last executing test programs:

3m48.718727247s ago: executing program 0 (id=2796):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x4, 0x4, 0x3e0, 0xffffffff, 0x0, 0x1f8, 0x1f8, 0xfeffffff, 0xffffffff, 0x310, 0x310, 0x310, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xffffffff, 0xff], 'wlan1\x00', 'erspan0\x00', {}, {0xff}, 0x3b, 0x3, 0x4, 0x5}, 0x2f2, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x2, 0x1, [0x0, 0xe3c1, 0x2, 0x6, 0xfffa, 0x6, 0x3, 0x4, 0x1, 0xfffb, 0x0, 0x9, 0x18, 0xef, 0x5e6d, 0x3], 0x4}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x2}}}, {{@ipv6={@mcast1, @loopback, [0x0, 0xffffff00, 0xff000000, 0xff], [0x0, 0x0, 0xff000000, 0xffffff00], 'veth1_to_bond\x00', 'wlan0\x00', {0x873054bc4ee3b02d}, {0xff}, 0x89, 0xb8, 0x5, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x4}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x1, 0x2}, 0xe25, 0x664}}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0xe}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x80, 0x3d, "52a7c9017ed5048ad31b0477f146377ff2b6d287373519532f5bff53ee26"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x141c40, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)=0x3)

3m48.539049673s ago: executing program 0 (id=2800):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0x68}}, 0x0)

3m48.47104286s ago: executing program 0 (id=2801):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x38, r1, 0x5, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4dabb91b40b8910ee5d25a094d44f96c757285cde32150f1"}]]}, 0x38}, 0x1, 0x0, 0x0, 0x41000}, 0x48000) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') (async)
unshare(0x62040400) (async)
r3 = socket(0x15, 0x1, 0x4)
shutdown(r3, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0) (async)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'geneve0\x00', <r6=>0x0}) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r6, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$AUTOFS_IOC_PROTOVER(r4, 0x80049363, &(0x7f0000000000)) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0)

3m48.316173188s ago: executing program 0 (id=2805):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001c00)={r1, 0xe0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001940)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000001980), &(0x7f00000019c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r2=>0x0, 0xc5, &(0x7f0000001580)=[{}, {}, {}], 0x10, 0x10, &(0x7f0000001a40), &(0x7f0000001a80), 0x8, 0x5a, 0x8, 0x8, &(0x7f0000001540)}}, 0x7)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r0}, 0x48)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, r4, 0x13, 0x0, @val=@tracing={r2, 0x7ff}}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f0000000e80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

3m48.158382605s ago: executing program 0 (id=2806):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080))
unshare(0x20000400)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0, 0x4}, 0x20)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
close(0x3)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0)
recvmsg$unix(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0114802a0102"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) (async)
socket$alg(0x26, 0x5, 0x0) (async)
ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000080)) (async)
unshare(0x20000400) (async)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x6, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r2, 0x0, 0x0, 0x4}, 0x20) (async)
bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async)
close(0x3) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) (async)
recvmsg$unix(r0, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e0114802a0102"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)

3m47.968808448s ago: executing program 0 (id=2810):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f00000006c0)=""/138, 0x8a, 0x0, &(0x7f0000000780)=""/254, 0xfe}}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0)
ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000005c0)={@null, 0xa, 'virt_wifi0\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000)

3m32.904964141s ago: executing program 32 (id=2810):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx  \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r2}, 0x4)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b91f04076003008cb89e00f086dd", 0x0, 0x1, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r4 = socket(0x10, 0x803, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000900)={0xffffffffffffffff, 0x20, &(0x7f0000000880)={&(0x7f00000006c0)=""/138, 0x8a, 0x0, &(0x7f0000000780)=""/254, 0xfe}}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0)
ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000005c0)={@null, 0xa, 'virt_wifi0\x00'})
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80004, 0x80, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4c010}, 0x4000000)

2m44.408534736s ago: executing program 1 (id=3535):
syz_emit_ethernet(0x221, &(0x7f0000000000)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "c4f490", 0x1eb, 0x6, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x41}, {[@srh={0x3c, 0x4, 0x4, 0x2, 0xf5, 0x60, 0x3, [@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x6, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1ff}, @pad1, @jumbo={0xc2, 0x4, 0xa7}]}, @dstopts={0x5c, 0x19, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @private0}, @enc_lim={0x4, 0x1, 0x4}, @padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x1000}, @generic={0x80, 0x45, "680d3f09e19045f1d5d582460f7ff40628f8bc36af401d3f368855863515ccd7acbef88d28931ee8876dfc8d1d0bfa1105354c80cbd75cea37886e47cee4016ea47ccff0da"}, @jumbo={0xc2, 0x4, 0x1}, @calipso={0x7, 0x48, {0x3, 0x10, 0x80, 0x3, [0x8, 0x0, 0xffffffffffffffff, 0x9, 0x3, 0xa507, 0x80000001, 0xfffffffffffffffb]}}, @hao={0xc9, 0x10, @private2}]}, @dstopts={0x29, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x995}, @pad1, @ra={0x5, 0x2, 0x9}]}, @fragment={0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x64}, @srh={0x3b, 0xa, 0x4, 0x5, 0xff, 0x50, 0xe6, [@private2, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x33, 0x0, 0xa1, 0x0, 0x0, 0x8, 0x68}], @payload_named={{{{{0x2b, 0x0, 0x0, 0x1, 0x0, 0xa, 0x1, 0x2, 0x8, 0x0, 0x3, 0x2, 0x2, 0x2, 0x6, 0x9, 0x1, 0x4e22, 0x4e24}, 0x3}, 0x4}}, [0x0, 0x0, 0x0]}}}}}}, 0x0)

2m44.342315637s ago: executing program 1 (id=3536):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 32)
r2 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x300000a, 0x13, r1, 0x73a19000) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x0, 0x0)
preadv(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x0, 0x0) (async, rerun: 32)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) (rerun: 32)
write$tun(r0, &(0x7f0000002240)=ANY=[@ANYBLOB="0800080000000200b7e71400020045b00fc0006801"], 0xfce)

2m43.790306003s ago: executing program 1 (id=3546):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sm3)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c000000120000042cbd7000fbdbdf25110610004e234e23000000000500000003000000210d0000000000000d00000007000000ff000000", @ANYRES32=0x0, @ANYBLOB="ff010000ff0100000200000000080000"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40)
socket$unix(0x1, 0x5, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'vlan0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010)
r6 = socket(0x10, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500010700000000002f9078ac1e0001e0000001000086dd00f39078a102000034cb6dcdd2bc08508f3e2edd0d265b8bc0497d01ee697d19758303462c8c7aea2c"], 0x119)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r9)
r11 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r11)
getsockname$packet(r11, &(0x7f00000003c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r12, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bdf6000e0000000100000008000100", @ANYRES32=r12, @ANYBLOB="14000c00fc02000000000000000000000000000108000200"], 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000804)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)

2m43.572748735s ago: executing program 1 (id=3548):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf7f, 0x4}, 0x1c)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
socket$packet(0x11, 0x3, 0x300)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x439, 0x10000000, 0x0, {0x0, 0x0, 0x0, r4, 0x69801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x2}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0)
sendmsg$TIPC_CMD_SHOW_STATS(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r6, 0x0, 0x70bd24, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000884}, 0x80)
sendto$packet(r1, &(0x7f00000001c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r4, 0x1, 0x4, 0x6, @multicast}, 0x14)

2m43.24947785s ago: executing program 1 (id=3552):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2a, 0x8000003, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0x2}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0x9}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24008004}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x2e0, 0x1f8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10, <r12=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20)
close(r12)
recvmsg$unix(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000000800)=""/206, 0xce}], 0x1}, 0x2000)
shutdown(r8, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'veth0_to_bridge\x00', &(0x7f0000000280)=@ethtool_rx_ntuple={0x35, {0x12, @hdata="c3d56d7533a650725194e29bbd2e11a35e623dc1eadada23fffffffffffffff82391d4b595e5d74506fe46b89c5737e5d98952501f9275aaa44305f0df0979e85e083c36268d363d", @tcp_ip4_spec={@broadcast, @multicast2, 0x4e24, 0x4e22, 0x1f}, 0x7ff, 0x3, 0x94, 0x100, 0xffffffffffffffff}}})
socket$nl_netfilter(0x10, 0x3, 0xc)
r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000085}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007"], 0x30}}, 0x0)
r14 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r14, &(0x7f00000002c0), 0x40000000000009f, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r13, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)

2m42.539658858s ago: executing program 1 (id=3555):
socketpair(0x1f, 0x1, 0x1, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3d84a31f}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0xc080)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b000024b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f000000000000000055211c6f864f983d745f5865aad41d29158ae7602a2d6cd415e8351ebc283df54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e028cb2654d493a0b4b35faae176f99b745eda2967199cc93685bb537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df084c5e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5ae2c51944da8d7391d5b6b97419a3b76600cd1aa0afe5f8f46df4c5124ca425d374b419a6248029d33d61dd5c844024ba757371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2980005a4f81a9cf8110971b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87d42647489b39601be5c27696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e03a9ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82bf1cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb7a2d9c085b189b5fd1f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b41ff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b08be600000020a8a711d193bae0ab2db9ed9c6cb3c3de42ab89524414cae922141f7baf17ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a103ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf181e099605a644ecade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de08bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7d63c26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f73606fd95bbe0f10521862b6262f0259da51ff7517ace7361460a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfbd36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d30edfca386be16b1c549aec52e31e1405f86c7760282901750b732ec06b0db735222a730000000000000000001ed58cd2c684667178576dbb57345b63c313e4a8fcfefe511e084c24b31a2e693946748bb73511695bc0eec1553b0f67d50678fb29ad13d2104fdd7a992574d475d3e51652fb3fda6a9fc0458f10b6d121bd48664858b51a9054d7c1d310af6a043e4b99472fbff86fea83924059419d54f07da0b6b7d6e6d61e680f151b0e"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000)=0x34, 0x4)
getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4)
r5 = socket$kcm(0x29, 0x5, 0x0)
ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000002c0))
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r5, r3})
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r7 = socket$rds(0x15, 0x5, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c)
setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x103401, 0x0)
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000500)={'ipvlan0\x00'})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0)
ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f00000006c0)={'virt_wifi0\x00', 0x600})

2m27.516418889s ago: executing program 33 (id=3555):
socketpair(0x1f, 0x1, 0x1, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x70, 0x0, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x3d84a31f}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0xc080)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000)=0x34, 0x4)
getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000001900), &(0x7f0000001940)=0x4)
r5 = socket$kcm(0x29, 0x5, 0x0)
ioctl$XFS_IOC_GETVERSION(r5, 0x80087601, &(0x7f00000002c0))
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f00000001c0)={r5, r3})
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10)
r7 = socket$rds(0x15, 0x5, 0x0)
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r7, 0xf50f, 0x0)
r8 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x44043, 0xfffffffe, 0x3, 0x3}, 0x3c)
setsockopt$TIPC_MCAST_BROADCAST(r8, 0x10f, 0x85)
setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r6, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x103401, 0x0)
ioctl$TUNSETQUEUE(r9, 0x400454d9, &(0x7f0000000500)={'ipvlan0\x00'})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x500, 0x0)
ioctl$TUNSETQUEUE(r10, 0x400454d9, &(0x7f00000006c0)={'virt_wifi0\x00', 0x600})

2.787731555s ago: executing program 5 (id=5919):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)

2.513335953s ago: executing program 5 (id=5925):
r0 = socket(0xb, 0x800, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r1=>0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_buf(r2, 0x1, 0x1f, 0x0, &(0x7f0000001040)) (async)
sendmsg(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@nfc={0x27, r1, 0x1, 0x7}, 0x80, 0x0}, 0x1) (async, rerun: 32)
write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) (rerun: 32)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, 0x0, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000780)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb", 0x2e}], 0x1}, 0x6400000c) (async, rerun: 64)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_tracing={0x1a, 0x14, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32, @ANYBLOB="00b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000014232000000000001810000052a7cae8cca2408846e4e3a087561fbeb91d5cab6f79fcaed3a38d706bba84d8c92e000000000000000000000000000000757ea00ebc49e9a8045e7769c2e511a0a79efc82", @ANYRES32=0x1, @ANYBLOB="000000000000000018380000050000000000000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000480)='GPL\x00', 0x3, 0x2a, &(0x7f00000004c0)=""/42, 0x41100, 0x70, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x12072, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x7fff}, 0x94) (rerun: 64)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002080)={r5, 0x0, 0xf9, 0x8c, &(0x7f0000000600)="ae7098c1a1279166217f27624e3ed3737a82bf8935685a0fef871ec621fab15260a99aea3d8cb616625c3d66f843937580c7d1b3bc3fd4126d944778046d49c5dfc48984a25ef615ff1698b63428b24a5a71965871603fc38a5de755c0042391bc38000c56a118001dd945eb21ebecf228e762cdecb3be93b091dc1a9a4549abe4ff78b1a08a25ec7669eb8ca66c5f3726ff03e31ab77fc78b5a8ae6c627794791811c0e244a90b71fcf1a3a20a15c6c1ed353b437eb17ce74afdeb0dd7565c453715fbd0b7e613708f16206ba67950ea9e0faa30de55e71e0630d7ba43e464f14637afe38c81d3693aede9cd608c439af153bc0c8b696af86", &(0x7f00000007c0)=""/140, 0x8, 0x0, 0x57, 0x1000, &(0x7f0000000880)="911b09472d5b70886b61d5ac04fefc80a2dd65ff83626704ed1cfe83a55351a19979f7a0acc0d1519062c2cfcdbbe6f9cb6e8bd6f877172e201c4414afce678ddcf2cfab3963412412029000ee0f22782c770c98d8fe44", &(0x7f0000001080)="8e22f3774b9cadec9ee777dfee0787630de095e44ae30ac0e7d2b59dfff7d9c2f53096473bf638ba666c4f90db48afcd099010d5deda1e112c51ca9e9fc8b7650d5845e1f4ff6f4e1d0c2eb8cfef045eb18fc54b053cec1972c7505a2b14ea538fba90fb23166611dea05c3016d7994cf0afc92a944ffbd6d9a2cb4b86607a3020eca9268dc25cb981324c4f018a7ded1c1b5d8e9450c0b495b5471bed9bd0ea268e1ab2f3aebf5422923eef71fb4e2af8e3e93832e65e9ec047e7e42f91d28bd8caae722f6b92a03df0d5d77f00f6e47594e2b38ab2c59e2153df0df157f3dcb471e3279a7c4002439b2d62b51f68e4082635470d6e25380d0115fde1c128129d8aae5ea8e31a540973b95725a6df91af019d7636d5d11647add7fefdb42982145f403f7e35219676fd3512da65ef1c556bb15d18efb2788e79d9e4d8544d1d16ce6fd45f637c7c084151e13756fddf1857b3b6784c70d08de0968ba024b00881434bfe4c11938d3272e529a01736d64081e2775ef10219d07251ed0d3172df969c93c9a345ef86fcc51935361207e78f5713a82970dd143949bea6d9e750a46763addeaaa2740a444dd4173627bb714792aded05a8e6aa6bf006eecd21d9c490bd375a98f0f2dcfff74fd846364c3920e6738e6cd37877ffafd138e4faa5352bc4a8462e88ea8dbc58e68deb8e2dfca1ee20f9635a44f698f32184834204d5023138a09f9e892f7f3b5d86854c22fdbfa288aadf4ac17f548dd5215c13c2de155455ef17cf4ec9b7f36ea8508e17eb51e21b26384aa4ac6c6f754d40fb823431053a19ebf5e28223c8dd1a08ea56dd1e05de924d8cdb8914e04095728a328b020bcffe5325390eb704bf85932887bde9162896e156d27a60e710e42079d92b07d6c91d6d96ab698520022d36bdfe7c6fa77172a3c1571cd7c664b8fded781540d53908a899befa2167018d96dd4502332dafb21b96bce7d295a8ff2c217a4b2bd78ed0046bb9c54bc8201dc6676eca7459e7cbaa93c6cb7fcb43d639c1676c26c90c0050c88dfaaa4bfed2c362e7c15088523c96ee3c80420473d328bc78548bbca014a822af6689d7e39380d26cfdb9eb6a6b86fd3d4976661f8c1858d7fbc76e14b81672eaff702964542253f83872f708e0a2dd6e701c96015fff436acc5d350ab5a2784ce74899d12a6ca8df8b5a664d4888102def8439c5bedb31fdf468cc64867667e0e4fcce38653c511ce18da08106d3253c80bc8e03bd3abcaa9c1d2955a7cb02ec497795faea4a10962f97b933e20d200e3ae25e04db8183da154bdf7bd1d6203d5f5d28a79b0efbcd906df38bb15418694bdab7f3a2b146e6c7467f2bfbc3ae23ee5ab7be481762f7bbcd0e4eedc207848a379cb62d4f3847056607228a119919c391980079e841a8f7c33a7236712dddc74468f1d8b914064f25fd67fcdf0bf981ce171baafae42ebfe738aaa6bc8ecd1b5790c5b1b45996fcbaf046025b79da3c41c63e66c26491f7e13bfc808c8feae9ae4162494ec78823fd1a3d36698c6b2bc80223eced2d3f0cba7e2e6d10e76fe5db691e556c707ee2bc9306ece7113fad2be1bf4b0afe2ebd97f07743d137e73472d1f09479ff2f3136e28f99d622eef3742a36534b51a8fb7e394f8ef270af58b8ece23ae6cc45c734d2d21fd7efa33202bf790dc6d861f91a2972c85db1a952409ebe1a264086cf9c3cf2dfd68e2721509a3d86ca3904d0de6e150d51962883d66a9bdfc2f08eff91962bbc846e7009aa3ac9ecea4eb5b6acd87ac64b69b6f18af551fe676156e9ccfc421acf2f27fe2e45f587b6ff163a7cd4af83939bf3cb17761747cc752f5a977608ae11765418e377ae8c1923230b56a1bcf09622445907859c78272ad0b8c1ee3b4c491a8a9435ad1325ab3689d9ac5057d425a60dae2f3cd64ca96682cac85a93d690bf4ef9bcbefc9e27d96d38ce27fe8dea245bb6134a6ed8a3e2f9f62baba98eb5bc36575dd62612e87137a2293fc2317745930a8975893696b61d063088eff2063f58f7f28a174ee3c557a02e811a5b2f05df276bc87d553ec4cdc9c57fb0e8303d96a5217804fa6c422213701d43c604120ee3af5357774374d521f93416e1103ddfa018d155e6f0581f25b8c57839dd93a85368ae154a70c563009628a950e689c81319329160f934f2c3dc58ae9732397b02b522e8a7ce9dc65dbaa7cf7331b68a4d83d5be2ea9c430fc68e663cbb596008bb59aa5fdc560288a13792bcd8aafe5d6f208fe84b9d02194f23324ad7a26e1cefc2786cc39b285afd6144d37e01e27dbc54be7d130d7266902720050655ddba589826fb1f7bed52729152a5906c4609d7c52b1313c35dadb31282c351da0a6e598c02075da719535bd67752bbee2705c0dad627764d6c2d7845ff6ffda7624336110df83bf62a81433356e016c6fb20a082b1388536d8264ba3dc2822018720877110d7df99c7358f6ffb719e9f205820de6a6a3c8ec6f535b49c20852bf96988dfb0b3bb2362053f88be4502880c5ab12e1bbdb22d1be7e2a08f106018fdb09b1d84cb7a07f048e00cf3784255a5acc9df3a9b2e0d26da4cbcfb42109593961b71fb5801e38c3c29394a3e73926a0aac67e86904b7a17d5628d3f773740a06fcb440666e60fb9ed91344df4dca2240f14f2ae3ccc50ed01838697e0d2d3ea3e51dd93b3466031bddf0b2112c6b976bf1c370f88d41bc92cc9e506c07b4b1e682218cad95b0ded9bc96d75764fa834db93abe5cbac644a4185143c9bd1cc90a098e3f90bdde6a18b32183586bf286fe1f25eae075c2c9a763c32c35825c826c6557603b76a4d63ad1063cc783f566fd0df9e24f5ef313e9d97b8312e5f7cfd8ff7971d3d59e6f2a0dc4a3cc947aab78822a44aef010ad64fd512e6145608a731749036faa0f09b84fddbf021449735fd81b5d2b8fac39375ac43953b97333d0a1ff56aec26b5f466d8e2b1c45ee9f952320d05a6d93e5d7c880bcd807ae2790859dbc9f756af7aadfd0cdd2500ff54baa15da4009bd8d396453fcc802e58a4da32fc997dd992ada7a953fac8965d216d14100b3d77775c9aa343d7d7a8c7442b59c235d4e8fda5dca5f5b3916f61211170219d84aa7ca1e0cfee1aef9d3176310219781f7e32132155d24b1cb9f9a756ec7fb429e30350a3fd33689be49bcdf9646110a6c53254c38b668bca1d8665a21906a740ec452894d63c99ea18e53c0890ff13fe668466fb040de4f011d0d80a3c590f81131bbd77ffd24a163f6bdd199801280951a91e0a84441453840912b05d87198a67225456c2c05d1139b6a0ad0f8e33cc546d1b8974635d7e2d9db64bf0c69833d896094fb09bea0384f581864d3e48b7dcf99156076d5cf600408d8be914b7ecc9152da5b5ee12dfb5dc080692ee14457fa066d4657cc4f1da882441cddbae7a4f463779775d740422d0bed98cca902a753b3aef2e462a10fd48710baae053804f00d2086ae46cead110d1ed5577878494646933151de3f791c1408a24b155456f6b3397a7ecb31ef0a338f9347f33fb8914c130af1f452e545a5aea3073eae4c18f5e1da9922607163cef88bbe4df034ddae0f2024bb3e9924dc1cfb476cabf63b0c5eb1040a8b6bca27071ee3565ed68b4a6f08f35590a3eaf4dcf7747098536eb205a3c489c3a1baad06727613e84d8cbcf64ba8e399c67a9877f4b338322fd920bb342a692bcfa2b2caee20e04f119cb37e69aec6431ad3c7da32b982d49c1b2486768ee82b2fea872011c200f57dc64992b80a6105777ebd98abc65a60e0812151317fbb85c241892443738c7d43044ad105b2922d3ed1b22f1e691706968d3b7c3fbfbc7a5f27650cae774d7a92fc9adcf14480a6dea26ca724af977235c67faaf73e19e114f369c7386bd2f2fd81d12ddeaa1b5497c12114d0940bcaa73e6af657386f6eef59986b3ad6548d3e1676b04125d239669384d60a95968897fefbab0e01c3a501a087fc4e82c9548f176d11bbe5c5d62b064f95cf1a35f48f1b958a423f7d03da50ca8b13188eeceb78bafacc0c812bac0814de96ecfa12bc90060a6a154795282a4b1177e5e32eaa7648e0fc02697a48cd3356807f290180cd74236b9e403a49d8b5516a553a27ef3e0bdcdac7d4107bc1058cf8935ab777930ba5cebddb84a0e1798e818f032fb7c239b8a777579e5f9db63830acf6ba06b39945eac452ca7c96ea2702f2e494c63fa29be3158f1c7e680023adf9e60a0be5d6f63be2727c049f32d5d605f3ff7c3c33c602b37d2789973786a4e34377f760f96893b5fa5d7193aeb9d179a6a31e5add6ddab9e97f33667a4319400e697d3b46fd5e97f47f4a63a25a3d731ddfdede922d0cdc313cc125b92a3763d7205b4250d7908717b4e06e95e2ddb249fe95db2e908c369262598fff7d9251b6caf5d16a8593ee7d029f6b00a09cd4ed2ef05a9f262f1543d0b9f4373658d491e959a6d509f5069dd5446fd44249d6ddff9cdb3c7d16c12ee4253eb5bcd5daed8d86a133afa1549b75db18c788031c8b98342499574eb247a1ff49596e31c9c12308d87d7de3109327411268946920ec0856ba2202e4a1077dae34612ce085c780affac6292adb30bf06f59821f5beff63c045888ef0acf7e9fab237de9c3076e470ad8d6545be394f7912cb8afa2150967c32320f2b35d3393f33c2bd12f8804d3049d71d2d87244896a87328ba56ba915618184831ef3ec321b70ac709d4f543964e89896b16bd46302aece1961a56c4a22c603f81bbebbf7601736686d98cf12cf0c175d8fb9571cbe1eb3a43e6def4e17c91abbb6617d39614310b36236d851dec059d37f2ca458131f085b922292100b6c880efbadcb8eb8405a35c7fdb5d0b22658eac93d4f944efc9d8c554b7d90631abffbc3280378dfff75e74fd2f48283a2f037c86476fcc3a5ac15424e86ba941c979704c8aebf47478e91382227cd5cadd9d9134eb51566395cb821abdb6bebbd7a0e0fefbac701c8290c540666706dbfb473cdc21a8db6430c96d9f502eb6ba6624dc9d5c98dd2f4b0c27e0eb575a15782cc38df04fc0296ac5b0078d468cd2e5ba22aca3a2b0a6cc2122a050b6872d0e443ab45b3362548ce0dd0dc4617fda149c3cd83e46ed77a181d4e9824e259b9503e57c195d5324bb54e02d8c9b5c0a6e9c3fb26ad8e84634f48a42505c302869f033afe56237487e7e8e43f33c63a0190279693f8b7b4a6c27e990428463619e6918076fbd277166d365967e613829c2e1b54f062e89445d5c2a8c2fbdba60c73fde29451f928e908433522c1fa2c7604e18b066f1640370b3a5f61e32127e4bbe801e21cf4bd8c6b2cfe171bf480237f46eb01900900c106ba67fa84467f26b78f57c74c6c5379495ad40e89a8ba03349f9847e20e224d272832ec25907242849457fc49dab35c3a42d13e932117c186cdddb0bae8431464b5b77983d41430c0095535bbaa848c8b1e01214210c0fabfef1229e45e5aa33291153e2351f0d3f5a4a7617b759b8f29bb325700e8067aab039b8b5489115d1de4d607abce523178c23640b01716b7eff5b34e3a6644870abdf72630719420f88437397998afd39741926bf6fb6583c02424064e4a0d3911014f3b6e5be9ae7fdace2979b51f9af9bed5ab0c210748ea1430971113a5c1c72a5f5fcdb33d389d6b790e74a0ba864a840e305f833548929d5df171ef8db0f3b695cd70d53517c23329b4e8cd1ad90e49833b96de059d4d5c06e48ae8603f217b", 0x8, 0x0, 0x8}, 0x50) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) (async, rerun: 32)
accept$alg(r0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async, rerun: 32)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async, rerun: 64)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r6, 0x215eb000) (async, rerun: 64)
socket(0x14, 0x2, 0x4)
socket(0x8, 0x3, 0x3)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x61d8, &(0x7f0000000400))
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, 0x0, 0x2044884) (async)
sendto$inet6(r0, &(0x7f0000000340)="506678e60001e1e1316e5fdb7600b84edd335a3d3149be521471ec122a06c4ede2d1ac69044e10091cc3d7f2fb4585c6b9b045d2e0d71fd9efc23751b1e1ca729ca1d41c69854f31834e4a4260b4d1e3b64cd11b59e6c60b3f136b6551d48fcb8a8b92a54a43b4a2f36939e1", 0x6c, 0x0, &(0x7f0000000300)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}, 0x1c) (async)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={<r7=>0x0, 0xafba}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000900)={r7, @in={{0x2, 0x4e24, @private=0xa010101}}}, &(0x7f00000009c0)=0x84)

