last executing test programs:

3m53.299487271s ago: executing program 0 (id=2458):
unshare(0x26020480)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x44044)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001800)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$unix(r1, &(0x7f00000000c0)=@file={0x0, './file1\x00'}, 0x6e)

3m53.113901444s ago: executing program 0 (id=2463):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x20040010) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x1, 0x70bd27, 0x800001}, 0x14}}, 0x4) (rerun: 32)
sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000008be230b47094de85cd40eeadf14a4e5481b5847621d75d6416ddc1007db53b39c3e8840f5f540ef76e49d3d071f3b23400f0c656e51165a4eea64134512140ad2efd0e0e1886e034", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x821}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r7}]}}}]}, 0x38}}, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r9], 0x1c}}, 0x4008054) (async)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xf705cc993d5902e}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, ')-{(['}, @NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)

3m52.689409283s ago: executing program 0 (id=2469):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x594b, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r3=>0x0})
sendmsg$can_raw(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r3}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x24048015}, 0x811)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r0, 0x26, 0x7}, 0x10)

3m52.224161601s ago: executing program 0 (id=2474):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'})
syz_emit_ethernet(0x66, &(0x7f0000000740)=ANY=[], 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x7, 0xfff2}, {0x0, 0xf}}}, 0x24}}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20006911}, 0x0)

3m51.995743263s ago: executing program 0 (id=2479):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r1=>0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffe8, {0x0, 0x0, 0xe403, r1, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xe1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffe8, {0x0, 0x0, 0xe403, r1, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TOS={0x5, 0x5, 0xe1}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)

3m51.939960332s ago: executing program 0 (id=2480):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r1}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64)
close(r4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'sit0\x00'})
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async)
close(0x3)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000180), 0x12) (async)
write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) (async)
close(0x4)

3m36.901368327s ago: executing program 32 (id=2480):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r1}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000640)="b4", &(0x7f0000000180)=@udp=r1}, 0x20) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64)
close(r4) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (rerun: 32)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'sit0\x00'})
write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) (async)
close(0x3)
openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async)
openat$tun(0xffffffffffffff9c, 0x0, 0xa8a00, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async)
r8 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r8, &(0x7f0000000180), 0x12) (async)
write$cgroup_freezer_state(r7, &(0x7f0000000080)='THAWED\x00', 0x7) (async)
close(0x4)

2.656642654s ago: executing program 1 (id=4703):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket(0x2d, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6a98cf64}, 0x10}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r2})
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xc, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x7, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x4}]}}]}}]}, 0x54}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r0, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x14, 0x7, 0x1, 0x80000000, 0xc08a8, r0, 0x40, '\x00', 0x0, r3, 0x4, 0x1, 0x1}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x11, &(0x7f0000000200)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x1, 0x5, 0x8, 0x5, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x94, &(0x7f00000002c0)=""/148, 0x41100, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xa, 0x2, 0xee7}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000540)=[r1, r0, r0, 0xffffffffffffffff, r6, r0, r7, r0], &(0x7f0000000680)=[{0x2, 0x3, 0x7, 0x3}, {0x1, 0x5, 0x0, 0x9}, {0x4, 0x2, 0xf, 0xa}, {0x3, 0x2, 0x1, 0xb}, {0x0, 0x3, 0x4, 0x7}], 0x10, 0x5}, 0x94)

2.523864379s ago: executing program 3 (id=4705):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'veth0_to_hsr\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}})
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000001c0)={@loopback}, 0x14)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendto$inet(r2, &(0x7f00000000c0)="7cde2b", 0x3, 0x4000010, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10)
r3 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [], {0x14, 0x10}}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0xc4)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000000040)=0x8)
r6 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000080)={0x634c, 0x4, 0x3, 0x0, r5}, 0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0)

2.225838154s ago: executing program 3 (id=4708):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @empty, 0x6}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0xa000}, 0x8)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x420, 0xffffffff, 0x278, 0x0, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0xc8, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x480)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x0)

2.029113937s ago: executing program 1 (id=4709):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4)
mmap(&(0x7f0000b02000/0x2000)=nil, 0x2000, 0x1000002, 0x28011, r1, 0x0)
setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000200), 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r2=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f00000001c0)=@can={{0x4, 0x0, 0x0, 0x1}, 0x4, 0x0, 0x0, 0x0, "43b9dfb720598c2f"}, 0x10}, 0x1, 0x0, 0x0, 0x48001}, 0x4000085)

1.957573193s ago: executing program 1 (id=4713):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff, 0x1e000000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5}, 0x50)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=<r4=>0x0, &(0x7f0000000380)=0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x1ff, 0x0, r3, 0x3, '\x00', r4, 0xffffffffffffffff, 0x5, 0x1, 0x1}, 0x50) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000090a010400000000000000000a0000080900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc76e4ac9f9a69b1add4c0d0252273ad1c0011800b00010065787468647200000c0002800800064000000002140000001100010000000000000000000000000a"], 0x80}, 0x1, 0x0, 0x0, 0x2040000}, 0x40)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r2, r2, 0x2f}, 0x20) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000000000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe88000000000000000000000000000100000000000000000100180004000083"], 0x88}}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x4)
writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d1009074beafd0d8c560a84606080ffe020590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b00000000", 0x48}], 0x1)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r2, 0x2f, 0x8, 0x4}, 0x20)
r8 = socket$igmp6(0xa, 0x3, 0x3a) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}})
ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000440), 0x101201, 0x0) (async)
setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) (async)
r10 = socket(0x25, 0x5, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r10)

1.848829733s ago: executing program 2 (id=4714):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x403, 0xfffffffd, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0)

1.762895855s ago: executing program 2 (id=4716):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000040)={0x3, 0x7ff, 0x6, 0x4, 0x8, 0x80, 0xf}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}})
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x10, 0x3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000ffdbdf25030000000800010000000000400007800c000180", @ANYRES32, @ANYRES32, @ANYBLOB="0c000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4050}, 0x100)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
syz_emit_ethernet(0xb8, &(0x7f0000000200)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x3, 0x0, 0x1}}, {@mpls_uc={0x8847, {[{0x2, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x101}, {0x6}, {0x101}], @ipv4=@tipc={{0x18, 0x4, 0x1, 0x4, 0x8e, 0x65, 0x0, 0x40, 0x6, 0x0, @multicast2, @private=0xa010101, {[@end, @rr={0x7, 0x23, 0x47, [@broadcast, @private=0xa010100, @empty, @broadcast, @local, @loopback, @multicast1, @broadcast]}, @lsrr={0x83, 0x27, 0x75, [@remote, @dev={0xac, 0x14, 0x14, 0x1a}, @local, @empty, @dev={0xac, 0x14, 0x14, 0x3f}, @local, @dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}]}]}}, @payload_mcast={{{{{{0x2e, 0x0, 0x0, 0x1, 0x1, 0xb, 0x0, 0x2, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3, 0x8, 0x4, 0x4e20, 0x4e21}, 0x1, 0x3}, 0x2, 0x3}, 0x3}}, [0x0, 0x0]}}}}}}, &(0x7f00000000c0)={0x0, 0x3, [0x1b7, 0xa07, 0xbfb, 0xbe6]})
sendmmsg(r0, &(0x7f00000042c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x800)

1.596750748s ago: executing program 1 (id=4718):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000000)="89d3c05e2f60dd8c0682db12", 0xc}, {&(0x7f0000001940)="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", 0xfec}], 0x3}, 0x0) (async, rerun: 64)
r1 = socket(0x2a, 0x2, 0x0) (async, rerun: 64)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x5}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x70}}, 0x1)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) (async)
mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000000)={<r6=>0x0, 0x7, 0x0, [0x0, 0x9, 0x0, 0x7fffffffffffffff, 0xca3], [0x4, 0x7, 0x9, 0x807, 0x20000000000000, 0xfffffffffffffffe, 0x0, 0x9, 0xdf, 0x80000001, 0x8, 0x0, 0x4, 0x3, 0xfff, 0xea, 0x400, 0x100000000000000, 0x9, 0x4, 0x5, 0x9, 0x8000000000000001, 0xa, 0x8, 0x3, 0xfffffffffffffffc, 0x28a, 0x3ff, 0x1, 0x100, 0xef, 0x4, 0x3, 0x8, 0x4, 0x7, 0x18, 0x6, 0x10, 0x5, 0x0, 0x7, 0x865e, 0xed17, 0x0, 0x100000000, 0x8, 0x4, 0x5, 0x4, 0x5, 0x3ff, 0x0, 0xfffffffffffffbff, 0x6a, 0x5, 0x6d, 0x7, 0x6, 0x4, 0x3, 0xd92, 0x4932, 0x3d3, 0x5, 0x6, 0x1, 0x0, 0xe, 0xf46, 0x8, 0xffffffffffff0000, 0x5, 0x8, 0x7, 0x9, 0xced, 0x0, 0x1, 0x3c8, 0x0, 0xc, 0x0, 0x2, 0x9, 0x4, 0x4, 0x1, 0x80000001, 0x0, 0x8, 0x8, 0x2, 0x1, 0xac5, 0x1, 0x7, 0x9, 0x3, 0x3, 0x4, 0x100000001, 0x4, 0x1e, 0x4, 0x0, 0xffffffffffff27d7, 0x2, 0x4, 0x3d, 0x100, 0x6, 0x3, 0x8000, 0x2, 0x100000000, 0x7fffffff, 0x6, 0x6b8c, 0x2]}) (async)
ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000440)={<r7=>0x0, 0x1ff, 0xf, 0x1})
ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, <r8=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000c40)={0x10, 0x1, {0x80, @usage=0x3, r6, 0x3, 0x2, 0x8001, 0xf965, 0x9, 0x83, @usage=0xebdc, 0x1, 0x1, [0x1, 0x676, 0xc4a2, 0x4, 0x2ad, 0x9]}, {0xfffffffffffffffb, @usage=0x2, r7, 0x9, 0x3, 0x1ff, 0xffffffffffffff6a, 0x1, 0x461, @struct={0x6, 0x9}, 0xc5, 0x3, [0x80, 0x889, 0x10, 0x45, 0x9fe, 0x4]}, {0xc2, @usage, r8, 0xe, 0x0, 0x5, 0x6, 0x4, 0x86, @usage=0x6, 0x0, 0x6, [0x0, 0x9, 0x2, 0x0, 0xadc4, 0x2]}, {0x7f, 0x7}})

1.59644986s ago: executing program 4 (id=4719):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$unix(0x1, 0x1, 0x0) (async)
unshare(0x40000000) (async)
r2 = socket$kcm(0x11, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bond_slave_1\x00', <r4=>0x0})
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r5)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)={0x3c, r6, 0x79964d8cba2f455d, 0xa070bd28, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x3f}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xfffffffffffffff6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000) (async)
r7 = socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0}) (async)
r10 = socket$inet6(0xa, 0x3, 0x3)
bind$inet6(r10, 0x0, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x5, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'vxcan1\x00'}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r11) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4)

1.569258805s ago: executing program 5 (id=4720):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x130, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x100, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xb4, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private0, @in=@broadcast}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8) (async)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast2}}, 0x0, @in=@private}}, &(0x7f0000000000)=0xe8)
ioctl$TUNSETOWNER(r0, 0x400454cc, r4)

1.535797633s ago: executing program 2 (id=4721):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x64}, {0x6}]}, 0x10)

1.380285705s ago: executing program 2 (id=4722):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001000370401000000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c04000000000005001000050000002c0012800b00010067726574617000001c00028005001700000000000800040003000000060003009c"], 0x54}, 0x1, 0x0, 0x0, 0x44801}, 0x0)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0xa, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@empty, @private0, @mcast2, 0xfffff800, 0x8, 0xae9, 0x500, 0x10001, 0x4000000, r1})
sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x20, 0x70bd29, 0x25dfdbfd, {0x80, 0x0, 0x0, 0x37, 0xfc, 0x2, 0xc8, 0x6, 0x1900}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8880)
r2 = socket$inet(0x2, 0x2, 0x0)
sendmmsg$inet(r2, &(0x7f0000003380)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000001a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @rand_addr=0x64010102}}}], 0x20}}], 0x1, 0x4040880)

1.378871932s ago: executing program 1 (id=4723):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
r1 = socket$igmp6(0xa, 0x3, 0x2)
syz_emit_ethernet(0x86, &(0x7f0000000480)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @mcast1, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x11, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'veth1_to_bridge\x00', {0x2}}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'veth1_to_bridge\x00', {0x2}})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x337)

1.262846311s ago: executing program 5 (id=4724):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000001400)={0x2, 0x9, 0x0, 0x2, 0x2}, 0x10}}, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000000)={'nat\x00', 0x0, 0x0, 0x0, [0x100, 0xc42, 0x3, 0x7, 0x5, 0x2]}, &(0x7f0000000100)=0x78)
r3 = gettid()
r4 = socket(0x10, 0x803, 0x0)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r0, 0x40106e80, &(0x7f00000002c0)={0x40, 0x1})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r7, &(0x7f0000000300)="6904d7d2555199126a6c0b06710a49cf35f962d116a65e649dbf2afd570656909a6c9fb55ab3bdf9f6219af86a0c301f749770f3f90216079b9c46677d6548be447b13e9de6321f40e12e8e0e10ef1eb0cb8cc739ceb3ce0bf5929c650cb149bf5b96e2053a953353b5f7c1c51ad4df2e801eb1e92b5b4ae504697ae897679c50ff6e4de106eb4bc4d91fca2b2631fb068a0afbf1ccd9ef4e4e5d99a9e98398884cedcc6716039ca58900b7905a065f1c060a0d3fc58d2b1349323b90e76345a08a682b4d444835c32a7b6c87d3b2480cabb7235b24cba4ff5a50162b4d745a1d2f0e9b6138a52ab3250f7", 0xeb, 0x0, &(0x7f0000000400)={0xa, 0x4e23, 0x7ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, 0x3}, 0x1c)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {}, {0x5, 0x14, 'syz0\x00'}}}, 0x28}}, 0x0)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x10, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x9a62, 0x8, 0x6, 0x4048e}}}, ["", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40080c1}, 0x1)
sendmmsg$inet6(r1, &(0x7f00000069c0)=[{{&(0x7f0000000000)={0xa, 0x108, 0x7f, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x88}, 0x1c, 0x0, 0x0, &(0x7f0000019580)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xc}}}}], 0x28}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20000000)
getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f0000000140)=""/161, &(0x7f0000000080)=0xa1)

1.261392918s ago: executing program 2 (id=4725):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0x20, 0x68, 0x0, 0x60, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf, 0x0, 0x1}]}}, "11f3305280f125e6"}}, 0x2e)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)={0x60, r2, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0xffffffffffffffcb, 0x4, 0x1}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40004}, 0x884)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32=r6], 0x38}}, 0x0)
r7 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', <r9=>0x0, 0x2f, 0x0, 0xd, 0x101, 0x2, @local, @local, 0x8e, 0x1, 0x1, 0x8}})
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xf, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x4, 0xfffffff7, 0x157, 0x3, 0x2, 0x3, 0x10000, 0x4}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x3a0, r2, 0x4, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xe8, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x75b}}}]}}, {{0x8, 0x1, r8}, {0x294, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9f}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x2, 0x4, 0x0, 0x5}, {0x800, 0x1, 0x3, 0x40}, {0x7, 0x2, 0x7, 0xbece}, {0x0, 0x4, 0x2e, 0x8}, {0x5, 0xe, 0x6, 0x2}, {0xfff7, 0x2, 0x36, 0x7b0}, {0x1, 0x5, 0x0, 0x1}, {0x1ff, 0x18, 0x3, 0x10}]}}}]}}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x10}, 0x8)
r15 = socket(0x840000000002, 0x3, 0xff)
r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$nbd(&(0x7f00000026c0), r16)
sendmsg$NBD_CMD_CONNECT(r16, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="00001465dea5dbc88b4e115422c04a597dc7af8d8eeb16eb227c121b1629643b688673907deb124d9f4a35498faf9e9b86c1be25be713ec338bb1db9589c30734c61d282da9490bb41b51167c2d02caa8b0b7ea5745c5c54e31addc5a8f1540f065220a903bb96891d55a9a5c1197a8057", @ANYRES16=r17, @ANYBLOB="100024bd70a0fedbdf25010000000c0002000100000000000000100007800c00018008000100", @ANYRES32=r15, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x4040005}, 0x20000000)

1.218028911s ago: executing program 3 (id=4726):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r2 = socket$inet6(0xa, 0x2, 0xfbc) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x808000}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={r5, 0xeb21}, 0x8) (async)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x50}}, 0x0)

1.044337502s ago: executing program 3 (id=4727):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x4, 0x4)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="7912b8000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff, 0x1008}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (async)
write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x7ffffff, 0x1008}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a60c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000180)="88e584aac45d6d83e6c2c8857149eb55d2c259a747dbdfc05b7e87150dcc7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6c9a195d347386118cbfbb67848d7783900dd047aeed9e789b9ea73ca850c5f9dbf67c044564934db01395590d790b885e517196ffa5c6b", 0x7e}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec624728200000000000000", 0xd5}, {&(0x7f0000004480)="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", 0xd86}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b994dcc5f47b255f609e705d9fbea0869812c0c3a096c799964", 0x28}], 0x5)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)

1.043475371s ago: executing program 4 (id=4728):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x48)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3c0000001800dd8d00000000fdffffff020000000000000600000000060015000100000018001680140001"], 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r1, &(0x7f0000002a40)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40002000, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10)
recvmmsg(r1, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x60, 0x0)

1.036031255s ago: executing program 1 (id=4729):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r3, 0x215eb000)
pipe(&(0x7f0000000740))
r4 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x61d0, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="c62465d7fb8d"}, 0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffe69, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x20040024}, 0x8040)
sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0xa4}, 0x1, 0x0, 0x0, 0x48005}, 0x801)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d4e496b"], 0x2c}}, 0x60040050)
listen(r1, 0x800803fc)
shutdown(r1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$bt_hci(r6, 0x0, 0x30, 0x0, &(0x7f000000a500)=0x90)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x2f, 0x8, 0x8, 0x10, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, @mcast2, 0x700, 0xba08, 0xfffffc00, 0x1000}})
socket$unix(0x1, 0x2, 0x0)

999.084852ms ago: executing program 5 (id=4730):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r1=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)=@canfd={{0x3, 0x1, 0x1}, 0x31, 0x1, 0x0, 0x0, "f05324f3378d9d86b67978f2e6ebc4dacc38024597c12977a404d9ccb67200d8543eff4d99cdbc1de165d91736840127682bf4f6455edb7bcae0c4a07dfca0f7"}, 0x48}, 0x1, 0x0, 0x0, 0x408c0}, 0x800)
socket$kcm(0x10, 0x2, 0x0) (async)
r2 = socket$alg(0x26, 0x5, 0x0) (async)
r3 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) (async)
close(0x3) (async)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x7, 0x7800, 0x0, 0x8001, {{0x6, 0x4, 0x1, 0x11, 0x18, 0x68, 0x0, 0x5, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010100, {[@lsrr={0x83, 0x3, 0xfc}]}}}}})
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r8 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r8, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) (async)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r9 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r9, 0x6, 0x17, &(0x7f00000000c0), 0x4) (async)
sendmsg$kcm(r9, &(0x7f0000000040), 0x408c0)

