349][T15912] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2392'.
[  424.008000][T15908] bridge0: port 1(bridge_slave_0) entered disabled state
[  424.034159][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2392'.
[  424.078151][T15912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2392'.
[  424.429353][T15937] bond0: option arp_validate: invalid value (55553)
[  424.451541][   T13] bond0: (slave bond_slave_0): interface is now down
[  424.459787][   T13] bond0: (slave bond_slave_1): interface is now down
[  424.486924][   T13] bond0: (slave bond_slave_0): interface is now down
[  424.501915][   T13] bond0: (slave bond_slave_1): interface is now down
[  424.527773][   T36] bond0: (slave bond_slave_0): interface is now down
[  424.554130][   T36] bond0: (slave bond_slave_1): interface is now down
[  424.595242][   T13] bond0: (slave bond_slave_0): interface is now down
[  424.602211][   T13] bond0: (slave bond_slave_1): interface is now down
[  424.642732][   T13] bond0: (slave bond_slave_0): interface is now down
[  424.655534][   T13] bond0: (slave bond_slave_1): interface is now down
[  424.687804][  T193] bond0: (slave bond_slave_0): interface is now down
[  424.700237][  T193] bond0: (slave bond_slave_1): interface is now down
[  424.736238][  T193] bond0: (slave bond_slave_0): interface is now down
[  424.747740][  T193] bond0: (slave bond_slave_1): interface is now down
[  424.768760][  T193] bond0: (slave bond_slave_0): interface is now down
[  424.777476][  T193] bond0: (slave bond_slave_1): interface is now down
[  424.812592][  T193] bond0: now running without any active interface!
[  425.056724][T15956] ±ÿ speed is unknown, defaulting to 1000
[  425.103076][T15963] vlan1: entered allmulticast mode
[  425.125875][T15963] veth0_vlan: entered allmulticast mode
[  425.264468][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'.
[  425.297360][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2401'.
[  425.307771][T15967] netlink: 'syz.2.2401': attribute type 6 has an invalid length.
[  425.318123][T15967] netlink: 'syz.2.2401': attribute type 5 has an invalid length.
[  425.364172][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2401'.
[  425.394178][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2401'.
[  425.427807][T15967] netlink: 'syz.2.2401': attribute type 6 has an invalid length.
[  425.455253][T15967] netlink: 'syz.2.2401': attribute type 5 has an invalid length.
[  425.929282][T16004] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2406'.
[  425.981411][T16009] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2410'.
[  426.165943][T16009] syzkaller0: entered promiscuous mode
[  426.175316][T16009] syzkaller0: entered allmulticast mode
[  426.346871][T16024] netlink: 'syz.2.2413': attribute type 22 has an invalid length.
[  426.409720][T16028] netlink: 'syz.2.2413': attribute type 22 has an invalid length.
[  426.453331][T16022] netlink: 'syz.2.2413': attribute type 22 has an invalid length.
[  426.936892][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  426.946858][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  426.956842][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  426.966733][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  426.981425][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  426.991540][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  427.001425][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  427.012823][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  427.023053][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  427.035126][T16052] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  427.385451][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  427.393554][    C0] lec:lec_tx_timeout: lec0
[  427.398346][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  429.330118][T16029] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  429.721771][T16083] netlink: 'syz.5.2424': attribute type 2 has an invalid length.
[  429.778346][T16081] __nla_validate_parse: 2 callbacks suppressed
[  429.778369][T16081] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2425'.
[  429.822251][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2424'.
[  430.099137][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'.
[  430.130149][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2430'.
[  430.143632][T16098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'.
[  430.154598][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2430'.
[  430.171271][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2430'.
[  430.180607][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2430'.
[  430.192781][T16100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2430'.
[  430.203815][T16098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2428'.
[  430.285841][ T8398] wlan1: Trigger new scan to find an IBSS to join
[  430.975659][T16137] netlink: 'syz.5.2441': attribute type 1 has an invalid length.
[  431.092610][T16137] 8021q: adding VLAN 0 to HW filter on device bond2
[  431.191091][T16145] bond2: (slave ip6erspan0): making interface the new active one
[  431.231764][T16145] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link
[  432.405632][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  432.413727][    C0] lec:lec_tx_timeout: lec0
[  432.419345][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  432.971809][T16207] bond14: entered promiscuous mode
[  432.978183][T16207] 8021q: adding VLAN 0 to HW filter on device bond14
[  433.951126][   T10] syz0: Port: 1 Link DOWN
[  433.956177][ T8376] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  433.972154][T16259] netlink: 'syz.5.2468': attribute type 1 has an invalid length.
[  433.980167][ T8376] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  433.980204][ T8376] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0
[  433.980924][ T8376] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  434.012768][ T8376] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.030795][ T8376] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0
[  434.055960][ T8376] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  434.082674][ T8376] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.109972][ T8376] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0
[  434.137246][ T8376] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  434.161926][ T8376] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  434.191035][ T8376] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0
[  434.326202][T16273] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.477890][T16259] bond3: entered promiscuous mode
[  434.502502][T16259] 8021q: adding VLAN 0 to HW filter on device bond3
[  434.540538][T16285] netlink: 'syz.3.2474': attribute type 1 has an invalid length.
[  434.542676][T16283] netlink: 'syz.3.2474': attribute type 1 has an invalid length.
[  434.576934][T16285] netlink: 'syz.3.2474': attribute type 11 has an invalid length.
[  434.588537][T16283] netlink: 'syz.3.2474': attribute type 11 has an invalid length.
[  434.809188][T16294] __nla_validate_parse: 241 callbacks suppressed
[  434.809210][T16294] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2475'.
[  434.894183][T16294] dummy0 (unregistering): left allmulticast mode
[  435.240579][T16310] x_tables: duplicate underflow at hook 2
[  435.677442][ T8248] IPVS: starting estimator thread 0...
[  435.747835][T16324] ±ÿ speed is unknown, defaulting to 1000
[  435.785216][T16326] IPVS: using max 25 ests per chain, 60000 per kthread
[  436.879806][T16373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2489'.
[  437.124873][T16378] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2491'.
[  437.142620][T16375] 8021q: adding VLAN 0 to HW filter on device bond4
[  437.155584][T16378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2491'.
[  437.193721][T16375] team0: Failed to send port change of device bond4 via netlink (err -105)
[  437.215195][T16375] team0: Failed to send options change via netlink (err -105)
[  437.237670][T16375] team0: Port device bond4 added
[  437.251180][T16382] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2492'.
[  437.276914][T16382] netlink: 'syz.0.2492': attribute type 7 has an invalid length.
[  437.299437][T16382] netlink: 'syz.0.2492': attribute type 8 has an invalid length.
[  437.316760][T16382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  437.435407][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  437.443548][    C0] lec:lec_tx_timeout: lec0
[  437.449214][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  437.612651][T16395] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2497'.
[  437.630187][T16391] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2494'.
[  438.059121][T16414] ±ÿ speed is unknown, defaulting to 1000
[  438.561902][T16440] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2507'.
[  438.578627][T16442] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2505'.
[  439.409210][T16462] syzkaller0: entered promiscuous mode
[  439.416062][T16462] syzkaller0: entered allmulticast mode
[  440.518010][T16514] __nla_validate_parse: 7 callbacks suppressed
[  440.518031][T16514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2522'.
[  442.465068][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  442.466914][T16520] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2523'.
[  442.473187][    C0] lec:lec_tx_timeout: lec0
[  442.488157][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  442.730960][T16539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2525'.
[  442.768777][T16539] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2525'.
[  442.827150][T16534] ±ÿ speed is unknown, defaulting to 1000
[  442.972098][T16551] netlink: 'syz.2.2531': attribute type 1 has an invalid length.
[  443.042972][T16551] pim6reg: entered allmulticast mode
[  443.069777][T16551] pim6reg: left allmulticast mode
[  443.172085][T16555] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2533'.
[  443.452662][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2536'.
[  443.476188][T16570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2536'.
[  444.818809][T16630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'.
[  444.847406][T16633] netlink: zone id is out of range
[  444.869771][T16633] netlink: zone id is out of range
[  444.886252][T16634] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2549'.
[  444.888302][T16633] netlink: zone id is out of range
[  444.944242][T16633] netlink: zone id is out of range
[  444.990521][T16633] netlink: zone id is out of range
[  445.042890][T16633] netlink: zone id is out of range
[  445.086453][T16633] netlink: zone id is out of range
[  445.108251][T16633] netlink: zone id is out of range
[  445.121577][T16633] netlink: zone id is out of range
[  445.127293][T16646] netlink: 'syz.5.2548': attribute type 2 has an invalid length.
[  445.135462][T16633] netlink: zone id is out of range
[  445.159675][T16633] netlink: 'syz.5.2548': attribute type 2 has an invalid length.
[  445.160798][T16647] bond10 (unregistering): Released all slaves
[  445.237220][T16655] xt_cgroup: xt_cgroup: no path or classid specified
[  445.746586][T16665] syzkaller0: entered promiscuous mode
[  445.752124][T16665] syzkaller0: entered allmulticast mode
[  447.498257][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  447.506385][    C0] lec:lec_tx_timeout: lec0
[  447.511498][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  447.730188][T16637] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  448.623927][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2562'.
[  448.771409][T16693] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2560'.
[  448.852010][T16702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2564'.
[  449.521863][T16724] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  450.134427][T16751] xt_l2tp: v2 doesn't support IP mode
[  450.160465][T16751] netlink: 'syz.5.2577': attribute type 1 has an invalid length.
[  450.312966][T16751] bond5: entered promiscuous mode
[  450.348084][T16751] 8021q: adding VLAN 0 to HW filter on device bond5
[  450.400677][T16768] netlink: 'syz.3.2582': attribute type 1 has an invalid length.
[  450.490003][T16765] 8021q: adding VLAN 0 to HW filter on device bond5
[  450.511157][T16765] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  450.539614][T16765] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  450.557617][T16765] bond5: (slave ip6gre1): making interface the new active one
[  450.565544][T16765] ip6gre1: entered promiscuous mode
[  450.572621][T16765] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  450.583433][T16776] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2584'.
[  450.599720][T16776] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2584'.
[  450.816113][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2589'.
[  450.850466][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2589'.
[  450.889700][T16794] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2590'.
[  450.944126][T16795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2590'.
[  450.953727][T16789] netlink: 'syz.5.2587': attribute type 1 has an invalid length.
[  451.002025][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2593'.
[  451.092717][T16803] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  451.157342][T16803] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  451.225304][T16790] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address
[  451.237104][T16790] bond6: (slave vxcan3): Error -95 calling set_mac_address
[  451.291284][T16789] bond6: (slave gretap2): making interface the new active one
[  451.308648][T16789] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  451.336792][T16809] bridge0: port 1(vlan3) entered blocking state
[  451.350280][T16809] bridge0: port 1(vlan3) entered disabled state
[  451.362604][T16809] vlan3: entered allmulticast mode
[  451.369757][T16809] dummy0: entered allmulticast mode
[  451.377851][T16809] vlan3: entered promiscuous mode
[  451.383148][T16809] dummy0: entered promiscuous mode
[  451.439630][T16812] 8021q: adding VLAN 0 to HW filter on device bond0
[  451.449156][T16812] 8021q: adding VLAN 0 to HW filter on device team0
[  451.463651][T16812] bridge0: port 3(vlan1) entered blocking state
[  451.471858][T16812] bridge0: port 3(vlan1) entered forwarding state
[  451.490709][T16812] net_ratelimit: 336 callbacks suppressed
[  451.490722][T16812] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  451.512948][T16792] ±ÿ speed is unknown, defaulting to 1000
[  452.274443][T16849] xt_hashlimit: size too large, truncated to 1048576
[  452.404447][T16860] netlink: 'syz.0.2610': attribute type 13 has an invalid length.
[  452.811841][T16883] netlink: 'syz.4.2618': attribute type 1 has an invalid length.
[  452.998146][T16896] ±ÿ speed is unknown, defaulting to 1000
[  453.229434][T16903] ip6erspan0: entered allmulticast mode
[  453.382673][T16912] SET target dimension over the limit!
[  453.454183][T16915] syzkaller0: entered promiscuous mode
[  453.460476][T16915] syzkaller0: entered allmulticast mode
[  453.641856][T16921] __nla_validate_parse: 12 callbacks suppressed
[  453.641878][T16921] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2629'.
[  453.884992][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 6370 ms
[  453.893122][    C0] lec:lec_tx_timeout: lec0
[  453.898419][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  453.917494][T16932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2632'.
[  454.037998][T16943] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003
[  454.102806][T16932] 8021q: adding VLAN 0 to HW filter on device bond7
[  454.112029][T16946] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2634'.