2.263472921s ago: executing program 5 (id=5928):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000111401002dbd7000ffdbdf2608004a000000000008004b00130000000800010000000000080003"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x48884)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
write(r1, &(0x7f0000000000)='\"', 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x6912223a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000100)={0x10})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fd7, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0xffdb, &(0x7f00000004c0)='\x00'/14, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50)

2.017837588s ago: executing program 2 (id=5935):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x11, 0x301, 0x4, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

1.888099255s ago: executing program 2 (id=5936):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004002}, 0x2000400c)
writev(0xffffffffffffffff, &(0x7f0000002c40)=[{&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="def4253e24df350b6719ef1a2e8a77ff392a4092b2d0d648b09203b3af473b30cea8eb5fae2935de", 0x28}, {&(0x7f0000002b40)="3c28bf8d5040eeedbff5a80e341199d3ccebad4283f79d914399858761a22bb536fa88b09c05fdc09e2c4aedefa801a26257a4c1d7375f6ee31227071c3cd8006f8fedb6b877922f5f9b1565d046c2f8c264a86f42b8d6624bd3a35baf72ec343c9968cf4b1e6770da6e04e88cad97c6f7370b1c0c22acb7524cb6cdd838b1f0f2ff83cc2f06bdce119614ba406c8cd2f25aafa324bc12f7d6897844e786d0ef16187641a26407810bfb92be9e276e602420b6e70e96b388c9b7d9a5e5f7b3a24a0437dadedb8326a76bd94ffbe903bf52f8", 0xd2}], 0x3)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x4}, 0x1c)
getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080))
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x30, r4, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x7}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)

1.812885524s ago: executing program 4 (id=5937):
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0x7d4165c9)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r3, 0x7d4165c9)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0)
getsockopt$inet6_int(r4, 0x29, 0x10, 0x0, &(0x7f0000000080))
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x9, 0x0, 0x0)
listen(r2, 0x0)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r6, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000780)={@in6={{0xa, 0x4e24, 0x4, @empty, 0xc}}, 0x0, 0x0, 0x20, 0x0, "9c0fe2154aa786d10084ecfbe8e86f7d312fcc8fde38d5823d22fbbb55a7837e5f2329f4d662f2185f18fae43e09d661d12a01669d6eef2e4733c2c29a3c3d16ef45c7c1c8ecfcc76b47d9ab9a573f11"}, 0xd8)
listen(r7, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8)
socket$netlink(0x10, 0x3, 0x8000000004)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8)
r9 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r9, 0x8)
r10 = socket$inet(0xa, 0x801, 0x84)
listen(r10, 0x8)

1.540701683s ago: executing program 4 (id=5941):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x100, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94)

1.538940539s ago: executing program 2 (id=5942):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14, 0x10, 0xc00e}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x4000000, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7, 0x1, "ac3381"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xc4}}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r3, r1, 0x5}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000ed0000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x5, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x80000000000002}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x4000010)
r8 = socket(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r10=>0x0})
r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, 0x0, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x8}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0xb}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}}]}]}], {0x14}}, 0xa4}}, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x46eb, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc)
bind$bt_l2cap(r11, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r11, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
sendmmsg(r11, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000300)='e@', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20040800)
sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000004c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48884}, 0x4090)

1.342371146s ago: executing program 4 (id=5945):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000840), 0x7) (async, rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 32)
close(0x3) (async, rerun: 32)
r6 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r6, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000440)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) (async)
shutdown(r6, 0x1) (async, rerun: 32)
setsockopt$inet6_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "6d8dbbea6ea18b02", "48d9dddf988cbb98f1de6fd28fa41982", "3302d968", "b47f0678eca804ef"}, 0x28) (async, rerun: 32)
setsockopt(r5, 0x84, 0x7f, &(0x7f0000000080)="01e9ff000980ffff", 0x8) (async)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async, rerun: 64)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000340)={'tunl0\x00', <r7=>r4, 0x8000, 0x8000, 0x3ff, 0xbcf1, {{0x9, 0x4, 0x0, 0x27, 0x24, 0x68, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010100, {[@generic={0x88, 0xe, "e87520fc56793cee27a6c474"}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)={0xd8, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4044850}, 0x4048094)

1.326750734s ago: executing program 2 (id=5946):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1a, 0x6, 0x1)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r3, 0x0)
sendfile(r2, r3, 0x0, 0x8)
setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0x54, 0x7, 0x6, 0x14, 0xff, 0x6, 0x0, 0xf, 0x7, 0x9, 0x7f, 0xfe, 0x4, 0xa1}, 0xe)
r4 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r8=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10)
bind$xdp(r6, &(0x7f0000000240)={0x2c, 0x1, r8, 0x0, r7}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
shutdown(r4, 0x1)
poll(&(0x7f0000000040)=[{r4, 0x82}], 0x1, 0x7)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000100)={'syztnl1\x00', <r12=>0x0, 0x8000, 0x80, 0x6, 0x3, {{0x39, 0x4, 0x0, 0x2, 0xe4, 0x66, 0x0, 0x6, 0x4, 0x0, @local, @private=0xa010101, {[@ssrr={0x89, 0x7, 0xe2, [@broadcast]}, @cipso={0x86, 0x4f, 0x3, [{0x7, 0x3, "b3"}, {0x2, 0x2}, {0x2, 0xf, "b8517b7350e325372878d96a65"}, {0x0, 0x3, '|'}, {0x5, 0xe, "6ef23b8137b6185fbd8bbbe1"}, {0x5, 0xe, "316ab54c67fa50b3200ab59c"}, {0x6, 0xb, "6e9f84cfb180d59061"}, {0x5, 0xb, "2080cac32b7ae8f100"}]}, @timestamp_prespec={0x44, 0x1c, 0xfa, 0x3, 0xf, [{@loopback, 0x7fff}, {@loopback, 0x6}, {@rand_addr, 0x80000001}]}, @timestamp={0x44, 0x20, 0x29, 0x0, 0x3, [0xf, 0x3, 0x5ded, 0x5, 0x6, 0x8, 0x525]}, @lsrr={0x83, 0x2b, 0xa5, [@rand_addr=0x64010100, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @local, @broadcast, @multicast2, @local]}, @timestamp={0x44, 0x10, 0x35, 0x0, 0x3, [0x5, 0x2, 0x0]}]}}}}})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=@newlink={0x48, 0x10, 0x800, 0x70bd27, 0x3, {0x0, 0x0, 0x0, r12, 0x0, 0x28000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048800}, 0x0)

1.320812405s ago: executing program 5 (id=5947):
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
epoll_create1(0x80000)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r1 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x400461f1, 0x0)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff})
epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x100000, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, 0x108)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff})
ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875)
r4 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r4, 0x8)
r5 = accept4(r4, 0x0, 0x0, 0x0)
r6 = socket$kcm(0x11, 0x2, 0x0)
getsockopt$sock_timeval(r6, 0x1, 0x42, 0x0, &(0x7f00000001c0))
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYBLOB="0500010037e952461f878a97aed5ade44b7e82fa9654bc65df98a07e641e824bf468e0d3c87e98ae39771c2deaa2945c06d854e6fe659216f188aed1b8a4788060724865428f9ea92be691fd3b8a0a2852487846e20cf44bd62865082cceb8d14099fe9cee54961ebb2efcc5a7a7f2f46d08ace115f5cb6476496bdd1b0c33c9ce1adf2c"], 0x9)
r7 = socket(0x19, 0x6, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'dvmrp1\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x4, 0x6, @multicast}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r9 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r10=>0x0})
bind$packet(r9, &(0x7f00000002c0)={0x11, 0x800, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x11, &(0x7f0000000140)=ANY=[@ANYBLOB="aa091700000000000000000000000000005ed3b45c706bb90754c3a5d7b4263893659422c11daa5a9c6e8d5c33e23f34bf40e3ac9ec306e58f"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000000085000000b20000009500000000000000000000000000000028c01dadb60e743ed6fb705a8cd38da9c99a0f9a0402ca2c7678ca2b988d615bc8594ee12ddd0e4936a808a987ecd15cc9a6ae9d6c60ca482c5c723670223cea6622b804c845a40b280196b64ad410bb4820ea6f67cf0127d0a3d3ae1dac632b9618e2fe10368dfd875fae14e2d8e73e66618056cc1d8a5b2a0d60995bf8bd41161975357ea296877a3fe1ff127d341091041a7803befbb7adbf640d42d922f087ae0e98658f99490f92b535b12867fd8c38facf764fad49ddababf7dcf8b666b838b5dc484fd5e336d667e532a5c530dd0b5efcf0a0b0b0f221b45074a9b2c2e87f98565b39667d77c7a1ac2b1b32ec08f788d81064e03e807137763df74deadb436f15f34547a9da730d0a66f9f1927687582acac113f55d53f73d66cf552e56823c93b1c0152ed92fa55da0fdaa82950fd0355d7403176e0718c549891ab7748518f7b3cfe6bef81aac4c3f32d46b6bad08ccd4e22b1b658a42d00775227bca5e285c167dfffc79b54ef11730dd7b8ad28f6196827d515b10"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.177265535s ago: executing program 4 (id=5950):
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000400), &(0x7f0000000440)=0x4)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x51483}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x40}}, 0x8040)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmmsg(r2, &(0x7f0000004380), 0x0, 0xc0000000, &(0x7f0000004580)={0x77359400})
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@initr0]}, 0x0}, 0x94)
r4 = socket$inet6(0xa, 0x1, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xfffffffffffffee8, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, 0xffffffffffffffff, 0x1f, 0x0, @void}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r3, @ANYBLOB="1c4ba955910000000c20000000000000", @ANYRES32=r10, @ANYBLOB="e8801b0d746fd27dfcbaed8629b7", @ANYRES64=0x0], 0x20)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
r11 = socket$key(0xf, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
r12 = openat$cgroup(r9, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@cgroup=r12, 0xffffffffffffffff, 0x10}, 0x20)
r13 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r13, 0x0, 0x486, 0x0, 0x0)
sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02090000020000000000002cb68407a0b31bc727bb7e3e9df73abc6dd6647c5a330155ad93eaaf8ce254efc8d22632376fe74b6abdf95ccc9dd0e400e13d7f735da2d5fbb1e8937f1f6ea8bf5d40acdb9c4156598eaf30f825843e86244ce7eeae670c5a0f0ac324e963d5a1c47dbb879a4dfa7a365c5f6fceb125b57402e433ed3a5a5ecfc14fec75e1b2fcc9c296d9fa129f6212c8aea93ed5500297be039dce062e0bfec9ba2138a87c2c1116994c5fb53cefe09b9d8e2b3e"], 0x10}}, 0x0)
r14 = gettid()
syz_open_procfs$namespace(r14, &(0x7f0000000480)='ns/net\x00')
socket$key(0xf, 0x3, 0x2)

1.053368559s ago: executing program 6 (id=5951):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r1, &(0x7f0000000180)={0x27}, 0x6)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%-5lx  \x00'}, 0x20)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r5, @ANYBLOB="0400000000000000000000000000000200000000ba64500ca3d2c68c609b452af341ac2e5d64ce992b55d268668e238abebe54275c9f20195f5aac857e8c4a2dc24ec334df71e581c39af106", @ANYRES32=r4, @ANYRES32, @ANYBLOB="02000000050000000400"/28], 0x50)
r7 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0xd, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
socket(0x400000000010, 0x3, 0x0)
unshare(0x20040600)
r8 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d)
ioctl$FIDEDUPERANGE(r6, 0xc0189436, &(0x7f00000001c0)={0x2, 0x3, 0x1, 0x0, 0x0, [{{r5}, 0xa}]})
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0x2}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffff}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7ff}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4048001)

894.779752ms ago: executing program 3 (id=5953):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8948, &(0x7f0000000580)={'bond0\x00'})
socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0))
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000080)={0x0, 0x2710}, 0x10)
listen(r0, 0x2)
accept4(r0, 0x0, 0x0, 0x80800)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$NBD_CMD_RECONFIGURE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fedbdf25030040000800010000000000100007800c00018008000100", @ANYRES8=r4], 0x2c}, 0x1, 0x0, 0x0, 0x4008150}, 0x0)

753.778699ms ago: executing program 2 (id=5954):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000044)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={<r2=>r0, 0x8000000000000000, 0xdf28, 0x6})
r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x3c, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xb54b06120e0d4e72}, 0x4004001)
sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

