last executing test programs:

4.922781918s ago: executing program 4 (id=6753):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061118a0000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl2\x00', <r4=>0x0, 0x4, 0xe, 0x5, 0x101, 0x10, @rand_addr=' \x01\x00', @private1, 0x700, 0x7, 0x207ff, 0x2a2}})
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50)
r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', 0x0, 0x10}, 0x18)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x0, r1}, 0x18)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f00000006c0)={0x0, 0x10, &(0x7f0000000680)=[@in={0x2, 0x4e1e, @private=0xa010101}]}, &(0x7f0000000700)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r11=>0x0]}, &(0x7f0000000040)=0x8)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r13 = socket(0x2, 0x80805, 0x0)
r14 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r14, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000200)={<r15=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r14, 0x84, 0x7a, &(0x7f0000000340)={r15, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r13, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt(r12, 0x84, 0x82, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000200)={r11, 0x6}, &(0x7f0000000240)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xc, 0x15, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2ffff}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80080000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x15}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="6a0ac4ff0000000071104100000000000800dd0000ffe40012b957efeeaf14394e760f051d129a7aa3fac5804ba67ee9f6945ac925223d0e598d73d72af77d4328"], &(0x7f0000000480)='GPL\x00'}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0x15, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x754, 0x0, 0x0, 0x0, 0x8000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x3, 0x0, 0x4, 0x6, 0xb, 0xffffffffffffffff, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @alu={0x7, 0x1, 0x5, 0x6, 0x5, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x0, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x10000}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x83b, 0xf5, &(0x7f00000003c0)=""/245, 0x40f00, 0x20, '\x00', r4, @cgroup_sock_addr=0x32, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x4, &(0x7f0000000740)=[0x1, r5, 0x1, r6, r7, r8], &(0x7f0000000780)=[{0x4, 0x3, 0xc, 0x4}, {0x1, 0x2, 0x7, 0x88c71fda00ef85c2}, {0x2, 0x5, 0x2, 0x2}, {0x4, 0x5, 0x2, 0xb}], 0x10, 0x4}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002000128009000100626f6e64000000001000028004001f"], 0x40}}, 0x40000c0)

4.841962799s ago: executing program 2 (id=6754):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112})
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102})
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x1c84, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x28}, {}, {0x3, 0xfd}, {0x0, 0x0, 0x0, 0x10000000}, {0x64}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x2c, 0x2c, 0x300, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x24000844)
ioctl$PPPIOCGFLAGS(r7, 0x8004745a, &(0x7f0000000080))
r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r10, 0xffffffffffffffff, 0x31, 0x0, @val=@iter={0x0}}, 0x20)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan1\x00'})
sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x58, r12, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x85}, 0x88005)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r5], 0x20}}, 0x0)

4.736330245s ago: executing program 3 (id=6756):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb465, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @alu={0x4, 0x1, 0x0, 0x4, 0x5, 0x1, 0x10}, @generic={0x40, 0x0, 0x8, 0x4, 0xe4}, @alu={0x4, 0x1, 0xc, 0xb, 0x2, 0x40, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x3, 0xb, 0x8, 0x20}]}, &(0x7f0000000340)='syzkaller\x00', 0xcb5, 0x3d, &(0x7f0000000380)=""/61, 0x40f00, 0x6c, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x0, 0x2, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, &(0x7f0000000440)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000480)=[{0x1, 0x4, 0xb, 0x16e06d6af90c7df9}, {0x5, 0x1, 0xe, 0x1}, {0x0, 0x3, 0x7, 0xc}, {0x1, 0x1, 0x0, 0x2}, {0x4, 0x3, 0x2, 0x9}, {0xfff, 0x4, 0x6, 0x2}], 0x10, 0x4}, 0x94)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48)
r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map=r5, 0x2, 0x0, 0x80, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000200)=[0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], <r7=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map=r4, r6, 0x26, 0x201c, 0x0, @value=r3, @void, @void, @void, r7}, 0x20)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x9, 0x10}, 0xc)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f00000003c0)=[{&(0x7f00000002c0)='\"', 0x1}], 0x1, 0x3)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000005c0)={@map=r8, r1, 0x2a, 0x2004, r2, @value=r9, @void, @void, @void, r7}, 0x20)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000000c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0x8}, 0x7, 0x0, 0x2, 0xf, 0x25, 'syz0\x00', "a11ffcbf1f7fb8b535a0cb6543b89e4b119cf834fa2818bfbbc372d3437005f6", "fa109367f61369632a91395dda6b5ec1f352918a3a960d47a34ab369ee80b8b0", [{0x45f, 0x5, {0x2, 0xfffff5e0}}, {0x88c2, 0x60e, {0x0, 0x7}}, {0x7, 0x2, {0x0, 0xa0c}}, {0x3ff, 0x1, {0x1, 0x2}}, {0xb, 0x9, {0x1, 0x2}}, {0x3, 0x8ca, {0x2, 0xc000}}, {0x0, 0x81, {0x1, 0x10000}}, {0x5, 0x8, {0x2, 0x8}}, {0x2, 0x8, {0x1, 0x6}}, {0x8000, 0x400, {0x2, 0x5}}, {0xb9a, 0x7f, {0x3}}, {0x10, 0xfff3, {0x3, 0x7c745e24}}, {0x8000, 0x83, {0x3, 0x1}}, {0xd, 0x8, {0x1, 0x3336cf4c}}, {0x328, 0x0, {0x0, 0x5}}, {0x1, 0xff75, {0xff631663b720b3cd, 0x2}}, {0x9, 0x2, {0x3, 0x5}}, {0x0, 0x7fff, {0x3, 0x6}}, {0x1, 0x1, {0x0, 0xfffffffe}}, {0x9, 0x8000, {0x2, 0x4}}, {0x98c5, 0x8000, {0x2, 0x1}}, {0x1, 0x3, {0x3, 0x7}}, {0x2, 0xf329, {0x0, 0xda7b}}, {0x7ff, 0xfff1, {0x3, 0x800}}, {0x8, 0x5, {0x0, 0x7f}}, {0x7, 0x401, {0x2, 0x13ad}}, {0xf, 0x3, {0x2}}, {0x6, 0x1, {0x3, 0x100}}, {0x0, 0x4, {0x2, 0x5}}, {0x8, 0x2, {0x1, 0x4}}, {0x5, 0x0, {0x1, 0x3}}, {0x9d, 0xa999, {0x3, 0x8}}, {0x800, 0x1, {0x0, 0x5}}, {0x9, 0x25, {0x2, 0x3}}, {0x101, 0x7, {0x2, 0x7}}, {0x3, 0xc, {0x3, 0x4}}, {0x10, 0xff, {0x0, 0x1000}}, {0x4, 0x7f, {0x0, 0x5}}, {0x6, 0x1, {0x0, 0x2}}, {0x8df, 0x5, {0x2, 0x3}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)

4.561253302s ago: executing program 3 (id=6758):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000911909000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
socket$rds(0x15, 0x5, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000840)=[{&(0x7f0000000540)="6f37be65ff1ebb74f083610eab191360c9688eb6bfea3ea900bb36d505938280e8b7cab4f2bdf363152afdd302c7de1dc56173e6bb2c5fca1ac03cce030a28387cfa9d8d57f2e49de4d291efd9c9ca5b360f650fd8b24689f3d5e0561f9f6249c70a0eacde6059f364b67eefbf3b7cf78565884e24e4abe683c71264c68cbf41aded57b65bd192ce3d362946c8a85767b617eb8c0ef94e2f80872671829813977a11bb855a469e53f8ac725578c2d7cb443eedc3f51e0c963259d91d522b8d82", 0xc0}, {&(0x7f0000000600)="b9f09be3d518740cbd6f42f99f1cc02d9950c6015c6ce3", 0x17}, {&(0x7f0000000700)="86ed57c9052e54af6918da8a6ebcb9df93824756488b763b1fdac66a0869439a861a81b683dc58d4ba5b1f2ce485cee4241795867ff5356b5370cf4fbb6f5df7a19f46301e1e4ef89be07eea83e01c9370ed20d43f7e2d54879c7a5c189be1757ec1b8c798bf878fa21e723019c53797b3298259b36e4f9d08ae08cad4c16841df3d6e64b0be9b9486b7671e60c6d2870875f9930f503c6c35", 0x99}], 0x3)
sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x8010}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000350a0000000200000000000001000005"], 0x14}}, 0x4000051)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000911909000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async)
socket$rds(0x15, 0x5, 0x0) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
writev(r0, &(0x7f0000000840)=[{&(0x7f0000000540)="6f37be65ff1ebb74f083610eab191360c9688eb6bfea3ea900bb36d505938280e8b7cab4f2bdf363152afdd302c7de1dc56173e6bb2c5fca1ac03cce030a28387cfa9d8d57f2e49de4d291efd9c9ca5b360f650fd8b24689f3d5e0561f9f6249c70a0eacde6059f364b67eefbf3b7cf78565884e24e4abe683c71264c68cbf41aded57b65bd192ce3d362946c8a85767b617eb8c0ef94e2f80872671829813977a11bb855a469e53f8ac725578c2d7cb443eedc3f51e0c963259d91d522b8d82", 0xc0}, {&(0x7f0000000600)="b9f09be3d518740cbd6f42f99f1cc02d9950c6015c6ce3", 0x17}, {&(0x7f0000000700)="86ed57c9052e54af6918da8a6ebcb9df93824756488b763b1fdac66a0869439a861a81b683dc58d4ba5b1f2ce485cee4241795867ff5356b5370cf4fbb6f5df7a19f46301e1e4ef89be07eea83e01c9370ed20d43f7e2d54879c7a5c189be1757ec1b8c798bf878fa21e723019c53797b3298259b36e4f9d08ae08cad4c16841df3d6e64b0be9b9486b7671e60c6d2870875f9930f503c6c35", 0x99}], 0x3) (async)
sendmmsg$alg(r1, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x8010}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0x88}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x2, 0x40800) (async)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000350a0000000200000000000001000005"], 0x14}}, 0x4000051) (async)

4.484935783s ago: executing program 0 (id=6760):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000040)="f5", 0x1)
getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f0000000280))
r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendto(r2, &(0x7f0000000000)="993e4671da7b0524d07c3d1bbc2aa52eee70a62c47caab26c35840af79fecb318e4f71906d10057c4446a5c12624818da38da6e8f81e1d79d399d67d0faab8465c983f64c0ce345f46db7f4c232b3e6211fcfd73e66e23d633b1d10306e3fc4d86910cce6fe44e5e2b04b100"/118, 0x76, 0x48010, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @broadcast}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x4040)

4.433093207s ago: executing program 3 (id=6761):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c020000190001"], 0x23c}}, 0xa000000) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4.42879805s ago: executing program 2 (id=6762):
r0 = epoll_create(0x3ff)
r1 = epoll_create1(0x80000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x7, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00'}, 0x94)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r7=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000400)={r7, 0x81}, &(0x7f0000000a80)=0x8)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x4e4, 0x2c, 0xd27, 0x30b529, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4a0, 0x2, [@TCA_MATCHALL_ACT={0x494, 0x2, [@m_gact={0x48, 0x101, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xfffffffffffffffd, 0xa, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x128, 0x12, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xb}}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9, 0x10}}]}, {0xe4, 0x6, "55d1fdbcf03edfe7b0494ba30e47163dc1d515a017249dbc2b711aedbb4562da36690623b7dbd58ec0ba712a6c57265d7621618b5e67af3943783f43522e14ab7e09b8fc94cf51e741ae05271e441da769cd745518fbe45c0757467de3f7e9eb6b52efb6c184e318c87ca18053fe832ac543d3a8a054f905f88095c28acb22fe133cac86e6aaead15d55049ce8042398337f5691ea849840b2f228bd0ac68d54741f2ff6e0adbf9940ecc60654d9a1fcc19178f22af543c21432681acb5e3e433cf7b2785cf5bff6963911090b715c431b6931acd27720d17cca48e7d9d08926"}, {0xc}, {0xc, 0x8, {0x1, 0x4}}}}, @m_csum={0x11c, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0xee, 0x6, "c89b826e07ac0c25f87a2dab17d3be5b1bd2121f737cb13a51830bd57be24dd7f6a210201275e5b4a3a6757398423acac532c2647d0c89d43305caffb6bf601987b0916227a566ceff9fedb81cb3831eb2fd9719fe8f8fe31b44edabede6c45d7b5feb3283ff50faae4053f4dd6e435f24acfc49276f0ba772ddf968a0d7b030dadc6e678ace4f30ec768959fd3c4a9f9b2599110d39a7cb022898996286e25f1f8ea27f695fe52b8342b567df56e0c1b1d9d40528078102009fe73a85b07fcfcd14541dc6212fbe274dd1e882889a99cf350d4e3b1c331c92656b94a481cf230f6bfd454b325c64c643"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_nat={0x204, 0x9, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x78df, 0x6, 0x1000000d, 0x0, 0x7f}, @rand_addr=0x64010102, @private=0xa010102, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffff9, 0x0, 0x6, 0x400, 0x7f}, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x0, 0x722, 0x3}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x4, 0x3, 0x6, 0x3}, @rand_addr=0x64010101, @empty, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x8, 0xfffffffffffffff9, 0x0, 0x9}, @rand_addr=0x64010101, @broadcast}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffff118, 0x5, 0x30000003, 0x9e, 0x7}, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x4, 0x5, 0x1, 0x4}, @rand_addr=0x64010102, @multicast1, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10000, 0xe, 0x5, 0x1, 0x2}, @multicast2, @empty, 0xffffffff}}]}, {0x9a, 0x6, "b52349cdc596c3879e8e7fd6671f79fee2933e88333d36f02be94d88546276ece8cc1b4e6bb4b87d587affc25066d51da1abe2dc415592e85886b7036ba80fa8ac39ff4a370850321ba8c01a344f5c778148d8ea43010ab479a0b684d1ef77b93b108288d4cdcea0ac4d6d90c3cebf8f209191209c9c1f93c3a8a4baed74c235e151cd546e42c8d871203506bdefc730e4c6d4bc44d6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}, @TCA_RATE={0x6, 0x5, {0x51, 0xd}}, @TCA_RATE={0x6, 0x5, {0x8, 0x4}}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x4, 0x4, 0x4, 0x8}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4f}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00'}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x48}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @sock_ops}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0xa0000000})
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001cc0), r12)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r12, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)={0x14, r13, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000)
r14 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)
r15 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r15, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc01000019000100fcffffff1000000020010000000000000000000000000001fc00000000000000000000000000000100000000ffff20000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x0)
close(0x3)

4.380781237s ago: executing program 3 (id=6763):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x8, 0x1, 0x0, 0x3, 0x409, 0x800, 0x4, 0x854}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) (fail_nth: 2)

4.337803959s ago: executing program 0 (id=6764):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x103002, 0x0)
sendfile(r1, r2, &(0x7f0000000180)=0x7fffffff, 0x86)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={<r4=>0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), r6)
sendmsg$FOU_CMD_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r7, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e32}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90)
sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c104b006565cbace52815db9c1d0a988bd56901ec202f6db00a31be101c84595e2ce10c869d4fabf0d40e969d41eb14a5cb9d140b24", @ANYRES16=r7, @ANYBLOB="0b0528bd7000fedbdf25010000000500040002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24058000}, 0x4000000)
sendmsg$FOU_CMD_GET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000100)={0x40, r7, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x33}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0xc0)
r8 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000100000000000000000000000000000001feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000070000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
sendmsg$inet_sctp(r0, &(0x7f0000000300)={&(0x7f0000000000)=@in={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRESDEC=r9, @ANYRESHEX=r0, @ANYRESOCT=r4, @ANYRESOCT=r1], 0x30, 0x4}, 0x0)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0)
r11 = accept$alg(r10, 0x0, 0x0)
sendmsg$nl_xfrm(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@flushsa={0xa4, 0x1c, 0x100, 0x70bd29, 0x25dfdbff, {0xaf}, [@algo_crypt={0x69, 0x2, {{'lrw(camellia)\x00'}, 0x108, "54b2a7496f699880df7e02afbc24a6d6c1cedf8dcde8e80ebd03f5a7b945f52d1b"}}, @tfcpad={0x8, 0x16, 0x7}, @XFRMA_SET_MARK={0x8, 0x1d, 0x2}, @srcaddr={0x14, 0xd, @in=@dev={0xac, 0x14, 0x14, 0x18}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20004854}, 0x8c0)
socket$netlink(0x10, 0x3, 0x10)
r12 = socket(0xa, 0x5, 0x0)
ioctl$SIOCGSTAMPNS(r12, 0x8907, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r12, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e20, @multicast2}], 0x10)
sendto$inet6(r12, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000001240)={0xa, 0x4e24, 0x1000, @loopback, 0xfffffff8}, 0x1c)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000040))

