last executing test programs:

2m50.634356561s ago: executing program 1 (id=1940):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'erspan0\x00', <r3=>0x0, 0x7800, 0x781f, 0xfffff86d, 0x9, {{0x26, 0x4, 0x3, 0xf, 0x98, 0x65, 0x0, 0xeb, 0x2f, 0x0, @local, @local, {[@rr={0x7, 0x1f, 0xda, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @broadcast, @multicast1, @remote, @local]}, @noop, @end, @timestamp={0x44, 0x10, 0x4a, 0x0, 0x3, [0x6, 0x9b, 0x28]}, @timestamp={0x44, 0x1c, 0xc3, 0x0, 0x7, [0x5, 0x4, 0x9, 0x1, 0x4, 0x2]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x27, 0x3, 0xb, [{@loopback, 0x5}, {@multicast1, 0x5a}, {@private=0xa010102, 0x80000001}]}, @lsrr={0x83, 0x13, 0x2a, [@local, @remote, @loopback, @local]}]}}}}})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000800)={0x2, 'wg1\x00', {0x9}, 0x8001})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r5, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x5, 0x0, 0x2, 0x240, r2, 0xe, '\x00', r3, r4, 0x1, 0x2, 0x2, 0x7}, 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x390, 0xffffffff, 0x0, 0xd0, 0x1f0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [0xff000000, 0x0, 0x0, 0xff], 'veth0_vlan\x00', 'syzkaller0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x62d}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@ipv6header={{0x28}, {0x9, 0x70}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000100677265001800028006000300010000000400120006000e0000000000"], 0x44}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7fff, 0x0, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7800, 0x781f, 0xfffff86d, 0x9, {{0x26, 0x4, 0x3, 0xf, 0x98, 0x65, 0x0, 0xeb, 0x2f, 0x0, @local, @local, {[@rr={0x7, 0x1f, 0xda, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010101, @broadcast, @multicast1, @remote, @local]}, @noop, @end, @timestamp={0x44, 0x10, 0x4a, 0x0, 0x3, [0x6, 0x9b, 0x28]}, @timestamp={0x44, 0x1c, 0xc3, 0x0, 0x7, [0x5, 0x4, 0x9, 0x1, 0x4, 0x2]}, @end, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x1c, 0x27, 0x3, 0xb, [{@loopback, 0x5}, {@multicast1, 0x5a}, {@private=0xa010102, 0x80000001}]}, @lsrr={0x83, 0x13, 0x2a, [@local, @remote, @loopback, @local]}]}}}}}) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000800)={0x2, 'wg1\x00', {0x9}, 0x8001}) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r4, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r5, &(0x7f00000001c0)="a294238a60599e0c170c975906b66fefb05768afcb889fda2d66465d950225082ac8e85b9d51", &(0x7f0000000340)=""/86, 0x5943bb55469cc16e}, 0x20) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x5, 0x0, 0x2, 0x240, r2, 0xe, '\x00', r3, r4, 0x1, 0x2, 0x2, 0x7}, 0x50) (async)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x390, 0xffffffff, 0x0, 0xd0, 0x1f0, 0xfeffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [], [0xff000000, 0x0, 0x0, 0xff], 'veth0_vlan\x00', 'syzkaller0\x00', {}, {}, 0x6, 0x0, 0x1}, 0x2f2, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x18, 0x8, 0x62d}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff, 0x1}}, @common=@ipv6header={{0x28}, {0x9, 0x70}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128008000100677265001800028006000300010000000400120006000e0000000000"], 0x44}}, 0x0) (async)

2m50.482402821s ago: executing program 1 (id=1943):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private0, 0x3}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x4)
write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, r4, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0xa, [@enum={0x0, 0x3, 0x0, 0x6, 0x4, [{0x2, 0xd}, {0xc, 0xa627}, {0x7, 0x401}]}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x3, 0x7}, @decl_tag={0x4, 0x0, 0x0, 0x11, 0x2, 0xa}]}, {0x0, [0x30, 0x5f, 0x61, 0x0, 0x30, 0x5f, 0x5f, 0x0]}}, &(0x7f0000000380)=""/90, 0x66, 0x5a, 0x1, 0x6}, 0x28)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000500)={<r8=>r0, 0x10000, 0xb07, 0x1a83})
r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000540)={0xffffffffffffffff, 0x2, 0x10}, 0xc)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r10, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=@base={0xa, 0x8, 0x8, 0x2}, 0x50)
r13 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r12}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r11, @ANYRES32=r13, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r11, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r10}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r2, <r14=>0xffffffffffffffff}, 0x4)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x3}, 0x50)
r16 = bpf$TOKEN_CREATE(0x24, &(0x7f00000007c0)={0x0, r1}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8001}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x1a5, 0x0, 0x0, 0x40f00, 0x7924301ad52581aa, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000280)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x10, 0x7, 0x80000000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000640)=[r6, r7, r8, r9, r11, r14, r15], &(0x7f0000000680)=[{0x4, 0x5, 0xe, 0xa}, {0x1, 0x3, 0x2, 0x6}, {0x1, 0x5, 0x8, 0xb}, {0x3, 0x4, 0x8, 0x9}, {0x5, 0x4, 0xa, 0xc}], 0x10, 0xa93, @value=r16}, 0x94)
shutdown(r0, 0x1)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xfff9}, 0x8)

2m50.282404608s ago: executing program 1 (id=1946):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000000000000011424203008f"], 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000420007012bbd700000000000017c0000400000000c0001e55b58be809438f2c2d8d69e4e64b2fbcb6fce6feecbdf7a4a28f4763651ad2eb9ae044fcc125585c826cec476deab89701f12517e4379a681ea1fd490be9bf47af80a027701b62d42f557c7e69cb71b2dc3893f3b5d6fe2ade96e64f5405b98a4ebaa66e96daf388a"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r5, 0x11, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000380)={r5, 0x11, 0x6, @local}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}]}, 0xec}}, 0x2000c014)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)

2m50.074443989s ago: executing program 1 (id=1951):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c", @ANYRES32=0x0, @ANYBLOB="b58979"], 0x14c}}, 0x4810)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @local, 0x800}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket(0x2a, 0x2, 0x0)
r4 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'gretap0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x48}}, 0x0)
getsockname$packet(r3, &(0x7f0000000240)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f00000003c0)={@broadcast, @dev={0xac, 0x14, 0x14, 0x10}, r7}, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000580)={'wg1\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r8, r10}, 0x14)
getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000100)=""/3, &(0x7f0000000140)=0x3)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@ccm_128={{0x303}, "1244014d36541a13", "ef6f9708fb165a8344d5d4c40ffed7b6", "dabbdd4f", "210dd75a9466a91f"}, 0x28)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000020305000000000000020000000000000800010002000015"], 0x1c}}, 0x0)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
close(r0)

2m49.798723459s ago: executing program 1 (id=1956):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, &(0x7f0000000040)=0x2) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg0\x00', 0x781645b50f23b455}) (async)
write$tun(r1, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d40), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r3, 0x1}, 0x14}}, 0x0)

2m49.634364781s ago: executing program 1 (id=1959):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x5e20, 0x0, @local}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r3, 0x300, 0x8002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000002566f6922f9576397bf5694e88c79a7644e3db997c0187"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xffffff4d, 0x0, 0x1}, 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026bdf000fcdb080006"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xe0, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20020000}, 0x4801)

2m43.601622651s ago: executing program 2 (id=2049):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x77, &(0x7f00000002c0)="1a00000002000000", 0x8)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000000a0601010000000d0000000001000000050001000700000014000880100007970900120073797a32000000000900020073797a3200000000080009"], 0x44}}, 0x0)

2m43.55056404s ago: executing program 2 (id=2050):
r0 = socket$inet6(0xa, 0x4, 0x4)
socket$l2tp6(0xa, 0x2, 0x73)
r1 = socket$inet(0x2, 0x4000000805, 0x0)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000180)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r2 = socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmmsg$inet6(r2, &(0x7f0000007a80)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x1, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x338}}], 0x1, 0x20000000)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4627, 0xfdfffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @dev={0xfe, 0x80, '\x00', 0x23}, 0xe}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="9c435a7de4c0", 0x6}, {&(0x7f00000000c0)="199ffca6", 0x4}], 0x2}}], 0x1, 0x4001c00)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000100)="e25a6d9d851a37468bd32882843abe28", 0x10)

2m42.876308116s ago: executing program 2 (id=2061):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff)
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x20, 0x2, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4000040)

2m42.676621786s ago: executing program 2 (id=2064):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async)
r1 = socket(0xa, 0x3, 0x3a) (async)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xb001, 0x4, 0x3d0, 0x0, 0xe8, 0x1f8, 0x2e8, 0x2e8, 0x2e8, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @multicast2, 0x2}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00'}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x420) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', <r5=>0x0}) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6)
sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_DELTABLE={0xfc, 0x2, 0xa, 0x301, 0x0, 0x0, {0x21277965ebee7c83, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x88, 0x6, "b2a863ed747a95079be6877b63fd9e46bd7b4010797b49f9a1bd11c444e948cf1ad7fa86cc9d478d38943e2f4e6b7e5e23cc4c5193eebb8d032ef21a34554eab13ed7e42907c1958d01c65746a93b58db6bf74c29cafcd4997397a3bc24f991f1cc5c6049d345e95cac31668a4edcfdfdf8e119f4ae787d0aa249333ed44829cd76c8360"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}], {0x14}}, 0x124}, 0x1, 0x0, 0x0, 0x8811}, 0x44010) (async)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x28, r7, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x200048d0}, 0x0)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000340), r6)
sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)={0xa4, r8, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\xff\xff\xff\xff\xff\xff'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_DOMAIN={0x11, 0x1, '802.15.4 MAC\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0xa4}, 0x1, 0x0, 0x0, 0x2004004}, 0x11) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x14, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_DIR={0x5}}}}]}, 0x38}}, 0x0)
setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, r5}, 0xc) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000b00)=[@in={0x2, 0x4e24, @multicast2}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, @in6={0xa, 0x4e21, 0x7f, @loopback, 0x3}, @in6={0xa, 0x4e20, 0x9, @local, 0xe41}, @in6={0xa, 0x4e22, 0x8, @private2, 0xfffffff7}], 0x84)

2m42.538594445s ago: executing program 2 (id=2067):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e22], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8)
r2 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc)
setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
sendto$inet(r2, &(0x7f0000000200)="4e2ae3fb8f3d5f0783c4eab73dfdd05423d7079910caa6bf034b24fe3eb55b3e15b556d387b13b2f7bae9c4e2044868f25d97bcd36f415d380fab766d9aa981c6b9b6d4344f508207a5ed172d328b84778858fe2e30fa7bfcdc4ebf01e977b2e1b2a47877a24da08f1ee64ecfd3a5866e76bf7c1a500bbadd3224ec1bf3862b150f8fd2b83980132e9e4f0c707fd81916b5da7860c44a34801c4c9e640fe6379bbf75e79179eda1dd825728b7d026e91ced15764820c", 0xb6, 0x800, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10)

2m42.343921733s ago: executing program 2 (id=2070):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r0=>0xffffffffffffffff, 0x0, 0x0, 0xffff})
connect$ax25(r0, &(0x7f0000000080)={{0x3, @null, 0x3}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r4, 0x6}, &(0x7f0000000140)=0x8) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026bdf000fcdb080006"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)

2m34.572593991s ago: executing program 32 (id=1959):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x8, 0x4)
sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x5e20, 0x0, @local}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d80)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r3, 0x300, 0x8002}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1808000000000000000000000000008018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca90000000000003509010000000000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b700000000000000002566f6922f9576397bf5694e88c79a7644e3db997c0187"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe1b, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd81}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$IP6T_SO_GET_ENTRIES(r6, 0x29, 0x41, &(0x7f0000000000)={'mangle\x00', 0x5, "f47e6aeb88"}, &(0x7f0000000100)=0x2d)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xffffff4d, 0x0, 0x1}, 0x48)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026bdf000fcdb080006"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)
sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xe0, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20020000}, 0x4801)

2m27.114735116s ago: executing program 33 (id=2070):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={<r0=>0xffffffffffffffff, 0x0, 0x0, 0xffff})
connect$ax25(r0, &(0x7f0000000080)={{0x3, @null, 0x3}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r4=>0x0]}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f0000000000)={r4, @in={{0x2, 0x0, @empty}}}, 0x90)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={r4, 0x6}, &(0x7f0000000140)=0x8) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000041c0)=ANY=[@ANYBLOB="140000002600010026bdf000fcdb080006"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20048000)

1.155503173s ago: executing program 3 (id=4496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700060000000254a55b000000000005b6cabeee72aa18db3d12e8ab9638ac33b5e968b5c076c18a79587c1cd50211b0845d96a149ed1c2eea9a36ff7205edfb3103629788549cf5b19a425eb7255e14e8505cd1e76869", @ANYRES32=r2, @ANYBLOB="080005000c000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4810)
r3 = socket$kcm(0x10, 0x5, 0x10)
r4 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @remote}, &(0x7f0000000140)=0x10)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r5, 0x106, 0x1, 0x0, &(0x7f0000000040)=0xffffffffffffff5f)
getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f0000000b00)={'ipvs\x00'}, &(0x7f0000000b40)=0x1e)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
recvmmsg(r3, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/144, 0xdd}], 0x5}, 0x1}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000000a80)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/131}], 0x0, &(0x7f00000004c0)=""/205}, 0x2}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000380)=""/20}, {&(0x7f0000000640)=""/194}, {&(0x7f0000000440)=""/50}, {&(0x7f0000000740)=""/206}, {&(0x7f0000000840)=""/55}, {&(0x7f0000000880)=""/111}]}, 0x2}], 0x2, 0x0, 0x0)

