last executing test programs:

6.858284075s ago: executing program 0 (id=6720):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.self_freezing\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='freezer.self_freezing\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r3, &(0x7f0000002540)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x8140)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000001280), 0x4)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4)

6.716271823s ago: executing program 1 (id=6723):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a00000000001061114c000000000085000000c400000095000000000077db820000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
socketpair(0x1d, 0x4, 0x80, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xa3}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x4, 0x0, 0x6040, 0x80}, [@IFLA_ADDRESS={0xa}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x14}, 0x2008004)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

6.615608852s ago: executing program 0 (id=6725):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x5, 0xfffff010}, {0x6, 0x1, 0x8b}]}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000000)=0x40, 0x4)
r2 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1800000043000701fefffffffcdbdf25017c0000040045803c5d6c4907c9736db00b4404ceab8b579f8fc04000ee5c4d6b2becb507f109dcc229bef49e7b83917ad1de4bd9cd025e6ab8303d7d293ceae6f8291cca478b6aa88afaa33048f1"], 0x18}, 0x1, 0x0, 0x0, 0xc004}, 0xc000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000a80)=@newqdisc={0x244, 0x24, 0xf0c, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x4}}, [@TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0xa, 0x2, 0x2, 0xf68, 0xc, 0x7}}, {0x12, 0x2, [0xb, 0x40, 0x8, 0x1, 0xa, 0xffff, 0x6]}}, {{0x1c, 0x1, {0x9, 0x6, 0x3, 0x3, 0x2, 0x6, 0x1000, 0x1}}, {0x6, 0x2, [0xfffc]}}, {{0x1c, 0x1, {0x6, 0x1c, 0x5, 0xa37, 0x0, 0x87b, 0xfffffff9, 0x1}}, {0x6, 0x2, [0xfffd]}}, {{0x1c, 0x1, {0xff, 0x1, 0x1, 0x5, 0x0, 0x7ff, 0x1, 0x2}}, {0x8, 0x2, [0x3, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0x81, 0x4}}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x4, 0x10000, 0x3, 0x2, 0x3, 0x6}}, {0x10, 0x2, [0x81, 0x9, 0x33, 0x3ff, 0xffff, 0x7]}}, {{0x1c, 0x1, {0x3, 0x9, 0x4, 0xfffffff8, 0x2, 0x1, 0x5, 0x2}}, {0x8, 0x2, [0x0, 0x77a9]}}, {{0x1c, 0x1, {0xfa, 0x0, 0x5, 0x8, 0x0, 0x3, 0x3, 0x3}}, {0xa, 0x2, [0x9, 0xfb, 0x1]}}, {{0x1c, 0x1, {0x6, 0x7, 0x9, 0x7, 0x0, 0x0, 0x4, 0x4}}, {0xc, 0x2, [0x209, 0x3ff, 0x9, 0xffff]}}, {{0x1c, 0x1, {0x2, 0x1, 0xae82, 0x7, 0x1, 0xf4, 0x0, 0xa}}, {0x18, 0x2, [0x269, 0x4, 0xaf48, 0x65, 0x392a, 0xfff0, 0xfffe, 0x9, 0xe0e4, 0x1]}}, {{0x1c, 0x1, {0x2, 0x2, 0xff, 0x1000, 0x0, 0xa0c0, 0x8000, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0x68, 0x0, 0xf06d, 0x80000000, 0x0, 0x2, 0x9, 0x4}}, {0xc, 0x2, [0x0, 0x1a0, 0x5, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0xf, 0x3e}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x5, 0xffff, 0x2, 0x1, 0x6, 0xffff, 0x7}}, {0x12, 0x2, [0x5, 0xfe00, 0x3, 0x0, 0xf42e, 0x4, 0x5]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0xff}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x339}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x244}, 0x1, 0x0, 0x0, 0x4004}, 0x20008001)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x4000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r9 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r10, {0x1, 0xffe0}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0xfe}]}}]}, 0x44}}, 0x0)
r11 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r11, &(0x7f0000000000)={0xa, 0x3, 0x0, @remote, 0x8000}, 0x1c)
getsockname$packet(r11, 0x0, &(0x7f0000000180))
r12 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r12)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000160800030000000000"], 0x3c}, 0x1, 0x2}, 0x0)

5.575426351s ago: executing program 1 (id=6726):
socket(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500400000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d0006000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000000c0)={'wpan4\x00'})
bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x200, 0x8280}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8, 0x3}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x44}}, 0x8000)
connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
getsockopt$inet_int(r2, 0x0, 0xe, 0x0, &(0x7f0000000040))

5.378266638s ago: executing program 0 (id=6727):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = socket(0x200000000000011, 0x2, 0xd)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0xe0000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
unshare(0x68040200)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000002580)=[{0x0}, {&(0x7f00000014c0)=""/4096, 0x94}], 0x2}, 0x200}], 0x1, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000040))
sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000000)

5.37724387s ago: executing program 2 (id=6728):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000200000000000000feffffff8500000005000000b7080000000000007baaf8ff00000000b5080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) (async, rerun: 64)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0xc3}, 0x1, 0x100000000000000}, 0x0)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
socket$kcm(0x21, 0x3, 0xa) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (rerun: 64)
close(r3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32)
r6 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) (async)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e21, @private=0xa010100}}, 0xfff, 0x4}, &(0x7f0000000640)=0x90) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async, rerun: 32)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', r8}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)

5.37682206s ago: executing program 3 (id=6729):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7ff}, 0xd)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'})
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4)
ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
r3 = socket(0x9, 0x6, 0x101)
listen(r3, 0x100)
sendmsg$inet_sctp(r3, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="200000eaffffffffb5000000020000000100048005000000380b0000", @ANYRES32=<r4=>0x0], 0x20, 0x4002804}, 0x0)
socket(0x22, 0x5, 0x9)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYRESOCT], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x24044004)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000002e00090027bd70000000000e04000000ae003b598066f5f70cc565a8b3f99f1be904b65e7f20f27016d08e83ee895421cedfa33408e676d080dfea7ad87ec9a18cc75be7a72b0000"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r5)
r7 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @private=0xa010103}, 0x10)
sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, 0x0}, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000280)=0x100000001, 0x3)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x3, 0x105, 0x20000018, 0x10fffc}, 0x14)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x20010, r2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r0, @ANYRES16=r8, @ANYRES8=r1, @ANYRES16=r4, @ANYRES32=r0], &(0x7f0000000300)='syzkaller\x00', 0x5, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdfb, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
unshare(0xc020680)

4.9144699s ago: executing program 1 (id=6731):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e800000ffffffffffffaaaaaaaaaa0900000000000000000000000490780000000000000000000000000016908738f1fb3b3bcd2265f1e800573a4c"], 0x3c) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0}) (async)
r9 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r9, &(0x7f0000000440)="800000800000210ee7decd7a0003a9090806", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r8, 0x1, 0xd8, 0x6, @broadcast}, 0x14)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000080)=0x1c, 0x4) (async)
ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000480)={{0x1, 0x1, 0x5, 0x5, 0x7}, [{0x8, 0x80, 0x4, 0x4}, {0x81, 0x4, 0x10, 0x6}, {0x0, 0x3, 0x75, 0xe}, {0x8, 0x101, 0x6, 0x4}]})
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001f00)=ANY=[@ANYBLOB="380000000f1401"], 0x38}, 0x1, 0x0, 0x0, 0x40408d0}, 0x20040814)

4.718967595s ago: executing program 2 (id=6732):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000280)=[{&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)='\x00', 0x1}], 0x1, &(0x7f0000000600)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x4, 0x2e}}], 0x38, 0x800}], 0x1, 0x4008080)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x20044841)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff3, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000007, 0x42032, 0xffffffffffffffff, 0x100000000)

4.673900177s ago: executing program 3 (id=6733):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x1c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="0206005ca90000400000000000000400"], 0x10}, 0x1, 0x7}, 0x0)
ppoll(&(0x7f0000000080)=[{r2, 0x1}, {r5, 0x8000}, {r1}], 0x3, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000180)={[0x5]}, 0x8)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@delpolicy={0x64, 0x14, 0x211, 0x0, 0x0, {{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x6e6bc0}, [@XFRMA_IF_ID={0x8}, @policy_type={0xa}]}, 0x64}}, 0x4000000)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0x2, 0xc}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x200c88d1}, 0x44000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={0x40, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x2}, [@nested={0x18, 0x38, 0x0, 0x1, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x66, 0x0, 0x1, [@typed={0x9, 0x7e, 0x0, 0x0, @binary="ac66d0741d"}]}]}]}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x2}]}, @nested={0x4, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {}, {0xe, 0xb}, {0x4, 0x7}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240408a0}, 0xc890)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r14, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r15 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r15)

3.418017051s ago: executing program 2 (id=6735):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000005600000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
pipe(&(0x7f0000000040)={<r2=>0xffffffffffffffff})
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
splice(r0, 0x0, r1, 0x0, 0x10500, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000200)=0xf, 0x12) (async)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200100000000000001"], 0x20, 0x2404c840}, 0x861)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fcffffff18400000f9ffffff000000000000000085100000fdffffff8510"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001100), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000001140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)={0x1c, r6, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x6c008000)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400100, 0x0)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000040)={'veth0_to_batadv\x00', @local})

3.351679024s ago: executing program 1 (id=6736):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000500000a0900010073797a31000000006c000000030a0104000001000000e00405000000090001007379da31000000000900030073797a310000000008000a40000000033000048008000240014000000000140003006e657464657673696d30000000000000070002403a8807fb0000000000e6ff00000000000a"], 0xb4}}, 0x24004000)
r1 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
r3 = socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x8}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0xffe0}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1, 0x3, r4, 0x200}, 0xc)

3.322669436s ago: executing program 3 (id=6737):
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="240000001200010000000000ffdbdf259bcd9f1930baec8bfba1cef234f4ff1c"], 0x24}], 0x1}, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000001700)={<r4=>0x0, 0x63, "21aedbf8021f5f10013780635bce7a32926c1e2a7443f60ffde8f68455dfb7c76cef65fec14c49b3f1a33e26dc6df841d48b2ff7464b824175599516257b079160cf67f6d36b303d586993a1d4e2f8ad61ada9d2df70561061b073e16e057efd0f0071"}, &(0x7f0000001780)=0x6b)
sendmmsg$inet_sctp(r3, &(0x7f0000001b40)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}, {&(0x7f00000003c0)=@in6={0xa, 0x4e20, 0x5, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1b}}, 0x800}, 0x1c, &(0x7f0000001680)=[{&(0x7f0000000400)="d71ada06c9298a44336e42a863075e5b44606deb7971472d1c7d99bf14e2dd52fe62a83301a319ad2bc793ea4971fcff13e958e89504bcabd17188e0a5032cc9adf28b0e417b18a43648b254e3f15b2be2b6dc403aeda5efc26aca9ef778bb632af7640aea7dd4d71ec011", 0x6b}, {&(0x7f0000000480)="0175", 0x2}, {&(0x7f00000004c0)="b6ef259e476b7fab9b9396d317fff9bf7a46467830495a0f66ae9dbe58bf4745b2c29660dfcfcd0e9a4b034205294ab661f8437c794f4ed864f2ac97b2e673f114679e51877ebc10373cb37548ad0e6b28ccd85af51f67aed5aa01654c8469be9dcf803ca81ccfc18211f9461de2da80015300dee6dc09c766330e5ea99baad00689212a90946a6154c11d44a7917cdab86b531eea0a4586715ffee76c199e8a9d1885c595a8ff3a66345600819f7b10141a9bffe895f8d3096dd2b333ea91d852618ab14eded52b302705e63c2383d789af22", 0xd3}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000015c0)="2f5e0543586a14198dd0d637315c5e4280ff69d00e1987feaeccaa2eee1cafd3", 0x20}, {&(0x7f0000001600)="2bbb61ac1b7ffe8c5ff977eb7add03e8273539bfb9e62c8961f7a79dbb788ca884d23816d697a8ba2c4ca3d3926f596fd226c450c10ab5da1e4a330ebf76f036e1cbbf3a6d213ea2aaebc32525e20446ce4d4d3e7ab5aad1f82aa4c16f77afe2", 0x60}], 0x6, &(0x7f00000017c0)=[@sndinfo={0x20, 0x84, 0x2, {0xb, 0x4, 0x27, 0xffff, r4}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x33}}], 0x38, 0x4000000}, {&(0x7f0000001800)=@in6={0xa, 0x4e24, 0x8, @private1, 0x101}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001840)="64c6a8e90edcd8f2445dbbd8733c", 0xe}, {&(0x7f0000001880)="27df69dd5f693b516bd858ec5f74a3191d407d81a1a25d2cac5dc3be28bd10bac329362ceeadcb80825f31eaa9", 0x2d}, {&(0x7f00000018c0)="c87a7a5e963ec78e5c50d3fb4fa4c7b632075d24801f797d5d611a8e276e72f811c6bbf1a950bb1929a57ab59d01b2fed8ee5f093da27909903c70a46e3dd762af0a834e83eedbd343256de399ed69599ebc0425b861292b78a688c49cfe62b8c7fd23780079c1c187ef7f76ce1cbb72cab23c64f016b45ad107ad1459c32ab57def842d9d7b41165d3c6cbe95d32747893c8b7d9a1b299c679967e295d8494ef63e1f4ae081303716b144c66d943a971c2601a55acae50645465e6063818e5100d19530aea2b593a1ad6139c63c895da0d088fd2e0b36f787b526ed8dc9fa3365583bc71fdf68a52179f2e0eb0e414e470b5c", 0xf3}, {&(0x7f00000019c0)="f2bd5868be6fdaa8bb9d19bda022a6ccb1b4a8b798f0a490000955c02118190fcb70132e89e9d2e64d81e27eaa31b6f078e94f83256b5032234d165bfacab12041f1fbf564b523be3f55a8c4b2842f1fa6bfd8de89ae1e24e7a85bdaaf45befb9ebe650080f52c75e189de66996500c9dbf09966c7a9aa2c12e4b6a6b9031c68e7fe44d6ca64f7fb8b0eb4290fe37f13ad4d1c786bcfc335bc2cd5ddff86651ddf9ce5d86eff2ab4fe9b8b7f4c896691a07e7b1e60d4d2fad60b9b40f110ed", 0xbf}], 0x4, &(0x7f0000001ac0)=[@init={0x18, 0x84, 0x0, {0x2, 0xfff0, 0x80, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}, @dstaddrv6={0x20, 0x84, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x58, 0x4000010}], 0x3, 0x0)
pipe(&(0x7f0000000140)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write(r6, &(0x7f0000000340), 0x11000)
writev(r6, &(0x7f0000000e00)=[{&(0x7f0000000a40)='^', 0x1}], 0x1)
vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe)
sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0)
recvfrom$packet(r3, &(0x7f0000000200)=""/162, 0xa2, 0x2, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r7 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={<r8=>r2, &(0x7f0000000000)='^][\x00', 0x450101, &(0x7f0000000100)={@align=0x800, {0x5, 0x6, 0xf, 0xf}}, 0xc273, &(0x7f0000000140)={@_ha_fsid}, &(0x7f00000001c0)=0x1})
setsockopt$inet_int(r8, 0x0, 0x0, &(0x7f0000000380)=0x12, 0x4)

3.319707227s ago: executing program 4 (id=6738):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000001900010000000000ff0100000a824000", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="780000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1414aa08000200ac1e020000000000000001000000000008000740000000010b00164000000002000000030000000600000001"], 0x78}}, 0x0)

3.126331346s ago: executing program 2 (id=6739):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000001c0)='nfc\x00', 0x404700, 0x0, 0x3, &(0x7f0000000240), 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
syz_emit_ethernet(0x46, 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="2d000000010001", 0x7)
bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x4, 0x5, 0x0, 0x47, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3d}, 0x60)
getsockopt$inet_buf(0xffffffffffffffff, 0x118, 0x4, 0x0, &(0x7f0000000000)=0xffffffffffffff5b)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0x63, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x41, 0x0, @gue={{0x2, 0x1, 0x3, 0x0, 0x0, @val=0x80}, "b7fe4f5e3011372c384785b810e7ea1e349b6ff6cbbfd57829e91348eb753d186e69ee4ae9203a750cfeec8f696641055e"}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0xc3)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x16b8}}, 0x40040)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001800)=""/4104, 0x1008}], 0x1}, 0xb}], 0x1, 0x40000023, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="24000000000000000000e10100000001000000000000000800010000000000"], 0x24}}, 0x0)
setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4)
r6 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048880)
syz_genetlink_get_family_id$nbd(0x0, r2)
sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r6], 0x4c}}, 0x0)
sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44000)
syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1={0xfc, 0x1, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0xff}, [{0x3, 0x20, "9595f429ae08a5654664601e3b70a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"}]}}}}}}, 0x0)

3.121345156s ago: executing program 4 (id=6740):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x900, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x67}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4004004}, 0x1)
r2 = socket$xdp(0x2c, 0x3, 0x0)
recvmsg(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x102)
syz_emit_ethernet(0xaf, &(0x7f0000000040)=ANY=[@ANYBLOB="8fb1b8f5fee0ddb4ae2075e04cc6699b61b355ac48042a2ac32af59ccdc214e527812d1be5c7a6a7660d742e772a71ba09e15bb3ee7ebcc6442a0ebd848a670a872340fd90f972350ec570b144dd9835a98db67d5196781d6af537be35ee4f49d39bb1b4ac01e685af4da9570687dfb527773ef166f7ca2c91118a2368356bd52ebe93653e5da2850b0d6af72db8c741e2261ab8ce7c178e73cf840109ce709a891437815d1fb92f1b1e9da38d962f8dddc5f2547955fe90b66aec4e58c898788e84ddc5505e2325140bbc5b193efb2c94ac429675a2ad082763b5856938e5b8115f53b86669512d6f1e5add45fc2df5193575041bea09223c", @ANYRES32=r2], 0x0)