716.408821ms ago: executing program 5 (id=4731):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r1, 0x0, 0x29, &(0x7f0000000340)={0x1000, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @multicast2}}}, 0x108)
getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x30}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000040)={'vlan0\x00', @ifru_ivalue=0x5})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xd}]}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xd}]}}}]}, 0x38}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200)=<r5=>0x0, &(0x7f0000000280)=0x4)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x58, r4, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x48080}, 0x8800)

707.131253ms ago: executing program 3 (id=4732):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x14, r1, 0x615}, 0x14}, 0x5}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002100), r2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_AUTHENTICATE(r5, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000003a00)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001001a080035"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)
sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0001283d7000fedb9f253500000008000300", @ANYRES32=0x0, @ANYBLOB="0a0034000101010101010000140055001e36fd18fde37bce9492dbfec8ee408e0a00060050505050505000000600fd00ffff0000050020010e000000"], 0x58}, 0x1, 0x0, 0x0, 0x1010}, 0x4000)

702.752529ms ago: executing program 4 (id=4733):
syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a24b9f", 0xc, 0x11, 0x0, @remote, @local, {[], {0x0, 0x4e22, 0x0, 0x0, @opaque="03000000"}}}}}}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710421000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001a40)=@o_path={&(0x7f00000013c0)='./file0\x00', r0, 0x4000, r0}, 0x18)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, 0x0, &(0x7f00000000c0))
recvmmsg(r1, &(0x7f0000001980)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/7, 0x7}, {&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000000240)=""/184, 0xb8}, {&(0x7f0000000300)=""/4096, 0x1000}], 0x6, &(0x7f0000001380)=""/34, 0x22}, 0xfffffff7}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f00000013c0)}, {&(0x7f0000001400)=""/92, 0x5c}, {&(0x7f0000001480)=""/75, 0x4b}, {&(0x7f0000001500)=""/65, 0x41}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/91, 0x5b}, {&(0x7f00000016c0)=""/118, 0x76}, {&(0x7f0000001740)=""/219, 0xdb}], 0x8, &(0x7f00000018c0)=""/138, 0x8a}, 0x3}], 0x2, 0x40000121, &(0x7f0000001a00)={0x0, 0x3938700})
socket(0x3, 0x80000, 0x1)

446.468086ms ago: executing program 4 (id=4734):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x80000001, 0x8, 0x4007, 0x1}, 0x10)
sendmmsg(r1, &(0x7f0000000880)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x0, {0xa, 0x4e26, 0x0, @private0, 0x20006}}}, 0x80, 0x0}}, {{&(0x7f0000000180)=@hci={0x1f, 0xffffffffffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000000)}}], 0x0, 0x45)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x80000)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r3)
ioctl(r2, 0xfffff3f7, &(0x7f0000002400)="1efe39977353af3bdc0fd90b5041423c11831479186ddaa73bb953fa62dfa97cb8d3423ecec8125ba6d96d94924df9685d87f3c0dc1601afa650d37820a5739fdbe40885d9de7c85e030581b4e686d71f86f6774d956c7597d2d55ba4e79f41fc7eb3c670a4c6505190706c285572b03ad81d6110e9af1ca8513e4791ef8b3eca41439fbd8283cb1042085f17140271ea7bdcf82347c72c92f051cb2f50e6cc106ed0cceffd4b0cae17a8313b284251715b7e69a0c27333b3753dc4a27cb77b77ec2a0ff5ef2b86744eabf8d9c3c9f32f1f2e76c0d46358610e53bf72bccc6ccc7810d284df69a2cdb3e462d74c48d41a418df23c6dbb85ebdfcaac79aea6d12808a3818fa3cf1b26e09d5518854c7df562309b8b75f56afba3d58ec9ad1d8746b924caa785d43d0e700aee70d7d74718745f795fa27e6fa938696ad5f56a9bb4ef6c3ea267368aebbe0490359a36cb339d35d86317fee7ce5146835080f28931a292632b758be60c0464d0085374c39c99ebd96ec60d46770e52f4a7f865dbf3f0c7d83bbc5338b8b4d804cd5dfac26ae6986d5afdc0efa4cad5d7fba17b60265de3bec3789ed8984e16b43d477d2c62b2b8a205713fdae8d6a877409beba75dbd698e12940d4e3636f8c6b1675c143b33ce09fe1cb8612304049604c9de0c6aa7698615e782f7e28df4fade71f5fa5d7282a48a840642f6be29a080ef50b49b93f8c8691bdba06de3fa9e3944005d0931c9a151d23f3e2f8671df92f27131b0e676d4e762ae7a9b54e169b7b4ccbb5e9445ffb4385a2f003f39e5d61e47edc4de282e5a76b74d249fb856abd0f1f709ec1817523368f543ee8ad259e60378ab2736bd0d9e1bbcb8cbf20b9774a4b39162ea23fa09100f91a1341afe02eb3040c0bdd8c5fffbb7b40dd79c29878efba4733cc5a9abd74dadc5ec6a0f2497e870ab7ee60b42b61ef2ba5c8ace72788ae71cc531443fee36bb6da9cb9bdc89699b26792956dbc1816b6942d0dcb34c267f7b1e7a67b1b0b5af648e8aa64ca616657ed38b9c71e7c8a32b631bba174bb88847af8ccddd0425e83449145bb53e06692e3f72a1d590a46aaeff64c8d340d21009fd999aec5f8f159ba89d0af0bf78493331bf908d68a38cdb7f4b936cf5a050ef6d47b94acb1f78ff145426741189336f76cacf2ddb27d2e49211221ef2622f52d0548c15fca31cef3c31f542a21a0fbd7da7cb214e9fd5d143a357a66408dadbb2b23302f917508e4acbb8b50bfb7cb63d91b9ce362e7f9c8fb4e2c54a03a4a03a0d8b345fa4f01d78bd91842343db10a1df3ce036b30ba25621f435ffcb75b683d1fdfa2a8470494dbd0bb0fbba2d898ff0a6d015fa3b103db21f009015f3870fe7ef5412488fce5deac9428f401737535a36cafa797a87695be8910f00fcfdec3e795d618c9379035ebd257772166c0673056cb5ac63fee8865bd8e1a0b911c044f3d1a0898b13264ff0b47aae9f7998103d983a85c60e526a046714faac174d3fdc48ee8bb78161841561795057ba65832f4c32bdad6df9f2d61c7e6efbc603f15ec570d1e60c85230082c38e06281b497067b65a87077d7575f5afbb5bc96edf89fa5f7e2647b0e6a5d8d824ff51b0aa24d17d946c31f8027075605a9fc2a5f1ca13fd365db98255c33aa31ed1ccde948442718434b864249e838b2d3ff3380412a5d58aa19674b00807beaaf2ac73916019b6d3406244e521b0748d1d17bd79f9b6dfa79b6f2b3bb50a30d0d6b16fc5e7eb1bc646676a8772583e23b3540cfcf60e18983f66e1788080898fbc7be3e7713f7c5446e003c1c135b06e9edb9d4aa2e393610a1dca7452d5428cd7323b1710b5631be2cde3f2f34cdafa19adf40fc1ee5dd9ea449908a6aa7d7a798f92d9b1b41191a71aad2bab6129f1a7f747335033622af1f67255a80412d78d3b38b5d6ff79eb70e5615df64164e397f3b1a625cfe6cbe63fa48876356de8ee9d78ff5ce2addc49a59344439b8929046c9979f4fff0e68380961e86820ea3ca069d751fa53bc02affcab474c5acd261b2215aaa70e59e6360ea597740ad8aeaadaaf3256135bb6be549dc667c109986a56ea6a4692107619b3dfd9a2dbbf1434aa967482fd55f441b241df10f0de57110beeb0a37800be3cf24fc0b959c1944653349dd3cc1244a9588e5be805bff46304de1e1abb3ec9d849d1f72ccefedf81ecc342ac8edce8147dfd984e2eb4613d72a2a6b330df2da40b8ad35728ce2217d082acabc57c86153a081a9b5ab7a7865be1c371340a51aba695a5112d3306dae7a4ca015dfd629ea7cce2e99b4dbe95d702c977778f4fe9725520260eff45d2003ff4e6045acda4899a8ef8b2019f02bcd55483b6e556dbb29b8b5ccfbd0e379efc8b637ad9e548d736c2af4f10a69de07ec3a907721dcb012cb474843a2fa8cfb91c260db7ca5e0e6504f16fbf944497d24fd84df5bf31ccbefb54e910feb375f838811fd8d49699dae730a884bb3f93c737b35663318d670f758a41defa24fa5332d8bbbb4c447e3c38f86c2cc1c7c6945efb2b762bacf5590ed6d2b4eabb9d1adfb988f045ee269cedff74a0cf5a598c5eb0a70793dbc7384e3b5c3c1f773ad02057709446a34c82af563a640463e79fe38d354972f42cc2102233567e65c5d2f4ba37787951e7c3a800181721bfaf92d303386e9f3e46edfa361168c1e247490e1fa835bb2d29a189edd5b09a2512fd5ed9c3a2ff1734140536cf5a99993057f0959dd15600ae6c519efce93d83abd400c28529f84d6d31b704ddc7e459283deebb47bf8073e0e091cac2bdba6bc331161a93cc1ac4a795c95bd0fea86cd38da17ab6128f196611f8b3e67a56c74b144837908710ddf78143071ae4242416e5c18b7058122d38ae5bcf5767f91d3aa5fb4131a2f25ae916b042d11ad79b77f9ea7156e1357f49bbc0cfe06a1f41a6076071caff09f8cd003fc8be89d57af1cd0f5c059c49461ca7493e19b44d2b65ea7498582ed139f30d3c0918ceaa57978573b09f79f3ca8288aa15e227ba8243e3edaff90150c223dfef77fef7980e82f13e61e020821c3cde3c29eb72a63384edfd3effd6d9c6b7fcf9b2bcf8c76aa8bea9245649b8391f4eaf60ed77e0f47af3c9249fee7cfd96537e7fd202c4242775d55dbfe7c7a0194f1a52519b5dbb5cf1b4654a96a9f2c801079fca0790bbabb7181a756070a35e358e7b5c70016541271157600cee42b4f16dc771f5b1f5c4d677c21176d0e714ba319218c08204a3da8fc8fd8d23135aec22e00a8710c8d756cb08f8fb0101c0ee072002655e6f6dc6d238671612013e450faae0de1e943ade89804a9e95a3d2b430e74c79c86841298065bf3629b05691318a1d14d9487f98c33054a47350752b06a835d99671ebf5809e27cb25e823915f7ccacce3579d229d75a03eef775e10de6417ce52f19ae1a1e56974fb4a558a1999650aeae004a5456ed34579254967533316c05cae0a8c4cde6dc83ee5fc3071e3b66cdda5c76eae009d193f64c13f549796f3c173b6fb790dcc5f250d8e14862cbb127ea4056b115d9a06c4d29452efdd50642da2b80991dcbd7578a5b7646c5dd6f50931bc32bdae28b60d9caf059069b1ae785cc9c498fcec09c33d19ccbe0e5afc1aaa419195d7877e0004f4ecb7e49ec4f3d3faed715ed512c0a9968949d81eabd232fc0e41884bf730781336f9f62437a669a882161a085b7c8c2416bc4bcc709ede4e02b4f1bed264625fb16189f2173114ed7ad9f5d346ff5d66256ed7c30d740d6bd667d77f5c4b6fa4e4613fe7e90e895efe946775a937bd789dd89cedec4844bfa93ea782b3bb18f19ec9334db3354fcb783d9e9ca57e6d3285706b02c017f3337d3cec586092c16da646530b70ef2089b41ea701eedb6343b0b6538f2f024464f55d592e4f7b61ecca3d719f6146029202aa103374cd7ccf8d04abd617cfd561612de72676af97f467c459d5b6ea842585575c9ca5b4a3f02d84626c75d3a0d29e2258e4b4aadd8c341f10aab7b8779cf6f6df6e3171c906fc8b81ec2e7f9e8b1208e7bf46b61fdf2405a6481f10145a0d66a1953a39e46a81fe6aecd52c6a401f452790d843904755a8d40b4e7541b8decbb27fe2e5bf4f82926b1102e0086bb983d1f1d547c04c6e45703d227ce2d43d0fcfed925e89b5b48e411d067d4867e87ede060a4d0a72a8852516b555896d400ffeddac6311aa2328e64727fbb4e78ea9924310f5f398392ea645983103e9b41b64b87e49b652cc231020efc78d43272abee5f1653a732214cd21e1209d2605dbc7ce2a99d0eb0564a37b89424aa7d8707e55ac9a16e322c11a6c32c6d961ae409ab0645babc8654b7ac6b25cb1f3d386f475dc0975e245c41b562de88a9b4baceeb709c238f11361da23285bbde3ad5391e53203061cf5d9dbe619d138a71cefc55c37ec6e834b82db9c5251cc4617bb8f58a2d7e8eafbebaf196432f52ed91c313153155d5c056402d126f9b7d34db553317fe6daab0766302f04d5daf6dd1858e4b17ede499647641b0f5578f115c55ac61d0b71c0aeabb278c46f25cb7e02873a829771202ef35296b493a48c2231ced0420ec3c30bac1bfd793be92fc0847cd8426d5c190610f1b3b9a69cd9518b9bc003eded9bb30c0bf92e78268bd88f9f681daeddd84cbf02ba6a25e04765ac5d7a89428b6eb539b156b1d80ec3e5760d23d419cd9c548ec4db8426fa579d9b98fb4325c8520fb957ebb5d3e666117a87e2513f4d269999544a58724d7ff9a5da3e336bae032e84003c692aeec08dbd8606b2aed29321a0b0f3b5ee3299d504153b0bcfe0d647a5589286d776529d7457340c46c7166f5d5725ed040593503100e6dc30a2917b160eba899e95adca2d2384a249edd63789535fafa360edfec4d79f9ad05d034f3c90842c23af8557b65b94000275f2be199788a52eaf4510a5925f7d13dec7c803ffa10bf54c8257d5b0b0b6015e455576bd1dde82a7a2b29275512003b9cb5f774d13309b7adae920792d1f8ca3a229f52a117776e00e0ab695a9b52720865e71d5b70ff3932056638a09de9aecae979b80d95165c09d6c77ba1e19c8b206cafbd35d0d8710ae7201531745f97895751fd946b242160d91d06079488cb3703b67bb356bf598525bc07304d80357b467d100897fb4d2c6310b1233a0c992f5553b0de2b98f50e1da70b57997b6984621c26b0aef38ca49d891ea333e82290ddb8ab3840e77a050403fe90aa81422b5f256393616468142015c135587a866e2af126f6d30e74a7dddc4210f8b0954a9862bd9e2d5f969c741e60efd6be9ec70dd6e33fbbb9a5c886242d7e674da6fe32ccbd4269ac2c99a37aa06309790ac65ac85a6c2f3b97884ba0b7626cfff4d4f12c3935c68a88d909f43e79738904c524ddc6eee809c425e1191f1184027474f7ab007894bb380b5512434cc18a15df75ab299fa153a948121e850fd8b75e1b916bbaf8d03aa61613a0ec2560532942ba2811907bed9ceee9d30397d282665002f3d21255b4b3cfdffb83afd4763720ced1928b2628d77b73c3f2fe64c6d65e7831a179109b4e6ed7c736bf89f5f09a70078ad20ded59fdcc460743c728ca8c3a62fd40bf75bf79af51b7d1d755618513af292a36104070e008762c6045a3c87835f06255c62812082f2002cdf6cdf9b4edfbe60b94b4c073c981b1b4433ff5bce34932000c02eadba6228b316166cebfa3a855dc4307093c75a2fa97a8467e3ee00e4556554")
writev(r3, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0x105}], 0x1)
socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x220c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x3)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r7, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x7)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r11, 0x0)

360.760242ms ago: executing program 5 (id=4735):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', <r2=>0x0, 0x80, 0x700, 0x7ff, 0x3, {{0xb, 0x4, 0x0, 0x30, 0x2c, 0x64, 0x0, 0xf6, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xb}, {[@generic={0x86, 0xe, "6557de8b331201182e621e38"}, @timestamp={0x44, 0x8, 0x8b, 0x0, 0x6, [0x76eb1c20]}, @noop, @noop]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=<r3=>0x0, &(0x7f0000000180)=0x4)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f00000001c0)={'gre0\x00', <r4=>0x0, 0x700, 0x8000, 0x0, 0xffff, {{0x1a, 0x4, 0x3, 0x10, 0x68, 0x65, 0x0, 0x0, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp={0x44, 0xc, 0x2f, 0x0, 0x8, [0xfff, 0x15e]}, @rr={0x7, 0x1b, 0x11, [@local, @rand_addr=0x64010100, @local, @broadcast, @multicast2, @broadcast]}, @timestamp={0x44, 0x18, 0xb5, 0x0, 0x5, [0x8af, 0x8, 0xc7, 0x9, 0x8]}, @timestamp={0x44, 0x14, 0xde, 0x0, 0x6, [0x3, 0x0, 0x1ff, 0x8]}]}}}}})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=<r5=>0x0, &(0x7f0000000300)=0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'dvmrp0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb0, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@bridge_newneigh={0x64, 0x1c, 0x1, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x0, r3, 0x0, 0x0, 0xa}, [@NDA_VNI={0x8, 0x7, 0x2}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_LLADDR={0xa, 0x2, @remote}, @NDA_DST_IPV4={0x8, 0x1, @multicast2}, @NDA_SRC_VNI={0x8, 0xb, 0x3}, @NDA_CACHEINFO={0x14, 0x3, {0x7, 0xffffffff, 0x7, 0x2}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x1}]}, 0x64}}, 0x840)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan3\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'wpan3\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wpan3\x00', <r12=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan0\x00', <r13=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wpan0\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan3\x00', <r15=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'wpan1\x00', <r16=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r9, &(0x7f0000000900)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x58, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004054)
openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x800, 0x0)
r17 = socket$nl_sock_diag(0x10, 0x3, 0x4)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r17, 0x10e, 0x5, &(0x7f0000000980)=0x2, 0x4)
r18 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r18, &(0x7f0000000b00)={&(0x7f00000009c0), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a00)={0xc0, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_DATA={0x4c, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xffff0001}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}, @IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xc0}, 0x1, 0x0, 0x0, 0x24000002}, 0x20008800)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFQNL_MSG_VERDICT(r18, &(0x7f0000000d00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10c, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x4}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}, @NFQA_EXP={0xb0, 0xf, 0x0, 0x1, [@CTA_EXPECT_MASTER={0x88, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @empty}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private2}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_ZONE={0x6}]}, @NFQA_PAYLOAD={0xf, 0xa, "21db0f3fffbcc47cc289fa"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_VLAN={0x1c, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x401}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x48004}, 0x1)
socket(0xa, 0x5, 0x931)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x9c, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:power_device_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:default_t:s0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:crond_var_run_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x24008000)
sendmsg$NET_DM_CMD_START(r9, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x14, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240040a1}, 0x45)