[  454.156004][T16947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2634'.
[  454.169738][T16941] bond7: (slave batadv1): Opening slave failed
[  454.623619][T16961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2638'.
[  454.655141][T16961] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2638'.
[  455.147472][T16987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2644'.
[  455.309396][T16993] syzkaller0: entered promiscuous mode
[  455.344367][T16993] syzkaller0: entered allmulticast mode
[  455.376508][T16998] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2650'.
[  455.408191][T17005] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2650'.
[  455.613193][T17019] netlink: 'syz.0.2655': attribute type 12 has an invalid length.
[  455.623252][T17015] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2653'.
[  455.722951][T17025] netlink: 'syz.3.2656': attribute type 1 has an invalid length.
[  455.750900][T17022] tipc: Enabled bearer <eth:vlan0>, priority 0
[  455.778405][T17025] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR
[  455.990760][T17035] syzkaller0: entered promiscuous mode
[  456.066279][T17035] syzkaller0: entered allmulticast mode
[  456.095659][   T30] audit: type=1800 audit(1777170017.162:8): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2659" name="memory.events" dev="tmpfs" ino=2771 res=0 errno=0
[  457.250256][T17093] netlink: 'syz.0.2673': attribute type 14 has an invalid length.
[  457.520290][T17112] netlink: 'syz.0.2678': attribute type 44 has an invalid length.
[  457.553114][T17094] bridge0: port 1(vlan2) entered blocking state
[  457.569490][T17094] bridge0: port 1(vlan2) entered disabled state
[  457.585321][T17094] vlan2: entered allmulticast mode
[  457.593810][T17094] bridge0: entered allmulticast mode
[  457.603132][T17094] vlan2: left allmulticast mode
[  457.616767][T17094] bridge0: left allmulticast mode
[  459.645954][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  459.654050][    C0] lec:lec_tx_timeout: lec0
[  459.659210][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  460.490052][T17134] ±ÿ speed is unknown, defaulting to 1000
[  460.925585][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  461.176033][T17182] __nla_validate_parse: 10 callbacks suppressed
[  461.176056][T17182] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2692'.
[  461.612210][T17200] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2697'.
[  461.728643][T17212] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.2700'.
[  461.760119][T17213] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.2700'.
[  461.799217][T17208] syzkaller1: entered promiscuous mode
[  461.808120][T17208] syzkaller1: entered allmulticast mode
[  462.071306][T17224] netlink: 'syz.5.2702': attribute type 4 has an invalid length.
[  462.101181][T17224] netlink: 'syz.5.2702': attribute type 4 has an invalid length.
[  462.122870][T17225] netlink: 'syz.5.2702': attribute type 4 has an invalid length.
[  462.149911][T17227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2703'.
[  462.394599][T17236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2708'.
[  462.464246][T17236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  463.456668][T17283] ±ÿ speed is unknown, defaulting to 1000
[  463.490915][T17282] ±ÿ speed is unknown, defaulting to 1000
[  463.767734][T17302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2726'.
[  464.194546][T17319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2731'.
[  464.225727][T17319] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2731'.
[  464.238579][T17320] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2731'.
[  464.446445][T17332] netlink: 'syz.0.2735': attribute type 19 has an invalid length.
[  464.529573][ T8374] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  464.550104][ T8374] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  464.582560][ T8374] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  464.603634][ T8374] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  465.380195][T17368] syzkaller0: entered promiscuous mode
[  465.389042][T17368] syzkaller0: entered allmulticast mode
[  465.405052][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  465.413256][    C0] lec:lec_tx_timeout: lec0
[  465.419300][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  465.797872][T17387] netlink: 'syz.5.2749': attribute type 1 has an invalid length.
[  465.826419][T17387] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  466.401383][T17415] __nla_validate_parse: 8 callbacks suppressed
[  466.401408][T17415] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'.
[  466.480042][T17403] netlink: 'syz.5.2754': attribute type 4 has an invalid length.
[  466.579486][T17424] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2757'.
[  466.612933][T17424] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  466.625477][T17424] bond0 (unregistering): Released all slaves
[  466.667718][T17429] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[  466.817670][T17439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  466.874614][T17439] netlink: 'syz.5.2760': attribute type 10 has an invalid length.
[  466.885474][T17439] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  466.907389][T17439] delete_channel: no stack
[  466.942328][T17442] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2762'.
[  467.090666][T17446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2762'.
[  467.108504][T17450] sctp: [Deprecated]: syz.0.2763 (pid 17450) Use of struct sctp_assoc_value in delayed_ack socket option.
[  467.108504][T17450] Use struct sctp_sack_info instead
[  467.125475][T17446] nbd: device at index 64 is going down
[  467.258319][T13438] udevd[13438]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  467.309130][T17457] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2766'.
[  467.843850][T17492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2775'.
[  467.928176][T17499] x_tables: duplicate underflow at hook 2
[  467.961517][T17499] netlink: 62967 bytes leftover after parsing attributes in process `syz.0.2776'.
[  467.992104][T17490] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.142707][T17505] vti0: entered promiscuous mode
[  468.551317][T17529] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2787'.
[  468.624327][T17529] ±ÿ speed is unknown, defaulting to 1000
[  468.716929][T17540] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2790'.
[  468.799801][T17540] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  469.970450][T17561] ±ÿ speed is unknown, defaulting to 1000
[  470.435391][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  470.443608][    C0] lec:lec_tx_timeout: lec0
[  470.448522][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  470.762700][T17583] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2800'.
[  470.817360][T17580] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  470.830441][T17580] bond0 (unregistering): Released all slaves
[  470.889100][T17586] bridge3: entered promiscuous mode
[  470.894536][T17586] bridge3: entered allmulticast mode
[  470.904803][T17586] team0: Port device bridge3 added
[  470.912088][T17587] bridge0: port 1(team0) entered blocking state
[  470.919332][T17587] bridge0: port 1(team0) entered disabled state
[  470.928311][T17587] team0: entered allmulticast mode
[  470.933614][T17587] team_slave_1: entered allmulticast mode
[  470.972032][T17587] team0: entered promiscuous mode
[  470.979162][T17587] team_slave_1: entered promiscuous mode
[  471.605887][T17616] __nla_validate_parse: 6 callbacks suppressed
[  471.605909][T17616] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2809'.
[  471.706327][T17624] bond0: (slave bond_slave_1): Releasing backup interface
[  472.150588][T17640] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2816'.
[  472.174713][T17640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2816'.
[  472.420185][T17659] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  472.611100][T17667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2825'.
[  473.342614][T17692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'.
[  473.372601][T17693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2832'.
[  473.667365][ T5847] block nbd0: Receive control failed (result -32)
[  473.675760][ T5161] block nbd0: Receive control failed (result -32)
[  473.729053][T17712] netlink: 'syz.3.2836': attribute type 1 has an invalid length.
[  473.740636][T17712] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2836'.
[  474.084298][T17730] netlink: 'syz.3.2843': attribute type 20 has an invalid length.
[  474.099560][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2843'.
[  474.187738][T17738] netlink: 'syz.2.2845': attribute type 3 has an invalid length.
[  474.224623][T17738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2845'.
[  474.242998][T17738] netlink: 'syz.2.2845': attribute type 3 has an invalid length.
[  474.250865][T17743] netlink: 47 bytes leftover after parsing attributes in process `syz.0.2846'.
[  474.658089][T17765] netlink: 'syz.0.2851': attribute type 11 has an invalid length.
[  474.688764][T17765] netlink: 'syz.0.2851': attribute type 23 has an invalid length.
[  474.723515][T17758] tipc: Failed to remove unknown binding: 66,1,1/2556088901:150669147/150669149
[  474.760681][T17758] tipc: Failed to remove unknown binding: 66,1,1/2556088901:150669147/150669149
[  474.779184][T17758] tipc: Failed to remove unknown binding: 66,1,1/2556088901:150669147/150669149
[  475.455305][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  475.463587][    C0] lec:lec_tx_timeout: lec0
[  475.468537][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  475.611005][T17803] netlink: 'syz.3.2861': attribute type 1 has an invalid length.
[  476.076054][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  476.096970][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  476.105515][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  476.113730][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  476.122090][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  476.216972][T17791] lec:lec_atm_close: lec0: Shut down!
[  476.299320][T17823] netlink: 'syz.3.2865': attribute type 3 has an invalid length.
[  476.314043][T17816] ±ÿ speed is unknown, defaulting to 1000
[  476.739606][   T30] audit: type=1800 audit(1777170037.802:9): pid=17843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2870" name=CB dev="tmpfs" ino=953 res=0 errno=0
[  476.773967][ T5847] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  476.977724][T17856] __nla_validate_parse: 11 callbacks suppressed
[  476.977745][T17856] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2873'.
[  477.132980][T17816] chnl_net:caif_netlink_parms(): no params data found
[  477.140326][T17856] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2873'.
[  477.253418][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2875'.
[  477.350793][T17879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2876'.
[  477.421841][T17879] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  477.474587][T17890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2878'.
[  477.488538][T17816] bridge0: port 1(bridge_slave_0) entered blocking state
[  477.495889][T17816] bridge0: port 1(bridge_slave_0) entered disabled state
[  477.503194][T17816] bridge_slave_0: entered allmulticast mode
[  477.512801][T17816] bridge_slave_0: entered promiscuous mode
[  477.522257][T17816] bridge0: port 2(bridge_slave_1) entered blocking state
[  477.530254][T17816] bridge0: port 2(bridge_slave_1) entered disabled state
[  477.547069][T17816] bridge_slave_1: entered allmulticast mode
[  477.580587][T17816] bridge_slave_1: entered promiscuous mode
[  477.795077][T17816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  477.856583][T17816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  477.944523][T17910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2883'.
[  478.001976][T17816] team0: Port device team_slave_0 added
[  478.014863][T17914] netlink: 'syz.5.2884': attribute type 61 has an invalid length.
[  478.032741][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2880'.
[  478.042309][T17914] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2884'.
[  478.084888][T17816] team0: Port device team_slave_1 added
[  478.206176][ T5847] Bluetooth: hci2: command tx timeout
[  478.269232][T17816] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.283283][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.315469][T17816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.715624][T17816] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.733541][T17816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  478.785104][T17816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.992283][T17816] hsr_slave_0: entered promiscuous mode
[  479.010354][T17816] hsr_slave_1: entered promiscuous mode
[  479.022976][T17816] debugfs: 'hsr0' already exists in 'hsr'
[  479.040824][T17816] Cannot create hsr debugfs directory
[  479.787787][T17961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2893'.
[  479.894829][T17970] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2896'.
[  480.020874][T17976] netlink: 'syz.4.2898': attribute type 1 has an invalid length.
[  480.288409][ T5847] Bluetooth: hci2: command tx timeout
[  480.465165][T17816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  480.482664][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  480.499653][T17816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  480.509403][T18001] x_tables: duplicate underflow at hook 2
[  480.520713][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  480.539082][T17816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  480.593483][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  480.618620][T17816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  480.658030][T17816] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  480.674043][T18007] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  480.921636][T18019] batadv0: entered promiscuous mode
[  480.942604][T18019] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  480.963995][T18020] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  481.078146][T17816] 8021q: adding VLAN 0 to HW filter on device bond0
[  481.117570][T17816] 8021q: adding VLAN 0 to HW filter on device team0
[  481.136768][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.144002][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  481.202984][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.210292][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  481.324978][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5110 ms
[  481.333202][    C0] lec:lec_tx_timeout: lec0
[  481.338540][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  481.479862][T18039] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  481.801580][T17816] 8021q: adding VLAN 0 to HW filter on device batadv0
[  481.886785][T18063] netlink: 'syz.3.2921': attribute type 13 has an invalid length.
[  481.948727][T17816] veth0_vlan: entered promiscuous mode
[  481.996334][T17816] veth1_vlan: entered promiscuous mode
[  482.107614][T17816] veth0_macvtap: entered promiscuous mode
[  482.133185][T17816] veth1_macvtap: entered promiscuous mode
[  482.185764][T17816] batman_adv: batadv0: Interface activated: batadv_slave_0
[  482.254287][T17816] batman_adv: batadv0: Interface activated: batadv_slave_1
[  482.277023][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  482.307347][   T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  482.332602][   T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  482.371328][   T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  482.380099][ T5847] Bluetooth: hci2: command tx timeout
[  482.438224][T18075] batadv_slave_0: entered promiscuous mode
[  482.444124][T18075] batadv_slave_0: entered allmulticast mode
[  482.480196][T18077] __nla_validate_parse: 4 callbacks suppressed
[  482.480218][T18077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2925'.