3.086015458s ago: executing program 0 (id=6741):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48283, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1})
ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xb)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02005d4516bf7c5090815c65add4946978f50000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=@newtaction={0x14, 0x1e, 0x109, 0x100, 0x25dfdbff}, 0x14}, 0x1, 0x2b1e}, 0x408d4)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000380)={<r3=>r1, &(0x7f0000000240)='\x00', 0x0, &(0x7f0000000280)={@_ha_fsid={[0x401, 0x9]}, {0x5, 0x4, 0x0, 0x8}}, 0x8000, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x7381})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x3, &(0x7f0000000180), &(0x7f00000001c0)='GPL\x00', 0xfffffffb, 0x73, &(0x7f0000000200)=""/51, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000480)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000004c0)=[{0x3, 0x4, 0x5, 0x4}, {0x104, 0x4, 0xe, 0xc}, {0x5, 0x3, 0x0, 0x9}, {0x1, 0x4, 0xf, 0x8}, {0x2, 0x5, 0x7, 0x2}, {0x5, 0x1}], 0x10, 0x7}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="c000000040000701feffffff0000000003000000040042800c00018006000600894f"], 0xc0}, 0x1, 0x0, 0x0, 0x4060814}, 0xc000)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
socket$pptp(0x18, 0x1, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x5c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x5c}}, 0x80)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x1}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x2100, 0x0)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_SERVICE(r7, 0x0, 0x483, &(0x7f0000000d80), &(0x7f0000000e00)=0x68)
sendmsg$sock(r7, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000640)="b5eb36d1ebd6aad4e5457d35a574f9a5c632b255eec458c4c5a8ca97211377a487fe31b48816f8e14c57b9e908fc1b875ba72bd3667079f4fce3d47b0b3c1b1d8f2f72f0e93d2177dfd50c4f01714c1fd722f826a7e5dea7a600fc244b3946605a26de852443f41ffb2d87823759a5be75a47225a717beb2eae5176727208b6ea5d2b6e446f1943e12e52061365513e1fe9df4f545050de3b7e3ca4ea9c6ba96c7e641121dd5da4731682b13df8fa6fabef2794c", 0xb4}, {0xfffffffffffffffc}, {&(0x7f0000000700)="087d32df58c336091a36", 0xa}, {&(0x7f0000000740)="27f815089a62e69cca8520ada7b778f1667ca3c1964ac2", 0x17}, {&(0x7f0000000840)="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", 0xfb}, {&(0x7f0000000940)="f05c0286d9afcf58323bd850066fe3c0fd04a21303190c54ae6703c2336e494614e0784abacf63b8d47d3786ce4947f336b60b5a39f61808bbcc", 0x3a}, {&(0x7f0000000e80)="4ad4355c777e63a61d160fa95146cda2191d20756c4542e6c65947812e8f104a84a832f05857ab29b5cd50622d6a81e8068b826ba6867d7ed82ed9db28d06042150e5cb01653fb18d6279e6c451c8b86490f23637e7afbce3602c16cc4ab1ba833dda974411f20a29029bbff717b5559a2a07b7700e9d6a3bc2f1908892d581a4144da7c2c26c361d8a17d9c4c85573f3d58aa094668c817ae2bbe3c33b8f8716a70001a1dfafb0e00e4c07a39097d0fcdfadc2d2655ff5dd5ae1e78c42bda1d2de044f8a78c37f416f659e0c1fee07ed6d12d1ceffaf77c1eb5dd3be91fa29faf359e56c4eae32620eee69ce0d02fd612fef040d3d2f19633d172e3de86b4b8aea10a2940d14238af0d4000d1d5fd4ea7e79fba7c24251a1f0f7c8b4d12dc1764715c1b5dd8d1ac29a28d03a408a4847dc375b47aa4aea57f5d0b3fcb55e39a6205873ece33e69c66eaede27be0c0aff147f6dffdc8b4799f7d4b6cb5a6a135c9668c094f9b28da5413d84e5986ae3e896bdc26c4560ba985a8d8f1a31ed814103e77732c1044925f90d3e739b255cd0d3da5424073111456710155aa9d2af269fb11f251beb00680572ac18d44cbc2a3392a21090b010ed11f0ae416a9a32170bda01ed8f6abbdfce93b67fc6360e3dc8b7d3b49187b9b4f3c63092bb13ac8ddc04073ebdf013d5cb2429537373dd95969f972744dc785f27b2dc1916e66d00d82aea1cd0a0088f6f8abb8a7948c747238a3c4ab4fa147fe51bc58c0ef757968e1d8fbbd03fdd5ea7742b8649e184bfb246f61be71dbebb87e51f506663c12cec3d8562dc45e7e083732897651242de2553c3e49296dddb46ea6ba4467a10b8426a36d5d606fd28faf279cb28248bb52e9dbf94f9281ef349c9507dd6ad033e6bb5c357d707fc077d50b055b2506df9f93aa1dfaa98f1dc1396cfbb79af56adc69edbb963b8ce83cf4dd4771352373018d5f906d4c8ce70842c3ef6da9edfe9f4cad6c402aae92378c1f7c5f6c0346c2eb35a007af9a68ec15f2c495557da228b608aa610c7a543ccdd8af8f83f0782187c986dbb3f7b0691aee764e30a8a7495983176c705cc86ab3f566ca0f7e34cbe9afd5f7cc68d537157170e382b2b954b7304b50e343b73e58327e57a16e4c4b96fdc7f6b4801c8ac7b32cd7073dc881997b334ca197fbd99f1a31c5353d4e10bf04ab291f5b92507b1b110f2b0ad2cfed7f7c0f8c621deaf46f788f41b648f223e11f92837b8ee10c3b74ae8f9aad2daf0539d2203fab92c19f390f82ef4df65c70d7d92c15fe1e8215d65b3fc068e527d17850e045f507ae1be8db7849e6b1d249eb844bb52c65876193ed136bedda8e97af2b9527e1fae1911d751be7776a7c7372c24cd3333a107dc29a38801384395f62b14c42f9f8c0fc2b76ea228adfcdf9481e7321d0c53e22834cb9765a7432791b448cb9780794dc7cba19f24ce1747a8d236e7f2de774970c106e31eef16b0788cba28a64bf727d6dd344658f45d1f27963cb7e93f3a2615d2f916a4b0c8b09e9a6f7f2dccfcc5dea6315e096317b0bf081142689770661ac9f2b064ad1bf61d1b629a8528bfc33c3a69b9f7c0a73b12acbb0d3606ea74d306705bb1f2aca1f9e238f58650624c59f13c7db95d29c11c3aaad0cf829e3b6a6a04b94be11ceb29d9b38aa1e36510b8c27806ca2be21651ba2bebefa64ad68604f7c83cd0d5440a64cf31d45db8d23141636cfbed6b687e641ac855c7d90e86e88464ece33c6b1f0e2420d4b094516d9e7a11820a62e57590b4169033365bbb4c56b55fff4cc889084aa5b5dc5a28594b8702d78e8d3c3e768d173c1bbca844926a81791998fe1bbb7d100b7ba06f1f77813b4f3d9270c0f38650a777ab13612c251e68d454d7b5485dd1fbb60cc51f0e1200a8bd2d612e59d9ea75cf7be42ab1b0bbc2af0b5927860dddc903d6c6d2cbb1d5fd1338194589d1efedf67fc6c17455855f3333bbe020d0f6812b8a025a4d2d55107b528911653a3ace22db9509ca6508f5c2e4ed05d6541a9e59843157cdcdd9aa57d157adbbcf7cafb9952621bb732523c903d9d74a704dba8efd325f8a206c576f1ef74d229c782ff521701d2a3b0e3fd6edbef59078158171e1dcaf8f17794452aa39d8b1cf7402ccd1e1b7218a70afd4778a7a739513671b14f4d972c0f5207d13db80cdc3ad6c0e4263672a7245d07067f82ee7d90b26ea34ce8fa640d1f810d0c01a3088b043ac738c98c30f927392d3989be5c7a5f033777ddacfde5dcc55a3f9699c7a7aee5f983509daa577b7ebe4cf257715616aef0d33bfdc50d589e9e6b43b5e6df0bc405d5797d9aec0c513d3b0960fb2783bd51e469405babe79ac426b422cd8ca25cb419fe55363c205e92bf12380d457f7baf8aa4b3b186e7c1d83a3e52718ccb20ecf9f0b5a7e3286b65dfe73005644955f7cd1509b757ae5daf426769257b644a503d038cfd5d25f040118d9761822d882317b614997e45b69a7f9f9907137981fad5c46b448636a513dd4039c4c716777dd9ab43f2854ac81eac944966f84c9b1e1aaf9c13afdd605c11e404fff97fb24d073a4ca877e234be8d65c49b02ec2ffe8bba7040b3dc5348bffce3e515d60d80de12b02d4819cd68849295ffc67d9368f22ba31852e4d092e3d01a44220473887e17090ed7cf635181335a28e418d179751c61a6dd9ef12d7f26fa87e697c6caf6ccf1904fe0e678494b41c6059efd6f88f72c9242382de7407a3a00ed470329050ae07540c7f234a5a4afd6b4a27739f235bfbf6eb1d7766ab29f304e1c088d5a26abd307b45becfa37844f0344b15164e45b620c4ae2996d4475788d8d1ceb76e1d6614e65da18d227e13b0e655a4173b35c6529db73046bdd04dbb1f911c51051a049de2bb3bb8eb9fd308ec3b0c9e0f5627545c1db06bb213b4d41a13c6e441351a2d926cf4fd0e30ecb81f9d1c94fdadefc8c745010ade76c45f3190a4dc983abe8d4f807f6e64b19db2641a42c9b502a58384560460f2ccce736372ee2b58957b26b5ab60e4af0ac541ae3e899bef1bf2d6bdfd6e2d46fb0eadb53bb1d616f816fc65facfd2e232e868b215efe9482fdeab7880d1f0208a7bb2609d6744d35f5126e08936d7dd941e1aed3408779a3b538f0be863e27fc1506ed63934a74f0fbcd170d5043b920987f3b1222dd07d7c097df58f296f65a33acd2c19695bba540064aa60f094e8f12011be94236eacb171281adf7992a0a3526bb8914e4e62765e34deab3ad43bd4e90a6d1e60bb5c6f984714a9193a2bebe6279e4ba7ddfe9acb924a3711d6d2546b6b18bf17972d010afc8c966e1dd684590f80a1ce88064735c42420fcfaf47ef80bf7514df1134c7321e7a0ce437200fe1f19dbf7ed7df43b0a301640dda5993c433d1554992529d078fccb6c7f34eefa6d4cd31f0d30b9a370fa09d6447980bb2d60a5247d8d2b0344b19a76cfa1108445d99a13d1044b0450485f092b197076d39b971c8a0f04e48f63e9a773e981e64e6215bbf9e82b28c07541007728124fa1ebfdc0866d696d86c083acf69b4a77f1601dd19aaf8681077c5d13ce23820384bcf311e8de737823e778e4f83898f00491f124841ca4058da74e29c3ed9e1e9c932c3071aa6e6d49525611e60e2ee9dadae5f403261990039cc378bca270dc2a72a351f623a4cb904063cde61e39dd444ce77675b48325f14a2e23908bea354f5524c909cdcca9d38b6477aacb322a079d13a2430b27da65dd2359a9e34509da4a1679f733a5488727e071f2f15a7d4656f3f995ce4f5762d5f1b87ab011a719fa59780cab10827ab5fb04a4bb4deffcce1581bca84ba852c520f8eb713ec2f8601c63d8d3b9de88b64cb00bf7d7e3da4689c2752f7a2b9a2ad4de567ebec3847ceba19b05eaf1e6bdd36e477236cff4edadd3e78e7455d37180668f3983b33a07500719ba7e3209885e4d34489f4464221447e5382f9a58ad2e50c29c56b3dd389a68cecf602311660b3099854e0cf4d5c7c38f71573fde1e5681a3ef86229b0cf8c6618f3f879582b632ee5fdd3df843dc0f1c4a3409660130f8a6e74e5b9be87046132725bb40c0c3c0c433ee55ede0a3732b702c01787ec648a38fb44c87260ddf0ea2936eff1ef65d8585c97ca825f1f47891ff4792be39b754576cc596056e8b26a6d94bd409440f9eff192137cbc8e17e53e0e4a6aba2e5f913a359d74e0c0695092b6d8ff383647aec6f5decd457f9e1cd0eb40eaef71a65a5241b20efab12e79f0ff3285587540345791c00678bf8e254a95bebe08417e7d82d5430aa021b510281c9076df84007afcdd98cc41b211b64cede7a58918956b4bf72d00b3eae46ea1caf0e4254923a4472a515f2e48450e9e820a852667258abd4fff8e2964e30f8eeddf061cb5d2cfe677782b8de9375f8103703e2a67456606361fafb55b4ed8fb257f0dee639313fe742ed8d1cf452b73ca3528eea97be62527ae91a11151d89dd7563ce80bc46d2699f277d1a00f51842a6fbc297a2fff661f3ef5b77e8281d5d9f87f68c2fd58e24a1127d7be43fb9ccca86022cd49b893458865c84d2bf4afdb4701b135db13b4daaf6eaf05f11bce3814aa35d2d47cfe64998034e5f3d871595dbff10fa0bc0127a6224e940e126e672c91a1e020424ec931669df989402d71411e6e538d325b82a22462bbec3acaad48e2866d3b14672b639a937f404c5434784c7189d813ea899c959cda3cdc115b6d9d310ab00e9080711f1a48f9a4bebceee8bc0adf48f7bc9dd96b67dccb54eb25f70c84a86b0a1917ed2cff84de43a19bf623feabcf5b4d7841f433afd1d2a1b052f3fa8c597e3c47b77f5dbb3c2da5e196dcf842cfc7f5740a0dda09664c9bb83ba50349bccf5049c20438b9024afd839a2057602dd246a37bb6a94325c26b390c8ff230713d9c09982c38f0b65651d9b59c2f11879df223929cfb042db4c76234653c6dd7587d4c0f4b9ff01b51bd29030f0d2b3113c9e6f99f7b6f12cdea84415a675416895a88fd0a00fe7ba62ca7c0d29bd012d46145eef5b4dec74f77dbfc4dcee5c868f8f683e5cb0b7ef1a2ad8119cd1b010945f8a81a319c1038941f67be18e32b549d989747ca542cdb44e1c612713f08a05186eadea86d44397d7af7293a87621e3ac73dfb217705e7e461047c0dffa448a2e659a03db5d0cc2b47240fb969f7c7884d2c2bd9a2519cc385d69c179fd483d09b7600c56c5abe382b07fe0283001ec6849e6ff1e997542ba2d4f077d22f34487cd6ab3b983a05bb3cad0266be6664f2f558d704813f4b4279286f23062ee56b75da67726464818c7ac85f181637af4c83c5a4eed3a2040b044b3f29a993704af41eb05bf17545c179527e3f0c915052be9e7821fd45ecc66aec0358bf37619a825fbb4efb9b484f8cc98e1b5363575cc70d3b20a88ea297798d3128e199a31767a689d6e7d9b6054de253ee491a66a3c52d8e0d090d69965410765fd4e553fbbfe62b55ddc39308d683a633b38dd1d2b824e368e99ab57b9be94ab76de3e4c15e29f8e85c42b330c6e771b82166d0ac3d79d9e08a09054478b9aee8cc5481631ee90768b5b3ac0960b6e14d262f54f4efb5bef9692a16ad20e712dd4b7abcbb9ff0064bbc3d827923af5999e2dd494c36a8d62f1adbdba0b25fabae3519b3dd33ea8c87d654e0fc946d23fc7c856b2d23f43823ae9209632256c0a1e7dd2c245691a0ad541f3ebd46a94f89e678e3b90cf957695d3c72c95c99aade", 0x1000}], 0x7, &(0x7f0000001f00)=[@txtime={{0x18, 0x1, 0x3d, 0x7fffffff}}], 0x18}, 0x200c4011)

3.06805971s ago: executing program 1 (id=6742):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000043000000b409000000000000c6090100000003e70600000006000000180100002020702500000000002020207b9af8ff00000000ae9100000000000037010000f8ffffffb702000008000000b70300000000000114000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000540)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="0a00000004000000040000000400000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000002000000000000000000cca81cac428dcb3f38c25e3ffb66fe01ebff6d590dc575f90827afbc0ebc6ba7f9067d193663a813d9950a4b6cd58c4847cfecde65c1787398e92023c5b6341678a8d1f28a679542c51cb50f965c95c5480c3284ec0a31c1c9e1764f548f9d7f5f761385721050498e55407557716507a2bb3a97", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, 0x1}, 0xc)
recvmmsg(r3, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/112, 0x78}, {&(0x7f0000000680)=""/135, 0x87}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/222, 0xdf}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}], 0xb}, 0x10000fff}, {{0x0, 0x0, 0x0, 0x29}, 0x10000004}], 0x1e, 0x0, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r6, 0x89a3, &(0x7f00000000c0)={'ip6gretap0\x00', @ifru_names='gretap0\x00'})
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r7, 0x84, 0x85, &(0x7f0000000100)=""/4100, &(0x7f00000000c0)=0x1004)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="2000000004000000020019000000000001020000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"], 0x50)
syz_emit_ethernet(0x66, &(0x7f0000000080)=ANY=[@ANYBLOB="69e1629b6174391e7dd7a2d786dd60b6000000302c03cb697a653e336f000000500000000000ff02000000000000000000000000000102000003"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071119e00000000008510000002000000840300000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r12 = socket(0x400000000010, 0x3, 0x0)
r13 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r14=>0x0})
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000020c0)=@newchain={0xf04, 0x64, 0x800, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x6, 0xb}, {0xfff2, 0xfff1}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x25c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3, 0x3}}, @TCA_MATCHALL_ACT={0x138, 0x2, [@m_mpls={0x134, 0x9, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x80000000, 0x4, 0x9, 0xffff}, 0x3}}]}, {0xe9, 0x6, "60d16d08dc89e5bdd7ac9d27202bb5267f877dd59859ff5b765df28caf08e00320a6f1a7ed29fc7db4aa1ec58ae6dc1253d038a4ee9e64d0f144648af5b07b838d4e5a7c65fbe2161af5946a2de3c093c08c4fb2783ec8d0ab1b616db62b1ec846f065258271c8e2c6cb0d6749bc293a31288813e48c614b59cea44720d545a0538ab9db658f9954faec09c38120ab70ae1e0cfc8ba217071d0bb243ffb66f5cf86f543905dfb662b50f4632206adfff4a7d1baaefbf4b3364726316eb392ff3dd8a5823ac07ae77466d4d25634e38c4470dbac5e0e284912e9a8d6ac4eb0922cd196eb463"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xffe3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0x6}}, @TCA_MATCHALL_ACT={0xf0, 0x2, [@m_ctinfo={0x8c, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x7ff}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x3}]}, {0x40, 0x6, "be0eab74f7543e0bcfdfdfc28763ca7db68ef866fe28869885c2aa45218d22605ec81062e5094e1aa152f2616c0ab2ff64340f8509e1bce7f1619765"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x5}}}}, @m_mirred={0x60, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x33, 0x6, "277e76916d9587454fbe7d7f2af7d10ed301b60749328e40d81a0be2317da6389b058ec2f6de2f1519524a1b8ae257"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x8}}]}}, @filter_kind_options=@f_flow={{0x9}, {0x754, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x400}, @TCA_FLOW_EMATCHES={0x140, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x57cb, 0x9, 0x7f}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8000, 0x1, 0xfb}, {0x2, 0x8000, 0xda, 0x5, 0x9}}}, @TCF_EM_META={0x4c, 0x3, 0x0, 0x0, {{0x0, 0x4, 0x3}, [@TCA_EM_META_LVALUE={0x2a, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="042f", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="15d6dfcd", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="a9c90c3c"]}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="77a1", @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="ca827e"]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x340}, {0xbd, 0xfffffffb, 0x1, 0x2, 0x6, 0x1, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x5, 0x3, 0xc1}, {0x4, 0x10001, 0x74, 0x5}}}, @TCF_EM_IPT={0x54, 0x1, 0x0, 0x0, {{0x1, 0x9, 0x4ff}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3ee}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x650}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2826}}]}, @TCA_FLOW_ACT={0x5f0, 0x9, 0x0, 0x1, [@m_vlan={0x150, 0x11, 0x0, 0x0, {{0x9}, {0x9c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x401, 0x9, 0x4, 0x1, 0x7fff}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x73, 0x80000001, 0x20000000, 0xe4, 0x1}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x7, 0x2, 0x3ff, 0x6}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x24a}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x2b8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x5, 0x1, 0x4, 0x1}, 0x1}}]}, {0x8c, 0x6, "2efa4d4be6b7c49a40edf0b0615966d8f4f8e78e4139301700d76a476013113a02cf9198ead61cee7204d75d78bc658ad12137d59b5436383eba35ba09a2e577f896b24d733c1814a1aa330d36600a325e23dd5eee2437a68d63e7bdc622552230e573e8249a82330a49507d87b3125d64f30f637d888c41c594a59eb0eea7de96b4a3e6fdc39695"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_simple={0xd4, 0x1f, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, 'lo\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x8, 0x6, 0x8, 0xfe}}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x78, 0x6, "be2c7d2da6cf94261ce0d31984ff19d4cde6f197fbe704e569bf99653a0c14b17b4a05d84abe8c620df69d19a3b5d4617aca40669ed641ee706c7e41e4978336deb6229b051630e4abe1689e47579fac2d5deeb3f5449e0b274355bdc81c52e486b6ba8b6a73a34828099e3d0550d52992224da4"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_nat={0x1bc, 0x1f, 0x0, 0x0, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x9, 0x2, 0x4, 0x9}, @empty, @broadcast, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xf2df, 0x6, 0x2, 0x9}, @remote, @empty, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xc39, 0x1a34, 0x8, 0x7, 0x63}, @private=0xa010101, @private=0xa010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfffff000, 0x5699a4c1d5e2e567, 0x3, 0x1}, @remote, @private=0xa010100, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x916, 0x4, 0x6, 0xd960, 0x6}, @dev={0xac, 0x14, 0x14, 0x2b}, @private=0xa010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0x2, 0x6, 0xfffff045}, @broadcast, @loopback, 0xffffffff, 0x4}}]}, {0xa4, 0x6, "f97ba97ce13ce969e9225069110cc6ac0a5d92e702dab05aefe6450d446061e3f84116f68ef3dd946c0fa3e0d5f54f36512a42e17afdfe6f8a08d004dcbead87c6016ea01c37ac72bf65b3699ef380a8523193894866d531db6124380218cf18d234e4050ee1ba670dd1a32c21717820dc8ce80df3ff11b3b93bce7069e9560b877e6c14537a2f4c177f9bd9b2582d73e86c458235b6519d274f2ba5d8a2c6b0"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0x88, 0x12, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x7, 0x6, 0xe, 0x10001}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xfffffff9}]}, {0x33, 0x6, "682a5dbdeda820dbb9e7ba9f2d357d1212296969cfb0ed4d84ceee5d7ecab6f6eeb1e53419d275e066bcb6ad6474fc"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mirred={0x184, 0xf, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8001, 0x10000, 0x0, 0x8, 0x7}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf, 0xd6, 0x1, 0x2, 0x3}, 0x4, r14}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfffffff9, 0x7, 0x7b23, 0x4}, 0x2, r10}}]}, {0xf6, 0x6, "b0c31fc02b449f4094b3c08820160805eb1e31e8125330126207049112826b4841c95a842fe038fba9fe31328ccd4ab30728a39a4bb79857aa20dc20adfb0cabc4ed68f2887b8581b68eeb5380fc60d5c13b487c8d2bd4c1aaa1d5d9565b3912ae68ca3a586b786231e96da45f365bd44233f5f644092fcc9f23b07e1801b88420743c4242c60f57cbd7ec8ef98c25c6bc649e511457d577b4c1372cf002268d75168ac7332350ef34e8f959a64a18e96044aa4d4c2f6943a2632ababc6888796f59031becf63d142035a73ce427a6ca3d8c6e3685adb715a5b813fb117b726dfb4de9243597b83755092eb497c7d6007b2a"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ffaa}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x800}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x8000}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}, @filter_kind_options=@f_u32={{0x8}, {0x4c0, 0x2, [@TCA_U32_POLICE={0x494, 0x6, [@TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x3ae, 0x8, 0x6, 0x3f39, 0x401, 0x7, 0x0, 0x4, 0x10a0, 0x2, 0x8, 0x96, 0xfffffffe, 0x9, 0x8, 0x4, 0xc7e, 0x8, 0x4, 0xbe, 0xa7, 0x100, 0xe5d, 0x10000, 0x4, 0x0, 0xff, 0x7, 0x6, 0x401, 0xc2d, 0x8, 0x200, 0x6, 0xf9e3, 0x8, 0x6, 0xff, 0x3ff, 0x4, 0x80000000, 0x9, 0x8, 0x2, 0x80000000, 0x9, 0xc1, 0x0, 0x7f, 0x4b, 0x5a63, 0x5, 0xffff, 0x8000, 0x5, 0xb, 0x6, 0x4, 0x1, 0x8, 0x1, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x81, 0x80000000, 0x3, 0x7, 0x9, 0x0, 0x800, 0x3, 0x7, 0x8, 0x401, 0x0, 0x8, 0x5, 0x3, 0x3, 0x9, 0x8d, 0xb8, 0x8, 0xffffff00, 0x0, 0x8, 0x62ab, 0xb77, 0x5, 0x80, 0xec, 0xfff, 0x6, 0x1, 0x0, 0x10, 0x2, 0xa, 0x4, 0xffff, 0x9, 0x912, 0xfffffffb, 0x7fffffff, 0x7, 0x30, 0x4, 0x1, 0x5, 0x7c, 0x7, 0x9, 0xe6, 0x8, 0x8, 0x81, 0x2000000, 0x1000, 0x7, 0x3, 0x3, 0x4, 0x2, 0xffffffff, 0x3, 0x2, 0x80000000, 0x3eb400, 0x2, 0x446, 0x8, 0x1, 0x8, 0x9, 0x8000000, 0xff, 0x4, 0x101, 0x2, 0x0, 0x6, 0xfffffff7, 0x10, 0xb, 0x5, 0x9, 0x5, 0x1, 0x2, 0x0, 0xf, 0x40, 0xd, 0x0, 0x7d, 0x7, 0x4, 0xfff, 0xc33c, 0x5, 0x5, 0x6, 0xf, 0x394, 0xde, 0x0, 0x1000, 0x5, 0x1, 0x7f, 0x101, 0x0, 0x1000, 0x9, 0x6, 0x8000000, 0x0, 0x0, 0x4, 0x6, 0x9, 0xb3, 0x1, 0xfffffffe, 0xb6e3, 0x8, 0x28f, 0xffff8000, 0x1001, 0x4, 0x4, 0x0, 0x4, 0x3, 0x8, 0x1, 0x6, 0x1, 0x3, 0x45d, 0x2, 0x200, 0x0, 0x1, 0xfffffff0, 0x3, 0x9, 0x9, 0x6, 0x1ffe, 0x9, 0x8, 0xc, 0x9, 0x45, 0x43, 0x9, 0x9, 0x8e3, 0x2, 0x4, 0x0, 0x6, 0x7ff, 0x55dc, 0x401, 0x7, 0x3, 0xfffffffe, 0x81, 0x1, 0x0, 0x6, 0x8, 0x1, 0x7, 0x100, 0x0, 0x2, 0x0, 0x3, 0x4, 0xc, 0xb, 0x5, 0x1, 0x3, 0xc2, 0x0, 0x7, 0x2, 0xce]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x3, 0x10000, 0x20d8b4e6, 0x7fff, {0x4, 0x1, 0xff, 0x1, 0x7, 0xa4}, {0xc2, 0x2, 0x2, 0x1, 0x7f, 0x5}, 0xfffffffb, 0x4, 0xe2f5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0x100, 0x2, 0x100, {0x7, 0x2, 0xa, 0x0, 0xc, 0x4}, {0xc0, 0x1, 0x1ff, 0x1, 0x8, 0x2}, 0x3, 0x7fffffff, 0x7}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffff7b5}]}, @TCA_U32_MARK={0x10, 0xa, {0x7fff, 0x101}}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0x2}}, @TCA_U32_LINK={0x8, 0x3, 0x7}, @TCA_U32_FLAGS={0x8, 0xb, 0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0xffff0000}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0xf04}}, 0x40)