349.239376ms ago: executing program 3 (id=4736):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
sendmsg$sock(r1, &(0x7f00000002c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, 0x0}, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c)
sendto$inet6(r0, &(0x7f0000000100)="b8", 0xfef4, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9a, 0x7, 0x800, 0x1, 0x1, 0x4, 0x5}}, {0x4}}, {{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6, 0x80000}}, {0x4}}]}]}, 0x7c}}, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0xa2ec8b013dc0bd73, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x5}]}, 0x14}], 0x1}, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={0x0, 0xa000}, 0x8)

324.290282ms ago: executing program 2 (id=4737):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x1, 0xffffffff}}}}, @NHA_OIF={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0x4, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x51}, 0x0)
syz_emit_ethernet(0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {0x10}, {0x2, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x6, 0xa2d6, 0x33, 0xc}}}}]}, 0x48}}, 0x24008004)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'})
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', <r5=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x88, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503, 0x7440}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0x10005, 0xb}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_OPERSTATE={0x5, 0x10, 0xc3}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x80000000}, @IFLA_PHYS_PORT_ID={0xa, 0x22, '\\9 [,A'}]}, 0x88}, 0x1, 0x0, 0x0, 0x20004810}, 0x4000000)
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r6, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880)
socket$key(0xf, 0x3, 0x2)
socket$key(0xf, 0x3, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}, 0x1, 0x0, 0x0, 0x8040040}, 0x0)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0)

188.916351ms ago: executing program 5 (id=4738):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001800010000000000fedbdf251d01000008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402e78}, [@printk={@llx, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20, 0x300}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90ffffff}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x20}, 0x90)

103.794177ms ago: executing program 4 (id=4739):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'tunl0\x00', <r1=>0x0})
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="48000000100003002abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000280012800900010069706970000000001800028004001900080014000900000006000f"], 0x48}, 0x1, 0x2, 0x0, 0x801}, 0x0)

0s ago: executing program 4 (id=4740):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'syztnl1\x00', <r2=>0x0, 0x2f, 0x3, 0x8, 0x1, 0x0, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1, 0x20, 0x8, 0x9}})
bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xe, 0x10, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3bd388}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x4, 0x1, 0x5, 0xb, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a80)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x4, '\x00', r2, @fallback=0x34, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000bc0)={0x2, 0x4, 0x5, 0xfffffffd}, 0x10, 0x0, r0, 0x3, &(0x7f0000000c00), &(0x7f0000000c40)=[{0x2, 0x5, 0xb, 0x2}, {0x2, 0x1, 0xb, 0x8}, {0x0, 0x3, 0x9}], 0x10, 0xa}, 0x94) (async, rerun: 64)
r3 = socket$inet6(0xa, 0x3, 0x3) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r4, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={<r6=>r0, &(0x7f0000000100)='\x00', 0x400001, &(0x7f00000001c0)={@_ha_fsid={[0xd, 0x9]}, {0x2, 0x8, 0xcb1b, 0xe25}}, 0x8e, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1})
recvmsg$can_bcm(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000300)=""/98, 0x62}, {&(0x7f0000000380)=""/231, 0xe7}, {&(0x7f0000000540)=""/196, 0xc4}, {&(0x7f0000000640)=""/63, 0x3f}, {&(0x7f0000000680)=""/14, 0xe}, {&(0x7f00000006c0)=""/71, 0x47}, {&(0x7f0000000740)=""/233, 0xe9}], 0x7, &(0x7f00000008c0)=""/230, 0xe6}, 0x40002040)

kernel console output (not intermixed with test programs):