617.477137ms ago: executing program 3 (id=5955):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f00000000c0)={0x2, 0x1, 0x10})
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001600)={{<r3=>r1, &(0x7f0000000100)='\x00', 0x2, &(0x7f0000000140)={@align=0xe, {0x4, 0x4, 0x7bda, 0x5}}, 0x3, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)}, 0x5, &(0x7f0000001540)=[{0x2, 0x80000001, &(0x7f0000000200)='\x00', &(0x7f0000000240)="dd70df64c2f83c75487e3446a152e757cac042b97fa4978d5a606f64234beefbeac90b229c0ea19a1343966c41f1e602f43c0ca369b2d5e2b65991ad23aef5c356a416497873c4", 0x47, 0x8}, {0x2, 0x8, &(0x7f00000002c0)='+}^-$\x00', &(0x7f0000000300)="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", 0xfe, 0x20}, {0x3, 0x6, &(0x7f0000000400)='},..\xc5^)\'\x00', &(0x7f0000000440)="8990ddfa2ca8c05950ae20cc8ca12716b89b18e560fe9ade3b9e3449691aa57b4bb26b02c411ccbd9734a536", 0x2c, 0x2}, {0x3, 0xcd, &(0x7f0000000480)='%}]^-${(\x00', &(0x7f00000004c0)="ab10d92072759d6213c0183e9842b13951a52f52169ad4b8090820180d0a2b86082ffa7e9ca571ff95e7fb1001ce5a9efe252060d583cd7226387f61f2f5e89492a82c729126d43a49c52c74dfc0c277e1707bc98af86c0a89f221fa57b64cee8c5fa8164a624d35969fe0336b75dcf008a9946afad17a627544fc80f39dad70d71efc1d2cca0aa074bb6a60417d51f780c2b99c516b98241b0dece4f2bc1c2e594cf52fd1ccfdf7719fde4c86574030c6afe0c860c7b8c076b7abc3cb1e06f57e7c0ee60dcf4c41a76145cffd809b77412bee2ae93d431b314b7ae6540f229c3bccfd2f0f018af0a8901ea38c6a5b74ec977c5ab5277afab546d43cdabfb3eebdc900089963b8f6ded93cb7acd9d0dfef675aae8a7212a43ea4f38ec748c2bed63e35cd09e5a6f95518cbdb587c321efa45649afb94c5977a2c7a8a8a1c35952b9e5749fae495879eab8b69c9fc88b8a3759e7368cd1ea9acda9dedbf0ecdadfc317c2e6d68393b45e772c5f0ddf2c535ccdbbdda5688277f15a0282a8b04eb87424ad3d5e789ff8b07226b6148ed20fe84aebaf208558edd2417e4c684b32400633556b765b94a869dffd6220ad85b8f92267917446b5f625d8c1fe1d50d026e66e96f894298652f9d49d90d18aa36f7b0dececd11366611f4602cb3b30f772eea404c1fa5a67b265fe4a5555fba78ce13f9b3e38eff65b577f40f185081180f3b734d65e1b00ad7b0727cfd3310620e8a55a230b01b540fc4393b518a156e1439d1755405bec50f4068045b84dff7630c824b3c9e59bb079788adc6147068d228f0e2c4d451b52930f599837107d747589013a0e7d484558d1c2b5d257f33c97c9510e805303169c418353071471e522b8493c84220424465007fd01b63fbf52f4b77634c551d0e7a26a2f685290310a7a22057a259af370a6915604adc80c82bf640e1c7439e530a98f7a589fb95957c2cbf4e2370433ca797568c6ef965ba38a971dc657a01fe4391f794bdc616ac02d0e34103a50daa2c1d3c76ba888154f4cd0b99d7b2aa227c55a1a904ab8f39e88791b8b8c9c2881244d761718d14c4c442ca80e085700594c37a67588147c7f003d3141ea127c282743d9b03298ede1d7062717cf1c3b6559337bbed02569a0263bab29721f0108927bc147d201ac3613c914cc68f024c253a141821885c004e82a60a3ece06fbfe6ccf583660c4a04760297659deb35d9244c9042d056e9b242b1f83fba96ed65d53df7df32f1d5d88f98e796f3c755b0f4058fc02395e4159ca470c28e3d04a8905b0be2c1b55a168f19d05ec2af85bc3743211e9037ff5679e5e0dff70ef78f1f758057336f8c711aa9a27885fb52aae6c88337f342e3195f683c7658cfa179f6cbc8398a84d58f7d6a5caca023015cd977f8464db870503afc013ee668fcf39601b265d29abf36f3e3ef772024f5f87e966e23acd1da7eb3e5a0feb40e8ce91b3a54f745befaeb0608c15ad83d1c40b5c81554539213fbdeb3e74a8e203b7168146eaca643140da4f835f5912474ff52e7c1ccff6ee2ebd1420204b2b457940355364993a9797739ce887bb49a6b76e7a690368996f4ff6e990d992aded7897cd9654199c19a86c997f2542c1b8af3e62ae635ceb932adfd3352cd22a430de3bd076c6c6b0c86323b8e1b5ddd0d003f228821c50362ad317b9285da717f8578eed158901dcdfc8b7787643e31dab4902628c94c9289244ba573dd48caa41a2a2e3ca3977b295e7d0d59d01d839a753d416341ad9bb9f5fb182e4724793a3b7ee2f8ca61e5a3b3fc439088568cba99683006a522f3be271f2e8d6267b53ff6f7de75d5dc9f8755515c1bbf8aed3e2c5f894863158b07f27e94a190baba2efde248d33cdec68e160dc88416265305800db82b4b965a9e19c76c073c291b9a5a93cc90eea9e4bab371889501a5bb31d93dba9cabe6e101889a46b00629e20b282bac156c2df7788cc0585b0dcb5564420bce88845670361b0b274c164732d142d6fb762c8376aef467711ffcbbd4776947f7d529f5c86b5b09d846cde964d90b6d0f7bbf828aa4a90d5bf2eb638dce11ca41f2ff5dffb8f127aafb830ead0737076fa41bf96aef111dd91ee21abe25b35b832a3fddf5bc8329c41982b3eecd247aee008f5c023d21e7991d1a721cd5feafb1f4e1cde1db0a515b5190f94605ab91c03579dc1abad0d2ba5615c21cdfee637f11f50a0ad11d4bd424804c8405de981b0de10c63e3ffc8245f6b93ead0fb9462cc371766cc92c5cddc737cb6223ee029de8975414d0d570563793f797a2243faafcabcc68ca5f2cb9781418e8ac28ce30a1107d58fb2e8275c5d8afaa71785ad025ba64f363578ffcd04efcf0d7ac452b953e887b1116a8f87a5298f82c6715317452272a56c0987916a28014eb79e9b5c6e638d60dff7f16001178f1b4785d613e358f1da9a939e358498510565df61950c9b77a7258ba7d03d44c65c4699b6d300068d94cfe45306f10d5dcb087162f096abea7ceebfb7df7660c0ef0d460210c693beaf6e9d791ef78cf1a24dec800984fe9add6682d9bf8fc2d3fa96d1b989820b653e067545989edf66370a1ca022a87034694e2aa5a54203e7f94320fb5dba7cc659df17f76c83e5ce264ede8c2c2e1dbb19c8d6565632ff374f8a6fe7ce017c34696d3ce468cb2e7e707100b9cf8b6a431cdd020d8b226f80bae94cd447209c0ec80d4689b71618b8f88a5f58e9e022356543fefc16f357f54f1a32f09e4fad87a0787d71cbb0c0c3e915930142c02add2616f49f89372659da8b723b4642506515fb25a8f889e422b847f39b4341dad07d9af3efab00d9fd93113468e5eb7dd292b34cd8bd17701509334110e35677b581fb40044fc1c584c61200468be55f164585c70585c9db39cc5c1cc1c192513868bdc98f6481855a036d8edf806784b78c05117e5ccd3dc90b020575d583ecfa775cdf9428b25c0519928d46e0ff9e2db7921244275830d10b7431208bb9bdbae840783412de9fbaccd500d26dfa0ff8c66b2428e64f7905e2e14aa460aa1b37043c2793f92ae80e6dd3f012afd9963b6168b2278ed7a6745f520559b55384800e9032a6f44a01e8b48cec2c900146eec82a11da6f93aa79333044117a1391fb95f87ee1ea0a2a3be62d1042ccfe87b68318e28c20cbc5b01b676e7d4c4d18df17fd22810682848b393ef4f5f6ea901006f59ac0f39bd0e7775863edbbce732ee3fd42d47de6a6f2dc7a87585606c91c218b83d16e77c3133c65ae5cb5ee72bff63d7727069c59f681523330a51a842bd2fc5bfe14fdd28bc0e2ce23ec1cde2bdc18ace1bca194990fa5b8d976db1080ca5cb0e585350f280e8af47edd8bea1a1c764af2bb881920de527642e71f786d2885b9962b9ed04207b85609566c95ed5e4944e4b8a823739bb49ad4266b105a3d7a82bf32d9901f18897413ba200dff8a8c0d576992bea0b77f4e6214321add5f25889e29da1928379219185aadbc5fb79e80670d6fcaf904a3171212f648fb68d2dce6ac19899aade7e7dfce3642a49386266dae8f4c809a683cb69de95ce0ed5e87da981e3b7c159996ddd61820f55404f2b0b44a901f01aa49013c695614a6616f0e853eaa9008707cca1980e3ef33162a0d0994d09d9fafa1f49f055388ba1be56fb1eabf123d75ed777180eb01c6c5eb07ffedfa669cf44ab40f69ee71df29f06af92cb79dcd51b59b2fee91927c0a60ffa74bbad63b0ed180633ca22f9fe37cd0bc96c2e57cfb1338d43857e12af2151e18b0f9d3af9598d671db2321f26fc7a1b1f5722e76a12a6f58126688b71d0faa718fdfaab1a5d05513594dc5929dd135b09a63ca14e9a0d91cd1ed021dd7599a7cc994e5fd3864871269a583cbdbc767b68674acda4f4778bd2e2e4c379065d6119427f66e9df996b96472a40c45adb4455504abd39fc1f20921696b711f047c259a07ef0902c527df1d07e82065de62435ec4c45046bbc315cd64ec0c25425a19af7a91be18b348c8a036670715a34bd8ce45ec040e2cee42b8e56b85dd9decf23576f950326be4610290f1f76086dfa2cfd572bfffe106828397d26f21fd6e51a01e931854a90ba1f80bb31d00dccf776a5ff63ce96b876fd6fb986d170b826c158d4338b02bb85358642add86f1291beb3bb9b67db984f25006ff399f518442468f82d42e7aa14b689330e4670395e081b7ed35a624ade1fd736a3bdc8f8cbdc9ba411c8b2b87f9943e1688d76e85384c0c9b9e5341bbf3a75704cd0fbf7f0fdafa0f6175236ee3cd886cc7b94f98b0a1b33f80e2b1b4b6c764fc301a9c164604f5bb2b2101d62523ffc990f9bd2e563ec23f81221b20d49c7dbe87a1ccebd10d58c8676758ceba5dc8cdbee90cee73a2492778a6f7817f0b45c9ed2e8251db244fdf5541c4cad79f98d2c90db7360a2db28c92e71041fd81f7e5f6ea103a2a33efd61c08011e6fd9973e34de3082adfb302604941ec28b85e73ec9480de5644808fea5ddde0b8cc25eb6b45287bc6d2b28cbb925279d393e5a2aefc98df1171651d8ae0132c9ede1c1e5292a0a4bb0fae45cd389caa98fdcfb0f3b4566aae09a58f2fc072687e9832d124eb7ac4b2380af373d30c300c0507569089ef586363120bb313629b39616c94a7495b17174820870b18be57c814a553f89d664c1278f4c65e55037c40d048cf699014f4cb1a9ce0aa5cbfb1da712261ca1ea933af8ea23c077e6aa2d8a7a1f489a4e08837146ba3317afdf15fce8aaff5d24c01d839b99b7c5713cb1e5f1af510e9ae2c8a7dfd0227e1633ceec410a0af1ce89dcd0121dbc8e580eef5f056a184ad44c5399eff7401cd8cb17ebd4c5a46376394932278def3fb7dde763c2ecef536c94e5b4a9350d0cd2cb20c3712ee493523e79f1e32479fd240a899fca30528b76a930c1ec8810d89007b44c85b4310726985bebcf8efdb17d956ca29a90190f1815de153f9194db678e955de51c9a2a593a1961b0c3e7e768e91759257a52effac7117272ebd639eaba1c039d1503e9c619f3b80304dd9e2b2c30e5157b3aa78c6c4543de7c810c09fe19c1806ec8d3298e0d166bebeb95d153f4b2e628aef4106fcc870485c113b9a29dd5e17fec575acd185d6c561ba83b1ec3e3845471b9adbc70bf36da199a7626f37849eee06cabb028cc9c9bfb4380ed58f1eb0b9b03affce01a93529edfa978e38bdcc3f1b916bf1e60f1b75fa775a68574b3a1838e6f65adec7b4e059536385df2a88bd91dd6be6f0a04898a4ed19ca3c05b44f8f14b8849a7a46fb7600d66080a97af263c9bb0d363b0c3a419d9ae778de4c3e81038a945571bf69292d03f21f18ad959611dfe79261e3d3772b9721b58bb9cd1edb115a7458a7c7d0d0f062255b44f6a1c7debdf28c34a99d76bb3a8fdc5833e2df311c9ee9d60d86669d5bb0de024b7800e374cdf9bd178883391e79cee93bd808075b18dc5a3281b59d11445274f314cea97a6fda7bfb6f83d6c38b39f2bf38109cc429a66dc07a68db79f0e39c4de481e6ee4ff0b9cc069d23a33f8054087e1bbf761d29ba740c73f9d946b1808ac8597e9f5ca3e53c98589d7025eaa245e3fc29a31641a24cf0f878ba26e1eb3fea84f8de84885321377d2e81e4ea2fa9a73009f654fdb2607a1819f89e4cb6535c67b27595cc460fe0f6ffcc50d75aff9fa88ef49c25bf0e07de4f09a4b5289275e4981db6ce40b35496fb7a3e3de7a2dc6f602b3235c2b4a093dda358d879f3023", 0x1000, 0x20}, {0x1, 0x1000000, &(0x7f00000014c0)='+%\x00', &(0x7f0000001500)="b1f68b65c54efc997c9a1155fcd577569df934cf95ec4d8b7130ade017c8eecdb989be16ba99d76251ad8b9104", 0x2d, 0x20}]})
ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000001680)={@local, 0x13})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000016c0)={'vxcan0\x00', <r4=>0x0})
shutdown(r3, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000001700)={0xffffffffffffffff, 0x0, 0x1, 0x2, 0x5, 0x0, [{0x4, 0x9, 0xe, '\x00', 0x1}, {0x6, 0x1ff, 0xba6, '\x00', 0x200}, {0xfffffffffffffbff, 0x20c0, 0xd}, {0x515, 0xc, 0x6, '\x00', 0x1}, {0x6, 0x9, 0x6, '\x00', 0x4}]})
sendto$llc(r3, &(0x7f0000001840)="43769198115d8e55eefcd957ade4f19907c30f0ba6188f0e2ce1951ec60230f75b52cd0f136bc9a8a266523221aa6a8b766f2b62de61deceba9a9726c6df892a97bd17f324cd62825664555c57365907d008cb64eb22a578aae4078ecb7dd941f579a201434d94f516db5a4f88eb48244e93262157d371e6a295e32e7878cac514e7539b6018b907f8a5f060d94c0fd11986864f755e79c3dc5bc3cd59a9eca1d98b1a48bf58bbe3079fc4d1", 0xac, 0x84, &(0x7f0000001900)={0x1a, 0x305, 0xa, 0x0, 0x8, 0x0, @remote}, 0x10)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000001940)={"f707450ca305d2980cf831d484ce2c18", 0x0, <r5=>0x0, {0x9, 0x6}, {0x8, 0x40}, 0x9, [0x2, 0xf979, 0x6cb, 0x0, 0x2, 0x8, 0x401, 0x691, 0x0, 0x2, 0xffffffffffffffff, 0x3, 0x14000000000, 0x3, 0x5, 0xdf]})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001a40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r6=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000001c40)={"01eb7e6624ac3ff28acf607254a01b4c", r5, r6, {0x9, 0x3}, {0x400, 0xfffff874}, 0xe7, [0x2, 0x100, 0xff, 0x128, 0x7e9, 0x2000000000000, 0x2, 0x6, 0x3, 0x0, 0x8, 0x49, 0x6499, 0x4, 0x1000, 0x793]})
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4044884)
ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000001e40)=0xffff)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001ec0), 0xffffffffffffffff)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r7, &(0x7f0000002080)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f00)={0x134, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55b8e609}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xf8, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x82}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x78c15cec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa9}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x81}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38d38fe5}]}, {0x4}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdb8ad2f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e79801c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dbba6f8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x76d946a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1349568a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r9 = accept4$nfc_llcp(r1, &(0x7f00000020c0), &(0x7f0000002140)=0x60, 0x80800)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002180)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8, '\x00', r4, r3, 0x4, 0x0, 0x3}, 0x50)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r11, 0x8010661b, &(0x7f0000002200))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)=@ipv6_getaddrlabel={0x24, 0x4a, 0x800, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x80, 0x0, r4, 0x80000001}, [@IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x8850}, 0x20004000)
r12 = socket$nl_crypto(0x10, 0x3, 0x15)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r12, 0x8983, &(0x7f0000002340)={0x6, 'ipvlan0\x00', {0x4f}, 0x1})
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_LIST(r13, &(0x7f0000002640)={&(0x7f0000002380), 0xc, &(0x7f0000002600)={&(0x7f00000023c0)={0x224, r8, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0xc4, 0x8, 0x0, 0x1, [{0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6896feaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc55bd51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcdd9910}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7833181a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c6f29ae}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x78}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x460b6f86}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e3425c6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49a55535}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b5210b7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x130, 0x8, 0x0, 0x1, [{0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f344cb6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f05b555}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2eb78929}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28f27bdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x79247ba9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ef607c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fea570}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x670dd9a9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x29832605}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x659f86e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2422b10f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x42f006c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xcc}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x166ab933}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7b0f540b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a3a2c5b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x482dd793}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x72}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7363aa03}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dc29936}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f41cf87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x68e85372}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}]}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x40040}, 0x8084)
close(r10)
setsockopt$SO_TIMESTAMP(r9, 0x1, 0x3f, &(0x7f0000002680)=0x3, 0x4)

616.424983ms ago: executing program 6 (id=5956):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x8905, &(0x7f0000000100))
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_newnexthop={0x24, 0x68, 0x109, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_OIF={0x8, 0x10}]}, 0x24}}, 0x0)

589.829755ms ago: executing program 2 (id=5957):
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x4}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'geneve0\x00', &(0x7f0000000000)=@ethtool_sfeatures}) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'geneve0\x00', &(0x7f0000000000)=@ethtool_sfeatures})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xffffd000) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0xffffd000)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4)
getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0))

562.710299ms ago: executing program 3 (id=5958):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @private1}, 0x1c)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001800))
pread64(r0, &(0x7f0000000240)=""/122, 0x27, 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', <r2=>0x0, 0x2f, 0x64, 0x40, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0xdebc, 0x8}})
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@remote, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x7, 0x4, 0x480, 0xff, 0x1000000, r2})
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'wg0\x00', {0x1000}, 0x2b1})
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
sendto$inet6(r1, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @private1}, 0x1c) (async)
getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000001800)) (async)
pread64(r0, &(0x7f0000000240)=""/122, 0x27, 0xffffffffffffffff) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x64, 0x40, 0x0, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10, 0x10, 0xdebc, 0x8}}) (async)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={@remote, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x7, 0x4, 0x480, 0xff, 0x1000000, r2}) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x6, 'ip6erspan0\x00', {}, 0x105}) (async)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'wg0\x00', {0x1000}, 0x2b1}) (async)

498.34539ms ago: executing program 6 (id=5959):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x8054}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0)

497.080697ms ago: executing program 5 (id=5960):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="e9ac670998cab76c0f74d5cb5eeeb24c964413e8b11e21d2636fc279bc0e89cf8cb0d072805349f04c71ba9ba9dd099cfebfce702196c66f39a556a70b8c162c391e12c57a49250c27dae304318c0ff17dd359b6cdbad36782c2f5c47e1121f31439b3ea8cc2e2379c085087b136ba7c54c11aaf92c84a049238ed4f494b3f81d7b1e4366819b349e6e74ed6ef53d7d12141f05185092b6a0ae0fe0aa31de79fb05b7a9b01ac4acf56a288c1df37f66a929d1effd54ec918c07fb0d04765892b29d34e40696a370c429bd2", @ANYBLOB="42bedb948d6dcdb71439877d9cf6c6d5046c43894af551f71e5ff10b739dc9c1935b359380663b644cc2a88d726aad596003d2b2e7963e4fff23d9095364c283ddb8487a69993a2b", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8, @ANYBLOB="000000000062bf85e4012287ce95c66a9e6baa66b7000000000000b74cf58f35c7314a210000000800000000", @ANYRES32], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1d, 0x2, 0x1)
shutdown(r3, 0x2)
sendmsg$alg(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40081}, 0x40000)
ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000300)="c35de244e36a3b052c5f020a720ed98d2fd5ee9aedc906dade559d66c91e5191078bdb09d9f23833d73d69805bd04817c50ed849668e4d67824920549bf5a609bef7aefc7dd964c863479ee882e0291d7d6045cd24cfdb6e43426ab1f94784dd74762bc1f850610037a970af6944abc8fa3b369d7016db296f06afd8bf308b507b381649dee8c1e5e70296c42da6dd28d34123a28cfdc929f19a85af0860048e3fd8")
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000001c0)={'nr0\x00', 0x400})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r7 = socket(0x5, 0x80f, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0xc, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0x2)
close(r6)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
r9 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x4)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r11, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="ac009d742eb1010027bd7000fbdbdf25ff010000000000000000000000000001fe8000000000000000000000000000bb4e21201d000000", @ANYRES64=r4, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYRES32=r11], 0xac}, 0x1, 0x0, 0x0, 0x4000840}, 0x20004040)

486.050426ms ago: executing program 3 (id=5961):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x4a}}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48000}, 0x8482)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x6, [{0x0, 0x9}, {0x9, 0x100}, {0x6, 0x80000000}, {0x8001, 0x2}, {0x7fff, 0x5}, {0xff}]}})

406.321259ms ago: executing program 6 (id=5962):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0xd8, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x94, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x7c, 0x1, [@m_vlan={0x78, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x49, 0x6, "dfcbe56315373395564dd53dac806cb38e1f7fea5713ff518cdde6e8611a50e6682d3078bc3f3c3acd4e05285258f39f0396baca278ff66b4acdc2a9dbac14df80630c12cb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x4060884}, 0x4008010)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm], 0x4)
sendmmsg$inet6(r1, &(0x7f00000006c0)=[{{&(0x7f0000000000)={0xa, 0x40, 0x0, @private0={0xfc, 0x0, '\x00', 0xfe}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="18", 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffb, @remote, 0x5}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000140)='.', 0x1}], 0x1}}], 0x2, 0x0)
shutdown(r1, 0x1)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
writev(r3, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5c50538eea153", 0xc8}, {&(0x7f00000004c0)="7ee25c099579d92f8da721f68a8100b6adf04e0cd543f7d26019d57e6a3ecf7ef34486da35c482845d517dc801cca9e4f248b15413a7e252b0", 0x39}], 0x2)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000009c0)={0x0, @in6={{0xa, 0x4e23, 0xab9, @local, 0x8}}}, &(0x7f0000000100)=0x84)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(r3, 0x800454d3, &(0x7f00000000c0))
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})

301.931194ms ago: executing program 6 (id=5963):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000340)=ANY=[], 0x78)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000280)=0x4, 0x4)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2800000068000ff00000000000000000020000000000000004000b00080001000000000004000400ec04dc01a1259d4719e17334a15ca645a37b253a4fd5905f66fd6f834e14da38ee5257737cb68db7ac642e3ec0b86a7e61a47ace5babeb7e01c2f7c0b85c187898df449242fbc4f57ad861cd23d31b57479abe6862c54470bcdf586c18903ccd5eb46adeaad652a63263311c51b7f38dff8d1855c0a9252fa69e9268d183cb79c06f4fe535b33ee7bf496a2918877ddcaa1887cf2ead3899543433de3a3d4a0a85d959035917fa2b64e1b0c05abad96c554ef6e2aa98410a299ecaec01"], 0x28}}, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0xa00, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWSET={0x10c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_USERDATA={0xb3, 0xd, 0x1, 0x0, "d57cc139de47065900ce1124beae35565b20471293c0afd4e1fc839b59637d5b53717409442d60e61a4256a02366042b90e76a220f11fc6cd795b39b4b6d1782730f2746a485129176deb4dd9f85ec83069b4d5b353d41aac63e332575902bd057588ed28d119b4c01f1f27e728f3417ff1b812a0e1730ccba109a5fb6fc69e64e9273a1236240dd4a1b15cef0748f7ca1911bd392c928d782645f520d2d46717fcd1de8f2ad718c6f13d166a66e1e"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x6, 0x3, "6f8b"}, @NFTA_MATCH_NAME={0x9, 0x1, 'icmp\x00'}]}}}]}], {0x14, 0x10}}, 0x164}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl1\x00', <r4=>0x0, 0x29, 0x80, 0x8, 0xd, 0x19, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x20, 0x7, 0x3, 0x9d1b}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl0\x00', <r5=>r4, 0x4, 0x3, 0xc, 0xfffffffd, 0x68, @remote, @local, 0x40, 0x40, 0x6, 0x8}})
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = accept4$x25(0xffffffffffffffff, &(0x7f0000000680)={0x9, @remote}, &(0x7f00000006c0)=0x12, 0x80000)
ioctl$SIOCX25GCALLUSERDATA(r7, 0x89e4, &(0x7f0000000700)={0x9, "2c99793840ad86f7ba65ef3699e98fd87e25a3ded16feb77e122e454eac9abedb5ad1a782586c608bbfad7ff7feb3c27e143d30ae750b560b759c73ee3bc49a7fe866d19233d78b4cb30f710958343053851f63b9fd92128440c6ff2645d50c42939edf87c7e4f85010e3a61a62e2d99ad5ab8441881199636bfe7a995ebf1ad"})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000640)={'sit0\x00', &(0x7f00000002c0)={'gre0\x00', r5, 0x10, 0xff20, 0x7, 0x3, {{0x14, 0x4, 0x0, 0x3, 0x50, 0x68, 0x0, 0x4, 0x29, 0x0, @broadcast, @remote, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x1b, 0x3d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @remote]}, @ssrr={0x89, 0x1b, 0xe9, [@local, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b70800000000000e7b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

221.380479ms ago: executing program 4 (id=5964):
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, 0x2c, 0x800, 0x90, 0x25dfdbff, {0x7}, [@generic="18c7f7a1bd33c437d78b64372bc6157d3f92f1d63e2923a642d6eab9a5d3b1c8561779b995f3083fde0ddd24c34ddfc53b5679d47de92800711b3037b048a4b23831eb13", @typed={0x8, 0x57, 0x0, 0x0, @fd}, @generic="2231fc04ef3bf203bf7ced843b"]}, 0x70}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000800)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={<r3=>0x0, @in6={{0xa, 0x4e21, 0x17b, @empty, 0x7fffffff}}, 0x7ff, 0x4, 0xf, 0x20000000, 0x7}, &(0x7f0000000200)=0x98)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={r3, 0x58, &(0x7f0000000280)=[@in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e21, 0x1c9, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}, @in6={0xa, 0x4e23, 0x8000, @empty, 0xd9ec0000}, @in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000340)=0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0)

135.791978ms ago: executing program 4 (id=5965):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$inet(r1, &(0x7f00000006c0)=[{{&(0x7f0000000600)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x2000c844)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
sendto$inet(r1, &(0x7f00000000c0), 0x0, 0x6000000000000000, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000000)=0x6, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0x9, &(0x7f0000000000)=0x6, 0x4)
listen(r3, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r6}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @private=0xa010102}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x440b0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0xfc, 0x0, 0x0, 0x6}, [@RTA_OIF={0x8, 0x4, r6}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}}, 0x0)