2.882375634s ago: executing program 4 (id=6743):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000280)={{{@in=@remote, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in=@multicast2}, 0x0, @in6=@private2}}, &(0x7f0000000480)=0xe8)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000600)=[{&(0x7f0000000480)}], 0x1)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x130, 0x54, 0x1, 0x70bd2a, 0x0, {0x2}, [@nested={0xd6, 0x1, 0x0, 0x1, [@nested={0x0, 0xc3, 0x0, 0x1, [@nested={0x0, 0x120, 0x0, 0x1, [@typed={0x0, 0x3f, 0x0, 0x0, @u32=0x101}, @generic="66d6c7ba42304c550ad8a1ea431468277471579dff7ad4405ad292dfeaac23960ea943829b42f3438e21955bf15d84db8a2f08e9339eac5058942c6e14dcd636bd3e10fd8107ebc4b23f4a7020f0648fa12690a98f6c01f1ae2fd3926fb7af2711d8e81d55d33172ea5325f31978a3e59e4090bd24d7b71baae67c4dccdb8369cad1cfb15e4eec22fac64464b5204c8e60f97dbe641273a964303825b103debbb3adfdb10c304cb945e839b3bd87e8c2ee7375f37e174f279a8caeb27bed451b549be21e814ef9a0aedb85f044"]}]}]}, @typed={0xfffffffffffffe5f, 0x132, 0x0, 0x0, @uid=r4}, @generic="022d6f0ec4dd1e805efd675ceff8b3fa3da5327df10183cae6cb64d5c4c964db41219887caacddbe25cc7734a19ddbfc5f3ee51b7c4b3fa0c1a99a65"]}, 0x130}, 0x1, 0x0, 0x0, 0x40081}, 0x40015)
socket$nl_rdma(0x10, 0x3, 0x14)

2.041659658s ago: executing program 4 (id=6744):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32)
sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0)

1.972390555s ago: executing program 2 (id=6745):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvfrom$l2tp6(r0, &(0x7f0000000000)=""/44, 0x2c, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0xc9, &(0x7f0000000080)=0x2, 0x4)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000100)={0x2, [<r2=>0x0, 0x0]}, &(0x7f0000000140)=0xc)
getsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000180)=""/160, &(0x7f0000000240)=0xa0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x1412, 0x200, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}]}, 0x28}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
connect$l2tp6(r1, &(0x7f0000000380)={0xa, 0x0, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6a1b}, 0x20)
r4 = socket(0xf, 0x80000, 0x8000)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000400), r1)
getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000440)={@private2, <r6=>0x0}, &(0x7f0000000480)=0x14)
sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r5, 0x2, 0x70bd29, 0xffff0000, {}, [@GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44005}, 0x15)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'dvmrp0\x00'})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz1\x00', 0x1ff)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000600)={0x8, 'batadv_slave_1\x00', {'wlan0\x00'}, 0x6})
setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000740)={@pppoe={0x18, 0x0, {0x0, @remote, 'ip6gre0\x00'}}, {&(0x7f0000000640)=""/133, 0x85}, &(0x7f0000000700), 0x32}, 0xa0)
getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000800)={@initdev, <r7=>0x0}, &(0x7f0000000840)=0x14)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x4, 0x410, 0xffffffff, 0x1f0, 0x1f0, 0x0, 0xffffffff, 0xffffffff, 0x340, 0x340, 0x340, 0xffffffff, 0x4, &(0x7f0000000880), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x21}, [0x0, 0xffffff00, 0xffffff00, 0xffffff00], [0xff000000, 0xff, 0xff, 0xff000000], 'veth1\x00', 'bond0\x00', {}, {}, 0x8, 0x7, 0x4, 0x22}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@mh={{0x28}, {"42e8"}}, @common=@inet=@dscp={{0x28}, {0x3}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @empty, [0xffffff00, 0x0, 0xffffff00, 0xff], [0x0, 0xff000000, 0xffffff00, 0xffffff00], 'tunl0\x00', 'dummy0\x00', {}, {}, 0x4, 0x0, 0x2, 0x19}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@unspec=@helper={{0x48}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x3f}, [0xffffff00, 0xffffffff, 0xffffff00, 0xffffff00], 0x4e24, 0x4e20, 0x4e24, 0x4e21, 0x0, 0x10c8, 0xf, 0x5, 0xfffffffb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470)
getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000d40)={@local}, &(0x7f0000000d80)=0x14)
r8 = openat$cgroup_ro(r1, &(0x7f0000000dc0)='freezer.state\x00', 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00)='./cgroup.net/syz0\x00', 0x1ff)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f40)={@ifindex=r6, 0x5, 0x1, 0x9, &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40)
bind$bt_hci(r1, &(0x7f0000000f80)={0x1f, 0x1, 0x1}, 0x6)
sendmsg$nl_route_sched(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4210010}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)=@gettclass={0x24, 0x2a, 0x10, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x8, 0x10}, {0xfff2, 0xa}, {0x10, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x8000)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000012c0)={0x7f, <r9=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x14, &(0x7f00000010c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@exit, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @generic={0x0, 0x0, 0x4, 0x0, 0x7}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001180)='GPL\x00', 0x10000, 0x4d, &(0x7f00000011c0)=""/77, 0x41100, 0x24, '\x00', r7, @sched_cls=0x2e, r8, 0x8, &(0x7f0000001240)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001280)={0x0, 0xd, 0x5ce2d1e6, 0x10001}, 0x10, r9, 0xffffffffffffffff, 0x9, &(0x7f0000001300)=[r8, r1], &(0x7f0000001340)=[{0x3, 0x3, 0x7, 0x6}, {0x3, 0x2, 0x7, 0x2}, {0x1, 0x5, 0x2, 0xb}, {0x2, 0x1, 0x2, 0x1}, {0x4, 0x2, 0x0, 0x6}, {0x0, 0x3, 0xb, 0x6}, {0x2, 0x3, 0x1, 0x9}, {0x1, 0x3, 0xf, 0xd}, {0x4, 0xf, 0x9, 0x8}], 0x10, 0xe}, 0x94)
getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000014c0)={r2, 0x4, 0x2, 0x9}, &(0x7f0000001500)=0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000001540)={r3, 0x8, 0x8001})
ioctl$BTRFS_IOC_QGROUP_ASSIGN(r8, 0x40189429, &(0x7f0000001580)={0x1, 0x6, 0x2})

1.830979425s ago: executing program 3 (id=6746):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a3000000070d33f9bb53f000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b00010065787468647200001c0002800800064000000004080007400000001705000200890000000900010073797a3000000000140000001100010000000000000000000700000a", @ANYRESDEC=r0], 0xcc}}, 0x2000810)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000000a01040000000000000000010080000900010073797a30000000002c000000030a01010000000000000000010000030900010073797a3000000070d33f9bb53f000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b00010065787468647200001c0002800800064000000004080007400000001705000200890000000900010073797a3000000000140000001100010000000000000000000700000a", @ANYRESDEC=r0], 0xcc}}, 0x2000810) (async)
socket$inet_smc(0x2b, 0x1, 0x0) (async)

1.802236919s ago: executing program 1 (id=6747):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000000206010200000000000000000000000014000780080008400000003708000640000008000c000300686173683a697000050005000200000005000400000000000900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000034)
r1 = socket$alg(0x26, 0x5, 0x0) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10000}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async, rerun: 32)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) (async, rerun: 32)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) (rerun: 32)
r3 = accept4(r1, 0x0, 0x0, 0x80800)
unshare(0x66000080)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000002c0)={0x3}) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (rerun: 64)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x12, 0x7, 0x0, 0x0) (async, rerun: 64)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea8"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async, rerun: 64)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x3, &(0x7f0000000180)=""/166, &(0x7f0000000240)=0xa6)
sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000540)={0x374, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb8, 0x21}}}}, [@NL80211_ATTR_TX_RATES={0x90, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x7, 0x6}, {0x1, 0x7}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x24, 0x5, 0x30, 0x6c, 0x48, 0x18, 0x1, 0x70, 0x36, 0x3, 0x3, 0xc, 0x2, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x13, 0x2, [{0x7, 0x1}, {0x2, 0x5}, {0x5, 0x6}, {0x5, 0xa}, {0x4, 0x8}, {0x5}, {0x4, 0x8}, {0x1, 0x4}, {0x5, 0xa}, {0x1, 0x5}, {0x7, 0x8}, {0x3}, {0x5, 0x2}, {0x6, 0x5}, {0x1, 0x6}]}]}, @NL80211_BAND_2GHZ={0x1c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x2b4, 0xf, [@link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @cf={0x4, 0x6, {0x1, 0x2, 0x7f, 0x9}}, @link_id={0x65, 0x12, {@from_mac=@device_b}}, @measure_req={0x26, 0x7a, {0x0, 0xd, 0x1, "7c45618abc783878e818106649cf521c2101581ed0178309ff1699bcb8c64822629e71580cd2343201c6016bb806eec7dd6d98bc09d83cb39f5ac8e62d1f26af685dcdf5a6b850f0f638c1448134a3646539067b3753ce884abe69bc0bdfdbdae7eb52af6d92ad339a49cd692fd6c9913f03a37a6301f8"}}, @mesh_chsw={0x76, 0x6, {0x5, 0x8, 0x1c, 0x5}}, @challenge={0x10, 0x1, 0xac}, @random_vendor={0xdd, 0xc6, "684beed8a31d25a9c18d378ad1eb9a2a02f6fccad0d4dd62e257f422652cf19f300cfd6619ac93846dde489fbf6547712f0d55d55aaa20021452c4a74121b07798cd33fb1ee2fe681fed3f30194db891e2e067cfc519ccae5da8d42cb99ae4b29780f382a305993e6c3c4103c06c777688b519bd819d27f92d02458ea79623ab3a09136a78fb1017f11206f12e684ea81420e536fb0455121ea37a36d3c768165b8ccd687b0e83ea20a6f2409485f071bb26c4396363e86cfc6298e9ee5a6a81b03a08037788"}, @sec_chan_ofs={0x3e, 0x1, 0x8}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x5, 0x5, @device_b, 0x9, 0xe0da, 0x3}}, @perr={0x84, 0x115, {0x81, 0x11, [{{}, @broadcast, 0x2, @void, 0x28}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x4}, {{}, @device_b, 0x7ff, @void, 0x40}, {{}, @device_a, 0x5, @void, 0xa}, {{}, @broadcast, 0x8, @void, 0x9}, {{}, @device_b, 0x7, @void, 0x7}, {{}, @broadcast, 0x619, @void, 0x34}, {{}, @device_a, 0xc53, @void, 0x3f}, {{0x0, 0x1}, @device_a, 0x8, @value=@broadcast, 0x29}, {{}, @device_a, 0x2, @void, 0x2f}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x3e}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x9}, {{0x0, 0x1}, @broadcast, 0xe2c, @value, 0x35}, {{0x0, 0x1}, @device_a, 0x0, @value=@broadcast, 0x42}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x17}, {{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x32}, {{0x0, 0x1}, @device_a, 0x10835473, @value=@device_b, 0x9}]}}]}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x374}, 0x1, 0x0, 0x0, 0x8804}, 0x8000)

1.586799895s ago: executing program 0 (id=6748):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f00000026c0)}, 0x10) (async)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x28, 0x3f7, 0x20, 0x70bd2c, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004) (async)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000003c0)={<r1=>r0, &(0x7f0000000140)=')(%.){*/[/@\x00', 0x10000, &(0x7f00000001c0)={@align=0x4, {0x2, 0x2, 0x8000, 0x62}}, 0xfe8, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x101})
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0xfffffff9)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) (async)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) (async, rerun: 32)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000001c0)=[@in6={0xa, 0xfffc, 0xfffffffc, @mcast1}], 0x1c) (async)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async)
recvfrom$inet(r3, 0x0, 0x0, 0x40000121, 0x0, 0x0) (async, rerun: 64)
r4 = socket(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r4], 0x30}}, 0x0) (async, rerun: 32)
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000216, &(0x7f0000000380)=ANY=[@ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) (rerun: 64)

1.382290299s ago: executing program 3 (id=6749):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r2=>0x0})
sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0xce, 0x6, 0x1a, @dev={0xfe, 0x80, '\x00', 0x3e}, @local, 0x10, 0x8, 0x1, 0xf}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0xce, 0x6, 0x1a, @dev={0xfe, 0x80, '\x00', 0x3e}, @local, 0x10, 0x8, 0x1, 0xf}})
socket(0x400000000010, 0x3, 0x0) (async)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x1a0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x170, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x15c, 0x9, 0x0, 0x1, [@m_tunnel_key={0x158, 0x11, 0x0, 0x0, {{0xf}, {0x40, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x20}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xeb, 0x6, "0065bd8d82d0650843463e924c63b25ddec03b58a75f113854ec4464edbfbc47b9d8aae1d901b47f76fb91c0a1637db93a697f286e3b9d5ec3efcb643a80913448b5e3c7faa495764b493e2766dde80f71227bdc2b89f30ca946d0b665bc8a045791479ad9ba2c22756df8b38c28134085ac686983a022d29fa86c7f3bc4579643c4356474f509f38587d7203f8b1edfcb94c8c7e6ad49b6127276715237216bbfa7d2809b9612948f491ca4cf91aab9c59b25a89c59ef357aaaf19fe6a4164e0b1027699edd1d70fe6eac265909000300848c5e40b78f73373cc1c4e6df60c5e5a3f4e7cff7a1"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x884}, 0x2)
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x33}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000640)="27030200dc0f14000e00fc0500ff82cbf400930bf4533f00429c65112a093bbf60b85bcb06f44d437348189ba5ab96827f20b4a8", 0x34}], 0x1}, 0x4005)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@remote, @empty}, &(0x7f0000000280)=0xc)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0))
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000040, 0x0) (async)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000040, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) (async)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@dellinkprop={0x4c, 0x6d, 0x2ec9b2c728e3c67, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x41001, 0x2e804}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg1\x00'}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r8 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)

1.240073768s ago: executing program 0 (id=6750):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0)
poll(0x0, 0x0, 0x9)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=""/4086, 0xff6}], 0x1}, 0x10100)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl1\x00', &(0x7f0000000400)={'gre0\x00', <r3=>0x0, 0x7800, 0x8000, 0x6, 0xb1, {{0x23, 0x4, 0x3, 0x5, 0x8c, 0x68, 0x0, 0x2a, 0x2f, 0x0, @rand_addr=0x64010101, @empty, {[@timestamp_prespec={0x44, 0x2c, 0xc3, 0x3, 0x9, [{@empty, 0x1a}, {@local, 0x3}, {@multicast1, 0x200}, {@remote, 0x31a}, {@empty, 0xf4b4bac}]}, @timestamp_prespec={0x44, 0x14, 0x57, 0x3, 0x4, [{@empty, 0xa}, {@rand_addr=0x64010101, 0x9}]}, @timestamp_prespec={0x44, 0x24, 0x13, 0x3, 0x9, [{@broadcast, 0x7}, {@remote, 0xe}, {@multicast2, 0x9}, {@private=0xa010102, 0xe}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0xd4, [@loopback, @remote, @dev={0xac, 0x14, 0x14, 0x1f}]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'syztnl2\x00', r3, 0x2f, 0xfd, 0x3, 0x7, 0x1a, @local, @dev={0xfe, 0x80, '\x00', 0x31}, 0x7, 0x20, 0x34b, 0xbc45}})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000007f7f100007"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/37}, 0x20)
write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000008060000", @ANYRES16=r0], 0xfdef)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket(0x10, 0x803, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000011c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x558, 0x0, 0x2e0, 0x1c0, 0x0, 0x1c0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@private2, @dev, [], [], 'netdevsim0\x00', 'veth1_to_hsr\x00', {}, {}, 0x0, 0x0, 0x0, 0x98}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@local}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, [], [], 'vlan0\x00', 'pimreg0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @empty, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private, @ipv4=@multicast2}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [], [], 'team_slave_0\x00', 'gretap0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r9, &(0x7f0000001140), 0x700, 0x2, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
accept$packet(r7, 0x0, &(0x7f0000000240))
getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newlink={0x74, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_LOCAL={0x8, 0x6, @multicast2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010101}]}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

883.888101ms ago: executing program 4 (id=6751):
pipe(&(0x7f0000000280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
writev(r0, &(0x7f0000002180)=[{&(0x7f0000000b80)="2eec711f70abb5a31ead08c7571d8dbe3513461cdae3e277bb4a0c321145a64f7d3038a9", 0x24}], 0x1)
write$cgroup_devices(r0, 0x0, 0xffdd)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c00000002060102000000000000000000000002050001000700000015000300686173683a69702c706f72742c6e65740000000014000780050015000000000008001240000000000900020073797a3000000000050005000a000000050004"], 0x6c}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x12}, 0xb}], 0x12, 0x40000021, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f00000000c0)=0x10001)
sendmsg$nl_xfrm(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@migrate={0xa0, 0x21, 0x1, 0x70bd25, 0x25dfdbfb, {{@in6=@mcast2, @in6=@loopback, 0x4e22, 0x7, 0x4e20, 0x0, 0x2, 0x40, 0x80, 0xff}, 0x0, 0x1}, [@migrate={0x50, 0x11, [{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, @in6=@loopback, @in=@local, 0x3c, 0x1, 0x0, 0x3500, 0xa, 0x2}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4040010}, 0x8000)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x78d0)