[  482.744774][  T193] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.783467][  T193] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  482.832169][  T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  482.840816][  T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  483.128945][T18094] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2930'.
[  483.183717][T18099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2929'.
[  483.196596][T18094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  483.217743][T18099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2929'.
[  483.401385][T18111] netlink: 'syz.4.2933': attribute type 20 has an invalid length.
[  483.413941][T18109] netlink: 'syz.2.2932': attribute type 10 has an invalid length.
[  483.442001][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2933'.
[  483.487454][T18113] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2932'.
[  483.529877][T18109] team0: Port device dummy0 added
[  483.594091][T18111] netlink: 'syz.4.2933': attribute type 20 has an invalid length.
[  483.627682][  T193] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  483.646024][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2933'.
[  483.669037][  T193] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  483.669124][T18121] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2935'.
[  483.721928][  T193] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  483.758618][  T193] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  483.859083][T18123] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2936'.
[  483.881377][T18123] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2936'.
[  484.092829][ T5850] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  484.104520][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  484.120652][ T5850] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  484.131634][ T5850] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  484.140567][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  484.241464][T18128] ±ÿ speed is unknown, defaulting to 1000
[  484.450065][ T5847] Bluetooth: hci2: command tx timeout
[  484.520780][ T8374] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.729525][ T8374] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.830854][ T8374] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  484.929571][T18128] chnl_net:caif_netlink_parms(): no params data found
[  484.991122][ T8374] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  485.240002][T18128] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.247817][T18128] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.255621][T18128] bridge_slave_0: entered allmulticast mode
[  485.276285][T18128] bridge_slave_0: entered promiscuous mode
[  485.288445][T18128] bridge0: port 2(bridge_slave_1) entered blocking state
[  485.296135][T18128] bridge0: port 2(bridge_slave_1) entered disabled state
[  485.303547][T18128] bridge_slave_1: entered allmulticast mode
[  485.347565][T18128] bridge_slave_1: entered promiscuous mode
[  485.446765][T18180] geneve2: entered promiscuous mode
[  485.468495][T18180] geneve2: entered allmulticast mode
[  485.537956][T18128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  485.579133][T18128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  485.854168][   T30] audit: type=1107 audit(1777170046.922:10): pid=18200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  485.907518][T18128] team0: Port device team_slave_0 added
[  486.047246][T18128] team0: Port device team_slave_1 added
[  486.137332][T18128] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.151462][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.179120][T18128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  486.192404][T18128] batman_adv: batadv0: Adding interface: batadv_slave_1
[  486.199989][T18128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  486.227437][T18128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  486.241095][ T5847] Bluetooth: hci3: command tx timeout
[  486.282221][ T8374] team0: left allmulticast mode
[  486.288774][ T8374] team_slave_1: left allmulticast mode
[  486.300945][ T8374] team0: left promiscuous mode
[  486.305990][ T8374] team_slave_1: left promiscuous mode
[  486.314978][ T8374] bridge0: port 1(team0) entered disabled state
[  486.339175][ T8374] pimreg: left allmulticast mode
[  486.345256][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  486.353328][    C0] lec:lec_tx_timeout: lec0
[  486.358341][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  486.737068][ T8374] bond1 (unregistering): (slave gretap1): Releasing active interface
[  486.882037][ T8374] bond5 (unregistering): (slave gretap2): Releasing active interface
[  487.210465][ T8374] team0: Port device bridge3 removed
[  487.292366][ T8374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  487.302770][ T8374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  487.313488][ T8374] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  487.323695][ T8374] bond0 (unregistering): Released all slaves
[  487.339415][ T8374] bond1 (unregistering): Released all slaves
[  487.357353][ T8374] bond2 (unregistering): (slave wireguard0): Releasing backup interface
[  487.367362][ T8374] wireguard0: left promiscuous mode
[  487.374851][ T8374] bond2 (unregistering): Released all slaves
[  487.396421][ T8374] bond3 (unregistering): Released all slaves
[  487.417713][ T8374] bond4 (unregistering): Released all slaves
[  487.438055][ T8374] bond5 (unregistering): Released all slaves
[  487.458997][ T8374] bond6 (unregistering): Released all slaves
[  487.482405][ T8374] bond7 (unregistering): Released all slaves
[  487.620246][T18216] tipc: Resetting bearer <eth:vlan0>
[  487.664311][T18216] tipc: Resetting bearer <eth:syzkaller0>
[  487.741660][T18222] __nla_validate_parse: 13 callbacks suppressed
[  487.741683][T18222] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2962'.
[  487.758113][T18215] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  487.774548][ T8374] tipc: Disabling bearer <udp:syz2>
[  487.795018][ T8374] tipc: Left network mode
[  487.803982][T18215] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  487.830397][T18215] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  488.150684][T18128] hsr_slave_0: entered promiscuous mode
[  488.158613][T18128] hsr_slave_1: entered promiscuous mode
[  488.166209][T18128] debugfs: 'hsr0' already exists in 'hsr'
[  488.177507][T18128] Cannot create hsr debugfs directory
[  488.260877][T18245] bridge12: entered promiscuous mode
[  488.277704][T18249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2968'.
[  488.297676][ T5847] Bluetooth: hci3: command tx timeout
[  488.316913][T18245] bridge12: entered allmulticast mode
[  488.487427][T18257] netlink: 'syz.4.2967': attribute type 1 has an invalid length.
[  488.497262][T18257] netlink: 760 bytes leftover after parsing attributes in process `syz.4.2967'.
[  488.604002][T18254] syzkaller0: entered promiscuous mode
[  488.616650][T18254] syzkaller0: entered allmulticast mode
[  488.820400][T18267] netlink: 'syz.3.2971': attribute type 1 has an invalid length.
[  488.838316][T18267] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2971'.
[  489.301781][T18283] pimreg: entered allmulticast mode
[  489.704517][T18307] xt_l2tp: missing protocol rule (udp|l2tpip)
[  489.780319][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2981'.
[  489.914754][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1
[  489.968171][T18315] ip6gretap0: entered promiscuous mode
[  490.023806][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2983'.
[  490.383743][ T5847] Bluetooth: hci3: command tx timeout
[  490.649755][T18341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2988'.
[  491.365328][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  491.373465][    C0] lec:lec_tx_timeout: lec0
[  491.378467][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  491.431327][ T8374] hsr_slave_0: left promiscuous mode
[  491.473691][ T8374] hsr_slave_1: left promiscuous mode
[  491.488766][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_0
[  491.501597][ T8374] batman_adv: batadv0: Removing interface: batadv_slave_1
[  491.530483][ T8374] batman_adv: batadv0: Interface deactivated: –
[  491.538908][ T8374] batman_adv: batadv0: Removing interface: –
[  491.750452][ T8374] team0 (unregistering): Port device team_slave_1 removed
[  491.925408][ T8253] ±ÿ speed is unknown, defaulting to 1000
[  491.941120][   T13] smbdirect: ib_dev[syz2] removed
[  491.946931][ T8253] syz2: Port: 1 Link DOWN
[  492.106988][T18128] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  492.164652][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  492.182933][T18128] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  492.233414][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  492.276818][T18391] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.2996'.
[  492.329475][T18391] bridge_slave_1: default FDB implementation only supports local addresses
[  492.369565][T18128] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  492.415225][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  492.467626][ T5847] Bluetooth: hci3: command tx timeout
[  492.467668][T18128] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  492.566304][T18128] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  492.723393][T18418] x_tables: duplicate underflow at hook 4
[  493.308145][T18128] 8021q: adding VLAN 0 to HW filter on device bond0
[  493.472442][ T8374] IPVS: stop unused estimator thread 0...
[  493.500558][T18128] 8021q: adding VLAN 0 to HW filter on device team0
[  493.634005][T18446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3005'.
[  493.652303][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.659530][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  493.762447][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.769723][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  493.846244][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3008'.
[  494.181908][T18469] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  494.596145][T18469] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  494.697148][   T57] tipc: Resetting bearer <eth:syzkaller0>
[  494.813225][T18469] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.040809][T18469] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  495.074648][T18499] syzkaller0: entered promiscuous mode
[  495.090033][T18505] TCP: TCP_TX_DELAY enabled
[  495.107602][T18499] syzkaller0: entered allmulticast mode
[  495.161569][T18508] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3015'.
[  495.251005][T18128] 8021q: adding VLAN 0 to HW filter on device batadv0
[  495.502702][  T193] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  495.584759][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3017'.
[  495.607129][T18523] IPv6: addrconf: prefix option has invalid lifetime
[  495.666600][T18519] batadv0: left promiscuous mode
[  495.671764][T18519] batadv0: left allmulticast mode
[  495.752963][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'.
[  495.792777][T18519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.809537][T18519] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  496.054670][T18519] bond3: left promiscuous mode
[  496.063382][T18519] bond5: left promiscuous mode
[  496.069187][T18519] ip6gre1: left promiscuous mode
[  496.100122][ T8374] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  496.172518][T18540] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap3
[  496.190522][ T8374] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.201693][ T8374] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.212875][ T8374] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.228524][ T8374] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.307882][ T8374] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.326426][ T8374] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.338472][ T8374] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  496.347866][ T8374] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  496.385084][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  496.393209][    C0] lec:lec_tx_timeout: lec0
[  496.398494][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  496.445881][ T8374] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  496.476931][ T8374] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  496.524362][T18128] veth0_vlan: entered promiscuous mode
[  496.619583][T18128] veth1_vlan: entered promiscuous mode
[  496.637279][ T8253] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  496.653095][T18551] ipt_REJECT: TCP_RESET invalid for non-tcp
[  496.788587][T18128] veth0_macvtap: entered promiscuous mode
[  496.832731][T18128] veth1_macvtap: entered promiscuous mode
[  496.904050][T18128] batman_adv: batadv0: Interface activated: batadv_slave_0
[  496.965602][T18128] batman_adv: batadv0: Interface activated: batadv_slave_1
[  496.986860][ T8253] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  497.023423][T18570] netlink: 'syz.5.3026': attribute type 1 has an invalid length.
[  497.069072][ T8376] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.097427][ T8376] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.317090][T18584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3030'.
[  497.330136][T18570] bond7: entered promiscuous mode
[  497.337508][T18570] bond7: entered allmulticast mode
[  497.343117][T18570] 8021q: adding VLAN 0 to HW filter on device bond7
[  497.382935][ T8376] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.422311][ T8376] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.532646][T18596] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3032'.
[  497.723600][T18570] macvlan0: entered promiscuous mode
[  497.744420][T18570] macvlan0: entered allmulticast mode
[  497.772532][T18570] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  497.830340][ T8372] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  497.942447][T18603] vlan2: entered allmulticast mode
[  497.966132][T18603] vlan0: entered allmulticast mode
[  497.973118][T18603] veth0_vlan: entered allmulticast mode
[  498.390000][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.422808][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.547724][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.569937][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.751983][T18634] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  498.785677][T18638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2934'.
[  498.799922][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2934'.
[  498.825827][T18634] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3038'.
[  498.847119][   T36] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  498.869314][   T36] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  498.881194][T18634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3038'.
[  498.921959][T18633] delete_channel: no stack
[  498.965622][ T8238] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  499.314087][T18648] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3041'.
[  499.343805][T18648] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3041'.
[  499.378505][T18648] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3041'.
[  499.414835][T18648] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3041'.
[  499.567052][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  499.581637][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  499.592584][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  499.602637][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  499.614702][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  500.527196][   T57] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.539156][   T57] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.612623][T18652] chnl_net:caif_netlink_parms(): no params data found
[  500.693039][   T57] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.734214][   T57] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.929893][   T57] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.977796][   T57] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.127611][   T57] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  501.158613][   T57] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.282045][T18698] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3049'.
[  501.404978][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  501.413109][    C0] lec:lec_tx_timeout: lec0
[  501.419936][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  501.512053][T18691] pimreg: left allmulticast mode
[  501.647346][ T5850] Bluetooth: hci0: command tx timeout
[  501.707300][T18688] syzkaller1: entered promiscuous mode
[  501.714157][T18688] syzkaller1: entered allmulticast mode
[  501.725868][T18652] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.733391][T18652] bridge0: port 1(bridge_slave_0) entered disabled state
[  501.741336][T18652] bridge_slave_0: entered allmulticast mode
[  501.750818][T18652] bridge_slave_0: entered promiscuous mode
[  501.904213][T18652] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.934480][T18652] bridge0: port 2(bridge_slave_1) entered disabled state
[  501.944392][T18652] bridge_slave_1: entered allmulticast mode
[  501.953212][T18652] bridge_slave_1: entered promiscuous mode
[  502.087809][T18713] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.095609][T18713] bridge0: port 1(bridge_slave_0) entered disabled state
[  502.200787][T18713] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  502.218459][T18713] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  502.381368][T18714] vlan2: entered allmulticast mode
[  502.390634][T18714] bridge0: port 3(vlan2) entered blocking state
[  502.405208][T18714] bridge0: port 3(vlan2) entered disabled state
[  502.433414][T18714] vlan2: entered promiscuous mode
[  502.862013][T18652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  502.893809][ T8374] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.917023][ T8374] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.960071][T18652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  503.005220][    C0] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured!