70.284486ms ago: executing program 6 (id=5966):
socket$nl_rdma(0x10, 0x3, 0x14)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet(r0, &(0x7f0000003740)=[{{&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f0000000240)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0a0101000000000002"], 0x138}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0, 0x3e}, {&(0x7f0000000d40)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f0000000e40)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)=[{&(0x7f00000011c0)="85a020c09399747b4fd7d8c826065244fe9dddb2287f68215529bd4aef0358cfc1dc387d05d3b32e", 0x28}, {0x0}], 0x2}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={<r3=>0x0, 0xfffffff7}, &(0x7f0000000300)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x1, 0x6}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631149000000000085100000020000008500000005000000950000000000000095e9600500000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async)
getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000430000/0x2000)=nil, 0x2000, 0x0, 0x100010, r6, 0x0) (async)
setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000000240)={0x4, {{0xa, 0x4e24, 0x3e7, @private1={0xfc, 0x1, '\x00', 0x1}, 0xcce}}}, 0x88)
sendmsg$nl_route(r4, 0x0, 0x0) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000001080)) (async)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, 0x0, 0x0) (async)
sendmmsg$inet(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000700)="a3a3b4a71566b630432731235d2c03a663b7b1db36d9c99c63fc40855732d2dcab3e281f659155a727f6bc862ffc18de7bd96b7fb88fa1398c21020a10fc28e4e4b96707b4d59b95b7625580fda35759e5791b1c425ef1ab327ba056978bf5a911fa401b71ae8ecae3732c298e43185b690a2df1fd4582611c6062d3cdf0d41bda71cf188c1b71b7834da30457b9bc81735f85cf39073dcee8d8394393e42a", 0x9f}], 0x1}}, {{&(0x7f00000008c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, 0x0, 0x140}}, {{&(0x7f0000003480)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, 0x0, 0xe0}}], 0x3, 0x8004) (async)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="060429bd7000fcdbdf25050000000500010001000000080005f08c7ef71f00010000000208000500ac1414"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)

69.618772ms ago: executing program 3 (id=5967):
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x114, 0x0, 0x9, 0x801, 0x0, 0x0, {0x2}, [@NFCTH_TUPLE={0x50, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x2c, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x68, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa9}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @remote}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x44}, 0x40)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8200, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000240)={'dummy0\x00', @local})
r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000280)={0x9, @remote}, &(0x7f00000002c0)=0x12, 0x80800)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan0\x00', <r2=>0x0})
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000340)=[{0x0, 0x2, {0x2, 0xf0, 0x2}, {0x0, 0xf0, 0x1}, 0xfd, 0xfe}, {0xdcd6, 0x1, {0x0, 0x1, 0x4}, {0x2, 0x1}, 0x0, 0xfe}], 0x40)
r4 = accept4$x25(r1, &(0x7f0000000380), &(0x7f00000003c0)=0x12, 0x80000)
ioctl$SIOCX25GCALLUSERDATA(r4, 0x89e4, &(0x7f0000000400)={0x30, "6997b3112f532f31119904a429fea491033530e503c4216f66658982bff791d3db3a476c1206d290892b117e42df21f4caa208665e93cc2db6f5890ba004525946bef56fdb6f0e52994d27ffe15f6d828ef295b1c11e3b48ccb84bf30bfec282ef6ed2773b5418ba110f5791806c7b45c4846901e81c02a3bfcc4a455365afb2"})
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f00000004c0)={'sit0\x00'})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20)
ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f00000005c0)={<r6=>r4, 0x2, 0x1000, 0xff})
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000007c0)={'team0\x00', <r7=>0x0})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={0xffffffffffffffff, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000840)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r8=>0x0, 0x43, &(0x7f0000000900)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x51, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b40)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0xf, '\x00', r2, 0xffffffffffffffff, 0x3, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1, <r10=>0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0xffffffffffffffff, <r12=>0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf, '\x00', r2, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50)
r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xef8, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xf}, @alu={0x4, 0x1, 0x8, 0x9, 0xe, 0xfffffffffffffff4, 0x10}, @jmp={0x5, 0x1, 0x7, 0x3, 0x3, 0xffffffffffffffc6, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f00000006c0)='syzkaller\x00', 0x400, 0xa4, &(0x7f0000000700)=""/164, 0x40f00, 0x17, '\x00', r7, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, r8, 0x0, 0x0, &(0x7f0000000e80)=[r9, r10, r11, r12, r13, r14, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x800}, 0x94)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x40010, r13, 0x2d747000)
r15 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000fc0), r6)
sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000001200)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000011c0)={&(0x7f0000001000)={0x1b8, r15, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x9a, 0x3, "dde7f7b76d96bd49b466e971c04a7ef84da5db4007dbc2a6f0a51bb1a62c8d0212a6e283fc547f4ba48bd047bc91557209d97a8f6905f677dbb905652cdde7f0dc9a16ef0376159dbd95fc1671b365b91d8581696cbeef7742314459ad1d9f693e5b704283836f3d04fa2e329cd26ee7c0789d6376ac14d6050759b1d4da5339638900367266d9bb6369729bc5f9a775d861b1056b44"}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff0}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13f}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}]}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7f}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x20000800}, 0x4)
connect$pppl2tp(r6, &(0x7f0000001240)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e22, @loopback}, 0x3, 0x1, 0x3, 0x2}}, 0x26)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000013c0)={&(0x7f0000001280), 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xbc, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x9c, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x10}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xffffffff}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x57ea}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x68}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xbc}, 0x1, 0x0, 0x0, 0x200008b1}, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000001400)=0x8000, 0x4)
getsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000001440), &(0x7f0000001480)=0x8)
getsockopt$netrom_NETROM_IDLE(r6, 0x103, 0x7, &(0x7f00000014c0)=0x9, &(0x7f0000001500)=0x4)
socket$pppl2tp(0x18, 0x1, 0x1)

68.295511ms ago: executing program 5 (id=5968):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r1=>0x0}) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x4}]}], {0x14}}, 0x90}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff4}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x400000000000001, 0x80, 0x0, 0x1bb, 0x400}}]}}}]}, 0x78}}, 0x0) (rerun: 32)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=@newtaction={0x68, 0x30, 0x871a15abc695fb3f, 0x70bd27, 0x1, {}, [{0x54, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x7, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 3 (id=5969):
socket$netlink(0x10, 0x3, 0x10)
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r3, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x0)
connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r3, 0x802)
r5 = socket$netlink(0x10, 0x3, 0x4)
write(r5, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29)
r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r6, &(0x7f0000000080)={{0x3, @bcast, 0xfffffffd}, [@default, @bcast, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48)
r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
bind$ax25(r7, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
close(r7)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x58, 0x2c, 0x3cc3590e7fd9df2f, 0x4, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x2}, {}, {0x1c, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x73}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x58}}, 0x200448d4)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8)
pipe(&(0x7f0000000600)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10)
getsockopt$bt_hci(r10, 0x84, 0x72, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec)
write(r9, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x16, &(0x7f0000000740)=ANY=[@ANYRES8=r1], &(0x7f0000000100)='GPL\x00', 0xdffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x81}, 0x10}, 0x94)

kernel console output (not intermixed with test programs):