822.90776ms ago: executing program 2 (id=6752):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215ed000) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x60040015}, 0x400c040) (async)
r2 = socket(0x2c, 0x3, 0x10)
sendmsg$nl_route(r2, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000002f, &(0x7f0000000100)="b9ff0f316844268cb89e14f008004ce0050000000000002c77030a89079f03b180004415050300845013f2325f0094090519fa0000880b943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c060000000000005992078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc04308461738190da450296b0ac014968ce23eefc9d4246dd14afbf79a228326c3acc240d7da058fa4806d1f5f7ff40000001600"/249, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x2400c054}, 0x404c094) (async)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r5, @ANYBLOB="020200000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$packet(0x11, 0x2, 0x300)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r7)
sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r8, 0x20, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x880)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) (async)
r10 = accept4(r9, 0x0, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10)
unshare(0x20000400)
sendmmsg$unix(r10, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000)

677.897µs ago: executing program 3 (id=6753):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x2, 0x0, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x5, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x40000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty, 0x1}}, @sadb_lifetime={0x4, 0x4, 0xc, 0x30, 0x7, 0x80000001}]}, 0x98}, 0x1, 0x7}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x1, {0x7a, 0x0, 0x0, 0x0, 0x9c12}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

0s ago: executing program 4 (id=6754):
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0100001000130700000000fcdbdf250000000000000000000000000000000000000000000000000000000000000000000000024e210002020000001d000000ffa9a57e0001a744054fd20b418cf51cb9d896d0514d5705a7af8322b29c100a79ded5177c61a2e9efba9a33cc386bb3cdfa13da2ac7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x16c}}, 0x48080)

kernel console output (not intermixed with test programs):