[  503.046444][ T8374] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.065109][ T8374] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.218291][T18724] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.423571][T18652] team0: Port device team_slave_0 added
[  503.448846][T18652] team0: Port device team_slave_1 added
[  503.676677][T18724] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  503.735553][ T5850] Bluetooth: hci0: command tx timeout
[  503.786132][T18652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  503.811763][T18652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  503.869826][T18652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  503.966109][ T5850] Bluetooth: hci5: command 0x0405 tx timeout
[  504.077163][T18724] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.114637][T18652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  504.128655][T18652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  504.189993][T18652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  504.319378][T18761] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3058'.
[  504.345920][T18724] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  504.359589][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'.
[  504.504316][   T57] vlan3: left allmulticast mode
[  504.510480][   T57] dummy0: left allmulticast mode
[  504.517539][   T57] vlan3: left promiscuous mode
[  504.522464][   T57] dummy0: left promiscuous mode
[  504.528449][   T57] bridge0: port 1(vlan3) entered disabled state
[  504.582365][   T57] batman_adv: batadv0: Interface deactivated: gretap1
[  504.787565][   T57] bond8 (unregistering): (slave ip6gretap2): Releasing active interface
[  504.978120][   T57] bond4 (unregistering): (slave erspan1): Releasing active interface
[  504.990067][   T57] erspan1 (unregistering): left promiscuous mode
[  505.064614][   T57] batman_adv: batadv0: Removing interface: gretap1
[  505.220580][   T57] bond5 (unregistering): (slave geneve2): Releasing active interface
[  505.231409][   T57] geneve2 (unregistering): left allmulticast mode
[  505.363858][   T57] team0: Port device bridge1 removed
[  505.502101][   T57] bond10 (unregistering): (slave bridge3): Releasing backup interface
[  505.576673][   T57] bond11 (unregistering): (slave bridge4): Releasing backup interface
[  505.585243][   T57] bridge4 (unregistering): left promiscuous mode
[  505.805208][ T5847] Bluetooth: hci0: command tx timeout
[  506.011653][   T57] bond0 (unregistering): Released all slaves
[  506.023469][   T57] bond1 (unregistering): Released all slaves
[  506.041323][   T57] bond2 (unregistering): Released all slaves
[  506.059178][   T57] bond3 (unregistering): Released all slaves
[  506.079862][   T57] bond4 (unregistering): Released all slaves
[  506.107673][   T57] bond5 (unregistering): Released all slaves
[  506.123782][   T57] bond6 (unregistering): Released all slaves
[  506.147623][   T57] bond7 (unregistering): Released all slaves
[  506.163840][   T57] bond8 (unregistering): Released all slaves
[  506.180658][   T57] bond9 (unregistering): Released all slaves
[  506.203382][   T57] bond10 (unregistering): Released all slaves
[  506.220678][   T57] bond11 (unregistering): Released all slaves
[  506.238069][   T57] bond12 (unregistering): Released all slaves
[  506.256101][   T57] bond13 (unregistering): Released all slaves
[  506.277973][   T57] bond14 (unregistering): Released all slaves
[  506.362654][T18652] hsr_slave_0: entered promiscuous mode
[  506.377628][T18652] hsr_slave_1: entered promiscuous mode
[  506.434988][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  506.443102][    C0] lec:lec_tx_timeout: lec0
[  506.448248][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  506.600652][   T57] : left promiscuous mode
[  506.631963][T18809] netlink: 'syz.0.3061': attribute type 1 has an invalid length.
[  506.707153][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3061'.
[  506.842799][   T57] 5nè: left promiscuous mode
[  506.934521][T18818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3062'.
[  507.069969][   T57] tipc: Disabling bearer <eth:syzkaller0>
[  507.077203][   T57] tipc: Disabling bearer <eth:vlan0>
[  507.091979][ T8376] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  507.105866][   T57] tipc: Left network mode
[  507.158022][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  507.299254][ T8376] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  507.458384][   T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  507.885635][ T5847] Bluetooth: hci0: command tx timeout
[  507.912576][T18856] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter'
[  508.004448][T18858] rds_bind: 23 callbacks suppressed
[  508.004469][T18858] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma?
[  508.023318][T18853] IPVS: set_ctl: invalid protocol: 33 172.20.20.44:20002
[  508.395323][T18859] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  508.455534][T18859] syzkaller0: entered promiscuous mode
[  508.471390][T18859] syzkaller0: entered allmulticast mode
[  508.781434][T18880] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3073'.
[  508.854757][T18879] nbd: must specify at least one socket
[  508.979431][T18889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3076'.
[  509.048042][T18885] syzkaller0: entered promiscuous mode
[  509.053829][T18885] syzkaller0: entered allmulticast mode
[  509.532481][T18905] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3083'.
[  509.548536][T18905] xt_TCPMSS: Only works on TCP SYN packets
[  509.612428][T18906] 8021q: adding VLAN 0 to HW filter on device team0
[  509.628036][T18906] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  509.923941][T18652] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  509.951670][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  509.964870][T18926] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  509.977284][T18652] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  509.990306][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  510.053671][T18652] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  510.096720][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  510.207748][T18652] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  510.244652][T18652] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  510.589400][T18917] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  510.701759][T18960] netlink: 'syz.5.3091': attribute type 31 has an invalid length.
[  510.751300][T18953] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  510.939548][T18967] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  511.054308][T18962] syzkaller0: entered promiscuous mode
[  511.061661][T18962] syzkaller0: entered allmulticast mode
[  511.286992][   T57] hsr_slave_0: left promiscuous mode
[  511.300035][   T57] hsr_slave_1: left promiscuous mode
[  511.330407][   T57] batadv0: left promiscuous mode
[  511.345544][   T57] veth1_macvtap: left promiscuous mode
[  511.363030][   T57] veth0_macvtap: left promiscuous mode
[  511.377397][   T57] veth1_vlan: left promiscuous mode
[  511.392987][   T57] veth0_vlan: left promiscuous mode
[  511.455062][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  511.463196][    C0] lec:lec_tx_timeout: lec0
[  511.468396][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  511.601130][T18980] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3096'.
[  511.805508][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout
[  512.022994][T18985] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3097'.
[  512.152604][   T57] batadv2 (unregistering): left promiscuous mode
[  512.160439][   T57] team0 (unregistering): Port device batadv2 removed
[  512.182802][   T57] batadv1 (unregistering): left promiscuous mode
[  512.191253][   T57] team0 (unregistering): Port device batadv1 removed
[  513.127198][T19007] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3103'.
[  513.198795][T19008] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3103'.
[  513.888105][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout
[  515.280428][T19004] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  515.313960][T19007] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3103'.
[  515.383910][T19007] bridge0: port 2(bridge_slave_1) entered disabled state
[  515.391534][T19007] bridge0: port 1(bridge_slave_0) entered disabled state
[  515.556477][T18652] 8021q: adding VLAN 0 to HW filter on device bond0
[  515.741557][T18652] 8021q: adding VLAN 0 to HW filter on device team0
[  515.806212][   T57] IPVS: stop unused estimator thread 0...
[  515.836346][ T8376] bridge0: port 1(bridge_slave_0) entered blocking state
[  515.843591][ T8376] bridge0: port 1(bridge_slave_0) entered forwarding state
[  515.926810][ T8376] bridge0: port 2(bridge_slave_1) entered blocking state
[  515.934044][ T8376] bridge0: port 2(bridge_slave_1) entered forwarding state
[  516.205459][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3111'.
[  516.387592][T18652] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  516.398419][T18652] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  516.475054][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  516.483159][    C0] lec:lec_tx_timeout: lec0
[  516.488601][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  516.556403][T19054] netlink: 'syz.0.3115': attribute type 30 has an invalid length.
[  516.610760][  T193] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  516.627318][T19055] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.647707][T19055] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.693294][T19053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3116'.
[  516.783825][  T193] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  516.810027][  T193] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  516.822282][T19064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.846484][ T5930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.865213][T19064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.874645][  T193] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  516.886091][T19064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.897903][T19064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.906757][T19064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.974729][T19064] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.621671][T18652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  517.641001][T19099] netlink: 'syz.2.3126': attribute type 21 has an invalid length.
[  517.650882][T19099] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3126'.
[  517.705805][T19100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3126'.
[  517.748129][T19099] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3126'.
[  517.823559][T18652] veth0_vlan: entered promiscuous mode
[  517.867235][T18652] veth1_vlan: entered promiscuous mode
[  517.922787][T18652] veth0_macvtap: entered promiscuous mode
[  517.938168][ T8257] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  517.962568][T18652] veth1_macvtap: entered promiscuous mode
[  518.029785][T18652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  518.065557][T18652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  518.105928][   T57] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  518.122489][   T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  518.147095][   T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  518.165295][   T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  518.364229][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.382160][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.454593][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  518.481191][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  518.570263][T19107] netlink: 'syz.5.3128': attribute type 29 has an invalid length.
[  518.583553][T19107] netlink: 'syz.5.3128': attribute type 29 has an invalid length.
[  518.677378][T19112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3040'.
[  518.734110][T19112] ipvlan2: entered allmulticast mode
[  518.741343][T19112] syz_tun: entered allmulticast mode
[  518.820892][T19104] IPVS: persistence engine module ip_vs_pe_… not found
[  518.845631][ T8230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.185625][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  519.196943][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  519.205233][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  519.217997][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  519.225843][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  519.546627][T19131] chnl_net:caif_netlink_parms(): no params data found
[  519.700689][T19131] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.708448][T19131] bridge0: port 1(bridge_slave_0) entered disabled state
[  519.716436][T19131] bridge_slave_0: entered allmulticast mode
[  519.724544][T19131] bridge_slave_0: entered promiscuous mode
[  519.756193][T19131] bridge0: port 2(bridge_slave_1) entered blocking state
[  519.763454][T19131] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.773219][T19131] bridge_slave_1: entered allmulticast mode
[  519.782682][T19131] bridge_slave_1: entered promiscuous mode
[  519.831637][T19131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  519.847535][T19131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  519.883585][T19131] team0: Port device team_slave_0 added
[  519.893507][T19131] team0: Port device team_slave_1 added
[  519.926466][T19131] batman_adv: batadv0: Adding interface: batadv_slave_0
[  519.933529][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  519.959963][T19131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  519.996040][T19131] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.003137][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  520.029691][T19131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.101808][T19131] hsr_slave_0: entered promiscuous mode
[  520.108633][T19131] hsr_slave_1: entered promiscuous mode
[  520.114892][T19131] debugfs: 'hsr0' already exists in 'hsr'
[  520.121068][T19131] Cannot create hsr debugfs directory
[  520.246059][  T193] dvmrp0: left allmulticast mode
[  520.251155][  T193] pimreg: left allmulticast mode
[  520.444559][  T193] bond11 (unregistering): (slave gre2): Releasing backup interface
[  520.599555][  T193] bond2 (unregistering): (slave bridge2): Releasing active interface
[  520.710296][T19141] netlink: 'syz.2.3134': attribute type 4 has an invalid length.
[  520.718290][T19141] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3134'.
[  521.080428][  T193] bond1 (unregistering): Released all slaves
[  521.089384][ T3114] net_ratelimit: 2 callbacks suppressed
[  521.089404][ T3114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.109628][  T193] bond2 (unregistering): Released all slaves
[  521.126643][  T193] bond3 (unregistering): Released all slaves
[  521.149038][  T193] bond4 (unregistering): (slave lo): Releasing backup interface
[  521.157993][  T193] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  521.169952][  T193] bond4 (unregistering): Released all slaves
[  521.186819][  T193] bond5 (unregistering): Released all slaves
[  521.204503][  T193] bond6 (unregistering): Released all slaves
[  521.221363][  T193] bond7 (unregistering): Released all slaves
[  521.250082][  T193] bond8 (unregistering): Released all slaves
[  521.266436][  T193] bond9 (unregistering): Released all slaves
[  521.282552][  T193] bond10 (unregistering): Released all slaves
[  521.300227][  T193] bond11 (unregistering): Released all slaves
[  521.325153][ T5847] Bluetooth: hci4: command tx timeout
[  521.337358][  T193] bond12 (unregistering): Released all slaves
[  521.354301][  T193] bond13 (unregistering): Released all slaves
[  521.370856][  T193] bond14 (unregistering): Released all slaves
[  521.388882][  T193] bond15 (unregistering): Released all slaves
[  521.427557][T19141] .`: renamed from bond0 (while UP)
[  521.495346][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  521.503542][    C0] lec:lec_tx_timeout: lec0
[  521.510093][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  521.546506][T19115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  521.870708][T19152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3138'.