842102][T19613] bond0: entered allmulticast mode
[  468.847720][T19618] netlink: 'syz.4.3710': attribute type 10 has an invalid length.
[  468.995642][T19625] 8021q: VLANs not supported on ip6gre0
[  469.781075][T19694] netlink: 'syz.5.3732': attribute type 9 has an invalid length.
[  469.898577][T19702] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  469.939435][T19702] netlink: 'syz.2.3734': attribute type 5 has an invalid length.
[  470.033577][T19712] netlink: 'syz.5.3738': attribute type 1 has an invalid length.
[  470.053549][T19713] Cannot find add_set index 0 as target
[  470.077018][T19717] Cannot find add_set index 0 as target
[  470.128065][T19709] __nla_validate_parse: 4 callbacks suppressed
[  470.128085][T19709] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3738'.
[  470.162974][T19724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.181659][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  470.195828][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  470.203926][ T5834] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  470.211928][ T5834] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  470.226372][ T5834] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  470.234053][T19725] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.256307][T19728] team0: left allmulticast mode
[  470.266704][T19728] team_slave_0: left allmulticast mode
[  470.286074][T19728] team_slave_1: left allmulticast mode
[  470.292968][T19728] team0: left promiscuous mode
[  470.297759][T19728] team_slave_0: left promiscuous mode
[  470.304446][T19728] team_slave_1: left promiscuous mode
[  470.310391][T19728] bridge0: port 3(team0) entered disabled state
[  470.321856][T19728] bridge_slave_0: left allmulticast mode
[  470.327580][T19728] bridge_slave_0: left promiscuous mode
[  470.333383][T19728] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.343931][T19728] bridge_slave_1: left allmulticast mode
[  470.351998][T19728] bridge_slave_1: left promiscuous mode
[  470.357820][T19728] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.372656][T19728] team0: Port device team_slave_0 removed
[  470.382543][T19728] team0: Port device team_slave_1 removed
[  470.389970][T19728] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  470.397345][T19728] batman_adv: batadv0: Removing interface: batadv_slave_0
[  470.406688][T19728] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  470.414956][T19728] batman_adv: batadv0: Removing interface: batadv_slave_1
[  470.424272][T19728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  470.557368][T19722] wlan1 speed is unknown, defaulting to 1000
[  470.592338][T19722] lo speed is unknown, defaulting to 1000
[  470.663833][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3748'.
[  470.701111][T19743] syzkaller0: entered promiscuous mode
[  470.706626][T19743] syzkaller0: entered allmulticast mode
[  470.797563][T19743] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.901020][T19760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3749'.
[  471.056498][T19722] chnl_net:caif_netlink_parms(): no params data found
[  471.190253][T19782] netlink: 'syz.5.3755': attribute type 1 has an invalid length.
[  471.198271][T19782] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3755'.
[  471.207952][T19722] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.216775][T19722] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.224907][T19722] bridge_slave_0: entered allmulticast mode
[  471.233968][T19783] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3756'.
[  471.235316][T19722] bridge_slave_0: entered promiscuous mode
[  471.256924][T19722] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.265097][T19722] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.273785][T19722] bridge_slave_1: entered allmulticast mode
[  471.282271][T19722] bridge_slave_1: entered promiscuous mode
[  471.290947][T19776] wlan1 speed is unknown, defaulting to 1000
[  471.325321][T19776] lo speed is unknown, defaulting to 1000
[  471.363708][T19722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.395585][T19722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.458189][T19792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3758'.
[  471.488820][T19722] team0: Port device team_slave_0 added
[  471.512668][T19722] team0: Port device team_slave_1 added
[  471.554692][T19722] batman_adv: batadv0: Adding interface: batadv_slave_0
[  471.562068][T19722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.589809][T19722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  471.603393][T19722] batman_adv: batadv0: Adding interface: batadv_slave_1
[  471.611218][T19722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  471.638231][T19722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  471.696664][T19722] hsr_slave_0: entered promiscuous mode
[  471.704454][T19722] hsr_slave_1: entered promiscuous mode
[  471.729511][T19722] debugfs: 'hsr0' already exists in 'hsr'
[  471.746296][T19722] Cannot create hsr debugfs directory
[  471.777925][T19802] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3762'.
[  471.925502][T19809] 8021q: adding VLAN 0 to HW filter on device team0
[  471.934437][T19809] team0: Cannot enslave team device to itself
[  471.949886][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5190 ms
[  471.957906][    C1] lec:lec_tx_timeout: lec0
[  471.963682][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  472.024971][T19819] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  472.108022][T19824] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3769'.
[  472.138345][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3770'.
[  472.355717][ T5834] Bluetooth: hci1: command tx timeout
[  472.442137][T19852] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3776'.
[  472.496230][T19722] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  472.544705][T19722] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  472.567127][T19722] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  472.603305][T19722] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  472.817133][T19722] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.856779][T19722] 8021q: adding VLAN 0 to HW filter on device team0
[  472.883155][T17824] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.890364][T17824] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.921412][T19888] netlink: 'syz.2.3785': attribute type 21 has an invalid length.
[  472.934135][ T5825] IPVS: starting estimator thread 0...
[  472.971491][T17824] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.978643][T17824] bridge0: port 2(bridge_slave_1) entered forwarding state
[  473.049256][T19891] IPVS: using max 32 ests per chain, 76800 per kthread
[  473.763205][T19722] 8021q: adding VLAN 0 to HW filter on device batadv0
[  474.272173][T19722] veth0_vlan: entered promiscuous mode
[  474.298523][T19722] veth1_vlan: entered promiscuous mode
[  474.370290][T19722] veth0_macvtap: entered promiscuous mode
[  474.405698][T19722] veth1_macvtap: entered promiscuous mode
[  474.430144][ T5834] Bluetooth: hci1: command tx timeout
[  474.493837][T19722] batman_adv: batadv0: Interface activated: batadv_slave_0
[  474.516401][T19722] batman_adv: batadv0: Interface activated: batadv_slave_1
[  474.549083][T17809] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  474.605479][T17809] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  474.672769][T18728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.677033][T17809] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  474.682157][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.705400][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.729114][T17809] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.924774][T17809] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.939835][T17809] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.019750][T17809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  475.050762][T17809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  475.069206][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.180345][T19977] tipc: MTU too low for tipc bearer
[  475.310599][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.382383][T19989] syzkaller0: entered promiscuous mode
[  475.387911][T19989] syzkaller0: entered allmulticast mode
[  475.795210][T20004] __nla_validate_parse: 6 callbacks suppressed
[  475.795230][T20004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3818'.
[  476.109214][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.196055][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3824'.
[  476.237739][T20032] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3828'.
[  476.249775][T20035] netlink: 'syz.4.3829': attribute type 1 has an invalid length.
[  476.335583][T20030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3826'.
[  476.359282][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.373005][T20035] 8021q: adding VLAN 0 to HW filter on device bond4
[  476.385596][T20041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3826'.
[  476.475268][T20032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3828'.
[  476.509096][ T5834] Bluetooth: hci1: command tx timeout
[  476.611549][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3832'.
[  476.724297][T20065] syzkaller0: entered promiscuous mode
[  476.734439][T20065] syzkaller0: entered allmulticast mode
[  476.848824][T20071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3835'.
[  476.865714][T20072] netlink: 'syz.3.3837': attribute type 83 has an invalid length.
[  476.979468][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  476.987544][    C1] lec:lec_tx_timeout: lec0
[  476.993010][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  477.149534][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.372795][T20087] netlink: 'syz.2.3841': attribute type 21 has an invalid length.
[  477.381365][T20087] IPv6: NLM_F_CREATE should be specified when creating new route
[  477.391517][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.710188][T20105] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3848'.
[  477.719872][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  477.777157][T20103] syzkaller0: entered promiscuous mode
[  477.796260][T20103] syzkaller0: entered allmulticast mode
[  477.909735][T20120] xt_CT: You must specify a L4 protocol and not use inversions on it
[  477.966740][T20119] netlink: 'syz.4.3851': attribute type 9 has an invalid length.
[  478.189154][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.335948][T20147] syzkaller0: entered promiscuous mode
[  478.346536][T20147] syzkaller0: entered allmulticast mode
[  478.400745][T20155] x_tables: ip_tables: icmp match: only valid for protocol 1
[  478.412137][T20155] netlink: 'syz.3.3862': attribute type 1 has an invalid length.
[  478.425813][T20155] netlink: 'syz.3.3862': attribute type 1 has an invalid length.
[  478.435741][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.445576][T20155] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.3862'.
[  478.590160][ T5834] Bluetooth: hci1: command tx timeout
[  478.596197][T20169] netlink: 'syz.4.3867': attribute type 16 has an invalid length.
[  478.606009][T20169] netlink: 'syz.4.3867': attribute type 17 has an invalid length.
[  478.618008][T20171] netlink: 'syz.3.3868': attribute type 83 has an invalid length.
[  478.661167][T20169] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  478.767602][T20179] Bluetooth: MGMT ver 1.23
[  478.773350][T20177] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  478.955022][T20194] x_tables: unsorted entry at hook 1
[  479.145338][T20203] netlink: 'syz.5.3877': attribute type 1 has an invalid length.
[  479.229105][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.471759][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.518360][T20228] : entered promiscuous mode
[  479.795189][T18731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.807326][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  480.182695][T20264] tipc: Enabled bearer <eth:macvtap0>, priority 5
[  480.423967][T20273] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.448590][T20273] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.632453][T20273] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.647233][T20273] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.797759][T20273] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.834824][T20273] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.885450][T20308] __nla_validate_parse: 7 callbacks suppressed
[  480.885470][T20308] netlink: 7 bytes leftover after parsing attributes in process `syz.6.3904'.
[  480.984825][T20273] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  480.995868][T20273] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.199063][T12495] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  481.218078][T12495] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  481.258770][T17824] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  481.269192][T17824] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  481.298872][T17824] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  481.318554][T17824] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  481.370308][T12495] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  481.388784][T12495] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  481.456919][T20326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3914'.
[  481.532344][T20330] tun0: tun_chr_ioctl cmd 1074025675
[  481.537929][T20330] tun0: persist disabled
[  481.723984][T20340] netlink: 128 bytes leftover after parsing attributes in process `syz.6.3920'.
[  481.746095][T20340] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3920'.
[  482.009462][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  482.017551][    C1] lec:lec_tx_timeout: lec0
[  482.022773][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  482.041036][T20353] xt_CT: You must specify a L4 protocol and not use inversions on it
[  482.343489][T20377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3933'.
[  482.359138][    C1] net_ratelimit: 7 callbacks suppressed
[  482.359160][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.384705][T20377] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3933'.
[  482.426067][T20377] ip6t_rpfilter: unknown options
[  482.590273][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.786625][T20411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3942'.
[  482.832016][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  482.838467][T20411] block nbd1: Unsupported socket: should be TCP or UNIX.
[  482.851233][T20415] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3943'.
[  482.903909][T20412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3942'.
[  482.922653][T20412] block nbd1: Unsupported socket: should be TCP or UNIX.
[  482.960956][T20422] IPv6: NLM_F_REPLACE set, but no existing node found!
[  483.103446][T20434] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  483.326334][T20450] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3952'.
[  483.380265][T20457] syzkaller0: entered promiscuous mode
[  483.385786][T20457] syzkaller0: entered allmulticast mode
[  483.391849][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.633355][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.740588][T20479] syzkaller0: entered promiscuous mode
[  484.106816][T20508] H: renamed from dummy0 (while UP)
[  484.182445][T20515] Bluetooth: MGMT ver 1.23
[  484.429106][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  484.468232][T20534] syzkaller1: entered promiscuous mode
[  484.476770][T20534] syzkaller1: entered allmulticast mode
[  484.669875][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.009379][T20568] openvswitch: netlink: Flow actions attr not present in new flow.
[  485.250157][T20584] validate_nla: 3 callbacks suppressed
[  485.250174][T20584] netlink: 'syz.2.3995': attribute type 1 has an invalid length.
[  485.272677][T20584] netlink: 'syz.2.3995': attribute type 4 has an invalid length.
[  485.343842][T20590] netlink: 'syz.3.3997': attribute type 1 has an invalid length.
[  485.469064][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  485.534811][T20607] lo: left promiscuous mode
[  485.560032][T20607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  485.657342][T20619] ipvlan2: entered allmulticast mode
[  485.663663][T20619] batadv_slave_1: entered allmulticast mode
[  485.672930][T20619] batman_adv: batadv0: Adding interface: ipvlan2
[  485.680411][T20619] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  485.708698][T20619] batman_adv: batadv0: Interface activated: ipvlan2
[  485.950549][T20626] netem: change failed
[  486.001576][T20634] netem: change failed
[  486.182335][T20647] __nla_validate_parse: 10 callbacks suppressed
[  486.182354][T20647] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4011'.
[  486.293970][T20647] netlink: 'syz.6.4011': attribute type 2 has an invalid length.
[  486.313608][T20647] netlink: 'syz.6.4011': attribute type 2 has an invalid length.
[  486.331495][T20658] Cannot find del_set index 4 as target
[  486.495043][T20673] nbd: socks must be embedded in a SOCK_ITEM attr
[  486.536750][T20672] delete_channel: no stack
[  486.542323][T20672] delete_channel: no stack
[  486.570391][T20662] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4016'.
[  486.683748][T20680] bond5: option miimon: invalid value (18446744073709551585)
[  486.691832][T20680] bond5: option miimon: allowed values 0 - 2147483647
[  486.720834][T20684] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4021'.
[  486.731115][T20691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  486.743670][T20684] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4021'.
[  486.773366][T20680] bond5 (unregistering): Released all slaves
[  486.912857][T20701] netlink: 'syz.5.4025': attribute type 1 has an invalid length.
[  486.958442][T20705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'.
[  486.970715][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4025'.
[  486.986256][T20701] 8021q: adding VLAN 0 to HW filter on device bond4
[  486.998876][T20707] bond4: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  487.011232][T20707] bond4: entered allmulticast mode
[  487.039629][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  487.047698][    C1] lec:lec_tx_timeout: lec0
[  487.053296][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  487.074252][T20709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4027'.
[  487.278156][T20719] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4031'.
[  487.410402][T20724] netlink: 'syz.4.4032': attribute type 1 has an invalid length.
[  487.549066][    C1] net_ratelimit: 4 callbacks suppressed
[  487.549083][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.561985][T20724] bond5: (slave bridge4): making interface the new active one
[  487.565751][T20732] raw_sendmsg: syz.4.4032 forgot to set AF_INET. Fix it!
[  487.607209][T20724] bond5: (slave bridge4): Enslaving as an active interface with an up link
[  487.795615][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  487.857190][T20747] sctp: [Deprecated]: syz.4.4042 (pid 20747) Use of struct sctp_assoc_value in delayed_ack socket option.
[  487.857190][T20747] Use struct sctp_sack_info instead
[  487.882995][T20745] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4039'.
[  488.075395][T20758] netlink: 'syz.6.4044': attribute type 3 has an invalid length.
[  488.100425][T20756] netlink: 'syz.3.4043': attribute type 1 has an invalid length.
[  488.125272][T20756] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4043'.
[  488.213870][T20767] netlink: 'syz.4.4046': attribute type 1 has an invalid length.
[  488.290519][T20767] 8021q: adding VLAN 0 to HW filter on device bond6
[  488.311097][T20760] bond6: (slave geneve2): making interface the new active one
[  488.326143][T20760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.340908][T20760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.354797][T20760] bond6: (slave geneve2): Enslaving as an active interface with an up link
[  488.376971][T18731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.401900][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.589142][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.598783][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.721639][T18731] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.750276][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  489.296245][T20826] netem: incorrect ge model size
[  489.303193][T20826] netem: change failed
[  490.011185][T20854] x_tables: duplicate underflow at hook 1
[  490.191388][T20864] tunl0: entered promiscuous mode
[  490.371224][T20870] syzkaller0: entered promiscuous mode
[  490.376725][T20870] syzkaller0: entered allmulticast mode
[  490.474275][T20885] x_tables: duplicate underflow at hook 1
[  490.844277][T20910] validate_nla: 5 callbacks suppressed
[  490.844295][T20910] netlink: 'syz.4.4092': attribute type 11 has an invalid length.
[  491.062721][T20916] syzkaller0: entered promiscuous mode
[  491.079488][T20916] syzkaller0: entered allmulticast mode
[  491.097469][T20918] nftables ruleset with unbound chain
[  491.241893][T20927] __nla_validate_parse: 9 callbacks suppressed
[  491.241911][T20927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4097'.
[  491.300233][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'.
[  491.322998][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4097'.
[  491.323970][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4101'.
[  492.079574][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  492.087686][    C1] lec:lec_tx_timeout: lec0
[  492.092758][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  492.759635][ T5886] net_ratelimit: 22 callbacks suppressed
[  492.759650][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.989109][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  492.998108][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.069838][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.109067][T20960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.166937][T20964] IPv6: NLM_F_CREATE should be specified when creating new route
[  493.220833][T20966] ieee802154 phy1 wpan1: encryption failed: -22
[  493.385007][T20974] IPv6: addrconf: prefix option has invalid lifetime
[  493.400915][T20974] netlink: 88 bytes leftover after parsing attributes in process `syz.6.4114'.
[  493.653780][T20990] pim6reg: entered allmulticast mode
[  493.676964][T20991] pim6reg: left allmulticast mode
[  493.703616][T20994] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4121'.
[  493.735705][T20997] syzkaller0: entered promiscuous mode
[  493.742126][T20997] syzkaller0: entered allmulticast mode
[  493.755239][T20999] netlink: 'syz.2.4122': attribute type 1 has an invalid length.
[  493.799661][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  493.815637][T20999] netlink: 'syz.2.4122': attribute type 3 has an invalid length.
[  493.820671][T21003] x_tables: unsorted underflow at hook 1
[  493.839100][T20999] netlink: 172 bytes leftover after parsing attributes in process `syz.2.4122'.
[  493.851516][T20999] NCSI netlink: No device for ifindex 813332851
[  493.957870][T21010] netlink: 'syz.2.4126': attribute type 32 has an invalid length.
[  493.975932][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4126'.
[  494.029117][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.038198][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.070730][T21010] bond3: Setting coupled_control to off (0)
[  494.274614][T21021] wlan1 speed is unknown, defaulting to 1000
[  494.300435][T21021] lo speed is unknown, defaulting to 1000
[  494.336440][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803163d000: rx timeout, send abort
[  494.347077][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803163d000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  494.432820][T21023] syzkaller0: entered promiscuous mode
[  494.438731][T21023] syzkaller0: entered allmulticast mode
[  494.470022][T21023] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4129'.
[  494.779366][T21035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  494.840843][T21038] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4133'.
[  495.114865][T21053] erspan0: entered promiscuous mode
[  495.151779][T21053] gretap0: entered promiscuous mode
[  495.174309][T21056] netlink: 'syz.5.4140': attribute type 8 has an invalid length.
[  495.301439][T21064] netlink: 'syz.2.4142': attribute type 9 has an invalid length.
[  495.348205][T21069] netlink: 'syz.6.4143': attribute type 8 has an invalid length.
[  495.827448][T21102] netlink: 'syz.3.4157': attribute type 39 has an invalid length.
[  495.904532][T21112] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode
[  495.923669][T21112] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode
[  496.177491][T21126] syz_tun: entered allmulticast mode
[  496.282553][T21125] syz_tun: left allmulticast mode
[  496.287957][T21132] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode
[  496.301784][T21132] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode
[  496.375319][T21136] __nla_validate_parse: 6 callbacks suppressed
[  496.375335][T21136] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4165'.
[  496.481832][T21147] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4168'.
[  496.763338][T21164] netlink: 'syz.4.4173': attribute type 1 has an invalid length.
[  496.825323][T21170] lo: entered allmulticast mode
[  496.849118][T21170] lo: left allmulticast mode
[  497.099481][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  497.107574][    C1] lec:lec_tx_timeout: lec0
[  497.112700][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  497.265821][T21199] vlan2: entered allmulticast mode
[  497.271719][T21199] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode
[  497.641320][T21209] netlink: 'syz.3.4187': attribute type 1 has an invalid length.
[  497.727108][T21209] 8021q: adding VLAN 0 to HW filter on device bond0
[  497.907054][T21228] net_ratelimit: 23 callbacks suppressed
[  497.907072][T21228] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.922065][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.949899][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.990175][T21232] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4192'.
[  498.025434][T21237] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4195'.
[  498.025552][T21232] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4192'.
[  498.048021][T21237] openvswitch: netlink: Missing key (keys=40, expected=100)
[  498.139674][T21237] tipc: Started in network mode
[  498.152943][T21237] tipc: Node identity ac14140f, cluster identity 4711
[  498.186742][T21237] tipc: New replicast peer: 255.255.255.255
[  498.189563][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.201540][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  498.210357][T21237] tipc: Enabled bearer <udp:syz2>, priority 10
[  498.223866][T21243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4197'.
[  498.279298][T21250] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4197'.
[  498.562031][T21273] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4206'.
[  498.700266][T21288] netlink: 'syz.2.4209': attribute type 13 has an invalid length.
[  498.720847][T21288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4209'.
[  498.737584][T21288] netlink: 'syz.2.4209': attribute type 13 has an invalid length.
[  498.739906][T21293] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  498.746917][T21288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4209'.
[  498.992380][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.003257][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.022958][T21305] bond5: (slave bond_slave_1): Device is not bonding slave
[  499.066105][T21305] bond5: option active_slave: invalid value (bond_slave_1)
[  499.077779][T21305] bond5 (unregistering): Released all slaves
[  499.100290][T21322] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  499.127551][T21316] syzkaller0: entered promiscuous mode
[  499.133629][T21316] syzkaller0: entered allmulticast mode
[  499.150108][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  499.201232][T21322] pim6reg: entered allmulticast mode
[  499.343390][ T5886] tipc: Node number set to 2886997007
[  500.094354][T21402] netem: change failed
[  501.126166][T21424] tunl0: left promiscuous mode
[  501.345950][T21424] veth0_to_bond: left allmulticast mode
[  501.554455][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  501.614908][T21424] bridge2: left promiscuous mode
[  501.620499][T21424] bridge2: left allmulticast mode
[  501.627252][T21424] bond3: left promiscuous mode
[  501.633098][T21424] bond3: left allmulticast mode
[  501.640199][T21424] mac80211_hwsim hwsim29 syzkaller0: left promiscuous mode
[  501.647510][T21424] mac80211_hwsim hwsim29 syzkaller0: left allmulticast mode
[  501.656339][T21424] vlan2: left allmulticast mode
[  501.662751][T21424] veth0_to_bridge: left allmulticast mode
[  501.677200][T21424] batman_adv: batadv0: Interface deactivated: ipvlan2
[  501.691446][T21424] ipvlan2: left allmulticast mode
[  501.696521][T21424] batadv_slave_1: left allmulticast mode
[  501.775692][T12491] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  501.815012][T12491] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.833715][T12491] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  501.879522][T12491] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.893608][T21443] syzkaller0: entered promiscuous mode
[  501.903715][T21443] syzkaller0: entered allmulticast mode
[  501.943534][T12491] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  501.963931][T12491] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  501.979638][T12491] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  501.988539][T12491] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  502.062200][T21471] netlink: 'syz.5.4261': attribute type 1 has an invalid length.
[  502.075893][T21441] wlan1 speed is unknown, defaulting to 1000
[  502.084845][T21441] lo speed is unknown, defaulting to 1000
[  502.119464][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  502.127540][    C1] lec:lec_tx_timeout: lec0
[  502.132870][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  502.388096][T21487] netlink: 'syz.5.4267': attribute type 9 has an invalid length.
[  502.402957][T21485] netlink: 'syz.2.4266': attribute type 1 has an invalid length.
[  502.465552][T21491] netlink: 'syz.5.4267': attribute type 9 has an invalid length.
[  502.757753][T21516] __nla_validate_parse: 20 callbacks suppressed
[  502.757773][T21516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4275'.
[  502.900805][T21516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4275'.
[  502.976783][T21516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4275'.
[  502.993912][T21516] netlink: 'syz.2.4275': attribute type 1 has an invalid length.
[  503.045453][T21531] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4280'.
[  503.150018][ T5886] net_ratelimit: 24 callbacks suppressed