ing up backlog
[  499.090137][T26956] netlink: 'syz.0.5415': attribute type 1 has an invalid length.
[  499.156270][T26958] geneve5: entered promiscuous mode
[  499.162411][T26958] geneve5: entered allmulticast mode
[  499.169055][ T5973] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0
[  499.179801][ T5973] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0
[  499.200491][ T5973] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0
[  499.219005][ T5973] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0
[  499.286491][T26966] vlan3: entered promiscuous mode
[  499.381796][T26966] netlink: 'syz.2.5420': attribute type 4 has an invalid length.
[  499.462366][ T5725] tipc: Node number set to 3220517967
[  499.496318][T26982] team0 (unregistering): Port device team_slave_0 removed
[  499.505619][T26982] team0 (unregistering): Port device team_slave_1 removed
[  499.816563][T27003] netlink: 'syz.2.5429': attribute type 1 has an invalid length.
[  499.847251][T27003] bond0: (slave geneve6): making interface the new active one
[  499.856513][T27003] bond0: (slave geneve6): Enslaving as an active interface with an up link
[  499.866094][T17886] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  499.876392][T17886] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  499.885964][T17886] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  499.895118][T17886] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  500.285263][T27025] __nla_validate_parse: 254 callbacks suppressed
[  500.285293][T27025] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5437'.
[  500.393886][T27030] x_tables: duplicate underflow at hook 1
[  500.514716][T27038] netlink: 'syz.4.5443': attribute type 3 has an invalid length.
[  500.666799][T27034] syzkaller1: entered allmulticast mode
[  500.679198][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5442'.
[  500.865736][T27059] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5447'.
[  500.968478][T27064] netlink: 'syz.4.5449': attribute type 39 has an invalid length.
[  501.078559][T27075] vlan3: entered allmulticast mode
[  501.093599][T27075] bond0: entered allmulticast mode
[  501.107918][T27075] bond_slave_0: entered allmulticast mode
[  501.122495][T27075] bond_slave_1: entered allmulticast mode
[  501.199135][T27082] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5455'.
[  501.392693][T27099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5458'.
[  501.447585][T27099] hsr_slave_0: left promiscuous mode
[  501.467211][T27099] hsr_slave_1: left promiscuous mode
[  501.677375][T27108] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  501.751338][T27108] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  501.781343][T27108] batman_adv: batadv0: Removing interface: batadv_slave_1
[  501.802913][T27108] batman_adv: batadv0: Removing interface: gretap1
[  501.955126][T27129] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  501.973240][T27129] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  502.093351][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.260558][T27148] netlink: 'syz.2.5472': attribute type 6 has an invalid length.
[  502.275040][T27151] tipc: Failed to remove unknown binding: 66,0,0/3078971875:3240853871/3240853872
[  502.292726][T27147] af_packet: tpacket_rcv: packet too big, clamped from 2902 to 4294967272. macoff=96
[  502.403462][T27164] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  502.818980][T27201] syzkaller1: left promiscuous mode
[  502.826094][T27201] syzkaller1: left allmulticast mode
[  503.077343][T27214] netlink: 'syz.1.5490': attribute type 5 has an invalid length.
[  503.247539][T27218] xfrm0 speed is unknown, defaulting to 1000
[  503.392444][T27231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5496'.
[  503.729310][T27259] netlink: 'syz.3.5500': attribute type 1 has an invalid length.
[  503.810701][T27259] 8021q: adding VLAN 0 to HW filter on device bond8
[  503.819795][T27263] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  503.866345][T27263] bond8: entered allmulticast mode
[  503.889687][T27265] gre0: Caught tx_queue_len zero misconfig
[  503.916526][T27265] xt_l2tp: v2 doesn't support IP mode
[  504.146637][T27278] bridge0: port 3(dummy0) entered blocking state
[  504.162963][T27278] bridge0: port 3(dummy0) entered disabled state
[  504.170236][T27278] dummy0: entered allmulticast mode
[  504.176541][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  504.186922][T27278] dummy0: left allmulticast mode
[  504.371588][T27292] batadv_slave_1: entered promiscuous mode
[  504.483707][T27290] batadv_slave_1: left promiscuous mode
[  505.132355][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  505.508651][T27322] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5523'.
[  505.525569][T27322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5523'.
[  505.596833][T27326] 8021q: adding VLAN 0 to HW filter on device team0
[  505.607212][T27326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  505.635137][T27326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  505.649954][T27326] veth1_vlan: left promiscuous mode
[  505.656719][T27326] veth0_vlan: left promiscuous mode
[  505.663043][T27326] veth0_vlan: entered promiscuous mode
[  505.671252][T27326] veth1_vlan: entered promiscuous mode
[  505.681112][T27326] veth1_macvtap: left promiscuous mode
[  505.688095][T27326] veth0_macvtap: left promiscuous mode
[  505.694913][T27326] veth0_macvtap: entered promiscuous mode
[  505.701907][T27326] veth1_macvtap: entered promiscuous mode
[  505.714550][T27326] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  505.722219][T27326] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  505.730629][T27326] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  505.739412][T27326] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  505.748173][T27326] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  505.756310][T27326] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  505.784359][T27322] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  505.795410][T27322] bond9 (unregistering): Released all slaves
[  505.809167][T27328] tc_dump_action: action bad kind
[  505.817635][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  505.824890][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  505.835826][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  505.843036][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  505.905454][T17888] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  505.924210][T27336] veth0: Caught tx_queue_len zero misconfig
[  505.931652][T17888] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  505.961200][T17888] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  506.001963][T17888] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  506.054970][T27345] netlink: 'syz.1.5531': attribute type 1 has an invalid length.
[  506.074048][T27345] netlink: 248 bytes leftover after parsing attributes in process `syz.1.5531'.
[  506.093565][T27348] netlink: 292 bytes leftover after parsing attributes in process `syz.3.5533'.
[  506.160937][T27354] netlink: 'syz.1.5531': attribute type 10 has an invalid length.
[  506.175495][T27354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5531'.
[  506.185859][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5531'.
[  506.195586][T27354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5531'.
[  506.206842][T27354] netlink: 'syz.1.5531': attribute type 1 has an invalid length.
[  506.217530][T27354] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5531'.
[  506.536456][T27382] syzkaller0: entered promiscuous mode
[  506.542640][T27382] syzkaller0: entered allmulticast mode
[  506.800207][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5547'.
[  506.815746][T27406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5547'.
[  506.829879][T27406] erspan0: entered promiscuous mode
[  506.838797][T27406] gretap0: entered promiscuous mode
[  506.845516][T27406] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network
[  506.856363][T27406] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  506.944902][   T30] audit: type=1800 audit(1782131647.392:19): pid=27418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5550" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2823 res=0 errno=0
[  506.970270][T27418] netlink: 'syz.2.5550': attribute type 1 has an invalid length.
[  507.008000][T27418] 8021q: adding VLAN 0 to HW filter on device bond9
[  507.097702][T27427] pim6reg99999999: entered allmulticast mode
[  508.172778][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.467302][T27371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  509.670610][T27450] pimreg: left allmulticast mode
[  509.773870][T27456] tipc: Enabled bearer <eth:hsr0>, priority 10
[  509.987040][ T5973] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0
[  510.008722][ T5973] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0
[  510.038986][ T5973] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0
[  510.064799][ T5973] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0
[  510.300397][T27490] xfrm0 speed is unknown, defaulting to 1000
[  510.605634][T27527] mac80211_hwsim hwsim64 syzkaller1: entered promiscuous mode
[  510.613372][T27527] mac80211_hwsim hwsim64 syzkaller1: entered allmulticast mode
[  510.743243][T27538] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4.
[  510.768140][T27538] __nla_validate_parse: 8 callbacks suppressed
[  510.768163][T27538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5584'.
[  511.212643][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.463521][T27547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5586'.
[  513.501840][ T5973] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  513.518768][T27555] netlink: 240 bytes leftover after parsing attributes in process `syz.4.5589'.
[  513.522937][ T5973] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  513.533573][T27555] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5589'.
[  513.586000][ T5973] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  513.606701][ T5973] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  513.665691][T27563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5590'.
[  513.676209][T27564] xfrm0 speed is unknown, defaulting to 1000
[  513.740132][T27574] netlink: 'syz.3.5594': attribute type 13 has an invalid length.
[  513.749883][T27574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5594'.
[  513.807724][T27574] syzkaller1: entered promiscuous mode
[  513.824659][T27574] syzkaller1: entered allmulticast mode
[  514.097181][T27599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5601'.
[  514.107843][T27602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5602'.
[  514.221372][T27602] bond8: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  514.252793][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.258977][T27602] bond8 (unregistering): Released all slaves
[  514.615989][T27633] syzkaller0: entered promiscuous mode
[  514.637008][T27633] syzkaller0: entered allmulticast mode
[  515.109943][T27658] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5615'.
[  515.677024][T27682] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5623'.
[  515.750666][T27690] bond8: entered promiscuous mode
[  515.766824][T27690] bond8: entered allmulticast mode
[  516.200439][T27714] syzkaller0: entered promiscuous mode
[  516.244331][T27714] syzkaller0: entered allmulticast mode
[  516.284285][T27714] netlink: 'syz.2.5630': attribute type 32 has an invalid length.
[  517.293430][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  518.252684][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.332498][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  520.339569][T27748] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  520.473236][T27774] __nla_validate_parse: 1 callbacks suppressed
[  520.473256][T27774] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5647'.
[  520.529919][T27774] IPVS: stopping master sync thread 21572 ...
[  520.542243][T27782] netlink: 'syz.1.5645': attribute type 1 has an invalid length.
[  520.571986][T27782] netlink: 'syz.1.5645': attribute type 2 has an invalid length.
[  520.577770][T27784] bond10: entered promiscuous mode
[  520.648638][T27791] mac80211_hwsim hwsim64 syzkaller1: left promiscuous mode
[  520.695687][T27791] mac80211_hwsim hwsim64 syzkaller1: left allmulticast mode
[  520.815406][T27802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5651'.
[  520.961714][T27806] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5652'.
[  521.026975][T27807] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5653'.
[  521.146028][T27828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5656'.
[  521.438805][T27846] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5664'.
[  521.754864][T27877] bridge6: entered promiscuous mode
[  521.769722][T27877] bridge6: entered allmulticast mode
[  521.807175][T27877] team0: Port device bridge6 added
[  521.819246][T27881] bridge0: port 3(team0) entered blocking state
[  521.841629][T27881] bridge0: port 3(team0) entered disabled state
[  521.849612][T27881] team0: entered allmulticast mode
[  521.855856][T27881] team_slave_0: entered allmulticast mode
[  521.861725][T27881] team_slave_1: entered allmulticast mode
[  521.869754][T27881] team0: entered promiscuous mode
[  521.875813][T27881] team_slave_0: entered promiscuous mode
[  521.881731][T27881] team_slave_1: entered promiscuous mode
[  521.900909][T27889] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5677'.
[  521.910181][T27888] netlink: 'syz.3.5676': attribute type 1 has an invalid length.
[  521.934194][T27891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5678'.
[  521.946709][T27885] netlink: 'syz.3.5676': attribute type 1 has an invalid length.
[  521.957868][T27892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5677'.
[  521.967619][T27885] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5676'.
[  521.991717][T27889] veth12: entered promiscuous mode
[  522.039841][T27891] 8021q: adding VLAN 0 to HW filter on device bond10
[  522.196334][T27906] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  522.295917][T27922] netlink: 'syz.4.5686': attribute type 1 has an invalid length.
[  522.328125][T27918] bridge0: port 1(bridge_slave_0) entered disabled state
[  522.345054][T27918] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.416700][T27922] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  522.437644][T27935] netlink: 'syz.1.5688': attribute type 62 has an invalid length.
[  522.527737][T27939] netlink: 'syz.2.5690': attribute type 2 has an invalid length.
[  522.535740][T27939] netlink: 'syz.2.5690': attribute type 1 has an invalid length.
[  522.632157][T27945] netlink: 'syz.2.5692': attribute type 4 has an invalid length.
[  522.646715][T27941] nbd: nbd1 already in use
[  522.725485][T27941] –: left promiscuous mode
[  522.784501][T27941] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  522.858540][T27963] nbd: illegal input index -322437120
[  523.037464][T27979] ip6gre0: Caught tx_queue_len zero misconfig
[  523.079473][T27975] netlink: 'syz.1.5699': attribute type 13 has an invalid length.
[  523.170590][T27987] FAULT_INJECTION: forcing a failure.
[  523.170590][T27987] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  523.186159][T27987] CPU: 1 UID: 0 PID: 27987 Comm: syz.4.5705 Not tainted syzkaller #0 PREEMPT(full) 
[  523.186190][T27987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  523.186207][T27987] Call Trace:
[  523.186219][T27987]  <TASK>
[  523.186228][T27987]  dump_stack_lvl+0xe8/0x150
[  523.186257][T27987]  should_fail_ex+0x40c/0x560
[  523.186282][T27987]  _copy_to_user+0x31/0xb0
[  523.186310][T27987]  simple_read_from_buffer+0xe1/0x170
[  523.186338][T27987]  proc_fail_nth_read+0x1bb/0x230
[  523.186367][T27987]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  523.186395][T27987]  ? rw_verify_area+0x24a/0x4c0
[  523.186423][T27987]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  523.186448][T27987]  vfs_read+0x213/0xa80
[  523.186485][T27987]  ? __pfx___mutex_lock+0x10/0x10
[  523.186513][T27987]  ? __pfx_vfs_read+0x10/0x10
[  523.186544][T27987]  ? smc_setsockopt+0x49b/0xb00
[  523.186571][T27987]  ? __fget_files+0x3a2/0x420
[  523.186593][T27987]  ? __fget_files+0x2a/0x420
[  523.186620][T27987]  ksys_read+0x150/0x270
[  523.186647][T27987]  ? __pfx_ksys_read+0x10/0x10
[  523.186675][T27987]  ? rcu_is_watching+0x15/0xb0
[  523.186696][T27987]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.186718][T27987]  do_syscall_64+0x174/0x580
[  523.186743][T27987]  ? trace_irq_disable+0x3b/0x140
[  523.186770][T27987]  ? clear_bhb_loop+0x40/0x90
[  523.186793][T27987]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  523.186812][T27987] RIP: 0033:0x7f14a4b5d68e
[  523.186831][T27987] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  523.186848][T27987] RSP: 002b:00007f14a59acfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  523.186870][T27987] RAX: ffffffffffffffda RBX: 00007f14a59ad6c0 RCX: 00007f14a4b5d68e
[  523.186885][T27987] RDX: 000000000000000f RSI: 00007f14a59ad0a0 RDI: 0000000000000004
[  523.186898][T27987] RBP: 00007f14a59ad090 R08: 0000000000000000 R09: 0000000000000000
[  523.186910][T27987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  523.186922][T27987] R13: 00007f14a4e16038 R14: 00007f14a4e15fa0 R15: 00007ffe1a55e3d8
[  523.186947][T27987]  </TASK>
[  523.423886][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  523.596750][   T30] audit: type=1800 audit(1782131664.042:20): pid=27998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5710" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2980 res=0 errno=0
[  524.012638][T11299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  524.167442][T28045] syzkaller0: entered promiscuous mode
[  524.173468][T28045] syzkaller0: entered allmulticast mode
[  524.193480][T28044] geneve7: entered promiscuous mode
[  524.577493][   T48] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  524.600924][   T48] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  524.607386][T28078] block nbd4: Unsupported socket: should be TCP or UNIX.
[  524.622167][   T48] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  524.639042][   T48] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  525.292570][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  525.469187][T28140] mac80211_hwsim hwsim64 syzkaller1: entered promiscuous mode
[  525.478315][T28140] mac80211_hwsim hwsim64 syzkaller1: entered allmulticast mode
[  525.559317][T28151] syzkaller1: entered promiscuous mode
[  525.565235][T28148] __nla_validate_parse: 17 callbacks suppressed
[  525.565253][T28148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5753'.
[  525.589239][T28151] syzkaller1: entered allmulticast mode
[  525.670024][T28156] mac80211_hwsim hwsim64 syzkaller1: left promiscuous mode
[  525.678399][T28156] mac80211_hwsim hwsim64 syzkaller1: left allmulticast mode
[  525.704526][T28156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5754'.
[  525.712345][T28163] xt_l2tp: v2 sid > 0xffff: 262144
[  525.730762][T28156] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5754'.
[  525.823897][T28175] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5759'.
[  525.835635][T28176] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5759'.
[  526.008109][T28198] validate_nla: 5 callbacks suppressed
[  526.008128][T28198] netlink: 'syz.0.5765': attribute type 62 has an invalid length.
[  526.143348][T28211] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.495169][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  526.655585][T28253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5782'.
[  526.673528][T28253] openvswitch: netlink: Flow actions attr not present in new flow.
[  526.747249][T28257] sctp: [Deprecated]: syz.4.5783 (pid 28257) Use of int in max_burst socket option.
[  526.747249][T28257] Use struct sctp_assoc_value instead
[  526.828969][T28262] xt_CT: No such helper "snmp"
[  526.829191][T28267] netlink: 'syz.0.5784': attribute type 1 has an invalid length.
[  526.944643][T28267] bond10: entered promiscuous mode
[  526.958120][T28267] 8021q: adding VLAN 0 to HW filter on device bond10
[  526.983873][T28280] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5791'.
[  527.020165][T28272] bond7: left allmulticast mode
[  527.029835][T28272] bond8: left promiscuous mode
[  527.035054][T28272] bond8: left allmulticast mode
[  527.056751][T28282] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5792'.
[  527.072104][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5784'.
[  527.112887][T28280] syzkaller1: left promiscuous mode
[  527.122718][T28267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5784'.
[  527.127683][T28280] syzkaller1: left allmulticast mode
[  527.182131][T28274] bond10: (slave bridge0): making interface the new active one
[  527.201547][T28274] bridge0: entered promiscuous mode
[  527.218853][T28274] bond10: (slave bridge0): Enslaving as an active interface with an up link
[  527.364618][T28290] syzkaller0: entered promiscuous mode
[  527.370245][T28290] syzkaller0: entered allmulticast mode
[  527.582773][ T5626] block nbd4: Receive control failed (result -1)
[  527.936760][T28338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  527.952118][T28338] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.024584][T28338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.037296][T28338] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.119103][T28338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.130956][T28338] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.191303][T28338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  528.207030][T28338] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  528.272020][T11299] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  528.280668][T11299] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  528.299321][T11299] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  528.307894][T11299] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  528.323714][T11299] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  528.334197][T11299] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  528.349912][T11299] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  528.359025][T11299] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  528.849746][T28395] netlink: 'syz.3.5819': attribute type 13 has an invalid length.
[  529.108665][T28405] tipc: Failed to remove unknown binding: 66,0,0/0:2784365594/2784365596
[  529.118127][T28405] tipc: Failed to remove unknown binding: 66,0,0/0:2784365594/2784365595
[  529.150096][T28409] netlink: 'syz.1.5823': attribute type 19 has an invalid length.
[  529.159867][T28409] netlink: 'syz.1.5823': attribute type 20 has an invalid length.
[  529.195954][T28412] netlink: 'syz.3.5824': attribute type 1 has an invalid length.
[  529.230843][T28412] bond9: (slave bridge16): Enslaving as a backup interface with an up link
[  529.246854][T28412] macvlan0: entered promiscuous mode
[  529.253157][T28412] macvlan0: entered allmulticast mode
[  529.259344][T28412] bond9: entered promiscuous mode
[  529.265069][T28412] bridge16: entered promiscuous mode
[  529.271231][T28412] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  529.279723][T28412] bond9: left promiscuous mode
[  529.285321][T28412] bridge16: left promiscuous mode
[  529.463301][T28427] lo: Caught tx_queue_len zero misconfig
[  529.532718][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  529.644095][T27166] block nbd5: Receive control failed (result -32)
[  529.644095][ T5626] block nbd5: Receive control failed (result -32)
[  529.707113][T28444] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  529.776068][T17888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.268535][T28497] : entered promiscuous mode
[  530.398573][T27166] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  530.407771][T27166] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  530.416804][T27166] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  530.427322][T27166] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  530.435116][T27166] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  530.509648][T17383] bond4: (slave syz_tun): Removing an active aggregator
[  530.519868][T17383] bond4: (slave syz_tun): Releasing backup interface
[  530.595388][T28516] netlink: 'syz.3.5853': attribute type 23 has an invalid length.
[  530.682330][T28522] xfrm0 speed is unknown, defaulting to 1000
[  530.719759][T28527] netlink: 'syz.0.5854': attribute type 12 has an invalid length.
[  530.804072][T11299] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0
[  530.858649][T21988] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0
[  530.879950][T28536] netlink: 'syz.3.5858': attribute type 1 has an invalid length.
[  530.890889][T28536] __nla_validate_parse: 16 callbacks suppressed
[  530.890908][T28536] netlink: 280 bytes leftover after parsing attributes in process `syz.3.5858'.
[  530.918796][T28536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5858'.
[  530.928485][T17888] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0
[  530.937575][T17888] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20002 - 0
[  530.963172][   T36] vlan2: left allmulticast mode
[  530.977968][   T36] geneve0: left allmulticast mode
[  531.007767][   T36] vlan2: left promiscuous mode
[  531.032586][   T36] bridge0: port 3(vlan2) entered disabled state
[  531.076109][   T36] bridge_slave_1: left allmulticast mode
[  531.087873][   T36] bridge_slave_1: left promiscuous mode
[  531.095430][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  531.110447][   T36] bridge_slave_0: left allmulticast mode
[  531.119722][   T36] bridge_slave_0: left promiscuous mode
[  531.126747][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  531.185158][T28542] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  531.218878][T17888] smbdirect: ib_dev[syz0] removed
[  531.262368][   T36] bond6 (unregistering): (slave gre1): Releasing backup interface
[  531.298715][   T36] bond0 (unregistering): (slave geneve6): Releasing active interface
[  531.385335][   T36] bond1 (unregistering): (slave veth5): Releasing backup interface
[  531.397373][   T36] bond1 (unregistering): (slave batadv1): Releasing backup interface
[  531.414226][   T36] bond1 (unregistering): Released all slaves
[  531.427570][   T36] bond2 (unregistering): Released all slaves
[  531.440239][   T36] bond3 (unregistering): Released all slaves
[  531.456573][   T36] bond4 (unregistering): Released all slaves
[  531.478716][   T36] bond5 (unregistering): Released all slaves
[  531.494987][   T36] bond6 (unregistering): Released all slaves
[  531.509551][   T36] bond7 (unregistering): Released all slaves
[  531.533185][   T36] bond8 (unregistering): Released all slaves
[  531.546119][   T36] bond0 (unregistering): Released all slaves
[  531.556977][   T36] bond9 (unregistering): Released all slaves
[  531.569367][   T36] bond10 (unregistering): Released all slaves
[  531.584453][   T36] bond11 (unregistering): Released all slaves
[  531.606452][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1
[  531.750479][   T36] tipc: Disabling bearer <ib:wg1>
[  531.770963][   T36] tipc: Disabling bearer <eth:hsr0>
[  531.786040][   T30] audit: type=1804 audit(1782131672.232:21): pid=28584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5864" name="/newroot/510/cgroup.controllers" dev="tmpfs" ino=2631 res=1 errno=0
[  531.812286][   T30] audit: type=1800 audit(1782131672.262:22): pid=28584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5864" name="cgroup.controllers" dev="tmpfs" ino=2631 res=0 errno=0
[  531.822644][   T36] tipc: Left network mode
[  531.905096][T28599] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5867'.
[  531.939822][T28589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5865'.
[  532.208300][T28625] netlink: 236 bytes leftover after parsing attributes in process `syz.3.5874'.
[  532.272886][T28627] openvswitch: netlink: IP tunnel dst address not specified
[  532.317438][T28625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'.
[  532.492905][ T5626] Bluetooth: hci0: command tx timeout
[  532.537762][T28648] netlink: 'syz.1.5876': attribute type 8 has an invalid length.
[  532.572025][T10132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  532.649979][T28648] bridge6: entered allmulticast mode
[  532.758288][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2
[  532.819869][T28504] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.845544][T28504] bridge0: port 1(bridge_slave_0) entered disabled state
[  532.868673][T28504] bridge_slave_0: entered allmulticast mode
[  532.887075][T28504] bridge_slave_0: entered promiscuous mode
[  532.928731][T28504] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.939487][T28504] bridge0: port 2(bridge_slave_1) entered disabled state
[  532.956015][T28504] bridge_slave_1: entered allmulticast mode
[  532.968470][T28504] bridge_slave_1: entered promiscuous mode
[  533.050055][   T36] hsr_slave_0: left promiscuous mode
[  533.065129][   T36] hsr_slave_1: left promiscuous mode
[  533.367844][T17888] tipc: Subscription rejected, illegal request
[  533.385240][T28673] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5880'.
[  533.415275][T28677] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5881'.
[  533.501003][T28504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  533.539744][T28504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  533.611786][T28504] team0: Port device team_slave_0 added
[  533.649919][T28504] team0: Port device team_slave_1 added
[  533.656885][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4
[  533.696464][T28504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  533.706004][T28504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.742991][T28504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  533.779271][T28504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  533.797604][T28504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  533.823733][T28504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  533.868234][T28504] hsr_slave_0: entered promiscuous mode
[  533.874750][T28504] hsr_slave_1: entered promiscuous mode
[  533.880924][T28504] debugfs: 'hsr0' already exists in 'hsr'
[  533.886781][T28504] Cannot create hsr debugfs directory
[  534.025272][   T36] IPVS: stop unused estimator thread 0...
[  534.062155][T28504] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  534.165193][T28504] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  534.256784][T28504] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  534.350873][T28504] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20002 - 0
[  534.572091][ T5626] Bluetooth: hci0: command tx timeout
[  534.609159][T28747] bond10: entered promiscuous mode
[  534.902234][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  534.931372][T28769] 8021q: adding VLAN 0 to HW filter on device bond0
[  534.947128][T28769] 8021q: adding VLAN 0 to HW filter on device batadv0
[  534.975880][T28769] batman_adv: batadv0: Interface activated: batadv_slave_0