4.272152539s ago: executing program 1 (id=6765):
socket$can_j1939(0x1d, 0x2, 0x7)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f0000000140)=0xe8)
sendmsg$nl_generic(r0, &(0x7f00000013c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001380)={&(0x7f0000000180)={0x1200, 0x19, 0x100, 0x70bd2c, 0x25dfdbfb, {0x18}, [@nested={0x1114, 0xa, 0x0, 0x1, [@typed={0x99, 0x3b, 0x0, 0x0, @binary="07ef079401e3c88845d3c9aafa507c7dcc1f705397936bf870724539f24cb39ee3d8eb8015408f3d4f27ce08cdd3b7ba9f91cf9486780c274dac0ecda84b2936d45ebc3f5eddb7d0f546fd8994d90a33640f8dcb7aef85940d432f6018c8503d6e758036a6fc6ccd0cd6d9a1ed0006efe0b2917fedca971e0949813022530ec6782dd21e22ae3e5776cb44c37129a720b3356e70de"}, @generic="bcaeaada87613c161dcadb67d07cd0b4136d2b69a45ca685aa3edda7a0dc77814b8626dd1a9187b5f0096b707f2886fb9ddf5ae4ac21d35e8430f1d82464179dd61314caa4f96d9fe8c64ee0c2371658f7dcf9ff31ef12976a48bc5a", @typed={0xc, 0x14, 0x0, 0x0, @u64}, @nested={0x4, 0x20}, @nested={0x4, 0x6a}, @nested={0x4, 0x88}, @generic="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"]}, @nested={0xd8, 0x16, 0x0, 0x1, [@nested={0x4, 0x13c}, @typed={0x8, 0x15, 0x0, 0x0, @uid=r2}, @typed={0xb3, 0x0, 0x0, 0x0, @binary="52af2385922d4b51873d523a8ab4ab66a0d437618c624bfceeb7a4fd364ad96482cf8543d2a33738e682c06e87e4c1ede08da2258971d24f607becc3b1fab8d6cefd7dab2940eda850e1284d9c502d957fda9a6d0df9b9615bee1f821aa2e5c85096cd307f21b23664ad053eda7a0539eecfa860a279df1c17cd2efadcbdb0630b65bdd902967277a03d33d421987a5d7f781882d827e0e1f8fc8a39a7f92c6a78660d7a016b3da85e0661af5b7653"}, @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x1200}}, 0x4008840)
r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001400)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000001440)=0x1c, 0x0)
sendmmsg$inet6(r3, &(0x7f0000002380)=[{{&(0x7f0000001480)={0xa, 0x4e24, 0xf4f, @loopback, 0x2}, 0x1c, &(0x7f00000018c0)=[{&(0x7f00000014c0)="17cd4cbdcfb1a66043f5cdfadc4e690032218a14fcd92df41a41f48d38ca52f54ccf7bb6f8597754a365e60702e537ca6e39bd7e4270bd3dc8438f014e6af8bd28af267c532bb6ad6817378360c2aa1916dc176e0dfa1c8e524d8b7efa1398c91726080d5e4027c385f1d5b845ba09dc46d1a0112d26819eb4e3452fe6fe1e7570b915dfd8ad957f3c02e98c6efaa46a77451253aa32c05f9abaf063154ec4d5daa4463ce1e8327a2c09a2cafb77300e756ff1444f2409e2bd7c159a223b307d2f36f72475c02085c725d4291b7a64f8c2192eebfc8e5db73d3639c8a57c7d3830355cd4eafb93c89d62", 0xea}, {&(0x7f00000015c0)="9536f5258523331a511afa580c9035bab5a493fdcc70edcd9b6feae6f3887e63bc54cef249c48368c5bad1b553e35200688f6bc72f8268a988cd9226562292f6388c9b8ba9f4981bc15b55620ae179b655955b50006708cfc9ae107752f73b68ef3e301eb511717941e25aaa9e6110e8e392305de9804ea6f37dddfcda314c6cdaa13aefa198db5dbfbb138636eb8d8f14b7868870128dba7d07a9eb513372c466d9b9e27eb2cf40349bb40157a4cf55bf91719bf767c58a0fe0c59d7434f69c041d6c367c1d2658f8b5607409c6532e06ddede7780664bbef623cb7df1490f8a1b44900075ed7066dbcaabf6f1e019393e07273c4", 0xf5}, {&(0x7f00000016c0)="5a95be6799ad8deb656360b235efd2e79b36f846281e92b537f80174b46cbb27805a02e7249c12b5f2d135aba9304d39f61b4c346867697441338f7536e834e27f1b19d5ad42b000abc160098700033eba69687ebf2a20ee7480c6de10376ff263b6b359e0baacf2908dd1be2ff48c18c8396f5be42c1a06fada55fd6b73e0231fa1254f77993e5f51e3c451e8fd7d28d3e897", 0x93}, {&(0x7f0000001780)="6a16becfed0a6a589035d4135f786c3eed73c7de25c045ef54fe78bbd0ed7b5282dcbd23026809fb05faf7e103cb38da059200d8a74db26574c0a69d321329f22e0a34ce35923f8a7c677fbb3a514ac20c0d38e324bf8889338b3c8d171ffc0efb8f1617240216e6", 0x68}, {&(0x7f0000001800)="edf9ada9fb8cfb37fe57b786182f9d53b92f7958fdc3dbaf3b3d05f971d1bb19156301e9f3190ae5456e7066f8bbe03062187efdbfbe4ee670016ca2cea50d597ce271089283e3d93af6a8a421e4c23f3759500f75e72d7de3f296665bebffd18206ca75c81fb5246aa64c014451c10d5d0fbfea16746197238b9d2f1cc22788b22063e46390d65bc8cd9fc2eedba6ddf1567833ca9aa7efbdabf4d4", 0x9c}], 0x5, &(0x7f0000001940)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x5e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @pad1]}}}], 0x38}}, {{&(0x7f0000001980)={0xa, 0x4e20, 0xfffffff7, @local, 0x7c}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f00000019c0)="46dd518ca22d49c3e824303691ce010b683d849a0c45755e09ab6fbdd62a1ae73c239341713dd75120c5bf6b95d11644b193e67968536ed36269cff9a2b5e6276b2051ee505178514c8da8994e1e4ca23e7d1957a3ad4e99c7f91b71ba221fcac9707a8a6dc83c2220e8d32de677cbb3ab436c1a", 0x74}, {&(0x7f0000001a40)="b760022f7109ca7ad513ca043b52900a2617c44baeba2d0fb53f57fe9ff2fd9c604d90dd95278638428735cac92fe9087e57ae26df5ab8bd6bd11c0f45335cfdcb6733cdce35ce7d55b842d4e689cb4dd7d10aeb3e0388f6d05bc1f6c703bbe3ca456850c632f5d78f616e5ee5ce196171d32369386cce6ef6d7084483562306d884d0d9e15d1ab46787571ce417", 0x8e}, {&(0x7f0000001b00)="b44c71ecad2a5b9d94e802a0033b6ca914cce9821e8e4b2adf51d5a38a74af8c1dd89979282ebb50bb4f820caeaf2a4b18feeb7fb1852514bc6c63d3f4bad54b90866b38029dbae01e4d241d272b570b512434f64cb3930c49dcb02c8096dc59ce962eaeb0449f874a85abccd42fd44a5a040c92b570aa56f0395a8c16068e1dcd77273287f001ff7200c4b1e54e1d065d161b0234d25cad09f98777f7f0c0780f88cde28f9957f45c9d99cbb2220212649c1d974553749e9c34348d43", 0xbd}], 0x3, &(0x7f0000001c00)=[@hopopts={{0xe8, 0x29, 0x36, {0x5e, 0x1a, '\x00', [@ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x3b}, @generic={0x82, 0x29, "5be62d8de1d660e375285b963917963dcab53ab0202f033417046e6c986870a85b77107adddcef3a77"}, @generic={0xe1, 0x9c, "06017b853f7bd3ced61398d178dd566e3551204560c3e40dd3522e773430782ca20de2e5c6ec6694a36d533b2d11a7004443c1459f85b8ab7547677ec823b27d1201bd70d9c64a70ee3f2f815ac5c54ebefc4acd76bd72f6f5e5043d5404d9cb2cdbaaddc71d09ac80f40f1a70a264cbb45be9d6b2c2df85d9f0869d70cae76d186c1fc3ef15035e9f699306af6a2181749b2b22512b25468988712b"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x80000001}}], 0x100}}, {{&(0x7f0000001d00)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000001d40)="e1483e04ebda8755b47077d6f94166f5fcbabbc1f1dbac100f310d4473d9f0a025bf836d66d0680c2baca511631590c6bc1d246ef81cf24c12794b606b38ff9b3e7791458ed0951fc320004b1653", 0x4e}, {&(0x7f0000001dc0)="bb1d98", 0x3}, {&(0x7f0000001e00)="c2714c4236b6981b7ce998aad32dfd96bf7e2b2edc457fa67598b0a0ffe723791626691c0f6d6d283d2d1c8b2c5b67cc9ade29b7d4b8682a94d86a754e0e1ba6eac010dd02b619030c1903795410789e4d20700132218213be9eb77d32941be82b", 0x61}, {&(0x7f0000001e80)="cc34f799f3fa9921278ae070c84caaa77db4d06977f2d67368a24e37ba43e016405a69f08ec7fdfb1db58ebe77dc4fd2c2029f571f9fd9aacda536ada610a3fc376839a02707ca7f73b867f7593c956432afef77f17614d02e05eb4c871a6655c6f4ff9f7c11feef8e1d9fe4a6988729fd05ece9796e", 0x76}, {&(0x7f0000001f00)="c45a2c05a6f65fc81475792ce3536377e396b82781a0bd3e7bb7ead7", 0x1c}, {&(0x7f0000001f40)="95b91980ca450a0f1c9a4704bde2979d43055d7ef4ddb823bbd9c7e045d7cfc538b4035e7935a786c5165d15e4404dea501f1726ad2e2bd889a8d5ded099a52d050a385606125ef132b48f80a6aee81912540f962c293be3abd8c9b2d484f659e8896198e3aee4550f0574b18bf3ce30a9d4a2fdcef2194f0a70a14bd4210c41216bcda1b567d26253f3fc38e83f1588f17aa30ca7930a2a862f9a9871e98dc24adcb1d88bed99c1c8b8e8a49573a4b275f980e18b6d2dada9b85c48ba97a92f4b271450ce0bff74ea0ca075156240fb3e46720b0f772f69b3655d92a62c7b207003b8cb07f7c3ad", 0xe8}, {&(0x7f0000002040)="5d1473f70dfd7fe5bf032dad8a4e0d376fb0f6e761747e0278c176adc08ee7f505cc200e7bd46f406f343abde1095e013d00779d598f1eb26d8d26ebfc9795ca6805045a3c2b081c108926dab9e9daa623d10164bce26d12633827798c43c2a7701c472beabbd69f571a2613aa078565708461cc81bd7fb6d208796b729a43f4469b6d2ec987e52021170edcc19b", 0x8e}], 0x7, &(0x7f0000002180)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x33, 0xc, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @mcast1]}}}, @hopopts={{0x148, 0x29, 0x36, {0xff, 0x25, '\x00', [@generic={0x7, 0xf0, "d64791e2ac0e74e4fae1a151504354b9d0b92b98dd9d78b37c29ba761768ebd6a89d8c7d2c4eef8d70c41c55eb5aa32899d5fec130a757c985b00edfadfdee1ec4b2332d8ccfa62ae5f287ad5f777b755a1adb765cb456dbe0707d5fe77be0f03c81bfbbc8899b9083d508fd7e4ffe672c762e035806154fe802837e44d60d527701863421b68085a2cd5e53d2062564dc9f792539e4d8e4b707fbac7f419330c0a3d456699c24362f444f8a22531bff0f861afdabb0c09d274b6123391e6a33677d8b449a57be95a2d7f8a3902a9726e4ee2ff3fbe6501098d1925669791d1fb243d5df3e7aded0515baa3cc43ff96c"}, @enc_lim={0x4, 0x1, 0xf5}, @jumbo={0xc2, 0x4, 0x5}, @ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x10, {0x0, 0x2, 0xd2, 0x3, [0x1]}}, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0xe69}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x48000}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2, r1}}}], 0x200}}], 0x3, 0x840)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$rxrpc(0x21, 0x2, 0x0)
bind$rxrpc(r5, &(0x7f0000002440)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x24)
ioctl$sock_proto_private(r4, 0x89e6, &(0x7f0000002480)="bf7090e193b8ce1a4ff6e745374f640bd3b005ce04c9ed87d85ba2f1e7af9299729ffd00799f4f0f0430e4438ba459063f8e468d8a9af1758e2d38888bd19bbd35bd16c9293d78a75e6f9a9bcec032777e7c7d1b75928f53095100932c2360dc545a790372b1a408db88e22cf9648d88d8d7c11ac0260b7a2a466e79abc8237b3560d9f1ed755a7257308c57726d899dec8c7e4245922fdf9667f9a2b3e9ad508167046364181e89326474ef4d2c6316f6c28cb603b20ce10bd445cf66dc3165fbb3")
getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000002580)=0x8, &(0x7f00000025c0)=0x2)
getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f0000002600), &(0x7f0000002680)=0x68)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002700), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x20, r6, 0x400, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002800), r0)
r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000002840)='devices.allow\x00', 0x2, 0x0)
r9 = bpf$TOKEN_CREATE(0x24, &(0x7f0000002880)={0x0, r8}, 0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x20, 0x30, 0x8, 0x70bd2a, 0x25dfdbff, {0x1c}, [@typed={0x9, 0x113, 0x0, 0x0, @str='IPVS\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x40800)
sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000002b00)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002a00)={0xa0, r6, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x18}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1000}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x63}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008044}, 0x8004)
bind$netlink(r10, &(0x7f0000002b40)={0x10, 0x0, 0x25dfdbfb, 0x1000000}, 0xc)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000002d00)={&(0x7f0000002b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002bc0)={0xc8, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x6, @loopback, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e20, @broadcast}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ca5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER={0x30, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1a6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x93}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9e34}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r11, 0xc0096616, &(0x7f0000002d40)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$XFS_IOC_FSGROWFSDATA(r9, 0x4010586e, &(0x7f0000002d80)={0x0, 0x3})
sendmsg$inet(r4, &(0x7f00000032c0)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002dc0)="9c9c1c788d5f21558fc1f5b1453137a84bf94f734625e87635c0e7bf6bc66d03fbac1eb49d6c11fc6c34", 0x2a}, {&(0x7f0000002e00)="f2d4f8476500b88b32534232916ac130e47dc674926053913462122a7a6022769a78638d50abdc580b1b322b2094cfcc62f7287dc8181bdb42425d07fc196b1f22eb00a2d4978477a44d2fe36ea52a174385c418a838266bcf37861a45977a1fef0922b62787e6165d79f93b17a535e23009eaf97452521cfce77150ebd2e6a6a1aa0b587e5624", 0x87}, {&(0x7f0000002ec0)="fb75a6c3dfc44e2bf70611e7312b39392848bc9dc410070748371c59c85928b4abb4d2ed3e37ed154a7134c15f3916b05287eb473c380a4c5a34636830b9b93cf0db2a99baa8ed292cf04de67ec7b7a1ed1e7f8d0196b0d99589ee5065b25a2e0c1ab85cfe8ea6de89304b0181fec568d057dd4190b26c6c0eff2c6e8481f6f229e64d8213599f23f37ad2775968be6f6a3ae665f7f4eca3f5c8ebdb7c5abc58bebd14280e460e8dc9f110b45c9e1f0fd9", 0xb1}, {&(0x7f0000002f80)}, {&(0x7f0000002fc0)="81eb33639f2a384faa7d89a2704ed13be718318f58872651aae1e532fe8a57e8baf951d287f5f5f78b3999f2152c174f6d4c4c5d1002b216dcff842b8e2dcc2fa79058f17fe143fbb8f2bd595293bc95e02d17af0c420a730f867dffa492a3098eff", 0x62}, {&(0x7f0000003040)="6242d1e1abdff8b177c73fe0808a43b80905d58150a45ca99d83c46767337251256a3c5569d78744bd1fe7fba0b28e27ecca4ed3d9635ad304716fbb045412f39000047832121d80b1d86f414e16052bc1de7db79e1964a0af43c6a9c26ba9f5ed564595fafe0ecb9f08f390ada76750b36189c77e48e81320bbedfb5af462093a9164bbca1df06962e50c173f91e56468db7b11e780b2c66d407eb7d9c34183fb828796459ad63612f19a667d9752173c964a4c16b2fb60f841a6342f7d3247e3", 0xc1}], 0x6, &(0x7f00000031c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0xac, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x72, [@empty, @rand_addr=0x64010100, @local, @loopback]}, @timestamp_addr={0x44, 0x3c, 0x67, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x5}, {@multicast1, 0x2}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xb26}, {@remote, 0x60bb}, {@loopback, 0x8}, {@multicast1, 0x3}]}, @timestamp_addr={0x44, 0xc, 0x32, 0x1, 0xe, [{@remote, 0x1}]}, @generic={0x83, 0x6, "153c431f"}, @noop, @noop, @timestamp_prespec={0x44, 0x1c, 0x5b, 0x3, 0x8, [{@local, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x3, 0x18}, @timestamp={0x44, 0x18, 0xb6, 0x0, 0x5, [0x62f60f8b, 0x400, 0xaa0d, 0x6, 0x3]}]}}}], 0xf8}, 0x40000)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000003400)={<r12=>r5, &(0x7f0000003300)='\\-^{\x00', 0x40c000, &(0x7f0000003340)={@align=0x100000001, {0x7, 0x886, 0x1, 0x2ddf}}, 0x7, &(0x7f0000003380)={@_ha_fsid}, &(0x7f00000033c0)=0xdf})
sendmsg$NFNL_MSG_CTHELPER_NEW(r12, &(0x7f0000003580)={&(0x7f0000003440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003540)={&(0x7f0000003480)={0xa4, 0x0, 0x9, 0x201, 0x0, 0x0, {0x5}, [@NFCTH_TUPLE={0x88, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40040}, 0x80c9)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003600), r12)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r11, &(0x7f0000004240)={&(0x7f00000035c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000004200)={&(0x7f0000003680)={0xb78, r13, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x3d}}}}, [@NL80211_ATTR_FRAME={0x3ca, 0x33, @mgmt_frame=@beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {0x8}, @broadcast, @device_b, @initial, {0xf, 0x6}}, 0x351, @random=0x62, 0x1010, @void, @void, @void, @val={0x4, 0x6, {0xd, 0x20, 0xf7c, 0x2}}, @val={0x6, 0x2, 0xcc}, @val={0x5, 0xe9, {0x9, 0xe9, 0xff, "9c46f225c32bd51e5f630325d69c9db09fbe3263b0c17f6669f0dd215066373eadaf2c4eec97d37f3ea8969513841409732be55e68e33954e0a8110dc2b90d851e729d59946b89374db33a67bd022a48eaee7eefcad690cf32850ae11bb837328520033e2d23cad818ff1f1f232ef63d43f3602dbf7378d90cfb08ab3f5264c965b00b0f19d29d236c15a3615a93a5fe93675ac99191dfd454f09183c34e5c79eb97f6841f298d0075a5f1298fb23996dd28b6926297e025c267c3d823d17c11418fb861e7cf54b6f730591e500885fe6e563b969f2ceafc4055c327aee069d21cbc14b31c4e"}}, @val={0x25, 0x3, {0x0, 0xc, 0xcf}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0xd8}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4b, 0x8c, 0x36, 0x4}}, [{0xdd, 0x34, "a7100a749ae17969a1bb553107ec5c61c5bf45bf3fb926838965a1db62a21f3e0fbbf65fc04df8717e7f2857e9091b068dc571cd"}, {0xdd, 0xfb, "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"}, {0xdd, 0x48, "0e399044febdd0ed7e1da01a97399db2eba41eb942700679679523d827b3e31a997b39bcdf672efd0805358287347240db986d3c2e015e3974fc1d24658055964cdf71a1b5f15ebe"}, {0xdd, 0xe2, "4f3f5d17fb9d5343de0a5f815c8fc8c16b38d599ffa1b0ad11a5b1e3b80f167c86eacf2f1b52da9d8c367b95c4734b26577bc4eb3b816b43b0a509141204aa792d20b6bcc7f92d933f06d7243668a46ce0322a32c33ba6dc574ba1680ff2b7d8530dc43e64a1a012a8c10f8cf275578367c06339e6f3ded22fa76f238868eeefc59d011b8990d22f2bfc0f1734f1672b74a60a1a33185a7b995741e86e6d586f06ef674c02468a5ed16717767d8f9211729ba2e4d64fcf031881f2a4636c11a950a556731f28b133dfbdd89ea2198ed9c6c0e03abdb307ee7483b102c652cb3c33e2"}, {0xdd, 0x2a, "94021cf511106e1a5a6acbf4c847742b675e22d2dd0a640058b30cd81ac540a38fbd5ef1ca0cdb67dae4"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x3a, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_a, @broadcast, @from_mac, {0x1, 0x4}, @value=@ver_80211n={0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, @vht_group_id={0x15, 0x1, {0x4, "51bb2650985f5de6c65bbbada56f12dc"}}}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x6fe, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x5, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x6}, @device_a, @device_a, @broadcast, {0x2, 0xd}, @broadcast, @void, @value=@ver_80211n={0x0, 0x5, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @broadcast, 0x8d, "8058ef6de2a65a3e869cf341afb15122c9b52facbb9544eb22a656aa900d300285af949943652bdefa116ae66a4ba68aa3afe033030d693941dc10ca459add546a4152cc391794506112a170c2e8f3de2a5a41c1514fdc1f025dae9bfa59847aff8e385ec0d7f854d6834343ec20e9e933920ac0d0aefb0690382eba675b3220e9def97ced9696203a686dc49e"}, {@broadcast, @broadcast, 0xa1, "e2a51e7dfbfafd0f6d03a6c454adecf068b7c4a3db3d684548b84b7666db4ab162265f7a4cc1cfd209195e3b74598de44bea9f630fdb39b4e2b97160f0c8d421a642e2f144c62870b3da4fe9c88a987e16766213182eba1c0ba4073c3b34bc40497421801e723bc6391c0807159074892d7d13eefbad103c9489db76a3f441bc2954d6852c6e2e0b17c9179f40e766b64b354c6773161eb56edf82755c772cb9af"}, {@device_b, @device_b, 0xa7, "7751525354d7a3169093172d364998c80aa9f38648d52defc605e437a289e69768e30546d42efa9d2fcfb1b5e17a0010fec0354d3d13e75e41bf6f721c73dee7c95a34460a3eeb261d162e588565b118fba2499cd5c2c5fe15b1256da755f5b8f31872d1c5f73680209fa8e28534dcdcedc50aead5dd8bbb526ff9dbbcede1e4af7adafe9c7ea5e1bdb800c7e2f434d2134d38253604c5913a633a9f489d9d9c7b419ec359e3d2"}, {@device_a, @device_b, 0xe3, "f344cc3b3962d56d380df6ad955bdb54a5670ec171fff515d7b94a774f17fde3fe1312d0a93f989b165e14dbaa29ac43d7b5ef62f035fa053aa9534cd0ffaf481caf55ec08930cf656561974170941151f32ba3b1bb8fd8c5406aed6fe718fdd9f880e76b0cd485e68a392140bdc7fac897a1f4ee8f5124159a66862ad48b573c7defdc76d335c24b4f72551c3525f7c6c4b256522b7556bc65a6d166d0dd658b2d84851d9f833419e91b0c88fd6fe4a3166ef9ef3f40c6c8e37b2162f40677d5f853ba557cb958835bab9d560da6260fa316253de399b6004445a578a4a8acdbab2b5"}, {@device_b, @broadcast, 0xbe, "c71e8668d974c879d175defbc50b4108a0806925af6f34df2836debed804e9063c46cd2b56c2b2378812c1c83537724370dfd14a5a824b440c690beaffd9443dcd222fb0539ac9600a5e8d5e927812a2b5749a8935380ef72e7718ff3e29e9ddbeac094414a521558bfea09ab33104c0d0a53fe1ffb087588b8146d36ad5d509315c43e90bbab1d951c0082ce9eb93817a70aaa7a48066ad2a9c681bfbf831a7ca341d0b56ef04dec79e6329359b3f73eecc9766382a09aab2b8b3997b41"}, {@device_b, @broadcast, 0xcf, "c98e99c785250e99f0c92b4b87957635c75922ed2b817bffb7a89de892b46364a2dd34259f20e86bd20e3ad1db5c63b45605308b1841743273529e6ee99d172bb8994abafdea2d919c0b129c38c8050aad85f0a221fe3726f6f76754dedd6245673a6195a2877d2b97b1f076bacb337d4d4cf56a95bcbdee9db5fa415c184d6a8d9dc97c2701f94bef997ab443d94cc8106e0c9b9043fe926072e0b138d8ba3a2cc39972ad40cb14b57b80c7ac36a27ee85669881499583ad9fc889f3dcdc752d53cdb042dc09943b8d25febacc27b"}, {@device_a, @broadcast, 0x9e, "afed6491b26c8186aae08f4c55d150c33d621aff5950f6fd6b501e80ed0b0638218d1c8b6cbd429295c90741ae6f7a3f29dd6df4ce5179cec1caf91ece3b1d77660e348549bd1189b32a288a40a3d9cf76a6a0c9e7acbbde41391dc612ea93a7ec7d1db0d9066a5f85d382b478a964acf76366da552aa70935430b2d99c66fa36cd6337f6a953f533ac979cd9a83843ad487eed519eb03d4e316907975a7"}, {@broadcast, @device_b, 0xc2, "2283634679ab748409de28af5665c61f10cdd7515a45a072a5f5d7289736d9b63c03578b387c6260b4a28536856d0621f9586bb3e852b841dfe99cf7799ae41e89edb9648604f204cdd5aa09a111275b2170116ecb0f1c9f12ad57881f1196cb834392179db9cff12c272cca69a80d7ac3232a7e233c1e7b18818edf48f1b47a193d8339d3bc185a6395922c5cc3202eb63e9ec103633a08e9405ef7d3caab23405ea42682ff1e0ee22a88ecf7c92617606e3451930423d5cf2fc10986f9130fbbc5"}, {@device_a, @device_a, 0xa8, "7656281d02ee726f8be147e67545de4e516ae8eda3b30f5eb017ff5596976b547d13d5bb338df4c87b6f234895e0c6e9b1ff4027bd70afbb5086a57eb7d39689477a3256aacd42ffde939531bd3422d50f29da0e0eb3c797daf992626c463af85ccc2b3f3f912682646a524816f3c400816c0d3a92275884a42c18f0c0c091c5b4fea91a4a3299001810b63bdd301e51376f511aca159e5ece16f9d66a52cbe45d872caf77d3af20"}]}}]}, 0xb78}, 0x1, 0x0, 0x0, 0x4048800}, 0x4000080)

4.167398288s ago: executing program 1 (id=6766):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x70}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000980)="c1298e99b95dfaff4284860186ddd6832a84a09f59804362eaa7b4bab76ac58f07b714b5eb499edf3a37d6905ca2abbe46bc30d684ef", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

3.864726991s ago: executing program 4 (id=6767):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
listen(0xffffffffffffffff, 0x568)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="03070000000000000000080000006800"], 0x7c}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000001380)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c80)={&(0x7f0000001880)={0x188, 0x0, 0x0, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3f7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x12, 0x1, @l2={'ib', 0x3a, 'syzkaller0\x00'}}]}, @TIPC_NLA_NODE={0x84, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "26e118bf602a3c412e176046045a2a0e11ebc389"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0e696d917b32a0066b41de70bbf75911bbf82f32"}}]}, @TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcd8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xac}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35c5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x14d}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x40}, 0x200040c0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r5, &(0x7f0000000540)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x600}, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x5)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x8, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