et [0, 0] type 1 family 0 port 8472 - 0
[  438.166957][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  438.210803][ T6156] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  438.351429][T17357] gtp0: entered promiscuous mode
[  438.365157][T17361] rdma_rxe: rxe_newlink: failed to add veth0_macvtap
[  438.389954][T17357] gtp0: entered allmulticast mode
[  438.452399][T17353] lo speed is unknown, defaulting to 1000
[  438.536355][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  438.578950][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3077'.
[  438.602009][T17366] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  438.662586][T17369] netlink: 'syz.3.3077': attribute type 1 has an invalid length.
[  438.690804][T17366] batman_adv: batadv0: Removing interface: batadv_slave_1
[  438.726032][T17369] netlink: 'syz.3.3077': attribute type 1 has an invalid length.
[  438.739848][T17369] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.3077'.
[  439.576421][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  439.629345][T17410] netlink: 'syz.3.3085': attribute type 11 has an invalid length.
[  439.784478][T17414] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3087'.
[  439.919134][T17353] chnl_net:caif_netlink_parms(): no params data found
[  440.057785][T17433] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3090'.
[  440.228872][   T51] Bluetooth: hci0: command tx timeout
[  440.293386][T17353] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.322626][T17353] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.330483][T17353] bridge_slave_0: entered allmulticast mode
[  440.368036][T17353] bridge_slave_0: entered promiscuous mode
[  440.418639][T17353] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.463320][T17353] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.474976][T17353] bridge_slave_1: entered allmulticast mode
[  440.498220][T17353] bridge_slave_1: entered promiscuous mode
[  440.616330][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  440.678870][T17353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.757942][T17353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.949066][T17353] team0: Port device team_slave_0 added
[  440.977424][T17353] team0: Port device team_slave_1 added
[  440.985987][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3098'.
[  441.199941][T17353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  441.238308][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.298003][T17353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  441.320156][T17353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  441.329855][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  441.441233][T17353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  441.656470][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  441.741210][T17353] hsr_slave_0: entered promiscuous mode
[  441.789097][T17353] hsr_slave_1: entered promiscuous mode
[  441.818834][T17353] debugfs: 'hsr0' already exists in 'hsr'
[  441.846799][T17353] Cannot create hsr debugfs directory
[  441.952815][T17511] netlink: 'syz.2.3106': attribute type 1 has an invalid length.
[  442.160593][T17516] bond0: entered promiscuous mode
[  442.165720][T17516] bond0: entered allmulticast mode
[  442.219743][T17516] 8021q: adding VLAN 0 to HW filter on device bond0
[  442.247947][T17511] bridge8: entered promiscuous mode
[  442.262705][T17511] bridge8: entered allmulticast mode
[  442.276935][ T6154] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  442.296262][   T51] Bluetooth: hci0: command tx timeout
[  442.306632][T17511] bond0: (slave bridge8): Enslaving as an active interface with an up link
[  442.400037][T17516] bridge9: entered promiscuous mode
[  442.431304][T17516] bridge9: entered allmulticast mode
[  442.447019][ T6162] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  442.472355][T17516] bond0: (slave bridge9): Enslaving as a backup interface with a down link
[  442.522408][T17517] lo speed is unknown, defaulting to 1000
[  442.696458][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  443.085499][T17541] lo speed is unknown, defaulting to 1000
[  443.323396][T17353] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.356359][T17353] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  443.376490][T17353] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  443.413492][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3115'.
[  443.521187][T17353] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.542859][T17353] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  443.562844][T17353] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  443.681341][T17561] bond9: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  443.736786][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  443.739392][T17561] bond9 (unregistering): Released all slaves
[  443.795066][T17566] syzkaller1: entered promiscuous mode
[  443.813063][T17566] syzkaller1: entered allmulticast mode
[  443.836331][T17353] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.870316][T17353] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  443.894174][T17353] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  443.995241][T17571] macvlan0: entered promiscuous mode
[  444.155506][T17353] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.178852][T17353] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0
[  444.223507][T17353] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  444.376878][   T51] Bluetooth: hci0: command tx timeout
[  444.640150][T17589] bond2: (slave ip6gretap1): making interface the new active one
[  444.659915][T17589] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  444.776836][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  445.013961][T17353] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  445.023369][T17611] delete_channel: no stack
[  445.093718][T17353] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  445.165385][T17353] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  445.236842][T17353] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  445.494858][T17637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3129'.
[  445.703267][T17644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3132'.
[  445.785402][T17353] 8021q: adding VLAN 0 to HW filter on device bond0
[  445.816439][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  445.847860][T17353] 8021q: adding VLAN 0 to HW filter on device team0
[  445.864971][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state
[  445.872319][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state
[  445.885438][T17649] netlink: 'syz.4.3133': attribute type 1 has an invalid length.
[  445.926408][T17649] netlink: 'syz.4.3133': attribute type 2 has an invalid length.
[  445.952000][T17653] IPv6: NLM_F_CREATE should be specified when creating new route
[  446.018608][T17654] pim6reg: entered allmulticast mode
[  446.033033][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.040376][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.382577][T17676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'.
[  446.460691][   T51] Bluetooth: hci0: command tx timeout
[  446.682317][T17691] netlink: 'syz.4.3140': attribute type 4 has an invalid length.
[  446.748998][T17691] netlink: 'syz.4.3140': attribute type 1 has an invalid length.
[  446.784272][T17691] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3140'.
[  446.856463][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  447.015617][T17353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.044701][T17710] netlink: 'syz.4.3145': attribute type 33 has an invalid length.
[  447.187545][T17716] ip6gre1: entered allmulticast mode
[  447.220486][T17353] veth0_vlan: entered promiscuous mode
[  447.261444][T17353] veth1_vlan: entered promiscuous mode
[  447.358977][T17353] veth0_macvtap: entered promiscuous mode
[  447.389623][T17353] veth1_macvtap: entered promiscuous mode
[  447.397946][T17722] netlink: 'syz.5.3148': attribute type 1 has an invalid length.
[  447.412674][T17724] openvswitch: netlink: IPv4 tun info is not correct
[  447.432081][T17724] sctp: [Deprecated]: syz.4.3149 (pid 17724) Use of int in maxseg socket option.
[  447.432081][T17724] Use struct sctp_assoc_value instead
[  447.504101][T17722] 8021q: adding VLAN 0 to HW filter on device bond2
[  447.555243][T17728] veth3: entered promiscuous mode
[  447.670540][T17727] 8021q: adding VLAN 0 to HW filter on device bond2
[  447.679615][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3150'.
[  447.691054][T17727] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  447.704278][T17727] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  447.760898][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3150'.
[  447.851740][T17353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  447.896463][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  447.928781][T17353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  448.027541][ T6156] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  448.060276][ T6156] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  448.110893][ T6156] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  448.192356][ T6156] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  448.483411][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.520423][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.613230][ T6154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  448.660768][ T6154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  448.731245][T17775] 8021q: adding VLAN 0 to HW filter on device bond1
[  448.936581][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  448.950281][T17787] atomic_op ffff88805b288198 conn xmit_atomic 0000000000000000
[  449.393276][T17799] netlink: 212336 bytes leftover after parsing attributes in process `syz.5.3167'.
[  449.607746][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  449.632734][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  449.643906][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  449.652386][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  449.662094][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  449.822780][T17805] lo speed is unknown, defaulting to 1000
[  449.827388][T17814] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3170'.
[  449.967388][T17818] syzkaller0: entered promiscuous mode
[  449.972934][T17818] syzkaller0: entered allmulticast mode
[  449.978857][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  450.012523][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.019845][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.026437][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.032979][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.039668][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.046150][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.052909][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.059503][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.065968][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.072513][T17814] tc action pedit 'at' offset 65537 out of bounds
[  450.079287][T17814] 0: reclassify loop, rule prio 0, protocol 800
[  450.098344][T17820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3172'.
[  450.825284][T17855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3182'.
[  451.000306][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'.
[  451.016396][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  451.210701][T17805] chnl_net:caif_netlink_parms(): no params data found
[  451.340819][T17880] netlink: 'syz.5.3186': attribute type 1 has an invalid length.
[  451.352682][T17880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3186'.
[  451.536921][T17805] bridge0: port 1(bridge_slave_0) entered blocking state
[  451.544955][T17805] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.552868][T17805] bridge_slave_0: entered allmulticast mode
[  451.562445][T17805] bridge_slave_0: entered promiscuous mode
[  451.573504][T17805] bridge0: port 2(bridge_slave_1) entered blocking state
[  451.584045][T17805] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.592136][T17805] bridge_slave_1: entered allmulticast mode
[  451.602103][T17805] bridge_slave_1: entered promiscuous mode
[  451.645185][T17894] nbd: must specify a size in bytes for the device
[  451.670695][T17805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  451.704230][T17805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  451.741839][   T51] Bluetooth: hci4: command tx timeout
[  451.803488][T17904] netlink: 6040 bytes leftover after parsing attributes in process `syz.5.3192'.
[  451.848333][T17805] team0: Port device team_slave_0 added
[  451.929947][T17805] team0: Port device team_slave_1 added
[  451.979020][T17906] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  452.004036][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'.
[  452.056330][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  452.067948][T17913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3195'.
[  452.071122][T17805] batman_adv: batadv0: Adding interface: batadv_slave_0
[  452.094595][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.146473][T17805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  452.175489][ T1103] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  452.197322][ T1103] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  452.281190][T17805] batman_adv: batadv0: Adding interface: batadv_slave_1
[  452.295293][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.343717][T17805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  452.361976][ T1103] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  452.406239][ T1103] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  452.494279][T17924] batman_adv: batadv0: Adding interface: ipvlan2
[  452.506184][T17924] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  452.576040][T17924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  452.618464][T17924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  452.619903][T17940] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  452.631653][T17924] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active
[  452.767545][T17805] hsr_slave_0: entered promiscuous mode
[  452.783939][T17805] hsr_slave_1: entered promiscuous mode
[  452.804801][T17805] debugfs: 'hsr0' already exists in 'hsr'
[  452.814897][T17945] netlink: 'syz.4.3205': attribute type 1 has an invalid length.
[  452.823847][T17805] Cannot create hsr debugfs directory
[  452.830974][T17945] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3205'.
[  452.884897][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'.
[  452.927609][T17946] bridge_slave_1: left allmulticast mode
[  452.954193][T17946] bridge_slave_1: left promiscuous mode
[  452.979132][T17946] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.001293][T17946] bridge_slave_0: left allmulticast mode
[  453.008015][T17946] bridge_slave_0: left promiscuous mode
[  453.014061][T17946] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.096368][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  453.629250][T17979] netlink: 'syz.5.3215': attribute type 2 has an invalid length.
[  453.642379][T17805] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.655309][T17805] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.663120][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'.
[  453.680356][T17982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'.
[  453.703262][T17974] IPv6: NLM_F_CREATE should be specified when creating new route
[  453.717962][T17974] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3214'.
[  453.822519][   T51] Bluetooth: hci4: command tx timeout
[  453.853764][T17805] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  453.867898][T17805] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  453.999565][T17994] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3220'.
[  454.015224][T17805] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  454.040321][T17805] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.113712][T18002] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  454.136436][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  454.258776][T17805] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  454.299780][T17805] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  454.394278][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3224'.
[  454.577045][T18020] bond3 (unregistering): Released all slaves
[  454.858561][T18033] xt_socket: unknown flags 0x50
[  454.912843][T17805] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  454.951283][T17805] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  454.975182][T17805] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  455.010420][T17805] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  455.154936][T17805] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.176424][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  455.191682][T17805] 8021q: adding VLAN 0 to HW filter on device team0
[  455.211671][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.219216][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.248784][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.256421][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.278428][T18046] syzkaller0: entered promiscuous mode
[  455.284579][T18046] syzkaller0: entered allmulticast mode
[  455.297892][T18046] 0: reclassify loop, rule prio 0, protocol 800
[  455.898662][   T51] Bluetooth: hci4: command tx timeout
[  456.184431][T17805] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.216390][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  456.384778][T18094] bond2: entered promiscuous mode
[  456.391453][T18094] 8021q: adding VLAN 0 to HW filter on device bond2
[  456.497359][T18100] bridge2: entered promiscuous mode
[  456.503968][T18100] bond2: (slave bridge2): Enslaving as an active interface with an up link
[  456.563111][T18103] macvlan2: entered promiscuous mode
[  456.587217][T18103] macvlan2: entered allmulticast mode
[  456.708693][T17805] veth0_vlan: entered promiscuous mode
[  456.762160][T17805] veth1_vlan: entered promiscuous mode
[  456.889214][T18119] syzkaller0: entered promiscuous mode
[  456.894848][T18119] syzkaller0: entered allmulticast mode
[  456.998546][T17805] veth0_macvtap: entered promiscuous mode
[  457.130453][T17805] veth1_macvtap: entered promiscuous mode
[  457.171872][T17805] batman_adv: batadv0: Interface activated: batadv_slave_0
[  457.195190][T18131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  457.211673][T17805] batman_adv: batadv0: Interface activated: batadv_slave_1
[  457.256322][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  457.267628][ T1005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  457.300146][ T1005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  457.321190][ T1005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  457.334598][ T1005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  457.540850][T18144] __nla_validate_parse: 7 callbacks suppressed
[  457.540870][T18144] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3264'.
[  457.595906][ T6162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.615707][ T6162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.675845][T18144] 8021q: adding VLAN 0 to HW filter on device bond3
[  457.721597][ T6154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.729752][ T6154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.801595][T18156] block nbd2: Unsupported socket: should be TCP or UNIX.
[  457.821546][T18156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3268'.
[  457.977353][   T51] Bluetooth: hci4: command tx timeout
[  458.038326][T18167] netlink: 'syz.2.3164': attribute type 21 has an invalid length.
[  458.088375][T18169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3269'.
[  458.296352][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  458.407134][T18189] netlink: 'syz.2.3275': attribute type 12 has an invalid length.
[  458.531848][T18189] bond1: option primary_reselect: invalid value (255)
[  458.561085][T18189] bond1 (unregistering): Released all slaves
[  458.733535][T18204] netlink: 'syz.4.3281': attribute type 1 has an invalid length.
[  458.781920][T18204] 8021q: adding VLAN 0 to HW filter on device bond3
[  458.803520][T18204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3281'.
[  458.878937][T18204] bond3: (slave gretap1): making interface the new active one
[  458.914108][T18204] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  458.967407][T18210] macvlan3: entered promiscuous mode
[  458.973047][T18210] macvlan3: entered allmulticast mode
[  459.029978][T18213] netlink: 'syz.1.3284': attribute type 4 has an invalid length.
[  459.040423][T18213] netlink: 240 bytes leftover after parsing attributes in process `syz.1.3284'.
[  459.212179][T18223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3286'.
[  459.223781][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3286'.
[  459.268992][T18227] netlink: 'syz.4.3287': attribute type 3 has an invalid length.
[  459.289562][T18227] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3287'.
[  459.320002][T18227] xt_TCPMSS: Only works on TCP SYN packets
[  459.336361][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  459.829570][T18255] debugfs: 'KŠŸu™crµ±K:‘£ÿˆÌ¥ÝB�ßÝ£|“¼ÚÞlS·œ-!' already exists in 'ieee80211'
[  459.931765][T18262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3294'.
[  460.105394][T18262] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3294'.
[  460.376336][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  460.533425][T18299] syzkaller0: entered promiscuous mode
[  460.547179][T18299] FAULT_INJECTION: forcing a failure.
[  460.547179][T18299] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  460.614499][T18299] CPU: 0 UID: 0 PID: 18299 Comm: syz.4.3305 Not tainted syzkaller #0 PREEMPT(full) 
[  460.614529][T18299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  460.614541][T18299] Call Trace:
[  460.614549][T18299]  <TASK>
[  460.614558][T18299]  dump_stack_lvl+0xe8/0x150
[  460.614592][T18299]  should_fail_ex+0x412/0x560
[  460.614637][T18299]  _copy_from_user+0x2d/0xb0
[  460.614659][T18299]  __sys_sendto+0x2b0/0x710
[  460.614685][T18299]  ? __pfx___sys_sendto+0x10/0x10
[  460.614703][T18299]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  460.614739][T18299]  ? __fget_files+0x3a0/0x420
[  460.614778][T18299]  ? ksys_write+0x242/0x270
[  460.614803][T18299]  ? __pfx_ksys_write+0x10/0x10
[  460.614833][T18299]  __x64_sys_sendto+0xde/0x100
[  460.614859][T18299]  do_syscall_64+0x14d/0xf80
[  460.614881][T18299]  ? trace_irq_disable+0x3b/0x150
[  460.614897][T18299]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.614916][T18299]  ? clear_bhb_loop+0x40/0x90
[  460.614941][T18299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.614961][T18299] RIP: 0033:0x7f8f3859c819
[  460.614982][T18299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  460.615000][T18299] RSP: 002b:00007f8f3948a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  460.615023][T18299] RAX: ffffffffffffffda RBX: 00007f8f38815fa0 RCX: 00007f8f3859c819
[  460.615038][T18299] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000007
[  460.615051][T18299] RBP: 00007f8f3948a090 R08: 00002000000001c0 R09: 0000000000000014
[  460.615064][T18299] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001
[  460.615078][T18299] R13: 00007f8f38816038 R14: 00007f8f38815fa0 R15: 00007ffdf1e4b918
[  460.615112][T18299]  </TASK>
[  461.002173][T18315] netlink: 'syz.3.3311': attribute type 1 has an invalid length.
[  461.135481][T18315] bond1: entered promiscuous mode
[  461.153307][T18315] 8021q: adding VLAN 0 to HW filter on device bond1
[  461.250733][T18330] netlink: 'syz.4.3316': attribute type 11 has an invalid length.
[  461.260658][T18319] bond1: (slave bridge1): making interface the new active one
[  461.268986][T18319] bridge1: entered promiscuous mode
[  461.277886][T18319] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  461.294537][T18323] veth0_to_team: entered promiscuous mode
[  461.312543][T18323] veth0_to_team: left promiscuous mode
[  461.416612][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  461.612374][T18344] netdevsim netdevsim5: Firmware load for '..' refused, path contains '..' component
[  461.621473][T18351] netlink: 'syz.1.3323': attribute type 6 has an invalid length.
[  461.696701][T18351] netlink: 'syz.1.3323': attribute type 5 has an invalid length.
[  461.737300][T18351] netlink: 'syz.1.3323': attribute type 2 has an invalid length.
[  461.771948][T18354] syzkaller0: entered promiscuous mode
[  461.783586][T18354] FAULT_INJECTION: forcing a failure.
[  461.783586][T18354] name failslab, interval 1, probability 0, space 0, times 1
[  461.824890][T18354] CPU: 0 UID: 0 PID: 18354 Comm: syz.5.3324 Not tainted syzkaller #0 PREEMPT(full) 
[  461.824922][T18354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  461.824935][T18354] Call Trace:
[  461.824944][T18354]  <TASK>
[  461.824952][T18354]  dump_stack_lvl+0xe8/0x150
[  461.824987][T18354]  should_fail_ex+0x412/0x560
[  461.825023][T18354]  should_failslab+0xa8/0x100
[  461.825051][T18354]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  461.825074][T18354]  ? __alloc_skb+0x186/0x7d0
[  461.825096][T18354]  ? __alloc_skb+0x1d0/0x7d0
[  461.825114][T18354]  ? __local_bh_enable_ip+0xd0/0x130
[  461.825147][T18354]  __alloc_skb+0x1d0/0x7d0
[  461.825174][T18354]  alloc_skb_with_frags+0xca/0x890
[  461.825198][T18354]  ? __lock_acquire+0x6b5/0x2cf0
[  461.825229][T18354]  ? __lock_acquire+0x6b5/0x2cf0
[  461.825260][T18354]  sock_alloc_send_pskb+0x878/0x990
[  461.825302][T18354]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  461.825343][T18354]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  461.825375][T18354]  ? dev_get_by_index+0x22/0x2e0
[  461.825402][T18354]  ? dev_get_by_index+0x22/0x2e0
[  461.825435][T18354]  packet_sendmsg+0x33e5/0x50f0
[  461.825466][T18354]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  461.825499][T18354]  ? __lock_acquire+0x6b5/0x2cf0
[  461.825537][T18354]  ? __lock_acquire+0x6b5/0x2cf0
[  461.825581][T18354]  ? aa_sk_perm+0x6d5/0x900
[  461.825607][T18354]  ? __pfx_packet_sendmsg+0x10/0x10
[  461.825638][T18354]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  461.825677][T18354]  ? aa_sock_msg_perm+0xf1/0x1b0