[  534.989334][T28769] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  535.009424][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.016634][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.035236][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.042436][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.581483][T28803] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  535.614216][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.623431][T17888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.638243][T13156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.654241][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  535.837798][T28816] syzkaller0: entered promiscuous mode
[  535.843472][T28816] syzkaller0: entered allmulticast mode
[  535.851682][T28816] tc action pedit offset 4096 out of bounds
[  535.857696][T28816] tc action pedit offset 4096 out of bounds
[  535.863684][T28816] tc action pedit offset 4096 out of bounds
[  535.869627][T28816] tc action pedit offset 4096 out of bounds
[  535.875584][T28816] tc action pedit offset 4096 out of bounds
[  535.881517][T28816] tc action pedit offset 4096 out of bounds
[  535.887488][T28816] tc action pedit offset 4096 out of bounds
[  535.893450][T28816] tc action pedit offset 4096 out of bounds
[  535.899386][T28816] tc action pedit offset 4096 out of bounds
[  535.905354][T28816] tc action pedit offset 4096 out of bounds
[  535.911300][T28816] 0: reclassify loop, rule prio 0, protocol 800
[  536.100140][T28822] xt_CT: You must specify a L4 protocol and not use inversions on it
[  536.652101][ T5626] Bluetooth: hci0: command tx timeout
[  536.762379][T28693] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  536.775284][T28504] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  536.800925][T28504] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  536.813477][T28504] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  536.845063][T28504] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  536.863136][T28504] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  536.892451][T28504] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  536.915896][T28504] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  536.938480][T28504] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  537.018091][T28838] syzkaller0: entered promiscuous mode
[  537.026348][T28838] syzkaller0: entered allmulticast mode
[  537.066476][T28858] bridge0: port 2(bridge_slave_1) entered disabled state
[  537.073757][T28858] bridge0: port 1(bridge_slave_0) entered disabled state
[  537.109305][T28862] netlink: 'syz.3.5909': attribute type 21 has an invalid length.
[  537.128579][T28862] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5909'.
[  537.151052][T28858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  537.176448][T28862] netlink: 'syz.3.5909': attribute type 5 has an invalid length.
[  537.193077][T28862] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5909'.
[  537.250039][T28870] syzkaller0: entered promiscuous mode
[  537.255810][T28870] syzkaller0: entered allmulticast mode
[  537.334860][T28504] 8021q: adding VLAN 0 to HW filter on device bond0
[  537.411795][T28504] 8021q: adding VLAN 0 to HW filter on device team0
[  537.442927][T17888] bridge0: port 1(bridge_slave_0) entered blocking state
[  537.450136][T17888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  537.472723][T28882] team_slave_1: entered promiscuous mode
[  537.478950][T28882] team_slave_1: entered allmulticast mode
[  537.488338][T17888] bridge0: port 2(bridge_slave_1) entered blocking state
[  537.495531][T17888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  537.896535][T28922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5923'.
[  537.906434][T28922] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5923'.
[  537.924808][T28922] gretap0: entered promiscuous mode
[  537.933016][T28922] gretap0: left promiscuous mode
[  537.944667][T28504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  537.980786][T28504] veth0_vlan: entered promiscuous mode
[  537.994000][T28504] veth1_vlan: entered promiscuous mode
[  538.020207][T28504] veth0_macvtap: entered promiscuous mode
[  538.031052][T28504] veth1_macvtap: entered promiscuous mode
[  538.049482][T28504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  538.064539][T28504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  538.079077][   T48] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  538.089863][   T48] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  538.100131][   T48] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  538.110373][   T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  538.732721][ T5626] Bluetooth: hci0: command tx timeout
[  538.738533][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.435057][T28885] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  540.524153][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.557675][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.563215][T28947] netlink: 'syz.3.5926': attribute type 1 has an invalid length.
[  540.630762][T28955] 8021q: VLANs not supported on syzkaller1
[  540.639956][T28951] netlink: 'syz.0.5928': attribute type 13 has an invalid length.
[  540.655762][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  540.682897][T28954] block nbd1: NBD_DISCONNECT
[  540.688291][T28947] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5926'.
[  540.702542][T28954] block nbd1: Send disconnect failed -32
[  540.709820][T28954] block nbd1: shutting down sockets
[  540.728294][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.738993][T28958] sctp: [Deprecated]: syz.4.5930 (pid 28958) Use of int in max_burst socket option.
[  540.738993][T28958] Use struct sctp_assoc_value instead
[  540.756383][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.769502][T28951] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  540.785668][T28951] syzkaller0: entered promiscuous mode
[  540.791249][T28951] syzkaller0: entered allmulticast mode
[  540.800779][T28951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5928'.
[  540.810531][T28950] nbd1: detected capacity change from 0 to 63
[  540.843525][ T5626] block nbd1: Receive control failed (result -104)
[  540.861728][T28963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5848'.
[  541.010579][T28976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5932'.
[  541.150191][T28981] netlink: 'syz.2.5935': attribute type 4 has an invalid length.
[  541.225498][T28985] syzkaller1: entered promiscuous mode
[  541.246629][T28985] syzkaller1: entered allmulticast mode
[  541.336980][T27166] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  541.344223][T28990] syzkaller0: Caught tx_queue_len zero misconfig
[  541.351048][T27166] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  541.358689][T27166] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  541.368320][T27166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  541.376207][T27166] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  541.663548][T16977] syz_tun (unregistering): left allmulticast mode
[  541.688987][T29009] bond0: (slave veth1_to_bond): Device is not bonding slave
[  541.703349][T29009] bond0: option active_slave: invalid value (veth1_to_bond)
[  541.779048][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  541.979014][T29028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5941'.
[  542.015073][T29028] 8021q: adding VLAN 0 to HW filter on device bond11
[  542.156761][T28992] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.164250][T28992] bridge0: port 1(bridge_slave_0) entered disabled state
[  542.171694][T28992] bridge_slave_0: entered allmulticast mode
[  542.182671][T28992] bridge_slave_0: entered promiscuous mode
[  542.190667][T28992] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.198225][T28992] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.205783][T28992] bridge_slave_1: entered allmulticast mode
[  542.213196][T28992] bridge_slave_1: entered promiscuous mode
[  542.239707][T28992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.251577][T28992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.279875][T28992] team0: Port device team_slave_0 added
[  542.288249][T28992] team0: Port device team_slave_1 added
[  542.324891][T28992] batman_adv: batadv0: Adding interface: batadv_slave_0
[  542.333101][T28992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.360166][T28992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  542.376306][T28992] batman_adv: batadv0: Adding interface: batadv_slave_1
[  542.383762][T28992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  542.418623][T28992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  542.466556][T28992] hsr_slave_0: entered promiscuous mode
[  542.473858][T28992] hsr_slave_1: entered promiscuous mode
[  542.480262][T28992] debugfs: 'hsr0' already exists in 'hsr'
[  542.486571][T28992] Cannot create hsr debugfs directory
[  542.555613][T29046] netlink: 'syz.1.5945': attribute type 1 has an invalid length.
[  542.582720][T29046] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5945'.
[  542.770692][T29059] Cannot find set identified by id 3 to match
[  542.779206][T29061] netlink: 'syz.1.5949': attribute type 2 has an invalid length.
[  542.787626][T29061] netlink: 'syz.1.5949': attribute type 2 has an invalid length.
[  542.793906][T29064] openvswitch: netlink: IPv6 tunnel dst address is zero
[  542.802321][T29061] netlink: 'syz.1.5949': attribute type 1 has an invalid length.
[  542.802383][T29061] netlink: 'syz.1.5949': attribute type 2 has an invalid length.
[  542.802396][T29061] netlink: 'syz.1.5949': attribute type 2 has an invalid length.
[  542.802409][T29061] netlink: 'syz.1.5949': attribute type 2 has an invalid length.
[  542.854178][T29068] openvswitch: netlink: IPv6 tunnel dst address is zero
[  542.962352][T29072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5953'.
[  543.048003][T28992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.070004][T29081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5956'.
[  543.072419][T28992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0
[  543.080952][T29081] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5956'.
[  543.122384][T29083] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5956'.
[  543.140711][T29081] geneve3: entered promiscuous mode
[  543.145108][T29083] IPv6: NLM_F_CREATE should be specified when creating new route
[  543.154860][T29078] sch_fq: defrate 0 ignored.
[  543.164594][T29081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5956'.
[  543.175847][T28992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.197917][T28992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0
[  543.242299][T29085] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  543.249655][T29085] syzkaller0: entered promiscuous mode
[  543.258146][T29085] syzkaller0: entered allmulticast mode
[  543.270721][T29085] tipc: Resetting bearer <eth:syzkaller0>
[  543.281155][T28992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.300480][T28992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0
[  543.324673][T29085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5957'.
[  543.334044][T29090] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5959'.
[  543.355044][T29085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5957'.
[  543.405966][T28992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  543.440412][T29085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5957'.
[  543.453518][ T5626] Bluetooth: hci3: command tx timeout
[  543.464746][T28992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0
[  543.517939][T29085] geneve4: entered promiscuous mode
[  543.535799][T29085] geneve4: entered allmulticast mode
[  543.665125][T28992] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  543.693632][T28992] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  543.723964][T28992] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  543.753883][T28992] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  543.801307][T29118] 8021q: adding VLAN 0 to HW filter on device bond10
[  543.821270][T28992] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  543.833870][T29120] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  543.853543][T28992] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  543.875716][T28992] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  543.897097][T28992] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  544.048028][T29143] syzkaller0: entered promiscuous mode
[  544.063579][T29143] syzkaller0: entered allmulticast mode
[  544.156610][T28992] 8021q: adding VLAN 0 to HW filter on device bond0
[  544.189944][T29150] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  544.253561][T29150] tipc: Resetting bearer <eth:syzkaller0>
[  544.272150][T13164] tipc: Node number set to 364088359
[  544.291655][T29166] tun0: tun_chr_ioctl cmd 1074812117
[  544.343872][T28992] 8021q: adding VLAN 0 to HW filter on device team0
[  544.365743][T21988] bridge0: port 1(bridge_slave_0) entered blocking state
[  544.372958][T21988] bridge0: port 1(bridge_slave_0) entered forwarding state
[  544.402237][T21988] bridge0: port 2(bridge_slave_1) entered blocking state
[  544.409408][T21988] bridge0: port 2(bridge_slave_1) entered forwarding state
[  544.432621][T29170] syzkaller0: entered promiscuous mode
[  544.438221][T29170] syzkaller0: entered allmulticast mode
[  544.813153][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  544.953949][T29206] bond11: option tlb_dynamic_lb: invalid value (115)
[  544.964864][T29206] bond11 (unregistering): Released all slaves
[  545.056790][   T48] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  545.081073][   T48] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  545.110197][   T48] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  545.133806][   T48] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  545.277484][T29220] tipc: Resetting bearer <eth:syzkaller0>
[  545.283793][T29220] tipc: Resetting bearer <eth:syzkaller0>
[  545.533406][ T5626] Bluetooth: hci3: command tx timeout
[  545.731435][T29246] validate_nla: 7 callbacks suppressed
[  545.731455][T29246] netlink: 'syz.1.5990': attribute type 1 has an invalid length.
[  545.776881][T29246] 8021q: adding VLAN 0 to HW filter on device bond12
[  545.846248][T29249] bond12: (slave geneve3): making interface the new active one
[  545.855625][T29249] bond12: (slave geneve3): Enslaving as an active interface with an up link
[  545.885702][T28992] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.913412][   T48] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  545.949392][   T48] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  545.985464][   T48] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.030029][   T48] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.095828][T29265] Cannot find map_set index 17 as target
[  546.190657][T28992] veth0_vlan: entered promiscuous mode
[  546.241034][T28992] veth1_vlan: entered promiscuous mode
[  546.307655][T28992] veth0_macvtap: entered promiscuous mode
[  546.354331][T28992] veth1_macvtap: entered promiscuous mode
[  546.361289][T29276] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  546.396735][T28992] batman_adv: batadv0: Interface activated: batadv_slave_0
[  546.413822][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  546.446736][T28992] batman_adv: batadv0: Interface activated: batadv_slave_1
[  546.513053][T17886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  546.531529][T17886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  546.554175][T17886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  546.578764][T17886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  546.666665][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.693260][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.725109][T17888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  546.745592][T17888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  546.835119][T29303] 8021q: adding VLAN 0 to HW filter on device bond11
[  546.869403][T29311] bond11: (slave geneve5): Enslaving as an active interface with an up link
[  546.885399][T17888] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  546.905713][T17888] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  546.954211][T17888] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  546.984593][T17888] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  547.240970][T27166] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  547.249922][T27166] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  547.257412][T27166] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  547.265288][T27166] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  547.272902][T27166] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  547.512938][T29342] bridge0: port 3(ipvlan2) entered blocking state
[  547.544775][T29342] bridge0: port 3(ipvlan2) entered disabled state
[  547.565893][T29342] ipvlan2: entered allmulticast mode
[  547.582899][T29342] bridge0: entered allmulticast mode
[  547.589733][T29342] ipvlan2: left allmulticast mode
[  547.594981][T29342] bridge0: left allmulticast mode
[  547.613214][ T5626] Bluetooth: hci3: command tx timeout
[  547.852337][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  548.089616][T29385] __nla_validate_parse: 17 callbacks suppressed
[  548.089638][T29385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6023'.
[  548.117081][T29385] netlink: 'syz.2.6023': attribute type 6 has an invalid length.
[  548.133380][T29330] bridge0: port 1(bridge_slave_0) entered blocking state
[  548.140731][T29330] bridge0: port 1(bridge_slave_0) entered disabled state
[  548.149081][T29330] bridge_slave_0: entered allmulticast mode
[  548.157072][T29330] bridge_slave_0: entered promiscuous mode
[  548.167953][T29330] bridge0: port 2(bridge_slave_1) entered blocking state
[  548.175734][T29330] bridge0: port 2(bridge_slave_1) entered disabled state
[  548.183943][T29330] bridge_slave_1: entered allmulticast mode
[  548.191191][T29330] bridge_slave_1: entered promiscuous mode
[  548.224208][T29330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  548.236335][T29330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.268786][T29330] team0: Port device team_slave_0 added
[  548.286167][T29330] team0: Port device team_slave_1 added
[  548.351030][T29330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.358571][T29330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.386057][T29330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.402424][T29330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  548.419689][T29330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  548.467497][T29330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  548.595558][T29330] hsr_slave_0: entered promiscuous mode
[  548.608168][T29330] hsr_slave_1: entered promiscuous mode
[  548.615572][T29330] debugfs: 'hsr0' already exists in 'hsr'
[  548.616745][T29419] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6033'.
[  548.621381][T29330] Cannot create hsr debugfs directory
[  548.718017][T29422] netlink: 'syz.2.6032': attribute type 13 has an invalid length.
[  548.737358][T29422] netlink: 'syz.2.6032': attribute type 17 has an invalid length.
[  548.773657][T29425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6032'.
[  548.848034][T29431] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6034'.
[  549.121820][T29330] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.142283][T29330] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.163642][T29330] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  549.211019][T29446] syzkaller1: entered promiscuous mode
[  549.221275][T29446] syzkaller1: entered allmulticast mode
[  549.233694][T29330] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.261350][T29330] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.279126][T29448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6039'.
[  549.295891][ T5626] Bluetooth: hci5: command tx timeout
[  549.301740][T29330] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  549.334576][T29451] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6040'.
[  549.365825][T29330] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.381945][T29330] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.403089][T29330] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  549.480714][T29330] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  549.502637][T29330] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  549.521173][T29330] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  549.534424][T29460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6044'.
[  549.690258][T29468] syzkaller0: entered promiscuous mode
[  549.693554][ T5626] Bluetooth: hci3: command tx timeout
[  549.710651][T29468] syzkaller0: entered allmulticast mode
[  549.735754][T29330] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  549.756640][T29330] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  549.775847][T29330] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  549.796291][T29330] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  549.809231][T29330] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  549.826053][T29330] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  549.876099][T29330] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  549.901138][T29330] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  549.916624][T29485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6051'.
[  549.942981][T29485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6051'.
[  550.090480][T29503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6052'.
[  550.139392][T29507] IPv6: sit3: Disabled Multicast RS
[  550.218218][T29330] 8021q: adding VLAN 0 to HW filter on device bond0
[  550.293949][T29330] 8021q: adding VLAN 0 to HW filter on device team0
[  550.315813][T17888] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.323021][T17888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.389137][T17888] bridge0: port 2(bridge_slave_1) entered blocking state
[  550.396383][T17888] bridge0: port 2(bridge_slave_1) entered forwarding state
[  550.893378][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  551.189996][T29573] bridge0: port 3(vlan4) entered blocking state
[  551.198094][T29573] bridge0: port 3(vlan4) entered disabled state
[  551.205708][T29573] vlan4: entered allmulticast mode
[  551.210961][T29573] geneve0: entered allmulticast mode
[  551.218985][T29573] vlan4: entered promiscuous mode
[  551.224456][T29573] geneve0: entered promiscuous mode
[  551.372813][ T5626] Bluetooth: hci5: command tx timeout
[  551.385446][T29330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  551.433579][T29330] veth0_vlan: entered promiscuous mode
[  551.475066][T29330] veth1_vlan: entered promiscuous mode
[  551.499520][T29599] netlink: 'syz.1.6074': attribute type 8 has an invalid length.
[  551.564659][T29330] veth0_macvtap: entered promiscuous mode
[  551.605933][T29330] veth1_macvtap: entered promiscuous mode
[  551.665718][T29330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  551.700738][T29330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  551.747862][T17886] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  551.768033][T17886] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  551.800719][T17886] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  551.817845][T17886] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  551.862042][T29616] netlink: 'syz.1.6078': attribute type 2 has an invalid length.
[  551.871049][T29616] netlink: 'syz.1.6078': attribute type 11 has an invalid length.
[  552.135057][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.146167][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.176734][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  552.260214][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.286290][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.780113][T29654] openvswitch: netlink: Message has 8 unknown bytes.
[  552.809389][T29654] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  553.246392][T29681] __nla_validate_parse: 10 callbacks suppressed
[  553.246415][T29681] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6097'.
[  553.268418][T29682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6096'.
[  553.452922][ T5626] Bluetooth: hci5: command tx timeout
[  553.475416][T29693] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6100'.
[  553.535694][T29699] netlink: 'syz.4.6100': attribute type 3 has an invalid length.
[  553.579827][T29702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6100'.
[  553.745112][T29709] 8021q: adding VLAN 0 to HW filter on device bond2
[  553.765630][T29709] bond1: (slave bond2): Enslaving as an active interface with an up link
[  553.800003][T29705] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  553.933087][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  554.178333][T29738] netlink: 11 bytes leftover after parsing attributes in process `syz.3.6111'.
[  554.195445][T29736] syzkaller0: entered promiscuous mode
[  554.201168][T29736] syzkaller0: entered allmulticast mode
[  554.290386][T29743] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6113'.
[  554.447393][T29755] netlink: 'syz.2.6117': attribute type 32 has an invalid length.
[  554.485986][T29757] netlink: 186724 bytes leftover after parsing attributes in process `syz.3.6118'.
[  554.537092][T29760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6119'.
[  554.589425][T29770] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6119'.
[  554.670106][T29774] netlink: 'syz.0.6123': attribute type 83 has an invalid length.
[  554.747299][T29784] netlink: 'syz.0.6123': attribute type 1 has an invalid length.
[  554.755760][T29760] team1: entered promiscuous mode
[  554.775646][T29760] team1: entered allmulticast mode
[  554.792691][T29760] 8021q: adding VLAN 0 to HW filter on device team1
[  554.809992][T29758] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6117'.
[  554.872731][T29770] team2: entered promiscuous mode
[  554.878376][T29770] team2: entered allmulticast mode
[  554.885481][T29770] 8021q: adding VLAN 0 to HW filter on device team2
[  555.000717][T29784] bond1: entered promiscuous mode
[  555.008394][T29784] 8021q: adding VLAN 0 to HW filter on device bond1
[  555.030605][T29790] 8021q: adding VLAN 0 to HW filter on device bond1
[  555.050146][T29790] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  555.061430][T29790] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  555.076273][T29790] bond1: (slave ip6gre1): making interface the new active one
[  555.084011][T29790] ip6gre1: entered promiscuous mode
[  555.091090][T29790] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  555.227396][T29800] bridge0: port 2(bridge_slave_1) entered disabled state
[  555.285696][T29813] netlink: 'syz.1.6129': attribute type 10 has an invalid length.
[  555.299503][T29811] pim6reg1: entered promiscuous mode
[  555.328433][T29811] pim6reg1: entered allmulticast mode
[  555.368139][T29814] ip6gre2: entered promiscuous mode
[  555.376913][T29814] ip6gre2: entered allmulticast mode
[  555.410531][T29813] geneve4: entered promiscuous mode
[  555.462604][T11299] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 41505 - 0
[  555.478927][T11299] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 41505 - 0
[  555.504118][T11299] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 41505 - 0
[  555.530393][T11299] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 41505 - 0
[  555.539077][ T5626] Bluetooth: hci5: command tx timeout
[  555.626927][T29828] sctp: [Deprecated]: syz.2.6133 (pid 29828) Use of int in max_burst socket option.
[  555.626927][T29828] Use struct sctp_assoc_value instead
[  556.121377][T29857] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  556.698888][T29893] netlink: 'syz.0.6153': attribute type 1 has an invalid length.
[  556.868935][T29914] netlink: 'syz.3.6158': attribute type 32 has an invalid length.
[  556.973006][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  557.171158][T29924] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  557.225785][T29924] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  557.941395][T17888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  558.950683][T29977] bridge_slave_0: left allmulticast mode
[  558.961195][T29977] bridge_slave_0: left promiscuous mode
[  558.969711][T29977] bridge0: port 1(bridge_slave_0) entered disabled state
[  558.995663][T29982] __nla_validate_parse: 12 callbacks suppressed
[  558.995699][T29982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6168'.
[  559.014274][T29977] bridge_slave_1: left allmulticast mode
[  559.020546][T29977] bridge_slave_1: left promiscuous mode
[  559.032802][T29977] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.071258][T29977] bond0: (slave bond_slave_0): Releasing backup interface
[  559.119703][T29977] bond0: (slave bond_slave_1): Releasing backup interface
[  559.218962][T29977] team0: Port device team_slave_0 removed
[  559.240712][T29977] team0: Port device team_slave_1 removed
[  559.251203][T29977] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  559.260501][T29977] batman_adv: batadv0: Removing interface: batadv_slave_0
[  559.279118][T29977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  559.288235][T29994] SET target dimension over the limit!
[  559.300544][T29977] batman_adv: batadv0: Removing interface: batadv_slave_1
[  559.323919][T29977] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  559.366947][T29983] syzkaller0: entered promiscuous mode
[  559.386609][T29983] syzkaller0: entered allmulticast mode
[  559.401288][T29985] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  560.013211][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  560.226604][T29928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  560.360173][T30019] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6177'.
[  560.471448][T30023] dummy0: mtu less than device minimum
[  560.501042][T30026] netlink: 'syz.4.6180': attribute type 1 has an invalid length.
[  560.586865][T30026] 8021q: adding VLAN 0 to HW filter on device bond11
[  560.635261][T30030] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6182'.
[  560.658136][T30028] bond11: (slave geneve4): making interface the new active one
[  560.692484][T30028] bond11: (slave geneve4): Enslaving as an active interface with an up link
[  560.744512][ T5973] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.753852][ T5973] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.771185][T30035] batadv_slave_0: entered promiscuous mode
[  560.790789][ T5973] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.807593][ T5973] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.847178][T30033] syzkaller0: entered promiscuous mode
[  560.862424][T30033] syzkaller0: entered allmulticast mode
[  560.973112][T30034] batadv_slave_0: left promiscuous mode
[  561.081311][T30041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'.