[  521.886627][ T8240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  521.939881][T19155] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3139'.
[  521.992170][T19157] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3139'.
[  522.004059][  T193] : left promiscuous mode
[  522.125983][ T3114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  522.261405][T19166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3140'.
[  523.412151][ T5847] Bluetooth: hci4: command tx timeout
[  524.727281][  T193] tipc: Disabling bearer <udp:syz2>
[  524.733593][  T193] tipc: Left network mode
[  525.003259][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1
[  525.117923][T19197] netlink: 'syz.0.3145': attribute type 21 has an invalid length.
[  525.149229][T19197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3145'.
[  525.240744][T19201] netlink: 'syz.5.3146': attribute type 10 has an invalid length.
[  525.487196][ T5847] Bluetooth: hci4: command tx timeout
[  525.586314][T19201] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  525.602467][T19201] bond0: (slave netdevsim0): Enslaving as an active interface with a down link
[  526.120095][T19233] syzkaller1: entered promiscuous mode
[  526.126360][T19233] syzkaller1: entered allmulticast mode
[  526.153255][T19235] xt_hashlimit: size too large, truncated to 1048576
[  527.026285][T19269] x_tables: duplicate underflow at hook 1
[  527.072759][T19272] x_tables: duplicate underflow at hook 1
[  527.084553][T19271] netlink: 'syz.3.3156': attribute type 11 has an invalid length.
[  527.109260][T19271] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.3156'.
[  527.122275][T19271] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3156'.
[  527.387683][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3161'.
[  527.401398][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3161'.
[  527.411310][T19288] netlink: 'syz.5.3161': attribute type 14 has an invalid length.
[  527.484981][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5970 ms
[  527.493166][    C0] lec:lec_tx_timeout: lec0
[  527.500990][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  527.565224][ T5847] Bluetooth: hci4: command tx timeout
[  527.821605][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'.
[  527.853468][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3160'.
[  527.864141][T19269] Bluetooth: hci2: Opcode 0x0c20 failed: -4
[  527.892412][T19286] netlink: 'syz.2.3160': attribute type 6 has an invalid length.
[  527.945983][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3160'.
[  527.947109][T19131] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  527.996342][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3160'.
[  528.030359][T19286] netlink: 'syz.2.3160': attribute type 6 has an invalid length.
[  528.032052][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  528.079825][T19300] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3164'.
[  528.084539][T19131] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  528.098142][T19299] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  528.116141][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  528.134009][ T8391] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  528.143497][ T8391] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  528.179145][T19300] gretap0: entered promiscuous mode
[  528.196201][T19131] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  528.223169][T19300] netlink: 5 bytes leftover after parsing attributes in process `syz.5.3164'.
[  528.256727][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  528.297735][T19131] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  528.353404][T19131] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  528.367938][ T8391] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  528.376339][ T8391] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  528.388132][T19300] 0ªî{X¹¦: renamed from gretap0
[  528.395834][T19300] 0ªî{X¹¦: left promiscuous mode
[  528.401110][T19300] 0ªî{X¹¦: entered allmulticast mode
[  528.410383][T19300] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  528.463082][  T193] IPVS: stop unused estimator thread 0...
[  528.691127][T19131] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.743152][T19131] 8021q: adding VLAN 0 to HW filter on device team0
[  528.787925][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.795227][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.829363][ T8391] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.836645][ T8391] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.952847][   T30] audit: type=1800 audit(1777170090.022:11): pid=19337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3172" name="memory.events" dev="tmpfs" ino=310 res=0 errno=0
[  528.983262][T19131] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  528.998007][T19131] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  529.010674][   T30] audit: type=1804 audit(1777170090.052:12): pid=19337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3172" name="/newroot/57/memory.events" dev="tmpfs" ino=310 res=1 errno=0
[  529.165681][ T5847] Bluetooth: hci2: command 0x0c20 tx timeout
[  529.652690][T19367] netlink: 'syz.0.3181': attribute type 1 has an invalid length.
[  529.670676][T19367] netlink: 'syz.0.3181': attribute type 2 has an invalid length.
[  529.722291][T19367] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  529.756318][T19367] bond1: (slave lo): Enslaving as an active interface with an up link
[  529.770893][T19367] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  529.827551][T19374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  529.844166][T19131] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.519940][T19131] veth0_vlan: entered promiscuous mode
[  530.554456][T19131] veth1_vlan: entered promiscuous mode
[  530.941598][T19427] openvswitch: netlink: Flow key attr not present in new flow.
[  531.102133][T19413] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  531.141311][T19413] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  531.385430][T19419] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  531.415344][T19416] netlink: 'syz.5.3191': attribute type 1 has an invalid length.
[  531.494178][ T8376] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  531.517438][ T8376] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.534480][ T8376] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  531.549519][ T8376] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.704778][ T8376] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  531.733297][ T8376] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.764149][ T8376] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  531.781555][ T8376] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  531.839242][T19131] veth0_macvtap: entered promiscuous mode
[  531.886084][T19131] veth1_macvtap: entered promiscuous mode
[  531.946986][T19131] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.991053][T19131] batman_adv: batadv0: Interface activated: batadv_slave_1
[  532.032128][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  532.059915][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.095223][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.125555][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.363255][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.387919][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  532.437877][T19458] __nla_validate_parse: 12 callbacks suppressed
[  532.437898][T19458] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3198'.
[  532.556633][T19458] 8021q: adding VLAN 0 to HW filter on device bond8
[  532.724177][T19460] bond8: (slave batadv0): Opening slave failed
[  532.783501][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  532.808176][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.090387][T19471] netlink: 'syz.3.3199': attribute type 4 has an invalid length.
[  533.142324][T19467] netlink: 'syz.3.3199': attribute type 4 has an invalid length.
[  533.324981][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5820 ms
[  533.333102][    C0] lec:lec_tx_timeout: lec0
[  533.338156][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  533.363655][T19482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3203'.
[  533.386470][T19482] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3203'.
[  533.715882][T19490] Bluetooth: MGMT ver 1.23
[  534.063587][T19509] syzkaller1: entered promiscuous mode
[  534.082127][T19509] syzkaller1: entered allmulticast mode
[  534.256991][T19520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'.
[  534.514082][T19533] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3218'.
[  534.999596][T19557] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3222'.
[  535.358386][T19577] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  535.551817][T19582] netlink: zone id is out of range
[  535.572266][T19582] netlink: zone id is out of range
[  535.608301][T19582] netlink: zone id is out of range
[  535.624587][T19582] netlink: zone id is out of range
[  535.713932][T19582] netlink: set zone limit has 4 unknown bytes
[  535.863582][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3239'.
[  535.873609][T19601] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3239'.
[  536.323966][T19623] batadv_slave_0: entered promiscuous mode
[  536.340217][T19623] batadv_slave_0: entered allmulticast mode
[  536.419082][T19623] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3243'.
[  536.477669][T19635] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3248'.
[  536.985170][T19652] netlink: 'syz.5.3250': attribute type 1 has an invalid length.
[  537.019469][T19654] delete_channel: no stack
[  537.047131][T19652] bond9: entered promiscuous mode
[  537.056745][T19652] 8021q: adding VLAN 0 to HW filter on device bond9
[  537.123190][T19652] bond9: (slave bridge2): making interface the new active one
[  537.131703][T19652] bridge2: entered promiscuous mode
[  537.149395][T19652] bridge2: left promiscuous mode
[  537.669747][T19678] netem: change failed
[  537.782776][T19692] xt_bpf: check failed: parse error
[  537.892473][T19690] netlink: 'syz.4.3261': attribute type 39 has an invalid length.
[  537.936988][T19699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.247663][T19708] syzkaller0: entered promiscuous mode
[  538.263947][T19708] syzkaller0: entered allmulticast mode
[  538.345596][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  538.353793][    C0] lec:lec_tx_timeout: lec0
[  538.359195][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  538.502784][T19686] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  538.532626][T19686] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  538.644407][T19686] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  538.655844][T19686] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  538.697314][   T36] bridge_slave_1: left allmulticast mode
[  538.704009][   T36] bridge_slave_1: left promiscuous mode
[  538.714054][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.738532][   T36] bridge_slave_0: left allmulticast mode
[  538.744363][   T36] bridge_slave_0: left promiscuous mode
[  538.750863][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  538.774816][   T36] pimreg9: left allmulticast mode
[  539.000291][   T36] bond3 (unregistering): (slave gretap1): Releasing active interface
[  539.030365][   T36] bond11 (unregistering): (slave gretap2): Releasing active interface
[  539.210395][   T36] bond10 (unregistering): (slave bridge4): Releasing backup interface
[  539.218788][   T36] bridge4 (unregistering): left promiscuous mode
[  539.225529][   T36] bridge4 (unregistering): left allmulticast mode
[  539.313135][   T36] team0: Port device bond0 removed
[  539.320867][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  539.334234][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  539.344520][   T36] bond0 (unregistering): Released all slaves
[  539.358240][   T36] bond1 (unregistering): Released all slaves
[  539.374742][   T36] bond2 (unregistering): Released all slaves
[  539.390801][   T36] bond3 (unregistering): Released all slaves
[  539.409762][   T36] bond4 (unregistering): (slave veth3): Releasing backup interface
[  539.423963][   T36] bond4 (unregistering): Released all slaves
[  539.444276][   T36] bond5 (unregistering): Released all slaves
[  539.463048][   T36] bond6 (unregistering): Released all slaves
[  539.484596][   T36] bond7 (unregistering): (slave bond8): Releasing backup interface
[  539.493835][   T36] bond7 (unregistering): Released all slaves
[  539.513805][   T36] bond8 (unregistering): Released all slaves
[  539.539884][   T36] bond9 (unregistering): Released all slaves
[  539.564737][   T36] bond10 (unregistering): Released all slaves
[  539.588892][   T36] bond11 (unregistering): Released all slaves
[  539.922736][T19686] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  539.936683][T19686] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  539.945035][   T36] tipc: Left network mode
[  540.035319][T19686] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  540.049936][T19686] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  540.172335][T19739] x_tables: unsorted underflow at hook 2
[  540.358136][T19742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.404028][T19743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.457189][T19749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3277'.
[  540.471206][T19742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.498450][T19742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.513069][T19743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.558823][T19746] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  540.575630][T19746] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  540.591082][T19742] nbd: must specify a device to reconfigure
[  540.606838][T19746] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  540.637410][T19743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  540.760507][T19759] netlink: 'syz.4.3279': attribute type 1 has an invalid length.
[  540.991748][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3282'.
[  541.032069][   T36] hsr_slave_0: left promiscuous mode
[  541.051436][   T36] hsr_slave_1: left promiscuous mode
[  541.057765][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  541.070542][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.119719][T19785] sctp: [Deprecated]: syz.3.3284 (pid 19785) Use of int in max_burst socket option deprecated.
[  541.119719][T19785] Use struct sctp_assoc_value instead
[  541.168017][T19785] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.3284'.
[  541.775462][   T36] team0 (unregistering): Port device team_slave_1 removed
[  541.815988][   T36] team0 (unregistering): Port device team_slave_0 removed
[  541.972014][   T36] team0 (unregistering): Port device dummy0 removed
[  542.043234][ T5505] 8021q: adding VLAN 0 to HW filter on device eth1
[  542.071640][T19800] netlink: ct family unspecified
[  542.093624][T19800] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.220554][T19809] sit0: entered promiscuous mode
[  542.226541][T19809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3291'.
[  542.512645][T19836] netlink: 'syz.4.3295': attribute type 44 has an invalid length.
[  542.538539][T19836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3295'.
[  542.821849][T19829] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3293'.
[  542.868925][T19846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3296'.
[  542.901746][T19840] syzkaller0: entered promiscuous mode
[  542.913427][T19840] syzkaller0: entered allmulticast mode
[  543.374968][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  543.383106][    C0] lec:lec_tx_timeout: lec0
[  543.393744][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  545.592078][T19854] netlink: 'syz.4.3298': attribute type 1 has an invalid length.
[  545.738405][   T36] IPVS: stop unused estimator thread 0...