[  461.825708][T18354]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  461.825732][T18354]  ? __pfx_packet_sendmsg+0x10/0x10
[  461.825754][T18354]  __sys_sendto+0x672/0x710
[  461.825779][T18354]  ? __pfx___sys_sendto+0x10/0x10
[  461.825798][T18354]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  461.825838][T18354]  ? __fget_files+0x3a0/0x420
[  461.825880][T18354]  ? ksys_write+0x242/0x270
[  461.825911][T18354]  ? __pfx_ksys_write+0x10/0x10
[  461.825940][T18354]  __x64_sys_sendto+0xde/0x100
[  461.825966][T18354]  do_syscall_64+0x14d/0xf80
[  461.825988][T18354]  ? trace_irq_disable+0x3b/0x150
[  461.826005][T18354]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.826025][T18354]  ? clear_bhb_loop+0x40/0x90
[  461.826051][T18354]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  461.826071][T18354] RIP: 0033:0x7f499c59c819
[  461.826090][T18354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  461.826107][T18354] RSP: 002b:00007f499d380028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  461.826129][T18354] RAX: ffffffffffffffda RBX: 00007f499c815fa0 RCX: 00007f499c59c819
[  461.826144][T18354] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000007
[  461.826156][T18354] RBP: 00007f499d380090 R08: 00002000000001c0 R09: 0000000000000014
[  461.826168][T18354] R10: 0000000004000050 R11: 0000000000000246 R12: 0000000000000001
[  461.826181][T18354] R13: 00007f499c816038 R14: 00007f499c815fa0 R15: 00007ffdf33cab98
[  461.826224][T18354]  </TASK>
[  462.429205][T18370] xt_socket: unknown flags 0x50
[  462.456329][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  462.537705][T18377] x_tables: unsorted underflow at hook 2
[  462.860539][T18392] x_tables: unsorted underflow at hook 2
[  462.942490][T18403] x_tables: unsorted underflow at hook 2
[  462.945894][T18393] netlink: 'syz.4.3336': attribute type 21 has an invalid length.
[  463.006738][T18393] __nla_validate_parse: 14 callbacks suppressed
[  463.006760][T18393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3336'.
[  463.247320][T18412] netlink: 'syz.1.3340': attribute type 21 has an invalid length.
[  463.263574][T18412] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3340'.
[  463.301895][T18414] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3341'.
[  463.315204][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'.
[  463.320714][T18415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3332'.
[  463.364806][T18412] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  463.391575][T18419] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048)
[  463.421578][T18417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  463.496416][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  463.988468][T18443] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3349'.
[  464.099035][T18445] netlink: 'syz.2.3350': attribute type 1 has an invalid length.
[  464.312237][T18456] netlink: 'syz.4.3354': attribute type 1 has an invalid length.
[  464.337168][T18456] netlink: 'syz.4.3354': attribute type 2 has an invalid length.
[  464.533476][T18456] bridge0: port 2(bridge_slave_1) entered disabled state
[  464.541484][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  464.570497][T18466] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3358'.
[  464.602489][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3358'.
[  464.940299][T18483] netlink: 'syz.5.3365': attribute type 1 has an invalid length.
[  464.949302][T18483] netlink: 'syz.5.3365': attribute type 7 has an invalid length.
[  464.958255][T18483] netlink: 'syz.5.3365': attribute type 8 has an invalid length.
[  464.967945][T18483] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3365'.
[  465.003849][T18485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3366'.
[  465.114484][T18489] lo speed is unknown, defaulting to 1000
[  465.576308][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  465.677319][T18512] syzkaller0: entered promiscuous mode
[  466.000758][T18526] netlink: 'syz.5.3379': attribute type 1 has an invalid length.
[  466.070400][T18526] bond4: entered promiscuous mode
[  466.076905][T18526] 8021q: adding VLAN 0 to HW filter on device bond4
[  466.272745][T18526] bond4: (slave bridge2): making interface the new active one
[  466.297101][T18526] bridge2: entered promiscuous mode
[  466.308536][T18526] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  466.345219][T18531] veth1_virt_wifi: Device is already in use.
[  466.501062][T18547] FAULT_INJECTION: forcing a failure.
[  466.501062][T18547] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  466.598556][T18542] syzkaller0: entered promiscuous mode
[  466.616403][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  466.625239][T18547] CPU: 1 UID: 0 PID: 18547 Comm: syz.4.3383 Not tainted syzkaller #0 PREEMPT(full) 
[  466.625270][T18547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  466.625281][T18547] Call Trace:
[  466.625289][T18547]  <TASK>
[  466.625297][T18547]  dump_stack_lvl+0xe8/0x150
[  466.625333][T18547]  should_fail_ex+0x412/0x560
[  466.625370][T18547]  _copy_to_user+0x31/0xb0
[  466.625406][T18547]  simple_read_from_buffer+0xe1/0x170
[  466.625442][T18547]  proc_fail_nth_read+0x1bb/0x230
[  466.625475][T18547]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  466.625507][T18547]  ? rw_verify_area+0x2a6/0x4d0
[  466.625526][T18547]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  466.625555][T18547]  vfs_read+0x20c/0xa70
[  466.625573][T18547]  ? fdget_pos+0x246/0x320
[  466.625595][T18547]  ? __pfx___mutex_lock+0x10/0x10
[  466.625619][T18547]  ? __pfx_vfs_read+0x10/0x10
[  466.625641][T18547]  ? __fget_files+0x2a/0x420
[  466.625673][T18547]  ? __fget_files+0x3a0/0x420
[  466.625699][T18547]  ? __fget_files+0x2a/0x420
[  466.625733][T18547]  ksys_read+0x150/0x270
[  466.625756][T18547]  ? __pfx_ksys_read+0x10/0x10
[  466.625791][T18547]  do_syscall_64+0x14d/0xf80
[  466.625812][T18547]  ? trace_irq_disable+0x3b/0x150
[  466.625830][T18547]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.625849][T18547]  ? clear_bhb_loop+0x40/0x90
[  466.625872][T18547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.625891][T18547] RIP: 0033:0x7f8f3855d04e
[  466.625910][T18547] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  466.625928][T18547] RSP: 002b:00007f8f39447fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  466.625951][T18547] RAX: ffffffffffffffda RBX: 00007f8f394486c0 RCX: 00007f8f3855d04e
[  466.625966][T18547] RDX: 000000000000000f RSI: 00007f8f394480a0 RDI: 0000000000000009
[  466.625978][T18547] RBP: 00007f8f39448090 R08: 0000000000000000 R09: 0000000000000000
[  466.625989][T18547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.626001][T18547] R13: 00007f8f38816218 R14: 00007f8f38816180 R15: 00007ffdf1e4b918
[  466.626032][T18547]  </TASK>
[  467.656320][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  468.696412][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  469.738450][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  469.855468][   T24] IPVS: starting estimator thread 0...
[  469.903494][T18602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  469.910951][T18602] IPv6: NLM_F_CREATE should be set when creating new route
[  469.921434][T18602] __nla_validate_parse: 3 callbacks suppressed
[  469.921459][T18602] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3394'.
[  469.966756][T18600] IPVS: using max 27 ests per chain, 64800 per kthread
[  470.192813][T18606] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.295587][T18596] lo speed is unknown, defaulting to 1000
[  470.341421][T18613] tipc: Started in network mode
[  470.350508][T18613] tipc: Node identity ac141441, cluster identity 4711
[  470.363564][T18613] tipc: Enabled bearer <udp:syz2>, priority 10
[  470.492408][T18606] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.613929][T18606] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.776405][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  470.805297][T18606] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.105355][ T6152] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  471.157523][T18627] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  471.222203][T18627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3400'.
[  471.242665][   T58] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  471.305836][   T58] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  471.348326][T18636] Bluetooth: MGMT ver 1.23
[  471.388246][ T5921] tipc: Node number set to 2886997057
[  471.455127][T18636] : entered promiscuous mode
[  471.462502][T16114] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  471.651356][T18642] x_tables: unsorted underflow at hook 4
[  471.816278][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  471.834828][T18652] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3407'.
[  471.924024][T18654] syzkaller0: entered promiscuous mode
[  471.930820][T18654] syzkaller0: entered allmulticast mode
[  472.014618][T18656] IPv6: Can't replace route, no match found
[  472.031056][T18656] IPv6: Can't replace route, no match found
[  472.394107][T18676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3417'.
[  472.470413][T18678] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3418'.
[  472.582274][T18683] netlink: 'syz.2.3420': attribute type 1 has an invalid length.
[  472.617706][T18683] bond1: entered promiscuous mode
[  472.623694][T18683] 8021q: adding VLAN 0 to HW filter on device bond1
[  472.665266][T18683] bond1: (slave bridge1): making interface the new active one
[  472.673478][T18683] bridge1: entered promiscuous mode
[  472.683319][T18683] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  472.856300][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  473.183924][T18717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3431'.
[  473.205675][T18709] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.213355][T18709] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.272200][T18709] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  473.301259][T18718] tipc: Started in network mode
[  473.307132][T18718] tipc: Node identity , cluster identity 4711
[  473.313859][T18718] tipc: Failed to set node id, please configure manually
[  473.322267][T18718] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  473.896290][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  474.143630][T18755] sctp: [Deprecated]: syz.3.3443 (pid 18755) Use of int in max_burst socket option.
[  474.143630][T18755] Use struct sctp_assoc_value instead
[  474.473911][T18776] netlink: 'syz.1.3449': attribute type 2 has an invalid length.
[  474.571919][T18785] netlink: 'syz.2.3450': attribute type 10 has an invalid length.
[  474.601003][T18785] team0 (unregistering): Port device team_slave_0 removed
[  474.639120][T18785] team0 (unregistering): Port device team_slave_1 removed
[  474.906401][T18796] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0
[  474.936313][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  474.945757][T18796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3452'.
[  475.172076][T18809] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  475.226781][T18809] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  475.235382][T18809] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  475.422409][T18821] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3459'.
[  475.578225][T18821] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.591380][T18821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.611989][T18821] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.632222][T18821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.668278][T18821] batman_adv: batadv0: Removing interface: ipvlan2
[  475.970725][T18838] bond4: entered promiscuous mode
[  475.976362][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  476.004846][T18838] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3463'.
[  476.041743][T18837] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  476.054469][T18838] netlink: 'syz.4.3463': attribute type 1 has an invalid length.
[  476.065230][T18838] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3463'.
[  476.090200][T18837] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  476.098612][T18838] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3463'.
[  476.098637][T18838] netlink: 'syz.4.3463': attribute type 1 has an invalid length.
[  476.098655][T18838] netlink: 'syz.4.3463': attribute type 8 has an invalid length.
[  476.098669][T18838] netlink: 606 bytes leftover after parsing attributes in process `syz.4.3463'.
[  476.199151][T18837] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  476.216866][T18837] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  476.241318][T18837] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  476.253274][T18837] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  476.284845][T18837] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  476.320031][T18837] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  476.360492][T18837] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  476.373428][T18837] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  476.639726][T18868] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3471'.
[  476.774064][T18879] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3472'.
[  476.808712][T18879] 8021q: VLANs not supported on ip_vti0
[  476.869615][T18885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3476'.
[  477.016292][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  477.044527][T18892] nftables ruleset with unbound set
[  477.095331][T18896] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3479'.
[  477.141683][T18896] F: renamed from gre0 (while UP)
[  477.155429][T18849] lec:lec_atm_close: lec0: Shut down!
[  477.184230][T18896] F: entered allmulticast mode
[  477.844456][T18919] netlink: 'syz.1.3486': attribute type 1 has an invalid length.
[  478.057130][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  478.074410][T18935] syzkaller0: entered promiscuous mode
[  478.087317][T18935] syzkaller0: entered allmulticast mode
[  478.093555][T18940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  478.119002][T18941] syzkaller0: entered promiscuous mode
[  478.806634][ T5914] lec:lec_start_xmit: lec0:No lecd attached
[  479.096344][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  479.942004][T19006] syzkaller0: entered promiscuous mode
[  479.991425][T19010] __nla_validate_parse: 6 callbacks suppressed
[  479.991445][T19010] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3509'.
[  480.088318][T19015] xt_hashlimit: size too large, truncated to 1048576
[  480.089585][T19014] xt_check_match: 1 callbacks suppressed
[  480.089602][T19014] x_tables: ip_tables: udp match: only valid for protocol 17
[  480.136255][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  480.213730][T19014] netlink: 212340 bytes leftover after parsing attributes in process `syz.5.3511'.
[  480.248061][T19014] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  480.298402][T19014] netlink: 'syz.5.3511': attribute type 1 has an invalid length.
[  480.341726][T19027] Unsupported ieee802154 address type: 0
[  480.443085][T19014] 8021q: adding VLAN 0 to HW filter on device bond6
[  480.535383][T19024] bond6: (slave geneve2): making interface the new active one
[  480.545749][T19024] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  480.871779][T19055] nbd: must specify an index to disconnect
[  480.954163][T19054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3522'.
[  481.107460][T19069] netlink: 'syz.4.3527': attribute type 22 has an invalid length.
[  481.115349][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3527'.
[  481.176379][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  481.207825][T19072] netem: unknown loss type 0
[  481.213225][T19072] netem: change failed
[  481.214627][T19069] netlink: 'syz.4.3527': attribute type 22 has an invalid length.
[  481.231006][T19069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3527'.
[  481.243067][T16114] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  481.257747][T16114] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  481.280299][T19070] syzkaller0: entered promiscuous mode
[  481.294680][T19070] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3526'.
[  481.304298][T19070] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3526'.
[  481.313968][T16114] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  481.329713][T16114] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  481.349997][T19070] syz_tun: entered promiscuous mode
[  481.405432][T19070] syz_tun: left promiscuous mode
[  481.529395][T19084] xt_TPROXY: Can be used only with -p tcp or -p udp
[  481.550947][T19086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3533'.
[  481.577016][T19086] openvswitch: netlink: Geneve option length err (len 272, max 255).
[  481.605718][T19091] netlink: 'syz.4.3534': attribute type 1 has an invalid length.
[  481.624039][T19091] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3534'.
[  481.649714][T19093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3535'.
[  482.216349][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  482.542834][T19131] netlink: 'syz.1.3546': attribute type 2 has an invalid length.
[  482.575838][T19132] nbd: must specify at least one socket
[  482.683691][T19100] tipc: Started in network mode
[  482.708277][T19100] tipc: Node identity a61fdb068b2b, cluster identity 4711
[  482.774011][T19100] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  482.810341][T19100] tipc: Resetting bearer <eth:syzkaller0>
[  482.844096][T19143] syzkaller0: entered promiscuous mode
[  482.867579][T19143] syzkaller0: entered allmulticast mode
[  482.905389][T19097] tipc: Resetting bearer <eth:syzkaller0>
[  482.968936][T19097] tipc: Disabling bearer <eth:syzkaller0>
[  483.130592][T19152] syzkaller0: entered promiscuous mode
[  483.148841][T19157] netlink: 'syz.2.3551': attribute type 1 has an invalid length.
[  483.241227][T19157] bond2: entered promiscuous mode
[  483.256407][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  483.261851][T19157] 8021q: adding VLAN 0 to HW filter on device bond2
[  483.371799][T19163] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  483.387666][T19171] xt_policy: too many policy elements
[  483.422929][T19163] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  483.439490][T19163] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  483.533967][T19166] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  483.549223][T19166] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  483.702835][T19180] netlink: 'syz.4.3557': attribute type 39 has an invalid length.
[  483.808761][T19192] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  483.830876][T19194] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  483.845108][T19186] netlink: 'syz.1.3561': attribute type 4 has an invalid length.
[  484.254930][T19212] netlink: 'syz.2.3565': attribute type 32 has an invalid length.
[  484.296479][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  484.312787][T19212] bond3: option coupled_control: invalid value (192)
[  484.380730][T19212] bond3 (unregistering): Released all slaves
[  484.456117][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5650 ms
[  484.465041][    C1] lec:lec_tx_timeout: lec0
[  484.471396][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  484.608725][T19230] syzkaller0: entered promiscuous mode
[  485.145154][T19254] __nla_validate_parse: 10 callbacks suppressed
[  485.145178][T19254] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3575'.
[  485.336278][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  486.382990][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  487.353092][T19216] netlink: 'syz.1.3568': attribute type 29 has an invalid length.
[  487.416265][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  488.456331][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  489.496362][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  490.099977][T19305] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0
[  490.165016][T19313] macsec1: entered promiscuous mode
[  490.216121][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  490.224511][    C1] lec:lec_tx_timeout: lec0
[  490.231032][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  490.536281][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  490.545116][T19330] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3593'.
[  490.594031][T19328] syzkaller0: entered promiscuous mode
[  490.760029][T19342] netlink: 'syz.4.3596': attribute type 4 has an invalid length.
[  490.847065][T19345] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  490.947599][T19354] netlink: 'syz.2.3598': attribute type 24 has an invalid length.
[  491.576281][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  491.971966][T19392] tipc: Failed to remove unknown binding: 66,0,0/0:1177313707/1177313708
[  492.038946][T19392] tipc: Failed to remove unknown binding: 66,0,0/0:1177313707/1177313708
[  492.089484][T19393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3607'.
[  492.126790][T19393] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3607'.
[  492.387451][T19406] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3610'.
[  492.572841][T19412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3611'.
[  492.616251][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  492.730119][T19422] netlink: 'syz.2.3611': attribute type 1 has an invalid length.
[  492.884216][T19433] IPv6: sit1: Disabled Multicast RS
[  492.919457][T19433] sit1: entered allmulticast mode
[  493.036024][T19438] bond3: (slave ip6gretap1): making interface the new active one
[  493.050997][T19438] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  493.066248][T19438] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  493.091686][T19438] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  493.103141][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'.
[  493.142512][T19447] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3618'.
[  493.142512][T19450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3618'.
[  493.190154][T19447] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.198200][T19447] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.264180][T19447] bridge0: entered promiscuous mode
[  493.295686][T19447] bridge0: entered allmulticast mode
[  493.500794][T19464] netlink: 'syz.5.3621': attribute type 1 has an invalid length.
[  493.656322][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  493.820675][T19483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3626'.
[  493.847975][T19483] netlink: 150904 bytes leftover after parsing attributes in process `syz.1.3626'.
[  493.879736][T19483] netlink: Unknown conntrack attr (type=2050, max=9)
[  493.943018][T19483] syzkaller0: entered promiscuous mode
[  494.234914][T19508] syzkaller0: entered promiscuous mode
[  494.250605][T19508] syzkaller0: entered allmulticast mode
[  494.364898][T19515] netlink: 'syz.1.3635': attribute type 1 has an invalid length.
[  494.696645][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  494.808398][T19538] netlink: 'syz.5.3641': attribute type 39 has an invalid length.
[  494.976672][T19541] netlink: 'syz.2.3642': attribute type 3 has an invalid length.
[  494.998878][T19541] netlink: 'syz.2.3642': attribute type 1 has an invalid length.
[  495.246707][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  495.255004][    C1] lec:lec_tx_timeout: lec0
[  495.260376][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  495.437729][T19566] syzkaller0: entered promiscuous mode
[  495.601120][ T5492] veth0_macvtap: left promiscuous mode
[  495.674491][T19575] __nla_validate_parse: 4 callbacks suppressed
[  495.674512][T19575] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3649'.
[  495.736266][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  495.870365][T19579] netlink: 'syz.1.3650': attribute type 1 has an invalid length.
[  495.987361][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3653'.
[  496.008305][T19589] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3653'.
[  496.776343][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  497.816304][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  498.856334][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  499.896344][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  500.276847][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  500.285074][    C1] lec:lec_tx_timeout: lec0
[  500.290270][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  500.936351][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  501.976302][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  503.016813][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  504.056326][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  505.096341][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  505.306653][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  505.314710][    C1] lec:lec_tx_timeout: lec0
[  505.319996][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  506.136301][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  507.176380][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  508.216321][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  509.256342][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  510.296323][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  511.096187][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  511.104254][    C1] lec:lec_tx_timeout: lec0
[  511.109754][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  511.336936][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  512.376394][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  513.416303][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  514.456406][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  515.496354][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  516.136369][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  516.144384][    C1] lec:lec_tx_timeout: lec0
[  516.149780][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  516.536422][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  516.907778][T19668] netlink: 'syz.1.3656': attribute type 1 has an invalid length.
[  516.946378][T19668] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3656'.