[  503.150037][ T5886] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.389494][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.398008][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  503.736015][T21570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4294'.
[  503.755833][T21570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4294'.
[  503.785286][T21565] netlink: zone id is out of range
[  503.793888][T21571] netlink: 'syz.3.4295': attribute type 142 has an invalid length.
[  503.803586][T21565] netlink: zone id is out of range
[  503.808717][T21565] netlink: zone id is out of range
[  503.817982][T21565] netlink: zone id is out of range
[  503.828545][T21576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4298'.
[  503.865714][T21565] netlink: zone id is out of range
[  503.894403][T21565] netlink: zone id is out of range
[  503.900957][T21565] netlink: zone id is out of range
[  503.916205][T21579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4299'.
[  504.241337][T21595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4306'.
[  504.267415][T21599] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4304'.
[  504.282520][T21595] netlink: 'syz.3.4306': attribute type 10 has an invalid length.
[  504.303961][T21595] team0: Port device H added
[  504.602317][T21621] netlink: 'syz.6.4311': attribute type 13 has an invalid length.
[  505.208177][T21643] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  505.507009][T21661] netlink: 'syz.6.4324': attribute type 58 has an invalid length.
[  505.552801][T21642] tipc: Disabling bearer <eth:syzkaller0>
[  505.622844][T21663] mac80211_hwsim hwsim29 syzkaller0: entered promiscuous mode
[  505.631203][T21663] mac80211_hwsim hwsim29 syzkaller0: entered allmulticast mode
[  506.176166][T21682] netlink: 'syz.6.4331': attribute type 13 has an invalid length.
[  507.348458][T21713] lo: entered promiscuous mode
[  507.359762][T21713] validate_nla: 2 callbacks suppressed
[  507.359780][T21713] netlink: 'syz.4.4339': attribute type 2 has an invalid length.
[  507.601999][T21735] netlink: 'syz.3.4344': attribute type 8 has an invalid length.
[  507.937324][T21767] __nla_validate_parse: 4 callbacks suppressed
[  507.937345][T21767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4354'.
[  507.958979][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms
[  507.967054][    C1] lec:lec_tx_timeout: lec0
[  507.972728][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  508.070364][T21772] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4355'.
[  508.190996][T21778] netlink: 'syz.6.4358': attribute type 3 has an invalid length.
[  508.245201][T21787] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4358'.
[  508.270583][ T5906] net_ratelimit: 21 callbacks suppressed
[  508.270599][ T5906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.349629][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.395676][T21798] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4363'.
[  508.476355][T21801] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4364'.
[  508.525721][T21806] macvlan0: entered promiscuous mode
[  508.574985][T21808] netlink: 'syz.6.4366': attribute type 1 has an invalid length.
[  508.590990][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.600402][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.610736][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.812272][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4369'.
[  508.873892][T21824] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4372'.
[  508.883744][T21824] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4372'.
[  508.893587][T21824] sctp: [Deprecated]: syz.3.4372 (pid 21824) Use of int in max_burst socket option.
[  508.893587][T21824] Use struct sctp_assoc_value instead
[  508.923273][T21824] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4372'.
[  508.954063][T21826] netlink: 'syz.4.4373': attribute type 1 has an invalid length.
[  509.018548][T21826] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  509.136267][T21833] netlink: 'syz.4.4374': attribute type 1 has an invalid length.
[  509.144016][T21834] netlink: 'syz.2.4375': attribute type 1 has an invalid length.
[  509.144039][T21834] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4375'.
[  509.144053][T21834] netlink: 'syz.2.4375': attribute type 1 has an invalid length.
[  509.144065][T21834] netlink: 'syz.2.4375': attribute type 8 has an invalid length.
[  509.204496][T21833] 8021q: adding VLAN 0 to HW filter on device bond7
[  509.227497][T21833] bond7: (slave geneve3): making interface the new active one
[  509.237794][T21833] bond7: (slave geneve3): Enslaving as an active interface with an up link
[  509.253182][T21833] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  509.389923][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.622173][T21864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  509.629487][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.640514][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.645345][T21864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  510.430042][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  510.505937][T21907] netlink: 'syz.5.4399': attribute type 10 has an invalid length.
[  510.527212][T21907] bridge0: port 2(bridge_slave_1) entered disabled state
[  510.539887][T21907] bridge_slave_1: left allmulticast mode
[  510.545563][T21907] bridge_slave_1: left promiscuous mode
[  510.570429][T21907] bridge0: port 2(bridge_slave_1) entered disabled state
[  511.089928][T21950] gtp0: entered promiscuous mode
[  511.095089][T21950] gtp0: entered allmulticast mode
[  511.332257][T21967] netlink: 'syz.2.4416': attribute type 11 has an invalid length.
[  511.355302][T21970] netlink: 'syz.2.4416': attribute type 11 has an invalid length.
[  511.524603][T21977] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  511.982738][T22006] netlink: 'syz.5.4429': attribute type 11 has an invalid length.
[  512.896830][T22059] netlink: 'syz.6.4446': attribute type 1 has an invalid length.
[  512.964993][T22059] netlink: 'syz.6.4446': attribute type 3 has an invalid length.
[  512.979476][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  512.987508][    C1] lec:lec_tx_timeout: lec0
[  512.993011][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  513.033565][T22059] __nla_validate_parse: 19 callbacks suppressed
[  513.033585][T22059] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4446'.
[  513.067060][T22088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  513.210168][T22103] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR
[  513.503356][T22092] IPv6: Can't replace route, no match found
[  513.550675][ T5887] net_ratelimit: 11 callbacks suppressed
[  513.550693][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.602055][T22123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4460'.
[  513.640236][T22123] xt_l2tp: v2 doesn't support IP mode
[  513.704826][T22127] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4461'.
[  513.789164][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.798546][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  513.902906][T22140] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4466'.
[  513.995035][T22147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.004556][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.005297][T22145] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4469'.
[  514.032368][T22149] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4470'.
[  514.126599][T22159] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4472'.
[  514.314113][T22175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'.
[  514.324109][T22175] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4477'.
[  514.334216][T22175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4477'.
[  514.356215][T22178] netlink: 'syz.4.4478': attribute type 2 has an invalid length.
[  514.358194][ T9831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.391098][T22175] bridge0: port 1(veth0_to_bridge) entered blocking state
[  514.413293][T22175] bridge0: port 1(veth0_to_bridge) entered disabled state
[  514.421506][T22175] veth0_to_bridge: entered allmulticast mode
[  514.442896][T22175] veth0_to_bridge: entered promiscuous mode
[  514.533623][T22188] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21
[  514.541365][T22189] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  514.589660][ T5887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.657673][ T5887] IPVS: starting estimator thread 0...
[  514.750465][T22197] IPVS: using max 36 ests per chain, 86400 per kthread
[  514.830730][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  514.839379][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.005194][T22209] bond0: Caught tx_queue_len zero misconfig
[  515.108092][T22211] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  515.120132][T22211] bond4 (unregistering): Released all slaves
[  515.344788][T22221] syzkaller0: entered promiscuous mode
[  515.351264][T22221] syzkaller0: entered allmulticast mode
[  515.726042][T22243] bridge5: the hash_elasticity option has been deprecated and is always 16
[  515.730313][T22245] netlink: 'syz.3.4502': attribute type 21 has an invalid length.
[  515.903477][T22256] block nbd6: NBD_DISCONNECT
[  515.914533][T22257] nbd: nbd6 already in use
[  516.000144][T22262] tipc: Enabling of bearer <udp:syz1> rejected, max 3 bearers permitted
[  516.095913][T22264] bond2: option lp_interval: invalid value (0)
[  516.111450][T22264] bond2: option lp_interval: allowed values 1 - 2147483647
[  516.135333][T22264] bond2 (unregistering): Released all slaves
[  516.223643][    T9] IPVS: starting estimator thread 0...
[  516.319607][T22274] IPVS: using max 29 ests per chain, 69600 per kthread
[  516.512820][T22276] bridge0: port 2(bridge_slave_1) entered disabled state
[  516.520252][T22276] bridge0: port 1(bridge_slave_0) entered disabled state
[  516.620988][T22279] sock: sock_timestamping_bind_phc: sock not bind to device
[  516.855729][T22276] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  516.891360][T22276] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  517.305563][T18725] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  517.339657][T18725] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  517.376844][T18725] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  517.443944][T18725] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  518.004017][T18725] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  518.012616][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  518.020671][    C1] lec:lec_tx_timeout: lec0
[  518.026363][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  518.040817][   T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  518.048885][T18725] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  518.204273][T22351] netlink: 'syz.5.4532': attribute type 1 has an invalid length.
[  518.297280][T22358] syzkaller1: entered promiscuous mode
[  518.303553][T22358] syzkaller1: entered allmulticast mode
[  518.326306][T22358] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  518.402559][T22356] syzkaller0: entered promiscuous mode
[  518.408696][T22356] syzkaller0: entered allmulticast mode
[  518.609968][ T5886] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  518.761175][T22329] delete_channel: no stack
[  518.834289][T22379] netlink: 'syz.4.4541': attribute type 1 has an invalid length.
[  518.842865][T22379] __nla_validate_parse: 26 callbacks suppressed
[  518.842883][T22379] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4541'.
[  518.989742][T21899] Bluetooth: hci5: command 0x0406 tx timeout
[  519.072829][T12569] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  519.825409][T22385] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4543'.
[  520.136262][T22387] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4544'.
[  520.176903][T22390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4545'.
[  520.220984][T22390] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4545'.
[  520.391521][T22407] openvswitch: netlink: Key type 346 is out of range max 32
[  520.416082][T22409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4548'.
[  520.537056][T22419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4552'.
[  520.597414][T22419] hsr_slave_0 (unregistering): left promiscuous mode
[  520.660070][T22427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4554'.
[  520.841384][T22441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4561'.
[  520.906605][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4562'.
[  521.084915][T22461] gre0: entered promiscuous mode
[  521.109195][T22461] gre0: entered allmulticast mode
[  521.283023][T22474] gtp1: entered promiscuous mode
[  521.316228][T22474] gtp1: entered allmulticast mode
[  521.598662][T22503] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[  521.643665][T22503] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  521.727609][T22508] ip6tnl3: entered promiscuous mode
[  521.815870][T22518] netlink: 'syz.6.4581': attribute type 1 has an invalid length.
[  521.867462][T22518] 8021q: adding VLAN 0 to HW filter on device bond2
[  521.950950][T22528] sock: sock_timestamping_bind_phc: sock not bind to device
[  521.970617][T22528] vxcan1: entered promiscuous mode
[  522.091759][T22535] bond4: entered promiscuous mode
[  522.104841][T22518] ip6tnl0: Caught tx_queue_len zero misconfig
[  522.150798][T22541] openvswitch: netlink: Flow actions attr not present in new flow.
[  522.188018][T22518] vlan3: entered promiscuous mode
[  522.200145][T22518] bond2: entered promiscuous mode
[  522.219459][T22518] vlan3: entered allmulticast mode
[  522.249174][T22518] bond2: entered allmulticast mode
[  522.254711][T22545] openvswitch: netlink: Flow actions attr not present in new flow.
[  522.286577][T22521] bond2: (slave geneve2): making interface the new active one
[  522.302732][T22521] geneve2: entered promiscuous mode
[  522.314090][T22521] geneve2: entered allmulticast mode
[  522.363079][T22521] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  522.383211][T18725] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  522.401118][T18725] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  522.420543][T22558] xt_TCPMSS: Only works on TCP SYN packets
[  522.421491][T18725] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  522.451980][T18725] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  522.498272][T22560] netlink: 'syz.5.4597': attribute type 6 has an invalid length.
[  522.514158][T22562] netlink: 'syz.5.4597': attribute type 6 has an invalid length.
[  522.522471][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  522.566774][T22569] x_tables: duplicate underflow at hook 2
[  522.577016][T22564] netlink: 'syz.6.4595': attribute type 7 has an invalid length.
[  522.669713][T22583] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 !
[  522.685453][T22582] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 !
[  522.864638][T22595] xt_ecn: cannot match TCP bits for non-tcp packets
[  522.889668][T22597] xt_ecn: cannot match TCP bits for non-tcp packets
[  523.039458][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  523.047548][    C1] lec:lec_tx_timeout: lec0
[  523.053113][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  523.151893][T22611] wlan1 speed is unknown, defaulting to 1000
[  523.203541][T22611] lo speed is unknown, defaulting to 1000
[  523.347760][T22624] syzkaller0: entered promiscuous mode
[  523.353548][T22624] syzkaller0: entered allmulticast mode
[  523.561344][T22637] netlink: 'syz.6.4616': attribute type 1 has an invalid length.
[  523.616737][T22639] xt_NFQUEUE: number of total queues is 0
[  523.799251][T22650] lo: entered promiscuous mode
[  523.815148][T22650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  523.863292][T22658] Cannot find del_set index 4 as target
[  523.924074][T22652] ipt_REJECT: TCP_RESET invalid for non-tcp
[  523.938250][T22663] __nla_validate_parse: 12 callbacks suppressed
[  523.938268][T22663] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4626'.
[  523.970507][T22667] netlink: 'syz.6.4627': attribute type 4 has an invalid length.
[  523.991423][T22654] netlink: 'syz.2.4623': attribute type 10 has an invalid length.
[  524.017983][T22654] bridge0: entered promiscuous mode
[  524.024925][T22654] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  524.109629][T21899] Bluetooth: hci3: command 0x0401 tx timeout
[  524.233418][T22680] netlink: 'syz.6.4632': attribute type 10 has an invalid length.
[  524.245122][T22680] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  524.531509][T22699] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.4638'.
[  524.553714][T22699] netlink: Conntrack attr has 4 unknown bytes
[  524.756053][T22715] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4642'.
[  525.048581][T22740] mac80211_hwsim hwsim34 syzkaller0: left promiscuous mode
[  525.061860][T22740] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode
[  525.500870][T22783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4659'.
[  525.513884][T22783] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  525.578408][T22774] bond4: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  525.675550][T22774] bond4 (unregistering): Released all slaves
[  525.772855][T22790] : entered promiscuous mode
[  525.793685][T22780] netlink: 'syz.4.4658': attribute type 10 has an invalid length.
[  525.804067][T22780] team0: Device ipvlan1 failed to register rx_handler
[  525.811461][T22780] tipc: Resetting bearer <eth:ipvlan1>
[  526.172426][T22794] lec:lec_atm_close: lec0: Shut down!
[  528.948793][T22803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  529.093791][T22861] delete_channel: no stack
[  529.180783][T22871] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4678'.
[  529.308227][T22879] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4683'.
[  529.581879][T22889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  529.720514][T22902] xt_CT: You must specify a L4 protocol and not use inversions on it
[  529.794652][T22907] netlink: 'syz.4.4694': attribute type 9 has an invalid length.
[  529.795657][T22908] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add()
[  529.927144][T22915] mac80211_hwsim hwsim34 syzkaller0: entered promiscuous mode
[  529.943059][T22915] mac80211_hwsim hwsim34 syzkaller0: entered allmulticast mode
[  529.965749][T22917] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4699'.
[  530.034862][T22917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4699'.
[  530.186903][T22928] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4702'.
[  530.266860][T22941] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4706'.
[  530.324492][T22941] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4706'.
[  530.358185][T22946] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4708'.
[  530.368806][T22941] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4706'.
[  530.399611][T22950] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4706'.
[  530.551144][T22957] xt_CT: You must specify a L4 protocol and not use inversions on it
[  530.958518][T22992] block nbd0: Unsupported socket: should be TCP or UNIX.
[  530.989128][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  531.068408][T22994] lo: Caught tx_queue_len zero misconfig
[  531.076118][T22994] sch_tbf: burst 0 is lower than device lo mtu (18) !
[  531.445022][T23006] bond8: entered promiscuous mode
[  531.452667][T23006] bond8: entered allmulticast mode
[  531.468162][T23006] 8021q: adding VLAN 0 to HW filter on device bond8
[  531.949065][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  531.957143][    C1] lec:lec_tx_timeout: lec0
[  531.963046][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  532.604359][T23099] syzkaller1: entered promiscuous mode
[  532.611753][T23099] syzkaller1: entered allmulticast mode
[  532.630880][T23099] syzkaller0: entered promiscuous mode
[  532.640239][T23099] syzkaller0: entered allmulticast mode
[  532.806496][T23114] 8021q: adding VLAN 0 to HW filter on device bond4
[  532.824264][T23114] macvlan2: entered promiscuous mode
[  532.830035][T23114] macvlan2: entered allmulticast mode
[  533.057181][T23134] netlink: 'syz.3.4760': attribute type 2 has an invalid length.
[  533.312220][T23150] netlink: 'syz.3.4766': attribute type 1 has an invalid length.
[  533.321162][T23150] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  533.422901][T23159] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  533.443479][T23159] netlink: 'syz.3.4768': attribute type 1 has an invalid length.
[  533.473358][T23159] netlink: 'syz.3.4768': attribute type 1 has an invalid length.
[  533.483147][T23159] netlink: 'syz.3.4768': attribute type 8 has an invalid length.
[  533.506972][T23161] netlink: 'syz.4.4769': attribute type 23 has an invalid length.
[  533.606189][T23166] netlink: 'syz.3.4770': attribute type 11 has an invalid length.
[  533.632933][T23166] netlink: 'syz.3.4770': attribute type 13 has an invalid length.
[  533.724340][T23175] xt_CT: You must specify a L4 protocol and not use inversions on it
[  533.734740][T23168] syzkaller1: entered promiscuous mode
[  533.751129][T23168] syzkaller1: entered allmulticast mode
[  534.002028][T23192] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  534.349984][ T5834] Bluetooth: hci1: command 0x0405 tx timeout
[  534.604336][T23227] __nla_validate_parse: 16 callbacks suppressed
[  534.604355][T23227] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4787'.
[  534.648630][T23229] netlink: 'syz.2.4792': attribute type 1 has an invalid length.
[  534.664014][T23229] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048)
[  534.703536][T23227] syzkaller0: entered promiscuous mode
[  534.709734][T23227] syzkaller0: entered allmulticast mode
[  534.716831][T23223] netlink: 240 bytes leftover after parsing attributes in process `syz.3.4789'.
[  534.797933][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4793'.
[  534.807549][T23235] macvlan0: left promiscuous mode
[  534.814161][T23235] netlink: 'syz.3.4793': attribute type 1 has an invalid length.
[  534.822622][T23235] netlink: 'syz.3.4793': attribute type 2 has an invalid length.
[  534.871330][T23243] veth5: entered allmulticast mode
[  536.989456][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  536.997538][    C1] lec:lec_tx_timeout: lec0
[  537.002849][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  537.341101][T23218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  539.169239][T23259] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  539.170439][T23266] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  539.226055][T23261] wlan1 speed is unknown, defaulting to 1000
[  539.300945][T23292] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.4807'.
[  539.315250][T23261] lo speed is unknown, defaulting to 1000
[  539.324230][T23292] openvswitch: netlink: Missing key (keys=40, expected=100)
[  539.327808][T23286] vlan1: entered allmulticast mode
[  539.337322][T23286] bridge0: entered allmulticast mode
[  539.344002][T23286] bridge0: port 3(vlan1) entered blocking state
[  539.352550][T23286] bridge0: port 3(vlan1) entered disabled state
[  539.392697][T23292] geneve3: entered promiscuous mode
[  539.402706][T23292] geneve3: entered allmulticast mode
[  539.415765][T18725] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0
[  539.445500][T18725] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0
[  539.470339][T21899] Bluetooth: hci6: command 0x0406 tx timeout
[  539.479820][T18725] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0
[  539.548327][T18725] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0
[  539.621225][T23303] netlink: 'syz.5.4810': attribute type 16 has an invalid length.
[  539.655433][T23303] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4810'.
[  539.786690][T23321] netlink: 'syz.3.4818': attribute type 12 has an invalid length.
[  539.800718][T23323] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4817'.
[  539.821377][T23321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4818'.
[  540.064011][T23338] can: request_module (can-proto-3) failed.
[  540.187507][T17820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  540.208708][T17820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  540.373615][T23356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4828'.
[  540.581840][T23370] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  540.768963][T23385] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4835'.
[  540.954710][T23402] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4837'.
[  541.494361][T23426] openvswitch: netlink: Missing key (keys=40, expected=100)
[  541.519649][T23428] netlink: 'syz.5.4842': attribute type 1 has an invalid length.
[  541.533436][T23428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4842'.
[  541.649410][T23438] syzkaller0: entered promiscuous mode
[  541.655158][T23438] syzkaller0: entered allmulticast mode
[  541.667235][T23436] mac80211_hwsim hwsim45 wlan0: Caught tx_queue_len zero misconfig
[  541.680500][T23436] syzkaller0: entered allmulticast mode
[  541.779103][T23448] openvswitch: netlink: Missing valid actions attribute.
[  541.786189][T23448] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  541.820991][T23411] lec:lec_atm_close: lec0: Shut down!
[  542.018693][T23456] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4853'.
[  542.076188][T23453] pim6reg1: entered promiscuous mode
[  542.084338][T23453] pim6reg1: entered allmulticast mode
[  542.163935][T23459] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4854'.
[  542.236536][T23463] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.287485][T23465] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4858'.
[  542.677722][T23502] xt_TCPMSS: Only works on TCP SYN packets
[  542.706763][T23502] vlan3: entered allmulticast mode
[  542.712214][T23502] hsr0: entered allmulticast mode
[  542.717377][T23502] hsr_slave_1: entered allmulticast mode
[  543.241129][T23517] syzkaller0: entered promiscuous mode
[  543.246667][T23517] syzkaller0: entered allmulticast mode
[  545.369698][T23475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  545.798696][T23549] __nla_validate_parse: 4 callbacks suppressed
[  545.798715][T23549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4882'.
[  545.932063][T23557] netlink: 'syz.4.4884': attribute type 1 has an invalid length.
[  545.947127][T23558] netlink: 'syz.4.4884': attribute type 1 has an invalid length.
[  546.173036][T23539] lec:lec_atm_close: lec0: Shut down!
[  546.203228][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4890'.
[  546.251364][T23575] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4890'.
[  546.403836][T23588] netlink: 'syz.3.4894': attribute type 2 has an invalid length.
[  546.412449][T23590] netlink: 'syz.4.4895': attribute type 8 has an invalid length.
[  546.420290][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4894'.
[  546.459104][T23586] netlink: 'syz.4.4895': attribute type 8 has an invalid length.
[  546.601341][T23599] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  546.661917][T23608] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20004
[  546.675924][T23599] bond4 (unregistering): Released all slaves
[  546.758820][T23602] wlan1 speed is unknown, defaulting to 1000
[  546.766898][T23602] lo speed is unknown, defaulting to 1000
[  546.826457][T23619] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4901'.
[  547.151888][T23632] netlink: 'syz.4.4905': attribute type 1 has an invalid length.
[  547.159995][T23633] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4905'.
[  547.367588][T23632] 8021q: adding VLAN 0 to HW filter on device bond9
[  547.631272][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  547.682802][T23659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4911'.
[  547.692501][T23659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4911'.
[  547.718382][T23662] netlink: 'syz.5.4912': attribute type 1 has an invalid length.
[  547.727576][T23662] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4912'.
[  547.738734][T23662] netlink: 658 bytes leftover after parsing attributes in process `syz.5.4912'.
[  548.188835][T23694] netlink: 'syz.4.4921': attribute type 7 has an invalid length.
[  548.579647][T23678] lec:lec_atm_close: lec0: Shut down!
[  548.614909][T23720] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  548.716400][T23725] syzkaller1: entered promiscuous mode
[  548.722871][T23725] syzkaller1: entered allmulticast mode
[  548.860433][T23729] bond5: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  548.874752][T23729] bond5 (unregistering): Released all slaves
[  548.882570][T23737] xt_l2tp: missing protocol rule (udp|l2tpip)
[  549.303056][T23770] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  549.508259][T23797] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  549.513681][T23802] openvswitch: netlink: Unknown key attributes 2
[  549.518203][T23798] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  549.540226][T23797] openvswitch: netlink: VXLAN extension 78 out of range max 1
[  549.552328][T23800] syzkaller0: entered promiscuous mode
[  549.564026][T23800] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  549.618365][T23797] syzkaller0: mtu less than device minimum
[  549.834257][T23825] IPVS: Error connecting to the multicast addr
[  550.397761][T23863] netlink: 'syz.3.4971': attribute type 11 has an invalid length.
[  550.431103][T23863] netlink: 'syz.3.4971': attribute type 11 has an invalid length.
[  550.435741][T23865] netlink: 'syz.6.4972': attribute type 10 has an invalid length.
[  550.484313][T23865] 8021q: adding VLAN 0 to HW filter on device batadv0
[  550.495926][T23865] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  550.688222][T23882] netlink: 'syz.3.4978': attribute type 1 has an invalid length.
[  550.688367][T23877] syzkaller0: entered promiscuous mode
[  550.697499][T23882] netlink: 'syz.3.4978': attribute type 1 has an invalid length.
[  550.720647][T23877] syzkaller0: entered allmulticast mode
[  550.844113][T23892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  550.870211][T23894] __nla_validate_parse: 21 callbacks suppressed
[  550.870228][T23894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4982'.
[  550.980486][T23902] netlink: 'syz.4.4984': attribute type 1 has an invalid length.
[  551.024785][T23907] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4986'.
[  551.030331][T23902] bond10: entered promiscuous mode
[  551.041690][T23902] 8021q: adding VLAN 0 to HW filter on device bond10
[  551.058611][T23902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4984'.
[  551.073065][T23904] syzkaller0: entered promiscuous mode
[  551.095912][T23904] syzkaller0: entered allmulticast mode
[  551.110216][T23902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4984'.
[  551.115436][T23911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4987'.
[  551.131597][T23912] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4988'.
[  551.190696][T23902] syzkaller0: entered promiscuous mode
[  551.196207][T23902] syzkaller0: entered allmulticast mode
[  551.295028][T23902] bond10: (slave bridge8): making interface the new active one
[  551.304588][T23902] bridge8: entered promiscuous mode
[  551.312753][T23902] bond10: (slave bridge8): Enslaving as an active interface with an up link