[  545.872174][T19859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'.
[  545.910605][T19859] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'.
[  545.922144][T19860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'.
[  545.945020][T19860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'.
[  545.957808][T19860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'.
[  545.989754][T19860] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3300'.
[  546.379383][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'.
[  546.431338][T19890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3304'.
[  546.654762][T19901] syzkaller0: entered promiscuous mode
[  546.676978][T19901] syzkaller0: entered allmulticast mode
[  547.357073][T19930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3313'.
[  548.405217][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  548.413319][    C0] lec:lec_tx_timeout: lec0
[  548.418036][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  549.958264][T19932] 0ªî{X¹¦: left allmulticast mode
[  549.973962][T19932] sit0: left promiscuous mode
[  550.006273][T19932] bond7: left promiscuous mode
[  550.012667][T19932] bond7: left allmulticast mode
[  550.033922][T19932] bond9: left promiscuous mode
[  550.050477][ T5505] 8021q: adding VLAN 0 to HW filter on device eth2
[  550.267847][T19953] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3321'.
[  550.496081][T19967] netlink: 'syz.2.3321': attribute type 6 has an invalid length.
[  550.536236][T19967] netlink: 'syz.2.3321': attribute type 23 has an invalid length.
[  550.577227][T19967] IPv6: NLM_F_CREATE should be specified when creating new route
[  550.620200][T19977] netlink: 'syz.4.3325': attribute type 8 has an invalid length.
[  550.642061][T19977] netlink: 'syz.4.3325': attribute type 4 has an invalid length.
[  550.731211][T19980] hsr0: entered promiscuous mode
[  550.776507][T19969] hsr_slave_0: left promiscuous mode
[  550.812585][T19969] hsr_slave_1: left promiscuous mode
[  550.869673][T19969] hsr0 (unregistering): left promiscuous mode
[  551.043755][T19988] __nla_validate_parse: 1 callbacks suppressed
[  551.043776][T19988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3327'.
[  551.184138][T20005] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3330'.
[  551.198703][T20000] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3329'.
[  551.428272][T20003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3327'.
[  551.453161][T20015] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3334'.
[  551.492753][T20017] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3335'.
[  551.524411][T20017] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3335'.
[  551.542570][ T5505] 8021q: adding VLAN 0 to HW filter on device eth4
[  551.749334][T20029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3337'.
[  551.763994][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3337'.
[  551.850404][T20033] netlink: 676 bytes leftover after parsing attributes in process `syz.3.3339'.
[  552.199984][T20051] vlan0: entered promiscuous mode
[  552.228938][T20051] bridge0: entered promiscuous mode
[  552.368576][T20065] netlink: 'syz.3.3345': attribute type 4 has an invalid length.
[  552.528822][ T5505] 8021q: adding VLAN 0 to HW filter on device eth3
[  552.888583][ T8230] IPVS: starting estimator thread 0...
[  552.995648][T20094] IPVS: using max 25 ests per chain, 60000 per kthread
[  553.241953][T20109] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  553.271661][T20109] syzkaller0: entered promiscuous mode
[  553.285873][T20109] syzkaller0: entered allmulticast mode
[  553.344222][T20115] netlink: 'syz.0.3359': attribute type 10 has an invalid length.
[  553.425309][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  553.433473][    C0] lec:lec_tx_timeout: lec0
[  553.438354][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  553.523303][T20120] ipt_REJECT: ECHOREPLY no longer supported.
[  553.962872][T20128] netlink: 'syz.4.3363': attribute type 21 has an invalid length.
[  553.972648][T20128] IPv6: NLM_F_CREATE should be specified when creating new route
[  553.990483][T20128] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  553.997879][T20128] IPv6: NLM_F_CREATE should be set when creating new route
[  554.005231][T20128] IPv6: NLM_F_CREATE should be set when creating new route
[  554.012550][T20128] IPv6: NLM_F_CREATE should be set when creating new route
[  554.168341][T20136] netlink: 'syz.0.3364': attribute type 4 has an invalid length.
[  554.251393][T20141] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  554.338369][T20147] netlink: 'syz.0.3364': attribute type 4 has an invalid length.
[  554.782972][T20170] bridge_slave_0: left allmulticast mode
[  554.789173][T20170] bridge_slave_0: left promiscuous mode
[  554.795198][T20170] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.819039][T20170] bridge_slave_1: left allmulticast mode
[  554.848125][T20170] bridge_slave_1: left promiscuous mode
[  554.857144][T20170] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.903521][T20175] netlink: 'syz.5.3374': attribute type 30 has an invalid length.
[  554.913308][T20170] bond0: (slave bond_slave_0): Releasing backup interface
[  554.931987][T20170] bond0: (slave bond_slave_1): Releasing backup interface
[  554.953674][T20170] team0: Port device team_slave_0 removed
[  554.989931][T20170] team0: Port device team_slave_1 removed
[  555.004258][T20170] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  555.020916][T20170] batman_adv: batadv0: Removing interface: batadv_slave_0
[  555.032812][T20170] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  555.041214][T20170] batman_adv: batadv0: Removing interface: batadv_slave_1
[  555.050517][T20170] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  555.297015][T20190] ip6erspan1: entered allmulticast mode
[  555.370779][T20194] sctp: [Deprecated]: syz.0.3378 (pid 20194) Use of int in maxseg socket option.
[  555.370779][T20194] Use struct sctp_assoc_value instead
[  555.877908][T20212] vlan0: entered promiscuous mode
[  555.883128][T20212] geneve1: entered promiscuous mode
[  555.889236][T20212] vlan0: entered allmulticast mode
[  555.894447][T20212] geneve1: entered allmulticast mode
[  556.367717][T20237] __nla_validate_parse: 22 callbacks suppressed
[  556.367739][T20237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3394'.
[  556.602515][T20252] netlink: 'syz.0.3397': attribute type 1 has an invalid length.
[  556.619815][T20252] netlink: 280 bytes leftover after parsing attributes in process `syz.0.3397'.
[  557.115942][T20272] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3404'.
[  557.429688][T20288] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3407'.
[  557.483706][T20290] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3408'.
[  558.067318][T20317] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3406'.
[  558.087557][T20317] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3406'.
[  558.114239][T20317] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3406'.
[  558.148557][T20319] netlink: 'syz.2.3414': attribute type 10 has an invalid length.
[  558.445550][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  558.453647][    C0] lec:lec_tx_timeout: lec0
[  558.459251][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  558.718622][T20353] netlink: 340 bytes leftover after parsing attributes in process `syz.3.3422'.
[  558.751277][T20353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3422'.
[  558.806270][T20355] bond0 (unregistering): Released all slaves
[  559.250059][   T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.269898][   T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.281586][   T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  559.290929][   T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  560.450561][T20290] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  561.234217][T20442] ip6gretap0: left promiscuous mode
[  561.277332][T20442] 8021q: adding VLAN 0 to HW filter on device bond0
[  561.290299][T20442] 8021q: adding VLAN 0 to HW filter on device team0
[  561.300823][T20442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  561.495633][T20457] __nla_validate_parse: 21 callbacks suppressed
[  561.495653][T20457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'.
[  561.525420][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3451'.
[  561.806851][T20471] netlink: 64134 bytes leftover after parsing attributes in process `syz.0.3455'.
[  562.148152][T20476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3457'.
[  562.165580][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3457'.
[  562.255004][T20493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3459'.
[  562.440422][T20506] macsec0: entered allmulticast mode
[  562.461462][T20505] veth1_macvtap: entered allmulticast mode
[  562.467674][T20505] macsec0: left allmulticast mode
[  562.472943][T20505] veth1_macvtap: left allmulticast mode
[  562.603363][T20513] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3466'.
[  562.665176][T20518] netlink: 'syz.4.3467': attribute type 29 has an invalid length.
[  562.837269][T20513] 8021q: adding VLAN 0 to HW filter on device bond10
[  562.971958][T20533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3469'.
[  563.159493][T20539] netlink: 'syz.3.3470': attribute type 11 has an invalid length.
[  563.224107][T20545] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3470'.
[  563.379179][T20546] nbd2: detected capacity change from 0 to 63
[  563.379732][T20551] sock: sock_timestamping_bind_phc: sock not bind to device
[  563.475234][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  563.483369][    C0] lec:lec_tx_timeout: lec0
[  563.489163][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  563.517220][T20553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3471'.
[  564.102654][ T5850] block nbd2: Receive control failed (result -104)
[  564.227306][ T8239] IPVS: starting estimator thread 0...
[  564.248766][T20583] sctp: [Deprecated]: syz.0.3479 (pid 20583) Use of struct sctp_assoc_value in delayed_ack socket option.
[  564.248766][T20583] Use struct sctp_sack_info instead
[  564.336855][T20584] IPVS: using max 31 ests per chain, 74400 per kthread
[  564.358013][T20566] netlink: zone id is out of range
[  564.365248][T20566] netlink: zone id is out of range
[  564.370972][T20566] netlink: zone id is out of range
[  564.376612][T20566] netlink: zone id is out of range
[  564.382048][T20566] netlink: zone id is out of range
[  564.388214][T20566] netlink: zone id is out of range
[  564.393751][T20566] netlink: zone id is out of range
[  564.407838][T20591] netlink: 'syz.2.3481': attribute type 1 has an invalid length.
[  564.423696][T20566] netlink: zone id is out of range
[  564.453043][T20566] netlink: zone id is out of range
[  564.472240][T20591] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  566.501583][T20648] sctp: [Deprecated]: syz.4.3491 (pid 20648) Use of int in max_burst socket option.
[  566.501583][T20648] Use struct sctp_assoc_value instead
[  566.852578][T20695] syzkaller0: entered promiscuous mode
[  566.870514][T20695] syzkaller0: entered allmulticast mode
[  566.901147][T20693] tipc: Started in network mode
[  566.924002][T20693] tipc: Node identity b264c685bebb, cluster identity 4711
[  566.958275][T20693] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  567.118069][T20697] tipc: Resetting bearer <eth:syzkaller0>
[  567.203719][T20697] tipc: Disabling bearer <eth:syzkaller0>
[  567.228448][T20705] xt_CT: You must specify a L4 protocol and not use inversions on it
[  567.260143][T20706] __nla_validate_parse: 19 callbacks suppressed
[  567.260159][T20706] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3501'.
[  567.527508][T20718] netlink: 'syz.5.3504': attribute type 1 has an invalid length.
[  567.582182][T20722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3504'.
[  567.665126][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3506'.
[  567.719401][T20718] bond11: entered promiscuous mode
[  567.744734][T20718] 8021q: adding VLAN 0 to HW filter on device bond11
[  567.913555][T20741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3508'.
[  568.012943][ T5850] block nbd1: Receive control failed (result -107)
[  568.048666][T20741] nbd1: detected capacity change from 0 to 137438953472
[  568.082720][T19735] block nbd1: Dead connection, failed to find a fallback
[  568.127841][T19735] block nbd1: shutting down sockets
[  568.160016][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.237431][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  568.267298][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.317508][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  568.346110][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.379152][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  568.416261][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.457280][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  568.488799][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.523628][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  568.560194][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.593412][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  568.627984][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.669505][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  568.700190][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.730302][T20770] x_tables: ip_tables: icmp match: only valid for protocol 1
[  568.754216][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  568.790143][T19735] ldm_validate_partition_table(): Disk read failed.
[  568.823480][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.874878][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  568.914149][T19735] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  568.964034][T19735] Buffer I/O error on dev nbd1, logical block 0, async page read
[  569.002441][T20787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3517'.
[  569.026824][T19735] Dev nbd1: unable to read RDB block 0
[  569.042107][T20779] bond0: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  569.058488][T19735]  nbd1: unable to read partition table
[  569.100435][T20779] bond0 (unregistering): Released all slaves
[  569.120194][T19735] ldm_validate_partition_table(): Disk read failed.
[  569.154090][T19735] Dev nbd1: unable to read RDB block 0
[  569.188881][T19735]  nbd1: unable to read partition table
[  569.324937][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms
[  569.333023][    C0] lec:lec_tx_timeout: lec0
[  569.338553][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  569.369048][T20806] Cannot find add_set index 1 as target
[  569.426373][T20787] ipvlan2: entered allmulticast mode
[  569.483534][T20806] veth0_to_team: entered promiscuous mode
[  569.500772][T20806] veth0_to_team: entered allmulticast mode
[  569.916770][T20837] xt_CT: You must specify a L4 protocol and not use inversions on it
[  569.947137][T20819] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3521'.
[  569.972061][T20822] xt_CT: You must specify a L4 protocol and not use inversions on it
[  570.312624][T20849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3527'.