[  516.960017][T19671] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3660'.
[  516.979402][T19671] No such timeout policy "syz0"
[  517.000057][T19671] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3660'.
[  517.565943][T19702] netlink: 'syz.3.3667': attribute type 3 has an invalid length.
[  517.576259][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  517.775579][T19707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3668'.
[  518.109345][T19723] netlink: 'syz.4.3672': attribute type 1 has an invalid length.
[  518.139881][T19723] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3672'.
[  518.159358][T19723] NCSI netlink: No device for ifindex 0
[  518.438236][T19733] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  518.485396][T19734] lo speed is unknown, defaulting to 1000
[  518.616277][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  518.871071][T19771] netlink: 'syz.1.3683': attribute type 1 has an invalid length.
[  518.880395][T19772] netlink: 'syz.1.3683': attribute type 1 has an invalid length.
[  518.918198][T19771] bond1: entered promiscuous mode
[  518.923855][T19771] 8021q: adding VLAN 0 to HW filter on device bond1
[  519.023745][T19771] netlink: 512 bytes leftover after parsing attributes in process `syz.1.3683'.
[  519.039395][T19769] 8021q: adding VLAN 0 to HW filter on device bond1
[  519.047654][T19769] bond1: (slave vcan1): The slave device specified does not support setting the MAC address
[  519.058963][T19769] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode
[  519.075773][T19769] bond1: (slave vcan1): making interface the new active one
[  519.085869][T19769] vcan1: entered promiscuous mode
[  519.094528][T19769] bond1: (slave vcan1): Enslaving as an active interface with an up link
[  519.213823][T19787] "syz.3.3686" (19787) uses obsolete ecb(arc4) skcipher
[  519.240436][T19776] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  519.292092][T19776] bond4 (unregistering): Released all slaves
[  519.656735][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  519.912623][T19820] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3693'.
[  520.024478][T19824] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3694'.
[  520.165886][T19828] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  520.202412][T19835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3697'.
[  520.253609][T19837] syzkaller0: entered promiscuous mode
[  520.263687][T19837] syzkaller0: entered allmulticast mode
[  520.278679][T19831] syzkaller1: entered promiscuous mode
[  520.292467][T19831] syzkaller1: entered allmulticast mode
[  520.696264][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  520.767897][T19859] netlink: 59 bytes leftover after parsing attributes in process `syz.3.3705'.
[  520.782037][T19865] netlink: 'syz.1.3703': attribute type 1 has an invalid length.
[  520.873631][T19865] 8021q: adding VLAN 0 to HW filter on device bond2
[  520.949760][T19865] bond2: (slave gretap1): making interface the new active one
[  520.975996][T19865] bond2: (slave gretap1): Enslaving as an active interface with an up link
[  521.142130][T19890] vcan0: tx drop: invalid da for name 0x0000000000000002
[  521.156874][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  521.164960][    C1] lec:lec_tx_timeout: lec0
[  521.170273][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  521.437560][T19903] netlink: 'syz.5.3714': attribute type 39 has an invalid length.
[  521.540046][T19909] netlink: 'syz.1.3716': attribute type 1 has an invalid length.
[  521.736248][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  521.997116][T19941] __nla_validate_parse: 5 callbacks suppressed
[  521.997138][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3724'.
[  522.119601][T19945] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  522.147358][T19945] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  522.177241][T19954] gtp0: entered promiscuous mode
[  522.187952][T19954] gtp0: entered allmulticast mode
[  522.291863][T19953] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.3728'.
[  522.783316][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  523.816277][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  524.856332][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  525.030792][T19994] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3742'.
[  525.061614][T19996] syzkaller0: entered promiscuous mode
[  525.072455][T19997] netlink: 'syz.2.3743': attribute type 32 has an invalid length.
[  525.099416][T20000] xt_hashlimit: size too large, truncated to 1048576
[  525.161769][T20002] bond3 (unregistering): Released all slaves
[  525.701100][T20009] netlink: 'syz.2.3743': attribute type 32 has an invalid length.
[  525.804727][T20030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3749'.
[  525.856466][T20033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3750'.
[  525.889738][T20033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3750'.
[  525.898907][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  526.041057][T20043] team0: Cannot enslave team device to itself
[  526.133371][T20053] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  526.186546][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  526.194635][    C1] lec:lec_tx_timeout: lec0
[  526.200007][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  526.402495][T20063] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3756'.
[  526.586556][T20074] openvswitch: netlink: EtherType 50a is less than min 600
[  526.608819][T20073] netlink: 'syz.3.3757': attribute type 2 has an invalid length.
[  526.617134][T20073] netlink: 'syz.3.3757': attribute type 1 has an invalid length.
[  526.691796][T20079] openvswitch: netlink: Missing key (keys=40, expected=80)
[  526.795899][T20079] netlink: 'syz.3.3757': attribute type 1 has an invalid length.
[  526.835929][T20079] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3757'.
[  526.864046][T20073] syzkaller0: entered promiscuous mode
[  526.870376][T20073] syzkaller0: entered allmulticast mode
[  526.936352][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  527.976537][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  529.016501][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  529.342788][T20107] netlink: 'syz.5.3763': attribute type 13 has an invalid length.
[  529.782827][T20130] syzkaller0: entered promiscuous mode
[  529.809678][T20130] syzkaller0: entered allmulticast mode
[  530.031079][T20146] netlink: 'syz.4.3773': attribute type 1 has an invalid length.
[  530.051748][T20146] netlink: 216 bytes leftover after parsing attributes in process `syz.4.3773'.
[  530.061163][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  530.131946][T20149] netlink: 'syz.5.3774': attribute type 26 has an invalid length.
[  530.180047][T20149] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.3774'.
[  530.281663][T20154] syzkaller0: entered promiscuous mode
[  530.512784][T20168] IPv6: NLM_F_CREATE should be specified when creating new route
[  530.724558][T20183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3783'.
[  530.774075][T20184] syzkaller0: entered promiscuous mode
[  530.794033][T20184] syzkaller0: entered allmulticast mode
[  531.096296][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  531.134249][T20200] xt_CT: You must specify a L4 protocol and not use inversions on it
[  531.207108][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  531.223309][    C1] lec:lec_tx_timeout: lec0
[  531.230428][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  531.358761][T20203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.382497][T20203] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.483778][T20203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.495945][T20203] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.603056][T20203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.618199][T20203] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.682533][T20226] nbd: must specify at least one socket
[  531.686646][T20228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3800'.
[  531.740985][T20203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  531.752985][T20203] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  531.941571][ T6154] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  531.954551][ T6154] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.994835][ T6154] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  532.007609][ T6154] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  532.048059][ T6156] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  532.066411][ T6156] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  532.133057][ T6154] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  532.136263][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  532.162528][ T6154] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  532.647982][T20262] bond5 (unregistering): Released all slaves
[  532.713084][T20264] netlink: 81 bytes leftover after parsing attributes in process `syz.3.3808'.
[  532.782362][T20276] syzkaller0: entered promiscuous mode
[  532.924341][T20282] syzkaller1: entered promiscuous mode
[  532.930206][T20282] syzkaller1: entered allmulticast mode
[  532.939383][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3816'.
[  532.968877][T20282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3815'.
[  533.088947][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3818'.
[  533.176249][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  533.210231][T20297] team0 (unregistering): Port device team_slave_0 removed
[  533.274204][T20297] team0 (unregistering): Port device team_slave_1 removed
[  533.402027][T20283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  533.421598][T20316] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3824'.
[  533.455716][T20318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3825'.
[  533.493096][T20321] ip6tnl0: Caught tx_queue_len zero misconfig
[  533.923649][T20348] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  534.216331][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  534.332689][T20374] netlink: 'syz.5.3845': attribute type 2 has an invalid length.
[  534.370812][T20376] netlink: 'syz.3.3847': attribute type 1 has an invalid length.
[  534.393364][T20381] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb
[  534.447092][T20376] 8021q: adding VLAN 0 to HW filter on device bond3
[  534.850422][   T29] audit: type=1107 audit(1774938846.278:9): pid=20407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  534.957069][T20417] netlink: zone id is out of range
[  535.066386][T20417] netlink: zone id is out of range
[  535.071652][T20417] netlink: zone id is out of range
[  535.086308][T20417] netlink: zone id is out of range
[  535.091571][T20417] netlink: zone id is out of range
[  535.097640][T20417] netlink: zone id is out of range
[  535.102876][T20417] netlink: zone id is out of range
[  535.116581][T20417] netlink: zone id is out of range
[  535.122857][T20417] netlink: zone id is out of range
[  535.130159][T20420] netlink: zone id is out of range
[  535.135314][T20420] netlink: zone id is out of range
[  535.255826][T20408] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.263881][T20408] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.913665][T20408] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  536.246723][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  536.254994][    C1] lec:lec_tx_timeout: lec0
[  536.260651][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  536.457872][ T6156] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  536.486337][ T6156] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.549116][ T6156] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  536.587133][ T6156] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.595686][ T6156] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  536.638277][ T6156] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.686463][ T6156] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  536.716459][ T6156] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  536.835854][T20475] IPVS: length: 138 != 24
[  536.845398][T20477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  536.860519][T20478] netlink: 'syz.5.3872': attribute type 25 has an invalid length.
[  536.886411][T20477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  536.925595][T20478] bond8: option resend_igmp: invalid value (32767)
[  536.948034][T20478] bond8: option resend_igmp: allowed values 0 - 255
[  536.991250][T20478] bond8 (unregistering): Released all slaves
[  537.040572][T20486] netlink: 'syz.2.3876': attribute type 21 has an invalid length.
[  537.100168][T20477] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  537.113971][T20477] bond4 (unregistering): Released all slaves
[  537.514693][T20502] __nla_validate_parse: 4 callbacks suppressed
[  537.514717][T20502] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3881'.
[  537.607950][T20509] netlink: 27 bytes leftover after parsing attributes in process `syz.5.3882'.
[  537.731034][T20515] ipt_REJECT: TCP_RESET invalid for non-tcp
[  537.963873][T20528] netlink: 'syz.5.3887': attribute type 1 has an invalid length.
[  537.976288][T20526] geneve2: entered promiscuous mode
[  537.981710][T20526] geneve2: entered allmulticast mode
[  537.993348][T16114] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  538.002515][T20525] netlink: 'syz.3.3886': attribute type 1 has an invalid length.
[  538.011425][T16114] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  538.077727][T16114] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  538.165228][T20528] 8021q: adding VLAN 0 to HW filter on device bond8
[  538.183347][T20525] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  538.184800][T16114] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  538.815088][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3898'.
[  539.465420][T20613] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3912'.
[  539.610447][T20623] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96
[  539.624985][T20623] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3915'.
[  539.747848][T20627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3918'.
[  539.960872][T20644] netlink: 'syz.4.3923': attribute type 1 has an invalid length.
[  539.972627][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3925'.
[  539.974338][T20639] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3922'.
[  539.982658][T20645] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3925'.
[  540.094600][T20652] net_ratelimit: 384 callbacks suppressed
[  540.094622][T20652] openvswitch: netlink: Unexpected mask (mask=2200040, allowed=2010048)
[  540.293927][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3930'.
[  540.305752][T20658] bridge_slave_1: left allmulticast mode
[  540.317137][T20658] bridge_slave_1: left promiscuous mode
[  540.323043][T20658] bridge0: port 2(bridge_slave_1) entered disabled state
[  540.345221][T20658] bridge_slave_0: left allmulticast mode
[  540.351839][T20658] bridge_slave_0: left promiscuous mode
[  540.360731][T20658] bridge0: port 1(bridge_slave_0) entered disabled state
[  540.456308][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  540.892736][T20693] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  541.118556][T20709] netlink: 'syz.3.3945': attribute type 10 has an invalid length.
[  541.184472][T20716] rdma_rxe: rxe_newlink: failed to add vxcan1
[  541.276676][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  541.284775][    C1] lec:lec_tx_timeout: lec0
[  541.290140][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  541.496308][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  542.026355][T20757] bridge_slave_0: left allmulticast mode
[  542.032076][T20757] bridge_slave_0: left promiscuous mode
[  542.039726][T20757] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.088568][T20762] netlink: 'syz.1.3959': attribute type 3 has an invalid length.
[  542.148751][T20757] bridge_slave_1: left allmulticast mode
[  542.154503][T20757] bridge_slave_1: left promiscuous mode
[  542.188901][T20757] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.241471][T20757] bond0: (slave bond_slave_0): Releasing backup interface
[  542.273433][T20757] bond0: (slave bond_slave_1): Releasing backup interface
[  542.331865][T20757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  542.366684][T20757] batman_adv: batadv0: Removing interface: batadv_slave_0
[  542.384217][T20757] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  542.412261][T20757] batman_adv: batadv0: Removing interface: batadv_slave_1
[  542.439017][T20757] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  542.459101][T20772] bridge0: left allmulticast mode
[  542.536269][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  542.622676][T20736] lec:lec_atm_close: lec0: Shut down!
[  542.660595][T20788] tipc: Started in network mode
[  542.669157][T20788] tipc: Node identity ac14140f, cluster identity 4711
[  542.685517][T20788] tipc: New replicast peer: 255.255.255.255
[  542.693480][T20788] tipc: Enabled bearer <udp:syz2>, priority 10
[  542.704334][T20790] __nla_validate_parse: 5 callbacks suppressed
[  542.704353][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3965'.
[  542.730570][T20794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3964'.
[  542.984865][T20808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3967'.
[  543.140087][T20815] ip6gre1: entered allmulticast mode
[  543.141228][T20816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3971'.
[  543.174911][    C0] vcan0: j1939_tp_rxtimer: 0xffff888078c1b400: rx timeout, send abort
[  543.261614][T20825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.470204][T20837] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3975'.
[  543.576292][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  543.675057][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034c03000: rx timeout, send abort
[  543.683664][    C0] vcan0: j1939_tp_rxtimer: 0xffff888078c1b400: abort rx timeout. Force session deactivation
[  543.807318][T20451] tipc: Node number set to 2886997007
[  543.825609][T20848] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3979'.
[  543.850786][T20848] lo: Caught tx_queue_len zero misconfig
[  543.977985][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'.
[  544.145164][T20867] tipc: Failed to remove unknown binding: 66,0,0/0:3472550655/3472550656
[  544.145377][T20870] netlink: 'syz.3.3987': attribute type 29 has an invalid length.
[  544.157418][T20867] tipc: Failed to remove unknown binding: 66,0,0/0:3472550655/3472550656
[  544.183344][    C0] vcan0: j1939_tp_rxtimer: 0xffff888034c03000: abort rx timeout. Force session deactivation
[  544.215426][T20875] netlink: 'syz.3.3987': attribute type 29 has an invalid length.
[  544.231714][T20870] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3987'.
[  544.291345][T20879] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3984'.
[  544.485927][T20884] syzkaller0: entered promiscuous mode
[  544.500708][T20884] syzkaller0: entered allmulticast mode
[  544.616440][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  544.753677][T20891] syzkaller0: entered promiscuous mode
[  544.821115][T20898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3993'.
[  545.656257][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  546.696301][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  547.736290][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  547.750583][T20954] netlink: 'syz.3.4009': attribute type 1 has an invalid length.
[  547.758644][T20954] __nla_validate_parse: 2 callbacks suppressed
[  547.758664][T20954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4009'.
[  548.123168][T20972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4015'.
[  548.136399][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms
[  548.144496][    C1] lec:lec_tx_timeout: lec0
[  548.150085][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  548.187733][T20969] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4016'.
[  548.242271][T20976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4017'.
[  548.281982][T20976] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4017'.
[  548.348534][T20976] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4017'.
[  548.654671][T20988] lo speed is unknown, defaulting to 1000
[  548.776290][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  549.233297][T21021] netlink: 228 bytes leftover after parsing attributes in process `syz.4.4031'.
[  549.293619][T21019] netlink: 'syz.1.4030': attribute type 13 has an invalid length.
[  549.374991][T21017] netlink: 'syz.1.4030': attribute type 1 has an invalid length.
[  549.405850][T21017] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4030'.
[  549.522425][T21042] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4035'.
[  549.758413][T21036] syzkaller0: entered promiscuous mode
[  549.767304][T21036] syzkaller0: entered allmulticast mode
[  549.816525][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  549.980485][T21058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4036'.
[  550.155910][T21058] bond4: entered allmulticast mode
[  550.176645][T21058] 8021q: adding VLAN 0 to HW filter on device bond4
[  550.294613][T21068] syzkaller0: entered promiscuous mode
[  550.302281][T21068] syzkaller0: entered allmulticast mode
[  550.856333][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  551.012745][T21110] netlink: Unknown conntrack attr (0)
[  551.093977][T21112] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  551.649365][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880ae8e1c00: rx timeout, send abort
[  551.896614][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  552.162521][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880ae8e1c00: abort rx timeout. Force session deactivation
[  552.940499][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  553.166653][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  553.174883][    C1] lec:lec_tx_timeout: lec0
[  553.180488][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  553.415677][T21110] netlink: 'syz.2.4052': attribute type 4 has an invalid length.
[  553.443964][T21118] hsr_slave_0 (unregistering): left promiscuous mode
[  553.537624][T21122] __nla_validate_parse: 3 callbacks suppressed
[  553.537647][T21122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4054'.
[  553.577763][T21126] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  553.587085][T21126] tipc: Enabled bearer <udp:syz0>, priority 10
[  553.770445][T21137] netlink: 'syz.1.4059': attribute type 1 has an invalid length.
[  553.787539][T21137] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4059'.
[  553.810292][T21137] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4059'.
[  553.854417][T21137] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4059'.
[  553.977069][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  554.162113][T21163] netlink: 808 bytes leftover after parsing attributes in process `syz.4.4067'.
[  554.363155][T21175] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4071'.
[  554.484927][T21181] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4073'.
[  554.643110][T21189] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4075'.
[  554.662342][T21192] netlink: 'syz.2.4077': attribute type 1 has an invalid length.
[  554.678635][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4077'.
[  554.708045][ T5950] tipc: Node number set to 758438662
[  554.899697][T21212] Cannot find set identified by id 65534 to match
[  555.016256][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  555.214584][T21223] IPv6: sit1: Disabled Multicast RS
[  555.232396][T21227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4086'.
[  555.275395][T21223] sit1: entered allmulticast mode
[  555.329993][T21231] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  555.615793][T21242] syzkaller0: entered promiscuous mode
[  555.636363][T21242] syzkaller0: entered allmulticast mode
[  555.641147][T21245] netlink: 'syz.4.4097': attribute type 23 has an invalid length.
[  555.973793][T21263] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  556.024057][T21263] bond4: (slave lo): Enslaving as an active interface with an up link
[  556.049417][T21263] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  556.065329][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  556.572791][T21295] geneve3: entered promiscuous mode
[  557.096370][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  558.136303][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  558.196565][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  558.204711][    C1] lec:lec_tx_timeout: lec0
[  558.209975][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  558.971184][T21327] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  559.051420][T21334] xt_hashlimit: size too large, truncated to 1048576
[  559.176303][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  559.281786][T21354] netlink: 'syz.3.4124': attribute type 1 has an invalid length.
[  559.308528][T21354] __nla_validate_parse: 3 callbacks suppressed
[  559.308550][T21354] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4124'.
[  559.330713][T21354] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4124'.
[  559.354157][T21354] netlink: 'syz.3.4124': attribute type 1 has an invalid length.
[  559.363875][T21354] netlink: 'syz.3.4124': attribute type 8 has an invalid length.
[  559.374973][T21354] netlink: 606 bytes leftover after parsing attributes in process `syz.3.4124'.
[  559.608027][T21370] sctp: [Deprecated]: syz.4.4129 (pid 21370) Use of struct sctp_assoc_value in delayed_ack socket option.
[  559.608027][T21370] Use struct sctp_sack_info instead
[  559.771418][T21374] xt_CONNSECMARK: invalid mode: 0
[  559.893321][T20457] IPVS: starting estimator thread 0...
[  560.026359][T21385] IPVS: using max 25 ests per chain, 60000 per kthread
[  560.101023][T21402] netlink: 'syz.3.4137': attribute type 1 has an invalid length.
[  560.136664][T21404] netlink: 184 bytes leftover after parsing attributes in process `syz.5.4138'.
[  560.160210][T21404] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4138'.
[  560.204111][T21402] 8021q: adding VLAN 0 to HW filter on device bond5