1.098878709s ago: executing program 0 (id=4498):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)

1.048069885s ago: executing program 3 (id=4499):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f0000000100)="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", 0x209)

982.425861ms ago: executing program 0 (id=4501):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x44004)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xb18}, {}, {}, [@alu={0x4, 0x1, 0x9, 0x2, 0x0, 0x10, 0x8}, @alu={0x4, 0x1, 0x7, 0x4, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x1ff, 0x60, &(0x7f00000004c0)=""/96, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x0, 0xfffffffb, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x1, 0x1], &(0x7f0000000600)=[{0x2, 0x5, 0x9, 0x7}, {0x3, 0x2, 0x5, 0xa}, {0x0, 0x3, 0xe, 0xa}, {0x4, 0x5, 0x3, 0x9}, {0x1, 0x5, 0xa, 0xc}, {0x1, 0x5, 0x10}, {0x2, 0x5, 0x2, 0xb}, {0x3, 0x3, 0x8, 0x7}], 0x10, 0x8}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000280), &(0x7f0000000740)=r1}, 0x20)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe)
accept4$bt_l2cap(r6, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r5, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000"], 0x7c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newrule={0x4c, 0x20, 0x4, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x0, 0x4, 0x5, 0x0, 0x0, 0x6, 0x10003}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xc8b8}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004014}, 0x8000)
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0)

976.971117ms ago: executing program 6 (id=4502):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', <r2=>0x0})
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg0\x00', 0x4)
setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@mcast2, r2}, 0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r2, {}, {0xafabc05531515610, 0xfff3}, {0xf, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x4008054)
close(0x4)

927.463828ms ago: executing program 4 (id=4503):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x2, &(0x7f0000000300)=@raw=[@exit, @exit], &(0x7f0000000100)='GPL\x00', 0x8, 0xf6, &(0x7f0000000180)=""/246}, 0x90) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000008000000071102f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90)

878.215712ms ago: executing program 3 (id=4504):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r3=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}}, 0x10000000) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYBLOB="740000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000000000001c001280090001007866726d000000000c00028008000200ea000000140003007866726d000000000000000000000024000e000000000000000300"/91], 0x74}}, 0x0) (async)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40012120) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r6 = socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r9, {0xb, 0x2}, {0x12, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x4, 0x1, 0x3, 0x400, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) (async)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x1c, 0x36, 0x4, 0xfffffffc, 0x810000, {0x1, 0x7c}, [@typed={0x8, 0x4, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000900), &(0x7f0000000940)=0x4)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=@newtfilter={0x100, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0xfff3, 0xb}, {0x7}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0xd0, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xc4, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x44, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x18}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2b}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x15}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x100}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xda9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x3b, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x20}]}]}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xd}}]}}]}, 0x100}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=@newtaction={0x4b4, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4a0, 0x1, [@m_police={0x49c, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa3b}}}]]}, {0x2d, 0x6, "09300961000000000000005d0ac88fe91b0b13a5886538964425efe2cf51bdc10ead92ab665e912832"}, {0xc}, {0xc}}}]}]}, 0x4b4}}, 0x0) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r12, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000000070103000000000000000000000004080005400000000108000540000000000800057a300000400000000000000000030c000240000000007fffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4)
sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r13, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r14=>0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a74000000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c8c7ea75aae9aafd41b00030007682c020b7b37f27f51010054d4077549f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$inet(r0, &(0x7f0000000d40)={&(0x7f0000000980)={0x2, 0x4e22, @private=0xa010100}, 0x10, &(0x7f0000000c80)=[{&(0x7f00000009c0)="6ac7b5eb3904c87685c16d1863df4430357d7bcd740907467a3ba21d3f205589", 0x20}, {&(0x7f0000000a00)="c4eeeec28b6bb9f707d9b4e3a927ec558e69a15dd94d3a3b9a0cddf64893aeed7ca058a43e34ede63bcd25c89a8287f3b401002c44a6cb951fcc939391e07536cbec50046e4884086a7c373584176e5efad902d837d1b664ab21cf4a352525f957b9ad3dbf861faedd91853746522a11a2a63121f1ef42851806fd443ff81c618d994913b247bc729fee50bcecb22e64143a7f70", 0x94}, {&(0x7f0000000ac0)}, {&(0x7f0000000b40)="7ab4e957f49885f9e0bb8cd8372ace7b7a964c0335a4a7cf958c131cfc944c444c1f7e4b496abbdc1801cd51d81e871488cf7e841d0bb006bf757fa47ff0d030ea45be731f801801", 0x48}, {&(0x7f0000000bc0)="ac2a88b20e052b09f9b1bc25a4546b3ddea55648866d08ba9e2066cf891fbc202c7b3843d5793f46f77294461058eba1b2b5636ac8ff3ea7aa5b1d9aec72091a8e94386818047682c63b089c174f2cbf1e58f68415b48b33dd09ce1cc1e67d93bdc7e75f45b442fdd85ec070577dbdd8c43b6d3db72a0ef2b255f8edcb1a02a75a319fd30720b44830992805ebdc7685454f245524329a940d907ed4e0ea", 0x9e}], 0x5, &(0x7f0000000d00)=[@ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @local, @multicast1}}}], 0x38}, 0x20000000)
ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000340))

850.211489ms ago: executing program 0 (id=4505):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c0000004600070129bd70000000000021c5e9017c000008000480040cce58a5f62a76e6523eef086cedf2d528e120f5768c6de1b201c5792e905d3a32e1b56dceba802cb415e84061e57a27e8b837043553d6ceae3dec91044521a20a6bdfa36d9e438963ac"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x48090)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
syz_emit_ethernet(0x7a, &(0x7f0000000300)={@broadcast, @dev, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @private1}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x20044050)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
write(r8, &(0x7f00000001c0)='4', 0x1)
ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000040)={'pimreg\x00', @broadcast})
sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x4c, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x75d}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x4)
sendmsg$DEVLINK_CMD_SB_GET(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x11c, r7, 0x4, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x600000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x20000}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7a}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000841}, 0x801)

835.155265ms ago: executing program 6 (id=4506):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000009e00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000040000701fcffffff00000100037c0000040042800c0001800600060008"], 0x24}, 0x1, 0x0, 0x0, 0x4008011}, 0xc000)

782.342609ms ago: executing program 4 (id=4507):
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
socket$igmp(0x2, 0x3, 0x2) (async)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x35}, @remote}, 0x10)
setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0)
mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, 0xffffffffffffffff, 0xd7a18000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000140), &(0x7f0000000000)=0x8)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000080)={'icmp6\x00'}, &(0x7f0000000100)=0x1e)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001) (async)
sendmsg$inet(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)='$', 0x1}], 0x1}, 0x4040001)
recvmsg$unix(r5, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1) (async)
recvmsg$unix(r5, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x1)
recvmsg$unix(r5, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
accept4$tipc(r3, &(0x7f0000000300)=@name, &(0x7f0000000340)=0x10, 0x40800)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2) (async)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r7, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x300, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2, 0x7ffffff}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async)
setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0x2, 0x4)

781.086163ms ago: executing program 5 (id=4508):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030001000000050003335a0000000500030000000000050003008000000005000300020000000800020003"], 0x50}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_FW_DOWNLOAD(r2, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x14, r3, 0xba960a2220112c19, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x100040c0}, 0x80)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0xa0c0}, 0x20000840) (async)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0xa0c0}, 0x20000840)

719.146839ms ago: executing program 6 (id=4509):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0xa8, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x94, 0x1, [@m_ife={0x90, 0x4, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}]}, {0x59, 0x6, "94fb5fb6f7f2b4cac7b2f0da9de6a296262892140aed3ca8f8d08e638db7cdfee0f999e9f73ddb68219fa554096bffec032ad19e1460328b17035d1b38fc6124ed3de99a4a677636fc0547e480d12bf7e2c01b4ccf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x4, 0x90, [0x0, 0x200000000180, 0x2000000002c6, 0x2000000004dc], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x108)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e)
ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000100))
r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e)
socket(0x2d, 0x2, 0x0)
bind$unix(r5, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e)

696.961283ms ago: executing program 5 (id=4510):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000001015ed34d6de00010400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c00028008000f00ffffffff"], 0x3c}, 0x1, 0xff7f}, 0x0)

630.383486ms ago: executing program 3 (id=4511):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x50, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xffffffffffffff9f, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}]}, 0x50}}, 0x4040004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r8=>0x0})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r7)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2c, r9, 0x401, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14a0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000040)={0x1c, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x140b, 0x1, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)

629.933928ms ago: executing program 6 (id=4512):
r0 = socket(0xb, 0x80000, 0x3b)
setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff)
r1 = socket$inet6(0xa, 0x80002, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x68a800, 0x0)
connect$inet6(r1, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000cc000000262c6c20e366f3fc0d7578b65be696c16ea1eda271050d31bfb03639858835b113bfb89146a017aefcf384d20aa1155bf65c7f6a44dbde66b09e0153a2f5d90dcea070c248f26d4396980125ab853edf4dbb06dda627c3011785ed52acbf3d7f31be278c38fb0784c495e19ddb8067374c3f44db9de9de1db0d966a68f7c742bf24e4fcd97737377dbe99088e3920a33695381e150d7156e9168b2a798a0e1ec538d2ea395e8e0d45860d43a07f970313c3752dc99f10ee6695407cee296b03178f2a107cce81e4c"], &(0x7f0000000140)=0xf0)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)

561.258248ms ago: executing program 0 (id=4513):
pipe(&(0x7f00000001c0)={<r0=>0xffffffffffffffff})
setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={<r2=>0x0, @dev, @multicast1}, &(0x7f0000000080)=0xc)
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@delchain={0x4c, 0x65, 0x2, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0x7}, {0x9, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0xeb}]}}, @TCA_RATE={0x6, 0x5, {0xcd}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffce6, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000000000000000000000000034000dc"}}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000800)=@newtaction={0x90, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_connmark={0x34, 0x2, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0)

560.972957ms ago: executing program 5 (id=4514):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x20000000)
r1 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r1, &(0x7f00000066c0)=[{{&(0x7f00000019c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0}}], 0x1, 0x5efe)

560.679846ms ago: executing program 6 (id=4515):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000d1", @ANYRES16, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4040840}, 0x44004)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xb18}, {}, {}, [@alu={0x4, 0x1, 0x9, 0x2, 0x0, 0x10, 0x8}, @alu={0x4, 0x1, 0x7, 0x4, 0x1, 0xfffffffffffffffe, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x1ff, 0x60, &(0x7f00000004c0)=""/96, 0x41000, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x0, 0xfffffffb, 0x5}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000580)=[0x1, 0x1], &(0x7f0000000600)=[{0x2, 0x5, 0x9, 0x7}, {0x3, 0x2, 0x5, 0xa}, {0x0, 0x3, 0xe, 0xa}, {0x4, 0x5, 0x3, 0x9}, {0x1, 0x5, 0xa, 0xc}, {0x1, 0x5, 0x10}, {0x2, 0x5, 0x2, 0xb}, {0x3, 0x3, 0x8, 0x7}], 0x10, 0x8}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r0}, &(0x7f0000000280), &(0x7f0000000740)=r1}, 0x20)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe)
accept4$bt_l2cap(r6, 0x0, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'})
sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r5, 0x20, 0x2000, 0x2, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x3}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000)
socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r9, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008000000"], 0x7c}}, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@ipv4_newrule={0x4c, 0x20, 0x4, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x0, 0x4, 0x5, 0x0, 0x0, 0x6, 0x10003}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xc8b8}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_DST={0x8, 0x1, @multicast1}, @FRA_DST={0x8, 0x1, @rand_addr=0x64010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004014}, 0x8000)
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0)

484.617973ms ago: executing program 4 (id=4516):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@mpls_delroute={0x30, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0x11, "b6acd7b8f7f0a0ae8c5d910c3378"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
write$cgroup_pid(r1, &(0x7f0000000340), 0x6)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)="c1", 0x0, 0x2, 0x0, 0x9}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)

401.587256ms ago: executing program 5 (id=4517):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r6, &(0x7f00000004c0)={0x1f, 0x4, @none, 0x0, 0x2}, 0xe)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0xff, @fixed, 0x0, 0x1}, 0xe)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
write$cgroup_pid(r5, &(0x7f0000000140), 0x12)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="f65f5f5dc5e7fdb2a9e28ce2efc7dc4e754439ca4fc8650e48174b2f59a684ac0dbf6d88f1c64e3fbe367493684fcb1bcf566cae42fe4f47ad9a212e86f07810ad374000"/87, @ANYRES16=r0, @ANYBLOB="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"], 0x344}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000680)={0x18, r0, 0x1, 0x0, 0x0, {0xb}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0)