[  570.513269][T20867] netlink: 'syz.2.3532': attribute type 2 has an invalid length.
[  570.556640][T20867] netlink: 'syz.2.3532': attribute type 1 has an invalid length.
[  570.592677][T20867] netlink: 'syz.2.3532': attribute type 2 has an invalid length.
[  570.626106][T20867] netlink: 'syz.2.3532': attribute type 1 has an invalid length.
[  570.677919][T20867] netlink: 'syz.2.3532': attribute type 2 has an invalid length.
[  570.721560][T20859] syzkaller0: entered promiscuous mode
[  570.763782][T20859] syzkaller0: entered allmulticast mode
[  571.209080][T20899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3536'.
[  572.905334][T20864] syz.5.3527 (20864) used greatest stack depth: 15880 bytes left
[  573.072194][T20918] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3539'.
[  573.083469][T20917] netlink: 666 bytes leftover after parsing attributes in process `syz.5.3539'.
[  573.096928][T20918] netlink: 'syz.5.3539': attribute type 13 has an invalid length.
[  573.105712][T20917] netlink: 'syz.5.3539': attribute type 13 has an invalid length.
[  573.465716][T20867] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  573.746064][T20926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3541'.
[  573.844427][T20926] 8021q: adding VLAN 0 to HW filter on device bond0
[  573.857340][T20928] netlink: 'syz.3.3542': attribute type 12 has an invalid length.
[  573.906245][T20928] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3542'.
[  573.964011][T20933] netlink: 'syz.3.3542': attribute type 12 has an invalid length.
[  573.995187][T20933] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3542'.
[  574.345279][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  574.353437][    C0] lec:lec_tx_timeout: lec0
[  574.358110][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  574.405977][T20958] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3550'.
[  574.419322][T20949] macsec1: entered promiscuous mode
[  574.783731][T20978] tipc: New replicast peer: 255.255.255.255
[  574.815759][T20978] tipc: Enabled bearer <udp:syz2>, priority 10
[  574.835665][T20977] nbd: must specify a size in bytes for the device
[  575.184435][T20992] veth9: entered promiscuous mode
[  575.643070][T21019] netlink: 27 bytes leftover after parsing attributes in process `syz.0.3565'.
[  577.314342][T21061] netlink: 'syz.0.3573': attribute type 10 has an invalid length.
[  577.327773][T21061] 8021q: adding VLAN 0 to HW filter on device team0
[  577.338538][T21061] bond0: (slave team0): Enslaving as an active interface with an up link
[  577.455512][T21066] sctp: [Deprecated]: syz.0.3574 (pid 21066) Use of struct sctp_assoc_value in delayed_ack socket option.
[  577.455512][T21066] Use struct sctp_sack_info instead
[  577.519973][T21070] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3575'.
[  577.534580][T21070] net_ratelimit: 8 callbacks suppressed
[  577.534603][T21070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  577.607816][T21074] ip6tnl1: entered allmulticast mode
[  577.678306][T21076] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3577'.
[  577.751520][T20992] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  577.761406][T21009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3558'.
[  578.079063][T21089] __nla_validate_parse: 1 callbacks suppressed
[  578.079084][T21089] netlink: 200 bytes leftover after parsing attributes in process `syz.4.3579'.
[  578.128298][T21085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3579'.
[  578.255345][ T8238] IPVS: starting estimator thread 0...
[  578.347597][T21104] IPVS: using max 26 ests per chain, 62400 per kthread
[  578.377372][T21106] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3586'.
[  578.410219][T21106] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3586'.
[  578.522738][T21106] syzkaller0: entered promiscuous mode
[  578.540639][T21106] syzkaller0: entered allmulticast mode
[  578.669361][T21122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3590'.
[  578.844235][T21121] syzkaller0: entered promiscuous mode
[  578.873954][T21121] syzkaller0: entered allmulticast mode
[  578.912848][T21129] netlink: 'syz.3.3592': attribute type 61 has an invalid length.
[  579.365619][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  579.373716][    C0] lec:lec_tx_timeout: lec0
[  579.378696][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  582.847609][T21169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3601'.
[  583.067842][T21178] netlink: 'syz.2.3603': attribute type 2 has an invalid length.
[  583.291080][T21194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3607'.
[  583.293598][T21196] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3608'.
[  583.335844][T21196] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3608'.
[  583.397279][T21196] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3608'.
[  584.049150][T21214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3611'.
[  584.130125][T21223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3612'.
[  584.160314][T21222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3612'.
[  584.395349][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  584.403466][    C0] lec:lec_tx_timeout: lec0
[  584.408754][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  584.554562][T21245] syz_tun: entered allmulticast mode
[  584.566793][T21246] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3621'.
[  584.590605][T21245] syz_tun (unregistering): left allmulticast mode
[  584.661961][T21245] IPVS: set_ctl: invalid protocol: 44 255.255.255.255:20003
[  584.717093][T21260] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3622'.
[  584.879712][T21267] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  584.937973][T21260] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3622'.
[  584.971246][T21271] netlink: 'syz.3.3625': attribute type 13 has an invalid length.
[  584.979959][T21271] netlink: 'syz.3.3625': attribute type 17 has an invalid length.
[  585.028285][T21271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  585.044648][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  585.055458][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  585.066073][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  585.074847][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  585.210758][T21277] 
[  585.213257][T21277] ======================================================
[  585.220400][T21277] WARNING: possible circular locking dependency detected
[  585.227660][T21277] syzkaller #0 Not tainted
[  585.232204][T21277] ------------------------------------------------------
[  585.239426][T21277] syz.3.3627/21277 is trying to acquire lock:
[  585.245530][T21277] ffffffff8ea853e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650
[  585.254747][T21277] 
[  585.254747][T21277] but task is already holding lock:
[  585.262155][T21277] ffff88802a25a7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  585.271722][T21277] 
[  585.271722][T21277] which lock already depends on the new lock.
[  585.271722][T21277] 
[  585.282255][T21277] 
[  585.282255][T21277] the existing dependency chain (in reverse order) is:
[  585.291309][T21277] 
[  585.291309][T21277] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  585.298934][T21277]        __might_fault+0xcb/0x130
[  585.304015][T21277]        _copy_from_user+0x28/0xb0
[  585.309176][T21277]        csum_and_copy_from_iter_full+0x1e7/0x1f00
[  585.315814][T21277]        ip_generic_getfrag+0x149/0x2d0
[  585.321415][T21277]        __ip6_append_data+0x3902/0x3e90
[  585.327086][T21277]        ip6_append_data+0x10f/0x280
[  585.332519][T21277]        rawv6_sendmsg+0x12d3/0x18e0
[  585.337854][T21277]        ____sys_sendmsg+0x80a/0x9f0
[  585.343192][T21277]        ___sys_sendmsg+0x2a5/0x360
[  585.348443][T21277]        __x64_sys_sendmsg+0x1bd/0x2a0
[  585.353956][T21277]        do_syscall_64+0x15f/0xf80
[  585.359125][T21277]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.365650][T21277] 
[  585.365650][T21277] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  585.373536][T21277]        lock_sock_nested+0x41/0x100
[  585.378887][T21277]        inet_shutdown+0x6a/0x390
[  585.383978][T21277]        nbd_mark_nsock_dead+0x2e9/0x560
[  585.389671][T21277]        recv_work+0x1c2e/0x1d40
[  585.394662][T21277]        process_scheduled_works+0xb5d/0x1860
[  585.400790][T21277]        worker_thread+0xa53/0xfc0
[  585.405960][T21277]        kthread+0x388/0x470
[  585.410591][T21277]        ret_from_fork+0x514/0xb70
[  585.415758][T21277]        ret_from_fork_asm+0x1a/0x30
[  585.421076][T21277] 
[  585.421076][T21277] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  585.428763][T21277]        __mutex_lock+0x1a3/0x1550
[  585.433919][T21277]        nbd_queue_rq+0x37b/0x1100
[  585.439063][T21277]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  585.445162][T21277]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  585.452044][T21277]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  585.458573][T21277]        blk_mq_run_hw_queue+0x348/0x4f0
[  585.464232][T21277]        blk_mq_dispatch_list+0xd16/0xe10
[  585.469979][T21277]        blk_mq_flush_plug_list+0x48d/0x570
[  585.475905][T21277]        __blk_flush_plug+0x3ed/0x4d0
[  585.481307][T21277]        __submit_bio+0x28d/0x580
[  585.486451][T21277]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  585.492809][T21277]        block_read_full_folio+0x599/0x830
[  585.498648][T21277]        filemap_read_folio+0x137/0x3b0
[  585.504227][T21277]        do_read_cache_folio+0x358/0x590
[  585.509889][T21277]        read_part_sector+0xb6/0x2b0
[  585.515202][T21277]        adfspart_check_ICS+0xb1/0x960
[  585.520686][T21277]        bdev_disk_changed+0x817/0x1770
[  585.526260][T21277]        blkdev_get_whole+0x380/0x510
[  585.531663][T21277]        bdev_open+0x31e/0xd30
[  585.536547][T21277]        blkdev_open+0x470/0x610
[  585.541527][T21277]        do_dentry_open+0x785/0x14e0
[  585.546858][T21277]        vfs_open+0x3b/0x340
[  585.551479][T21277]        path_openat+0x2e08/0x3860
[  585.556622][T21277]        do_file_open+0x23e/0x4a0
[  585.561669][T21277]        do_sys_openat2+0x113/0x200
[  585.566896][T21277]        __x64_sys_openat+0x138/0x170
[  585.572296][T21277]        do_syscall_64+0x15f/0xf80
[  585.577450][T21277]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.583889][T21277] 
[  585.583889][T21277] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  585.591127][T21277]        __mutex_lock+0x1a3/0x1550
[  585.596276][T21277]        nbd_queue_rq+0xc6/0x1100
[  585.601389][T21277]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  585.607486][T21277]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  585.614365][T21277]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  585.620900][T21277]        blk_mq_run_hw_queue+0x348/0x4f0
[  585.626643][T21277]        blk_mq_dispatch_list+0xd16/0xe10
[  585.632388][T21277]        blk_mq_flush_plug_list+0x48d/0x570
[  585.638307][T21277]        __blk_flush_plug+0x3ed/0x4d0
[  585.643704][T21277]        __submit_bio+0x28d/0x580
[  585.648753][T21277]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  585.654948][T21277]        block_read_full_folio+0x599/0x830
[  585.660876][T21277]        filemap_read_folio+0x137/0x3b0
[  585.666452][T21277]        do_read_cache_folio+0x358/0x590
[  585.672203][T21277]        read_part_sector+0xb6/0x2b0
[  585.677513][T21277]        adfspart_check_ICS+0xb1/0x960
[  585.683083][T21277]        bdev_disk_changed+0x817/0x1770
[  585.688658][T21277]        blkdev_get_whole+0x380/0x510