3.672135336s ago: executing program 1 (id=6768):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x400) (rerun: 64)
socket$kcm(0x2, 0xa, 0x2) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0xc8ed, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0xfc}}, 0x0) (async)
r5 = gettid()
sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000001b00)={0x538, 0x37, 0x100, 0x70bd29, 0x25dfdbfc, {0x1e}, [@generic="4271bf66a2de13ba4c3bb73532973c6f0e2872fb3d6806d864a5a0b1e01a5e0332cd39d111b2babb096b506e7c3cea8fb61e02e706900f112b8d304c3d9b4ff26f610aef9d0e4ced0fe74b4a963950c6986a53695d0a1b2f03291f811f1087821b3780ae32aac4dd1051d17753b0b0d6105bcab9d45f8609259660e7ef1c2f7b2827a70e7dd9ffde05ee328711d1e1ec30f9a7b5a78d13fdef70a4f90d5a", @nested={0x3ac, 0x9d, 0x0, 0x1, [@nested={0x39c, 0x9d, 0x0, 0x1, [@typed={0x93, 0xfd, 0x0, 0x0, @binary="9901d018f187d488f7fd8b10f53845537e4c89a94d268a4cf206e6cf41df03ad6b8ca313ff0fa346fbb4b593b90b82662f79e4a4d60e11440e338b7c2573f89f510ae2f8976853a6970f2939f9f62f62de99b9c35c1966130b35c20d794d182ffd157e2bcc23eb0a81a1fc5ce9301b6ea44af973b6cc82aef6d8f31d195859dd764afedc5f479d161b32e6e997f567"}, @nested={0xdd, 0xd0, 0x0, 0x1, [@nested={0x4, 0xa4}, @nested={0x4, 0x109}, @generic="416f9abb9aa7033acc6e3bf7501c2dffa4cb1dffa9d3ae4dcabfa0232f042c82bd1c04ab0df70be8dc38b45c554534c84c56ecd2a1c5fb81cd0af504d795d496b4cb735330954d2f0a4844f7e35747bfe3bf8832d9b136b3a4e6cfc0d448c19c7d3e3591445d07c2ad5f5ac9a03a68a353b9e376071b8cee30c5d29c266a9dbb1ecee5507611fc1cc77fbb84a12ad1180d50d1b6faf3de19debf1152d20dd9d80da17e7d45079488db2f6752adb0a71c7925fef733e52e2f9272a91f757512c8bb0858aecdeafd937b4265feba", @nested={0x4, 0x73}]}, @generic="9a50e12b9d11d5f6517cd17588f544f1fd280ad2cc", @generic="3d34e2fa1c12deaae7106000cac95bc625614169aca1cc537b9f6cc71b98ad74a0c0847f53bb83d56380e5ddf8f609b3e0819b73d32a9dfa8442ffdc3b0fa502684722aae5bf56e94374baf177c7beadf670a4d4521df26978a0b64a9329e493305749d88a62d991b2a9b952debf8ca0d1e94eacfeeae552cbf2cf7c066ff267f49ea85836492f480cd124c9f37b3dfa697d5da1ecd4def2c9957606744292a57e1474bad0f939516a9faf4be93acbfe707276578a011925c7caab9faa82a0914c86c4cc2d3436f3fc4c29", @nested={0x144, 0x7f, 0x0, 0x1, [@nested={0x9a, 0xac, 0x0, 0x1, [@typed={0xc, 0x6f, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x16}, @generic="01ba579be55423daa321938256d86de6143e5db3e4958dc0706610ba0a2fae771bfcb0445d1bc8ff9feb333afa145956b071d5ec3f84a0ce21bcab610c4961b209e0adfa44c8ab3fc0e1f8de6a1ffd99833f4a7171a43f73c713bffab4617364c52615886c9794d3d97fa0af867d4cc4429f12c0cce5b49e1ebf2a26e79f7c5a18da415aabc6"]}, @typed={0x8, 0x14c, 0x0, 0x0, @pid=r5}, @nested={0x14, 0x9d, 0x0, 0x1, [@typed={0x8, 0x122, 0x0, 0x0, @pid=r5}, @nested={0x4, 0x151}, @nested={0x4, 0x122}]}, @nested={0x58, 0x25, 0x0, 0x1, [@generic="97518bf78aeaf71137bf018e56e532be6509caa62f1065e4666783988037e6b0157490ec5b953f3f3e70ff4dd2dd4b52de2cf248d19b72daecc81331ec7f89f6a25bc1473b581b05a4c898cd25cc5360b9fcc7f6"]}, @typed={0x1e, 0x10f, 0x0, 0x0, @str='lb_stats_refresh_interval\x00'}, @nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0x14a}]}, @typed={0x8, 0x158, 0x0, 0x0, @u32=0x8}]}]}, @nested={0x4, 0xf8}, @typed={0x8, 0x5b, 0x0, 0x0, @pid=r5}]}, @nested={0x10, 0xfb, 0x0, 0x1, [@typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0x106}]}, @generic="4e394f04381b3fac20e0f18521e4080bb0c3d94a19b5f7f3f1fd7137d09cce15033c62dbbbec816c8c0508e0d1aacf30256a3838c301b15f672b16d642890bc5959ba747cd104c2134396501dc1e7afdc29dac9d29ff3172cfdc08f45db03938263a82d0719269608d0e25932cd2dfc670fc63dde9ba6213b0959d431f332ae6f0ea54c8e7fd00c35c6657c8866c92661b09273882d9efb17329742f78c3401ce091953b5a7e6c308f22ff3871ad3347bef058b4862d9c7222565673a8f64c0112a2f504ec863a"]}, 0x538}, 0x1, 0x0, 0x0, 0x4006040}, 0x4004880) (async)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r8=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000040)={r8, 0x1, 0x4, @local}, 0x10) (async)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x0, @local}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r8, 0x1, 0x6, @multicast}, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000080)={'syztnl1\x00', <r9=>0x0, 0x700, 0x1, 0x9, 0x4406, {{0x1c, 0x4, 0x2, 0x15, 0x70, 0x64, 0x0, 0xf0, 0x29, 0x0, @remote, @multicast1, {[@rr={0x7, 0x1f, 0x72, [@broadcast, @broadcast, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @remote]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0xfc, 0x3, 0x1, [{@rand_addr=0x64010100}, {@multicast2, 0x4}, {@private=0xa010100, 0x3}, {@broadcast, 0xf}, {@multicast1, 0xffffffff}, {@multicast2, 0x5}]}, @ra={0x94, 0x4}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', <r10=>0x0})
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000325bd7000fedbdf2518000000050005000000000005000600000000001c000180080003000200000008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="0c00018008000100", @ANYRES32=r10, @ANYBLOB="00ffffffffffffff8430492df5"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001080)={'team0\x00', <r11=>0x0}) (async, rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r4, 0xe0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0], ""/16, <r12=>0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000001100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x10001, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000011c0), &(0x7f0000001200), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000001240)}}, 0x10) (async, rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001440)={'ip6gre0\x00', &(0x7f00000013c0)={'ip6_vti0\x00', <r13=>0x0, 0x4, 0x10, 0x73, 0x8001, 0x20, @remote, @private0, 0x8, 0x8000, 0x15, 0x5}}) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000001500)={'ip6_vti0\x00', &(0x7f0000001480)={'ip6tnl0\x00', <r14=>0x0, 0x4, 0x6, 0x3, 0x4, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x700, 0x1, 0x45d, 0x2}}) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000015c0)={'syztnl1\x00', &(0x7f0000001540)={'sit0\x00', <r15=>0x0, 0x10, 0x8000, 0xff, 0x5, {{0x9, 0x4, 0x0, 0x5, 0x24, 0x68, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback, {[@ra={0x94, 0x4, 0x1}, @end, @cipso={0x86, 0xa, 0x0, [{0x6, 0x4, "e44b"}]}]}}}}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001600)={'batadv0\x00', <r16=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a80)={&(0x7f0000000940)={0x458, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfe76}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x228, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd4ba}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2e75}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xaa7}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xf8}}}]}}]}, 0x458}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c40)=ANY=[@ANYBLOB="d4160000400007012bbd7000fedbdf25027c00001800c28014000100fc010000000000000000000000000001a81609"], 0x16d4}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

1.89595814s ago: executing program 3 (id=6769):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004800}, 0xc100)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', 0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
ioctl$SIOCX25GCALLUSERDATA(0xffffffffffffffff, 0x89e4, 0x0)
writev(r3, &(0x7f00000004c0)=[{&(0x7f00000002c0)="c5191907b0f8ece5f55dcfb3c2527d0011a79026a774f9fff57fc791aee3decbbabcfc40844ff667d90d3882e58a72528b672e90b3a03717ebe41933d271fadcc135a939d89caa803b48f4379f16c69bc6f30cfee7aa50671c4b7579db48c58c9ffb5e1a705272dc9541601b890fbc080d1d41cf091266a3a3f178f500e1fc1ea6cdd2e3294104ee36915d33d1f8053d26abe922e528e76396c68fe32bb81d9a3f75f2ee628dd81cb8b051fa9f3445005120df9e8ee2673e2eb9e2899d94801eadf9b83a11a2fa81a1dc7e59e960b23860780e68d53d46", 0xd7}, {&(0x7f00000003c0)="fc9abd55e3dc637129d085bafcf03dce717d646a233fddc8276f5d4d3b18f04879e28009e9cd187d3290f9f025d32c969bffac7012d74bff31885dac1e2c4bf200d6bea2f2d9bb5b85fc0ace9d9411d5a700930cabc7b9c29b56e5753d74ae66c0d576465558a1311baa85891c8d2031d0e620afaa7d8aaafb2c5ea3876c90ed6988087446984d0be765f3726ae765a840446085197a0bdf9760327028cbe6a8a2066b2e8cdde430b40a5f601eef7fdcb610cc8c15ab179c5dddda4406790d12c95b9ca009db134b2ba0deef2bb9fdc2688b36d26dcda63a", 0xd8}, {&(0x7f0000000100)="b2f4e3d1825c8eca8e822b78f474f80ae4a54433922d549e6018aa0f8c604732cad134d503ac36e87be49d7898fbe64a14983b5cd4756c46567432b1eb258ed74271d0142704f4d0bbb0c42a0bdb6f04c720971420ce95cc98d9d2f2313852bb3371e89a590d99e7b55d088d02b36b8cd304a42f", 0x74}], 0x3)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x408002, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="3500000002"], 0x8)
ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0xf}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}]}, 0x1c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r8, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x300, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000001001000001000000000000000000000010"], 0x28}, 0xfc40)
r9 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x404f444)
r10 = socket$kcm(0x21, 0x2, 0xa)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r13=>0x0})
sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$kcm(r10, &(0x7f0000000080)={&(0x7f0000000000)=@caif=@util={0x25, "47d31ca96dd8000000008000"}, 0x80, 0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r12], 0x28}, 0x4fc44)
socket(0x10, 0x803, 0x0)

1.883327409s ago: executing program 2 (id=6770):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x200, 0x70bd28, 0x0, {0x60, 0x0, 0x0, 0x0, {0x5, 0xfff2}, {0x4, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}}, 0x0)
r1 = socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) (async)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8000, 0x8027, 0xffffffff, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x65, 0x0, 0xc, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@generic={0x88, 0x7, "14b79dce6a"}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x8000, 0x8027, 0xffffffff, 0x3, {{0x7, 0x4, 0x1, 0x9, 0x1c, 0x65, 0x0, 0xc, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@generic={0x88, 0x7, "14b79dce6a"}]}}}}})
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x4b, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}, 0x10) (async)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x2, 0x4b, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x3e}, @broadcast}, 0x10)
setsockopt$MRT_ADD_MFC_PROXY(r5, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x61, '\x00', r2, @fallback=0x2f}, 0x94)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="750114346d4158"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x0) (async)
sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="750114346d4158"], 0xdd12}], 0x1, 0x0, 0x0, 0x8887}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.792820825s ago: executing program 0 (id=6771):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbff, {0xa, 0x10, 0x80, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x3001a}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20040044)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x40480c0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35}, 0x20)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xa, 0x3}, {0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x42, 0xff9, 0x1}, 0x28)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000180)={'bond_slave_1\x00', {0x2, 0x4e23, @remote}})
write(r0, &(0x7f0000000240)="9fc543c2baa05d30b9ba2de2d5ff35178d1392d04955ab4900019407872bae7d3ebc5cb3da1fce80a2c3549d20fff84ea69bb9123cbe220dedce229ddf44ebb0db1ffad1fc8a202a1f274120ede9d1c3e609d85ac6edafcd5b1ab04a1dedcf7403b91462d9615ee58d974cbcb521d476563be6f73aff1cc0861d939f30ed1bd33efcc76f4e7b9d7eca1ecd2932ff34ca6c0bd13af2d454de8f", 0x99)
sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x60}}, 0x0)

1.790449917s ago: executing program 4 (id=6772):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040))
socket(0x1, 0x5, 0x0)
r1 = socket$kcm(0x10, 0x4, 0x10)
recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x8045}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00'})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800c562dc95162f10caabffc9c1", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000003c0001800600040000000000080008000300000014000300ac1414bb00000000000000000000000014000300fc0100"/74], 0x50}}, 0x0)
r6 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r7], 0x20}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0000000000000000440012800e00010069703665727370616e0000003000028014000600ff02000000000000000000000000000114000700fc02000000000000000000000000000004001200"], 0x64}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000001100001000100"/20, @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x64880, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)

1.775082019s ago: executing program 1 (id=6773):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000840)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18)

1.72646871s ago: executing program 1 (id=6774):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000180)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0x1}], 0x1, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0xfffe, 0xc}}], 0x30}], 0x1, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4e22, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

1.62487676s ago: executing program 1 (id=6775):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newqdisc={0x2c4, 0x24, 0x2, 0x60b924, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x6, 0xb}, {0xa, 0xffe0}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x1bc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xff, 0x0, 0x0, 0x3, 0x0, 0x9, 0x80000001, 0x3}}, {0xa, 0x2, [0x58c, 0x400, 0xffff]}}, {{0x1c, 0x1, {0xf, 0xa, 0x9, 0x8, 0x2, 0x6, 0x1, 0x5}}, {0xe, 0x2, [0x400, 0x3ff, 0xfffc, 0x7, 0x4]}}, {{0x1c, 0x1, {0x8, 0x4, 0x1000, 0x7, 0x1, 0xce81, 0xf3a, 0x5}}, {0xe, 0x2, [0x9, 0x400, 0xd, 0x100, 0x7]}}, {{0x1c, 0x1, {0x5, 0xd, 0x4, 0x4, 0x2, 0x3, 0xbd, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x7, 0x91, 0x2, 0x5, 0x1, 0xab3f, 0x8, 0x9}}, {0x16, 0x2, [0x36, 0x3, 0xb, 0xdc6d, 0xe, 0x3, 0xc1, 0x100, 0x6]}}, {{0x1c, 0x1, {0x11, 0x2, 0x1, 0xff, 0x0, 0x7, 0x0, 0x7}}, {0x12, 0x2, [0xd, 0x5, 0xdfbb, 0x400, 0x2, 0xfffa, 0x0]}}, {{0x1c, 0x1, {0xfc, 0x8, 0x6, 0x6, 0x0, 0x8000, 0x4, 0x7}}, {0x12, 0x2, [0xd8c, 0x9, 0x3ff, 0x0, 0x5, 0xff42, 0x0]}}, {{0x1c, 0x1, {0x1, 0xc, 0xffff, 0x9, 0x0, 0x0, 0x9, 0x7}}, {0x12, 0x2, [0x0, 0x4, 0x9, 0x5, 0x6, 0x6, 0x5]}}, {{0x1c, 0x1, {0x1, 0x94, 0x6, 0x7fffffff, 0x1, 0x3, 0xffff, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x1, 0x17, 0x7ff, 0x341c25cc, 0x2, 0x9, 0x3, 0x6}}, {0x10, 0x2, [0x8001, 0x0, 0x9, 0x6, 0x8, 0x7]}}]}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x18}}, @qdisc_kind_options=@q_taprio={{0xb}, {0x9c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x80, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x6}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8d}]}, {0x24, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffffc}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xc7f8}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x8f0}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffffd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x401}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}]}}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "0aa70598fe1651608046eb957f416dd7"}}}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x4048060}, 0x20004080)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x84, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40014}, 0x5)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

702.477019ms ago: executing program 0 (id=6776):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800040, 0x25dfdbff, {0x2, 0x18, 0x42401837745673e4, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58)
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e00000001300", @ANYRES16], 0xe0}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x12}, 0x28) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async)
socket$alg(0x26, 0x5, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800040, 0x25dfdbff, {0x2, 0x18, 0x42401837745673e4, 0xff, r6}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) (async)
bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) (async)
socket$nl_crypto(0x10, 0x3, 0x15) (async)
sendmsg$nl_crypto(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e00000001300", @ANYRES16], 0xe0}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) (async)

631.663608ms ago: executing program 4 (id=6777):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000016000000000800007f000000000000003832c9420b2a81b1a448046e2f5cd3c975eeee6e9f7b7f72be17803056204d20c1d996944b031cd067d3815da9a05882182e8c04a2abd140303b55c9c7ca041c61095373052f9369beb2a83b70d9c98f5e337628809fd1c9e04d119c2234dc309c85174d907d445f0bda753b4a7fb39c44108903994bdda70bdb6b9661082c96de39e594768e1ea3aee384ef2f7930e7e87b72f8d21b99f2e2456911ef1489dbcd3da59295ee5bbcf1aad2ece3188c2e1fd5b98ad31f4a75c91ffe56a422aebbf5c93f08ddcba019edf8fbd610467304ffb4f65dd8ca288dc284943487806489", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006100000a00000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000000202020631af8ff00000000bfa100000000000007010000f8a321ffb702000008000000b50200000000000085000000cb0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x21)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x8001000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb24001800000000000000240000002400000002000000000000000000000300000000050000000200000005000000000000000000001e8c00000000"], 0x0, 0x3e, 0x0, 0x8, 0x3}, 0x28)
r4 = socket$alg(0x26, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e)
sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r6 = accept4(r4, 0x0, 0x0, 0x800)
r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x80, 0x0)
ioctl$TUNSETTXFILTER(r7, 0x400454d1, 0x0)
sendmmsg$alg(r6, 0x0, 0x0, 0x4854)
sendmsg$TEAM_CMD_OPTIONS_GET(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x20040804)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0500000000000000000001000000000000000c4100000014001462726f61c4c1d0f3c72a2b519c31646361"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

609.538831ms ago: executing program 3 (id=6778):
socket(0x2, 0x80805, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r0, &(0x7f0000000000)='\"', 0x1) (async, rerun: 32)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) (async, rerun: 32)
write$bt_hci(r0, &(0x7f0000000000)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x1, 0x1, "528035", "b5ea47", 0x1, 0xd, 0x6, @any, 0x0, 0xff, 0x0, 0xf5, 0x8, 0xf9, 0x3}}}, 0x1d) (async)
sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) (async)
socket$unix(0x1, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async, rerun: 32)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

548.984353ms ago: executing program 2 (id=6779):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0xfffd], [0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x8, 0x1, 0x0, 0x3, 0x409, 0x800, 0x4, 0x854}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) (fail_nth: 3)

406.749618ms ago: executing program 0 (id=6780):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>\x00\x00\x00B\x00\x00\x00', @ANYRES32, @ANYBLOB="1c0000000000000000000000000000b81a678c0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x40000000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0xd, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xc}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x50}}, 0x481d5)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
getsockopt(r5, 0x111, 0x3, 0x0, &(0x7f0000000080))
bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r2, &(0x7f0000000140)="5c000000010000", 0x7)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, <r6=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r6], &(0x7f0000000400)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, <r8=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)

209.228805ms ago: executing program 4 (id=6781):
sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="440100000103010100000000000000000300000280000b800800164000000003400004803c0003800800024000000009080003400000000905000100080000000800024000000eb30500010000000000080003400000800108000240000001e12c001980080001000000000008000200010000020000000000000000080001000000000008000200010800000800154000000001b0000f800c000a8008000140000000000800084000000001900003802c000180140003"], 0x144}, 0x1, 0x0, 0x0, 0x841}, 0x40050)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000002880)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="fc4406008e199ae0898c7a8988823619badd4fe626289574f86d0809dc46543a7397ceafd65272d07668", 0x2a}, {&(0x7f00000048c0)="4aa6ebbaadac821a088be79aff597e399b67d0e0d8b16af93d4078939730787afd7ca85bd5aa74fab362b0585f095ee8c513e864ee7783500a577bfbf648389284cb6744ba7d2e73d9d618702e712ecd6a199286326ff22d59544afc715f8eccf9b851691d3b14dac31434bfec34c03dce1c596738e7f8a4ac186af40bad817595723a21c333b257df41c2a304d5f8d5315fd712508ae16bdaf38e6393b3937971c39c171b44fc2e9ec39572aed0bd04469e4ae3a79961", 0xb7}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x4815)
recvmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000980)=""/87, 0x57}], 0x1}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@mpls_newroute={0x24, 0x18, 0x601, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x13}]}, 0x24}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x2c, 0x107, 0x4, 0x0, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x8, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4004000)
syz_init_net_socket$x25(0x9, 0x5, 0x18)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x10, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0xf}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r5)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
vmsplice(r9, &(0x7f0000001500)=[{&(0x7f0000000040)="ab85", 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x4)
sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000)
r10 = socket$unix(0x1, 0x2, 0x0)
setsockopt$SO_TIMESTAMP(r10, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}}, 0x8, 0x40}, 0x90)
r12 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
sendmsg$nl_route_sched(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x120, 0x30, 0xffff, 0x0, 0x0, {}, [{0x10c, 0x1, [@m_ife={0x108, 0x1, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x120}}, 0x0)

127.401903ms ago: executing program 0 (id=6782):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x439, 0x70bd2b, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x13, 0x618c4}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vti={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x27}}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x3}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c044)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x54, r5, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x28, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x124}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x54}}, 0x20000040)
setsockopt(r6, 0x84, 0x7, &(0x7f0000000140)="d5bc0000f3f05c71", 0x8)
unshare(0x22020400)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9)
sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r2, 0x65aebf9dafbebb59, 0x70bd28, 0x1, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x6, 0x112}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x24048840)
epoll_create(0x9)

126.791841ms ago: executing program 2 (id=6783):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000a9d000/0x4000)=nil, 0x4000, 0xd, 0x100010, r0, 0xd4f74000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