[  551.381401][T23928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4992'.
[  551.534221][T23939] netlink: 'syz.5.4997': attribute type 1 has an invalid length.
[  551.542856][T23937] ¾x9ÿ: left allmulticast mode
[  551.545614][T23939] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4997'.
[  551.547814][T23937] ¾x9ÿ: left promiscuous mode
[  551.584891][T23937] bridge0: port 1(
0¾x9ÿ) entered disabled state
[  551.607869][T23937] bridge_slave_1: left allmulticast mode
[  551.615262][T23937] bridge_slave_1: left promiscuous mode
[  551.623356][T23937] bridge0: port 2(bridge_slave_1) entered disabled state
[  551.642490][T23937] bond0: (slave bond_slave_0): Releasing backup interface
[  551.678399][T23937] bond0: (slave bond_slave_1): Releasing backup interface
[  551.698624][T23937] team0: Port device team_slave_0 removed
[  551.718335][T23937] team0: Port device team_slave_1 removed
[  551.732012][T23937] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  551.855393][T23959] vlan2: entered promiscuous mode
[  551.858505][T23963] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5003'.
[  551.862578][T23959] geneve1: entered promiscuous mode
[  551.876174][T23959] vlan2: entered allmulticast mode
[  551.882320][T23959] geneve1: entered allmulticast mode
[  551.961009][T23968] nbd: must specify at least one socket
[  552.014810][T23971] 
: renamed from bond0 (while UP)
[  552.073800][T23968] nbd: must specify at least one socket
[  552.164437][T23984] syzkaller0: entered promiscuous mode
[  552.180455][T23984] syzkaller0: entered allmulticast mode
[  552.400986][T23997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  552.423590][T23998] sctp: [Deprecated]: syz.2.5015 (pid 23998) Use of int in max_burst socket option deprecated.
[  552.423590][T23998] Use struct sctp_assoc_value instead
[  552.470695][T23997] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5014'.
[  552.665137][T24016] netlink: 'syz.3.5021': attribute type 19 has an invalid length.
[  552.953957][T24031] 8021q: VLANs not supported on gre0
[  553.044946][T24040] netlink: 'syz.4.5029': attribute type 2 has an invalid length.
[  553.533388][T24080] bridge0: Caught tx_queue_len zero misconfig
[  553.765567][T24103] bridge0: port 2(syz_tun) entered blocking state
[  553.783503][T24103] bridge0: port 2(syz_tun) entered disabled state
[  553.805010][T24103] syz_tun: entered allmulticast mode
[  553.823344][T24103] syz_tun: entered promiscuous mode
[  553.838168][T24103] bridge0: port 2(syz_tun) entered blocking state
[  553.844815][T24103] bridge0: port 2(syz_tun) entered forwarding state
[  553.904506][T24111] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  553.948955][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5370 ms
[  553.957011][    C1] lec:lec_tx_timeout: lec0
[  553.962171][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  554.024712][T24120] syzkaller0: entered promiscuous mode
[  554.032712][T24120] syzkaller0: entered allmulticast mode
[  554.481074][T24150] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  555.121667][T24182] team0 (unregistering): Port device team_slave_0 removed
[  555.144806][T24182] team0 (unregistering): Port device team_slave_1 removed
[  555.185853][T24210] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  555.193974][T24210] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  555.430830][T24230] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  555.443430][T24221] netlink: 'syz.2.5067': attribute type 1 has an invalid length.
[  555.504766][T24221] bond5: entered promiscuous mode
[  555.518035][T24221] 8021q: adding VLAN 0 to HW filter on device bond5
[  555.528146][T24176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  555.614220][T24235] netlink: 'syz.3.5069': attribute type 4 has an invalid length.
[  555.787665][T24251] veth1: entered allmulticast mode
[  555.924322][T24264] __nla_validate_parse: 17 callbacks suppressed
[  555.924342][T24264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5078'.
[  556.262711][T24282] openvswitch: netlink: Flow key attr not present in new flow.
[  556.605678][T24312] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5093'.
[  556.678193][T24317] set match dimension is over the limit!
[  556.711020][T24323] netlink: 65039 bytes leftover after parsing attributes in process `syz.6.5097'.
[  556.753530][T24312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5093'.
[  556.826653][T24329] openvswitch: netlink: IP tunnel dst address not specified
[  556.865455][T24331] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5097'.
[  556.978461][T24342] bond0 (unregistering): Released all slaves
[  557.008373][T24347] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5103'.
[  557.031293][T24346] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5104'.
[  557.041347][T24346] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5104'.
[  557.172507][T24346] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5104'.
[  557.186599][T24346] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5104'.
[  557.517458][T24376] netlink: 'syz.5.5109': attribute type 11 has an invalid length.
[  557.547694][T24376] netlink: 'syz.5.5109': attribute type 11 has an invalid length.
[  557.624119][T24380] x_tables: duplicate underflow at hook 2
[  557.923664][T24404] netlink: 'syz.6.5115': attribute type 1 has an invalid length.
[  558.044764][T24414] netlink: 'syz.5.5118': attribute type 1 has an invalid length.
[  558.056898][T24404] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  558.317638][T24431] netlink: 'syz.5.5123': attribute type 9 has an invalid length.
[  558.342131][T24438] netlink: 'syz.3.5126': attribute type 75 has an invalid length.
[  558.355684][T24439] netlink: 'syz.5.5123': attribute type 9 has an invalid length.
[  558.515795][T24448] veth0_to_bridge: left allmulticast mode
[  558.535295][T24448] veth0_to_bridge: left promiscuous mode
[  558.549854][T24448] bridge0: port 1(veth0_to_bridge) entered disabled state
[  558.655768][T24455] bridge_slave_1: Caught tx_queue_len zero misconfig
[  558.899785][T24468] lo: Caught tx_queue_len zero misconfig
[  558.969410][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  558.977466][    C1] lec:lec_tx_timeout: lec0
[  558.983041][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  558.992568][T24468] mac80211_hwsim hwsim29 syzkaller0: Caught tx_queue_len zero misconfig
[  559.046128][T24476] sctp: [Deprecated]: syz.2.5135 (pid 24476) Use of int in max_burst socket option.
[  559.046128][T24476] Use struct sctp_assoc_value instead
[  559.102854][T24476] netlink: 'syz.2.5135': attribute type 1 has an invalid length.
[  559.124923][T24479] openvswitch: netlink: Key type 131 is out of range max 32
[  559.663253][T24520] netlink: 'syz.3.5148': attribute type 1 has an invalid length.
[  559.791623][T24522] wlan1 speed is unknown, defaulting to 1000
[  559.814363][T24522] lo speed is unknown, defaulting to 1000
[  560.172140][T24550] team0: Caught tx_queue_len zero misconfig
[  560.178094][T24550] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 !
[  560.193179][T24548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  560.212786][T24547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  560.833754][T24600] xt_hashlimit: size too large, truncated to 1048576
[  561.092426][T24610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  561.255681][T24620] __nla_validate_parse: 26 callbacks suppressed
[  561.255698][T24620] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5176'.
[  561.348363][T24634] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5177'.
[  561.363738][T24633] netlink: 'syz.3.5178': attribute type 2 has an invalid length.
[  561.372207][T24633] netlink: 'syz.3.5178': attribute type 1 has an invalid length.
[  561.526936][ T5834] Bluetooth: hci1: link tx timeout
[  561.533970][ T5834] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  561.545834][T24644] netlink: 'syz.6.5180': attribute type 3 has an invalid length.
[  561.596023][T24648] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5181'.
[  561.707893][T24652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5184'.
[  561.735783][T24652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5184'.
[  561.749802][T24652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5184'.
[  561.764700][T24652] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5184'.
[  561.801785][T24664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5187'.
[  561.879759][T24667] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  562.181035][T24678] netlink: 96 bytes leftover after parsing attributes in process `syz.6.5190'.
[  562.227584][T24678] vlan0: entered allmulticast mode
[  562.233626][T24678] erspan0: entered allmulticast mode
[  562.253519][T24681] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  562.372841][T24695] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5193'.
[  562.438230][T24701] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  562.448169][T24701] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  562.461037][T24703] ipt_rpfilter: unknown options
[  562.528303][T24695] syzkaller1: entered promiscuous mode
[  562.534013][T24695] syzkaller1: entered allmulticast mode
[  562.988160][T24739] validate_nla: 2 callbacks suppressed
[  562.988173][T24739] netlink: 'syz.6.5208': attribute type 15 has an invalid length.
[  563.004334][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[  563.087072][T24742] syzkaller0: entered promiscuous mode
[  563.093340][T24742] syzkaller0: entered allmulticast mode
[  563.301641][T24753] netlink: 'syz.2.5213': attribute type 1 has an invalid length.
[  563.320350][T24755] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  563.335461][T24753] netlink: 'syz.2.5213': attribute type 1 has an invalid length.
[  563.347005][T24753] netlink: 'syz.2.5213': attribute type 8 has an invalid length.
[  563.411643][T24762] netlink: 'syz.6.5216': attribute type 17 has an invalid length.
[  563.556528][T21899] Bluetooth: hci1: command 0x0405 tx timeout
[  563.999415][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  564.007513][    C1] lec:lec_tx_timeout: lec0
[  564.012684][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  564.254508][T24813] ip6erspan2: entered allmulticast mode
[  564.497201][T24834] x_tables: unsorted underflow at hook 1
[  564.983138][T24850] lec:lec_atm_close: lec0: Shut down!
[  565.044200][T24872] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  565.067619][T24872] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.187579][T24881] netlink: 'syz.4.5254': attribute type 1 has an invalid length.
[  565.225441][T24884] netlink: 'syz.6.5255': attribute type 1 has an invalid length.
[  565.238276][T24884] netlink: 'syz.6.5255': attribute type 1 has an invalid length.
[  565.251528][T24884] netlink: 'syz.6.5255': attribute type 8 has an invalid length.
[  565.263695][T24887] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  565.314013][T24890] sctp: [Deprecated]: syz.4.5257 (pid 24890) Use of int in max_burst socket option.
[  565.314013][T24890] Use struct sctp_assoc_value instead
[  565.721690][T24907] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  565.753302][T24907] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  565.770149][T24907] gretap2: entered promiscuous mode
[  565.775549][T24907] gretap2: entered allmulticast mode
[  565.895845][T24926] netlink: 'syz.6.5265': attribute type 1 has an invalid length.
[  565.978563][T24928] tipc: Disabling bearer <eth:ipvlan1>
[  566.100964][T24932] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  566.135477][T24940] pimreg: entered allmulticast mode
[  566.168747][T24932] bond0: option resend_igmp: invalid value (32767)
[  566.180913][T24932] bond0: option resend_igmp: allowed values 0 - 255
[  566.196339][T24932] bond0 (unregistering): Released all slaves
[  566.303419][T24945] syzkaller0: entered promiscuous mode
[  566.322832][T24945] syzkaller0: entered allmulticast mode
[  566.395948][T24959] __nla_validate_parse: 22 callbacks suppressed
[  566.395967][T24959] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5276'.
[  566.567828][T24970] xt_bpf: check failed: parse error
[  566.587689][T24970] Bluetooth: MGMT ver 1.23
[  566.696735][T24979] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5277'.
[  566.710277][T24973] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5280'.
[  566.872879][T24987] tap0: tun_chr_ioctl cmd 1074025672
[  566.890431][T24987] tap0: ignored: set checksum disabled
[  567.303229][T25011] 8021q: adding VLAN 0 to HW filter on device bond6
[  567.378649][T24984] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5282'.
[  567.392553][T25026] sctp: [Deprecated]: syz.2.5291 (pid 25026) Use of struct sctp_assoc_value in delayed_ack socket option.
[  567.392553][T25026] Use struct sctp_sack_info instead
[  567.458793][T25029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'.
[  567.688224][T25047] xt_CT: You must specify a L4 protocol and not use inversions on it
[  567.713676][T25048] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5298'.
[  567.905082][T25068] gtp1: entered promiscuous mode
[  567.911678][T25068] gtp1: entered allmulticast mode
[  568.328837][T25101] "syz.2.5314" (25101) uses obsolete ecb(arc4) skcipher
[  568.575292][T25112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  568.596461][T25114] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5316'.
[  568.762713][T25125] can: request_module (can-proto-0) failed.
[  568.903443][T25131] x_tables: duplicate entry at hook 3
[  568.957623][T25136] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  568.971242][T25137] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5324'.
[  568.971528][T25138] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5324'.
[  569.043284][T25140] xt_TPROXY: Can be used only with -p tcp or -p udp
[  569.056199][T25140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5326'.
[  569.073638][T25140] xt_TPROXY: Can be used only with -p tcp or -p udp
[  569.206376][T25151] 8021q: adding VLAN 0 to HW filter on device batadv0
[  569.326704][T25161] validate_nla: 3 callbacks suppressed
[  569.326721][T25161] netlink: 'syz.2.5333': attribute type 32 has an invalid length.
[  569.522278][T25167] wlan1 speed is unknown, defaulting to 1000
[  569.531669][T25167] lo speed is unknown, defaulting to 1000
[  569.630147][T25181] netlink: 'syz.3.5340': attribute type 9 has an invalid length.
[  569.957895][T25206] netlink: 'syz.4.5347': attribute type 1 has an invalid length.
[  569.989398][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  569.997441][    C1] lec:lec_tx_timeout: lec0
[  570.003914][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  570.233564][T25217] wlan1 speed is unknown, defaulting to 1000
[  570.248683][T25221] team0: Device gtp2 is up. Set it down before adding it as a team port
[  570.327127][T25217] lo speed is unknown, defaulting to 1000
[  570.553480][T25231] syzkaller0: entered promiscuous mode
[  570.569761][T25231] syzkaller0: entered allmulticast mode
[  570.598313][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.605547][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.612417][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.619226][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.626008][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.632814][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.639625][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.646393][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.653210][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.660014][T25231] tc action pedit offset must be on 32 bit boundaries
[  570.666814][T25231] TC_ACT_REPEAT abuse ?
[  571.525767][T25287] IPv6: sit1: Disabled Multicast RS
[  571.534042][T25287] sit1: entered allmulticast mode
[  571.546920][T25294] __nla_validate_parse: 71 callbacks suppressed
[  571.546938][T25294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5368'.
[  571.591513][T25294] netlink: 'syz.2.5368': attribute type 7 has an invalid length.
[  571.601440][T25294] netlink: 'syz.2.5368': attribute type 8 has an invalid length.
[  571.612904][T25294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5368'.
[  571.693699][T25300] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5371'.
[  571.770180][T25303] tipc: Started in network mode
[  571.784499][T25303] tipc: Node identity 4ede6c79a557, cluster identity 4711
[  571.810613][T25303] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  571.835806][T25310] openvswitch: netlink: IP tunnel dst address not specified
[  571.854616][T25302] tipc: Disabling bearer <eth:syzkaller0>
[  571.884442][T25314] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.5377'.
[  571.897978][T25314] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  572.080579][T25330] netlink: 212344 bytes leftover after parsing attributes in process `syz.5.5381'.
[  572.194332][T25338] syzkaller0: entered promiscuous mode
[  572.200556][T25338] syzkaller0: entered allmulticast mode
[  572.581753][T25359] bond5: option arp_all_targets: invalid value (18446744073709551613)
[  572.620278][T25359] bond5 (unregistering): Released all slaves
[  572.661005][T25374] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5395'.
[  572.671768][T25374] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5395'.
[  573.003920][T25400] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5405'.
[  573.079164][T25397] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5404'.
[  573.107589][T25397] netlink: 'syz.4.5404': attribute type 1 has an invalid length.
[  573.190353][T25397] 8021q: adding VLAN 0 to HW filter on device bond11
[  573.283774][T25417] bridge_slave_0: invalid flags given to default FDB implementation
[  573.293078][T25414] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5411'.
[  573.363541][T25414] netlink: 'syz.5.5411': attribute type 1 has an invalid length.
[  573.562875][T25435] lo: left promiscuous mode
[  573.601260][T25435] gre0: left promiscuous mode
[  573.605985][T25435] gre0: left allmulticast mode
[  573.643524][T25404] lec:lec_atm_close: lec0: Shut down!
[  573.990940][T25457] nft_compat: unsupported protocol 0
[  574.163102][T25465] netlink: 'syz.3.5423': attribute type 3 has an invalid length.
[  574.227554][T25435] tipc: Resetting bearer <eth:vxcan1>
[  574.540120][T25435] tipc: Resetting bearer <eth:macvtap0>
[  574.576631][T25435] netdevsim netdevsim4 
: left promiscuous mode
[  574.621683][T25435] gretap0: left allmulticast mode
[  574.626949][T25435] macvlan2: left allmulticast mode
[  574.641886][T25435] gre1: left promiscuous mode
[  574.646614][T25435] gre1: left allmulticast mode
[  574.826493][T25435] gtp0: left promiscuous mode
[  574.831641][T25435] gtp0: left allmulticast mode
[  574.879727][T25435] gtp1: left promiscuous mode
[  574.884475][T25435] gtp1: left allmulticast mode
[  574.893254][T25435] ip6tnl3: left promiscuous mode
[  574.899976][T25435] bond8: left promiscuous mode
[  574.904996][T25435] bond8: left allmulticast mode
[  574.914894][T25435] bond10: left promiscuous mode
[  574.930274][T25435] bridge8: left promiscuous mode
[  574.948218][T25435] vlan2: left promiscuous mode
[  574.953356][T25435] geneve1: left promiscuous mode
[  574.959498][T25435] vlan2: left allmulticast mode
[  574.969031][T25435] geneve1: left allmulticast mode
[  575.000932][T25435] gretap2: left promiscuous mode
[  575.013704][T25435] gretap2: left allmulticast mode
[  575.045650][T17827] netdevsim netdevsim4 
: unset [0, 0] type 1 family 0 port 8472 - 0
[  575.059487][T17827] netdevsim netdevsim4 
: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.068689][T17827] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  575.080305][T17827] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.089599][T17827] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  575.098535][T17827] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.110998][T17827] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  575.119998][T17827] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  575.309951][ T5834] Bluetooth: hci4: command 0x0406 tx timeout
[  576.270529][T25414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  576.600810][T25498] __nla_validate_parse: 2 callbacks suppressed
[  576.600828][T25498] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5435'.
[  576.621640][T25498] --map-set only usable from mangle table
[  576.648777][T25502] netlink: 96 bytes leftover after parsing attributes in process `syz.3.5434'.
[  576.788771][T25511] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5436'.
[  576.831828][T25513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5435'.
[  577.374074][T25527] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  577.425981][T25529] netlink: 'syz.5.5439': attribute type 8 has an invalid length.
[  577.536452][T25539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5443'.
[  577.836545][T25555] IPVS: length: 8 != 1152
[  578.139886][T25580] delete_channel: no stack
[  578.245538][T25587] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5458'.
[  578.380491][T25592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5459'.
[  578.909033][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5270 ms
[  578.917093][    C1] lec:lec_tx_timeout: lec0
[  578.922506][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  578.951426][T25618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5465'.
[  578.989047][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  579.386894][T25641] syzkaller0: entered promiscuous mode
[  579.393906][T25641] syzkaller0: entered allmulticast mode
[  579.553409][T25648] netlink: 'syz.6.5469': attribute type 3 has an invalid length.
[  579.874888][T25658] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.5471'.
[  580.546794][T25671] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5475'.
[  581.191116][T25656] netlink: 'syz.2.5470': attribute type 29 has an invalid length.
[  581.228473][T15680] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  581.253182][T15680] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  581.279009][T15680] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  581.287977][T15680] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  581.563409][T25697] netlink: 'syz.4.5482': attribute type 1 has an invalid length.
[  581.774933][T25714] __nla_validate_parse: 5 callbacks suppressed
[  581.774951][T25714] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5487'.
[  581.796008][T25714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5487'.
[  582.040610][T25727] veth0: mtu greater than device maximum
[  582.051979][T25727] syzkaller0: entered allmulticast mode
[  582.053315][T25730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5491'.
[  582.112324][T25732] xt_hashlimit: size too large, truncated to 1048576
[  582.224996][T25740] netlink: 'syz.2.5494': attribute type 4 has an invalid length.
[  582.243331][T25740] netlink: 17 bytes leftover after parsing attributes in process `syz.2.5494'.
[  582.266968][T25740] batadv1: entered allmulticast mode
[  582.314608][T25747] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5499'.
[  582.466242][T25755] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5501'.
[  582.494211][T25755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5501'.
[  582.510556][T25755] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5501'.
[  582.532082][T25758] netlink: 95 bytes leftover after parsing attributes in process `syz.5.5501'.
[  582.550134][T25755] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5501'.
[  582.664241][T25768] syzkaller0: entered promiscuous mode
[  582.674145][T25768] syzkaller0: entered allmulticast mode
[  582.691902][T25773] netlink: 'syz.5.5506': attribute type 1 has an invalid length.
[  583.012659][T25792] IPVS: set_ctl: invalid protocol: 239 172.30.1.6:20002
[  583.184107][T25811] sctp: [Deprecated]: syz.5.5516 (pid 25811) Use of struct sctp_assoc_value in delayed_ack socket option.
[  583.184107][T25811] Use struct sctp_sack_info instead
[  583.273009][T25815] netlink: 'syz.4.5517': attribute type 1 has an invalid length.
[  583.794287][T25858] netlink: 'syz.5.5527': attribute type 5 has an invalid length.
[  583.826192][T25860] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  583.949050][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  583.957111][    C1] lec:lec_tx_timeout: lec0
[  583.962700][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  584.079893][T25869] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  584.091822][T25869] bond8 (unregistering): Released all slaves
[  584.291453][T25887] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  584.314043][T25887] bond12 (unregistering): Released all slaves
[  584.771927][T25927] bond5 (unregistering): Released all slaves
[  584.921376][T25941] lo: entered promiscuous mode
[  584.926559][T25941] tunl0: entered promiscuous mode
[  584.932483][T25941] gre0: entered promiscuous mode
[  584.939559][T25941] gretap0: entered promiscuous mode
[  584.980013][T25941] erspan0: entered promiscuous mode
[  584.986265][T25941] ip_vti0: entered promiscuous mode
[  585.003454][T25948] delete_channel: no stack
[  585.066787][T25957] netlink: 'syz.2.5555': attribute type 1 has an invalid length.
[  585.069640][T25953] sit0: Caught tx_queue_len zero misconfig
[  585.362757][T25976] netlink: 'syz.3.5561': attribute type 1 has an invalid length.
[  585.390237][T25976] 8021q: adding VLAN 0 to HW filter on device bond8
[  585.415446][T25976] bond8: (slave gretap2): making interface the new active one
[  585.424521][T25976] bond8: (slave gretap2): Enslaving as an active interface with an up link
[  585.448534][T25976] bond8: (slave gretap3): Enslaving as an active interface with an up link
[  585.532854][T25984] openvswitch: netlink: IPv4 tun info is not correct
[  586.124981][T25969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  586.496063][T26023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  586.565976][T26025] 8021q: adding VLAN 0 to HW filter on device batadv1
[  586.592347][T26025] team0: Port device batadv1 added
[  586.697248][T26027] wlan1 speed is unknown, defaulting to 1000
[  586.706029][T26027] lo speed is unknown, defaulting to 1000
[  586.810089][T26042] __nla_validate_parse: 23 callbacks suppressed
[  586.810110][T26042] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5581'.
[  586.895766][ T5834] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  586.905973][ T5834] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  586.915110][ T5834] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  586.923652][ T5834] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  586.931894][ T5834] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  587.022308][T26051] netlink: 'syz.2.5583': attribute type 29 has an invalid length.
[  587.050567][T26051] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5583'.
[  587.120737][T26043] wlan1 speed is unknown, defaulting to 1000
[  587.128349][T26043] lo speed is unknown, defaulting to 1000
[  587.268523][T26059] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5586'.
[  587.386174][T26065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5588'.
[  587.513804][T26074] netlink: 'syz.6.5591': attribute type 9 has an invalid length.
[  587.522340][T26074] netlink: 'syz.6.5591': attribute type 11 has an invalid length.
[  587.530841][T26074] netlink: 'syz.6.5591': attribute type 12 has an invalid length.
[  587.538750][T26074] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.5591'.
[  587.548447][T26074] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5591'.
[  587.556088][T18725] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  587.608827][T26043] chnl_net:caif_netlink_parms(): no params data found
[  587.690516][T26084] netlink: 'syz.6.5594': attribute type 1 has an invalid length.
[  587.731635][T18725] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  587.790811][T26084] bond5: entered promiscuous mode
[  587.801438][T26084] 8021q: adding VLAN 0 to HW filter on device bond5
[  587.808667][T26093] netlink: 'syz.5.5596': attribute type 9 has an invalid length.
[  587.845833][T18725] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  587.874474][T26098] bond5: (slave bridge40): making interface the new active one
[  587.882597][T26098] bridge40: entered promiscuous mode
[  587.891793][T26098] bridge40: left promiscuous mode
[  587.943234][T26089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  587.975239][T18725] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  588.045500][T26103] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5597'.
[  588.079313][T26103] bond0: entered promiscuous mode
[  588.084484][T26103] bond_slave_0: entered promiscuous mode
[  588.090533][T26103] bond_slave_1: entered promiscuous mode
[  588.096387][T26103] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode
[  588.104177][T26103] batadv0: entered promiscuous mode
[  588.112030][T26103] bond0: left promiscuous mode
[  588.116955][T26103] bond_slave_0: left promiscuous mode
[  588.122843][T26103] bond_slave_1: left promiscuous mode
[  588.128406][T26103] mac80211_hwsim hwsim46 wlan1: left promiscuous mode
[  588.137682][T26103] batadv0: left promiscuous mode
[  588.147135][T26043] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.154641][T26043] bridge0: port 1(bridge_slave_0) entered disabled state
[  588.162243][T26043] bridge_slave_0: entered allmulticast mode
[  588.170454][T26043] bridge_slave_0: entered promiscuous mode
[  588.185234][T26043] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.195999][T26043] bridge0: port 2(bridge_slave_1) entered disabled state
[  588.203839][T26043] bridge_slave_1: entered allmulticast mode
[  588.211414][T26043] bridge_slave_1: entered promiscuous mode
[  588.272146][T26043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  588.332462][T26043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  588.336057][T26111] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5599'.
[  588.352682][T26111] netlink: 'syz.6.5599': attribute type 1 has an invalid length.
[  588.363529][T26111] netlink: 'syz.6.5599': attribute type 1 has an invalid length.
[  588.373931][T26111] netlink: 'syz.6.5599': attribute type 2 has an invalid length.
[  588.390848][T26111] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5599'.
[  588.426227][T26113] netlink: 'syz.6.5599': attribute type 9 has an invalid length.
[  588.437325][T26043] team0: Port device team_slave_0 added
[  588.443916][T26113] netlink: 'syz.6.5599': attribute type 11 has an invalid length.
[  588.452837][T26113] netlink: 'syz.6.5599': attribute type 12 has an invalid length.
[  588.465453][T26043] team0: Port device team_slave_1 added
[  588.511748][T26113] netlink: 210020 bytes leftover after parsing attributes in process `syz.6.5599'.
[  588.559145][T26117] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  588.646792][T26043] batman_adv: batadv0: Adding interface: batadv_slave_0
[  588.674856][T26043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  588.738068][T26043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  588.833713][T26141] netlink: 'syz.2.5605': attribute type 39 has an invalid length.
[  588.975399][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  588.983480][    C1] lec:lec_tx_timeout: lec0