399.101262ms ago: executing program 0 (id=4518):
r0 = socket$netlink(0x10, 0x3, 0xa)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r1, {0x8, 0x3}, {0xfff1, 0xffff}, {0xffff, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c)
r2 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
r4 = socket$kcm(0x21, 0x2, 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
sendmsg$inet(r4, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@ip_retopts={{0x10, 0x110, 0xc}}], 0x10}, 0x0)
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000380)="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")
getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x11, &(0x7f00000000c0)=0x1)

397.711148ms ago: executing program 3 (id=4519):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000082295", @ANYBLOB="810d3d99296aca6c88d756e05c3b1372b7b575c70ffe747483054aaf54a155a44545f1e87d2a0636380972ec48d5f30370ed9719099e3a2360c83ca53f9c5c561bdac250f40ecc3172026b6d2994540eea6a592a0b26c30c90baf7a44fb78fdb8360ddbe412b4f95", @ANYRESDEC, @ANYRES8=0x0], &(0x7f0000000040)='syzkaller\x00', 0x20000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f00000002c0)="ff412f66b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50)

344.817079ms ago: executing program 4 (id=4520):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket(0x10, 0x80002, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'vlan0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r3, @ANYBLOB="0a000100aa"], 0x48}}, 0x0)
sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0)

343.634689ms ago: executing program 6 (id=4521):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) (async)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) (async)
r4 = epoll_create1(0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000000)) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async)
readv(r0, &(0x7f0000000040)=[{&(0x7f00000038c0)=""/4118, 0x1016}], 0x1) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) (rerun: 32)

213.954048ms ago: executing program 3 (id=4522):
r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60)
shutdown(r0, 0x1)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x20040094)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
read$nci(r3, &(0x7f0000000240)=""/185, 0xb9)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_PIM(r4, 0x0, 0xcf, &(0x7f0000000300), 0x4)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x0, @nfc={0x27, 0x0, 0x0, 0x5}, @qipcrtr={0x2a, 0x4, 0xfffffffe}, @vsock={0x28, 0x0, 0x2711, @host}, 0xf8, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)='bridge_slave_0\x00', 0x7fffffffffffffff, 0x7, 0x200})
r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000400), 0x8)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000480)={'batadv_slave_0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@delqdisc={0x168, 0x25, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x1}, {0x2714bd91ae685814, 0xf}, {0x4, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xcd}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_STAB={0x124, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1, 0xa, 0xffffff8e, 0x0, 0x1, 0x3, 0x7}}, {0x12, 0x2, [0xaba, 0x2, 0x9, 0x3ff, 0x2, 0x3, 0xfff8]}}, {{0x1c, 0x1, {0x5, 0x7d, 0x2, 0x2886a88f, 0x0, 0x20000000, 0xfffffffa, 0x3}}, {0xa, 0x2, [0x5, 0x5, 0x66f]}}, {{0x1c, 0x1, {0x81, 0x6, 0x0, 0x40, 0x0, 0x77c5, 0xfffffffe, 0x2}}, {0x8, 0x2, [0x9, 0x4]}}, {{0x1c, 0x1, {0x49, 0xd7, 0x1, 0xcb, 0x0, 0x63, 0x7, 0x2}}, {0x8, 0x2, [0x1f6, 0x1]}}, {{0x1c, 0x1, {0x6, 0x80, 0x1, 0x6ef2, 0x0, 0xd6c, 0x9, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x4, 0x5, 0x8, 0x1, 0x2, 0x2, 0x800, 0x6}}, {0x10, 0x2, [0x1, 0x913, 0x3, 0xcad5, 0x101, 0x3ff]}}, {{0x1c, 0x1, {0x4, 0x3, 0xc, 0x7, 0x0, 0x56b, 0x6, 0x8}}, {0x14, 0x2, [0x6, 0xf001, 0x2, 0x6, 0x6, 0x8001, 0x9, 0x8]}}]}, @TCA_RATE={0x6}, @TCA_RATE={0x6, 0x5, {0x1, 0x69}}]}, 0x168}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f00000006c0)={<r7=>0x0, 0x95, 0x10, 0x1, 0x9}, &(0x7f0000000700)=0x18)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000740)=@sack_info={r7, 0x101, 0x6}, &(0x7f0000000780)=0xc)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000007c0)={r7, 0x5700, 0x5}, &(0x7f0000000800)=0x8)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000900)={'ip6gre0\x00', &(0x7f0000000880)={'syztnl2\x00', <r8=>r6, 0x29, 0xff, 0x3, 0x5, 0x20, @private2, @mcast2, 0x7, 0x10, 0x218, 0x8}})
sendmsg$nl_route_sched(r5, &(0x7f0000000a40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a00)={&(0x7f0000000940)=@deltclass={0x84, 0x29, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xb, 0x6}, {0x2, 0x8}, {0xa, 0xd}}, [@tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_mqprio={0xb}, @tclass_kind_options=@c_clsact={0xb}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0xb, 0x1}}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0xb}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)
sendmsg$NFT_BATCH(r5, &(0x7f0000000fc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x1b0, 0xb, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_USERDATA={0xfb, 0xd, 0x1, 0x0, "ecc97b6cb88f57872ea4faab5440a9387303683b8360860382ac705ed7ccdf61bacd7740c1dfc64327c81d1b374a0cb7c1cbfe015e043e874912c4e6d657819f67404b41778d32452e3a82702546a83aa328e9d2e3ee72a41fc120d4665a55bd23db97a4f3b91aa723c7bb3518b980ed992633dc98f16ab578bb3809ccd8bdbb7ae5af64dc10892b5c87d3925d162e11f2bb778e542f8391fe49f109918c5c8c8711fe675d59b7aa5cd4649f5a1edcebc96c32ff0160800277928d57e33eaaf41ac964af0eba8dc577d44ccf7af7709e61d5d757b8a290aa1739fdfd0a60061ca5694ef15d3e2f2ae8e6291af7dfb0258ff19a6ffaf7fb"}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_EXPR={0x94, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x7c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}, @NFT_MSG_DELSET={0x84, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_EXPRESSIONS={0x58, 0x12, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x64}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe4}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}]}]}, @NFT_MSG_NEWTABLE={0x1a8, 0x0, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x8b, 0x6, "46be636a4074746fad70576bc24a06071985449a4f5a2007e23b19bca6ca2059cb7da633208974130df049244f603638c0e0651a1eb98565681c92ee48ea2e8867e74b4656f2b4af5d9426d65d336aba40aed8ef2324dff055543e75b24d9e3e36143211651e9a3a2f5732459198da2023580100c44442eb7f7d93a6ad64ccc7c8887156b145a7"}, @NFTA_TABLE_USERDATA={0x34, 0x6, "36c7f27019269672dc07bfa3f3dbc2b17a56ffea4e1ffffe27197f09ca93144fdeb9c8f9c2d349fed372e9f091729980"}, @NFTA_TABLE_USERDATA={0xcb, 0x6, "92c6e00e9cee4ce5bf1125f25b8c0d710207461bc8d38cacd65e2f5aafdab809afbdcb78f09fd3569d77f6ba494f41ac99cee33f2380e062c92517c2a9859b9518ebab1da92b03edff15efe5d91b7a9951672fe73bc587ee54494ff82317d1f7dbe13106499872745126f5be6bd7c40f0c52e1460cf2aaa452d8c9c618c4a4c512d34fc9172a4c7c0d6203d4376242b7f4538987b54cc867084aa4b83db839f540c9483e46b27ca4dc358567500c12c18bae8bd59e512940ac1e5f55aae30c5e1b27d58c45d5f5"}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0xc03, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_CHAIN_USERDATA={0x44, 0xc, "2d6d815e587582e7835021c023d56355b8bc5770f5c04dfc558ab153bfad91da77e47aab5408b7d6ead748c77674586fb5960482845565eaa6aed0762555b787"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x490}, 0x1, 0x0, 0x0, 0x80}, 0xc851)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000001040), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000001100)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, r9, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24080}, 0x4)
sendto$inet(r4, &(0x7f0000001140)="f4f8eb5c33346a6d6633789040c732633833400734de1e82357ad649b2a34580b2d78c8efc342a60b212f73295a53f8551e50566c0e2d24b6304d4c2871585c6e06399669a0c5ac74aaff08bd0aa4604fddf39537b1812a972c734feac64d5f5cdcf744d6f36909fc052f96901124e4418cf93", 0x73, 0x10, &(0x7f00000011c0)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
connect$inet(r5, &(0x7f0000001200)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001280), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x1c, r10, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x200}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10001}, 0x10)
setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001380)={0xff, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x3, 'fo\x00', 0x4, 0x400, 0x76}, 0x2c)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000013c0)={'team_slave_1\x00', {0x2, 0x4e23, @loopback}})
read(0xffffffffffffffff, &(0x7f0000001400)=""/99, 0x63)

213.517823ms ago: executing program 0 (id=4523):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000000008500000061000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r1 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000004000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70b52a, 0x2001, {0x0, 0x0, 0x0, r2, {0x7}, {0xffff, 0xffff}, {0x5, 0xffe0}}}, 0x24}}, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x36, 0x0, &(0x7f00000003c0)="e02742e8680d85ff970c2d2f86dd1835e83dcd7105227dad63d67dfbeb9f39fc145a147f3958c985e6f1e330389c6546a8d9547652e5", 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

154.885336ms ago: executing program 5 (id=4524):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x3}, 0x4)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2400000001040500000000000000002c9654320006000640bff200000500010001"], 0x24}}, 0x20000020)
close(0x3)

99.90503ms ago: executing program 4 (id=4525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040))
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)

10.327124ms ago: executing program 5 (id=4526):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf6}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x5cc98d40839813b5}]}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r5], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000019340)={0x54, r6, 0x1, 0x70bd2a, 0xfffffffe, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2001}}, {0x6, 0xb, 0x1000}, {0x6, 0x16, 0x794}, {0x5}}]}, 0x54}, 0x1, 0x0, 0x0, 0x448d5}, 0x24008004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000400)='qgroup_num_dirty_extents\x00', r0}, 0x8)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYRES64], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x23}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xffff0002, 0xf0, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r9, 0x0, 0x10, &(0x7f0000000000)="170000000a00020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e60500", 0x105)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1800000014000100000000000000000008001300", @ANYRES32, @ANYBLOB="57bfe1a597f6df4c4b0f3d8c03b2d3ca7ba0876299586e72e2e79acaf7ba761f5c4e8ef85ecf3c5e145982c305c14c7a1421c7404267bc609944bfa5ea6f991a0c7dec86d1f83ccc6313d7b5db799d1b947d2506c4a1bd65c4c526ddbba167b1eb8bdbbce328012fed80829a1359701176194e8f29fffbfded702dd12a3de487288af7d825e91d948920f739caad55ff9231d9cc85bc84a3d5fb33307bdfd293594e30b85462b26058403dac5c012530c596acd00acab21adf197a5f2c48d7f9aa51"], 0x18}], 0x1}, 0x0)
r10 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r10, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r11, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000005c0)={'ip6gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x4, 0xa8, 0xc, 0x10000, 0x5, @private1, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x8, 0x8}})
bpf$ITER_CREATE(0x21, &(0x7f0000000600), 0x8)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000700)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r12, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_TID={0xc, 0x3, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40d0}, 0x80)
connect$inet6(0xffffffffffffffff, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r10)