27.227234ms ago: executing program 2 (id=6784):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}}}}]}, 0x4c}}, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b000000018000100000000000000000002000000000000090000000006001500040000008c0016808800088084000180"], 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x12}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000851}, 0x24000840)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_THA_MASK={0xa, 0x42, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x680, 0x6, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x8a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6001}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x86dd}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x84}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_EXPRESSIONS={0x418, 0x4, 0x0, 0x1, [{0x414, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x404, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x10, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_FROM_DATA={0xb8, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x8000000000000002}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_RANGE_TO_DATA={0x320, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd5, 0x1, "86f48a9bc8e8c147c000d169502e9d47faf261aba9dbcbd758e1b7271be4a530a8e881ae5afb8fefa3902e827a3bfaf08af34603f2a26b8e6952937e54694bf4f5fd005febbaf8bf33887a80f20cbbf2480d7fd40f03ddad201d03e61dce351e4b9c0933324987638be2b3b7b9a19b1f3eb19b642d98905b550536b8a08e578a4733f343d19c2261aa80d344059876a9d1c1f54d6f860af396c2ca096a93002f1e4357107fd1bb2a695686b6a95b6ca3c58c6f35763f9663d235ace3bbb4f1adb2932976fd13f68bb145ee1143edcea923"}, @NFTA_DATA_VALUE={0x102, 0x1, "76ed3ca93297310a38809f26fee980aa886e7975239e7696b8012dfa32cf011cecef4deaac7c7c810ebe754d84c16e7ebf8320fda26414dd71588b38c126988e67d4e267d0afa7775634e808ccd1b9ca4a054af9a686342c28ccc17ee202495909be3ab18a797a0613ab2cd01a0eefb5697d001a22e7a0c8b86a740ed379b47f249b443b50518e9f4b38e3277995bbabdfd65f36c3f214f6a93a0a56cd3a1c76e97e3d6e87b3352063c122d0f4c4ddf1f1f38e1d7abe1a39bdf2dc2948b112f4cbf698509941531836c2d3bee42c6b43b7cc7eba769a1bcd584246f29843439e183aaeec53f36ac2c7faa4d0830c1f075804ae3fded998e0b7336c0e7c2f"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xc8, 0x1, "921990d6043d61391c4006abf6ac0037a1fc0007c4770b5d4d3747141fd9d771c49138626b2be876f9cefb8a8a8a1c3fc8043363906059c60e9cc652c64d3faa09bcf36aab3273734847646e9cf18776be2d1c67b9948374fe924fd6d1c5239f2e10a82b2db298724facf410d7bc3bfc3f256dae8b7feed69a3e998ed055619204c08e8752a798449f92bcb9b1c8ca0b1a7aacbfe9c2ad25aa560826c3962f6c5a44860d71e3090e2ebbf23b1503aad22753701843a6fc46614442a7cee8091864d4d064"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_USERDATA={0xc3, 0x7, 0x1, 0x0, "72e248e1222de89f468060aa05ffa8b03c2235426409d6a9e4c37968b810e061bd1233d063230a7f4aa659fa919a4537f022d989922d05ae65fac26b9147aec2c43b46f7c8198231170922c82c757642963e9e0d73650c17c9e33616923274e0d3983f44e3224f0e4a8f418f09cadae4b6366f4aa3d0218c3d5d33f6450a8346655f8a1fab984fba340d87d4c01160109fbbfa22d4ca552c363864c9c1d0d6272235b34b99e95a5fa8f411acc278a3cac6b5c982cf6e6c8ec16ad245487f44"}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x7, 0x7, 0x1, 0x0, "234a8a"}, @NFTA_RULE_EXPRESSIONS={0x118, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}}}, {0x64, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x23600}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x800}]}}}, {0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x24, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWFLOWTABLE={0x15c, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0x13c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}}], {0x14}}, 0x880}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004000)
syz_emit_ethernet(0x7a, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60fc104600442f00fc040000000000000000000000000000ff020000000000000000000000000001242088a800000003000008000000000000000000080022eb0000"], 0x0)

0s ago: executing program 4 (id=6785):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003f80), r0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a0001fb31257900efffffff10"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x8000000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)

kernel console output (not intermixed with test programs):