[  585.694146][T21277]        bdev_open+0x31e/0xd30
[  585.698936][T21277]        blkdev_open+0x470/0x610
[  585.703906][T21277]        do_dentry_open+0x785/0x14e0
[  585.709222][T21277]        vfs_open+0x3b/0x340
[  585.713980][T21277]        path_openat+0x2e08/0x3860
[  585.719121][T21277]        do_file_open+0x23e/0x4a0
[  585.724211][T21277]        do_sys_openat2+0x113/0x200
[  585.729435][T21277]        __x64_sys_openat+0x138/0x170
[  585.734841][T21277]        do_syscall_64+0x15f/0xf80
[  585.740071][T21277]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.746517][T21277] 
[  585.746517][T21277] -> #3 (set->srcu){.+.+}-{0:0}:
[  585.753671][T21277]        __synchronize_srcu+0xca/0x300
[  585.759247][T21277]        elevator_switch+0x1e8/0x7a0
[  585.764562][T21277]        elevator_change+0x2cc/0x450
[  585.769919][T21277]        elevator_set_default+0x36c/0x430
[  585.775758][T21277]        blk_register_queue+0x3e9/0x4e0
[  585.781336][T21277]        __add_disk+0x677/0xd50
[  585.786238][T21277]        add_disk_fwnode+0xfb/0x480
[  585.791481][T21277]        nbd_dev_add+0x72c/0xb50
[  585.796533][T21277]        nbd_init+0x168/0x1f0
[  585.801248][T21277]        do_one_initcall+0x250/0x870
[  585.806556][T21277]        do_initcall_level+0x104/0x190
[  585.812044][T21277]        do_initcalls+0x59/0xa0
[  585.816929][T21277]        kernel_init_freeable+0x2a6/0x3e0
[  585.822679][T21277]        kernel_init+0x1d/0x1d0
[  585.827552][T21277]        ret_from_fork+0x514/0xb70
[  585.832733][T21277]        ret_from_fork_asm+0x1a/0x30
[  585.838044][T21277] 
[  585.838044][T21277] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  585.845916][T21277]        __mutex_lock+0x1a3/0x1550
[  585.851058][T21277]        elevator_change+0x1b3/0x450
[  585.856371][T21277]        elevator_set_none+0xb5/0x140
[  585.861766][T21277]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  585.868120][T21277]        nbd_start_device+0x17f/0xb10
[  585.873563][T21277]        nbd_genl_connect+0x165b/0x1cf0
[  585.879142][T21277]        genl_family_rcv_msg_doit+0x22a/0x330
[  585.885237][T21277]        genl_rcv_msg+0x61c/0x7a0
[  585.890293][T21277]        netlink_rcv_skb+0x232/0x4b0
[  585.895604][T21277]        genl_rcv+0x28/0x40
[  585.900136][T21277]        netlink_unicast+0x75c/0x8e0
[  585.905457][T21277]        netlink_sendmsg+0x813/0xb40
[  585.910766][T21277]        ____sys_sendmsg+0x972/0x9f0
[  585.916164][T21277]        ___sys_sendmsg+0x2a5/0x360
[  585.921385][T21277]        __x64_sys_sendmsg+0x1bd/0x2a0
[  585.926909][T21277]        do_syscall_64+0x15f/0xf80
[  585.932050][T21277]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.938495][T21277] 
[  585.938495][T21277] -> #1 (&q->q_usage_counter(io)#70){++++}-{0:0}:
[  585.947138][T21277]        blk_alloc_queue+0x546/0x680
[  585.952458][T21277]        __blk_mq_alloc_disk+0x197/0x390
[  585.958122][T21277]        nbd_dev_add+0x499/0xb50
[  585.963092][T21277]        nbd_genl_connect+0x962/0x1cf0
[  585.968664][T21277]        genl_family_rcv_msg_doit+0x22a/0x330
[  585.974762][T21277]        genl_rcv_msg+0x61c/0x7a0
[  585.979808][T21277]        netlink_rcv_skb+0x232/0x4b0
[  585.985121][T21277]        genl_rcv+0x28/0x40
[  585.989652][T21277]        netlink_unicast+0x75c/0x8e0
[  585.994974][T21277]        netlink_sendmsg+0x813/0xb40
[  586.000284][T21277]        ____sys_sendmsg+0x972/0x9f0
[  586.005601][T21277]        ___sys_sendmsg+0x2a5/0x360
[  586.010849][T21277]        __x64_sys_sendmsg+0x1bd/0x2a0
[  586.016348][T21277]        do_syscall_64+0x15f/0xf80
[  586.021507][T21277]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.028034][T21277] 
[  586.028034][T21277] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  586.035455][T21277]        __lock_acquire+0x15a5/0x2cf0
[  586.040893][T21277]        lock_acquire+0x106/0x350
[  586.045962][T21277]        fs_reclaim_acquire+0x71/0x100
[  586.051450][T21277]        prepare_alloc_pages+0x152/0x650
[  586.057234][T21277]        __alloc_frozen_pages_noprof+0x12f/0x380
[  586.063603][T21277]        alloc_pages_mpol+0x235/0x490
[  586.069017][T21277]        alloc_pages_noprof+0xac/0x2a0
[  586.074681][T21277]        pte_alloc_one+0x22/0x370
[  586.079743][T21277]        __pte_alloc+0x25/0x1a0
[  586.084726][T21277]        do_pte_missing+0x2cd2/0x33f0
[  586.090120][T21277]        handle_mm_fault+0x1bd7/0x3170
[  586.095604][T21277]        do_user_addr_fault+0x75b/0x1340
[  586.101266][T21277]        exc_page_fault+0x6a/0xc0
[  586.106317][T21277]        asm_exc_page_fault+0x26/0x30
[  586.111715][T21277]        fault_in_readable+0x8e/0x130
[  586.117116][T21277]        fault_in_iov_iter_readable+0x1b4/0x2f0
[  586.123389][T21277]        generic_perform_write+0x7af/0x8f0
[  586.129228][T21277]        shmem_file_write_iter+0xf8/0x120
[  586.134980][T21277]        vfs_write+0x61d/0xb90
[  586.139775][T21277]        ksys_write+0x150/0x270
[  586.144656][T21277]        do_syscall_64+0x15f/0xf80
[  586.149891][T21277]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.156332][T21277] 
[  586.156332][T21277] other info that might help us debug this:
[  586.156332][T21277] 
[  586.166662][T21277] Chain exists of:
[  586.166662][T21277]   fs_reclaim --> sk_lock-AF_INET6 --> &mm->mmap_lock
[  586.166662][T21277] 
[  586.179303][T21277]  Possible unsafe locking scenario:
[  586.179303][T21277] 
[  586.186772][T21277]        CPU0                    CPU1
[  586.192157][T21277]        ----                    ----
[  586.197550][T21277]   rlock(&mm->mmap_lock);
[  586.201996][T21277]                                lock(sk_lock-AF_INET6);
[  586.209152][T21277]                                lock(&mm->mmap_lock);
[  586.216036][T21277]   lock(fs_reclaim);
[  586.220046][T21277] 
[  586.220046][T21277]  *** DEADLOCK ***
[  586.220046][T21277] 
[  586.228206][T21277] 3 locks held by syz.3.3627/21277:
[  586.233462][T21277]  #0: ffff88807c186410 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  586.242439][T21277]  #1: ffff88807db420a8 (&sb->s_type->i_mutex_key#15){+.+.}-{4:4}, at: shmem_file_write_iter+0x7f/0x120
[  586.253625][T21277]  #2: ffff88802a25a7f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  586.263583][T21277] 
[  586.263583][T21277] stack backtrace:
[  586.269501][T21277] CPU: 0 UID: 0 PID: 21277 Comm: syz.3.3627 Not tainted syzkaller #0 PREEMPT(full) 
[  586.269524][T21277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  586.269537][T21277] Call Trace:
[  586.269545][T21277]  <TASK>
[  586.269554][T21277]  dump_stack_lvl+0xe8/0x150
[  586.269585][T21277]  print_circular_bug+0x2e1/0x300
[  586.269608][T21277]  check_noncircular+0x12e/0x150
[  586.269631][T21277]  __lock_acquire+0x15a5/0x2cf0
[  586.269666][T21277]  ? stack_trace_save+0xa9/0x100
[  586.269691][T21277]  ? __pfx_stack_trace_save+0x10/0x10
[  586.269717][T21277]  ? prepare_alloc_pages+0x152/0x650
[  586.269740][T21277]  lock_acquire+0x106/0x350
[  586.269766][T21277]  ? prepare_alloc_pages+0x152/0x650
[  586.269796][T21277]  fs_reclaim_acquire+0x71/0x100
[  586.269818][T21277]  ? prepare_alloc_pages+0x152/0x650
[  586.269841][T21277]  prepare_alloc_pages+0x152/0x650
[  586.269869][T21277]  __alloc_frozen_pages_noprof+0x12f/0x380
[  586.269896][T21277]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  586.269923][T21277]  ? __pfx_policy_nodemask+0x10/0x10
[  586.269946][T21277]  ? __page_table_check_zero+0x397/0x3e0
[  586.269970][T21277]  ? __lock_acquire+0x6b5/0x2cf0
[  586.269999][T21277]  alloc_pages_mpol+0x235/0x490
[  586.270026][T21277]  alloc_pages_noprof+0xac/0x2a0
[  586.270051][T21277]  pte_alloc_one+0x22/0x370
[  586.270072][T21277]  __pte_alloc+0x25/0x1a0
[  586.270094][T21277]  ? bsearch+0x95/0xc0
[  586.270120][T21277]  ? __pfx_cmp_ex_search+0x10/0x10
[  586.270150][T21277]  do_pte_missing+0x2cd2/0x33f0
[  586.270182][T21277]  handle_mm_fault+0x1bd7/0x3170
[  586.270207][T21277]  ? handle_mm_fault+0xee/0x3170
[  586.270229][T21277]  ? __pfx_handle_mm_fault+0x10/0x10
[  586.270255][T21277]  ? lock_mm_and_find_vma+0xa7/0x340
[  586.270277][T21277]  do_user_addr_fault+0x75b/0x1340
[  586.270313][T21277]  exc_page_fault+0x6a/0xc0
[  586.270339][T21277]  asm_exc_page_fault+0x26/0x30
[  586.270356][T21277] RIP: 0010:fault_in_readable+0x8e/0x130
[  586.270387][T21277] Code: a9 00 00 00 0f 01 cb 0f ae e8 4d 85 f6 40 0f 95 c5 4c 89 ff 4c 89 f6 e8 10 f1 b0 ff 4d 39 f7 0f 97 c0 40 84 c5 74 43 4d 89 f5 <41> 8a 45 00 88 44 24 07 49 81 e5 00 f0 ff ff 4d 8d a5 00 10 00 00
[  586.270403][T21277] RSP: 0018:ffffc9000203faa8 EFLAGS: 00050202
[  586.270420][T21277] RAX: ffffffff8214e201 RBX: 0000000000000080 RCX: ffff8880373adc40
[  586.270433][T21277] RDX: 0000000000000002 RSI: 0000200000200000 RDI: 0000200000200080
[  586.270446][T21277] RBP: dffffc0000000001 R08: ffff8880373adc40 R09: 0000000000000002
[  586.270458][T21277] R10: 0000000000000001 R11: 0000000000000002 R12: 00007ffffffff000
[  586.270470][T21277] R13: 0000200000200000 R14: 0000200000200000 R15: 0000200000200080
[  586.270487][T21277]  ? fault_in_readable+0x41/0x130
[  586.270518][T21277]  ? fault_in_readable+0x80/0x130
[  586.270547][T21277]  fault_in_iov_iter_readable+0x1b4/0x2f0
[  586.270567][T21277]  generic_perform_write+0x7af/0x8f0
[  586.270623][T21277]  ? __pfx_generic_perform_write+0x10/0x10
[  586.270646][T21277]  ? down_write+0x16d/0x200
[  586.270664][T21277]  ? file_update_time_flags+0x3b3/0x4a0
[  586.270690][T21277]  shmem_file_write_iter+0xf8/0x120
[  586.270711][T21277]  vfs_write+0x61d/0xb90
[  586.270736][T21277]  ? __pfx_vfs_write+0x10/0x10
[  586.270759][T21277]  ? __pfx_do_futex+0x10/0x10
[  586.270775][T21277]  ? kmem_cache_free+0x182/0x650
[  586.270806][T21277]  ksys_write+0x150/0x270
[  586.270829][T21277]  ? __pfx_ksys_write+0x10/0x10
[  586.270854][T21277]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.270873][T21277]  do_syscall_64+0x15f/0xf80
[  586.270898][T21277]  ? trace_irq_disable+0x3b/0x140
[  586.270922][T21277]  ? clear_bhb_loop+0x40/0x90
[  586.270943][T21277]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  586.270961][T21277] RIP: 0033:0x7faf5819cdd9
[  586.270977][T21277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  586.270993][T21277] RSP: 002b:00007faf563ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  586.271011][T21277] RAX: ffffffffffffffda RBX: 00007faf58415fa0 RCX: 00007faf5819cdd9
[  586.271024][T21277] RDX: 00000000fffffdd4 RSI: 0000200000000080 RDI: 0000000000000004
[  586.271036][T21277] RBP: 00007faf58232d69 R08: 0000000000000000 R09: 0000000000000000
[  586.271047][T21277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  586.271057][T21277] R13: 00007faf58416038 R14: 00007faf58415fa0 R15: 00007ffd0f010be8
[  586.271079][T21277]  </TASK>
[  587.493449][T21241] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  589.414980][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  589.423059][    C0] lec:lec_tx_timeout: lec0
[  589.427984][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  594.045399][ T1749] block nbd2: Possible stuck request ffff888027785080: control (read@0,1024B). Runtime 30 seconds
[  594.056223][ T1749] block nbd2: Possible stuck request ffff888027785240: control (read@1024,1024B). Runtime 30 seconds
[  594.067313][ T1749] block nbd2: Possible stuck request ffff888027785400: control (read@2048,1024B). Runtime 30 seconds
[  594.078283][ T1749] block nbd2: Possible stuck request ffff8880277855c0: control (read@3072,1024B). Runtime 30 seconds
[  594.435208][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  594.443325][    C0] lec:lec_tx_timeout: lec0
[  594.448014][    C0] lec:lec_start_xmit: lec0:No lecd attached