0s ago: executing program 4 (id=4527):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) (async)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047438, 0x8)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000084"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYRESHEX=r4], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r4, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000001880)=""/4105, 0x1009}}, 0x10) (async)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async)
r5 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
r6 = socket(0x10, 0x803, 0x4)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) (async)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=@ipv6_getnexthop={0x18, 0x6a, 0x1}, 0x18}}, 0x0)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f00000009c0)={'veth1_to_batadv\x00', &(0x7f00000008c0)=@ethtool_rxnfc={0x29, 0x10, 0x3, {0x3, @udp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x22}, @multicast1, 0x4e20, 0x4e23, 0x8}, {0x0, @remote, 0x0, 0x6, [0x1]}, @udp_ip6_spec={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x4e22, 0xff}, {0x0, @remote, 0x7f, 0xfffa, [0xda, 0xfa]}, 0xc00, 0x1}, 0x5, [0x10, 0x10001, 0x7, 0x1, 0x2]}}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}}}, 0x24}}, 0x0) (async)
r10 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000380)={<r11=>0x0, 0xc3, "90c2737814b82bcd222fa8d426bb755ff4fb0cc8b49b2df1c7d37123c6457d04788b879a91d55b5e7d9326c99a32d2fae26520daf087197e7ff8d37c5d361af2ddc40a22de699ba85bd5f68790d39f5dbccadbd223985f11c159baf56616a5d9995cc45fd88cac2814d79199f4e9444e9dc838638b2850b55d35817df2f63c2132a741b282222e6458226988195d14ee1bf751f5f8c11b6c35442edb57beb469ed51eba9f3728fee1c5f94acfb6138b6c8a47307ed63e3b95d26f9fa22a65a33bb66a9"}, &(0x7f0000000480)=0xcb)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f00000004c0)={r11, 0xd0, "c752f5718bdea9efe5fb348acc377ba4c79d5b7ea078ac4120f1cf7bb175928df967a5bfbd266b381e5caa25f05c4c0b3ccc93d20726f439643f45abf2b5c415b672a6c9f1c298f12f5dea27a589a02dabcd93e2cabfd66c84cd34d1be3165ab93de00ebe62a31b3230302e6135c314e4c895c43df7c907727753790ad6c1628fd75fc28071f94a3cc271b41449677941d683ebbc63021caa9614558441e4781e2f966356e1191f8d3c358d1d3ff261cd2b413860eb55441081f443fbbc017e456be45b1669cb538309ff24d8b84e0c7"}, &(0x7f00000005c0)=0xd8) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) (async)
bind$inet6(r12, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x10000000}, 0x1c) (async)
setsockopt$inet6_MCAST_MSFILTER(r12, 0x29, 0x30, &(0x7f0000000600)={0x8, {{0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x0, 0x4, [{{0xa, 0x4e22, 0x80000001, @private1, 0x3}}, {{0xa, 0x4e21, 0x8, @mcast1, 0xb}}, {{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {{0xa, 0x4e23, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}]}, 0x290)

kernel console output (not intermixed with test programs):