14210][T26150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5274'.
[  515.939504][T26150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5274'.
[  516.152945][T26162] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5278'.
[  516.461871][T26174] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5281'.
[  516.613997][T26192] bond4: (slave lo): Releasing backup interface
[  516.663518][T26192] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  516.686934][T26192] bridge_slave_0: left promiscuous mode
[  516.692717][T26192] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.731513][T26192] bond0: (slave bond_slave_0): Releasing backup interface
[  516.755524][T26192] bond0: (slave bond_slave_1): Releasing backup interface
[  516.778805][T26192] team0: Port device C removed
[  516.813081][T26192] team0: Port device team_slave_1 removed
[  516.819768][T26192] batman_adv: batadv0: Removing interface: batadv_slave_0
[  516.840645][T26192] batman_adv: batadv0: Removing interface: batadv_slave_1
[  516.900674][T26192] bond2: (slave geneve2): Releasing active interface
[  516.920141][T26192] batman_adv: batadv0: Removing interface: gretap1
[  516.931374][T26213] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  516.937346][T13155] IPVS: starting estimator thread 0...
[  516.946210][T26192] bond6: (slave bridge1): Removing an active aggregator
[  516.956308][T26192] bond6: (slave bridge1): Releasing backup interface
[  516.964027][T26192] bridge1: left promiscuous mode
[  516.970914][T26192] bridge1: left allmulticast mode
[  517.026166][T26217] IPVS: using max 57 ests per chain, 136800 per kthread
[  517.079080][T12181] hsr_slave_0: left promiscuous mode
[  517.095726][T12181] hsr_slave_1: left promiscuous mode
[  517.102071][T12181] batman_adv: batadv0: Removing interface: batadv_slave_0
[  517.118617][T12181] batman_adv: batadv0: Removing interface: batadv_slave_1
[  517.350623][T12181] team0 (unregistering): Port device team_slave_1 removed
[  517.364120][T12181] team0 (unregistering): Port device C removed
[  517.527501][T26198] gretap2: entered promiscuous mode
[  517.567632][T26219] syzkaller0: entered promiscuous mode
[  517.576555][T26219] syzkaller0: entered allmulticast mode
[  517.617501][T26231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'.
[  517.635668][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'.
[  517.727770][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'.
[  517.851605][T26234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 45181 - 0
[  517.878872][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'.
[  517.897594][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'.
[  517.968287][T26252] netlink: 'syz.2.5296': attribute type 23 has an invalid length.
[  517.971469][T26234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 45181 - 0
[  518.067575][T26255] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5297'.
[  518.069813][T26234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 45181 - 0
[  518.085607][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  518.106488][T26255] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  518.174355][T26253] netlink: 'syz.2.5296': attribute type 1 has an invalid length.
[  518.182243][T26253] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  518.218676][T26234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 45181 - 0
[  518.253003][T12181] IPVS: stop unused estimator thread 0...
[  518.270835][T26266] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5301'.
[  518.345433][T12181] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 45181 - 0
[  518.375649][T12181] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 45181 - 0
[  518.390960][T12181] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 45181 - 0
[  518.412015][T12181] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 45181 - 0
[  518.425979][T26231] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  518.533241][T26276] netlink: 'syz.4.5306': attribute type 1 has an invalid length.
[  518.541702][T26276] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5306'.
[  518.673713][T26282] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5307'.
[  518.693437][T26282] sch_tbf: burst 0 is lower than device lo mtu (1514) !
[  518.730097][T26284] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5310'.
[  518.749084][T26288] netlink: 'syz.4.5311': attribute type 3 has an invalid length.
[  518.810898][T26288] syz_tun: entered allmulticast mode
[  518.842436][T26288] siw: device registration error -23
[  518.888582][T26302] No such timeout policy "syz1"
[  518.921164][T26288] 8021q: adding VLAN 0 to HW filter on device bond0
[  518.930221][T26288] 8021q: adding VLAN 0 to HW filter on device team0
[  518.941316][T26288] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  518.987582][T17095] lo speed is unknown, defaulting to 1000
[  519.001096][T17095] syz0: Port: 1 Link ACTIVE
[  519.030972][ T5859] lo speed is unknown, defaulting to 1000
[  519.052522][T26285] syz_tun: left allmulticast mode
[  519.237053][T26323] netlink: 'syz.3.5322': attribute type 21 has an invalid length.
[  519.596611][T26347] sctp: [Deprecated]: syz.2.5328 (pid 26347) Use of int in maxseg socket option.
[  519.596611][T26347] Use struct sctp_assoc_value instead
[  519.784094][T26360] 8021q: adding VLAN 0 to HW filter on device bond0
[  519.791605][T26360] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  519.810522][T26360] bond0: (slave sit0): Error -95 calling set_mac_address
[  519.877807][T26363] bond8: option updelay: invalid value (18446744072924056005)
[  519.896656][T26363] bond8: option updelay: allowed values 0 - 2147483647
[  519.919231][T26363] bond8 (unregistering): Released all slaves
[  519.962535][T26361] syzkaller1: entered promiscuous mode
[  519.970981][T26361] syzkaller1: entered allmulticast mode
[  520.021345][T26369] syzkaller0: entered promiscuous mode
[  520.028666][T26369] syzkaller0: entered allmulticast mode
[  520.201310][T26384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  520.227851][T26384] syzkaller0: entered promiscuous mode
[  520.233380][T26384] syzkaller0: entered allmulticast mode
[  520.419650][T26384] tipc: Resetting bearer <eth:syzkaller0>
[  520.739614][T26420] netlink: 'syz.3.5347': attribute type 10 has an invalid length.
[  520.915895][T26378] tipc: Resetting bearer <eth:syzkaller0>
[  520.995970][T26378] tipc: Disabling bearer <eth:syzkaller0>
[  521.019520][T26397] lo speed is unknown, defaulting to 1000
[  521.298488][T26455] netlink: 'syz.1.5356': attribute type 16 has an invalid length.
[  521.307750][T26455] netlink: 'syz.1.5356': attribute type 17 has an invalid length.
[  521.339668][T26455] erspan0: left promiscuous mode
[  521.356341][T26455] erspan0: left allmulticast mode
[  521.400282][T26455] 8021q: adding VLAN 0 to HW filter on device bond0
[  521.474976][T26455] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  521.519930][T26468] netlink: 'syz.0.5361': attribute type 4 has an invalid length.
[  521.951325][T26489] block nbd0: not configured, cannot reconfigure
[  522.968789][T26524] __nla_validate_parse: 24 callbacks suppressed
[  522.968809][T26524] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5373'.
[  523.031711][T26524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5373'.
[  523.144379][T26494] lo speed is unknown, defaulting to 1000
[  523.152094][T26533] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.5377'.
[  523.161776][T26533] netlink: Conntrack attr has 4 unknown bytes
[  523.299200][T26545] netlink: 'syz.1.5380': attribute type 1 has an invalid length.
[  523.546531][T26545] 8021q: adding VLAN 0 to HW filter on device bond9
[  523.562091][T26554] netlink: 'syz.0.5381': attribute type 1 has an invalid length.
[  523.658585][T26557] netlink: 'syz.1.5382': attribute type 15 has an invalid length.
[  523.797458][T26559] netlink: 'syz.1.5383': attribute type 1 has an invalid length.
[  523.897429][T26564] netlink: 'syz.0.5385': attribute type 1 has an invalid length.
[  524.241611][T26573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5390'.
[  524.383244][T26570] xt_hashlimit: Unknown mode mask C4, kernel too old?
[  524.557858][T26584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5394'.
[  524.580812][T26584] netlink: 261 bytes leftover after parsing attributes in process `syz.0.5394'.
[  524.768531][T26597] netlink: 'syz.3.5399': attribute type 1 has an invalid length.
[  524.776562][T26597] netlink: 240 bytes leftover after parsing attributes in process `syz.3.5399'.
[  524.857599][T26588] dvmrp1: tun_chr_ioctl cmd 2148553947
[  524.866233][T26590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5397'.
[  525.416215][T26618] syzkaller0: entered promiscuous mode
[  525.428821][T26618] syzkaller0: entered allmulticast mode
[  525.577158][T26633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5406'.
[  525.886169][T26645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5410'.
[  526.098041][T26655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  530.025344][T26687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5420'.
[  530.100235][T26688] syzkaller0: entered promiscuous mode
[  530.126085][T26688] syzkaller0: entered allmulticast mode
[  530.230388][T26708] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5424'.
[  530.624758][T26712] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5424'.
[  532.027787][T26723] veth0_to_team: entered promiscuous mode
[  532.033833][T26723] veth0_to_team: entered allmulticast mode
[  532.146883][T26729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5426'.
[  532.231236][T26734] Cannot find add_set index 2 as target
[  532.313534][T26734] bond8: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  532.345834][T26743] IPVS: length: 94 != 24
[  532.480681][T26734] bond8 (unregistering): Released all slaves
[  532.567387][T26748] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5429'.
[  532.584128][T26748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5429'.
[  532.981027][T26769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5437'.
[  532.990530][T26769] Unsupported xt match
[  532.990545][T26769] unable to load match
[  533.040207][T26775] netlink: 'syz.3.5438': attribute type 1 has an invalid length.
[  533.136798][T26782] netlink: 'syz.2.5441': attribute type 4 has an invalid length.
[  533.272122][T26789] bond0: (slave macvlan2): Opening slave failed
[  533.507202][T26806] syzkaller0: entered promiscuous mode
[  533.523396][T26806] syzkaller0: entered allmulticast mode
[  533.572526][T26813] IPv6: NLM_F_CREATE should be specified when creating new route
[  533.603281][T26813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5452'.
[  533.647601][T26817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5454'.
[  533.657460][T26817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5454'.
[  533.674778][T26817] netlink: 'syz.3.5454': attribute type 18 has an invalid length.
[  533.810762][T26826] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  533.893647][T26833] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3
[  534.070074][T26842] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  534.742804][T26886] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  534.820562][T26885] syzkaller0: entered promiscuous mode
[  534.826545][T26885] syzkaller0: entered allmulticast mode
[  537.060507][T26913] netlink: zone id is out of range
[  537.084842][T26913] netlink: zone id is out of range
[  537.091109][T26913] netlink: zone id is out of range
[  537.149381][T26917] netlink: 'syz.0.5481': attribute type 4 has an invalid length.
[  537.560413][T26948] __nla_validate_parse: 3 callbacks suppressed
[  537.560432][T26948] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5489'.
[  537.623747][T26948] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5489'.
[  537.845104][T26963] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5490'.
[  537.978165][T26927] lo: Caught tx_queue_len zero misconfig
[  538.071153][T26980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  538.107385][T26985] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5498'.
[  538.170818][T26992] netlink: 'syz.3.5501': attribute type 83 has an invalid length.
[  538.332008][T27001] netlink: 'syz.1.5504': attribute type 3 has an invalid length.
[  538.345621][T26998] netlink: 'syz.3.5503': attribute type 28 has an invalid length.
[  538.365007][T26998] netlink: 'syz.3.5503': attribute type 3 has an invalid length.
[  538.372773][T26998] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5503'.
[  538.375600][T27001] netlink: 'syz.1.5504': attribute type 3 has an invalid length.
[  538.741186][T27025] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5509'.
[  538.798168][T26996] lo speed is unknown, defaulting to 1000
[  539.005138][T27035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5513'.
[  539.422125][T27048] openvswitch: netlink: Duplicate or invalid key (type 0).
[  539.430278][T27048] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  539.666574][T27051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5519'.
[  539.689539][T27051] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5519'.
[  539.752331][T27054] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5520'.
[  539.856333][T27058] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  540.280888][T27056] lo speed is unknown, defaulting to 1000
[  540.353253][T27094] netlink: ct family unspecified
[  540.365887][T27094] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  540.583888][T27098] netlink: 'syz.2.5532': attribute type 21 has an invalid length.
[  540.608524][T27106] netlink: 'syz.3.5534': attribute type 4 has an invalid length.
[  540.619461][T27098] netlink: 'syz.2.5532': attribute type 1 has an invalid length.
[  540.719934][T27098] bond10: entered promiscuous mode
[  540.741060][T27113] netlink: 'syz.4.5535': attribute type 10 has an invalid length.
[  540.767097][T27098] 8021q: adding VLAN 0 to HW filter on device bond10
[  540.853611][T27113] netlink: 'syz.4.5535': attribute type 1 has an invalid length.
[  541.039708][T27118] žÿ: renamed from team_slave_1
[  541.522640][T27147] openvswitch: netlink: IP tunnel dst address not specified
[  541.570589][T27149] bond4: (slave syz_tun): Releasing backup interface
[  541.620969][T27149] veth0_to_bridge: left allmulticast mode
[  541.644276][T27149] veth0_to_bridge: left promiscuous mode
[  541.684501][T27149] bridge0: port 3(veth0_to_bridge) entered disabled state
[  541.733575][T27149] bridge_slave_0: left allmulticast mode
[  541.739777][T27149] bridge_slave_0: left promiscuous mode
[  541.771000][T27149] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.800211][T27149] bridge_slave_1: left allmulticast mode
[  541.814804][T27149] bridge_slave_1: left promiscuous mode
[  541.820622][T27149] bridge0: port 2(bridge_slave_1) entered disabled state
[  541.896568][T27149] bond0: (slave bond_slave_0): Releasing backup interface
[  541.906843][T27149] bond_slave_0: left promiscuous mode
[  541.916525][T27149] bond0: (slave bond_slave_1): Releasing backup interface
[  541.928081][T27149] bond_slave_1: left promiscuous mode
[  541.937738][T27149] team0: Port device team_slave_0 removed
[  541.966898][T27149] team0: Port device 
7
6žÿ removed
[  541.973629][T27149] batman_adv: batadv0: Removing interface: batadv_slave_1
[  541.993369][T27149] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  542.091962][T27160] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  542.709295][T27163] lo speed is unknown, defaulting to 1000
[  542.852082][T27193] __nla_validate_parse: 12 callbacks suppressed
[  542.852099][T27193] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5558'.
[  542.884976][T27193] batadv1: left allmulticast mode
[  542.895812][T27193] batadv1: left promiscuous mode
[  542.906630][T27193] bridge0: port 4(batadv1) entered disabled state
[  543.536880][T27213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5561'.
[  543.575007][T27213] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5561'.
[  543.663340][T27213] geneve4: entered promiscuous mode
[  543.698124][T27213] geneve4: entered allmulticast mode
[  543.713461][T12181] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  543.741299][T12181] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  543.764834][T12181] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  543.785319][T12181] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  543.883297][T27231] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  543.935096][T27233] xt_cluster: node mask cannot exceed total number of nodes
[  543.949995][T27235] syzkaller0: entered promiscuous mode
[  543.956209][T27235] syzkaller0: entered allmulticast mode
[  544.092158][T27235] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5570'.
[  544.178495][T27241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5573'.
[  544.369843][T27264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5577'.
[  544.387410][T27267] tap0: tun_chr_ioctl cmd 1074025680
[  544.395782][T27264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5577'.
[  544.588423][T13152] IPVS: starting estimator thread 0...
[  544.613278][T27272] validate_nla: 2 callbacks suppressed
[  544.613299][T27272] netlink: 'syz.2.5578': attribute type 1 has an invalid length.
[  544.667414][T27287] netlink: 'syz.3.5584': attribute type 4 has an invalid length.
[  544.681113][T27287] netlink: 'syz.3.5584': attribute type 4 has an invalid length.
[  544.705847][T27281] IPVS: using max 57 ests per chain, 136800 per kthread
[  544.866195][T27289] bond8 (unregistering): Released all slaves
[  544.907459][T27294] tipc: Resetting bearer <eth:syzkaller0>
[  545.112438][T27298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5587'.
[  545.212686][T27300] virt_wifi0: mtu less than device minimum
[  545.505372][T27311] syz_tun: entered allmulticast mode
[  545.536864][T27308] syz_tun: left allmulticast mode
[  545.623001][T27316] syzkaller0: entered promiscuous mode
[  545.628901][T27316] syzkaller0: entered allmulticast mode
[  545.921510][T27310] lo speed is unknown, defaulting to 1000
[  546.206492][T27346] netlink: 'syz.2.5599': attribute type 39 has an invalid length.
[  546.477638][T27357] x_tables: duplicate underflow at hook 1
[  547.716919][T16345] lec:lec_start_xmit: lec0:No lecd attached
[  547.935152][T27384] geneve2: left promiscuous mode
[  547.972433][T27384] vlan2: left promiscuous mode
[  547.980672][T27384] bond1: left promiscuous mode
[  547.985868][T27384] bridge2: left promiscuous mode
[  547.991001][T27384] vlan2: left allmulticast mode
[  547.996403][T27384] bond1: left allmulticast mode
[  548.001247][T27384] bridge2: left allmulticast mode
[  548.012233][T27384] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  548.019353][T27384] macsec1: left promiscuous mode
[  548.028680][T27384] bond2: left promiscuous mode
[  548.033455][T27384] vti0: left promiscuous mode
[  548.043590][T27384] ipvlan2: left allmulticast mode
[  548.052574][T27384] veth0_vlan: left allmulticast mode
[  548.058918][T27384] ip6erspan0: left promiscuous mode
[  548.069258][T27384] geneve3: left promiscuous mode
[  548.074207][T27384] geneve3: left allmulticast mode
[  548.096820][T27384] geneve4: left promiscuous mode
[  548.110725][T27384] bond6: left promiscuous mode
[  548.123429][T27384] ip6tnl4: left allmulticast mode
[  548.145651][T27384] geneve5: left promiscuous mode
[  548.170235][T27384] bond10: left promiscuous mode
[  548.278433][T27402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5616'.
[  548.289196][T12180] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.307963][T12180] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.322562][T12180] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.331739][T12180] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.356961][T12180] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.375591][T12180] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.390629][T12180] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  548.410300][T12180] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  548.415829][T27413] sctp: [Deprecated]: syz.2.5619 (pid 27413) Use of int in max_burst socket option deprecated.
[  548.415829][T27413] Use struct sctp_assoc_value instead
[  548.442152][T27413] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5619'.
[  548.556302][T27427] syzkaller1: entered promiscuous mode
[  548.561813][T27427] syzkaller1: entered allmulticast mode
[  548.587823][T27411] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  548.620269][T27411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5618'.
[  548.652789][T27411] netlink: 'syz.0.5618': attribute type 4 has an invalid length.
[  548.994515][T27452] bond0: (slave rose0): Error: Device can not be enslaved while up
[  549.107514][T27452] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  549.303968][T13152] hid-generic 0005:0005:5508.0002: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa
[  549.436941][T27485] bond0: (slave bond_slave_0): Releasing backup interface
[  549.453272][T27482] fido_id[27482]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci1/hci1:200/report_descriptor': No such file or directory
[  549.509221][T27485] bond_slave_0: left promiscuous mode
[  549.517825][T27485] bond0: (slave bond_slave_1): Releasing backup interface
[  549.529431][T27485] bond_slave_1: left promiscuous mode
[  549.538292][T27485] team0: Port device C removed
[  549.549074][T27485] team0: Port device team_slave_1 removed
[  549.557126][T27485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  549.566621][T27485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  549.590378][T27485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  549.629152][T27489] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  549.866275][T27506] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5642'.
[  549.939297][T27513] netlink: 'syz.0.5646': attribute type 1 has an invalid length.
[  549.986421][T27513] 8021q: adding VLAN 0 to HW filter on device bond8
[  550.212826][T27508] lo speed is unknown, defaulting to 1000
[  550.302140][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5650'.
[  550.333888][T27532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5650'.
[  550.440156][T27539] syzkaller1: entered promiscuous mode
[  550.454954][T27539] syzkaller1: entered allmulticast mode
[  550.606717][T27555] netlink: 'syz.2.5656': attribute type 2 has an invalid length.
[  550.616031][T27555] netlink: 'syz.2.5656': attribute type 11 has an invalid length.
[  550.626224][T27555] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5656'.
[  551.274991][T27607] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  551.306297][T27602] vlan0: entered promiscuous mode
[  551.312910][T27602] vlan0: entered allmulticast mode
[  551.330739][T27602] hsr_slave_1: entered allmulticast mode
[  551.839372][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  551.848799][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  551.885108][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  551.900141][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  551.927848][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  552.363569][T27630] lo speed is unknown, defaulting to 1000
[  552.582553][T27663] netlink: 'syz.2.5684': attribute type 16 has an invalid length.
[  552.594658][T27663] netlink: 'syz.2.5684': attribute type 17 has an invalid length.
[  552.750827][T27666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5685'.
[  552.804600][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms
[  552.812679][    C1] lec:lec_tx_timeout: lec0
[  552.934206][T27675] syzkaller0: entered promiscuous mode
[  553.029331][T27675] syzkaller0: entered allmulticast mode
[  553.364201][T27682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5689'.
[  553.374546][T27682] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  553.511701][T27630] chnl_net:caif_netlink_parms(): no params data found
[  553.729987][T27630] bridge0: port 1(bridge_slave_0) entered blocking state
[  553.744922][T27630] bridge0: port 1(bridge_slave_0) entered disabled state
[  553.760422][T27630] bridge_slave_0: entered allmulticast mode
[  553.780977][T27630] bridge_slave_0: entered promiscuous mode
[  553.790134][T27630] bridge0: port 2(bridge_slave_1) entered blocking state
[  553.797606][T27630] bridge0: port 2(bridge_slave_1) entered disabled state
[  553.806875][T27630] bridge_slave_1: entered allmulticast mode
[  553.814823][T27630] bridge_slave_1: entered promiscuous mode
[  553.824358][T27716] netlink: 'syz.0.5699': attribute type 1 has an invalid length.
[  553.856913][T27718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5700'.
[  553.890263][T27630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  553.903321][T27630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  553.907546][T27722] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5701'.
[  553.955133][T27630] team0: Port device team_slave_0 added
[  553.963919][T27630] team0: Port device team_slave_1 added
[  554.003354][T27630] batman_adv: batadv0: Adding interface: batadv_slave_0
[  554.011340][ T5822] Bluetooth: hci4: command tx timeout
[  554.018865][T27630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.045269][T27630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  554.105917][T27630] batman_adv: batadv0: Adding interface: batadv_slave_1
[  554.113159][T27630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  554.121126][T27727] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5699'.
[  554.149972][T27630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.196294][T27727] 8021q: adding VLAN 0 to HW filter on device bond10
[  554.219179][T27730] 8021q: adding VLAN 0 to HW filter on device bond10
[  554.232213][T27730] bond10: (slave geneve4): making interface the new active one
[  554.242566][T27730] bond10: (slave geneve4): Enslaving as an active interface with an up link
[  554.291537][T27729] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  554.316378][T27737] syzkaller0: entered promiscuous mode
[  554.354923][T27737] syzkaller0: entered allmulticast mode
[  554.361791][T12180] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 20004 - 0
[  554.378469][T12180] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 20004 - 0
[  554.411490][T27630] hsr_slave_0: entered promiscuous mode
[  554.426115][T27630] hsr_slave_1: entered promiscuous mode
[  554.435617][T27630] debugfs: 'hsr0' already exists in 'hsr'
[  554.448038][T27630] Cannot create hsr debugfs directory
[  554.467544][T12180] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 20004 - 0
[  554.476128][T12180] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 20004 - 0
[  554.501077][T27720] lo speed is unknown, defaulting to 1000
[  554.640464][T27744] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  555.167365][T27758] xt_hashlimit: max too large, truncated to 1048576
[  555.262889][T27765] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5709'.
[  555.304302][T27765] vlan1: entered promiscuous mode
[  555.317134][T27765] geneve1: entered promiscuous mode
[  555.662168][T27630] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  555.716059][T27630] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  555.765686][T27630] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  555.853998][T27630] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  555.866908][T27785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5714'.
[  555.915071][T27785] hsr_slave_0: left promiscuous mode
[  555.925940][T27785] hsr_slave_1: left promiscuous mode
[  555.965197][T27799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5717'.
[  556.069744][T27810] openvswitch: netlink: Message has 572 unknown bytes.
[  556.078380][T27810] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  556.091887][ T5822] Bluetooth: hci4: command tx timeout
[  556.112561][T27810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5718'.
[  556.233252][T12185] smc: removing ib device syz1
[  556.286418][T27821] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 45181 - 0
[  556.313277][T27821] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  556.468145][T27820] syzkaller0: entered promiscuous mode
[  556.473629][T27820] syzkaller0: entered allmulticast mode
[  556.534715][T27821] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 45181 - 0
[  556.548506][T27821] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  557.652992][T27829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5724'.
[  558.169552][ T5822] Bluetooth: hci4: command tx timeout
[  558.702458][T27821] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 45181 - 0
[  558.712526][T27821] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  558.772031][T27821] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 45181 - 0
[  558.782475][T27821] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0
[  558.849398][T27630] 8021q: adding VLAN 0 to HW filter on device bond0
[  558.897313][T27630] 8021q: adding VLAN 0 to HW filter on device team0
[  558.938850][T12188] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.948556][T12188] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 45181 - 0
[  558.960122][T12180] bridge0: port 1(bridge_slave_0) entered blocking state
[  558.967282][T12180] bridge0: port 1(bridge_slave_0) entered forwarding state
[  559.023192][ T7328] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.032144][ T7328] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 45181 - 0
[  559.034109][T27843] IPVS: set_ctl: invalid protocol: 94 172.20.20.187:22
[  559.063279][T12180] bridge0: port 2(bridge_slave_1) entered blocking state
[  559.070502][T12180] bridge0: port 2(bridge_slave_1) entered forwarding state
[  559.080956][T12188] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.089546][T12188] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 45181 - 0
[  559.119171][T12188] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  559.130643][T12188] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 45181 - 0
[  559.214152][T27849] netlink: 'syz.2.5732': attribute type 11 has an invalid length.
[  559.372788][T27856] syzkaller0: entered promiscuous mode
[  559.384455][T27856] syzkaller0: entered allmulticast mode
[  560.248006][ T5822] Bluetooth: hci4: command tx timeout
[  561.288219][T27630] 8021q: adding VLAN 0 to HW filter on device batadv0
[  561.290100][T27873] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5738'.
[  561.320207][T27873] ..0ªî{X¹¦: renamed from gretap0 (while UP)
[  561.333800][T27873] ..0ªî{X¹¦: entered allmulticast mode
[  561.347596][T27873] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  561.454159][T27630] veth0_vlan: entered promiscuous mode
[  561.476603][T27630] veth1_vlan: entered promiscuous mode
[  561.512469][T27630] veth0_macvtap: entered promiscuous mode
[  561.533707][T27630] veth1_macvtap: entered promiscuous mode
[  561.596373][T27887] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  561.640944][T27630] batman_adv: batadv0: Interface activated: batadv_slave_0
[  561.668206][T27630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  561.711912][T27895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5745'.
[  561.727996][T12185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  561.739170][T12185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  561.747262][T27895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5745'.