[  560.216496][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  560.334503][T21417] netlink: 'syz.2.4140': attribute type 32 has an invalid length.
[  560.359029][T21413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4140'.
[  560.375222][T21417] netlink: 776 bytes leftover after parsing attributes in process `syz.2.4140'.
[  560.389568][T21407] bond5: (slave veth3): Enslaving as an active interface with a down link
[  560.482305][T21423] syzkaller0: entered promiscuous mode
[  560.489268][T21423] syzkaller0: entered allmulticast mode
[  560.687113][T21430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4144'.
[  560.841412][T21435] lo: Caught tx_queue_len zero misconfig
[  560.926923][T21449] netlink: 'syz.5.4149': attribute type 1 has an invalid length.
[  560.954670][T21443] dvmrp0: entered allmulticast mode
[  561.091583][T21456] lo speed is unknown, defaulting to 1000
[  561.108366][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4151'.
[  561.184911][T21471] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4151'.
[  561.250120][T21463] 8021q: VLANs not supported on ip_vti0
[  561.256275][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  561.434575][T21479] wg2: Caught tx_queue_len zero misconfig
[  561.862479][T21490] xt_HMARK: spi-set and port-set can't be combined
[  562.296303][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  563.216838][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  563.225066][    C1] lec:lec_tx_timeout: lec0
[  563.230507][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  563.336364][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  564.022883][T21492] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  564.035096][T21492] bond6 (unregistering): Released all slaves
[  564.137410][T21497] syzkaller0: entered promiscuous mode
[  564.151583][T21497] syzkaller0: entered allmulticast mode
[  564.376267][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  564.532993][T21512] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  564.540389][T21512] IPv6: NLM_F_CREATE should be set when creating new route
[  564.547749][T21512] IPv6: NLM_F_CREATE should be set when creating new route
[  564.555009][T21512] IPv6: NLM_F_CREATE should be set when creating new route
[  564.698288][T21517] veth0_to_batadv: Caught tx_queue_len zero misconfig
[  564.705541][T21516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  564.802398][T21517] syzkaller0: entered promiscuous mode
[  564.817328][T21517] syzkaller0: entered allmulticast mode
[  565.423494][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  566.461388][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  567.496245][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  567.685888][T21547] netlink: 'syz.5.4178': attribute type 2 has an invalid length.
[  567.694756][T21547] netlink: 'syz.5.4178': attribute type 2 has an invalid length.
[  567.709481][T21540] veth1_macvtap: left promiscuous mode
[  567.720833][T21548] __nla_validate_parse: 4 callbacks suppressed
[  567.720862][T21548] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4174'.
[  567.972811][T21562] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4184'.
[  567.985858][T21562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4184'.
[  567.996009][T21562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4184'.
[  568.089569][ T6154] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  568.139728][ T6154] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  568.233889][ T6154] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  568.246836][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  568.254933][    C1] lec:lec_tx_timeout: lec0
[  568.260062][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  568.360312][ T6156] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  568.378227][T21587] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  568.385516][T21587] IPv6: NLM_F_CREATE should be set when creating new route
[  568.393094][T21587] IPv6: NLM_F_CREATE should be set when creating new route
[  568.399140][T21589] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4189'.
[  568.400465][T21587] IPv6: NLM_F_CREATE should be set when creating new route
[  568.536229][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  568.928520][ T6154] batman_adv: batadv0: Removing interface: gretap1
[  568.962087][ T6154] dvmrp0 (unregistering): left allmulticast mode
[  569.170916][ T6154] bond1 (unregistering): (slave bridge4): Releasing backup interface
[  569.179610][ T6154] bridge4 (unregistering): left promiscuous mode
[  569.480995][ T6154] bond0 (unregistering): Released all slaves
[  569.491460][ T6154] bond1 (unregistering): Released all slaves
[  569.509984][ T6154] bond2 (unregistering): (slave vxcan3): Releasing backup interface
[  569.519976][ T6154] bond2 (unregistering): Released all slaves
[  569.541147][ T6154] bond3 (unregistering): (slave vxcan5): Releasing backup interface
[  569.551688][ T6154] bond3 (unregistering): Released all slaves
[  569.568608][ T6154] bond4 (unregistering): (slave lo): Releasing backup interface
[  569.576326][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  569.589450][ T6154] bond4 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  569.601192][ T6154] bond4 (unregistering): Released all slaves
[  569.614852][ T6154] bond5 (unregistering): Released all slaves
[  569.629206][ T6154] bond6 (unregistering): Released all slaves
[  569.644733][ T6154] bond7 (unregistering): Released all slaves
[  569.823261][T21616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4194'.
[  569.845637][T21616] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4194'.
[  569.910669][ T6154] : left promiscuous mode
[  570.067115][ T6154] tipc: Left network mode
[  570.085621][T21638] IPv6: NLM_F_CREATE should be specified when creating new route
[  570.092217][T21639] IPv6: NLM_F_CREATE should be specified when creating new route
[  570.116553][T21639] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4200'.
[  570.174834][T21639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4200'.
[  570.616368][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  570.875141][T21656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4205'.
[  571.173194][ T6154] hsr_slave_1: left promiscuous mode
[  571.228947][ T6154] veth1_macvtap: left promiscuous mode
[  571.235271][ T6154] veth0_macvtap: left promiscuous mode
[  571.262128][ T6154] veth1_vlan: left promiscuous mode
[  571.554404][T21697] netlink: 'syz.2.4214': attribute type 1 has an invalid length.
[  571.656244][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  571.797732][T21690] h: entered promiscuous mode
[  571.809244][T21682] syzkaller1: entered promiscuous mode
[  571.814866][T21682] syzkaller1: entered allmulticast mode
[  572.229359][T21716] netlink: 'syz.1.4221': attribute type 1 has an invalid length.
[  572.260079][T21716] netlink: 'syz.1.4221': attribute type 1 has an invalid length.
[  572.318538][T21717] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  572.452184][ T6154] IPVS: stop unused estimator thread 0...
[  572.696249][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  572.806406][T21746] __nla_validate_parse: 5 callbacks suppressed
[  572.806431][T21746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4232'.
[  572.903198][T21756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4234'.
[  572.958689][T21757] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4236'.
[  572.982462][T21757] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4236'.
[  573.276952][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  573.285170][    C1] lec:lec_tx_timeout: lec0
[  573.290481][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  573.397188][T21777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4242'.
[  573.401063][T21780] bond1: entered allmulticast mode
[  573.421964][T21780] vcan1: entered allmulticast mode
[  573.483562][T21779] bond1: left allmulticast mode
[  573.526702][T21779] vcan1: left allmulticast mode
[  573.736236][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  573.762149][T21796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4248'.
[  573.787328][T21796] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4248'.
[  573.805106][T21799] netlink: 'syz.3.4249': attribute type 11 has an invalid length.
[  573.849037][T21800] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4248'.
[  573.856562][T21799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4249'.
[  573.877628][T21803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4251'.
[  573.892923][   T58] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  573.909953][T21799] netlink: 'syz.3.4249': attribute type 11 has an invalid length.
[  573.954126][   T58] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  573.970261][   T58] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  574.026949][   T58] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  574.776226][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  574.909692][T21870] bond9 (unregistering): Released all slaves
[  575.045960][T21877] netlink: 'syz.3.4269': attribute type 2 has an invalid length.
[  575.816247][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  575.835514][T21918] syzkaller0: entered promiscuous mode
[  575.843802][T21918] syzkaller0: entered allmulticast mode
[  575.853456][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.861314][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.868191][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.875159][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.882019][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.888969][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.892988][T21921] vlan3: entered allmulticast mode
[  575.895869][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.895906][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.895917][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.921714][T21911] tc action pedit offset must be on 32 bit boundaries
[  575.928585][T21911] 0: reclassify loop, rule prio 0, protocol 800
[  575.938600][T21921] bridge3: entered allmulticast mode
[  575.959025][T21925] bridge3: port 1(erspan0) entered blocking state
[  575.965603][T21925] bridge3: port 1(erspan0) entered disabled state
[  575.988503][T21925] erspan0: entered allmulticast mode
[  576.026802][T21925] erspan0: entered promiscuous mode
[  576.078197][T21926] bridge4: entered promiscuous mode
[  576.083479][T21926] bridge4: entered allmulticast mode
[  576.496302][T21943] netlink: 'syz.2.4286': attribute type 1 has an invalid length.
[  576.531959][T21943] bond5: entered promiscuous mode
[  576.540931][T21943] 8021q: adding VLAN 0 to HW filter on device bond5
[  576.573974][T21943] bond5: (slave bridge4): making interface the new active one
[  576.582285][T21943] bridge4: entered promiscuous mode
[  576.591630][T21943] bridge4: left promiscuous mode
[  576.856324][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  577.132602][T21978] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa
[  577.132682][T21979] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xa
[  577.247485][T21985] openvswitch: netlink: Flow key attr not present in new flow.
[  577.510308][T22003] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  577.577046][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.628544][T22003] syzkaller0: entered promiscuous mode
[  577.644369][T22003] syzkaller0: entered allmulticast mode
[  577.896325][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  577.986500][T22029] netlink: 'syz.3.4313': attribute type 1 has an invalid length.
[  578.015019][T22034] netlink: 'syz.3.4313': attribute type 1 has an invalid length.
[  578.031623][T22032] netlink: 'syz.3.4313': attribute type 1 has an invalid length.
[  578.130430][T22032] bond6: entered promiscuous mode
[  578.138458][T22032] 8021q: adding VLAN 0 to HW filter on device bond6
[  578.153829][T22042] __nla_validate_parse: 14 callbacks suppressed
[  578.153850][T22042] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4316'.
[  578.314095][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  578.322221][    C1] lec:lec_tx_timeout: lec0
[  578.328127][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  578.342178][T22049] netlink: 'syz.4.4316': attribute type 1 has an invalid length.
[  578.353905][T22049] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4316'.
[  578.380531][T22049] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4316'.
[  578.936294][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  578.974644][T22043] vlan3: entered allmulticast mode
[  579.015615][T22043] bridge5: entered allmulticast mode
[  579.050068][T22048] bridge5: port 1(erspan0) entered blocking state
[  579.058112][T22048] bridge5: port 1(erspan0) entered disabled state
[  579.065203][T22048] erspan0: entered allmulticast mode
[  579.085617][T22048] erspan0: entered promiscuous mode
[  579.092666][T22048] bridge5: port 1(erspan0) entered blocking state
[  579.099420][T22048] bridge5: port 1(erspan0) entered forwarding state
[  579.200274][T22058] bridge0: port 1(veth0_to_bridge) entered blocking state
[  579.231782][T22058] bridge0: port 1(veth0_to_bridge) entered disabled state
[  579.257867][T22058] veth0_to_bridge: entered allmulticast mode
[  579.298824][T22058] veth0_to_bridge: entered promiscuous mode
[  579.483106][T22091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  579.555737][T22090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  579.574897][T22102] IPv6: sit2: Disabled Multicast RS
[  579.583554][T22102] sit2: entered allmulticast mode
[  579.825415][T22115] netlink: 'syz.3.4329': attribute type 1 has an invalid length.
[  579.858759][T22115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4329'.
[  579.877309][T22115] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4329'.
[  579.888342][T22115] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4329'.
[  579.900352][T22115] 8021q: adding VLAN 0 to HW filter on device bond7
[  579.976246][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  580.149246][T22129] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  580.161079][T22126] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.170614][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.344066][T22138] netlink: 'syz.4.4334': attribute type 10 has an invalid length.
[  580.382454][T22138] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4334'.
[  580.395709][T22138] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4334'.
[  580.729722][T22157] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  581.016261][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  581.105717][T22178] netlink: 92 bytes leftover after parsing attributes in process `syz.5.4345'.
[  581.109371][T22169] syzkaller0: entered promiscuous mode
[  581.134924][T22169] syzkaller0: entered allmulticast mode
[  581.175749][T22182] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4347'.
[  581.204550][T22181] netlink: 'syz.1.4348': attribute type 3 has an invalid length.
[  581.420655][T22187] netlink: 'syz.2.4350': attribute type 1 has an invalid length.
[  582.056260][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  583.099621][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  583.689322][T22187] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  583.842302][T22212] nbd: nbd1 already in use
[  583.961116][T22217] netlink: 'syz.5.4357': attribute type 1 has an invalid length.
[  583.999504][T22217] __nla_validate_parse: 2 callbacks suppressed
[  583.999526][T22217] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4357'.
[  584.073228][T22223] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4361'.
[  584.136087][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms
[  584.144153][    C1] lec:lec_tx_timeout: lec0
[  584.148868][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  584.157632][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  584.380969][T22241] xt_TCPMSS: Only works on TCP SYN packets
[  584.839131][T22257] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  585.181295][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  585.715900][T22265] xt_ecn: cannot match TCP bits for non-tcp packets
[  585.804911][T22262] netlink: 766 bytes leftover after parsing attributes in process `syz.5.4372'.
[  586.095928][T22273] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4374'.
[  586.212223][T22273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4374'.
[  586.221163][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  586.262431][T22273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4374'.
[  586.293135][T22273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4374'.
[  586.504501][T22272] bond9: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  586.922365][T22272] bond9 (unregistering): Released all slaves
[  587.267035][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  588.296222][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  588.980491][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4386'.
[  589.166666][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  589.174853][    C1] lec:lec_tx_timeout: lec0
[  589.181310][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  589.264483][T22308] syzkaller1: entered promiscuous mode
[  589.279387][T22308] syzkaller1: entered allmulticast mode
[  589.298280][T22317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4384'.
[  589.324642][T22317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4384'.
[  589.336279][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  589.370974][T22317] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4384'.
[  589.410734][T22317] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4384'.
[  589.439803][T22325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4387'.
[  589.443274][T22317] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4384'.
[  589.551101][T22326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4387'.
[  590.376236][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  591.236277][T22331] tipc: Enabled bearer <eth:macvtap0>, priority 5
[  591.418233][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  591.430388][T22349] netlink: 'syz.5.4392': attribute type 3 has an invalid length.
[  591.512156][T22351] tipc: Enabled bearer <eth:vlan0>, priority 24
[  591.725337][T22358] wg1: entered promiscuous mode
[  591.734558][T22358] wg1: entered allmulticast mode
[  591.841187][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4395'.
[  591.965581][T20455] IPVS: starting estimator thread 0...
[  591.983838][T22363] netlink: 404 bytes leftover after parsing attributes in process `syz.2.4397'.
[  592.057011][T22365] IPVS: using max 24 ests per chain, 57600 per kthread
[  592.220158][T22370] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4400'.
[  592.240920][T22370] bridge_slave_1: default FDB implementation only supports local addresses
[  592.427532][T22373] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  592.465490][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  592.594086][T22376] netlink: 'syz.4.4402': attribute type 9 has an invalid length.
[  592.756862][T22381] sock: sock_timestamping_bind_phc: sock not bind to device
[  593.114278][T22393] vcan0: tx address claim with different name
[  593.147788][T22397] tipc: New replicast peer: 172.20.20.19
[  593.498568][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  593.580766][T22422] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  593.595383][T22423] xt_hashlimit: size too large, truncated to 1048576
[  593.659069][T22427] –: renamed from vxcan1 (while UP)
[  594.045077][T22444] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  594.071590][T22444] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  594.096794][T22447] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  594.169297][T22452] C: renamed from lo (while UP)
[  594.177917][T22452] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  594.196637][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  594.204780][    C1] lec:lec_tx_timeout: lec0
[  594.302728][T22457] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  594.349053][T22457] bond8 (unregistering): Released all slaves
[  594.357469][T22463] netlink: 'syz.2.4432': attribute type 1 has an invalid length.
[  594.448539][T22463] 8021q: adding VLAN 0 to HW filter on device bond6
[  594.507796][T22464] bond6: (slave geneve2): making interface the new active one
[  594.530789][T22464] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  594.536267][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  594.999278][T22504] __nla_validate_parse: 8 callbacks suppressed
[  594.999300][T22504] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4443'.
[  595.034669][T22504] macsec1: entered promiscuous mode
[  595.050388][T22504] bridge0: entered promiscuous mode
[  595.059280][T22504] macsec1: entered allmulticast mode
[  595.065077][T22504] bridge0: entered allmulticast mode
[  595.073421][T22504] bridge0: port 3(macsec1) entered blocking state
[  595.084494][T22504] bridge0: port 3(macsec1) entered disabled state
[  595.097951][T22504] bridge0: left allmulticast mode
[  595.103280][T22504] bridge0: left promiscuous mode
[  595.491052][T22513] bond1: left promiscuous mode
[  595.497310][T22513] bridge1: left promiscuous mode
[  595.508349][T22513] bond2: left promiscuous mode
[  595.521665][T22513] bond4: left allmulticast mode
[  595.544154][T22513] bond5: left promiscuous mode
[  595.564305][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4448'.
[  595.566673][T22094] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.577059][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  595.604968][T22524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4448'.
[  595.621568][T22094] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.644765][T22094] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.665081][T22094] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.681430][T22524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4448'.
[  595.701121][T22094] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.708196][T22529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4449'.
[  595.716942][T22094] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.733231][T22524] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4448'.
[  595.735279][T22094] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  595.753473][T22094] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.848362][T22538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.858994][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.879171][T22542] netlink: 'syz.4.4453': attribute type 10 has an invalid length.
[  595.900163][T22542] bond0: (slave wlan1): Opening slave failed
[  595.935278][T22540] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  596.062560][T22555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4457'.
[  596.172576][T22559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4459'.
[  596.185705][T22559] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4459'.
[  596.455037][T22581] erspan0: left allmulticast mode
[  596.464791][T22581] erspan0: left promiscuous mode
[  596.482431][T22581] bridge5: port 1(erspan0) entered disabled state
[  596.525552][T22581] bond0: (slave bond_slave_0): Releasing backup interface
[  596.545671][T22581] bond0: (slave bond_slave_1): Releasing backup interface
[  596.565610][T22587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4467'.
[  596.595274][T22581] team0: Port device team_slave_0 removed
[  596.619714][T22583] netlink: 'syz.1.4467': attribute type 5 has an invalid length.
[  596.625380][T22581] team0: Port device team_slave_1 removed
[  596.635057][T22581] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  596.643480][T22581] batman_adv: batadv0: Removing interface: batadv_slave_0
[  596.655548][T22581] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  596.663930][T22581] batman_adv: batadv0: Removing interface: batadv_slave_1
[  596.956739][T22608] netlink: 'syz.4.4475': attribute type 10 has an invalid length.
[  596.975264][T22608] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  597.020310][T22611] netlink: 'syz.3.4476': attribute type 21 has an invalid length.
[  597.055924][T22611] IPv6: NLM_F_CREATE should be specified when creating new route
[  597.107119][T22611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  597.114400][T22611] IPv6: NLM_F_CREATE should be set when creating new route
[  597.121752][T22611] IPv6: NLM_F_CREATE should be set when creating new route
[  597.129076][T22611] IPv6: NLM_F_CREATE should be set when creating new route
[  597.400886][T22632] x_tables: duplicate underflow at hook 1
[  597.509666][T22636] netlink: 'syz.1.4486': attribute type 1 has an invalid length.
[  597.621981][T22642] bond3: (slave geneve2): making interface the new active one
[  597.633029][T22642] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  597.647123][T18257] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  597.656815][    C1] net_ratelimit: 6 callbacks suppressed
[  597.656832][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  597.672421][T22066] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  597.689368][T22636] 8021q: adding VLAN 0 to HW filter on device bond3
[  597.713441][T22066] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  597.725708][T22066] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  597.913189][T22658] netlink: 'syz.2.4493': attribute type 3 has an invalid length.
[  598.022273][T22659] lo speed is unknown, defaulting to 1000
[  598.273170][T22680] bond0: entered allmulticast mode
[  598.290800][T22680] bond_slave_0: entered allmulticast mode
[  598.310247][T22680] bond_slave_1: entered allmulticast mode
[  598.597284][T22695] netlink: 'syz.4.4504': attribute type 1 has an invalid length.
[  598.605579][T22695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.696392][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  598.712564][T22703] team0: Device gtp1 is up. Set it down before adding it as a team port
[  599.352598][T22735] netlink: 'syz.4.4517': attribute type 4 has an invalid length.
[  599.605593][T22749] set match dimension is over the limit!
[  599.736415][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  600.069251][T22664] udevd[22664]: inotify_add_watch(7, /dev/nbd3, 10) failed: No such file or directory