to HW filter on device team0
[  257.656350][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[  257.663548][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[  257.696370][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  257.703504][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  258.007743][T15734] macvtap1: entered promiscuous mode
[  258.013560][T15734] macvtap1: entered allmulticast mode
[  258.034714][T15734] gretap0: entered promiscuous mode
[  258.054897][T15734] gretap0: entered allmulticast mode
[  258.070054][T15734] team0: Device macvtap1 failed to register rx_handler
[  258.083975][T15741] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2794'.
[  258.086165][T15734] gretap0: left allmulticast mode
[  258.099550][T15734] gretap0: left promiscuous mode
[  258.136852][T15744] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2794'.
[  258.156014][T15735] macvtap1: entered promiscuous mode
[  258.161442][T15735] macvtap1: entered allmulticast mode
[  258.168225][T15735] gretap0: entered promiscuous mode
[  258.173535][T15735] gretap0: entered allmulticast mode
[  258.183755][T15735] team0: Device macvtap1 failed to register rx_handler
[  258.196430][T15735] gretap0: left allmulticast mode
[  258.202007][T15735] gretap0: left promiscuous mode
[  258.244023][T15716] wlan0 speed is unknown, defaulting to 1000
[  258.264890][T15716] hsr0 speed is unknown, defaulting to 1000
[  258.457188][T15742] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  258.726160][ T5841] Bluetooth: hci3: command tx timeout
[  259.880922][T15437] 8021q: adding VLAN 0 to HW filter on device batadv0
[  260.085580][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms
[  260.093624][    C1] lec:lec_tx_timeout: lec0
[  260.099484][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  260.175848][T15794] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2804'.
[  260.277450][T15798] bond1: option min_links: invalid value (18446744073709551614)
[  260.285884][T15798] bond1: option min_links: allowed values 0 - 2147483647
[  260.294928][T15798] bond1 (unregistering): Released all slaves
[  260.337231][T15801] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  260.449156][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'.
[  260.478130][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2807'.
[  260.629032][T15437] veth0_vlan: entered promiscuous mode
[  260.659753][T15823] pim6reg: entered allmulticast mode
[  260.664259][T15828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2813'.
[  260.667209][T15823] pim6reg: left allmulticast mode
[  260.768383][T15823] netlink: 'syz.6.2811': attribute type 15 has an invalid length.
[  260.789210][T15828] macvtap1: entered promiscuous mode
[  260.794539][T15828] vlan0: entered promiscuous mode
[  260.799899][T15828] macvtap1: entered allmulticast mode
[  260.805391][T15828] vlan0: entered allmulticast mode
[  260.811445][T15828] veth0_vlan: entered allmulticast mode
[  260.811513][ T5841] Bluetooth: hci3: command tx timeout
[  260.839098][T15437] veth1_vlan: entered promiscuous mode
[  260.931116][T15843] netlink: 'syz.3.2817': attribute type 1 has an invalid length.
[  260.948568][T15437] veth0_macvtap: entered promiscuous mode
[  261.021514][T15843] 8021q: adding VLAN 0 to HW filter on device bond8
[  261.025442][T15851] netlink: 'syz.0.2819': attribute type 10 has an invalid length.
[  261.062610][T15851] 8021q: adding VLAN 0 to HW filter on device team0
[  261.081067][T15851] team0: entered promiscuous mode
[  261.087411][T15851] bond0: (slave team0): Enslaving as an active interface with an up link
[  261.102595][T15437] veth1_macvtap: entered promiscuous mode
[  261.144229][T15857] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2821'.
[  261.149792][T15437] batman_adv: batadv0: Interface activated: batadv_slave_0
[  261.182266][T15437] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.203774][ T3547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.238356][ T3547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.247891][ T3547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.269570][ T3547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.362994][ T8839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.378713][ T8839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.421621][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  261.431293][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  261.561874][T15875] 0: reclassify loop, rule prio 0, protocol 800
[  261.572787][T15878] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2702'.
[  261.663670][T15883] bond10: Unable to set up delay as MII monitoring is disabled
[  261.679909][T15883] bond10 (unregistering): Released all slaves
[  261.750642][T15891] netlink: 'syz.4.2831': attribute type 10 has an invalid length.
[  261.768599][T15891] 8021q: adding VLAN 0 to HW filter on device team0
[  261.785117][T15891] bond0: (slave team0): Enslaving as an active interface with an up link
[  261.794670][T15889] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2830'.
[  261.819113][T15889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2830'.
[  261.868010][T15895] syzkaller0: entered promiscuous mode
[  261.874458][T15895] syzkaller0: entered allmulticast mode
[  262.287187][T15911] netlink: 'syz.6.2838': attribute type 1 has an invalid length.
[  262.724654][ T5833] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  262.738526][ T5833] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  262.749785][ T5833] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  262.759905][ T5833] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  262.767822][ T5833] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  262.849414][T15941] netlink: 'syz.3.2845': attribute type 10 has an invalid length.
[  262.867509][T15941] 8021q: adding VLAN 0 to HW filter on device team0
[  262.880160][T15941] bond0: (slave team0): Enslaving as an active interface with an up link
[  263.288976][T15950] __nla_validate_parse: 2 callbacks suppressed
[  263.288992][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2848'.
[  263.401671][T15953] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2848'.
[  263.420436][T15932] wlan0 speed is unknown, defaulting to 1000
[  263.430529][T15932] hsr0 speed is unknown, defaulting to 1000
[  263.624152][T15971] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2856'.
[  263.742340][T15932] chnl_net:caif_netlink_parms(): no params data found
[  263.798259][T15983] netlink: 'syz.6.2859': attribute type 10 has an invalid length.
[  263.850418][T15983] 8021q: adding VLAN 0 to HW filter on device team0
[  263.893013][T15983] bond0: (slave team0): Enslaving as an active interface with an up link
[  264.022755][T16011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.075425][T15932] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.107295][T15932] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.114749][T15932] bridge_slave_0: entered allmulticast mode
[  264.141428][T15932] bridge_slave_0: entered promiscuous mode
[  264.169487][T15932] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.187990][T15932] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.212628][T15932] bridge_slave_1: entered allmulticast mode
[  264.222622][T15932] bridge_slave_1: entered promiscuous mode
[  264.331697][T15932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.368474][T15932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.526287][T15932] team0: Port device team_slave_0 added
[  264.547759][T15932] team0: Port device team_slave_1 added
[  264.697349][T16049] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2874'.
[  264.743572][T15932] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.767146][T15932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.805806][ T5841] Bluetooth: hci7: command tx timeout
[  264.839297][T16058] netlink: 'syz.3.2876': attribute type 10 has an invalid length.
[  264.849628][T15932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.876728][T16059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2874'.
[  264.884088][T15932] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.896564][T15932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.947481][T15932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.983819][T16051] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2875'.
[  265.129216][T15932] hsr_slave_0: entered promiscuous mode
[  265.147495][T15932] hsr_slave_1: entered promiscuous mode
[  265.185919][T15932] debugfs: 'hsr0' already exists in 'hsr'
[  265.191689][T15932] Cannot create hsr debugfs directory
[  265.424764][T16090] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2883'.
[  265.607378][T16099] netlink: 576 bytes leftover after parsing attributes in process `syz.4.2887'.
[  265.679155][T15932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  265.695951][T15932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.697857][T16106] netlink: 'syz.5.2890': attribute type 10 has an invalid length.
[  265.760916][T16106] 8021q: adding VLAN 0 to HW filter on device team0
[  265.788151][T16106] bond0: (slave team0): Enslaving as an active interface with an up link
[  265.855803][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms
[  265.863865][    C1] lec:lec_tx_timeout: lec0
[  265.869044][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  266.000704][T15932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.023590][T15932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.049222][T16125] tipc: Started in network mode
[  266.054118][T16125] tipc: Node identity ac14140f, cluster identity 4711
[  266.116599][T16125] tipc: New replicast peer: 255.255.255.255
[  266.144706][T16125] tipc: Enabled bearer <udp:syz2>, priority 10
[  266.273857][T16139] x_tables: duplicate underflow at hook 1
[  266.339671][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2897'.
[  266.363583][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2897'.
[  266.578618][T15932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.608787][T15932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.699747][T16158] netlink: 'syz.6.2904': attribute type 8 has an invalid length.
[  266.758709][T15932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  266.769570][T15932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.791967][T16161] netlink: 'syz.3.2905': attribute type 10 has an invalid length.
[  266.792884][T16156] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  266.808818][T16160] syzkaller0: entered promiscuous mode
[  266.824172][T16160] syzkaller0: entered allmulticast mode
[  266.884097][T16156] tipc: Resetting bearer <eth:syzkaller0>
[  266.886997][ T5841] Bluetooth: hci7: command tx timeout
[  266.904887][T16154] tipc: Resetting bearer <eth:syzkaller0>
[  266.933475][T16154] tipc: Disabling bearer <eth:syzkaller0>
[  267.116735][T15932] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  267.179254][T15932] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  267.215384][T15932] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  267.232668][T15932] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  267.315727][T16196] sctp: [Deprecated]: syz.5.2914 (pid 16196) Use of int in max_burst socket option.
[  267.315727][T16196] Use struct sctp_assoc_value instead
[  267.417627][T15932] 8021q: adding VLAN 0 to HW filter on device bond0
[  267.441793][T15932] 8021q: adding VLAN 0 to HW filter on device team0
[  267.460685][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  267.467946][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  267.480487][T16204] netlink: 'syz.5.2916': attribute type 1 has an invalid length.
[  267.495465][ T8826] bridge0: port 2(bridge_slave_1) entered blocking state
[  267.502678][ T8826] bridge0: port 2(bridge_slave_1) entered forwarding state
[  267.875000][T16228] netlink: 'syz.3.2920': attribute type 10 has an invalid length.
[  267.905657][ T8451] tipc: Node number set to 2886997007
[  267.980481][T15932] 8021q: adding VLAN 0 to HW filter on device batadv0
[  268.156170][T15932] veth0_vlan: entered promiscuous mode
[  268.182422][T15932] veth1_vlan: entered promiscuous mode
[  268.244537][T15932] veth0_macvtap: entered promiscuous mode
[  268.272426][T15932] veth1_macvtap: entered promiscuous mode
[  268.320759][T15932] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.349046][T15932] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.370967][ T8845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  268.398096][ T8845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  268.416454][ T8845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  268.433872][T16254] netlink: 'syz.3.2929': attribute type 39 has an invalid length.
[  268.438720][ T8845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  268.574829][ T8839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.607071][ T8839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.651086][T16270] netlink: 'syz.5.2933': attribute type 10 has an invalid length.
[  268.709267][T16274] __nla_validate_parse: 3 callbacks suppressed
[  268.709284][T16274] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  268.719385][T16272] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  268.732265][ T8849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.756838][ T8849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.790101][T16274] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  268.831513][T16272] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  268.841839][T16274] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  268.906526][T16272] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  268.924622][T16274] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  268.936894][T16282] netlink: 'syz.0.2836': attribute type 2 has an invalid length.
[  268.945084][T16272] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  268.967077][ T5841] Bluetooth: hci7: command tx timeout
[  268.987417][T16286] netlink: 'syz.5.2938': attribute type 25 has an invalid length.
[  269.006039][T16274] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  269.029843][T16272] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2934'.
[  269.393266][T16300] syzkaller0: entered promiscuous mode
[  269.399118][T16300] syzkaller0: entered allmulticast mode
[  269.412859][T16305] IPv4: Oversized IP packet from 127.202.26.0
[  269.424700][T16303] netlink: 'syz.6.2946': attribute type 1 has an invalid length.
[  269.581149][T16308] netlink: 'syz.4.2948': attribute type 10 has an invalid length.
[  269.889732][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  269.899301][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  269.928871][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  269.957370][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  269.965076][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  270.131429][T16327] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  270.383827][T16319] wlan0 speed is unknown, defaulting to 1000
[  270.403749][T16319] hsr0 speed is unknown, defaulting to 1000
[  270.573158][T16338] syzkaller0: entered promiscuous mode
[  270.581356][T16338] syzkaller0: entered allmulticast mode
[  270.649374][T16346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.660825][T16346] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  270.746351][T16349] bond1: invalid ARP target 0.0.0.0 specified for addition
[  270.755125][T16349] bond1: option arp_ip_target: invalid value (0)
[  270.766598][T16349] bond1 (unregistering): Released all slaves
[  270.804014][T16346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  270.815064][T16346] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  270.852745][T16319] chnl_net:caif_netlink_parms(): no params data found
[  270.875575][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  270.883647][    C1] lec:lec_tx_timeout: lec0
[  270.889674][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  271.030567][T16346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  271.044731][T16346] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  271.055985][ T5833] Bluetooth: hci7: command tx timeout
[  271.115311][T16346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  271.125881][T16346] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0
[  271.199159][T16319] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.212100][T16319] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.221410][T16319] bridge_slave_0: entered allmulticast mode
[  271.248248][T16319] bridge_slave_0: entered promiscuous mode
[  271.289581][T16319] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.304758][T16319] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.317113][T16319] bridge_slave_1: entered allmulticast mode
[  271.326836][T16319] bridge_slave_1: entered promiscuous mode
[  271.382632][ T8846] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  271.396191][ T8846] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 19999 - 0
[  271.446946][T16319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  271.456669][ T8846] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  271.465800][ T8846] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 19999 - 0
[  271.482604][T16319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  271.594785][ T8846] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  271.614791][ T8846] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 19999 - 0
[  271.632331][T16319] team0: Port device team_slave_0 added
[  271.645481][ T8846] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  271.664953][ T8846] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 19999 - 0
[  271.684680][T16319] team0: Port device team_slave_1 added
[  271.853219][T16319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.864594][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  271.891330][T16319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  271.940427][T16319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  271.952776][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  271.979591][T16319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.006255][ T5833] Bluetooth: hci0: command tx timeout
[  272.100430][T16319] hsr_slave_0: entered promiscuous mode
[  272.114175][T16319] hsr_slave_1: entered promiscuous mode
[  272.131738][T16319] debugfs: 'hsr0' already exists in 'hsr'
[  272.148061][T16319] Cannot create hsr debugfs directory
[  272.336245][T16319] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.397772][T16319] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.446972][T16319] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.506735][T16421] validate_nla: 2 callbacks suppressed