[  561.760499][T12185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  561.771527][T12185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  561.785235][T27899] netlink: 'syz.0.5746': attribute type 8 has an invalid length.
[  561.804048][T27899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5746'.
[  561.832032][T27899] gretap0: entered promiscuous mode
[  561.842283][T27899] hsr1: entered promiscuous mode
[  562.012067][T27905] syzkaller0: entered promiscuous mode
[  562.023041][T27905] syzkaller0: entered allmulticast mode
[  562.057986][T27914] netlink: 260 bytes leftover after parsing attributes in process `syz.0.5749'.
[  562.159063][T27921] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.5751'.
[  562.889539][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  562.897553][ T1298] lec:lec_start_xmit: lec0:No lecd attached
[  563.837246][T27921] vlan1: entered promiscuous mode
[  563.842394][T27921] geneve1: entered promiscuous mode
[  563.848503][T27921] vlan1: entered allmulticast mode
[  563.853799][T27921] geneve1: entered allmulticast mode
[  563.886860][T26020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  563.906936][T26020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  563.917746][T13152] lo speed is unknown, defaulting to 1000
[  563.923508][T13152] syz0: Port: 1 Link DOWN
[  563.993971][T13155] lo speed is unknown, defaulting to 1000
[  564.038151][T27938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5756'.
[  564.064100][T26020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  564.071845][T27936] netlink: 'syz.0.5755': attribute type 39 has an invalid length.
[  564.073341][T26020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  564.095882][T27932] lo speed is unknown, defaulting to 1000
[  564.152998][T27942] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5757'.
[  564.189405][T27946] sctp: [Deprecated]: syz.2.5759 (pid 27946) Use of int in max_burst socket option deprecated.
[  564.189405][T27946] Use struct sctp_assoc_value instead
[  564.611719][T26020] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.626393][T26020] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.635227][T27965] netlink: 'syz.2.5765': attribute type 1 has an invalid length.
[  564.694680][T26020] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.703067][T26020] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  564.873767][T27975] ip6gre1: entered promiscuous mode
[  564.924904][T27975] ip6gre1: entered allmulticast mode
[  565.062613][T27984] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5771'.
[  565.180052][T27987] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5771'.
[  565.346626][T12181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  565.361274][T12181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  565.415451][T27996] netlink: 'syz.4.5774': attribute type 10 has an invalid length.
[  565.452577][T27996] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode
[  565.496112][T27996] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  565.674063][T28003] lo speed is unknown, defaulting to 1000
[  565.818446][T28011] netlink: 'syz.0.5778': attribute type 10 has an invalid length.
[  566.135243][T28028] netlink: 'syz.1.5784': attribute type 39 has an invalid length.
[  566.188678][T28031] netlink: 'syz.1.5784': attribute type 5 has an invalid length.
[  566.328624][T28042] __nla_validate_parse: 7 callbacks suppressed
[  566.328644][T28042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5789'.
[  566.347285][ T7328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  566.368709][ T7328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  566.413538][T28043] vlan0: entered promiscuous mode
[  566.444018][T28035] lo speed is unknown, defaulting to 1000
[  566.644146][T28051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5790'.
[  566.939422][T28069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5797'.
[  567.213679][T28086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5802'.
[  567.250771][T28086] netlink: 'syz.1.5802': attribute type 5 has an invalid length.
[  567.272137][T28086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5802'.
[  567.279368][T28089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5803'.
[  567.341906][T28090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5803'.
[  567.378492][T12188] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  567.389689][T12188] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 38829 - 0
[  567.399181][T12188] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 20004 - 0
[  567.407988][T12188] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  567.417447][T12188] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 38829 - 0
[  567.426803][T12188] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 20004 - 0
[  567.463444][T12188] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  567.477234][T12188] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 38829 - 0
[  567.497363][T12188] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 20004 - 0
[  567.517256][T12188] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  567.545457][T12188] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 38829 - 0
[  567.573412][T28095] openvswitch: netlink: Actions may not be safe on all matching packets
[  567.586783][T12188] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 20004 - 0
[  567.635921][T28097] xt_cgroup: path and classid specified
[  567.715454][T28093] syzkaller0: entered promiscuous mode
[  567.735008][T28093] syzkaller0: entered allmulticast mode
[  567.858179][T12181] tipc: Subscription rejected, illegal request
[  567.904960][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  567.913010][    C1] lec:lec_tx_timeout: lec0
[  569.677764][T28125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5810'.
[  569.695797][T28118] 8021q: adding VLAN 0 to HW filter on device bond0
[  569.710610][T28127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5812'.
[  569.720223][T28129] netlink: 'syz.3.5814': attribute type 1 has an invalid length.
[  569.722400][T28118] 8021q: adding VLAN 0 to HW filter on device team0
[  569.746473][T28118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  569.827986][T28134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  569.837995][T28124] syzkaller0: entered promiscuous mode
[  569.844367][T28124] syzkaller0: entered allmulticast mode
[  569.861265][T28136] netlink: 'syz.4.5815': attribute type 5 has an invalid length.
[  569.873968][T28136] netlink: 'syz.4.5815': attribute type 5 has an invalid length.
[  569.888681][T28121] tipc: Resetting bearer <eth:syzkaller0>
[  569.933383][T28121] tipc: Disabling bearer <eth:syzkaller0>
[  570.007459][T28144] vlan4: entered promiscuous mode
[  570.012573][T28144] veth0: entered promiscuous mode
[  570.293845][T28166] lo speed is unknown, defaulting to 1000
[  570.369465][T28177] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5825'.
[  571.736443][T28257] __nla_validate_parse: 2 callbacks suppressed
[  571.736461][T28257] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5845'.
[  571.818477][T28257] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5845'.
[  571.845036][T28257] netlink: 11 bytes leftover after parsing attributes in process `syz.4.5845'.
[  571.963771][T28264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5848'.
[  572.539858][T28274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5847'.
[  572.550950][T28286] syzkaller0: entered promiscuous mode
[  572.586699][T28286] syzkaller0: entered allmulticast mode
[  573.082822][T28306] xt_CT: You must specify a L4 protocol and not use inversions on it
[  573.163856][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  573.176326][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  573.186869][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  573.226467][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  573.234876][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  573.306785][T28310] lo speed is unknown, defaulting to 1000
[  573.959700][T28337] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5861'.
[  574.008358][T28337] bond0 (unregistering): Released all slaves
[  574.068653][T28318] lo speed is unknown, defaulting to 1000
[  574.266430][T28349] bridge0: entered allmulticast mode
[  574.273850][T28349] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  574.398250][T28310] chnl_net:caif_netlink_parms(): no params data found
[  574.509370][T28295] lo speed is unknown, defaulting to 1000
[  574.753333][T28310] bridge0: port 1(bridge_slave_0) entered blocking state
[  574.773092][T28310] bridge0: port 1(bridge_slave_0) entered disabled state
[  574.780923][T28310] bridge_slave_0: entered allmulticast mode
[  574.789502][T28310] bridge_slave_0: entered promiscuous mode
[  574.801229][T28368] lo speed is unknown, defaulting to 1000
[  574.843411][T28310] bridge0: port 2(bridge_slave_1) entered blocking state
[  574.851020][T28310] bridge0: port 2(bridge_slave_1) entered disabled state
[  574.858664][T28310] bridge_slave_1: entered allmulticast mode
[  574.871285][T28310] bridge_slave_1: entered promiscuous mode
[  574.933445][T28310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  574.989753][T28371] syzkaller0: entered promiscuous mode
[  574.995840][T28371] syzkaller0: entered allmulticast mode
[  575.005857][T28310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  575.286255][   T51] Bluetooth: hci5: command tx timeout
[  576.739539][T28310] team0: Port device team_slave_0 added
[  576.748217][T28310] team0: Port device team_slave_1 added
[  576.824403][T28310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  576.845152][T28310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.887287][T28310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  576.903086][T28310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  576.920758][T28310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.984977][T28310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  577.115910][T28310] hsr_slave_0: entered promiscuous mode
[  577.122325][T28310] hsr_slave_1: entered promiscuous mode
[  577.128933][T28310] debugfs: 'hsr0' already exists in 'hsr'
[  577.134967][T28310] Cannot create hsr debugfs directory
[  577.364736][   T51] Bluetooth: hci5: command tx timeout
[  577.495117][T28387] netlink: 'syz.0.5872': attribute type 1 has an invalid length.
[  577.555298][T28388] bond0 (unregistering): Released all slaves
[  577.607510][T28387] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  577.672568][T28397] netlink: 'syz.1.5875': attribute type 1 has an invalid length.
[  577.676298][T28393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5874'.
[  577.681180][T28397] netlink: 'syz.1.5875': attribute type 2 has an invalid length.
[  577.714230][T28397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5875'.
[  578.048815][T28408] syzkaller0: entered promiscuous mode
[  578.054424][T28408] syzkaller0: entered allmulticast mode
[  578.083742][T28423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5878'.
[  579.444820][   T51] Bluetooth: hci5: command tx timeout
[  580.100463][T28310] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  580.120718][T28310] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  580.161542][T28310] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  580.191653][T28443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5887'.
[  580.201835][T28310] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  580.254086][T28446] openvswitch: netlink: IP tunnel dst address not specified
[  580.396178][T28457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5889'.
[  580.468350][T28310] 8021q: adding VLAN 0 to HW filter on device bond0
[  580.524642][T28310] 8021q: adding VLAN 0 to HW filter on device team0
[  580.546403][T26020] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.553588][T26020] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.578165][T26020] bridge0: port 2(bridge_slave_1) entered blocking state
[  580.585380][T26020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.599770][T28468] xt_TPROXY: Can be used only with -p tcp or -p udp
[  580.780307][T28475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5895'.
[  580.796546][T28475] netlink: 'syz.2.5895': attribute type 8 has an invalid length.
[  580.817364][T28475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5895'.
[  581.529537][   T51] Bluetooth: hci5: command tx timeout
[  581.640580][T28493] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5899'.
[  581.894447][T28499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5901'.
[  582.955352][T28310] 8021q: adding VLAN 0 to HW filter on device batadv0
[  583.021365][T28310] veth0_vlan: entered promiscuous mode
[  583.056765][T28310] veth1_vlan: entered promiscuous mode
[  583.077687][T28503] IPv6: addrconf: prefix option has invalid lifetime
[  583.101812][T28503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5904'.
[  583.107829][T28310] veth0_macvtap: entered promiscuous mode
[  583.160713][T28310] veth1_macvtap: entered promiscuous mode
[  583.190416][T28310] batman_adv: batadv0: Interface activated: batadv_slave_0
[  583.210607][T28310] batman_adv: batadv0: Interface activated: batadv_slave_1
[  583.233131][T12181] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.255300][T12181] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.274011][T12181] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.291859][T12181] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.364788][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  583.422447][T12180] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.450356][T12180] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.488128][ T7328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.504920][ T7328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.598303][T28520] syzkaller0: entered promiscuous mode
[  583.603821][T28520] syzkaller0: entered allmulticast mode
[  583.651975][T28520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5908'.
[  583.665711][T28520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5908'.
[  584.025248][T28546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5913'.
[  584.042051][T28546] openvswitch: netlink: Flow actions attr not present in new flow.
[  584.082483][T28548] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5914'.
[  584.528860][T28560] xt_CT: You must specify a L4 protocol and not use inversions on it
[  584.583712][T28565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5919'.
[  584.622019][T28571] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5922'.
[  584.729523][T28575] syzkaller0: entered promiscuous mode
[  584.748529][T28575] syzkaller0: entered allmulticast mode
[  584.780974][T28575] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) !
[  584.978963][T28591] xt_l2tp: v2 sid > 0xffff: 4294967294
[  585.071570][T28601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5931'.
[  585.083361][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5931'.
[  585.098855][T28601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5931'.
[  585.111349][T28596] netlink: 'syz.3.5929': attribute type 11 has an invalid length.
[  585.136789][T28601] vlan3: entered allmulticast mode
[  585.142257][T28601] gretap0: entered allmulticast mode
[  585.543329][T28622] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20001
[  585.689313][   T51] block nbd0: Receive control failed (result -32)
[  585.833692][T28645] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  585.848109][T28645] bond0 (unregistering): Released all slaves
[  586.542373][T28682] macvtap1: entered promiscuous mode
[  586.548073][T28682] veth1_to_hsr: entered promiscuous mode
[  586.562499][T28682] macvtap1: entered allmulticast mode
[  586.572196][T28682] veth1_to_hsr: entered allmulticast mode
[  586.768173][T28687] lo speed is unknown, defaulting to 1000
[  587.542854][T28722] netlink: 'syz.2.5964': attribute type 1 has an invalid length.
[  587.667121][T28726] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  587.983385][T28730] syzkaller0: entered promiscuous mode
[  588.015610][T28730] syzkaller0: entered allmulticast mode
[  588.096332][T28747] bridge_slave_1: left allmulticast mode
[  588.102026][T28747] bridge_slave_1: left promiscuous mode
[  588.108725][T28747] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.131494][T28747] bridge_slave_0: left allmulticast mode
[  588.153285][T28747] bridge_slave_0: left promiscuous mode
[  588.169021][T28747] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.193078][T28760] openvswitch: netlink: IP tunnel dst address not specified
[  588.512918][T28775] __nla_validate_parse: 16 callbacks suppressed
[  588.512937][T28775] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5974'.
[  590.386215][T28775] ..1ªî{X¹¦: renamed from ..0ªî{X¹¦ (while UP)
[  590.394063][T28775] A link change request failed with some changes committed already. Interface ..1ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  590.436472][T28766] lo speed is unknown, defaulting to 1000
[  590.737317][T28803] sch_fq: defrate 4294967293 ignored.
[  590.961918][T28810] lo speed is unknown, defaulting to 1000
[  591.272528][   T30] audit: type=1107 audit(1771788371.160:26): pid=28828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  591.285258][T28829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  591.309198][T28833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5990'.
[  591.319891][T28833] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5990'.
[  591.434140][T28832] syzkaller0: entered promiscuous mode
[  591.439965][T28832] syzkaller0: entered allmulticast mode
[  593.452697][T28840] syzkaller1: entered promiscuous mode
[  593.459079][T28840] syzkaller1: entered allmulticast mode
[  594.202440][T28887] syzkaller1: entered promiscuous mode
[  594.210819][T28887] syzkaller1: entered allmulticast mode
[  594.350812][T28896] syzkaller1: entered promiscuous mode
[  594.356553][T28896] syzkaller1: entered allmulticast mode
[  594.365931][T28896] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6006'.
[  594.432346][T28898] syzkaller0: entered promiscuous mode
[  594.438662][T28898] syzkaller0: entered allmulticast mode
[  594.802743][T28905] netlink: 181328 bytes leftover after parsing attributes in process `syz.2.6009'.
[  595.003124][T28925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6014'.
[  595.012497][T28925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6014'.
[  595.106349][T28931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6013'.
[  596.797487][T28900] ip6tnl3: entered allmulticast mode
[  596.921280][T28947] netlink: 'syz.3.6016': attribute type 3 has an invalid length.
[  596.945353][T28947] netlink: 'syz.3.6016': attribute type 3 has an invalid length.
[  596.945521][T28949] x_tables: duplicate underflow at hook 1
[  596.966466][T28945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6015'.
[  596.975892][T28952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6015'.
[  596.976986][T28947] netlink: 'syz.3.6016': attribute type 3 has an invalid length.
[  596.998860][T28947] netlink: 'syz.3.6016': attribute type 3 has an invalid length.
[  597.060407][T28951] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6018'.
[  597.258724][T28979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6024'.
[  597.280073][T28978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6026'.
[  597.434332][T28983] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  597.447247][T28983] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  597.592077][T28996] lo speed is unknown, defaulting to 1000
[  598.138272][T29032] lo speed is unknown, defaulting to 1000
[  598.471639][T29050] xt_CT: You must specify a L4 protocol and not use inversions on it
[  598.565118][T29054] netlink: 'syz.4.6044': attribute type 1 has an invalid length.
[  598.663923][T29054] bond8: (slave bridge3): making interface the new active one
[  598.752105][T29054] bond8: (slave bridge3): Enslaving as an active interface with an up link
[  598.908585][T29059] lo speed is unknown, defaulting to 1000
[  598.919608][T29065] macvlan3: entered promiscuous mode
[  598.927032][T29065] macvlan3: entered allmulticast mode
[  598.933381][T29065] bond8: entered promiscuous mode
[  598.944843][T29065] bridge3: entered promiscuous mode
[  598.951209][T29065] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  598.959535][T29065] bond8: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  598.977615][T29065] bond8: left promiscuous mode
[  598.982564][T29065] bridge3: left promiscuous mode
[  599.613524][T29083] ip6t_srh: unknown srh invflags BA61
[  599.851475][T29092] macsec2: entered promiscuous mode
[  599.876535][T29092] veth1_macvtap: entered promiscuous mode
[  599.910617][T29092] veth1_macvtap: left promiscuous mode
[  599.961894][T29099] __nla_validate_parse: 7 callbacks suppressed
[  599.961914][T29099] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6054'.
[  600.001356][T29096] syzkaller1: entered promiscuous mode
[  600.020950][T29096] syzkaller1: entered allmulticast mode
[  600.044943][T29100] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6056'.
[  600.105520][T29104] syzkaller1: entered promiscuous mode
[  600.111688][T29104] syzkaller1: entered allmulticast mode
[  600.134266][T29104] syzkaller0: entered promiscuous mode
[  600.141201][T29104] syzkaller0: entered allmulticast mode
[  600.172055][T29104] netlink: 'syz.0.6057': attribute type 13 has an invalid length.
[  600.249940][T29113] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20003
[  600.268913][T29112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  600.323544][T29102] tipc: Resetting bearer <eth:syzkaller0>
[  600.343362][T29102] tipc: Disabling bearer <eth:syzkaller0>
[  600.458330][T29128] netlink: 'syz.3.6062': attribute type 3 has an invalid length.
[  600.471238][T29128] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6062'.
[  600.564195][T29090] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  600.589588][T29134] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6065'.
[  600.650174][T29134] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6065'.
[  600.669002][T29134] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6065'.
[  600.696898][T29142] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  600.717933][T29142] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6068'.
[  600.787969][T29144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6065'.
[  601.023964][T29163] veth1_macvtap: left promiscuous mode
[  601.030124][T29163] macsec0: entered promiscuous mode
[  601.071083][T29161] veth1_macvtap: entered promiscuous mode
[  601.081077][T29161] macsec0: left promiscuous mode
[  601.167124][T29170] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6073'.
[  601.180723][T29170] openvswitch: netlink: Flow key attr not present in new flow.
[  601.197323][T29175] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6074'.
[  601.231640][T29175] 8021q: adding VLAN 0 to HW filter on device bond11
[  601.292188][T29179] tipc: Started in network mode
[  601.298746][T29179] tipc: Node identity b2fe38cb4e12, cluster identity 4711
[  601.306234][T29179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  601.319229][T29179] syzkaller0: entered promiscuous mode
[  601.326212][T29179] syzkaller0: entered allmulticast mode
[  601.402849][T29179] tipc: Resetting bearer <eth:syzkaller0>
[  601.439705][ T5822] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  601.449879][ T5822] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  601.458565][ T5822] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  601.467314][ T5822] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  601.477599][ T5822] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  602.122409][T29178] tipc: Resetting bearer <eth:syzkaller0>
[  602.170072][T29178] tipc: Disabling bearer <eth:syzkaller0>
[  602.221399][T29185] lo speed is unknown, defaulting to 1000
[  602.444851][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  602.486129][ T5882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  602.957470][T29185] chnl_net:caif_netlink_parms(): no params data found
[  603.109060][T29185] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.117167][T29185] bridge0: port 1(bridge_slave_0) entered disabled state
[  603.125246][T29185] bridge_slave_0: entered allmulticast mode
[  603.133254][T29185] bridge_slave_0: entered promiscuous mode
[  603.142140][T29185] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.151163][T29185] bridge0: port 2(bridge_slave_1) entered disabled state
[  603.158999][T29185] bridge_slave_1: entered allmulticast mode
[  603.167113][T29185] bridge_slave_1: entered promiscuous mode
[  603.217523][T29185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  603.242477][T29185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  603.315808][T29185] team0: Port device team_slave_0 added
[  603.358114][T29185] team0: Port device team_slave_1 added
[  603.376849][T29255] netlink: 'syz.0.6094': attribute type 1 has an invalid length.
[  603.432494][T29185] batman_adv: batadv0: Adding interface: batadv_slave_0
[  603.458495][T29185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.485525][T29185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  603.504286][T29185] batman_adv: batadv0: Adding interface: batadv_slave_1
[  603.511764][T29185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  603.539978][ T5822] Bluetooth: hci2: command tx timeout
[  603.552183][T29185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  603.581956][T29263] vlan2: entered allmulticast mode
[  603.595481][T29263] team0: entered allmulticast mode
[  603.605065][T29263] team_slave_0: entered allmulticast mode
[  603.620525][T29263] team_slave_1: entered allmulticast mode
[  603.667702][T29268] netlink: 'syz.0.6098': attribute type 7 has an invalid length.
[  603.729429][T29268] netlink: 'syz.0.6098': attribute type 7 has an invalid length.
[  603.744268][T29185] hsr_slave_0: entered promiscuous mode
[  603.754849][T29185] hsr_slave_1: entered promiscuous mode
[  603.761533][T29185] debugfs: 'hsr0' already exists in 'hsr'
[  603.773920][T29185] Cannot create hsr debugfs directory
[  603.782154][T12181] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  603.804813][T12181] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  603.827759][T12181] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  603.847542][T12181] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  604.065644][T29278] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  604.589766][T29302] Cannot find del_set index 4 as target
[  604.686863][T29305] netlink: 'syz.3.6113': attribute type 3 has an invalid length.
[  604.772432][T29185] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  604.792067][T29185] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  604.812496][T29185] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  604.833197][T29185] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  604.912511][T29316] lo speed is unknown, defaulting to 1000
[  605.049793][T29185] 8021q: adding VLAN 0 to HW filter on device bond0
[  605.093824][T29185] 8021q: adding VLAN 0 to HW filter on device team0
[  605.122605][T12187] bridge0: port 1(bridge_slave_0) entered blocking state
[  605.129851][T12187] bridge0: port 1(bridge_slave_0) entered forwarding state
[  605.197157][T26020] bridge0: port 2(bridge_slave_1) entered blocking state
[  605.204364][T26020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  605.615951][ T5822] Bluetooth: hci2: command tx timeout
[  605.641939][T29327] __nla_validate_parse: 7 callbacks suppressed
[  605.641956][T29327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6116'.
[  605.662301][T29327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6116'.
[  605.685033][T29327] netlink: 'syz.0.6116': attribute type 18 has an invalid length.
[  605.800709][T29185] 8021q: adding VLAN 0 to HW filter on device batadv0
[  605.859417][T29185] veth0_vlan: entered promiscuous mode
[  605.873460][T29185] veth1_vlan: entered promiscuous mode
[  605.929935][T29185] veth0_macvtap: entered promiscuous mode
[  605.942768][T29185] veth1_macvtap: entered promiscuous mode
[  605.972918][T29185] batman_adv: batadv0: Interface activated: batadv_slave_0
[  606.000815][T29185] batman_adv: batadv0: Interface activated: batadv_slave_1
[  606.062648][T12181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  606.121052][T12181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  606.144129][T12181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  606.182897][T12181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  606.198395][T29333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6117'.
[  606.553780][T12181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.579982][T12181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.622937][T12176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  606.634062][T12176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  606.882489][T29340] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  607.168052][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  607.187296][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  607.232344][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  607.293752][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  607.387628][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  607.504572][T29351] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.512651][T29351] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.689391][   T51] Bluetooth: hci2: command tx timeout
[  607.805868][T29351] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  607.831321][T29351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  607.878826][T29360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6122'.
[  608.343668][T29365] sctp: [Deprecated]: syz.1.6121 (pid 29365) Use of int in max_burst socket option deprecated.
[  608.343668][T29365] Use struct sctp_assoc_value instead
[  608.631568][T12176] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  608.690938][T12176] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  608.706011][T12176] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  608.736252][T26020] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  608.768348][T29346] lo speed is unknown, defaulting to 1000
[  608.943137][T29380] sctp: [Deprecated]: syz.4.6125 (pid 29380) Use of struct sctp_assoc_value in delayed_ack socket option.
[  608.943137][T29380] Use struct sctp_sack_info instead
[  609.525421][   T51] Bluetooth: hci3: command tx timeout
[  609.560761][T29311] Set syz1 is full, maxelem 65536 reached
[  609.704097][T29398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6130'.
[  609.767968][   T51] Bluetooth: hci2: command tx timeout
[  610.000243][T29405] lo speed is unknown, defaulting to 1000
[  610.417079][T29346] chnl_net:caif_netlink_parms(): no params data found
[  610.496646][T29429] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  610.520433][T29429] batman_adv: batadv0: Adding interface: gretap1
[  610.556388][T29429] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  610.558693][ T5967] IPVS: starting estimator thread 0...
[  610.603333][T29429] batman_adv: batadv0: Interface activated: gretap1
[  610.684768][T29434] IPVS: using max 36 ests per chain, 86400 per kthread