[  561.125875][T30041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'.
[  561.214285][T30041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'.
[  561.233299][T30041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'.
[  561.262172][T30041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'.
[  561.292872][T30041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'.
[  561.325114][T30041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6185'.
[  561.486048][T30041] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  561.513014][T30041] veth1_vlan: left promiscuous mode
[  561.533924][T30041] veth0_vlan: left promiscuous mode
[  561.551743][T30041] veth0_vlan: entered promiscuous mode
[  561.573858][T30041] veth1_vlan: entered promiscuous mode
[  561.597294][T30041] veth1_macvtap: left promiscuous mode
[  561.607888][T30041] veth0_macvtap: left promiscuous mode
[  561.617249][T30041] veth0_macvtap: entered promiscuous mode
[  561.629608][T30041] veth1_macvtap: entered promiscuous mode
[  561.650701][T30041] 8021q: adding VLAN 0 to HW filter on device bond1
[  561.664241][T30041] syzkaller1: left promiscuous mode
[  561.670201][T30041] syzkaller1: left allmulticast mode
[  561.681705][T30041] 8021q: adding VLAN 0 to HW filter on device bond2
[  561.704556][T30041] 8021q: adding VLAN 0 to HW filter on device bond3
[  561.721548][T30041] 8021q: adding VLAN 0 to HW filter on device bond4
[  561.733645][T30041] 8021q: adding VLAN 0 to HW filter on device bond5
[  561.751546][T30041] 8021q: adding VLAN 0 to HW filter on device bond6
[  561.795121][T30041] 8021q: adding VLAN 0 to HW filter on device eth0
[  561.807598][T30041] 8021q: adding VLAN 0 to HW filter on device eth1
[  561.821016][T30041] 8021q: adding VLAN 0 to HW filter on device eth2
[  561.835125][T30041] 8021q: adding VLAN 0 to HW filter on device eth3
[  561.855278][T30041] geneve2: left promiscuous mode
[  561.860786][T30041] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  562.026566][T11299] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  562.049679][T11299] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  562.089261][T11299] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  562.124162][T11299] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  562.183632][   T36] bond7: (slave veth13): link status definitely up, 10000 Mbps full duplex
[  562.227927][   T36] bond7: (slave veth13): making interface the new active one
[  562.256044][   T36] bond7: active interface up!
[  562.265886][T30072] Bluetooth: MGMT ver 1.23
[  562.281114][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  562.295578][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  562.310746][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  562.415699][T17888] bond2: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  562.481762][T17888] bond2: (slave veth5): making interface the new active one
[  562.526171][T17888] bond2: active interface up!
[  562.563071][ T5973] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  562.599986][ T5973] bond1: (slave veth3): making interface the new active one
[  562.639423][ T5973] bond1: active interface up!
[  562.654053][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  562.749522][T30093] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  563.058175][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  563.155070][T30110] IPVS: fo: FWM 3 0x00000003 - no destination available
[  563.181286][T30107] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  563.697549][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.047783][T30107] team0: Port device xfrm0 added
[  566.073082][T30114] tipc: Started in network mode
[  566.092055][T30114] tipc: Node identity 7a1ffb38e4c8, cluster identity 4711
[  566.099294][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  566.127632][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  566.163361][T30114] tipc: Enabled bearer <eth:team0>, priority 0
[  566.228912][T30121] __nla_validate_parse: 102 callbacks suppressed
[  566.228955][T30121] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6205'.
[  566.297122][T30121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6205'.
[  566.551739][T30130] netlink: 228 bytes leftover after parsing attributes in process `syz.1.6208'.
[  567.293163][ T7865] tipc: Node number set to 2664954680
[  567.346879][T30165] xt_TCPMSS: Only works on TCP SYN packets
[  567.456824][T30168] gre2: entered promiscuous mode
[  567.858932][T30183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6227'.
[  567.877829][T30187] x_tables: duplicate underflow at hook 1
[  567.957983][T30183] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  568.011631][T30183] bond3 (unregistering): Released all slaves
[  568.172328][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.182315][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.693256][T30221] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6239'.
[  568.737455][T30228] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6240'.
[  568.750244][T30229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6241'.
[  568.835705][T30231] netlink: 'syz.1.6237': attribute type 11 has an invalid length.
[  568.893122][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  568.993510][T30239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6243'.
[  569.024259][T30239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6243'.
[  569.136842][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.378032][T30249] xt_CT: You must specify a L4 protocol and not use inversions on it
[  569.389470][T30255] netlink: 'syz.0.6243': attribute type 41 has an invalid length.
[  569.456646][   T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.657913][T30262] netlink: 7890 bytes leftover after parsing attributes in process `syz.2.6248'.
[  569.722598][T30266] Bluetooth: MGMT ver 1.23
[  569.931936][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  569.953458][T30270] syzkaller0: entered promiscuous mode
[  569.980587][T30270] syzkaller0: entered allmulticast mode
[  570.154725][T30281] netlink: 'syz.4.6255': attribute type 1 has an invalid length.
[  570.974957][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.502084][ T5013] block nbd1: Possible stuck request ffff8880273e0000: control (read@0,1024B). Runtime 30 seconds
[  571.513554][ T5013] block nbd1: Possible stuck request ffff8880273e01c0: control (read@1024,1024B). Runtime 30 seconds
[  571.526260][ T5013] block nbd1: Possible stuck request ffff8880273e0380: control (read@2048,1024B). Runtime 30 seconds
[  571.538074][ T5013] block nbd1: Possible stuck request ffff8880273e0540: control (read@3072,1024B). Runtime 30 seconds
[  571.641150][T30307] sctp: [Deprecated]: syz.4.6259 (pid 30307) Use of int in max_burst socket option deprecated.
[  571.641150][T30307] Use struct sctp_assoc_value instead
[  572.012828][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.175187][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.280776][T30323] netlink: 'syz.2.6267': attribute type 1 has an invalid length.
[  572.554355][T27166] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  572.564624][T27166] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  572.573067][T27166] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  572.583039][T27166] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  572.591624][T27166] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  572.965212][T30328] netlink: 'syz.0.6268': attribute type 2 has an invalid length.
[  573.051992][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.281075][T30357] __nla_validate_parse: 2 callbacks suppressed
[  573.281134][T30357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6276'.
[  573.378901][T30357] vlan2: entered promiscuous mode
[  573.404363][T30357] geneve1: entered promiscuous mode
[  573.432506][T30357] vlan2: entered allmulticast mode
[  573.462578][T30357] geneve1: entered allmulticast mode
[  573.828153][T30377] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6278'.
[  573.935613][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  574.091975][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.228169][T30388] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6282'.
[  574.290564][T30388] ip6gre3: entered promiscuous mode
[  574.303926][T30388] ip6gre3: entered allmulticast mode
[  574.408338][T30384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6280'.
[  574.449914][ T7865] IPVS: starting estimator thread 0...
[  574.576042][T30398] IPVS: using max 40 ests per chain, 96000 per kthread
[  574.652158][ T5626] Bluetooth: hci1: command tx timeout
[  574.839058][T30403] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  574.861796][T30405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6287'.
[  575.215326][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.225208][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.366006][T30427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6290'.
[  575.576811][T30435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6293'.
[  575.605680][T30435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6293'.
[  575.786934][T30332] bridge0: port 1(bridge_slave_0) entered blocking state
[  575.797668][T30332] bridge0: port 1(bridge_slave_0) entered disabled state
[  575.806031][T30332] bridge_slave_0: entered allmulticast mode
[  575.818111][T30332] bridge_slave_0: entered promiscuous mode
[  575.829454][T30332] bridge0: port 2(bridge_slave_1) entered blocking state
[  575.837450][T30332] bridge0: port 2(bridge_slave_1) entered disabled state
[  575.845672][T30332] bridge_slave_1: entered allmulticast mode
[  575.857370][T30332] bridge_slave_1: entered promiscuous mode
[  575.872974][T30442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6294'.
[  575.901259][T30442] hsr_slave_0: left promiscuous mode
[  575.923238][T30442] hsr_slave_1: left promiscuous mode
[  575.977145][T30444] veth1_macvtap: left promiscuous mode
[  575.990115][T30444] macsec0: entered allmulticast mode
[  576.029124][T30332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  576.056287][T30446] veth1_macvtap: entered promiscuous mode
[  576.086405][T30446] veth1_macvtap: entered allmulticast mode
[  576.097935][T30446] macsec0: left allmulticast mode
[  576.107506][T30446] veth1_macvtap: left allmulticast mode
[  576.129023][T30332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  576.172027][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.262998][T30450] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6297'.
[  576.307460][T30332] team0: Port device team_slave_0 added
[  576.339604][T30332] team0: Port device team_slave_1 added
[  576.399975][T30332] batman_adv: batadv0: Adding interface: batadv_slave_0
[  576.412548][T30332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.441663][T30332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  576.567471][T30455] 8021q: adding VLAN 0 to HW filter on device bond1
[  576.617652][T30448] syzkaller0: entered promiscuous mode
[  576.638129][T30448] syzkaller0: entered allmulticast mode
[  576.667100][T30332] batman_adv: batadv0: Adding interface: batadv_slave_1
[  576.675160][T30332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  576.703937][T30332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  576.732533][ T5626] Bluetooth: hci1: command tx timeout
[  576.776749][T30457] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  576.857417][T30455] bond1: entered promiscuous mode
[  576.871022][T30455] veth0_to_bond: entered promiscuous mode
[  576.880778][T30455] bond1: entered allmulticast mode
[  576.890164][T30455] veth0_to_bond: entered allmulticast mode
[  577.115240][T30332] hsr_slave_0: entered promiscuous mode
[  577.140609][T30332] hsr_slave_1: entered promiscuous mode
[  577.164330][T30332] debugfs: 'hsr0' already exists in 'hsr'
[  577.175677][T30332] Cannot create hsr debugfs directory
[  577.226241][T30483] bond3: entered promiscuous mode
[  577.232753][T30483] bond3: entered allmulticast mode
[  577.239009][T30483] 8021q: adding VLAN 0 to HW filter on device bond3
[  577.463389][T30497] xt_NFQUEUE: number of total queues is 0
[  577.470175][T30498] xt_NFQUEUE: number of total queues is 0
[  577.483108][T30488] xt_hashlimit: Unknown mode mask 3FFFF, kernel too old?
[  577.745331][T30510] netlink: 'syz.0.6309': attribute type 1 has an invalid length.
[  577.795721][T30512] netlink: 'syz.0.6309': attribute type 1 has an invalid length.
[  577.946176][T30332] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  577.964389][T30515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  578.004865][T30332] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.056795][T30332] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 41505 - 0
[  578.083758][T30519] netlink: 'syz.2.6311': attribute type 10 has an invalid length.
[  578.143340][T30519] team0: Device dummy0 is of different type
[  578.216516][T30332] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.267108][T30332] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.285133][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.299971][T30524] __nla_validate_parse: 8 callbacks suppressed
[  578.300008][T30524] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6312'.
[  578.324844][T30332] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 41505 - 0
[  578.337824][T30525] netlink: 8772 bytes leftover after parsing attributes in process `syz.4.6313'.
[  578.378817][T30521] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6312'.
[  578.437607][T30332] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.482239][T30332] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.516277][T30332] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 41505 - 0
[  578.635074][T30539] netlink: 'syz.4.6316': attribute type 4 has an invalid length.
[  578.667320][T30539] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6316'.
[  578.699831][T30332] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  578.769459][T30332] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.796038][T30332] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 41505 - 0
[  578.812644][ T5626] Bluetooth: hci1: command tx timeout
[  578.829072][T30539] .`: renamed from bond0
[  579.096945][T30332] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  579.110547][T30332] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  579.120965][T30332] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  579.138279][T30332] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  579.157402][T30332] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  579.185794][T30332] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  579.210128][T30332] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  579.240935][T30332] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  579.418290][T30567] netlink: 180 bytes leftover after parsing attributes in process `syz.4.6321'.
[  579.454393][T30567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6321'.
[  579.500570][T30570] netlink: 'syz.2.6323': attribute type 1 has an invalid length.
[  579.511778][T30332] 8021q: adding VLAN 0 to HW filter on device bond0
[  579.569550][T30332] 8021q: adding VLAN 0 to HW filter on device team0
[  579.595472][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  579.603223][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  579.670940][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  579.678673][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  580.252056][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.325487][T30590] tipc: Started in network mode
[  580.339850][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.359345][T30590] tipc: Node identity 36d9170cd56f, cluster identity 4711
[  580.368163][T30590] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  580.464208][T30594] 8021q: adding VLAN 0 to HW filter on device bond1
[  580.552064][T30592] syzkaller0: entered promiscuous mode
[  580.567197][T30592] syzkaller0: entered allmulticast mode
[  580.680372][T30592] tipc: Resetting bearer <eth:syzkaller0>
[  580.733570][T30592] tipc: Disabling bearer <eth:syzkaller0>
[  580.893941][ T5626] Bluetooth: hci1: command tx timeout
[  581.095007][T30610] SET target dimension over the limit!
[  581.114435][T30610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6332'.
[  581.138979][T30608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6331'.
[  581.301802][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.727014][T30625] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6336'.
[  581.798073][T30627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6336'.
[  581.925049][T30332] 8021q: adding VLAN 0 to HW filter on device batadv0
[  582.129105][T30332] veth0_vlan: entered promiscuous mode
[  582.171343][T30332] veth1_vlan: entered promiscuous mode
[  582.315325][T30332] veth0_macvtap: entered promiscuous mode
[  582.337241][T30332] veth1_macvtap: entered promiscuous mode
[  582.404429][T30332] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.434401][T30332] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.460356][T21759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.498210][T21759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.553921][T21759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.597622][T21759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.926759][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.969920][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.176101][   T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.210608][   T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.644032][T30680] tipc: Failed to remove unknown binding: 66,1,1/2664954680:1964873659/1964873661
[  583.693282][T30680] tipc: Failed to remove unknown binding: 66,1,1/2664954680:1964873659/1964873661
[  583.849001][T30680] tipc: Failed to remove unknown binding: 66,1,1/2664954680:1964873659/1964873661
[  583.959744][T30680] tipc: Failed to remove unknown binding: 66,1,1/2664954680:1964873659/1964873661
[  584.333307][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.686701][T30734] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6365'.
[  586.092855][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  586.371182][T30740] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6368'.
[  586.430620][T30741] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6368'.
[  586.460541][T27166] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  586.472200][T27166] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  586.480235][T27166] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  586.495201][T27166] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  586.505460][T27166] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  587.194848][T17773] bond2: (slave syz_tun): Removing an active aggregator
[  587.245545][T17773] bond2: (slave syz_tun): Releasing backup interface
[  587.333541][T30763] block nbd6: server does not support multiple connections per device.
[  587.378464][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.419223][T30763] block nbd6: shutting down sockets
[  588.012803][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  588.350478][T30770] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  588.364777][T30770] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  588.572521][T27166] Bluetooth: hci4: command tx timeout
[  588.579342][T30770] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  588.596194][T30770] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  588.651952][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.691451][T30757] dvmrp0: entered allmulticast mode
[  588.702593][T30781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6376'.
[  588.917418][T30770] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  588.941599][T30770] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  589.127732][T30790] netlink: 'syz.1.6377': attribute type 1 has an invalid length.
[  589.191137][T30792] netlink: zone id is out of range
[  589.220266][   T48] dvmrp0: left allmulticast mode
[  589.559261][T30803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6380'.
[  589.647123][T30805] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.6381'.
[  590.204168][T30742] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.226587][T30742] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.247484][T30742] bridge_slave_0: entered allmulticast mode
[  590.263368][T30742] bridge_slave_0: entered promiscuous mode
[  590.278161][T30742] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.286194][T30742] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.300567][T30742] bridge_slave_1: entered allmulticast mode
[  590.324016][T30742] bridge_slave_1: entered promiscuous mode
[  590.412346][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  590.425948][T30742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  590.459329][T30742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  590.524450][T30742] team0: Port device team_slave_0 added
[  590.553936][T30742] team0: Port device team_slave_1 added
[  590.627872][T30742] batman_adv: batadv0: Adding interface: batadv_slave_0
[  590.635671][T30742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  590.663704][T27166] Bluetooth: hci4: command 0x041b tx timeout
[  590.671252][T30742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  590.686102][T30770] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  590.702971][T30742] batman_adv: batadv0: Adding interface: batadv_slave_1
[  590.710642][T30770] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  590.719069][T30742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  590.765293][T30742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  590.959060][T30742] hsr_slave_0: entered promiscuous mode
[  591.006307][T30742] hsr_slave_1: entered promiscuous mode
[  591.026249][T30851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6391'.
[  591.041422][T30742] debugfs: 'hsr0' already exists in 'hsr'
[  591.067627][T30742] Cannot create hsr debugfs directory
[  591.111707][T30851] netlink: 261 bytes leftover after parsing attributes in process `syz.1.6391'.
[  591.133826][T30854] syzkaller1: entered promiscuous mode
[  591.154007][T30854] syzkaller1: entered allmulticast mode
[  591.180379][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6391'.
[  591.199022][T30861] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  591.215225][T17888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  591.233434][T30854] netlink: 261 bytes leftover after parsing attributes in process `syz.1.6391'.
[  591.421033][T30872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6398'.
[  591.467175][T30872] netlink: 'syz.0.6398': attribute type 83 has an invalid length.
[  591.518826][T30872] netlink: 'syz.0.6398': attribute type 83 has an invalid length.
[  591.567347][T30872] netlink: 'syz.0.6398': attribute type 83 has an invalid length.
[  591.769739][T30742] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  591.835794][T30742] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  591.940700][T30894] netlink: 'syz.3.6402': attribute type 7 has an invalid length.
[  591.950166][T30894] netlink: 'syz.3.6402': attribute type 8 has an invalid length.
[  591.984341][T30895] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  592.038811][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0
[  592.067967][T30904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6405'.
[  592.096153][T30894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6402'.
[  592.122652][T30904] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6405'.
[  592.136881][T30742] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.175933][T30742] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.276535][T30911] SET target dimension over the limit!
[  592.323228][T30742] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.364130][T30742] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.507954][T30742] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  592.533127][T30742] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  592.870544][T30921] sctp: [Deprecated]: syz.1.6408 (pid 30921) Use of struct sctp_assoc_value in delayed_ack socket option.
[  592.870544][T30921] Use struct sctp_sack_info instead
[  592.894724][T30742] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  592.924150][T30742] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  592.958846][T30742] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  592.985982][T30921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6408'.
[  593.016168][T30742] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  593.040881][T30742] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  593.071124][T30742] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  593.114203][T30742] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  593.148726][T30742] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  593.452421][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.504784][T30742] 8021q: adding VLAN 0 to HW filter on device bond0
[  593.627704][T30742] 8021q: adding VLAN 0 to HW filter on device team0
[  593.778797][T17888] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.786522][T17888] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.877036][T21988] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.884744][T21988] bridge0: port 2(bridge_slave_1) entered forwarding state
[  593.946118][T30959] IPVS: Error connecting to the multicast addr
[  593.958807][T30958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6415'.
[  594.434957][T30964] 8021q: adding VLAN 0 to HW filter on device bond4
[  594.444463][T30961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  594.452237][T30961] IPv6: NLM_F_CREATE should be set when creating new route
[  594.460030][T30961] IPv6: NLM_F_CREATE should be set when creating new route
[  594.495954][ T5281] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  594.837732][T30978] netlink: 'syz.1.6421': attribute type 1 has an invalid length.
[  595.477716][T31003] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  595.889016][T30742] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.957781][T31020] syzkaller1: tun_chr_ioctl cmd 1074025677
[  595.976983][T31020] syzkaller1: linktype set to 270
[  596.257212][T31033] netlink: 'syz.1.6436': attribute type 1 has an invalid length.
[  596.335531][T17888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.447479][T31034] pimreg: entered allmulticast mode
[  596.467553][T31033] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  596.494260][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.970249][T31072] __nla_validate_parse: 4 callbacks suppressed
[  596.970294][T31072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6442'.
[  597.013456][T30742] veth0_vlan: entered promiscuous mode
[  597.032467][T31072] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6442'.
[  597.111406][T31072] geneve2: entered promiscuous mode
[  597.140367][T30742] veth1_vlan: entered promiscuous mode
[  597.235407][T31078] syzkaller0: entered promiscuous mode
[  597.258373][T31078] syzkaller0: entered allmulticast mode
[  597.285475][T31078] TC_ACT_REPEAT abuse ?
[  597.300019][T31081] bridge1: entered promiscuous mode
[  597.312443][T31081] bridge1: entered allmulticast mode
[  597.451284][T30742] veth0_macvtap: entered promiscuous mode
[  597.484579][T30742] veth1_macvtap: entered promiscuous mode
[  597.583383][T30742] batman_adv: batadv0: Interface activated: batadv_slave_0
[  597.715079][T31089] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6447'.
[  597.745449][T31089] openvswitch: netlink: Flow key attr not present in new flow.
[  597.758272][T30742] batman_adv: batadv0: Interface activated: batadv_slave_1
[  597.825047][ T5973] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  597.855496][T31089] syzkaller0: entered promiscuous mode
[  597.869846][T31089] syzkaller0: entered allmulticast mode
[  597.921324][ T5973] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  597.965195][ T5973] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  597.983285][ T5973] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  598.147687][T31106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6451'.
[  598.199997][ T7865] IPVS: starting estimator thread 0...
[  598.256985][T31107] xt_hashlimit: size too large, truncated to 1048576
[  598.312610][T31110] IPVS: using max 35 ests per chain, 84000 per kthread
[  598.436156][T31106] 8021q: adding VLAN 0 to HW filter on device bond1
[  598.718190][T17888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.747755][T17888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.969537][T31119] syzkaller0: delete flow: hash 2886502927 index 1
[  599.220842][ T5973] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  599.287699][ T5973] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.540210][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.549551][T31149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6460'.
[  600.311322][T31191] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6471'.
[  600.747314][T31211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6476'.
[  600.772359][T31213] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6477'.
[  600.802600][T31215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6478'.
[  600.908811][T31211] ip6gre1: entered promiscuous mode
[  600.951310][T31211] ip6gre1: entered allmulticast mode
[  600.991776][T31225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6478'.
[  601.374020][T17886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  601.704593][T31232] netlink: 'syz.4.6479': attribute type 1 has an invalid length.
[  601.840172][T10130] IPVS: starting estimator thread 0...
[  601.942866][T31253] IPVS: using max 38 ests per chain, 91200 per kthread
[  602.094446][ T5013] block nbd1: Possible stuck request ffff8880273e0000: control (read@0,1024B). Runtime 60 seconds
[  602.106154][ T5013] block nbd1: Possible stuck request ffff8880273e01c0: control (read@1024,1024B). Runtime 60 seconds
[  602.118213][ T5013] block nbd1: Possible stuck request ffff8880273e0380: control (read@2048,1024B). Runtime 60 seconds
[  602.131090][ T5013] block nbd1: Possible stuck request ffff8880273e0540: control (read@3072,1024B). Runtime 60 seconds
[  602.365437][T31265] __nla_validate_parse: 6 callbacks suppressed
[  602.365478][T31265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6486'.
[  602.573411][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.556088][T31301] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6497'.
[  603.604808][T31301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6497'.
[  603.653802][T31301] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6497'.
[  603.897636][T31318] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6503'.
[  604.003346][T31320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6504'.
[  604.144934][T31328] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6507'.
[  604.158637][T31322] syzkaller0: entered promiscuous mode
[  604.167225][T31327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6508'.