[  272.506752][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.523985][T16319] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  272.546268][ T8849] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  272.546354][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.556005][ T8849] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  272.572867][ T8849] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  272.581910][ T8849] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  272.591245][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.599915][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.608324][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.616453][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.625689][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.633730][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.653242][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.663438][T16421] netlink: 'syz.0.2979': attribute type 11 has an invalid length.
[  272.685270][T16319] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  272.694958][T16319] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  272.705022][T16319] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  272.714966][T16319] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  272.828166][T16319] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.857882][T16319] 8021q: adding VLAN 0 to HW filter on device team0
[  272.886285][ T8846] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.893477][ T8846] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.919232][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.926466][ T8841] bridge0: port 2(bridge_slave_1) entered forwarding state
[  273.078448][T16437] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.378635][T16454] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  273.436703][T16454] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  273.471277][T16454] gretap1: entered promiscuous mode
[  273.488689][T16454] gretap1: entered allmulticast mode
[  273.583021][T16457] bridge0: port 2(bridge_slave_1) entered disabled state
[  273.601135][T16319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.713033][T16319] veth0_vlan: entered promiscuous mode
[  273.758527][T16319] veth1_vlan: entered promiscuous mode
[  273.857360][T16319] veth0_macvtap: entered promiscuous mode
[  273.899603][T16319] veth1_macvtap: entered promiscuous mode
[  273.920256][T16484] __nla_validate_parse: 208 callbacks suppressed
[  273.920273][T16484] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2997'.
[  273.935694][T16319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  273.954510][T16319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  273.962622][T16484] openvswitch: netlink: Flow key attr not present in new flow.
[  274.018812][ T8841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  274.037833][ T8841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  274.078086][ T8841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  274.098294][ T5833] Bluetooth: hci0: command tx timeout
[  274.130820][ T8841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  274.307186][ T8839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.335644][ T8839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.473487][ T8849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  274.487336][ T8849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  274.534376][T16512] netlink: 348 bytes leftover after parsing attributes in process `syz.6.3005'.
[  274.582573][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3004'.
[  274.596684][T16518] tc_dump_action: action bad kind
[  274.676412][T16530] openvswitch: netlink: IP tunnel dst address not specified
[  274.758836][T16537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3009'.
[  274.773195][T16537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3009'.
[  274.802546][T16537] geneve3: entered promiscuous mode
[  274.814340][T16537] geneve3: entered allmulticast mode
[  274.834377][T16541] sit2: entered promiscuous mode
[  274.840047][T16541] sit2: entered allmulticast mode
[  274.854773][ T8849] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  274.860094][T16544] netlink: 124 bytes leftover after parsing attributes in process `syz.0.3011'.
[  274.867488][ T8849] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  274.910133][ T8849] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  274.927697][ T8849] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  275.779813][T16591] syzkaller0: entered promiscuous mode
[  275.800322][T16591] syzkaller0: entered allmulticast mode
[  275.905582][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  275.913672][    C1] lec:lec_tx_timeout: lec0
[  275.918825][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  276.175833][ T5833] Bluetooth: hci0: command tx timeout
[  276.552179][T16619] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3037'.
[  276.627566][T16622] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3038'.
[  277.172367][T16611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3031'.
[  277.468225][T16640] xt_hashlimit: invalid interval
[  277.489370][T16643] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3047'.
[  277.897578][T16674] bond0: (slave team0): Releasing backup interface
[  277.970955][T16674] team0: Cannot enslave team device to itself
[  278.081626][T16678] mac80211_hwsim hwsim48 wlan1: entered allmulticast mode
[  278.250926][ T5833] Bluetooth: hci0: command tx timeout
[  278.393147][T16719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.783225][T16752] IPv6: NLM_F_CREATE should be specified when creating new route
[  279.129429][T16766] gtp0: entered promiscuous mode
[  279.134468][T16766] gtp0: entered allmulticast mode
[  279.351388][T16772] IPv6: sit1: Disabled Multicast RS
[  279.778458][T16801] __nla_validate_parse: 9 callbacks suppressed
[  279.778474][T16801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3096'.
[  279.845504][T16805] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5
[  279.896633][T16811] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3098'.
[  280.238325][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'.
[  280.261368][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3103'.
[  280.324822][T16830] netem: incorrect gi model size
[  280.333205][T16830] netem: change failed
[  280.469182][T16841] veth5: entered allmulticast mode
[  280.694247][T16856] dvmrp0: entered allmulticast mode
[  280.733334][T16856] dvmrp0: left allmulticast mode
[  280.819440][T16866] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3117'.
[  280.914785][T16866] validate_nla: 123 callbacks suppressed
[  280.914802][T16866] netlink: 'syz.3.3117': attribute type 10 has an invalid length.
[  280.922979][T16873] 8021q: adding VLAN 0 to HW filter on device team0
[  280.928646][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  280.928683][    C1] lec:lec_tx_timeout: lec0
[  280.935496][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  280.989279][T16873] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  281.012428][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3118'.
[  281.035795][T16868] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3116'.
[  281.102380][T16866] team0: Port device dummy0 added
[  281.357521][T16892] syzkaller0: entered promiscuous mode
[  281.364773][T16892] syzkaller0: entered allmulticast mode
[  281.487446][T16906] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3123'.
[  282.501234][T16948] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3131'.
[  283.024575][T16975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3137'.
[  284.180763][T16950] syzkaller0: entered promiscuous mode
[  284.186452][T16950] syzkaller0: entered allmulticast mode
[  284.479569][T17003] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  284.507485][T16997] pim6reg1: entered promiscuous mode
[  284.524756][T16997] pim6reg1: entered allmulticast mode
[  284.785780][T17022] __nla_validate_parse: 1 callbacks suppressed
[  284.785797][T17022] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3151'.
[  284.858939][T17029] Cannot find add_set index 0 as target
[  284.872012][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3153'.
[  284.881728][T17029] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  285.136558][T17046] tap0: tun_chr_ioctl cmd 1074025677
[  285.142470][T17046] tap0: linktype set to 65534
[  285.192375][T17045] sctp: [Deprecated]: syz.0.3158 (pid 17045) Use of int in max_burst socket option.
[  285.192375][T17045] Use struct sctp_assoc_value instead
[  285.460404][T17064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3163'.
[  285.471257][T17064] netlink: 'syz.3.3163': attribute type 1 has an invalid length.
[  285.737139][T17080] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  285.759646][T17080] syzkaller0: entered promiscuous mode
[  285.765231][T17080] syzkaller0: entered allmulticast mode
[  285.797542][T17085] netlink: 'syz.3.3171': attribute type 1 has an invalid length.
[  285.816344][T17085] netlink: 'syz.3.3171': attribute type 4 has an invalid length.
[  285.824283][T17085] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3171'.
[  285.849238][T17080] tipc: Resetting bearer <eth:syzkaller0>
[  285.864164][T17079] tipc: Resetting bearer <eth:syzkaller0>
[  285.866530][T17089] netlink: 'syz.3.3171': attribute type 1 has an invalid length.
[  285.878357][T17084] netlink: 'syz.3.3171': attribute type 1 has an invalid length.
[  285.896137][T17084] netlink: 'syz.3.3171': attribute type 4 has an invalid length.
[  285.904026][T17089] netlink: 'syz.3.3171': attribute type 4 has an invalid length.
[  285.912602][T17084] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3171'.
[  285.922677][T17089] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3171'.
[  285.943529][T17085] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  285.946757][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  285.963923][    C1] lec:lec_tx_timeout: lec0
[  285.968995][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  285.977452][T17079] tipc: Disabling bearer <eth:syzkaller0>
[  286.018849][T17093] syzkaller0: entered promiscuous mode
[  286.024356][T17093] syzkaller0: entered allmulticast mode
[  286.351771][T17112] netlink: 'syz.0.3180': attribute type 16 has an invalid length.
[  286.359808][T17112] netlink: 'syz.0.3180': attribute type 17 has an invalid length.
[  286.454101][T17112] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  286.589664][T17129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'.
[  286.603910][T17129] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3183'.
[  286.683864][ T8840] nci: nci_rsp_packet: unsupported rsp opcode 0xf02
[  287.044727][T17151] netlink: 'syz.5.3190': attribute type 21 has an invalid length.
[  287.053008][T17151] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3190'.
[  287.443426][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3186'.
[  287.830824][T17192] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  288.154141][T17217] syzkaller0: entered promiscuous mode
[  288.159809][T17217] syzkaller0: entered allmulticast mode
[  288.619290][T17231] syzkaller0: entered promiscuous mode
[  288.624791][T17231] syzkaller0: entered allmulticast mode
[  288.781250][T17233] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  288.781308][T17234] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  289.070707][T17258] netlink: 'syz.0.3222': attribute type 1 has an invalid length.
[  289.073915][T17261] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.091737][T17259] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  289.159191][T17258] 8021q: adding VLAN 0 to HW filter on device bond1
[  289.240667][T17265] veth7: entered promiscuous mode
[  289.260287][T17265] bond1: (slave veth7): Enslaving as an active interface with a down link
[  289.314345][T17258] veth9: entered promiscuous mode
[  289.326619][T17258] bond1: (slave veth9): Enslaving as an active interface with a down link
[  289.381934][T17265] bond1: entered allmulticast mode
[  289.398460][T17274] netlink: 'syz.5.3228': attribute type 12 has an invalid length.
[  289.406660][T17274] netlink: 'syz.5.3228': attribute type 29 has an invalid length.
[  289.452081][T17258] team1: entered promiscuous mode
[  289.457326][T17258] team1: entered allmulticast mode
[  289.463237][T17281] netlink: 'syz.5.3228': attribute type 12 has an invalid length.
[  289.471142][T17281] netlink: 'syz.5.3228': attribute type 29 has an invalid length.
[  289.508032][T17292] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  289.576033][T17294] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004
[  289.585265][T17290] syzkaller0: entered allmulticast mode
[  289.600458][T17290] xt_TCPMSS: Only works on TCP SYN packets
[  289.655296][T17287] can: request_module (can-proto-0) failed.
[  289.956677][T17316] netlink: 'syz.3.3238': attribute type 5 has an invalid length.
[  290.088916][T17325] __nla_validate_parse: 11 callbacks suppressed
[  290.088933][T17325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3241'.
[  290.368342][T17294] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  291.038269][T17362] netlink: 'syz.6.3250': attribute type 1 has an invalid length.
[  291.105761][T17365] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3249'.
[  291.234019][T17370] gtp0: entered promiscuous mode
[  291.258191][T17370] gtp0: entered allmulticast mode
[  291.379321][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3254'.
[  291.418788][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3254'.
[  291.423850][T17383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3256'.
[  291.440808][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3256'.
[  291.469076][T17383] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3256'.
[  291.491815][T17387] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3257'.
[  291.614321][T17397] xt_cgroup: path and classid specified
[  291.697749][T17397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3261'.
[  291.722802][T17403] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  291.733919][T17402] tipc: Disabling bearer <eth:syzkaller0>
[  291.748453][T17405] tipc: Started in network mode
[  291.753445][T17405] tipc: Node identity ac14140f, cluster identity 4711
[  291.760920][T17405] tipc: New replicast peer: 255.255.255.255
[  291.769625][T17405] tipc: Enabled bearer <udp:syz2>, priority 10
[  291.783295][T17407] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3265'.
[  292.085549][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6120 ms
[  292.093625][    C1] lec:lec_tx_timeout: lec0
[  292.100470][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  292.222003][T17435] ip6gre1: entered allmulticast mode
[  292.613009][T17461] IPVS: length: 8 != 1152
[  292.886048][ T5890] tipc: Node number set to 2886997007
[  293.077435][T17485] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.109556][T17485] Bluetooth: MGMT ver 1.23
[  293.588937][ T8840] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  293.625792][ T8840] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  293.634543][ T8840] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  293.646480][T17503] netlink: 'syz.4.3294': attribute type 32 has an invalid length.
[  293.654585][T17503] netlink: 'syz.4.3294': attribute type 32 has an invalid length.
[  293.684452][ T8840] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  293.812732][T17518] netlink: 'syz.4.3297': attribute type 12 has an invalid length.
[  293.839686][T17518] netlink: 'syz.4.3297': attribute type 29 has an invalid length.
[  293.850227][T17518] netlink: 'syz.4.3297': attribute type 2 has an invalid length.
[  294.176769][T17544] netlink: 'syz.4.3303': attribute type 9 has an invalid length.
[  294.350220][ T8449] IPVS: starting estimator thread 0...
[  294.456282][T17563] IPVS: using max 30 ests per chain, 72000 per kthread
[  294.603919][T17578] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  294.624939][T17578] netlink: 'syz.4.3318': attribute type 29 has an invalid length.
[  294.663262][T17578] netlink: 'syz.4.3318': attribute type 29 has an invalid length.
[  294.770286][T17593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  294.896322][T17595] : renamed from hsr0 (while UP)
[  294.910356][T17601] IPv6: NLM_F_CREATE should be specified when creating new route
[  295.103330][T17616] netlink: 'syz.3.3329': attribute type 18 has an invalid length.
[  295.124088][ T8839] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.153328][ T8839] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.171602][ T8839] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.189485][ T8839] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.257515][T17627] __nla_validate_parse: 8 callbacks suppressed
[  295.257532][T17627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3332'.
[  295.275752][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3333'.
[  295.300388][T17628] lo: entered allmulticast mode
[  295.432344][T17640] netlink: 'syz.5.3337': attribute type 1 has an invalid length.
[  295.442775][T17640] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3337'.
[  295.442868][T17641] x_tables: duplicate underflow at hook 1
[  295.481745][T17640] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3337'.
[  295.639310][T17651] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3341'.
[  295.661468][T17647] bond2: Unable to set down delay as MII monitoring is disabled
[  295.674530][T17647] bond2 (unregistering): Released all slaves
[  295.701024][T17652] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  295.954520][T17677] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3349'.
[  295.987929][T17677] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3349'.
[  296.008668][T17674] ipt_ECN: cannot use operation on non-tcp rule
[  296.182331][T17685] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[  296.220666][T17691] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.272649][T17706] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3355'.
[  296.317414][T17706] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3355'.
[  296.327611][T17711] sctp: [Deprecated]: syz.0.3354 (pid 17711) Use of int in max_burst socket option.
[  296.327611][T17711] Use struct sctp_assoc_value instead
[  296.352580][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3357'.
[  296.361504][T17691] syzkaller0: entered promiscuous mode
[  296.371244][T17691] syzkaller0: entered allmulticast mode
[  296.466767][T17691] tipc: Resetting bearer <eth:syzkaller0>
[  296.493123][T17692] syzkaller0: entered promiscuous mode
[  296.500635][T17692] syzkaller0: entered allmulticast mode
[  296.524462][T17688] tipc: Resetting bearer <eth:syzkaller0>
[  296.580513][T17688] tipc: Disabling bearer <eth:syzkaller0>
[  297.097565][T17757] gretap0: refused to change device tx_queue_len
[  297.104312][T17757] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  297.297792][T17771] bond2 (unregistering): Released all slaves
[  297.855557][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  297.863598][    C1] lec:lec_tx_timeout: lec0
[  297.869741][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  297.923129][T17767] Bluetooth: hci0: Opcode 0x080f failed: -4
[  298.822947][T17851] xt_CT: You must specify a L4 protocol and not use inversions on it
[  299.286560][T17870] syzkaller0: entered promiscuous mode
[  299.300051][T17870] syzkaller0: entered allmulticast mode