[  610.869927][T16345] lec:lec_start_xmit: lec0:No lecd attached
[  611.105928][T29346] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.124484][T29346] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.142218][T29346] bridge_slave_0: entered allmulticast mode
[  611.169724][T29346] bridge_slave_0: entered promiscuous mode
[  611.213985][T29459] lo speed is unknown, defaulting to 1000
[  611.226044][T29346] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.243503][T29346] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.254906][T29346] bridge_slave_1: entered allmulticast mode
[  611.310756][T29346] bridge_slave_1: entered promiscuous mode
[  611.332464][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'.
[  611.396327][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'.
[  611.448360][T29346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  611.461836][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'.
[  611.491768][T29471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6148'.
[  611.506121][T29478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6149'.
[  611.517913][T29346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  611.530762][T29478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6149'.
[  611.575353][T29478] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6149'.
[  611.604980][   T51] Bluetooth: hci3: command tx timeout
[  611.610643][T29478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6149'.
[  611.616853][T29482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6150'.
[  611.622933][T12180] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  611.659050][T12180] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  611.670640][T12180] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  611.687828][T29346] team0: Port device team_slave_0 added
[  611.697226][T12180] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  611.710820][T29346] team0: Port device team_slave_1 added
[  611.813607][T29346] batman_adv: batadv0: Adding interface: batadv_slave_0
[  611.837653][T29346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  611.888085][T29346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  611.932371][T29486] veth3: entered promiscuous mode
[  611.940945][T29346] batman_adv: batadv0: Adding interface: batadv_slave_1
[  611.974593][T29346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  612.019267][T29346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  612.981774][T29346] hsr_slave_0: entered promiscuous mode
[  612.989061][T29346] hsr_slave_1: entered promiscuous mode
[  612.997379][T29346] debugfs: 'hsr0' already exists in 'hsr'
[  613.003218][T29346] Cannot create hsr debugfs directory
[  613.151549][T29519] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6162'.
[  613.180193][T29519] netlink: 'syz.2.6162': attribute type 18 has an invalid length.
[  613.318082][T29519] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  613.318385][T29523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  613.413683][T29525] lo speed is unknown, defaulting to 1000
[  613.497877][T29346] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.590854][T29531] ip6t_REJECT: ECHOREPLY is not supported
[  613.635427][T29346] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.685189][   T51] Bluetooth: hci3: command tx timeout
[  613.690866][T29536] netlink: 'syz.4.6165': attribute type 1 has an invalid length.
[  613.706354][T29536] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  613.758996][T29346] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  613.989831][T29346] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  614.035425][T29557] tipc: Started in network mode
[  614.040417][T29557] tipc: Node identity fed47bf78c70f607, cluster identity 4711
[  614.051332][T29557] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  614.072631][T29557] nbd: must specify a size in bytes for the device
[  614.230049][T29563] 8021q: adding VLAN 0 to HW filter on device bond9
[  614.276334][T29563] macsec1: entered promiscuous mode
[  614.281556][T29563] bond9: entered promiscuous mode
[  614.292593][T29563] macsec1: entered allmulticast mode
[  614.299122][T29563] bond9: entered allmulticast mode
[  614.312659][T29563] bond9: left allmulticast mode
[  614.317796][T29563] bond9: left promiscuous mode
[  614.668980][T29346] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  614.705523][T29346] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  614.751537][T29346] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  614.779269][T29346] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  614.821062][T29591] tipc: Enabling of bearer <dth:s> rejected, media not registered
[  614.953763][T29346] 8021q: adding VLAN 0 to HW filter on device bond0
[  615.003949][T29346] 8021q: adding VLAN 0 to HW filter on device team0
[  615.047658][T12176] bridge0: port 1(bridge_slave_0) entered blocking state
[  615.054864][T12176] bridge0: port 1(bridge_slave_0) entered forwarding state
[  615.100019][T12176] bridge0: port 2(bridge_slave_1) entered blocking state
[  615.107240][T12176] bridge0: port 2(bridge_slave_1) entered forwarding state
[  615.518231][T29642] netlink: 'syz.4.6188': attribute type 4 has an invalid length.
[  615.678390][T29658] netlink: 'syz.3.6192': attribute type 32 has an invalid length.
[  615.679627][T29346] 8021q: adding VLAN 0 to HW filter on device batadv0
[  615.695515][T29656] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20004
[  615.719687][T29656] 
: renamed from bond_slave_0
[  615.738610][T29649] syzkaller1: entered promiscuous mode
[  615.744193][T29649] syzkaller1: entered allmulticast mode
[  615.767768][   T51] Bluetooth: hci3: command tx timeout
[  615.884644][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  615.892735][    C1] lec:lec_tx_timeout: lec0
[  615.916490][T29664] lo speed is unknown, defaulting to 1000
[  615.957251][T29346] veth0_vlan: entered promiscuous mode
[  615.993565][T29346] veth1_vlan: entered promiscuous mode
[  616.081618][T29346] veth0_macvtap: entered promiscuous mode
[  616.114148][T29346] veth1_macvtap: entered promiscuous mode
[  616.179139][T29346] batman_adv: batadv0: Interface activated: batadv_slave_0
[  616.214984][T29346] batman_adv: batadv0: Interface activated: batadv_slave_1
[  616.261377][T26020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  616.295194][T26020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  616.346683][T26020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  616.357938][T26020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  616.535247][T29685] ieee802154 phy0 wpan0: encryption failed: -22
[  616.623986][T12176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.672542][T12176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.890642][ T7328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  616.902285][T29707] __nla_validate_parse: 13 callbacks suppressed
[  616.902303][T29707] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6206'.
[  616.931877][ T7328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.959290][T29707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6206'.
[  616.985305][T29706] bridge2: entered promiscuous mode
[  617.135363][T29713] bond0: (slave gre0): The slave device specified does not support setting the MAC address
[  617.165742][T29713] bond0: (slave gre0): Error -95 calling set_mac_address
[  617.270579][T29724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6118'.
[  617.292934][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.327604][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.334493][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.341436][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.348350][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.355219][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.363536][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.370454][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.370572][T29728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6210'.
[  617.377351][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.377457][T29725] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  617.447024][T29729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6210'.
[  617.827087][T29724] veth0_macvtap: left promiscuous mode
[  618.082127][T29728] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  618.329486][T29750] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.465474][T29750] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.562190][T29750] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.597798][T29769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6220'.
[  618.607904][T29771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6221'.
[  618.706093][T29774] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6222'.
[  618.720286][T29750] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  618.787246][T29776] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  618.800141][T29776] bond10 (unregistering): Released all slaves
[  619.047904][T12176] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  619.100766][T29800] netlink: 124 bytes leftover after parsing attributes in process `syz.0.6229'.
[  619.111462][T12187] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  619.201633][T12187] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  619.214515][T12187] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  619.229612][T29802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6230'.
[  619.256452][T29802] netlink: 'syz.2.6230': attribute type 6 has an invalid length.
[  619.763858][T29852] tipc: Started in network mode
[  619.777644][T29852] tipc: Node identity de6e08f9aef9, cluster identity 4711
[  619.788600][T29852] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  619.841536][T29852] tipc: Disabling bearer <eth:syzkaller0>
[  620.259538][T29872] macvtap2: entered promiscuous mode
[  620.305014][T29872] macvtap2: entered allmulticast mode
[  620.310462][T29872] veth1_vlan: entered allmulticast mode
[  620.372301][T29879] macvtap3: entered promiscuous mode
[  620.386280][T29879] macvtap3: entered allmulticast mode
[  620.404403][T29881] syzkaller0: entered promiscuous mode
[  620.420034][T29881] syzkaller0: entered allmulticast mode
[  620.703110][T29903] netlink: 'syz.0.6257': attribute type 39 has an invalid length.
[  620.717769][T29905] ..1ªî{X¹¦: left allmulticast mode
[  620.763521][ T5930] lo speed is unknown, defaulting to 1000
[  620.771960][ T5930] syz0: Port: 1 Link ACTIVE
[  620.779288][T17095] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  620.844245][ T5930] lo speed is unknown, defaulting to 1000
[  620.876026][T29914] geneve2: entered promiscuous mode
[  620.882874][T12180] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  620.914369][T12180] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  620.932397][T12180] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  620.947821][T12180] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  621.017457][T29921] netlink: 'syz.2.6261': attribute type 1 has an invalid length.
[  621.025710][T29921] netlink: 'syz.2.6261': attribute type 2 has an invalid length.
[  621.040271][T29917] netlink: 'syz.3.6262': attribute type 3 has an invalid length.
[  621.057454][T29917] netlink: 'syz.3.6262': attribute type 2 has an invalid length.
[  621.066416][T29917] netlink: 'syz.3.6262': attribute type 2 has an invalid length.
[  621.142964][T29917] netlink: 'syz.3.6262': attribute type 3 has an invalid length.
[  621.175674][T29917] pim6reg: entered allmulticast mode
[  621.224977][ T5931] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  621.859453][T29970] lo speed is unknown, defaulting to 1000
[  621.886300][T29971] netlink: 'syz.4.6273': attribute type 1 has an invalid length.
[  621.939884][T29969] netlink: 'syz.4.6273': attribute type 1 has an invalid length.
[  622.114473][T29987] __nla_validate_parse: 15 callbacks suppressed
[  622.114492][T29987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6278'.
[  622.167103][T29990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6278'.
[  622.364095][T30001] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6282'.
[  622.440624][T30001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6282'.
[  623.044944][T30026] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6291'.
[  623.142980][T30034] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6293'.
[  623.270451][T30047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6295'.
[  623.353416][T30051] Can't find ip_set type bitmap:ip
[  623.409305][T30047] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6295'.
[  623.430217][T30061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6299'.
[  623.440085][T30061] netlink: 556 bytes leftover after parsing attributes in process `syz.2.6299'.
[  623.587450][T30071] IPVS: set_ctl: invalid protocol: 4 255.255.255.255:0
[  624.328612][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  624.340354][ T1298] lec:lec_start_xmit: lec0:No lecd attached
[  624.625642][T30099] xt_time: unknown flags 0xf4
[  624.692339][T30105] pim6reg: entered allmulticast mode
[  624.908120][T30119] validate_nla: 4 callbacks suppressed
[  624.908136][T30119] netlink: 'syz.3.6316': attribute type 5 has an invalid length.
[  625.060143][T30134] syzkaller0: entered promiscuous mode
[  625.065868][T30134] syzkaller0: entered allmulticast mode
[  625.637075][T30167] sctp: [Deprecated]: syz.1.6334 (pid 30167) Use of int in max_burst socket option deprecated.
[  625.637075][T30167] Use struct sctp_assoc_value instead
[  625.680591][T30167] xt_ecn: cannot match TCP bits for non-tcp packets
[  625.741854][T30173] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  625.778645][T30178] net_ratelimit: 3322 callbacks suppressed
[  625.778665][T30178] openvswitch: netlink: Flow key attr not present in new flow.
[  625.858332][T30177] delete_channel: no stack
[  626.083443][T30195] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  626.164188][T30199] Cannot find add_set index 1 as target
[  626.193209][T30199] pim6reg: left allmulticast mode
[  626.271315][T30200] team0 (unregistering): Port device team_slave_0 removed
[  626.302219][T30200] team0 (unregistering): Port device team_slave_1 removed
[  626.520310][T30211] netlink: 'syz.4.6348': attribute type 1 has an invalid length.
[  626.589392][T30211] bond10: entered promiscuous mode
[  626.605269][T30211] bond10: entered allmulticast mode
[  626.617049][T30218] batman_adv: batadv0: Removing interface: batadv_slave_1
[  626.699135][T30216] bond10: (slave ip6gretap1): making interface the new active one
[  626.708899][T30216] ip6gretap1: entered promiscuous mode
[  626.715679][T30216] ip6gretap1: entered allmulticast mode
[  626.722144][T30216] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[  626.732433][T30212] »»»»»»: renamed from vlan1
[  626.762719][T30231] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  626.778306][T30226] syzkaller0: entered promiscuous mode
[  626.794062][T30226] syzkaller0: entered allmulticast mode
[  626.817613][T30226] tipc: Resetting bearer <eth:syzkaller0>
[  626.856010][T30234] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  626.883532][T30224] tipc: Resetting bearer <eth:syzkaller0>
[  626.947359][T30224] tipc: Disabling bearer <eth:syzkaller0>
[  626.968441][T30234] netlink: 'syz.4.6355': attribute type 2 has an invalid length.
[  627.261544][T30272] __nla_validate_parse: 10 callbacks suppressed
[  627.261562][T30272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6364'.
[  627.414374][T30285] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.6369'.
[  627.425692][T30285] openvswitch: netlink: Port 167772160 exceeds max allowable 65535
[  627.783936][T30306] lo speed is unknown, defaulting to 1000
[  628.277230][ T5909] IPVS: starting estimator thread 0...
[  628.366026][T30321] IPVS: using max 28 ests per chain, 67200 per kthread
[  628.574150][T30342] syzkaller0: entered promiscuous mode
[  628.585152][T30336] netlink: 'syz.4.6383': attribute type 1 has an invalid length.
[  628.590199][T30342] syzkaller0: entered allmulticast mode
[  628.688681][T30336] 8021q: adding VLAN 0 to HW filter on device bond11
[  628.734156][T30344] bond11: (slave veth13): Enslaving as an active interface with a down link
[  628.901542][T30336] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode
[  628.918334][T30336] bond11: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  628.952450][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6389'.
[  628.995585][T30366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6389'.
[  629.180222][T30386] netlink: 'syz.2.6393': attribute type 13 has an invalid length.
[  629.233035][T30393] netlink: 'syz.2.6393': attribute type 1 has an invalid length.
[  629.404167][T30403] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  629.458260][T12176] veth5: left allmulticast mode
[  629.463270][T12176] veth5: left promiscuous mode
[  629.474014][T12176] bridge3: port 1(veth5) entered disabled state
[  629.509248][T12176] team0: left allmulticast mode
[  629.514321][T12176] team0: left promiscuous mode
[  629.519940][T12176] bridge0: port 1(team0) entered disabled state
[  629.796181][T12176] batman_adv: batadv0: Removing interface: gretap1
[  629.828133][T12176] bond1 (unregistering): (slave gretap2): Releasing active interface
[  629.837286][T12176] gretap2 (unregistering): left allmulticast mode
[  629.844648][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5500 ms
[  629.852739][    C1] lec:lec_tx_timeout: lec0
[  629.903606][T12176] bond7 (unregistering): (slave gretap3): Releasing active interface
[  630.241110][T12176] bond12 (unregistering): (slave geneve3): Releasing active interface
[  630.750849][T12176] bond5 (unregistering): (slave bridge5): Releasing backup interface
[  630.931266][T12176] team0: Port device bridge8 removed
[  630.990472][T12176] bond0 (unregistering): Released all slaves
[  631.003428][T12176] bond1 (unregistering): Released all slaves
[  631.017005][T12176] bond2 (unregistering): Released all slaves
[  631.030913][T12176] bond3 (unregistering): Released all slaves
[  631.048593][T12176] bond4 (unregistering): Released all slaves
[  631.075106][T12176] bond5 (unregistering): Released all slaves
[  631.091173][T12176] bond6 (unregistering): Released all slaves
[  631.103702][T12176] bond7 (unregistering): Released all slaves
[  631.116690][T12176] bond8 (unregistering): Released all slaves
[  631.131065][T12176] bond9 (unregistering): Released all slaves
[  631.155477][T12176] bond10 (unregistering): Released all slaves
[  631.168406][T12176] bond11 (unregistering): Released all slaves
[  631.182500][T12176] bond12 (unregistering): Released all slaves
[  631.195486][T30408] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  631.389651][T30427] lo speed is unknown, defaulting to 1000
[  631.657373][T30448] netlink: 4436 bytes leftover after parsing attributes in process `syz.2.6409'.
[  631.679541][T30448] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  631.733731][T30454] netlink: 876 bytes leftover after parsing attributes in process `syz.0.6412'.
[  631.759880][T30454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6412'.
[  631.837218][T30454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6412'.
[  631.973412][T30467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6414'.
[  632.112617][T30467] 8021q: adding VLAN 0 to HW filter on device bond1
[  632.148383][T30479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6414'.
[  633.760397][T30475] 8021q: adding VLAN 0 to HW filter on device batadv1
[  633.772176][T30475] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  633.806615][T30479] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  633.827224][T30479] bond1 (unregistering): Released all slaves
[  633.912192][T30481] bridge0: entered allmulticast mode
[  634.140723][T30486] lo speed is unknown, defaulting to 1000
[  634.211548][T30490] 8021q: adding VLAN 0 to HW filter on device bond0
[  634.221282][T30490] 8021q: adding VLAN 0 to HW filter on device team0
[  634.243536][T30490] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  634.330635][T30500] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  634.357468][T12176] mÿ5nè‹Ò: left promiscuous mode
[  634.429052][T30504] syzkaller0: entered promiscuous mode
[  634.434846][T30504] syzkaller0: entered allmulticast mode
[  634.455876][T12176] tipc: Disabling bearer <udp:syz2>
[  634.463653][T12176] tipc: Disabling bearer <eth:vlan1>
[  634.471703][T12176] tipc: Left network mode
[  634.552834][T12176] IPVS: stopping backup sync thread 15444 ...
[  634.588960][T30508] syzkaller0: entered promiscuous mode
[  634.600251][T30508] syzkaller0: entered allmulticast mode
[  634.621109][T30511] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6426'.
[  634.694412][T30506] lo speed is unknown, defaulting to 1000
[  635.127892][T30513] syzkaller0: entered promiscuous mode
[  635.133414][T30513] syzkaller0: entered allmulticast mode
[  635.345571][T30525] IPVS: length: 132 != 8
[  637.126010][T30500] tipc: Resetting bearer <eth:syzkaller0>
[  637.168664][T30534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6432'.
[  637.169368][T30500] tipc: Disabling bearer <eth:syzkaller0>
[  637.428254][T30539] netlink: 'syz.4.6434': attribute type 1 has an invalid length.
[  637.450627][T30539] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6434'.
[  637.593643][   T51] block nbd3: Receive control failed (result -32)
[  637.647413][T12176] hsr_slave_0: left promiscuous mode
[  637.656025][T30558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6439'.
[  637.686896][T12176] pimreg3 (unregistering): left allmulticast mode
[  637.752701][T30566] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6439'.
[  637.759297][T12176] pim6reg (unregistering): left allmulticast mode
[  637.818808][T30567] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6439'.
[  637.828170][T30567] netlink: 'syz.3.6439': attribute type 7 has an invalid length.
[  637.838896][T30567] netlink: 'syz.3.6439': attribute type 8 has an invalid length.
[  637.847493][T30567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6439'.
[  638.025603][T30558] bond0: ARP target 170.170.170.170 is already present
[  638.055288][T30558] bond0: option arp_ip_target: invalid value (2863311530)
[  638.125288][T30567] ip6gretap0: entered promiscuous mode
[  638.158731][T30567] ip6gretap0: left promiscuous mode
[  638.793464][T30605] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6450'.
[  638.973181][T30589] batman_adv: batadv0: Interface deactivated: gretap1
[  639.035518][T30589] veth1_to_hsr: left allmulticast mode
[  639.052204][T30589] veth1_to_hsr: left promiscuous mode
[  639.222705][T30589] veth1_vlan: left allmulticast mode
[  639.256232][ T5882] lo speed is unknown, defaulting to 1000
[  639.262412][ T5882] syz0: Port: 1 Link DOWN
[  639.274271][ T5882] lo speed is unknown, defaulting to 1000
[  639.280900][T12181] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.289990][T12181] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 45181 - 0
[  639.306769][T12181] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.325429][T12181] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 45181 - 0
[  639.358533][T12181] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.361684][T12176] IPVS: stop unused estimator thread 0...
[  639.385071][T12181] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 45181 - 0
[  639.420848][T12187] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  639.431272][T12187] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 45181 - 0
[  639.441584][T30618] lo speed is unknown, defaulting to 1000
[  639.894810][T30644] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6460'.
[  639.964067][T30644] netlink: 120 bytes leftover after parsing attributes in process `syz.2.6460'.
[  640.015053][T30644] netlink: 'syz.2.6460': attribute type 1 has an invalid length.
[  640.051901][T30650] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  640.182891][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  640.204344][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  640.213106][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  640.237375][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  640.246226][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  640.356708][T30657] lo speed is unknown, defaulting to 1000
[  640.375650][T30665] netlink: 'syz.1.6466': attribute type 1 has an invalid length.
[  640.483935][T30665] bond1: Unable to set up delay as MII monitoring is disabled
[  640.537026][T30665] bond1 (unregistering): Released all slaves
[  640.701997][T30677] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  640.717650][T30677] bond1 (unregistering): Released all slaves
[  641.160118][T30688] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6469'.
[  641.218498][T30698] Bluetooth: MGMT ver 1.23
[  641.590579][T30657] chnl_net:caif_netlink_parms(): no params data found
[  641.659141][T30727] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6477'.
[  641.679871][T30730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6478'.
[  641.812617][T30730] bridge0: entered promiscuous mode
[  641.820450][T30730] bridge0: port 3(macvtap0) entered blocking state
[  641.827621][T30730] bridge0: port 3(macvtap0) entered disabled state
[  641.840532][T30730] macvtap0: entered allmulticast mode
[  641.846295][T30730] bridge0: entered allmulticast mode
[  641.853997][T30730] macvtap0: left allmulticast mode
[  641.859391][T30730] bridge0: left allmulticast mode
[  641.866012][T30730] bridge0: left promiscuous mode
[  642.027922][T30657] bridge0: port 1(bridge_slave_0) entered blocking state
[  642.059746][T30657] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.071336][T30657] bridge_slave_0: entered allmulticast mode
[  642.079924][T30657] bridge_slave_0: entered promiscuous mode
[  642.132206][T30657] bridge0: port 2(bridge_slave_1) entered blocking state
[  642.142259][T30657] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.149840][T30657] bridge_slave_1: entered allmulticast mode
[  642.159496][T30657] bridge_slave_1: entered promiscuous mode
[  642.191061][T30752] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6485'.
[  642.280361][T30657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  642.293561][T30657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  642.325019][   T51] Bluetooth: hci0: command tx timeout
[  642.372065][T30657] team0: Port device team_slave_0 added
[  642.388736][T30657] team0: Port device team_slave_1 added
[  642.665324][ T7328] bond10 (unregistering): (slave ip6gretap1): Releasing active interface
[  642.673793][ T7328] ip6gretap1 (unregistering): left promiscuous mode
[  642.685855][ T7328] ip6gretap1 (unregistering): left allmulticast mode
[  642.807633][ T7328] batman_adv: batadv0: Removing interface: gretap1
[  642.837500][ T7328] bond7 (unregistering): (slave gre3): Releasing backup interface
[  642.845483][ T7328] gre3 (unregistering): left promiscuous mode
[  642.998312][ T7328] bond8 (unregistering): (slave bridge3): Releasing active interface
[  643.121769][ T7328] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  643.131013][ T7328] mac80211_hwsim hwsim48 wlan1: left promiscuous mode
[  643.138413][ T7328] bond0 (unregistering): Released all slaves
[  643.148438][ T7328] bond1 (unregistering): Released all slaves
[  643.162416][ T7328] bond2 (unregistering): Released all slaves
[  643.184797][ T7328] bond3 (unregistering): Released all slaves
[  643.201603][ T7328] bond4 (unregistering): Released all slaves
[  643.232334][ T7328] bond5 (unregistering): (slave veth7): Releasing active interface
[  643.242115][ T7328] bond5 (unregistering): (slave veth9): Releasing active interface
[  643.251180][ T7328] bond5 (unregistering): Released all slaves
[  643.265735][ T7328] bond6 (unregistering): Released all slaves
[  643.279303][ T7328] bond7 (unregistering): Released all slaves
[  643.293795][ T7328] bond8 (unregistering): Released all slaves
[  643.313393][ T7328] bond9 (unregistering): Released all slaves
[  643.326304][ T7328] bond10 (unregistering): Released all slaves
[  643.339883][ T7328] bond11 (unregistering): (slave veth13): Releasing active interface
[  643.355295][ T7328] bond11 (unregistering): Released all slaves
[  643.369171][ T7328] bond12 (unregistering): Released all slaves
[  643.391150][T30657] batman_adv: batadv0: Adding interface: batadv_slave_0
[  643.398271][T30657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.425673][T30657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  643.551520][T30657] batman_adv: batadv0: Adding interface: batadv_slave_1
[  643.573971][T30657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  643.600421][T30657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  643.617224][ T7328] : left promiscuous mode
[  643.688828][T30785] syzkaller1: entered promiscuous mode
[  643.695064][T30785] syzkaller1: entered allmulticast mode
[  643.738029][ T7328] tipc: Left network mode
[  643.888761][T30657] hsr_slave_0: entered promiscuous mode
[  643.895734][T30657] hsr_slave_1: entered promiscuous mode
[  643.902241][T30657] debugfs: 'hsr0' already exists in 'hsr'
[  643.908323][T30657] Cannot create hsr debugfs directory
[  643.950302][T30801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6501'.
[  643.993830][T30805] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6500'.
[  644.097370][T30797] delete_channel: no stack
[  644.405013][   T51] Bluetooth: hci0: command tx timeout
[  646.258995][T30833] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  646.353964][T30841] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6
[  646.441511][T30839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6509'.
[  646.485744][   T51] Bluetooth: hci0: command tx timeout
[  646.765757][T30847] ip6tnl0: Caught tx_queue_len zero misconfig
[  647.613153][T12181] smc: removing ib device syz0
[  647.804040][T30889] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  647.875060][T30889] bond1 (unregistering): Released all slaves
[  647.937599][T30907] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6521'.
[  647.990646][T30910] RDS: rds_bind could not find a transport for ::1400:0:0:0, load rds_tcp or rds_rdma?
[  648.428096][T30923] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6524'.
[  648.459982][T30923] netlink: 100 bytes leftover after parsing attributes in process `syz.3.6524'.
[  648.480112][T30921] gre0: entered promiscuous mode
[  648.487302][T30921] gre0: entered allmulticast mode
[  648.564813][   T51] Bluetooth: hci0: command tx timeout
[  648.582586][T30926] openvswitch: netlink: IP tunnel dst address not specified
[  648.630951][T30928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6523'.
[  648.905896][T30936] C: renamed from team_slave_0
[  648.925280][T30936] netlink: 'syz.1.6528': attribute type 1 has an invalid length.
[  648.933166][T30936] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  648.975842][T30946] netlink: 616 bytes leftover after parsing attributes in process `syz.3.6529'.
[  649.148765][T30950] bond1: option ad_user_port_key: invalid value (65535)
[  649.164899][T30950] bond1: option ad_user_port_key: allowed values 0 - 1023
[  649.177838][T30950] bond1 (unregistering): Released all slaves
[  649.369485][T30962] netlink: 'syz.2.6534': attribute type 1 has an invalid length.