[  588.988935][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  588.995191][ T5834] Bluetooth: hci7: command tx timeout
[  589.056180][T18725] bond8 (unregistering): (slave gretap2): Releasing active interface
[  589.066286][T18725] bond8 (unregistering): (slave gretap2): the permanent HWaddr of slave - ee:76:df:95:d1:a9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  589.087924][T18725] bond8 (unregistering): (slave gretap3): making interface the new active one
[  589.115405][T18725] bond8 (unregistering): (slave gretap3): Releasing active interface
[  589.223825][T18725] team0: Port device bridge2 removed
[  589.523438][T18725] bond1 (unregistering): Released all slaves
[  589.536135][T18725] bond2 (unregistering): Released all slaves
[  589.549311][T18725] bond3 (unregistering): Released all slaves
[  589.563244][T18725] bond0 (unregistering): Released all slaves
[  589.585074][T18725] bond4 (unregistering): Released all slaves
[  589.598070][T18725] bond5 (unregistering): Released all slaves
[  589.613851][T18725] bond6 (unregistering): Released all slaves
[  589.629932][T18725] bond7 (unregistering): Released all slaves
[  589.649321][T18725] bond8 (unregistering): Released all slaves
[  589.688495][T26043] batman_adv: batadv0: Adding interface: batadv_slave_1
[  589.707969][T26043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  589.768229][T26043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  589.866205][T18725] : left promiscuous mode
[  590.010814][T26043] hsr_slave_0: entered promiscuous mode
[  590.025046][T26043] hsr_slave_1: entered promiscuous mode
[  590.032060][T26166] x_tables: duplicate underflow at hook 2
[  590.042034][T26043] debugfs: 'hsr0' already exists in 'hsr'
[  590.047781][T26043] Cannot create hsr debugfs directory
[  590.079103][T18725] tipc: Disabling bearer <udp:syz2>
[  590.086663][T18725] tipc: Disabling bearer <eth:syzkaller0>
[  590.097585][T18725] tipc: Left network mode
[  591.069975][ T5834] Bluetooth: hci7: command tx timeout
[  591.443310][T18725] hsr_slave_1: left promiscuous mode
[  591.459448][T18725] batman_adv: batadv0: Removing interface: ipvlan2
[  591.517112][T18725] pim6reg (unregistering): left allmulticast mode
[  591.873319][T18725] team0 (unregistering): Port device H removed
[  592.206588][T18725] IPVS: stop unused estimator thread 0...
[  593.121101][T26173] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  593.151403][T26043] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  593.159149][ T5834] Bluetooth: hci7: command tx timeout
[  593.282639][T26043] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  593.312868][T26043] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  593.379841][T26256] __nla_validate_parse: 8 callbacks suppressed
[  593.379863][T26256] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5623'.
[  593.406368][T26043] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  593.499412][T26265] syzkaller1: entered promiscuous mode
[  593.505087][T26265] syzkaller1: entered allmulticast mode
[  593.583595][T26279] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5628'.
[  593.594600][T26265] veth7: entered allmulticast mode
[  593.610705][T26266] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  593.734687][T26281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5629'.
[  593.769218][T26281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5629'.
[  593.874047][T26043] 8021q: adding VLAN 0 to HW filter on device bond0
[  593.953068][T26287] bond6: option lp_interval: invalid value (0)
[  593.969473][T26287] bond6: option lp_interval: allowed values 1 - 2147483647
[  593.990783][T26287] bond6 (unregistering): Released all slaves
[  593.999362][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  594.007410][    C1] lec:lec_tx_timeout: lec0
[  594.012317][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  594.034218][T26296] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5633'.
[  594.086067][T26043] 8021q: adding VLAN 0 to HW filter on device team0
[  594.146209][T15680] bridge0: port 1(bridge_slave_0) entered blocking state
[  594.153403][T15680] bridge0: port 1(bridge_slave_0) entered forwarding state
[  594.201026][T26294] wlan1 speed is unknown, defaulting to 1000
[  594.203387][T15680] bridge0: port 2(bridge_slave_1) entered blocking state
[  594.214374][T15680] bridge0: port 2(bridge_slave_1) entered forwarding state
[  594.250995][T26294] lo speed is unknown, defaulting to 1000
[  594.408827][T26307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  594.810261][T26321] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5641'.
[  594.842108][T26043] 8021q: adding VLAN 0 to HW filter on device batadv0
[  595.013692][T26043] veth0_vlan: entered promiscuous mode
[  595.093501][T26043] veth1_vlan: entered promiscuous mode
[  595.162940][T26043] veth0_macvtap: entered promiscuous mode
[  595.184588][T26043] veth1_macvtap: entered promiscuous mode
[  595.223018][T26043] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.229785][ T5834] Bluetooth: hci7: command tx timeout
[  595.272210][T26043] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.320847][T26343] netlink: 'syz.4.5646': attribute type 1 has an invalid length.
[  595.328691][T26343] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5646'.
[  595.338370][T17812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.338546][T17812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.423986][T17812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.442746][T17812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.462112][T26344] syzkaller0: entered promiscuous mode
[  595.467610][T26344] syzkaller0: entered allmulticast mode
[  595.616366][T26349] delete_channel: no stack
[  595.624279][T17812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.637137][T17812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.716051][T26349] netlink: 'syz.5.5648': attribute type 23 has an invalid length.
[  595.743523][T17812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.769988][T17812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.980064][T26366] netlink: 'syz.3.5579': attribute type 21 has an invalid length.
[  595.987976][T26366] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5579'.
[  596.082950][T26369] wlan1 speed is unknown, defaulting to 1000
[  596.093753][T26369] lo speed is unknown, defaulting to 1000
[  596.319808][T26387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5660'.
[  596.451172][T26396] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  596.470989][T26397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5662'.
[  596.808563][T26416] F: renamed from erspan0 (while UP)
[  596.839690][T26416] F: entered allmulticast mode
[  597.571050][T26439] FAULT_INJECTION: forcing a failure.
[  597.571050][T26439] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  597.615092][T26439] CPU: 0 UID: 0 PID: 26439 Comm: syz.6.5675 Not tainted syzkaller #0 PREEMPT(full) 
[  597.615119][T26439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  597.615130][T26439] Call Trace:
[  597.615137][T26439]  <TASK>
[  597.615144][T26439]  dump_stack_lvl+0xe8/0x150
[  597.615174][T26439]  should_fail_ex+0x412/0x560
[  597.615206][T26439]  _copy_from_user+0x2d/0xb0
[  597.615228][T26439]  ___sys_sendmsg+0x1c6/0x360
[  597.615256][T26439]  ? __pfx____sys_sendmsg+0x10/0x10
[  597.615309][T26439]  ? __fget_files+0x2a/0x420
[  597.615325][T26439]  ? __fget_files+0x3a0/0x420
[  597.615349][T26439]  __x64_sys_sendmsg+0x1bd/0x2a0
[  597.615374][T26439]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  597.615404][T26439]  ? __pfx_ksys_write+0x10/0x10
[  597.615435][T26439]  do_syscall_64+0x14d/0xf80
[  597.615457][T26439]  ? trace_irq_disable+0x3b/0x150
[  597.615472][T26439]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.615490][T26439]  ? clear_bhb_loop+0x40/0x90
[  597.615511][T26439]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.615529][T26439] RIP: 0033:0x7fce8cf9c819
[  597.615545][T26439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  597.615560][T26439] RSP: 002b:00007fce8b1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  597.615580][T26439] RAX: ffffffffffffffda RBX: 00007fce8d215fa0 RCX: 00007fce8cf9c819
[  597.615593][T26439] RDX: 0000000000000801 RSI: 00002000000001c0 RDI: 0000000000000006
[  597.615604][T26439] RBP: 00007fce8b1f6090 R08: 0000000000000000 R09: 0000000000000000
[  597.615615][T26439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.615625][T26439] R13: 00007fce8d216038 R14: 00007fce8d215fa0 R15: 00007ffc09cab2e8
[  597.615653][T26439]  </TASK>
[  597.843392][T26438] lec:lec_atm_close: lec0: Shut down!
[  598.108802][T26475] mac80211_hwsim hwsim34 syzkaller0: Caught tx_queue_len zero misconfig
[  598.339041][T26499] netlink: 'syz.5.5690': attribute type 1 has an invalid length.
[  598.753320][T26513] __nla_validate_parse: 6 callbacks suppressed
[  598.753339][T26513] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5694'.
[  598.822698][T26523] netlink: 'syz.6.5696': attribute type 1 has an invalid length.
[  598.863052][T26526] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.920615][T26526] netlink: 'syz.4.5697': attribute type 39 has an invalid length.
[  599.098321][T26536] netlink: 'syz.6.5700': attribute type 2 has an invalid length.
[  599.146486][T26540] syzkaller0: entered promiscuous mode
[  599.153387][T26518] lec:lec_atm_close: lec0: Shut down!
[  599.345358][T26549] lo: entered allmulticast mode
[  599.393070][T26549] mac80211_hwsim hwsim33 wlan0: entered promiscuous mode
[  599.438384][T26554] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5706'.
[  599.561718][T26557] syzkaller1: entered promiscuous mode
[  599.576637][T26557] syzkaller1: entered allmulticast mode
[  599.613317][T26569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5709'.
[  599.625603][T26569] block nbd1: Unsupported socket: should be TCP or UNIX.
[  599.648235][T26570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5709'.
[  599.682349][T26570] block nbd1: Unsupported socket: should be TCP or UNIX.
[  600.012294][T26599] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5717'.
[  600.064579][T26601] netlink: 'syz.3.5720': attribute type 6 has an invalid length.
[  600.128250][T26606] netlink: 'syz.4.5721': attribute type 5 has an invalid length.
[  600.153309][T26608] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  600.176471][T26606] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  600.194977][T26606] syzkaller0: entered promiscuous mode
[  600.204833][T26606] syzkaller0: entered allmulticast mode
[  600.255968][T26606] syzkaller0: mtu less than device minimum
[  600.269822][T26605] tipc: Resetting bearer <eth:syzkaller0>
[  600.331547][T26605] tipc: Disabling bearer <eth:syzkaller0>
[  600.676615][T15681] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  600.784597][T26611] lec:lec_atm_close: lec0: Shut down!
[  600.916283][T26640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5732'.
[  601.042737][T26648] netlink: 'syz.4.5735': attribute type 1 has an invalid length.
[  601.105943][T26645] netlink: 244 bytes leftover after parsing attributes in process `syz.5.5734'.
[  601.119228][T26647] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5734'.
[  602.403808][T26650] netlink: 32 bytes leftover after parsing attributes in process `syz.6.5733'.
[  602.867811][T26695] nbd: must specify at least one socket
[  602.883614][T26695] bridge11: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  603.316408][T26727] netlink: 'syz.5.5753': attribute type 2 has an invalid length.
[  603.334425][T26691] lec:lec_atm_close: lec0: Shut down!
[  603.627020][T26735] netlink: set zone limit has 4 unknown bytes
[  603.645284][T26746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5762'.
[  603.725156][T26735] netlink: 'syz.4.5757': attribute type 14 has an invalid length.
[  603.749793][T26735] netlink: 'syz.4.5757': attribute type 13 has an invalid length.
[  604.025770][T26780] __nla_validate_parse: 5 callbacks suppressed
[  604.025789][T26780] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5767'.
[  604.468630][T26796] vlan1: entered allmulticast mode
[  604.483921][T26796] bond0: entered allmulticast mode
[  604.499837][T26796] bond_slave_0: entered allmulticast mode
[  604.515793][T26796] bond_slave_1: entered allmulticast mode
[  604.531908][T26796] mac80211_hwsim hwsim46 wlan1: entered allmulticast mode
[  604.540658][T26800] netlink: 14 bytes leftover after parsing attributes in process `syz.6.5773'.
[  604.549758][T26796] batadv0: entered allmulticast mode
[  604.550552][T26804] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5776'.
[  604.576080][T26800] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  604.585482][T26800] bond_slave_0: left allmulticast mode
[  604.594490][T26800] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  604.603772][T26800] bond_slave_1: left allmulticast mode
[  604.613102][T26800] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  604.622022][T26800] mac80211_hwsim hwsim46 wlan1: left allmulticast mode
[  604.643710][T26800] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  604.652957][T26800] batadv0: left allmulticast mode
[  604.680937][T26800] bond0 (unregistering): Released all slaves
[  604.769261][T26810] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1088741871/1088741873
[  604.779703][T26810] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1088741871/1088741872
[  604.790052][T26810] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1088741871/1088741873
[  604.804778][T26810] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1088741871/1088741872
[  604.965832][T26828] Bluetooth: hci2: Opcode 0x0c1a failed: -22
[  605.080297][T26835] netlink: 'syz.3.5784': attribute type 10 has an invalid length.
[  605.090360][T26835] veth0_macvtap: left promiscuous mode
[  605.913861][T26846] netlink: 'syz.3.5787': attribute type 25 has an invalid length.
[  605.924080][T26848] netlink: 'syz.3.5787': attribute type 25 has an invalid length.
[  606.833361][T26758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  607.042957][T26865] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5793'.
[  607.043814][T26859] netlink: 'syz.2.5791': attribute type 12 has an invalid length.
[  607.065331][T26859] netlink: 'syz.2.5791': attribute type 29 has an invalid length.
[  607.080572][T26859] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5791'.
[  607.101123][T26859] netlink: 59 bytes leftover after parsing attributes in process `syz.2.5791'.
[  607.104799][T26867] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5791'.
[  607.316396][T26893] IPv6: sit2: Disabled Multicast RS
[  607.346444][T26893] sit2: entered allmulticast mode
[  607.485206][T26901] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5802'.
[  607.540295][T26909] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5804'.
[  607.580797][T26913] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5803'.
[  607.622816][T26911] tipc: Resetting bearer <eth:vxcan1>
[  608.664716][T26944] pimreg3: entered allmulticast mode
[  608.911537][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms
[  608.919611][    C1] lec:lec_tx_timeout: lec0
[  609.067394][T26963] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  609.089360][T26977] netlink: 'syz.6.5825': attribute type 1 has an invalid length.
[  609.097247][T26977] __nla_validate_parse: 2 callbacks suppressed
[  609.097263][T26977] netlink: 184 bytes leftover after parsing attributes in process `syz.6.5825'.
[  609.120272][T26977] netlink: 'syz.6.5825': attribute type 1 has an invalid length.
[  609.128027][T26977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5825'.
[  609.155856][T26979] netlink: 'syz.4.5824': attribute type 2 has an invalid length.
[  609.336317][T26987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5826'.
[  609.421063][T26987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5826'.
[  609.442761][T26987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5826'.
[  609.547601][T26987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5826'.
[  609.558032][T26987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5826'.
[  609.576924][T26987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5826'.
[  609.637397][T26993] syzkaller0: entered promiscuous mode
[  609.660203][T26993] syzkaller0: entered allmulticast mode
[  609.714383][T26987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5826'.
[  609.724717][T26987] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5826'.
[  610.024932][T27026] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20004
[  610.795875][T27073] wlan1 speed is unknown, defaulting to 1000
[  610.804428][T27073] lo speed is unknown, defaulting to 1000
[  610.807193][T27076] netlink: 'syz.6.5859': attribute type 10 has an invalid length.
[  611.087896][T27088] bridge41: entered promiscuous mode
[  611.103900][T27088] bridge41: entered allmulticast mode
[  611.405009][T27098] netlink: 'syz.4.5864': attribute type 1 has an invalid length.
[  611.492731][T27106] bond0: entered promiscuous mode
[  611.522161][T27106] bond0: left promiscuous mode
[  611.603452][T27109] bond0: (slave gre0): refused to change device type
[  612.189184][T27158] netlink: 'syz.6.5880': attribute type 10 has an invalid length.
[  612.197266][T27158] bridge_slave_1: left allmulticast mode
[  612.226846][T27158] bridge_slave_1: left promiscuous mode
[  612.243908][T27158] bridge0: port 2(bridge_slave_1) entered disabled state
[  612.979375][T27201] netlink: 'syz.3.5892': attribute type 1 has an invalid length.
[  613.047311][T27208] netlink: 'syz.6.5894': attribute type 11 has an invalid length.
[  613.056510][T27205] bond1: (slave gretap1): making interface the new active one
[  613.091539][T27205] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  613.712623][T27245] netlink: 'syz.6.5902': attribute type 4 has an invalid length.
[  613.771646][T27210] lec:lec_atm_close: lec0: Shut down!
[  613.923843][T27255] netlink: 'syz.3.5906': attribute type 1 has an invalid length.
[  613.960846][T27255] netlink: 'syz.3.5906': attribute type 7 has an invalid length.
[  613.989597][T27255] netlink: 'syz.3.5906': attribute type 8 has an invalid length.
[  614.011729][T27255] NCSI netlink: No device for ifindex 65584
[  614.110791][T27255] __nla_validate_parse: 21 callbacks suppressed
[  614.110810][T27255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5906'.
[  614.354053][T27283] netdevsim netdevsim3 netdevsim3: entered allmulticast mode
[  614.408589][T27282] netdevsim netdevsim3 netdevsim3: left allmulticast mode
[  614.449499][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5915'.
[  614.475151][ T5834] block nbd1: Receive control failed (result -107)
[  614.548438][T27295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  614.683624][T27303] xt_limit: Overflow, try lower: 271964/0
[  614.693059][T27304] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5916'.
[  614.703377][T27295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5916'.
[  614.803558][T27313] ip6gre0: Master is either lo or non-ether device
[  614.933970][T27323] netlink: 'syz.5.5925': attribute type 10 has an invalid length.
[  614.993001][T27319] bond2: option arp_all_targets: invalid value (18446744073709551613)
[  614.997750][T27329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5927'.
[  615.015444][T27319] bond2 (unregistering): Released all slaves
[  615.245628][T27337] netlink: 'syz.6.5930': attribute type 1 has an invalid length.
[  615.431087][T27355] openvswitch: netlink: IP tunnel dst address not specified
[  615.443219][T27337] 8021q: adding VLAN 0 to HW filter on device bond6
[  615.557212][T27346] bond6: (slave geneve3): making interface the new active one
[  615.577529][T27346] bond6: (slave geneve3): Enslaving as an active interface with an up link
[  615.634307][T17827] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  615.668683][T27367] netlink: 'syz.2.5936': attribute type 1 has an invalid length.
[  615.718816][T27367] nbd: error processing sock list
[  615.734803][T18725] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  615.759149][T17827] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  615.786876][T15680] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  616.285993][T27410] netlink: 'syz.6.5948': attribute type 1 has an invalid length.
[  616.295024][T27402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5946'.
[  616.409701][T27402] batman_adv: batadv0: Removing interface: batadv_slave_1
[  616.524346][T27424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5950'.
[  616.655473][T27433] block nbd0: Unsupported socket: should be TCP or UNIX.
[  616.707670][T27436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5954'.
[  616.941464][T27449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5959'.
[  617.227382][T27464] mac80211_hwsim hwsim34 syzkaller0: left allmulticast mode
[  617.334012][T27469] validate_nla: 2 callbacks suppressed
[  617.334028][T27469] netlink: 'syz.4.5965': attribute type 4 has an invalid length.
[  617.375387][T27472] netlink: 'syz.4.5965': attribute type 1 has an invalid length.
[  617.384161][T27469] netlink: 'syz.4.5965': attribute type 1 has an invalid length.
[  617.400802][   T31] INFO: task syz.1.3555:19023 blocked for more than 143 seconds.
[  617.408548][   T31]       Not tainted syzkaller #0
[  617.423852][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  617.435065][   T31] task:syz.1.3555      state:D stack:27144 pid:19023 tgid:19019 ppid:16688  task_flags:0x400040 flags:0x00080002
[  617.448068][   T31] Call Trace:
[  617.452491][   T31]  <TASK>
[  617.455516][   T31]  __schedule+0x15dd/0x52d0
[  617.469301][   T31]  ? __pfx___schedule+0x10/0x10
[  617.474395][   T31]  ? schedule+0x90/0x360
[  617.478725][   T31]  schedule+0x164/0x360
[  617.483678][   T31]  schedule_preempt_disabled+0x13/0x30
[  617.489999][   T31]  __mutex_lock+0x7fe/0x1300
[  617.494696][   T31]  ? __mutex_lock+0x5ac/0x1300
[  617.509415][   T31]  ? nfsd_nl_version_get_doit+0x17c/0xc40
[  617.515447][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  617.523521][   T31]  ? __nlmsg_put+0xef/0x1b0
[  617.528294][   T31]  ? genlmsg_put+0x137/0x2e0
[  617.533510][   T31]  nfsd_nl_version_get_doit+0x17c/0xc40
[  617.539626][   T31]  ? kmem_cache_free+0x187/0x630
[  617.544738][   T31]  ? nlmon_xmit+0xb0/0x100
[  617.550451][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  617.556708][   T31]  ? dev_hard_start_xmit+0x802/0x870
[  617.562599][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  617.568326][   T31]  ? __asan_memcpy+0x40/0x70
[  617.576699][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  617.586719][   T31]  genl_rcv_msg+0x61c/0x7a0
[  617.591796][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  617.597130][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  617.604107][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  617.609976][   T31]  netlink_rcv_skb+0x232/0x4b0
[  617.614902][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  617.620529][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  617.626001][   T31]  ? down_read+0x272/0x2e0
[  617.631855][   T31]  ? genl_rcv+0xd/0x40
[  617.636088][   T31]  genl_rcv+0x28/0x40
[  617.640848][   T31]  netlink_unicast+0x80f/0x9b0
[  617.645931][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  617.651813][   T31]  ? netlink_sendmsg+0x650/0xb40
[  617.657046][   T31]  ? skb_put+0x11b/0x210
[  617.661757][   T31]  netlink_sendmsg+0x813/0xb40
[  617.666685][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  617.673002][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  617.678128][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  617.687873][   T31]  ____sys_sendmsg+0x972/0x9f0
[  617.693170][   T31]  ? futex_unqueue+0x211/0x240
[  617.698307][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  617.704711][   T31]  ? import_iovec+0x73/0xa0
[  617.710239][   T31]  ___sys_sendmsg+0x2a5/0x360
[  617.715142][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  617.720958][   T31]  ? futex_wait+0x29a/0x380
[  617.725654][   T31]  ? __fget_files+0x2a/0x420
[  617.731264][   T31]  ? __fget_files+0x3a0/0x420
[  617.736111][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  617.742508][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  617.748148][   T31]  ? rcu_is_watching+0x15/0xb0
[  617.753714][   T31]  do_syscall_64+0x14d/0xf80
[  617.758487][   T31]  ? trace_irq_disable+0x3b/0x150
[  617.764458][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.771044][   T31]  ? clear_bhb_loop+0x40/0x90
[  617.776022][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  617.782378][   T31] RIP: 0033:0x7fed59b9c819
[  617.787085][   T31] RSP: 002b:00007fed57dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  617.802899][   T31] RAX: ffffffffffffffda RBX: 00007fed59e16090 RCX: 00007fed59b9c819
[  617.811781][   T31] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003
[  617.820649][   T31] RBP: 00007fed59c32c91 R08: 0000000000000000 R09: 0000000000000000
[  617.829125][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  617.837416][   T31] R13: 00007fed59e16128 R14: 00007fed59e16090 R15: 00007ffcfcfa3988
[  617.846287][   T31]  </TASK>
[  617.872060][   T31] 
[  617.872060][   T31] Showing all locks held in the system:
[  617.881401][   T31] 1 lock held by khungtaskd/31:
[  617.886378][   T31]  #0: ffffffff8e75e5e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  617.943972][   T31] 2 locks held by getty/5581:
[  617.948685][   T31]  #0: ffff8880324680a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  617.970087][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  617.980788][   T31] 2 locks held by syz.0.2810/16079:
[  617.985998][   T31]  #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  617.994682][   T31]  #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  618.005605][   T31] 2 locks held by syz.1.3555/19023:
[  618.011330][   T31]  #0: ffffffff8fc3de70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  618.020035][   T31]  #1: ffffffff8ea86b88 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40
[  618.031127][   T31] 2 locks held by syz.2.5957/27454:
[  618.036341][   T31] 2 locks held by dhcpcd/27484:
[  618.041677][   T31]  #0: ffff888030db2260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x33/0xe10
[  618.051691][   T31]  #1: ffffffff8e7648f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  618.067189][   T31] 
[  618.070211][   T31] =============================================
[  618.070211][   T31] 
[  618.078710][   T31] NMI backtrace for cpu 0
[  618.078723][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  618.078740][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  618.078749][   T31] Call Trace:
[  618.078756][   T31]  <TASK>
[  618.078763][   T31]  dump_stack_lvl+0xe8/0x150
[  618.078791][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  618.078808][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  618.078831][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  618.078856][   T31]  sys_info+0x135/0x170
[  618.078878][   T31]  watchdog+0xfd9/0x1030
[  618.078900][   T31]  ? watchdog+0x21a/0x1030
[  618.078923][   T31]  kthread+0x388/0x470
[  618.078941][   T31]  ? __pfx_watchdog+0x10/0x10
[  618.078955][   T31]  ? __pfx_kthread+0x10/0x10
[  618.078973][   T31]  ret_from_fork+0x51e/0xb90
[  618.078998][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  618.079019][   T31]  ? __switch_to+0xc7d/0x1450
[  618.079043][   T31]  ? __pfx_kthread+0x10/0x10
[  618.079062][   T31]  ret_from_fork_asm+0x1a/0x30
[  618.079102][   T31]  </TASK>
[  618.183481][   T31] Sending NMI from CPU 0 to CPUs 1:
[  618.188729][    C1] NMI backtrace for cpu 1
[  618.188744][    C1] CPU: 1 UID: 0 PID: 5807 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  618.188761][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  618.188770][    C1] RIP: 0010:common_nsleep+0x4/0xa0
[  618.188796][    C1] Code: 49 89 fe 48 89 df e8 ab b4 7a 00 4c 89 f7 eb c9 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa <55> 41 57 41 56 41 54 53 49 89 d6 89 f5 89 fb 49 bc 00 00 00 00 00
[  618.188808][    C1] RSP: 0018:ffffc90003bd7e18 EFLAGS: 00000246
[  618.188821][    C1] RAX: dffffc0000000000 RBX: dffffc0000000000 RCX: dffffc0000000000
[  618.188832][    C1] RDX: ffffc90003bd7e60 RSI: 0000000000000000 RDI: 0000000000000000
[  618.188844][    C1] RBP: ffffc90003bd7ee0 R08: ffffc90003bd7daf R09: 1ffff9200077afb5
[  618.188854][    C1] R10: dffffc0000000000 R11: ffffffff81b54d30 R12: 1ffff9200077afc8
[  618.188864][    C1] R13: ffffffff8bcf9750 R14: 0000000000000000 R15: ffff888079080618
[  618.188874][    C1] FS:  000055557589c540(0000) GS:ffff888125557000(0000) knlGS:0000000000000000
[  618.188886][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  618.188897][    C1] CR2: 00007fe0d75de708 CR3: 000000007ff92000 CR4: 00000000003526f0
[  618.188910][    C1] Call Trace:
[  618.188916][    C1]  <TASK>
[  618.188922][    C1]  __se_sys_clock_nanosleep+0x35b/0x3b0
[  618.188948][    C1]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  618.188975][    C1]  do_syscall_64+0x14d/0xf80
[  618.188994][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.189008][    C1]  ? clear_bhb_loop+0x40/0x90
[  618.189024][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  618.189038][    C1] RIP: 0033:0x7fee7b757997
[  618.189050][    C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[  618.189061][    C1] RSP: 002b:00007ffec7bd1fc0 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6
[  618.189076][    C1] RAX: ffffffffffffffda RBX: 000055557589c540 RCX: 00007fee7b757997
[  618.189086][    C1] RDX: 00007ffec7bd2000 RSI: 0000000000000000 RDI: 0000000000000000
[  618.189095][    C1] RBP: 00007ffec7bd24e0 R08: 0000000000000000 R09: 0000000000000000
[  618.189103][    C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000004
[  618.189112][    C1] R13: 00007ffec7bd203c R14: 00007ffec7bd20d0 R15: 0000000000000000
[  618.189130][    C1]  </TASK>
[  618.314116][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  618.314143][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  618.314162][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  618.314173][   T31] Call Trace:
[  618.314180][   T31]  <TASK>
[  618.314188][   T31]  vpanic+0x56c/0xa60
[  618.314217][   T31]  ? __pfx___schedule+0x10/0x10
[  618.314239][   T31]  ? __pfx_vpanic+0x10/0x10
[  618.314269][   T31]  panic+0xc5/0xd0
[  618.314290][   T31]  ? __pfx_panic+0x10/0x10
[  618.314314][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  618.314338][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  618.314360][   T31]  watchdog+0x1023/0x1030
[  618.314380][   T31]  ? watchdog+0x21a/0x1030
[  618.314403][   T31]  kthread+0x388/0x470
[  618.314422][   T31]  ? __pfx_watchdog+0x10/0x10
[  618.314435][   T31]  ? __pfx_kthread+0x10/0x10
[  618.314459][   T31]  ret_from_fork+0x51e/0xb90
[  618.314484][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  618.314505][   T31]  ? __switch_to+0xc7d/0x1450
[  618.314528][   T31]  ? __pfx_kthread+0x10/0x10
[  618.314546][   T31]  ret_from_fork_asm+0x1a/0x30
[  618.314584][   T31]  </TASK>
[  618.534189][   T31] Kernel Offset: disabled
[  618.538493][   T31] Rebooting in 86400 seconds..