[  604.177324][T31322] syzkaller0: entered allmulticast mode
[  604.206706][T31332] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6507'.
[  604.247209][T31328] 8021q: adding VLAN 0 to HW filter on device bond3
[  604.340479][T31327] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  604.470826][T31329] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  605.292540][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.325478][T31348] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6512'.
[  605.613655][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  605.971194][T31373] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  606.578951][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  607.375861][T31411] __nla_validate_parse: 54 callbacks suppressed
[  607.375899][T31411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  607.454534][T31411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  607.494656][T31411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  607.527453][T31411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  607.566165][T31411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  607.607370][T31411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  607.642499][T31411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  607.669640][T31411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  607.698084][T31392] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6521'.
[  607.720529][T31411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6526'.
[  608.652902][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  608.678491][T31439] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  608.788863][T31447] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  608.826477][T31447] batman_adv: batadv0: Removing interface: batadv_slave_0
[  608.870596][T31447] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  608.916425][T31447] batman_adv: batadv0: Removing interface: batadv_slave_1
[  609.485725][T21759] bridge_slave_1: left promiscuous mode
[  609.508935][T21759] bridge0: port 2(bridge_slave_1) entered disabled state
[  609.762926][T21759] pim6reg: left allmulticast mode
[  609.780915][T21759] bridge0: left allmulticast mode
[  610.045981][T31488] xt_hashlimit: size too large, truncated to 1048576
[  610.189046][T31491] netlink: 'syz.2.6546': attribute type 1 has an invalid length.
[  610.428168][T21759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  610.441728][T21759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  610.454809][T21759] bond0 (unregistering): Released all slaves
[  610.468206][T21759] bond1 (unregistering): Released all slaves
[  610.491449][T21759] bond2 (unregistering): Released all slaves
[  610.511785][T21759] bond3 (unregistering): Released all slaves
[  610.535119][T21759] bond4 (unregistering): Released all slaves
[  610.553765][T21759] bond5 (unregistering): Released all slaves
[  610.583491][T21759] bond6 (unregistering): Released all slaves
[  610.601220][T21759] bond7 (unregistering): Released all slaves
[  610.620425][T21759] bond8 (unregistering): Released all slaves
[  610.649520][T21759] bond9 (unregistering): Released all slaves
[  610.680713][T31475] vlan2: entered allmulticast mode
[  610.686615][T31475] macvtap0: entered allmulticast mode
[  610.693753][T31475] veth0_macvtap: entered allmulticast mode
[  611.020951][T21759] : left promiscuous mode
[  611.135775][T21759] Èr: left promiscuous mode
[  611.269084][T21759] tipc: Disabling bearer <eth:vlan0>
[  611.322759][T21759] tipc: Left network mode
[  611.327801][T31511] batadv_slave_0: entered promiscuous mode
[  611.347533][T31507] batadv_slave_0: left promiscuous mode
[  611.711749][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.014453][ T6035] udevd[6035]: inotify_add_watch(7, /dev/nbd6, 10) failed: No such file or directory
[  612.060285][T31547] netlink: 'syz.4.6562': attribute type 11 has an invalid length.
[  612.334998][T11299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  612.639583][T31565] geneve2: entered promiscuous mode
[  612.697157][T31568] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  612.746965][T31568] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  613.114712][T31574] __nla_validate_parse: 18 callbacks suppressed
[  613.114754][T31574] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6568'.
[  613.170039][T31582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6570'.
[  613.231776][T21759] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  613.273522][T21759] batman_adv: batadv0: Removing interface: batadv_slave_0
[  613.330277][T21759] veth1_vlan: left promiscuous mode
[  613.353847][T21759] veth0_vlan: left promiscuous mode
[  614.733906][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  614.752979][T31623] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6581'.
[  614.822750][T31621] syzkaller0: entered promiscuous mode
[  614.858565][T31621] syzkaller0: entered allmulticast mode
[  614.893858][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:1)
[  615.125108][T31626] syzkaller0: entered promiscuous mode
[  615.169798][T31626] syzkaller0: entered allmulticast mode
[  615.181275][T31654] netlink: 'syz.1.6586': attribute type 4 has an invalid length.
[  615.413835][T31661] kthread_run failed with err -4
[  615.554712][T21759] IPVS: stop unused estimator thread 0...
[  615.666298][T31667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6589'.
[  615.744666][T31672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6590'.
[  615.787496][T31672] openvswitch: netlink: Flow actions attr not present in new flow.
[  616.272774][T31686] bond1: option xmit_hash_policy: invalid value (10)
[  616.288759][T31686] bond1 (unregistering): Released all slaves
[  616.356564][T31695] netlink: 'syz.0.6597': attribute type 1 has an invalid length.
[  616.475152][T31695] 8021q: adding VLAN 0 to HW filter on device bond5
[  616.518548][T31706] netlink: 'syz.4.6598': attribute type 1 has an invalid length.
[  616.614166][T31696] veth3: entered promiscuous mode
[  616.784426][T31706] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  616.903348][T31725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6602'.
[  617.000376][T31726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6602'.
[  617.062244][T31726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6602'.
[  617.090266][T31729] --map-set only usable from mangle table
[  617.175104][T31731] syzkaller0: entered promiscuous mode
[  617.200727][T31731] syzkaller0: entered allmulticast mode
[  617.321193][T31740] Unsupported ieee802154 address type: 0
[  617.344650][T31740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6606'.
[  617.370537][T31734] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  617.468691][T31730] tipc: Resetting bearer <eth:syzkaller0>
[  617.484444][T31730] tipc: Disabling bearer <eth:syzkaller0>
[  617.773567][ T5725] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  617.836245][T31755] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6611'.
[  618.024504][T31764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  618.098170][T17886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  618.130680][T31760] __nla_validate_parse: 1 callbacks suppressed
[  618.130718][T31760] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6613'.
[  618.277380][T31760] geneve1: entered promiscuous mode
[  618.292335][T31760] geneve1: entered allmulticast mode
[  618.336958][T11299] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20003 - 0
[  618.826366][T31796] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6619'.
[  620.814024][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  621.471440][T31784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  621.840521][T31831] netlink: 'syz.2.6629': attribute type 1 has an invalid length.
[  621.860117][T31832] netlink: 'syz.3.6628': attribute type 12 has an invalid length.
[  621.936494][T31831] 8021q: adding VLAN 0 to HW filter on device bond4
[  622.165129][T31843] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.200779][T31843] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  622.232430][T31847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6631'.
[  622.813301][T31864] bond1: option lacp_rate: invalid value (128)
[  622.859124][T31864] bond1 (unregistering): Released all slaves
[  622.874055][T31880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6639'.
[  622.931140][T31874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6638'.
[  623.028697][T31883] pimreg: entered allmulticast mode
[  623.058515][T31883] pimreg: left allmulticast mode
[  623.445095][T31903] netlink: 3500 bytes leftover after parsing attributes in process `syz.4.6646'.
[  623.724318][T31910] syzkaller0: entered promiscuous mode
[  623.740868][T31910] syzkaller0: entered allmulticast mode
[  623.788185][T31912] netlink: 'syz.3.6649': attribute type 1 has an invalid length.
[  623.854013][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.864266][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  623.877182][T31913] erspan1: entered allmulticast mode
[  623.956344][T31912] bond2: entered promiscuous mode
[  623.962171][T31912] bond2: entered allmulticast mode
[  623.968513][T31912] 8021q: adding VLAN 0 to HW filter on device bond2
[  624.382511][T31931] syzkaller1: entered promiscuous mode
[  624.415188][T31931] syzkaller1: entered allmulticast mode
[  624.456605][T31933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6653'.
[  624.816303][T31942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6656'.
[  624.851539][T31942] netlink: 'syz.3.6656': attribute type 30 has an invalid length.
[  624.889290][T31942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6656'.
[  624.921729][T31947] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6656'.
[  625.040745][T31949] netlink: 'syz.1.6659': attribute type 1 has an invalid length.
[  625.079301][T31949] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  625.203375][T31955] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6660'.
[  625.274972][T31955] 0·: renamed from hsr0 (while UP)
[  625.323935][T31955] 0·: entered allmulticast mode
[  625.355515][T31955] hsr_slave_0: entered allmulticast mode
[  625.383346][T31955] hsr_slave_1: entered allmulticast mode
[  625.411004][T31955] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  625.500878][T31965] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6662'.
[  625.656985][T31969] netlink: 'syz.3.6663': attribute type 4 has an invalid length.
[  625.703300][T31969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6663'.
[  625.876375][T31974] netlink: 120 bytes leftover after parsing attributes in process `syz.4.6665'.
[  626.060863][T31978] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6666'.
[  626.095633][T31986] syzkaller1: tun_chr_ioctl cmd 1074025677
[  626.129806][T31986] syzkaller1: linktype set to 778
[  626.683573][T32005] syzkaller1: entered promiscuous mode
[  626.698295][T32005] syzkaller1: entered allmulticast mode
[  626.892373][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  627.397038][T32037] netlink: 'syz.1.6685': attribute type 6 has an invalid length.
[  627.498055][T32040] netlink: 'syz.4.6686': attribute type 3 has an invalid length.
[  627.535019][T32040] netlink: 'syz.4.6686': attribute type 3 has an invalid length.
[  627.665924][T32042] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  627.923387][T32050] nbd: nbd4 already in use
[  627.939191][T32050] block nbd4: NBD_DISCONNECT
[  627.957871][T32050] block nbd4: Send disconnect failed -32
[  627.985619][T32050] block nbd4: shutting down sockets
[  628.328482][T32052] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  628.441007][T32052] geneve2: left promiscuous mode
[  628.579787][ T5626] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  628.592010][T17888] dvmrp0: left allmulticast mode
[  628.725902][T32079] nbd: couldn't find a device at index 0
[  628.779741][T17888] erspan0 (unregistering): left promiscuous mode
[  628.841392][T17888] gretap0 (unregistering): left promiscuous mode
[  628.881369][T17888] bond0 (unregistering): (slave gretap1): Releasing backup interface
[  628.969736][T17888] bond8 (unregistering): (slave geneve4): Releasing backup interface
[  629.013853][T17888] bond3 (unregistering): (slave geneve2): Releasing active interface
[  629.200036][T17888] bond4 (unregistering): (slave bridge5): Releasing backup interface
[  629.228879][T17888] bond10 (unregistering): (slave bridge0): Releasing backup interface
[  629.243456][T17888] bridge0 (unregistering): left promiscuous mode
[  629.264197][T17888] bond1 (unregistering): Released all slaves
[  629.288283][T17888] bond2 (unregistering): Released all slaves
[  629.336719][T17888] bond3 (unregistering): Released all slaves
[  629.385443][T17888] bond0 (unregistering): Released all slaves
[  629.404591][T17888] bond4 (unregistering): Released all slaves
[  629.427516][T17888] bond5 (unregistering): (slave veth10): Releasing active interface
[  629.438011][T17888] bond5 (unregistering): Released all slaves
[  629.463839][T17888] bond6 (unregistering): (slave bond7): Releasing backup interface
[  629.474256][T17888] bond6 (unregistering): Released all slaves
[  629.495647][T17888] bond7 (unregistering): Released all slaves
[  629.518419][T17888] bond8 (unregistering): Released all slaves
[  629.539567][T17888] bond9 (unregistering): Released all slaves
[  629.559840][T17888] bond10 (unregistering): Released all slaves
[  629.579677][T32067] batadv_slave_0: entered promiscuous mode
[  629.591565][T32093] netlink: 'syz.1.6699': attribute type 1 has an invalid length.
[  629.619624][T32073] batadv_slave_0: left promiscuous mode
[  629.720088][T17888] m1Ie5nè‹Ò: left promiscuous mode
[  629.849845][T17888] tipc: Left network mode
[  629.876172][T32096] IPv6: NLM_F_REPLACE set, but no existing node found!
[  629.961363][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  629.998602][T32102] __nla_validate_parse: 8 callbacks suppressed
[  629.998648][T32102] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6702'.
[  630.038866][T32102] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) !
[  630.144253][T32107] syzkaller1: entered promiscuous mode
[  630.159380][T32107] syzkaller1: entered allmulticast mode
[  630.447987][T32120] netlink: 'syz.1.6709': attribute type 1 has an invalid length.
[  630.543961][T32120] 8021q: adding VLAN 0 to HW filter on device bond2
[  630.581215][T32120] bond2: (slave dummy0): making interface the new active one
[  630.592880][T32120] bond2: (slave dummy0): Enslaving as an active interface with an up link
[  630.842920][T32129] bond2: (slave veth7): Enslaving as an active interface with a down link
[  630.932150][T32146] netlink: 'syz.4.6713': attribute type 13 has an invalid length.
[  631.046707][T32151] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  631.067446][ T7865] IPVS: starting estimator thread 0...
[  631.090584][T32151] IPVS: rr: FWM 3 0x00000003 - no destination available
[  631.175089][T32154] IPVS: using max 42 ests per chain, 100800 per kthread
[  631.187875][T32139] netlink: 88 bytes leftover after parsing attributes in process `syz.3.6712'.
[  631.276284][T32159] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6713'.
[  631.399326][T32163] netlink: 'syz.0.6714': attribute type 1 has an invalid length.
[  631.848488][T32168] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6715'.
[  631.872423][T32168] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6715'.
[  632.041638][T32172] netlink: 'syz.1.6717': attribute type 3 has an invalid length.
[  632.057569][T32172] netlink: 'syz.1.6717': attribute type 1 has an invalid length.
[  632.074044][T32172] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6717'.
[  632.174515][ T5013] block nbd1: Possible stuck request ffff8880273e0000: control (read@0,1024B). Runtime 90 seconds
[  632.186281][ T5013] block nbd1: Possible stuck request ffff8880273e01c0: control (read@1024,1024B). Runtime 90 seconds
[  632.198988][ T5013] block nbd1: Possible stuck request ffff8880273e0380: control (read@2048,1024B). Runtime 90 seconds
[  632.210761][ T5013] block nbd1: Possible stuck request ffff8880273e0540: control (read@3072,1024B). Runtime 90 seconds
[  632.832588][T17888] hsr_slave_0: left promiscuous mode
[  632.861445][T17888] hsr_slave_1: left promiscuous mode
[  632.974074][T10130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  633.559934][T17888] team0 (unregistering): Port device team_slave_1 removed
[  633.596389][T17888] team0 (unregistering): Port device team_slave_0 removed
[  634.338780][T32230] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma?
[  634.799711][T17888] IPVS: stop unused estimator thread 0...
[  634.954647][T32257] syzkaller0: entered promiscuous mode
[  634.981147][T32257] syzkaller0: entered allmulticast mode
[  635.106426][T32269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6733'.
[  635.179888][T32264] netlink: 'syz.3.6733': attribute type 1 has an invalid length.
[  635.201223][T32269] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  635.261115][T32269] batman_adv: batadv0: Removing interface: batadv_slave_1
[  635.906601][T32264] syzkaller0: entered promiscuous mode
[  635.912647][T32264] syzkaller0: entered allmulticast mode
[  636.014589][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  636.063107][T32281] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6735'.
[  636.088634][T32281] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6735'.
[  636.119808][T32281] netlink: 'syz.2.6735': attribute type 5 has an invalid length.
[  636.157655][T32281] netlink: 43 bytes leftover after parsing attributes in process `syz.2.6735'.
[  636.235049][T32289] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6738'.
[  636.246685][T32289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6738'.
[  636.260734][T32289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6738'.
[  636.279970][T32288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6736'.
[  636.516109][T32301] tun0: tun_chr_ioctl cmd 1074025681
[  636.543511][T32301] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6741'.
[  636.561012][T32302] pimreg: left allmulticast mode
[  636.567061][T32301] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  637.715715][T32325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6746'.
[  637.777025][T32326] x_tables: duplicate underflow at hook 2
[  637.931930][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  637.942488][T11299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  638.470126][T32358] netlink: 'syz.0.6750': attribute type 1 has an invalid length.
[  639.054784][ T7865] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  639.534138][    C1] ------------[ cut here ]------------
[  639.540457][    C1] sk->sk_forward_alloc
[  639.540500][    C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62b/0x740, CPU#1: syz.3.6753/32377
[  639.555987][    C1] Modules linked in:
[  639.560217][    C1] CPU: 1 UID: 0 PID: 32377 Comm: syz.3.6753 Not tainted syzkaller #0 PREEMPT(full) 
[  639.570348][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  639.581279][    C1] RIP: 0010:inet_sock_destruct+0x62b/0x740
[  639.587606][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 62 e4 a0 f7 90 0f 0b 90 e9 8b fe ff ff e8 54 e4 a0 f7 90 0f 0b 90 e9 b1 fe ff ff e8 46 e4 a0 f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  639.608587][    C1] RSP: 0000:ffffc90000a08d28 EFLAGS: 00010246
[  639.615169][    C1] RAX: ffffffff8a2511da RBX: dffffc0000000000 RCX: ffff8880349f1f00
[  639.623780][    C1] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000
[  639.632379][    C1] RBP: 0000000000000f70 R08: ffff888078b679a7 R09: 1ffff1100f16cf34
[  639.640960][    C1] R10: dffffc0000000000 R11: ffffed100f16cf35 R12: ffff888078b67700
[  639.649648][    C1] R13: dffffc0000000000 R14: ffff888078b6798c R15: ffffffff8feb2640
[  639.658254][    C1] FS:  000055556b3c3500(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000
[  639.667856][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  639.674976][    C1] CR2: 0000001b2cf24000 CR3: 000000005d380000 CR4: 00000000003526f0
[  639.683564][    C1] Call Trace:
[  639.687131][    C1]  <IRQ>
[  639.690243][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  639.696151][    C1]  __sk_destruct+0x89/0x9d0
[  639.701122][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  639.706663][    C1]  ? rcu_core+0x70d/0x10a0
[  639.711471][    C1]  rcu_core+0x78b/0x10a0
[  639.716124][    C1]  ? __pfx_rcu_core+0x10/0x10
[  639.721235][    C1]  ? net_tx_action+0xbff/0xc30
[  639.726424][    C1]  handle_softirqs+0x225/0x840
[  639.731574][    C1]  ? __irq_exit_rcu+0xca/0x220
[  639.736749][    C1]  __irq_exit_rcu+0xca/0x220
[  639.741725][    C1]  irq_exit_rcu+0x9/0x30
[  639.746372][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  639.752506][    C1]  </IRQ>
[  639.755679][    C1]  <TASK>
[  639.758857][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  639.765345][    C1] RIP: 0010:lock_acquire+0xb/0x350
[  639.770884][    C1] Code: 95 c0 e9 88 04 09 0a cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3
[  639.791862][    C1] RSP: 0000:ffffc9000435f5d0 EFLAGS: 00000246
[  639.798425][    C1] RAX: 0000000000000001 RBX: ffffffff8231129e RCX: 0000000000000002
[  639.807039][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e959a20
[  639.815647][    C1] RBP: 1ffff9200086bedc R08: 0000000000000000 R09: 0000000000000000
[  639.824268][    C1] R10: ffffc9000435f6f8 R11: ffffffff81b10630 R12: dffffc0000000000
[  639.832859][    C1] R13: ffffffff8176a21f R14: ffffc9000435f6a8 R15: 1ffff9200086bed5
[  639.841437][    C1]  ? unwind_next_frame+0x8f/0x2550
[  639.846989][    C1]  ? kasan_save_track+0x3e/0x80
[  639.852245][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  639.859006][    C1]  ? unwind_next_frame+0x8f/0x2550
[  639.864548][    C1]  unwind_next_frame+0xac/0x2550
[  639.869888][    C1]  ? unwind_next_frame+0x8f/0x2550
[  639.875446][    C1]  ? stack_trace_save+0xa9/0x100
[  639.880794][    C1]  ? unwind_next_frame+0x8f/0x2550
[  639.886337][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  639.892989][    C1]  arch_stack_walk+0x11b/0x150
[  639.898160][    C1]  ? kasan_save_track+0x3e/0x80
[  639.903465][    C1]  ? ptlock_alloc+0x20/0x70
[  639.908356][    C1]  stack_trace_save+0xa9/0x100
[  639.913556][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  639.919369][    C1]  ? __pfx___css_rstat_updated+0x10/0x10
[  639.925485][    C1]  ? __pfx_try_charge_memcg+0x10/0x10
[  639.931303][    C1]  kasan_save_track+0x3e/0x80
[  639.936409][    C1]  ? kasan_save_track+0x3e/0x80
[  639.941710][    C1]  __kasan_slab_alloc+0x6c/0x80
[  639.946991][    C1]  kmem_cache_alloc_noprof+0x2b8/0x650
[  639.952916][    C1]  ? ptlock_alloc+0x20/0x70
[  639.957797][    C1]  ? kmem_cache_alloc_noprof+0x156/0x650
[  639.963938][    C1]  ptlock_alloc+0x20/0x70
[  639.968641][    C1]  pte_alloc_one+0x7a/0x370
[  639.973534][    C1]  __do_fault+0xd1/0x2a0
[  639.978124][    C1]  do_pte_missing+0x6e1/0x3540
[  639.983326][    C1]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  639.990075][    C1]  ? __pmd_alloc+0x40a/0x5c0
[  639.995089][    C1]  handle_mm_fault+0x1b36/0x3080
[  640.000442][    C1]  ? handle_mm_fault+0xec/0x3080
[  640.005837][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  640.011552][    C1]  ? lock_vma_under_rcu+0x45a/0x500
[  640.017209][    C1]  ? rcu_is_watching+0x15/0xb0
[  640.022414][    C1]  do_user_addr_fault+0xa4d/0x1340
[  640.027934][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  640.033768][    C1]  exc_page_fault+0x6a/0xc0
[  640.038740][    C1]  asm_exc_page_fault+0x26/0x30
[  640.044020][    C1] RIP: 0033:0x7fcaa586a903
[  640.048803][    C1] Code: 80 00 00 00 8b b4 24 c0 00 00 00 89 30 e9 90 fa ff ff 48 89 c2 48 8d 35 b8 92 1c 00 48 8d 3d 6e 93 1c 00 31 c0 e8 fd 7a fe ff <89> 32 e9 78 ef ff ff 48 8d 05 ff 0d 37 00 48 8d 3d 08 ae ed 00 c6
[  640.069778][    C1] RSP: 002b:00007ffc513dfa00 EFLAGS: 00010246
[  640.076336][    C1] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2cf64000
[  640.084943][    C1] RDX: 0000001b2cf24000 RSI: 0000000000400000 RDI: 00007fcaa5bdb710
[  640.093441][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  640.102119][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  640.110703][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc513dfc90
[  640.119349][    C1]  </TASK>
[  640.122677][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  640.130000][    C1] CPU: 1 UID: 0 PID: 32377 Comm: syz.3.6753 Not tainted syzkaller #0 PREEMPT(full) 
[  640.139406][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  640.149533][    C1] Call Trace:
[  640.152853][    C1]  <IRQ>
[  640.155745][    C1]  vpanic+0x56c/0xa60
[  640.159769][    C1]  ? __pfx__printk+0x10/0x10
[  640.164402][    C1]  ? __pfx_vpanic+0x10/0x10
[  640.168944][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  640.174280][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  640.179533][    C1]  panic+0xc5/0xd0
[  640.183296][    C1]  ? __pfx_panic+0x10/0x10
[  640.187768][    C1]  __warn+0x315/0x4c0
[  640.191797][    C1]  ? inet_sock_destruct+0x62b/0x740
[  640.197047][    C1]  ? inet_sock_destruct+0x62b/0x740
[  640.202287][    C1]  __report_bug+0x331/0x530
[  640.206851][    C1]  ? inet_sock_destruct+0x62b/0x740
[  640.212092][    C1]  ? __pfx___report_bug+0x10/0x10
[  640.217160][    C1]  ? irqentry_exit+0x218/0x8f0
[  640.221968][    C1]  ? inet_sock_destruct+0x62d/0x740
[  640.227215][    C1]  ? inet_sock_destruct+0x62b/0x740
[  640.232460][    C1]  ? inet_sock_destruct+0x62b/0x740
[  640.237703][    C1]  report_bug+0x16a/0x220
[  640.242084][    C1]  ? inet_sock_destruct+0x62b/0x740
[  640.247336][    C1]  ? inet_sock_destruct+0x62d/0x740
[  640.252571][    C1]  handle_bug+0x9c/0x200
[  640.256861][    C1]  exc_invalid_op+0x1a/0x50
[  640.261408][    C1]  asm_exc_invalid_op+0x1a/0x20
[  640.266291][    C1] RIP: 0010:inet_sock_destruct+0x62b/0x740
[  640.272138][    C1] Code: 0f 0b 90 e9 58 fe ff ff e8 62 e4 a0 f7 90 0f 0b 90 e9 8b fe ff ff e8 54 e4 a0 f7 90 0f 0b 90 e9 b1 fe ff ff e8 46 e4 a0 f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc
[  640.291780][    C1] RSP: 0000:ffffc90000a08d28 EFLAGS: 00010246
[  640.297894][    C1] RAX: ffffffff8a2511da RBX: dffffc0000000000 RCX: ffff8880349f1f00
[  640.305912][    C1] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000
[  640.313918][    C1] RBP: 0000000000000f70 R08: ffff888078b679a7 R09: 1ffff1100f16cf34
[  640.321926][    C1] R10: dffffc0000000000 R11: ffffed100f16cf35 R12: ffff888078b67700
[  640.329935][    C1] R13: dffffc0000000000 R14: ffff888078b6798c R15: ffffffff8feb2640
[  640.337955][    C1]  ? inet_sock_destruct+0x62a/0x740
[  640.343231][    C1]  ? inet_sock_destruct+0x62a/0x740
[  640.348492][    C1]  ? __pfx_udp_destruct_sock+0x10/0x10
[  640.353991][    C1]  __sk_destruct+0x89/0x9d0
[  640.358542][    C1]  ? __pfx___sk_destruct+0x10/0x10
[  640.363740][    C1]  ? rcu_core+0x70d/0x10a0
[  640.368211][    C1]  rcu_core+0x78b/0x10a0
[  640.372506][    C1]  ? __pfx_rcu_core+0x10/0x10
[  640.377222][    C1]  ? net_tx_action+0xbff/0xc30
[  640.382033][    C1]  handle_softirqs+0x225/0x840
[  640.386840][    C1]  ? __irq_exit_rcu+0xca/0x220
[  640.391656][    C1]  __irq_exit_rcu+0xca/0x220
[  640.396292][    C1]  irq_exit_rcu+0x9/0x30
[  640.400585][    C1]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  640.406264][    C1]  </IRQ>
[  640.409231][    C1]  <TASK>
[  640.412194][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  640.418217][    C1] RIP: 0010:lock_acquire+0xb/0x350
[  640.423375][    C1] Code: 95 c0 e9 88 04 09 0a cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 <41> 54 53 48 83 ec 60 4d 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3
[  640.443030][    C1] RSP: 0000:ffffc9000435f5d0 EFLAGS: 00000246
[  640.449158][    C1] RAX: 0000000000000001 RBX: ffffffff8231129e RCX: 0000000000000002
[  640.457172][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e959a20
[  640.465181][    C1] RBP: 1ffff9200086bedc R08: 0000000000000000 R09: 0000000000000000
[  640.473185][    C1] R10: ffffc9000435f6f8 R11: ffffffff81b10630 R12: dffffc0000000000
[  640.481194][    C1] R13: ffffffff8176a21f R14: ffffc9000435f6a8 R15: 1ffff9200086bed5
[  640.489206][    C1]  ? unwind_next_frame+0x8f/0x2550
[  640.494372][    C1]  ? kasan_save_track+0x3e/0x80
[  640.499267][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  640.505481][    C1]  ? unwind_next_frame+0x8f/0x2550
[  640.510638][    C1]  unwind_next_frame+0xac/0x2550
[  640.515623][    C1]  ? unwind_next_frame+0x8f/0x2550
[  640.520783][    C1]  ? stack_trace_save+0xa9/0x100
[  640.525774][    C1]  ? unwind_next_frame+0x8f/0x2550
[  640.530935][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  640.537134][    C1]  arch_stack_walk+0x11b/0x150
[  640.541948][    C1]  ? kasan_save_track+0x3e/0x80
[  640.546846][    C1]  ? ptlock_alloc+0x20/0x70
[  640.551393][    C1]  stack_trace_save+0xa9/0x100
[  640.556202][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  640.561619][    C1]  ? __pfx___css_rstat_updated+0x10/0x10
[  640.567306][    C1]  ? __pfx_try_charge_memcg+0x10/0x10
[  640.572731][    C1]  kasan_save_track+0x3e/0x80
[  640.577451][    C1]  ? kasan_save_track+0x3e/0x80
[  640.582379][    C1]  __kasan_slab_alloc+0x6c/0x80
[  640.587276][    C1]  kmem_cache_alloc_noprof+0x2b8/0x650
[  640.592787][    C1]  ? ptlock_alloc+0x20/0x70
[  640.597348][    C1]  ? kmem_cache_alloc_noprof+0x156/0x650
[  640.603049][    C1]  ptlock_alloc+0x20/0x70
[  640.607435][    C1]  pte_alloc_one+0x7a/0x370
[  640.611986][    C1]  __do_fault+0xd1/0x2a0
[  640.616281][    C1]  do_pte_missing+0x6e1/0x3540
[  640.621097][    C1]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  640.627391][    C1]  ? __pmd_alloc+0x40a/0x5c0
[  640.632115][    C1]  handle_mm_fault+0x1b36/0x3080
[  640.637099][    C1]  ? handle_mm_fault+0xec/0x3080
[  640.642091][    C1]  ? __pfx_handle_mm_fault+0x10/0x10
[  640.647426][    C1]  ? lock_vma_under_rcu+0x45a/0x500
[  640.652690][    C1]  ? rcu_is_watching+0x15/0xb0
[  640.657502][    C1]  do_user_addr_fault+0xa4d/0x1340
[  640.662658][    C1]  ? trace_page_fault_user+0x84/0x1e0
[  640.668071][    C1]  exc_page_fault+0x6a/0xc0
[  640.672623][    C1]  asm_exc_page_fault+0x26/0x30
[  640.677513][    C1] RIP: 0033:0x7fcaa586a903
[  640.681982][    C1] Code: 80 00 00 00 8b b4 24 c0 00 00 00 89 30 e9 90 fa ff ff 48 89 c2 48 8d 35 b8 92 1c 00 48 8d 3d 6e 93 1c 00 31 c0 e8 fd 7a fe ff <89> 32 e9 78 ef ff ff 48 8d 05 ff 0d 37 00 48 8d 3d 08 ae ed 00 c6
[  640.701635][    C1] RSP: 002b:00007ffc513dfa00 EFLAGS: 00010246
[  640.707763][    C1] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2cf64000
[  640.715773][    C1] RDX: 0000001b2cf24000 RSI: 0000000000400000 RDI: 00007fcaa5bdb710
[  640.723779][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  640.731801][    C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  640.739811][    C1] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc513dfc90
[  640.747852][    C1]  </TASK>
[  640.751573][    C1] Kernel Offset: disabled
[  640.755916][    C1] Rebooting in 86400 seconds..