[  600.122774][T22772] __nla_validate_parse: 11 callbacks suppressed
[  600.122800][T22772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4524'.
[  600.173612][T22772] netlink: 412 bytes leftover after parsing attributes in process `syz.1.4524'.
[  600.203400][T22772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4524'.
[  600.484903][T22785] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  600.498976][T22785] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  600.506750][T22786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4526'.
[  600.506780][T22786] netlink: 13 bytes leftover after parsing attributes in process `syz.1.4526'.
[  600.529315][T22785] gretap2: entered promiscuous mode
[  600.534798][T22785] gretap2: entered allmulticast mode
[  600.565829][T22785] xt_hashlimit: size too large, truncated to 1048576
[  600.618645][T22786] veth7: entered promiscuous mode
[  600.776247][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  600.837291][T22804] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4533'.
[  601.118945][T22820] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4538'.
[  601.816233][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  601.850134][T22858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4550'.
[  602.171711][T22889] netlink: 'syz.4.4556': attribute type 3 has an invalid length.
[  602.235583][T22879] syzkaller0: entered promiscuous mode
[  602.243498][T22879] syzkaller0: entered allmulticast mode
[  602.458480][T22904] netlink: 'syz.1.4562': attribute type 21 has an invalid length.
[  602.477486][T22904] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4562'.
[  602.856548][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  603.896275][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  604.739581][T22904] netlink: 'syz.1.4562': attribute type 5 has an invalid length.
[  604.748497][T22904] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4562'.
[  604.936251][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  604.956205][T22912] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  605.209957][T22932] openvswitch: netlink: Missing valid actions attribute.
[  605.231183][T22932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  605.267070][T22937] netlink: 'syz.4.4573': attribute type 1 has an invalid length.
[  605.838503][T22965] netlink: 'syz.4.4584': attribute type 1 has an invalid length.
[  605.886949][T22965] __nla_validate_parse: 3 callbacks suppressed
[  605.886971][T22965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4584'.
[  605.976228][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  606.207239][T22987] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4589'.
[  606.265004][T22993] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  606.289381][T22988] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  606.445764][T22998] bond7: Removing last arp target with arp_interval on
[  606.574801][T23010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4594'.
[  606.628704][T23012] netlink: 'syz.2.4596': attribute type 1 has an invalid length.
[  606.865383][T23026] netlink: 'syz.3.4599': attribute type 10 has an invalid length.
[  607.003995][T23026] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  607.016223][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  607.277027][T23053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4606'.
[  607.604462][T19039] lec:lec_start_xmit: lec0:No lecd attached
[  607.723199][T23066] syzkaller0: entered promiscuous mode
[  607.733872][T23066] syzkaller0: entered allmulticast mode
[  608.056240][    C1] net_ratelimit: 1 callbacks suppressed
[  608.056289][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  608.150843][T23080] bond8: entered allmulticast mode
[  608.192080][T23085] ipt_rpfilter: unknown options
[  608.272846][T23087] netlink: zone id is out of range
[  608.279078][T23088] netlink: 184 bytes leftover after parsing attributes in process `syz.4.4620'.
[  608.292637][T23087] netlink: zone id is out of range
[  608.302502][T23088] openvswitch: netlink: Flow actions attr not present in new flow.
[  608.311799][T23087] netlink: zone id is out of range
[  608.327560][T23087] netlink: zone id is out of range
[  608.343203][T23087] netlink: zone id is out of range
[  608.358748][T23087] netlink: zone id is out of range
[  608.374425][T23087] netlink: zone id is out of range
[  608.381833][T23087] netlink: zone id is out of range
[  608.591293][T23110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4624'.
[  608.920778][T23124] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4628'.
[  609.249574][T23154] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  609.578587][T23175] bridge4: entered promiscuous mode
[  609.598017][T23175] bridge4: entered allmulticast mode
[  609.849633][T23195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4649'.
[  609.916641][T23195] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4649'.
[  610.270623][T23216] team0 (unregistering): Port device team_slave_0 removed
[  610.285600][T23216] team0 (unregistering): Port device team_slave_1 removed
[  610.373654][T23227] netlink: 'syz.3.4660': attribute type 58 has an invalid length.
[  610.382853][T23227] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4660'.
[  610.938855][T23262] __nla_validate_parse: 8 callbacks suppressed
[  610.938885][T23262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4669'.
[  611.073927][T23260] can: request_module (can-proto-0) failed.
[  611.216731][T23275] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4677'.
[  611.273806][T23277] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.4676'.
[  611.320200][T23283] syzkaller1: entered promiscuous mode
[  611.327592][T23283] syzkaller1: entered allmulticast mode
[  611.459940][T23291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4681'.
[  611.674604][T23302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4685'.
[  611.704147][T23302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4685'.
[  611.828727][T23312] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4689'.
[  611.846574][T23309] nbd2: detected capacity change from 0 to 127
[  612.027030][T23325] netlink: 'syz.4.4695': attribute type 2 has an invalid length.
[  612.035080][T23325] netlink: 'syz.4.4695': attribute type 2 has an invalid length.
[  612.175131][T23336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4698'.
[  612.505081][T23351] sctp: [Deprecated]: syz.3.4700 (pid 23351) Use of int in max_burst socket option.
[  612.505081][T23351] Use struct sctp_assoc_value instead
[  612.512648][T23352] vlan4: entered allmulticast mode
[  612.525904][T23352] hsr0: entered allmulticast mode
[  612.535626][T23352] hsr_slave_0: entered allmulticast mode
[  612.541866][T23352] hsr_slave_1: entered allmulticast mode
[  612.633982][T23352] xt_connbytes: Forcing CT accounting to be enabled
[  612.685106][T23362] netlink: 'syz.5.4704': attribute type 25 has an invalid length.
[  612.783283][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4704'.
[  612.880527][T23370] sctp: [Deprecated]: syz.3.4705 (pid 23370) Use of int in max_burst socket option.
[  612.880527][T23370] Use struct sctp_assoc_value instead
[  613.096307][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms
[  613.104459][    C1] lec:lec_tx_timeout: lec0
[  613.256231][    C1] net_ratelimit: 9 callbacks suppressed
[  613.256255][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  613.383220][T23402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4713'.
[  613.593444][T23418] block nbd0: Unsupported socket: should be TCP or UNIX.
[  613.983347][T23440] syzkaller1: tun_chr_ioctl cmd 1074025677
[  614.007495][T23440] syzkaller1: linktype set to 823
[  614.026544][T23441] syzkaller1: tun_chr_ioctl cmd 1074025677
[  614.032765][T23441] syzkaller1: linktype set to 823
[  614.296239][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  614.395721][T23458] dvmrp0: entered allmulticast mode
[  615.157197][T23505] 
[  615.159603][T23505] ======================================================
[  615.166736][T23505] WARNING: possible circular locking dependency detected
[  615.173880][T23505] syzkaller #0 Not tainted
[  615.175536][T23512] lo: entered promiscuous mode
[  615.178311][T23505] ------------------------------------------------------
[  615.178323][T23505] syz.2.4737/23505 is trying to acquire lock:
[  615.178336][T23505] ffff8880b0930198 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x300
[  615.178401][T23505] 
[  615.178401][T23505] but task is already holding lock:
[  615.178409][T23505] ffff888029f818b0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  615.178459][T23505] 
[  615.178459][T23505] which lock already depends on the new lock.
[  615.178459][T23505] 
[  615.178467][T23505] 
[  615.178467][T23505] the existing dependency chain (in reverse order) is:
[  615.178475][T23505] 
[  615.178475][T23505] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  615.178506][T23505]        __mutex_lock+0x19f/0x1300
[  615.178530][T23505]        elevator_change+0x1b3/0x450
[  615.178560][T23505]        elevator_set_none+0xb5/0x140
[  615.178580][T23505]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  615.178607][T23505]        nbd_start_device+0x17f/0xb10
[  615.178627][T23505]        nbd_genl_connect+0x165b/0x1cf0
[  615.178647][T23505]        genl_family_rcv_msg_doit+0x22a/0x330
[  615.178671][T23505]        genl_rcv_msg+0x61c/0x7a0
[  615.178692][T23505]        netlink_rcv_skb+0x232/0x4b0
[  615.178719][T23505]        genl_rcv+0x28/0x40
[  615.178739][T23505]        netlink_unicast+0x80f/0x9b0
[  615.178764][T23505]        netlink_sendmsg+0x813/0xb40
[  615.178781][T23505]        ____sys_sendmsg+0x972/0x9f0
[  615.178802][T23505]        ___sys_sendmsg+0x2a5/0x360
[  615.178822][T23505]        __x64_sys_sendmsg+0x1bd/0x2a0
[  615.178844][T23505]        do_syscall_64+0x14d/0xf80
[  615.178866][T23505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.178884][T23505] 
[  615.178884][T23505] -> #5 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  615.178921][T23505]        blk_alloc_queue+0x546/0x680
[  615.178941][T23505]        __blk_mq_alloc_disk+0x197/0x390
[  615.178963][T23505]        nbd_dev_add+0x499/0xb50
[  615.178980][T23505]        nbd_init+0x168/0x1f0
[  615.179005][T23505]        do_one_initcall+0x250/0x8d0
[  615.184285][T23512] netlink: 'syz.4.4739': attribute type 2 has an invalid length.
[  615.190886][T23505]        do_initcall_level+0x104/0x190
[  615.190923][T23505]        do_initcalls+0x59/0xa0
[  615.190945][T23505]        kernel_init_freeable+0x2a6/0x3e0
[  615.190968][T23505]        kernel_init+0x1d/0x1d0
[  615.190993][T23505]        ret_from_fork+0x51e/0xb90
[  615.191018][T23505]        ret_from_fork_asm+0x1a/0x30
[  615.191046][T23505] 
[  615.191046][T23505] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  615.191078][T23505]        fs_reclaim_acquire+0x71/0x100
[  615.191100][T23505]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  615.191119][T23505]        __alloc_skb+0x1d0/0x7d0
[  615.191137][T23505]        tcp_stream_alloc_skb+0x3f/0x580
[  615.191160][T23505]        tcp_sendmsg_locked+0x1375/0x5490
[  615.191183][T23505]        tcp_sendmsg+0x2f/0x50
[  615.191206][T23505]        sock_write_iter+0x406/0x4f0
[  615.191231][T23505]        vfs_write+0x61d/0xb90
[  615.191250][T23505]        ksys_write+0x150/0x270
[  615.191268][T23505]        do_syscall_64+0x14d/0xf80
[  615.191289][T23505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.191309][T23505] 
[  615.191309][T23505] -> #3 (sk_lock-AF_INET){+.+.}-{0:0}:
[  615.191337][T23505]        lock_sock_nested+0x48/0x100
[  615.191363][T23505]        tcp_sendmsg+0x21/0x50
[  615.191385][T23505]        sock_sendmsg+0x379/0x450
[  615.191410][T23505]        __sock_xmit+0x251/0x510
[  615.191432][T23505]        nbd_send_cmd+0x85b/0x1d10
[  615.191452][T23505]        nbd_queue_rq+0xf2a/0x1100
[  615.191471][T23505]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  615.191492][T23505]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  615.191516][T23505]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  615.191539][T23505]        blk_mq_run_hw_queue+0x348/0x4f0
[  615.191567][T23505]        blk_mq_dispatch_list+0xd16/0xe10
[  615.191589][T23505]        blk_mq_flush_plug_list+0x48d/0x570
[  615.191611][T23505]        __blk_flush_plug+0x3ed/0x4d0
[  615.191632][T23505]        __submit_bio+0x28d/0x580
[  615.191655][T23505]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  615.191676][T23505]        block_read_full_folio+0x599/0x830
[  615.191702][T23505]        filemap_read_folio+0x137/0x3b0
[  615.191725][T23505]        do_read_cache_folio+0x358/0x590
[  615.191747][T23505]        read_part_sector+0xb6/0x2b0
[  615.191766][T23505]        adfspart_check_ICS+0xa5/0xa40
[  615.198613][T23512] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  615.206784][T23505]        bdev_disk_changed+0x7ba/0x1550
[  615.206822][T23505]        blkdev_get_whole+0x380/0x510
[  615.206845][T23505]        bdev_open+0x31e/0xd30
[  615.206864][T23505]        blkdev_open+0x470/0x610
[  615.206887][T23505]        do_dentry_open+0x785/0x14e0
[  615.206913][T23505]        vfs_open+0x3b/0x340
[  615.206937][T23505]        path_openat+0x2e08/0x3860
[  615.206957][T23505]        do_file_open+0x23e/0x4a0
[  615.206976][T23505]        do_sys_openat2+0x113/0x200
[  615.207002][T23505]        __x64_sys_openat+0x138/0x170
[  615.207029][T23505]        do_syscall_64+0x14d/0xf80
[  615.207052][T23505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.207071][T23505] 
[  615.207071][T23505] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  615.207105][T23505]        __mutex_lock+0x19f/0x1300
[  615.207128][T23505]        nbd_queue_rq+0x37b/0x1100
[  615.207148][T23505]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  615.207170][T23505]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  615.207195][T23505]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  615.207219][T23505]        blk_mq_run_hw_queue+0x348/0x4f0
[  615.207238][T23505]        blk_mq_dispatch_list+0xd16/0xe10
[  615.207260][T23505]        blk_mq_flush_plug_list+0x48d/0x570
[  615.207283][T23505]        __blk_flush_plug+0x3ed/0x4d0
[  615.207306][T23505]        __submit_bio+0x28d/0x580
[  615.207328][T23505]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  615.207349][T23505]        block_read_full_folio+0x599/0x830
[  615.207373][T23505]        filemap_read_folio+0x137/0x3b0
[  615.207395][T23505]        do_read_cache_folio+0x358/0x590
[  615.207415][T23505]        read_part_sector+0xb6/0x2b0
[  615.207434][T23505]        adfspart_check_ICS+0xa5/0xa40
[  615.207454][T23505]        bdev_disk_changed+0x7ba/0x1550
[  615.207474][T23505]        blkdev_get_whole+0x380/0x510
[  615.207496][T23505]        bdev_open+0x31e/0xd30
[  615.207515][T23505]        blkdev_open+0x470/0x610
[  615.207538][T23505]        do_dentry_open+0x785/0x14e0
[  615.207563][T23505]        vfs_open+0x3b/0x340
[  615.207601][T23505]        path_openat+0x2e08/0x3860
[  615.207622][T23505]        do_file_open+0x23e/0x4a0
[  615.207642][T23505]        do_sys_openat2+0x113/0x200
[  615.207667][T23505]        __x64_sys_openat+0x138/0x170
[  615.207694][T23505]        do_syscall_64+0x14d/0xf80
[  615.207716][T23505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.207735][T23505] 
[  615.207735][T23505] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  615.207768][T23505]        __mutex_lock+0x19f/0x1300
[  615.207791][T23505]        nbd_queue_rq+0xc6/0x1100
[  615.207812][T23505]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  615.207834][T23505]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  615.207857][T23505]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  615.207881][T23505]        blk_mq_run_hw_queue+0x348/0x4f0
[  615.207900][T23505]        blk_mq_dispatch_list+0xd16/0xe10
[  615.207923][T23505]        blk_mq_flush_plug_list+0x48d/0x570
[  615.207945][T23505]        __blk_flush_plug+0x3ed/0x4d0
[  615.336169][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  615.337927][T23505]        __submit_bio+0x28d/0x580
[  615.919312][T23505]        submit_bio_noacct_nocheck+0x2f4/0xa70
[  615.925484][T23505]        block_read_full_folio+0x599/0x830
[  615.931521][T23505]        filemap_read_folio+0x137/0x3b0
[  615.937081][T23505]        do_read_cache_folio+0x358/0x590
[  615.942819][T23505]        read_part_sector+0xb6/0x2b0
[  615.948263][T23505]        adfspart_check_ICS+0xa5/0xa40
[  615.953729][T23505]        bdev_disk_changed+0x7ba/0x1550
[  615.959274][T23505]        blkdev_get_whole+0x380/0x510
[  615.964915][T23505]        bdev_open+0x31e/0xd30
[  615.969686][T23505]        blkdev_open+0x470/0x610
[  615.974636][T23505]        do_dentry_open+0x785/0x14e0
[  615.980035][T23505]        vfs_open+0x3b/0x340
[  615.984733][T23505]        path_openat+0x2e08/0x3860
[  615.989847][T23505]        do_file_open+0x23e/0x4a0
[  615.994877][T23505]        do_sys_openat2+0x113/0x200
[  616.000172][T23505]        __x64_sys_openat+0x138/0x170
[  616.005653][T23505]        do_syscall_64+0x14d/0xf80
[  616.010772][T23505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.017187][T23505] 
[  616.017187][T23505] -> #0 (set->srcu){.+.+}-{0:0}:
[  616.024416][T23505]        __lock_acquire+0x15a5/0x2cf0
[  616.029791][T23505]        lock_sync+0x9d/0x120
[  616.034468][T23505]        __synchronize_srcu+0xca/0x300
[  616.040016][T23505]        elevator_switch+0x1e8/0x7a0
[  616.045302][T23505]        elevator_change+0x2cc/0x450
[  616.050591][T23505]        elevator_set_default+0x36c/0x430
[  616.056318][T23505]        blk_register_queue+0x366/0x430
[  616.061882][T23505]        __add_disk+0x677/0xd50
[  616.066764][T23505]        add_disk_fwnode+0xfb/0x480
[  616.071990][T23505]        nbd_dev_add+0x72c/0xb50
[  616.076929][T23505]        nbd_genl_connect+0x962/0x1cf0
[  616.082390][T23505]        genl_family_rcv_msg_doit+0x22a/0x330
[  616.088468][T23505]        genl_rcv_msg+0x61c/0x7a0
[  616.093496][T23505]        netlink_rcv_skb+0x232/0x4b0
[  616.098805][T23505]        genl_rcv+0x28/0x40
[  616.103399][T23505]        netlink_unicast+0x80f/0x9b0
[  616.108696][T23505]        netlink_sendmsg+0x813/0xb40
[  616.113981][T23505]        ____sys_sendmsg+0x972/0x9f0
[  616.119268][T23505]        ___sys_sendmsg+0x2a5/0x360
[  616.124468][T23505]        __x64_sys_sendmsg+0x1bd/0x2a0
[  616.129926][T23505]        do_syscall_64+0x14d/0xf80
[  616.135065][T23505]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.141590][T23505] 
[  616.141590][T23505] other info that might help us debug this:
[  616.141590][T23505] 
[  616.151830][T23505] Chain exists of:
[  616.151830][T23505]   set->srcu --> &q->q_usage_counter(io)#50 --> &q->elevator_lock
[  616.151830][T23505] 
[  616.165509][T23505]  Possible unsafe locking scenario:
[  616.165509][T23505] 
[  616.173165][T23505]        CPU0                    CPU1
[  616.178742][T23505]        ----                    ----
[  616.184198][T23505]   lock(&q->elevator_lock);
[  616.188892][T23505]                                lock(&q->q_usage_counter(io)#50);
[  616.196999][T23505]                                lock(&q->elevator_lock);
[  616.204210][T23505]   sync(set->srcu);
[  616.208127][T23505] 
[  616.208127][T23505]  *** DEADLOCK ***
[  616.208127][T23505] 
[  616.216289][T23505] 6 locks held by syz.2.4737/23505:
[  616.221501][T23505]  #0: ffffffff8fc3cf30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  616.229987][T23505]  #1: ffffffff8fc3cd48 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  616.238973][T23505]  #2: ffff8880879551d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480
[  616.249350][T23505]  #3: ffff888029f81940 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x115/0x430
[  616.259292][T23505]  #4: ffff888029f813a8 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  616.270330][T23505]  #5: ffff888029f818b0 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  616.280200][T23505] 
[  616.280200][T23505] stack backtrace:
[  616.286101][T23505] CPU: 0 UID: 0 PID: 23505 Comm: syz.2.4737 Not tainted syzkaller #0 PREEMPT(full) 
[  616.286125][T23505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  616.286138][T23505] Call Trace:
[  616.286147][T23505]  <TASK>
[  616.286156][T23505]  dump_stack_lvl+0xe8/0x150
[  616.286187][T23505]  print_circular_bug+0x2e1/0x300
[  616.286220][T23505]  check_noncircular+0x12e/0x150
[  616.286252][T23505]  __lock_acquire+0x15a5/0x2cf0
[  616.286279][T23505]  ? check_path+0x21/0x40
[  616.286310][T23505]  ? lockdep_unlock+0x5d/0xd0
[  616.286331][T23505]  ? __lock_acquire+0x146e/0x2cf0
[  616.286357][T23505]  ? __synchronize_srcu+0xb6/0x300
[  616.286380][T23505]  lock_sync+0x9d/0x120
[  616.286403][T23505]  ? __synchronize_srcu+0xb6/0x300
[  616.286429][T23505]  __synchronize_srcu+0xca/0x300
[  616.286452][T23505]  ? do_raw_spin_lock+0x12b/0x2f0
[  616.286470][T23505]  ? __pfx___synchronize_srcu+0x10/0x10
[  616.286499][T23505]  ? read_tsc+0x9/0x20
[  616.286519][T23505]  ? ktime_get_mono_fast_ns+0x2af/0x2d0
[  616.286539][T23505]  ? synchronize_srcu+0x20d/0x270
[  616.286564][T23505]  elevator_switch+0x1e8/0x7a0
[  616.286585][T23505]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  616.286614][T23505]  elevator_change+0x2cc/0x450
[  616.286633][T23505]  ? do_raw_spin_unlock+0xf5/0x210
[  616.286650][T23505]  elevator_set_default+0x36c/0x430
[  616.286669][T23505]  ? __pfx_elevator_set_default+0x10/0x10
[  616.286690][T23505]  ? disk_register_independent_access_ranges+0x2db/0x380
[  616.286708][T23505]  ? blk_crypto_sysfs_register+0x11c/0x170
[  616.286725][T23505]  blk_register_queue+0x366/0x430
[  616.286748][T23505]  __add_disk+0x677/0xd50
[  616.286772][T23505]  ? down_read+0x272/0x2e0
[  616.286794][T23505]  add_disk_fwnode+0xfb/0x480
[  616.286819][T23505]  nbd_dev_add+0x72c/0xb50
[  616.286838][T23505]  ? __pfx_nbd_dev_add+0x10/0x10
[  616.286863][T23505]  ? bpf_lsm_capable+0x9/0x20
[  616.286885][T23505]  ? security_capable+0x7e/0x2c0
[  616.286907][T23505]  ? radix_tree_lookup+0x25c/0x290
[  616.286923][T23505]  nbd_genl_connect+0x962/0x1cf0
[  616.286945][T23505]  ? __pfx_nbd_genl_connect+0x10/0x10
[  616.286963][T23505]  ? rcu_is_watching+0x15/0xb0
[  616.286985][T23505]  ? trace_kmalloc+0x2a/0x110
[  616.287004][T23505]  ? __nla_parse+0x40/0x60
[  616.287021][T23505]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  616.287051][T23505]  genl_family_rcv_msg_doit+0x22a/0x330
[  616.287074][T23505]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  616.287098][T23505]  ? __lock_acquire+0x6b5/0x2cf0
[  616.287120][T23505]  genl_rcv_msg+0x61c/0x7a0
[  616.287140][T23505]  ? __pfx_genl_rcv_msg+0x10/0x10
[  616.287158][T23505]  ? __pfx_nbd_genl_connect+0x10/0x10
[  616.287174][T23505]  ? __lock_acquire+0x6b5/0x2cf0
[  616.287197][T23505]  netlink_rcv_skb+0x232/0x4b0
[  616.287222][T23505]  ? __pfx_genl_rcv_msg+0x10/0x10
[  616.287240][T23505]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  616.287270][T23505]  ? down_read+0x272/0x2e0
[  616.287289][T23505]  ? genl_rcv+0xd/0x40
[  616.287307][T23505]  genl_rcv+0x28/0x40
[  616.287323][T23505]  netlink_unicast+0x80f/0x9b0
[  616.287348][T23505]  ? __pfx_netlink_unicast+0x10/0x10
[  616.287370][T23505]  ? netlink_sendmsg+0x650/0xb40
[  616.287383][T23505]  ? skb_put+0x11b/0x210
[  616.287400][T23505]  netlink_sendmsg+0x813/0xb40
[  616.287417][T23505]  ? __pfx_netlink_sendmsg+0x10/0x10
[  616.287433][T23505]  ? aa_sock_msg_perm+0xf1/0x1b0
[  616.287456][T23505]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  616.287475][T23505]  ____sys_sendmsg+0x972/0x9f0
[  616.287492][T23505]  ? futex_unqueue+0x211/0x240
[  616.287513][T23505]  ? __pfx_____sys_sendmsg+0x10/0x10
[  616.287535][T23505]  ? import_iovec+0x73/0xa0
[  616.287552][T23505]  ___sys_sendmsg+0x2a5/0x360
[  616.287573][T23505]  ? __pfx____sys_sendmsg+0x10/0x10
[  616.287600][T23505]  ? futex_wait+0x29a/0x380
[  616.287632][T23505]  ? __fget_files+0x2a/0x420
[  616.287656][T23505]  ? __fget_files+0x3a0/0x420
[  616.287682][T23505]  __x64_sys_sendmsg+0x1bd/0x2a0
[  616.287701][T23505]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  616.287728][T23505]  do_syscall_64+0x14d/0xf80
[  616.287746][T23505]  ? trace_irq_disable+0x3b/0x150
[  616.287760][T23505]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.287775][T23505]  ? clear_bhb_loop+0x40/0x90
[  616.287793][T23505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.287809][T23505] RIP: 0033:0x7f172259c819
[  616.287824][T23505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  616.287839][T23505] RSP: 002b:00007f17233ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  616.287858][T23505] RAX: ffffffffffffffda RBX: 00007f1722815fa0 RCX: 00007f172259c819
[  616.287870][T23505] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000007
[  616.287881][T23505] RBP: 00007f1722632c91 R08: 0000000000000000 R09: 0000000000000000
[  616.287891][T23505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  616.287901][T23505] R13: 00007f1722816038 R14: 00007f1722815fa0 R15: 00007fff74839cc8
[  616.287919][T23505]  </TASK>
[  616.376201][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  616.452876][T23505] nbd: socks must be embedded in a SOCK_ITEM attr
[  616.484766][T23462] __nla_validate_parse: 5 callbacks suppressed
[  616.484789][T23462] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4729'.
[  616.530958][T23510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4737'.
[  616.530989][T23510] nbd: device at index 64 is going down
[  616.631969][T23498] caif:caif_disconnect_client(): nothing to disconnect
[  616.886532][T23360] udevd[23360]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  616.905126][T23360] udevd[23360]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  617.416238][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  618.456201][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  619.496498][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  620.536231][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  621.576227][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  622.616198][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  623.656187][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available
[  624.619862][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  624.696219][    C1] IPVS: lc: UDP 224.0.0.2:0 - no destination available