[  299.396242][T17872] bridge0: port 3(batadv1) entered blocking state
[  299.402817][T17872] bridge0: port 3(batadv1) entered disabled state
[  299.426030][T17872] batadv1: entered allmulticast mode
[  299.433227][T17872] batadv1: entered promiscuous mode
[  299.876922][T17899] syzkaller0: entered promiscuous mode
[  299.882431][T17899] syzkaller0: entered allmulticast mode
[  299.889374][ T8840] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  299.899307][ T8840] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  299.921126][T17906] validate_nla: 2 callbacks suppressed
[  299.921143][T17906] netlink: 'syz.6.3416': attribute type 4 has an invalid length.
[  300.235398][T17921] netdevsim netdevsim6: Direct firmware load for /.€ failed with error -2
[  300.295716][T17921] netdevsim netdevsim6: Falling back to sysfs fallback for: /.€
[  300.445431][T17938] __nla_validate_parse: 26 callbacks suppressed
[  300.445449][T17938] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3424'.
[  300.740817][T17952] bond3: entered allmulticast mode
[  300.746593][T17952] 8021q: adding VLAN 0 to HW filter on device bond3
[  300.758721][T17955] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3429'.
[  300.947209][T17952] bond3 (unregistering): Released all slaves
[  300.987980][T17966] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3433'.
[  300.999391][T17966] syzkaller0: entered promiscuous mode
[  301.004876][T17966] syzkaller0: entered allmulticast mode
[  301.161101][T17978] netlink: 212304 bytes leftover after parsing attributes in process `syz.6.3437'.
[  301.181654][T17978] openvswitch: netlink: Message has 6 unknown bytes.
[  301.190195][T17976] netlink: 'syz.3.3436': attribute type 4 has an invalid length.
[  301.208404][T17978] netlink: 'syz.6.3437': attribute type 1 has an invalid length.
[  301.281266][T17978] 8021q: adding VLAN 0 to HW filter on device bond2
[  301.297393][T17985] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  301.335474][T17978] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3437'.
[  301.363156][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3437'.
[  301.364207][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'.
[  301.393758][T17986] bond2: (slave veth3): Enslaving as an active interface with a down link
[  301.611757][T18011] netlink: 'syz.0.3444': attribute type 4 has an invalid length.
[  301.626263][T18011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3444'.
[  301.640743][T18011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3444'.
[  301.641219][T18013] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3447'.
[  301.912193][T18034] IPv6: sit1: Disabled Multicast RS
[  301.926740][T18034] sit1: entered allmulticast mode
[  301.977993][T18036] openvswitch: netlink: Message has 4 unknown bytes.
[  302.153066][T18042] netlink: 'syz.0.3455': attribute type 10 has an invalid length.
[  302.232049][T18047] xt_policy: too many policy elements
[  302.333073][T18058] tipc: Started in network mode
[  302.338195][T18058] tipc: Node identity 669c5bfbe2d3, cluster identity 4711
[  302.346769][T18058] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  302.355775][T18058] syzkaller0: entered promiscuous mode
[  302.361253][T18058] syzkaller0: entered allmulticast mode
[  302.462123][T18063] netlink: 'syz.0.3464': attribute type 7 has an invalid length.
[  302.479868][T18063] netlink: 'syz.0.3464': attribute type 8 has an invalid length.
[  302.481459][T18065] tipc: Resetting bearer <eth:syzkaller0>
[  302.520035][T18067] netlink: 'syz.5.3466': attribute type 1 has an invalid length.
[  302.543615][T18057] tipc: Resetting bearer <eth:syzkaller0>
[  302.599493][T18057] tipc: Disabling bearer <eth:syzkaller0>
[  302.663480][T18067] 8021q: adding VLAN 0 to HW filter on device bond1
[  302.886005][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  302.894067][    C1] lec:lec_tx_timeout: lec0
[  302.899473][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  302.949537][T18105] netlink: 'syz.6.3474': attribute type 1 has an invalid length.
[  303.023240][T18101] wg2: entered promiscuous mode
[  303.032462][T18101] wg2: entered allmulticast mode
[  303.086422][T18105] 8021q: adding VLAN 0 to HW filter on device bond3
[  303.236954][T18117] SET target dimension over the limit!
[  303.618422][T18131] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  303.861469][T18130] tipc: Disabling bearer <eth:syzkaller0>
[  303.954921][ T8449] IPVS: starting estimator thread 0...
[  304.059497][T18166] IPVS: using max 31 ests per chain, 74400 per kthread
[  304.102412][T18174] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  304.293111][T18183] syzkaller0: entered promiscuous mode
[  304.306014][T18183] syzkaller0: entered allmulticast mode
[  304.494747][T18202] Cannot find add_set index 1 as target
[  304.539096][T18203] IPVS: Error connecting to the multicast addr
[  304.688657][T18212] syz_tun: entered allmulticast mode
[  304.751711][T18212] dvmrp8: entered allmulticast mode
[  304.935313][T18213] syz_tun: left allmulticast mode
[  305.241591][T18253] can: request_module (can-proto-3) failed.
[  305.244778][T18254] syzkaller0: entered promiscuous mode
[  305.257541][T18254] syzkaller0: entered allmulticast mode
[  306.157834][T18296] __nla_validate_parse: 17 callbacks suppressed
[  306.157853][T18296] netlink: 212 bytes leftover after parsing attributes in process `syz.6.3529'.
[  306.177534][T18296] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  306.267407][T18296] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  306.286628][T18305] sctp: [Deprecated]: syz.0.3532 (pid 18305) Use of struct sctp_assoc_value in delayed_ack socket option.
[  306.286628][T18305] Use struct sctp_sack_info instead
[  306.529038][T18295] tipc: Disabling bearer <eth:syzkaller0>
[  306.653839][T18315] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3536'.
[  307.225237][T18350] team0: Port device dummy0 removed
[  307.242292][T18350] bridge_slave_0: left allmulticast mode
[  307.248151][T18350] bridge_slave_0: left promiscuous mode
[  307.258468][T18350] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.404594][T18350] bridge_slave_1: left allmulticast mode
[  307.413191][T18350] bridge_slave_1: left promiscuous mode
[  307.419179][T18350] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.436257][T18350] bond0: (slave bond_slave_0): Releasing backup interface
[  307.474294][T18350] bond0: (slave bond_slave_1): Releasing backup interface
[  307.503137][T18350] team0: Port device team_slave_0 removed
[  307.527355][T18350] team0: Port device team_slave_1 removed
[  307.534087][T18350] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.542611][T18350] batman_adv: batadv0: Removing interface: batadv_slave_0
[  307.552637][T18350] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.560517][T18350] batman_adv: batadv0: Removing interface: batadv_slave_1
[  307.563786][T18365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3550'.
[  307.580368][T18365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3550'.
[  307.593514][T18350] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  307.676887][T18363] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  307.691782][T18363] bond3 (unregistering): Released all slaves
[  307.743169][T18370] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  307.905581][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  307.913662][    C1] lec:lec_tx_timeout: lec0
[  307.918581][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  308.609092][T18425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3564'.
[  308.626108][T18425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3564'.
[  308.771126][T18438] syzkaller0: entered promiscuous mode
[  308.777039][T18438] syzkaller0: entered allmulticast mode
[  309.109999][T18462] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3574'.
[  309.115270][T18459] tipc: Started in network mode
[  309.138858][T18459] tipc: Node identity 7e5dd7b2c481, cluster identity 4711
[  309.150308][T18459] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.391229][T18462] hsr_slave_0 (unregistering): left promiscuous mode
[  309.439423][T18466] syzkaller0: entered promiscuous mode
[  309.451941][T18466] syzkaller0: entered allmulticast mode
[  309.588576][T18477] netlink: 'syz.5.3577': attribute type 4 has an invalid length.
[  309.635063][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3577'.
[  309.693456][T18477] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3577'.
[  309.714825][T18485] netlink: 'syz.6.3579': attribute type 1 has an invalid length.
[  309.809611][T18488] ip6erspan0: entered promiscuous mode
[  309.848498][T18485] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  309.892388][T18500] netlink: 'syz.5.3582': attribute type 32 has an invalid length.
[  309.929134][T18458] tipc: Resetting bearer <eth:syzkaller0>
[  309.991923][T18458] tipc: Disabling bearer <eth:syzkaller0>
[  310.072516][T18502] syzkaller0: entered promiscuous mode
[  310.083324][T18502] syzkaller0: entered allmulticast mode
[  310.091481][T18508] syz_tun: entered allmulticast mode
[  311.665676][T18504] syz_tun: left allmulticast mode
[  311.803807][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3592'.
[  311.848247][T18551] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3592'.
[  312.080246][T18570] netlink: 144 bytes leftover after parsing attributes in process `syz.5.3603'.
[  312.115232][T18575] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3604'.
[  312.131933][T18574] vxcan1: tx address claim with dlc 0
[  312.229324][T18581] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  312.249858][T18585] netlink: 'syz.3.3608': attribute type 2 has an invalid length.
[  312.257855][T18585] netlink: 'syz.3.3608': attribute type 11 has an invalid length.
[  312.276949][T18585] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3608'.
[  312.301694][T18583] syzkaller0: entered promiscuous mode
[  312.310443][T18583] syzkaller0: entered allmulticast mode
[  312.346747][T18589] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3607'.
[  312.471535][T18598] netlink: 'syz.0.3611': attribute type 1 has an invalid length.
[  312.479679][T18596] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3612'.
[  312.925652][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  312.933786][    C1] lec:lec_tx_timeout: lec0
[  312.938843][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  313.788115][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'.
[  313.788600][T18598] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  313.797935][T18593] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3610'.
[  313.838398][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3610'.
[  314.124745][T18629] netlink: 'syz.5.3624': attribute type 5 has an invalid length.
[  314.175584][T18628] netlink: 'syz.0.3623': attribute type 1 has an invalid length.
[  314.208238][T18634] geneve2: entered promiscuous mode
[  314.241036][T18634] geneve2: entered allmulticast mode
[  314.292291][T18645] netlink: 'syz.5.3628': attribute type 32 has an invalid length.
[  314.364929][T18645] bond2: option coupled_control: invalid value (52)
[  314.401602][T18645] bond2 (unregistering): Released all slaves
[  314.706741][T18678] netlink: 'syz.5.3637': attribute type 5 has an invalid length.
[  314.792621][T18680] netlink: 'syz.6.3638': attribute type 1 has an invalid length.
[  314.806461][T18684] xt_TCPMSS: Only works on TCP SYN packets
[  315.264579][T18713] syzkaller0: entered promiscuous mode
[  315.283916][T18713] syzkaller0: entered allmulticast mode
[  315.348945][T18715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.414962][T18720] xt_l2tp: missing protocol rule (udp|l2tpip)
[  315.428034][T18715] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.509732][T18722] vlan2: entered promiscuous mode
[  315.514996][T18722] vlan2: entered allmulticast mode
[  315.527814][T18724] netlink: 'syz.3.3652': attribute type 1 has an invalid length.
[  315.532695][T18722] hsr_slave_1: entered allmulticast mode
[  315.630789][T18724] 8021q: adding VLAN 0 to HW filter on device bond3
[  315.638700][T18724] netlink: 'syz.3.3652': attribute type 1 has an invalid length.
[  315.674687][T18724] netlink: 'syz.3.3652': attribute type 1 has an invalid length.
[  315.713119][T18724] netlink: 'syz.3.3652': attribute type 1 has an invalid length.
[  315.721746][T18724] netlink: 'syz.3.3652': attribute type 1 has an invalid length.
[  315.731123][T18724] netlink: 'syz.3.3652': attribute type 1 has an invalid length.
[  315.739661][T18724] netlink: 'syz.3.3652': attribute type 1 has an invalid length.
[  315.748061][T18724] netlink: 'syz.3.3652': attribute type 1 has an invalid length.
[  315.982916][T18757] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  315.998388][T18757] bond4 (unregistering): Released all slaves
[  316.227359][T18760] syzkaller0: entered promiscuous mode
[  316.232954][T18760] syzkaller0: entered allmulticast mode
[  316.306322][T18776] nbd1: detected capacity change from 0 to 127
[  317.068988][ T1302] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  317.709342][ T5833] block nbd1: Receive control failed (result -32)
[  317.755044][T18807] sctp: [Deprecated]: syz.3.3676 (pid 18807) Use of struct sctp_assoc_value in delayed_ack socket option.
[  317.755044][T18807] Use struct sctp_sack_info instead
[  317.945661][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  317.953696][    C1] lec:lec_tx_timeout: lec0
[  317.958315][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  318.256305][T18818] bond4: Removing last ns target with arp_interval on
[  318.420345][T18837] netlink: 'syz.6.3685': attribute type 11 has an invalid length.
[  318.447873][T18839] __nla_validate_parse: 13 callbacks suppressed
[  318.447889][T18839] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3683'.
[  318.456200][T18837] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3685'.
[  318.487015][T18843] sctp: [Deprecated]: syz.0.3684 (pid 18843) Use of int in max_burst socket option.
[  318.487015][T18843] Use struct sctp_assoc_value instead
[  318.507613][T18845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3683'.
[  318.671754][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3689'.
[  318.701552][T18853] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0
[  319.055169][T18868] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.365439][T18868] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.394054][T18868] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.773871][T18874] team0: Port device dummy0 added
[  319.787799][ T8840] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  319.805191][ T8840] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.836477][ T8840] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  319.845375][ T8840] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.861198][ T8840] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  319.870613][ T8840] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.881653][ T8840] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  319.915777][ T8840] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  319.994909][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3701'.
[  320.004392][T18899] pim6reg1: entered promiscuous mode
[  320.010664][T18899] pim6reg1: entered allmulticast mode
[  320.083904][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.083904][T18909] Use struct sctp_sack_info instead
[  320.103895][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.103895][T18909] Use struct sctp_sack_info instead
[  320.125840][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.125840][T18909] Use struct sctp_sack_info instead
[  320.144209][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.144209][T18909] Use struct sctp_sack_info instead
[  320.204264][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.204264][T18909] Use struct sctp_sack_info instead
[  320.228909][T18915] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3706'.
[  320.231894][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.231894][T18909] Use struct sctp_sack_info instead
[  320.281291][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.281291][T18909] Use struct sctp_sack_info instead
[  320.332231][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.332231][T18909] Use struct sctp_sack_info instead
[  320.361438][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.361438][T18909] Use struct sctp_sack_info instead
[  320.405729][T18909] sctp: [Deprecated]: syz.4.3703 (pid 18909) Use of struct sctp_assoc_value in delayed_ack socket option.
[  320.405729][T18909] Use struct sctp_sack_info instead
[  320.714909][T18939] netlink: 284 bytes leftover after parsing attributes in process `syz.6.3714'.
[  320.733755][T18943] syzkaller0: mtu less than device minimum
[  320.791415][T18943] syzkaller0: entered allmulticast mode
[  320.978576][T18955] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3717'.
[  321.119266][T18964] ip6t_srh: unknown srh match flags  5F28
[  321.158313][T18955] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  321.313841][T18976] validate_nla: 27 callbacks suppressed
[  321.313857][T18976] netlink: 'syz.6.3720': attribute type 1 has an invalid length.
[  321.335861][T18976] netlink: 'syz.6.3720': attribute type 7 has an invalid length.
[  321.344029][T18976] netlink: 'syz.6.3720': attribute type 8 has an invalid length.
[  321.352012][T18976] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3720'.
[  321.368868][T18976] NCSI netlink: No device for ifindex 65584
[  321.426630][T18967] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  321.582323][T18994] x_tables: duplicate entry at hook 2
[  323.221815][T19030] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3734'.
[  323.470139][T19049] netlink: 'syz.0.3742': attribute type 1 has an invalid length.
[  323.809899][T19048] bond2 (unregistering): Released all slaves
[  323.960452][T19064] __nla_validate_parse: 4 callbacks suppressed
[  323.960468][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3746'.
[  324.025466][T19066] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3745'.
[  324.038871][T19066] netlink: 'syz.4.3745': attribute type 1 has an invalid length.
[  324.085586][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6130 ms
[  324.093644][    C1] lec:lec_tx_timeout: lec0
[  324.100690][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  324.242220][T19068] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.267462][T19068] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.411250][ T8849] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.430314][ T8849] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.460563][ T8849] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.486272][ T8849] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.510679][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3755'.
[  324.644978][T19103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3755'.