[  649.384356][T30962] netlink: 280 bytes leftover after parsing attributes in process `syz.2.6534'.
[  649.872657][T30657] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  649.917077][T30973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6537'.
[  649.959239][T30657] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  650.021351][T30657] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  650.046031][T30988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6537'.
[  650.109692][T30657] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  650.567186][T30268] udevd[30268]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  650.648728][T30922] udevd[30922]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  650.879004][T30657] 8021q: adding VLAN 0 to HW filter on device bond0
[  650.951807][T31027] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.6545'.
[  651.027290][T30657] 8021q: adding VLAN 0 to HW filter on device team0
[  651.217543][T31024] syzkaller0: entered promiscuous mode
[  651.245933][T31024] syzkaller0: entered allmulticast mode
[  651.282039][T12188] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.289241][T12188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  653.696267][T31045] tipc: Started in network mode
[  653.701947][T31045] tipc: Node identity fe800000000000000000000000000018, cluster identity 4711
[  653.715924][T31045] tipc: Enabled bearer <udp:syz0>, priority 10
[  653.796862][T12188] bridge0: port 2(bridge_slave_1) entered blocking state
[  653.804028][T12188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  653.927779][T31090] __nla_validate_parse: 1 callbacks suppressed
[  653.927798][T31090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6554'.
[  653.974914][T31090] vlan0: entered promiscuous mode
[  653.979999][T31090] dummy0: entered promiscuous mode
[  654.096188][ T7328] IPVS: stop unused estimator thread 0...
[  654.347804][T31116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6561'.
[  654.476704][T31126] netlink: 'syz.1.6562': attribute type 142 has an invalid length.
[  654.526993][T31126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6562'.
[  654.538014][T31126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6562'.
[  654.602000][T30657] 8021q: adding VLAN 0 to HW filter on device batadv0
[  654.617052][T31134] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6563'.
[  654.844976][T13144] tipc: Node number set to 4269801496
[  655.129786][T31159] 8021q: VLANs not supported on vcan0
[  655.540126][T30657] veth0_vlan: entered promiscuous mode
[  655.601093][T31186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6573'.
[  655.617522][T31186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6573'.
[  655.677078][T30657] veth1_vlan: entered promiscuous mode
[  655.745487][T31193] syzkaller0: entered promiscuous mode
[  655.751022][T31193] syzkaller0: entered allmulticast mode
[  655.808476][T31193] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) !
[  655.904470][T30657] veth0_macvtap: entered promiscuous mode
[  655.930258][T30657] veth1_macvtap: entered promiscuous mode
[  655.973038][T30657] batman_adv: batadv0: Interface activated: batadv_slave_0
[  656.048456][T30657] batman_adv: batadv0: Interface activated: batadv_slave_1
[  656.486833][T31220] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6579'.
[  656.527093][T31217] syzkaller0: entered promiscuous mode
[  656.532634][T31217] syzkaller0: entered allmulticast mode
[  656.591764][T12181] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  656.611136][T12181] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  656.681145][T31217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6579'.
[  656.696230][T12181] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  656.715282][T12181] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  656.920051][T12187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  656.929982][T31234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6583'.
[  656.969225][T12187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.154710][T12187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  657.163743][T12187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  657.424164][T31255] Cannot find add_set index 1 as target
[  657.493730][T31262] netlink: 'syz.1.6588': attribute type 28 has an invalid length.
[  657.670277][T31253] dvmrp1: entered allmulticast mode
[  657.967457][T31288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  658.001749][T31288] syzkaller0: entered promiscuous mode
[  658.007663][T31288] syzkaller0: entered allmulticast mode
[  658.256819][T31304] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  658.274121][T31304] syzkaller0: entered promiscuous mode
[  658.286880][T31304] syzkaller0: entered allmulticast mode
[  658.383749][T31313] tipc: Resetting bearer <eth:syzkaller0>
[  658.439932][T31303] tipc: Resetting bearer <eth:syzkaller0>
[  658.512371][T31303] tipc: Disabling bearer <eth:syzkaller0>
[  658.909450][T31343] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  659.440295][T31369] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  659.510914][T31377] netlink: 'syz.0.6623': attribute type 1 has an invalid length.
[  659.582175][T31377] bond1: entered promiscuous mode
[  659.588159][T31377] bond1: entered allmulticast mode
[  659.610872][T31382] bond1: (slave ip6gretap1): making interface the new active one
[  659.619622][T31382] ip6gretap1: entered promiscuous mode
[  659.626629][T31382] ip6gretap1: entered allmulticast mode
[  659.627807][T31387] __nla_validate_parse: 38 callbacks suppressed
[  659.627823][T31387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6625'.
[  659.641403][T31382] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  659.678576][T31377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6623'.
[  659.702159][T31377] bond1: left promiscuous mode
[  659.707904][T31377] ip6gretap1: left promiscuous mode
[  659.713289][T31377] bond1: left allmulticast mode
[  659.720308][T31377] ip6gretap1: left allmulticast mode
[  659.728759][T31377] 8021q: adding VLAN 0 to HW filter on device bond1
[  659.869294][T31405] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6630'.
[  660.102455][T31416] netlink: 'syz.2.6634': attribute type 9 has an invalid length.
[  660.208541][T31426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6636'.
[  660.416040][T31443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6641'.
[  660.519054][T31436] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6640'.
[  660.567966][T31448] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  660.782762][T31469] netlink: 'syz.2.6647': attribute type 2 has an invalid length.
[  660.791289][T31469] netlink: 'syz.2.6647': attribute type 8 has an invalid length.
[  660.799201][T31469] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6647'.
[  660.815148][T31469] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.6647'.
[  660.840864][T31464] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  660.974108][T31478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6650'.
[  661.051173][T31478] 8021q: adding VLAN 0 to HW filter on device bond1
[  661.188012][T31477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6651'.
[  661.725001][T31514] xt_ecn: cannot match TCP bits for non-tcp packets
[  661.774077][T31512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  661.887263][T31512] tipc: Disabling bearer <eth:syzkaller0>
[  661.948851][T31524] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  661.969625][T31518] syzkaller0: entered promiscuous mode
[  661.984131][T31531] block nbd4: Unsupported socket: should be TCP or UNIX.
[  662.002316][T31518] syzkaller0: entered allmulticast mode
[  662.056138][T31531] ip6tnl2: entered allmulticast mode
[  662.061845][T31524] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  662.178245][T31534] bridge2: entered promiscuous mode
[  662.202846][T31534] bridge2: entered allmulticast mode
[  662.226510][T31534] team0: Port device bridge2 added
[  662.234342][T31539] bridge0: port 3(team0) entered blocking state
[  662.246101][T31539] bridge0: port 3(team0) entered disabled state
[  662.257555][T31539] team0: entered allmulticast mode
[  662.263018][T31539] team_slave_0: entered allmulticast mode
[  662.270503][T31539] team_slave_1: entered allmulticast mode
[  662.279382][T31539] team0: entered promiscuous mode
[  662.285062][T31539] team_slave_0: entered promiscuous mode
[  662.291073][T31539] team_slave_1: entered promiscuous mode
[  662.301351][T31539] bridge0: port 3(team0) entered blocking state
[  662.307752][T31539] bridge0: port 3(team0) entered forwarding state
[  662.317492][T31524] tipc: Resetting bearer <eth:syzkaller0>
[  662.353187][T31524] tipc: Disabling bearer <eth:syzkaller0>
[  662.366869][T31546] syzkaller0: entered promiscuous mode
[  662.372474][T31546] syzkaller0: entered allmulticast mode
[  664.660675][T31589] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  665.032562][T31611] syzkaller0: entered promiscuous mode
[  665.044212][T31611] syzkaller0: entered allmulticast mode
[  665.939183][T31643] syzkaller0: entered promiscuous mode
[  665.944820][T31643] syzkaller0: entered allmulticast mode
[  666.160132][T31651] __nla_validate_parse: 73 callbacks suppressed
[  666.160167][T31651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6687'.
[  668.255704][T31666] bridge0: port 2(bridge_slave_1) entered disabled state
[  668.263327][T31666] bridge0: port 1(bridge_slave_0) entered disabled state
[  668.331689][T31666] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  668.350710][T31666] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  668.446350][T12181] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.468922][T12181] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.519094][T12187] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.548382][T12187] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  668.615708][T31703] tipc: Started in network mode
[  668.621480][T31703] tipc: Node identity ac14140f, cluster identity 4711
[  668.637340][T31703] tipc: New replicast peer: 255.255.255.255
[  668.643945][T31703] tipc: Enabled bearer <udp:syz2>, priority 10
[  668.651317][T31706] bond0: (slave sit0): The slave device specified does not support setting the MAC address
[  668.665021][T31706] bond0: (slave sit0): Error -95 calling set_mac_address
[  668.686655][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6695'.
[  668.705413][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6695'.
[  668.904982][T31724] xt_TPROXY: Can be used only with -p tcp or -p udp
[  668.915474][T31724] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20003
[  668.968554][T31725] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6700'.
[  669.071645][T31730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6702'.
[  669.389721][T31752] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6708'.
[  669.487466][T31755] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6709'.
[  669.609946][T31764] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  669.659466][T31764] batman_adv: batadv0: Adding interface: gretap1
[  669.667099][T31764] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  669.693647][T31764] batman_adv: batadv0: Interface activated: gretap1
[  669.713214][T31766] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  669.716862][T31764] xt_connbytes: Forcing CT accounting to be enabled
[  669.727586][T31771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6713'.
[  669.741845][T31771] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6713'.
[  669.754629][ T5909] tipc: Node number set to 2886997007
[  669.758646][T31764] IPv6: NLM_F_CREATE should be specified when creating new route
[  669.906672][T31787] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6717'.
[  669.917386][T31788] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  670.342712][T31824] geneve2: entered promiscuous mode
[  670.348061][T31824] geneve2: entered allmulticast mode
[  670.351460][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807f0ed000: rx timeout, send abort
[  670.728606][T31839] bridge0: port 3(team0) entered disabled state
[  670.735051][T31839] bridge0: port 2(bridge_slave_1) entered disabled state
[  670.742443][T31839] bridge0: port 1(bridge_slave_0) entered disabled state
[  670.851613][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807f0ec800: rx timeout, send abort
[  670.861688][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807f0ed000: abort rx timeout. Force session deactivation
[  671.174034][T31839] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  671.206853][T31839] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  671.359992][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807f0ec800: abort rx timeout. Force session deactivation
[  671.377318][T31868] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  671.684709][T31844] veth0_macvtap: left promiscuous mode
[  671.693416][ T5909] tipc: Node number set to 4243339467
[  671.727174][T12187] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.760686][T12187] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.819967][T12187] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.854334][T12187] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.866206][T31878] __nla_validate_parse: 8 callbacks suppressed
[  671.866226][T31878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6744'.
[  671.906830][T31877] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.6743'.
[  671.927305][T31881] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6745'.
[  672.107702][T31895] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6751'.
[  672.117208][T31895] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  672.127755][T31895] netlink: 'syz.0.6751': attribute type 2 has an invalid length.
[  672.347375][T31896] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6747'.
[  672.721540][T31931] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6757'.
[  672.731263][T31931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6757'.
[  672.785189][T31931] netlink: 'syz.0.6757': attribute type 1 has an invalid length.
[  672.803351][T31931] nbd: error processing sock list
[  673.024486][T31946] netlink: 388 bytes leftover after parsing attributes in process `syz.3.6761'.
[  673.046609][T31943] ieee802154 phy0 wpan0: encryption failed: -90
[  673.180858][T31959] netlink: 'syz.2.6762': attribute type 21 has an invalid length.
[  673.197966][T31951] syzkaller0: entered promiscuous mode
[  673.203478][T31951] syzkaller0: entered allmulticast mode
[  673.212602][T31959] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6762'.
[  673.253547][T31951] FAULT_INJECTION: forcing a failure.
[  673.253547][T31951] name failslab, interval 1, probability 0, space 0, times 0
[  673.270845][T31951] CPU: 0 UID: 0 PID: 31951 Comm: syz.3.6763 Not tainted syzkaller #0 PREEMPT(full) 
[  673.270872][T31951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  673.270883][T31951] Call Trace:
[  673.270891][T31951]  <TASK>
[  673.270900][T31951]  dump_stack_lvl+0xe8/0x150
[  673.270932][T31951]  should_fail_ex+0x412/0x560
[  673.270957][T31951]  should_failslab+0xa8/0x100
[  673.270977][T31951]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  673.271001][T31951]  ? __alloc_skb+0x186/0x7d0
[  673.271020][T31951]  ? __alloc_skb+0x1d0/0x7d0
[  673.271037][T31951]  ? __local_bh_enable_ip+0xd0/0x130
[  673.271064][T31951]  __alloc_skb+0x1d0/0x7d0
[  673.271090][T31951]  netlink_sendmsg+0x5d4/0xb40
[  673.271118][T31951]  ? __pfx_netlink_sendmsg+0x10/0x10
[  673.271142][T31951]  ? aa_sock_msg_perm+0xf1/0x1b0
[  673.271164][T31951]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  673.271184][T31951]  ? __pfx_netlink_sendmsg+0x10/0x10
[  673.271203][T31951]  ____sys_sendmsg+0xa68/0xad0
[  673.271243][T31951]  ? __pfx_____sys_sendmsg+0x10/0x10
[  673.271276][T31951]  ? import_iovec+0x73/0xa0
[  673.271303][T31951]  ___sys_sendmsg+0x2a5/0x360
[  673.271333][T31951]  ? __pfx____sys_sendmsg+0x10/0x10
[  673.271391][T31951]  ? __fget_files+0x2a/0x420
[  673.271413][T31951]  ? __fget_files+0x3a0/0x420
[  673.271445][T31951]  __x64_sys_sendmsg+0x1bd/0x2a0
[  673.271470][T31951]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  673.271504][T31951]  ? __pfx_ksys_write+0x10/0x10
[  673.271533][T31951]  do_syscall_64+0x14d/0xf80
[  673.271558][T31951]  ? trace_irq_disable+0x3b/0x150
[  673.271581][T31951]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.271599][T31951]  ? clear_bhb_loop+0x40/0x90
[  673.271620][T31951]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  673.271638][T31951] RIP: 0033:0x7f0107f9c629
[  673.271656][T31951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  673.271670][T31951] RSP: 002b:00007f0108f30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  673.271694][T31951] RAX: ffffffffffffffda RBX: 00007f0108215fa0 RCX: 00007f0107f9c629
[  673.271706][T31951] RDX: 0000000000004000 RSI: 0000200000000000 RDI: 0000000000000006
[  673.271718][T31951] RBP: 00007f0108f30090 R08: 0000000000000000 R09: 0000000000000000
[  673.271729][T31951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  673.271740][T31951] R13: 00007f0108216038 R14: 00007f0108215fa0 R15: 00007ffe211ecb68
[  673.271770][T31951]  </TASK>
[  673.785858][T31974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6767'.
[  674.162207][T16345] lec:lec_start_xmit: lec0:No lecd attached
[  675.494465][T31959] netlink: 'syz.2.6762': attribute type 4 has an invalid length.
[  675.502782][T31959] netlink: 'syz.2.6762': attribute type 5 has an invalid length.
[  675.528969][T31971] batadv_slave_0: entered promiscuous mode
[  675.591310][T31973] batadv_slave_0: left promiscuous mode
[  675.619622][T31979] syz_tun: entered allmulticast mode
[  676.006736][T31982] bridge0: port 2(bridge_slave_1) entered disabled state
[  676.014214][T31982] bridge0: port 1(bridge_slave_0) entered disabled state
[  676.179843][T31982] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  676.199188][T31982] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  676.420603][T31982] tipc: Resetting bearer <eth:macvlan1>
[  676.548451][T31982] vlan2: left allmulticast mode
[  676.553342][T31982] team0: left allmulticast mode
[  676.565482][T31982] team_slave_0: left allmulticast mode
[  676.570993][T31982] team_slave_1: left allmulticast mode
[  676.576900][T31982] bridge2: left promiscuous mode
[  676.662573][T31982] batman_adv: batadv0: Interface deactivated: gretap1
[  676.738535][T32003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  676.753563][T32003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.773052][T12188] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.794724][T12188] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.803131][T12188] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  676.835000][T31979] syz_tun: left allmulticast mode
[  676.904284][T32003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  676.918379][T32003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  676.967614][T12188] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  677.119561][T32003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  677.132358][T32003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.193648][T32049] : entered promiscuous mode
[  677.312154][T32054] __nla_validate_parse: 2 callbacks suppressed
[  677.312176][T32054] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6781'.
[  677.329698][T32003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  677.340567][T32003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  677.353493][T32054] netlink: 'syz.4.6781': attribute type 9 has an invalid length.
[  677.361870][T32054] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6781'.
[  677.382827][T32054] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6781'.
[  677.476444][T32059] netlink: 'syz.2.6784': attribute type 2 has an invalid length.
[  677.537350][T32059] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  677.614893][T31977] Bluetooth: hci4: command 0x0406 tx timeout
[  677.658381][T32053] 
[  677.660745][T32053] ======================================================
[  677.667755][T32053] WARNING: possible circular locking dependency detected
[  677.674768][T32053] syzkaller #0 Not tainted
[  677.679194][T32053] ------------------------------------------------------
[  677.686222][T32053] syz.0.6782/32053 is trying to acquire lock:
[  677.692277][T32053] ffffffff8e85e9a8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x218/0x19c0
[  677.701851][T32053] 
[  677.701851][T32053] but task is already holding lock:
[  677.709201][T32053] ffff888025f3c318 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  677.719566][T32053] 
[  677.719566][T32053] which lock already depends on the new lock.
[  677.719566][T32053] 
[  677.730006][T32053] 
[  677.730006][T32053] the existing dependency chain (in reverse order) is:
[  677.739011][T32053] 
[  677.739011][T32053] -> #2 (&q->q_usage_counter(io)#53){++++}-{0:0}:
[  677.747614][T32053]        blk_alloc_queue+0x546/0x680
[  677.752897][T32053]        __blk_mq_alloc_disk+0x197/0x390
[  677.758514][T32053]        nbd_dev_add+0x499/0xb50
[  677.763440][T32053]        nbd_init+0x168/0x1f0
[  677.768110][T32053]        do_one_initcall+0x250/0x8d0
[  677.773389][T32053]        do_initcall_level+0x104/0x190
[  677.778839][T32053]        do_initcalls+0x59/0xa0
[  677.783690][T32053]        kernel_init_freeable+0x2a6/0x3e0
[  677.789401][T32053]        kernel_init+0x1d/0x1d0
[  677.794244][T32053]        ret_from_fork+0x51e/0xb90
[  677.799343][T32053]        ret_from_fork_asm+0x1a/0x30
[  677.804621][T32053] 
[  677.804621][T32053] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  677.811822][T32053]        fs_reclaim_acquire+0x71/0x100
[  677.817268][T32053]        prepare_alloc_pages+0x152/0x650
[  677.822896][T32053]        __alloc_frozen_pages_noprof+0x12f/0x380
[  677.829210][T32053]        __alloc_pages_noprof+0xa/0x30
[  677.834831][T32053]        pcpu_populate_chunk+0x182/0xb30
[  677.840448][T32053]        pcpu_alloc_noprof+0xc6c/0x19c0
[  677.845977][T32053]        xt_percpu_counter_alloc+0x161/0x220
[  677.851944][T32053]        translate_table+0x1332/0x20b0
[  677.857404][T32053]        ip6t_register_table+0x11b/0x800
[  677.863056][T32053]        ip6table_raw_table_init+0x54/0x80
[  677.868873][T32053]        xt_find_table_lock+0x30c/0x3e0
[  677.874419][T32053]        xt_request_find_table_lock+0x26/0x100
[  677.880666][T32053]        do_ip6t_get_ctl+0x716/0x1230
[  677.886202][T32053]        nf_getsockopt+0x26e/0x290
[  677.891308][T32053]        ipv6_getsockopt+0x1fd/0x2b0
[  677.896581][T32053]        do_sock_getsockopt+0x2d3/0x3f0
[  677.902115][T32053]        __x64_sys_getsockopt+0x1a4/0x240
[  677.907820][T32053]        do_syscall_64+0x14d/0xf80
[  677.912922][T32053]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  677.919318][T32053] 
[  677.919318][T32053] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}:
[  677.927050][T32053]        __lock_acquire+0x15a5/0x2cf0
[  677.932428][T32053]        lock_acquire+0xf0/0x2e0
[  677.937353][T32053]        __mutex_lock+0x19f/0x1300
[  677.942465][T32053]        pcpu_alloc_noprof+0x218/0x19c0
[  677.948008][T32053]        sbitmap_init_node+0x1e1/0x640
[  677.953461][T32053]        sbitmap_queue_init_node+0x3e/0x4d0
[  677.959343][T32053]        blk_mq_init_tags+0x15c/0x2d0
[  677.964705][T32053]        blk_mq_alloc_map_and_rqs+0xbb/0x9c0
[  677.970681][T32053]        blk_mq_update_nr_hw_queues+0xa68/0x1ae0
[  677.976995][T32053]        nbd_start_device+0x17f/0xb10
[  677.982358][T32053]        nbd_genl_connect+0x165b/0x1cf0
[  677.987980][T32053]        genl_family_rcv_msg_doit+0x22a/0x330
[  677.994039][T32053]        genl_rcv_msg+0x61c/0x7a0
[  677.999054][T32053]        netlink_rcv_skb+0x232/0x4b0
[  678.004327][T32053]        genl_rcv+0x28/0x40
[  678.008822][T32053]        netlink_unicast+0x80f/0x9b0
[  678.014090][T32053]        netlink_sendmsg+0x813/0xb40
[  678.019371][T32053]        ____sys_sendmsg+0xa68/0xad0
[  678.024649][T32053]        ___sys_sendmsg+0x2a5/0x360
[  678.029839][T32053]        __x64_sys_sendmsg+0x1bd/0x2a0
[  678.035288][T32053]        do_syscall_64+0x14d/0xf80
[  678.040393][T32053]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.046796][T32053] 
[  678.046796][T32053] other info that might help us debug this:
[  678.046796][T32053] 
[  678.057029][T32053] Chain exists of:
[  678.057029][T32053]   pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#53
[  678.057029][T32053] 
[  678.070686][T32053]  Possible unsafe locking scenario:
[  678.070686][T32053] 
[  678.078128][T32053]        CPU0                    CPU1
[  678.083478][T32053]        ----                    ----
[  678.088826][T32053]   lock(&q->q_usage_counter(io)#53);
[  678.094198][T32053]                                lock(fs_reclaim);
[  678.100684][T32053]                                lock(&q->q_usage_counter(io)#53);
[  678.108566][T32053]   lock(pcpu_alloc_mutex);
[  678.113058][T32053] 
[  678.113058][T32053]  *** DEADLOCK ***
[  678.113058][T32053] 
[  678.121186][T32053] 6 locks held by syz.0.6782/32053:
[  678.126365][T32053]  #0: ffffffff8fc39470 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  678.134543][T32053]  #1: ffffffff8fc39288 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  678.143497][T32053]  #2: ffff8880263c19d0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1ae0
[  678.154881][T32053]  #3: ffff8880263c18d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1ae0
[  678.165830][T32053]  #4: ffff888025f3c318 (&q->q_usage_counter(io)#53){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  678.176626][T32053]  #5: ffff888025f3c350 (&q->q_usage_counter(queue)#37){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10
[  678.187590][T32053] 
[  678.187590][T32053] stack backtrace:
[  678.193461][T32053] CPU: 1 UID: 0 PID: 32053 Comm: syz.0.6782 Not tainted syzkaller #0 PREEMPT(full) 
[  678.193479][T32053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  678.193489][T32053] Call Trace:
[  678.193496][T32053]  <TASK>
[  678.193503][T32053]  dump_stack_lvl+0xe8/0x150
[  678.193526][T32053]  print_circular_bug+0x2e1/0x300
[  678.193551][T32053]  check_noncircular+0x12e/0x150
[  678.193575][T32053]  __lock_acquire+0x15a5/0x2cf0
[  678.193602][T32053]  lock_acquire+0xf0/0x2e0
[  678.193620][T32053]  ? pcpu_alloc_noprof+0x218/0x19c0
[  678.193639][T32053]  __mutex_lock+0x19f/0x1300
[  678.193662][T32053]  ? pcpu_alloc_noprof+0x218/0x19c0
[  678.193677][T32053]  ? stack_depot_save_flags+0x3f3/0x810
[  678.193697][T32053]  ? kasan_save_track+0x4f/0x80
[  678.193712][T32053]  ? kasan_save_track+0x3e/0x80
[  678.193725][T32053]  ? pcpu_alloc_noprof+0x218/0x19c0
[  678.193739][T32053]  ? __kmalloc_cache_node_noprof+0x3ef/0x6b0
[  678.193765][T32053]  ? blk_mq_init_tags+0x83/0x2d0
[  678.193784][T32053]  ? blk_mq_alloc_map_and_rqs+0xbb/0x9c0
[  678.193806][T32053]  ? blk_mq_update_nr_hw_queues+0xa68/0x1ae0
[  678.193823][T32053]  ? __pfx___mutex_lock+0x10/0x10
[  678.193849][T32053]  ? genl_rcv+0x28/0x40
[  678.193869][T32053]  ? ____sys_sendmsg+0xa68/0xad0
[  678.193889][T32053]  ? ___sys_sendmsg+0x2a5/0x360
[  678.193914][T32053]  pcpu_alloc_noprof+0x218/0x19c0
[  678.193936][T32053]  sbitmap_init_node+0x1e1/0x640
[  678.193959][T32053]  sbitmap_queue_init_node+0x3e/0x4d0
[  678.193981][T32053]  blk_mq_init_tags+0x15c/0x2d0
[  678.194001][T32053]  blk_mq_alloc_map_and_rqs+0xbb/0x9c0
[  678.194026][T32053]  ? kfree+0x1c1/0x630
[  678.194046][T32053]  ? blk_mq_update_nr_hw_queues+0x977/0x1ae0
[  678.194063][T32053]  blk_mq_update_nr_hw_queues+0xa68/0x1ae0
[  678.194086][T32053]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  678.194106][T32053]  ? sysfs_add_file_mode_ns+0x259/0x300
[  678.194126][T32053]  nbd_start_device+0x17f/0xb10
[  678.194148][T32053]  ? device_create_file+0xf4/0x1b0
[  678.194172][T32053]  nbd_genl_connect+0x165b/0x1cf0
[  678.194195][T32053]  ? __pfx_nbd_genl_connect+0x10/0x10
[  678.194216][T32053]  ? rcu_is_watching+0x15/0xb0
[  678.194243][T32053]  ? __nla_parse+0x40/0x60
[  678.194269][T32053]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  678.194295][T32053]  genl_family_rcv_msg_doit+0x22a/0x330
[  678.194319][T32053]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  678.194345][T32053]  ? __lock_acquire+0x6b5/0x2cf0
[  678.194365][T32053]  genl_rcv_msg+0x61c/0x7a0
[  678.194387][T32053]  ? __pfx_genl_rcv_msg+0x10/0x10
[  678.194407][T32053]  ? __pfx_nbd_genl_connect+0x10/0x10
[  678.194426][T32053]  ? __lock_acquire+0x6b5/0x2cf0
[  678.194450][T32053]  netlink_rcv_skb+0x232/0x4b0
[  678.194468][T32053]  ? __pfx_genl_rcv_msg+0x10/0x10
[  678.194488][T32053]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  678.194514][T32053]  ? down_read+0x272/0x2e0
[  678.194528][T32053]  ? genl_rcv+0xd/0x40
[  678.194551][T32053]  genl_rcv+0x28/0x40
[  678.194570][T32053]  netlink_unicast+0x80f/0x9b0
[  678.194588][T32053]  ? __pfx_netlink_unicast+0x10/0x10
[  678.194603][T32053]  ? netlink_sendmsg+0x650/0xb40
[  678.194620][T32053]  ? skb_put+0x11b/0x210
[  678.194643][T32053]  netlink_sendmsg+0x813/0xb40
[  678.194663][T32053]  ? __pfx_netlink_sendmsg+0x10/0x10
[  678.194682][T32053]  ? aa_sock_msg_perm+0xf1/0x1b0
[  678.194700][T32053]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  678.194717][T32053]  ? __pfx_netlink_sendmsg+0x10/0x10
[  678.194733][T32053]  ____sys_sendmsg+0xa68/0xad0
[  678.194754][T32053]  ? futex_unqueue+0x211/0x240
[  678.194773][T32053]  ? __pfx_____sys_sendmsg+0x10/0x10
[  678.194797][T32053]  ? import_iovec+0x73/0xa0
[  678.194818][T32053]  ___sys_sendmsg+0x2a5/0x360
[  678.194846][T32053]  ? __pfx____sys_sendmsg+0x10/0x10
[  678.194868][T32053]  ? futex_wait+0x29a/0x380
[  678.194899][T32053]  ? __fget_files+0x2a/0x420
[  678.194919][T32053]  ? __fget_files+0x3a0/0x420
[  678.194943][T32053]  __x64_sys_sendmsg+0x1bd/0x2a0
[  678.194964][T32053]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  678.194989][T32053]  ? rcu_is_watching+0x15/0xb0
[  678.195012][T32053]  do_syscall_64+0x14d/0xf80
[  678.195034][T32053]  ? trace_irq_disable+0x3b/0x150
[  678.195056][T32053]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.195071][T32053]  ? clear_bhb_loop+0x40/0x90
[  678.195088][T32053]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  678.195104][T32053] RIP: 0033:0x7f505b79c629
[  678.195119][T32053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  678.195133][T32053] RSP: 002b:00007f505c6cc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  678.195150][T32053] RAX: ffffffffffffffda RBX: 00007f505ba15fa0 RCX: 00007f505b79c629
[  678.195162][T32053] RDX: 0000000020000040 RSI: 0000200000001ac0 RDI: 0000000000000007
[  678.195173][T32053] RBP: 00007f505b832b39 R08: 0000000000000000 R09: 0000000000000000
[  678.195183][T32053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  678.195192][T32053] R13: 00007f505ba16038 R14: 00007f505ba15fa0 R15: 00007fff80a00548
[  678.195210][T32053]  </TASK>
[  678.758024][   T51] block nbd4: Receive control failed (result -32)
[  678.764853][   T51] block nbd4: Receive control failed (result -32)
[  678.771599][   T51] block nbd4: Receive control failed (result -32)
[  679.844600][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms
[  679.852633][    C1] lec:lec_tx_timeout: lec0
[  685.766327][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  685.773641][ T1298] lec:lec_start_xmit: lec0:No lecd attached