[  324.675205][ T8849] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.684367][ T8849] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.704425][ T8849] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.716870][ T8849] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.747456][T19097] netlink: 'syz.0.3755': attribute type 15 has an invalid length.
[  324.802116][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3758'.
[  324.844419][T19109] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3757'.
[  324.941732][T19109] bond4: (slave gre0): Device is not bonding slave
[  324.981696][T19109] bond4: option active_slave: invalid value (gre0)
[  325.029511][T19109] bond4 (unregistering): Released all slaves
[  325.315493][T19137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  325.383659][ T8840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.392821][ T8840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.436261][T19140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3766'.
[  325.479844][T19142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3767'.
[  325.668409][T19150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3769'.
[  326.229006][T19173] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3777'.
[  326.525461][T19190] netlink: 'syz.0.3781': attribute type 7 has an invalid length.
[  326.554016][T19190] netlink: 'syz.0.3781': attribute type 8 has an invalid length.
[  326.594624][T19190] bridge0: entered promiscuous mode
[  326.614780][T19190] ip6gretap0: entered promiscuous mode
[  326.621858][T19190] gretap0: entered promiscuous mode
[  326.628341][T19190] debugfs: 'hsr1' already exists in 'hsr'
[  326.634542][T19190] Cannot create hsr debugfs directory
[  326.641029][T19190] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  326.652583][T19190] hsr1: Slave B (ip6gretap0) is not up; please bring it up to get a fully working HSR network
[  326.665829][T19190] hsr1: Interlink (gretap0) is not up; please bring it up to get a fully working HSR network
[  326.678265][ T8839] syzkaller0: tun_net_xmit 76
[  326.683778][ T8839] syzkaller0: tun_net_xmit 48
[  328.609684][T19263] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  329.316753][T19277] x_tables: duplicate underflow at hook 3
[  329.441243][T19284] netlink: 'syz.4.3805': attribute type 1 has an invalid length.
[  329.475183][T19286] __nla_validate_parse: 8 callbacks suppressed
[  329.475199][T19286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3807'.
[  329.495069][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3807'.
[  329.506815][T19286] netlink: 'syz.0.3807': attribute type 1 has an invalid length.
[  329.514970][T19289] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  329.534645][T19286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3807'.
[  329.767898][T19296] syzkaller0: entered promiscuous mode
[  329.773402][T19296] syzkaller0: entered allmulticast mode
[  329.845583][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  329.853617][    C1] lec:lec_tx_timeout: lec0
[  330.016226][T19308] "syz.3.3814" (19308) uses obsolete ecb(arc4) skcipher
[  330.127587][T19335] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3821'.
[  330.241664][T19343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3824'.
[  330.302569][T19343] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3824'.
[  330.319746][T19346] pimreg3: entered allmulticast mode
[  330.497162][T19355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3828'.
[  330.732711][T19370] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3833'.
[  330.894438][T19382] net veth1_virt_wifi .: renamed from virt_wifi0
[  331.162076][   T30] audit: type=1800 audit(1763077189.392:4): pid=19394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3840" name="memory.events" dev="tmpfs" ino=1036 res=0 errno=0
[  331.464129][T19420] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  331.664791][T19434] IPVS: length: 239 != 24
[  331.774654][T19432] sch_tbf: burst 8 is lower than device ip6tnl0 mtu (1452) !
[  331.890306][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3854'.
[  332.079708][T19457] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  332.250510][T19479] netlink: 'syz.5.3862': attribute type 21 has an invalid length.
[  332.264866][T19463] netlink: 'syz.3.3860': attribute type 13 has an invalid length.
[  332.284244][T19463] netlink: 'syz.3.3860': attribute type 27 has an invalid length.
[  332.370198][T19486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3864'.
[  332.408615][T19485] pim6reg: entered allmulticast mode
[  332.775917][T19516] netlink: 'syz.5.3872': attribute type 11 has an invalid length.
[  333.055482][T19534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  333.333187][T19545] macvtap1: entered promiscuous mode
[  333.349102][T19545] vlan0: entered promiscuous mode
[  333.375191][T19545] macvtap1: entered allmulticast mode
[  333.405123][T19545] vlan0: entered allmulticast mode
[  333.417735][T19545] veth0_vlan: entered allmulticast mode
[  333.426119][T19546] syzkaller1: entered promiscuous mode
[  333.435505][T19546] syzkaller1: entered allmulticast mode
[  333.460981][T19550] netlink: 'syz.5.3883': attribute type 3 has an invalid length.
[  333.480151][T19558] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  333.831131][T19580] macsec0: entered promiscuous mode
[  333.836975][T19580] macsec0: entered allmulticast mode
[  333.843023][T19580] veth1_macvtap: entered allmulticast mode
[  333.854872][T19580] macsec0: left promiscuous mode
[  333.860126][T19580] macsec0: left allmulticast mode
[  333.865364][T19580] veth1_macvtap: left allmulticast mode
[  333.873626][T19576] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  334.380124][T19622] openvswitch: netlink: Missing valid actions attribute.
[  334.393321][T19622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  334.485087][T19626] __nla_validate_parse: 11 callbacks suppressed
[  334.485105][T19626] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3909'.
[  334.587172][T19631] netlink: 'syz.4.3912': attribute type 2 has an invalid length.
[  334.663102][T19637] netlink: 'syz.3.3911': attribute type 8 has an invalid length.
[  334.671563][T19637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3911'.
[  334.698537][T19637] bond0: entered promiscuous mode
[  334.705244][T19637] gretap0: entered promiscuous mode
[  334.727325][T19637] bond0: left promiscuous mode
[  334.735846][T19637] gretap0: left promiscuous mode
[  334.763509][T19646] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  334.777495][T19635] netlink: 'syz.6.3913': attribute type 2 has an invalid length.
[  334.787363][T19635] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3913'.
[  334.812369][T19636] netlink: 'syz.6.3913': attribute type 2 has an invalid length.
[  334.858142][T19636] netlink: 244 bytes leftover after parsing attributes in process `syz.6.3913'.
[  334.942948][T19657] netlink: 'syz.3.3917': attribute type 1 has an invalid length.
[  334.965285][T19657] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3917'.
[  334.977255][T19657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3917'.
[  335.086659][T19665] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3922'.
[  335.102599][T19665] erspan0: entered promiscuous mode
[  335.112599][T19666] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3922'.
[  335.270204][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3926'.
[  335.885271][T19714] syz.4.3936 uses old SIOCAX25GETINFO
[  335.952670][T19716] syzkaller0: entered promiscuous mode
[  335.958337][T19716] syzkaller0: entered allmulticast mode
[  336.257995][T19730] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  336.421551][T19740] xt_hashlimit: size too large, truncated to 1048576
[  336.490826][T19743] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3945'.
[  337.017481][T19779] geneve2: entered promiscuous mode
[  337.022936][T19779] geneve2: entered allmulticast mode
[  337.031687][ T8839] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0
[  337.041028][ T8839] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  337.052146][ T8839] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  337.076440][ T8839] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  337.180519][T19786] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  337.364723][T19786] bond5 (unregistering): Released all slaves
[  337.804447][T19817] IPv6: NLM_F_CREATE should be specified when creating new route
[  337.882238][T19823] syzkaller1: entered promiscuous mode
[  337.888657][T19823] syzkaller1: entered allmulticast mode
[  338.085031][T19833] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  338.109475][T19833] syzkaller0: entered promiscuous mode
[  338.125277][T19833] syzkaller0: entered allmulticast mode
[  338.150087][T19833] sch_tbf: peakrate 8 is lower than or equals to rate 8 !
[  338.161077][T19833] tipc: Resetting bearer <eth:syzkaller0>
[  338.178661][T19830] tipc: Resetting bearer <eth:syzkaller0>
[  338.204347][T19830] tipc: Disabling bearer <eth:syzkaller0>
[  338.420319][T19849] validate_nla: 2 callbacks suppressed
[  338.420335][T19849] netlink: 'syz.6.3983': attribute type 1 has an invalid length.
[  338.507358][T19849] bond4: entered promiscuous mode
[  338.517570][T19849] 8021q: adding VLAN 0 to HW filter on device bond4
[  339.060033][T19902] netlink: 'syz.4.3999': attribute type 15 has an invalid length.
[  339.587605][T19938] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  339.628114][T19939] openvswitch: netlink: Missing key (keys=40, expected=80)
[  339.847464][T19952] __nla_validate_parse: 77 callbacks suppressed
[  339.850140][T19952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4016'.
[  339.857032][T19949] netlink: 'syz.4.4014': attribute type 6 has an invalid length.
[  339.903701][T19960] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4017'.
[  339.913051][T19960] nbd: couldn't find a device at index 0
[  340.418701][T19972] netlink: 'syz.6.4019': attribute type 1 has an invalid length.
[  340.512759][T19979] xt_hashlimit: overflow, try lower: 3/0
[  340.540878][T19975] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  340.562433][T19975] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  340.573064][T19975] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  340.581934][T19982] netlink: zone id is out of range
[  340.587553][T19982] netlink: zone id is out of range
[  340.592675][T19982] netlink: zone id is out of range
[  340.625732][T19982] netlink: get zone limit has 4 unknown bytes
[  340.660614][T19980] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  340.671532][T19980] syzkaller0: entered promiscuous mode
[  340.681675][T19980] syzkaller0: entered allmulticast mode
[  340.788960][T19980] tipc: Resetting bearer <eth:syzkaller0>
[  340.818434][T19978] tipc: Resetting bearer <eth:syzkaller0>
[  340.827516][T19996] netlink: 'syz.6.4025': attribute type 1 has an invalid length.
[  340.860630][T19978] tipc: Disabling bearer <eth:syzkaller0>
[  340.891334][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4025'.
[  340.918727][T19996] 8021q: adding VLAN 0 to HW filter on device bond6
[  340.964397][T19996] netlink: 'syz.6.4025': attribute type 5 has an invalid length.
[  341.005908][T19996] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4025'.
[  341.011923][T20008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4028'.
[  341.017529][T20006] netlink: 'syz.3.4029': attribute type 1 has an invalid length.
[  341.084065][T20006] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  341.393133][T20032] tunl0: entered promiscuous mode
[  341.427234][T20032] netlink: 'syz.3.4036': attribute type 3 has an invalid length.
[  341.437059][T20032] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4036'.
[  341.467021][T20033] netlink: 'syz.4.4035': attribute type 4 has an invalid length.
[  341.490892][T20036] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4038'.
[  341.492377][T20033] netlink: 'syz.4.4035': attribute type 10 has an invalid length.
[  342.029202][T20073] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4048'.
[  342.160842][T20077] batadv_slave_0: entered promiscuous mode
[  342.184213][T20079] syzkaller0: entered promiscuous mode
[  342.195312][T20079] syzkaller0: entered allmulticast mode
[  342.202523][T20076] batadv_slave_0: left promiscuous mode
[  342.384237][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4055'.
[  342.535074][T20103] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4059'.
[  342.919177][ T6808] lec:lec_start_xmit: lec0:No lecd attached
[  343.559551][T20142] syzkaller0: entered promiscuous mode
[  343.592929][T20142] syzkaller0: entered allmulticast mode
[  343.661824][T20146] bond5 (unregistering): Released all slaves
[  343.776047][T20147] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  343.964548][T20155] validate_nla: 1 callbacks suppressed
[  343.964565][T20155] netlink: 'syz.3.4076': attribute type 3 has an invalid length.
[  344.075263][T20173] tipc: New replicast peer: 255.255.255.255
[  344.125457][T20173] tipc: Enabled bearer <udp:syz2>, priority 10
[  344.193671][T20177] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  344.419753][T20205] FAULT_INJECTION: forcing a failure.
[  344.419753][T20205] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  344.487354][T20205] CPU: 0 UID: 0 PID: 20205 Comm: syz.4.4090 Not tainted syzkaller #0 PREEMPT(full) 
[  344.487378][T20205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  344.487391][T20205] Call Trace:
[  344.487398][T20205]  <TASK>
[  344.487406][T20205]  dump_stack_lvl+0x189/0x250
[  344.487431][T20205]  ? __pfx____ratelimit+0x10/0x10
[  344.487452][T20205]  ? __pfx_dump_stack_lvl+0x10/0x10
[  344.487474][T20205]  ? __pfx__printk+0x10/0x10
[  344.487490][T20205]  ? __might_fault+0xb0/0x130
[  344.487521][T20205]  should_fail_ex+0x414/0x560
[  344.487550][T20205]  _copy_from_user+0x2d/0xb0
[  344.487572][T20205]  ___sys_sendmsg+0x158/0x2a0
[  344.487595][T20205]  ? __pfx____sys_sendmsg+0x10/0x10
[  344.487656][T20205]  ? __fget_files+0x2a/0x420
[  344.487671][T20205]  ? __fget_files+0x3a0/0x420
[  344.487696][T20205]  __sys_sendmmsg+0x227/0x430
[  344.487718][T20205]  ? __pfx___sys_sendmmsg+0x10/0x10
[  344.487745][T20205]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  344.487786][T20205]  ? ksys_write+0x22a/0x250
[  344.487810][T20205]  ? __pfx_ksys_write+0x10/0x10
[  344.487837][T20205]  __x64_sys_sendmmsg+0xa0/0xc0
[  344.487858][T20205]  do_syscall_64+0xfa/0xfa0
[  344.487881][T20205]  ? lockdep_hardirqs_on+0x9c/0x150
[  344.487903][T20205]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.487921][T20205]  ? clear_bhb_loop+0x60/0xb0
[  344.487941][T20205]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.487963][T20205] RIP: 0033:0x7f0d78b8f6c9
[  344.487980][T20205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.487995][T20205] RSP: 002b:00007f0d79aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  344.488014][T20205] RAX: ffffffffffffffda RBX: 00007f0d78de5fa0 RCX: 00007f0d78b8f6c9
[  344.488027][T20205] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000003
[  344.488038][T20205] RBP: 00007f0d79aa9090 R08: 0000000000000000 R09: 0000000000000000
[  344.488049][T20205] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[  344.488060][T20205] R13: 00007f0d78de6038 R14: 00007f0d78de5fa0 R15: 00007ffd1b9cfc78
[  344.488091][T20205]  </TASK>
[  344.747237][ T5833] Bluetooth: hci5: command 0x0406 tx timeout
[  344.814266][T20226] x_tables: unsorted entry at hook 1
[  344.852550][T20226] openvswitch: netlink: Flow actions attr not present in new flow.
[  344.910901][T20227] 8021q: adding VLAN 0 to HW filter on device bond3
[  344.920375][T20227] bond0: (slave bond3): Enslaving as an active interface with an up link
[  345.008445][T20231] bond5: option packets_per_slave: invalid value (18446744073709551615)
[  345.017622][T20231] bond5: option packets_per_slave: allowed values 0 - 65535
[  345.032119][T20231] bond5 (unregistering): Released all slaves
[  345.125187][T20241] __nla_validate_parse: 11 callbacks suppressed
[  345.125204][T20241] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4098'.
[  345.142451][T20241] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4098'.
[  345.152624][T20241] netlink: 'syz.5.4098': attribute type 5 has an invalid length.
[  345.162287][T20241] netlink: 35 bytes leftover after parsing attributes in process `syz.5.4098'.
[  345.235743][ T7121] tipc: Node number set to 3135035314
[  345.328855][T20262] FAULT_INJECTION: forcing a failure.
[  345.328855][T20262] name failslab, interval 1, probability 0, space 0, times 0
[  345.365357][T20262] CPU: 1 UID: 0 PID: 20262 Comm: syz.6.4105 Not tainted syzkaller #0 PREEMPT(full) 
[  345.365383][T20262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  345.365391][T20262] Call Trace:
[  345.365399][T20262]  <TASK>
[  345.365406][T20262]  dump_stack_lvl+0x189/0x250
[  345.365433][T20262]  ? __pfx____ratelimit+0x10/0x10
[  345.365456][T20262]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.365478][T20262]  ? __pfx__printk+0x10/0x10
[  345.365499][T20262]  ? __pfx___might_resched+0x10/0x10
[  345.365520][T20262]  ? fs_reclaim_acquire+0x7d/0x100
[  345.365549][T20262]  should_fail_ex+0x414/0x560
[  345.365577][T20262]  should_failslab+0xa8/0x100
[  345.365595][T20262]  kmem_cache_alloc_node_noprof+0x77/0x710
[  345.365615][T20262]  ? process_measurement+0x3d8/0x1a40
[  345.365632][T20262]  ? __alloc_skb+0x112/0x2d0
[  345.365647][T20262]  ? ima_match_policy+0x10b/0x2150
[  345.365668][T20262]  __alloc_skb+0x112/0x2d0
[  345.365688][T20262]  sock_omalloc+0xd8/0x1e0
[  345.365710][T20262]  msg_zerocopy_realloc+0x9c/0x850
[  345.365725][T20262]  ? up_write+0x1c4/0x420
[  345.365754][T20262]  tcp_sendmsg_locked+0x54f/0x5540
[  345.365784][T20262]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  345.365835][T20262]  ? __lock_acquire+0xab9/0xd20
[  345.365864][T20262]  ? __pfx_tcp_sendmsg_locked+0x10/0x10
[  345.365885][T20262]  ? __local_bh_enable_ip+0x12d/0x1c0
[  345.365909][T20262]  ? __local_bh_enable_ip+0x12d/0x1c0
[  345.365940][T20262]  tcp_sendmsg+0x2f/0x50
[  345.365962][T20262]  __sock_sendmsg+0x19c/0x270
[  345.365986][T20262]  ____sys_sendmsg+0x52d/0x830
[  345.366010][T20262]  ? __pfx_____sys_sendmsg+0x10/0x10
[  345.366036][T20262]  ? import_iovec+0x74/0xa0
[  345.366061][T20262]  ___sys_sendmsg+0x21f/0x2a0
[  345.366083][T20262]  ? __pfx____sys_sendmsg+0x10/0x10
[  345.366139][T20262]  ? __fget_files+0x2a/0x420
[  345.366155][T20262]  ? __fget_files+0x3a0/0x420
[  345.366183][T20262]  __sys_sendmmsg+0x227/0x430
[  345.366207][T20262]  ? __pfx___sys_sendmmsg+0x10/0x10
[  345.366236][T20262]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  345.366288][T20262]  ? ksys_write+0x22a/0x250
[  345.366313][T20262]  ? __pfx_ksys_write+0x10/0x10
[  345.366341][T20262]  __x64_sys_sendmmsg+0xa0/0xc0
[  345.366362][T20262]  do_syscall_64+0xfa/0xfa0
[  345.366384][T20262]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.366406][T20262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.366423][T20262]  ? clear_bhb_loop+0x60/0xb0
[  345.366445][T20262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.366461][T20262] RIP: 0033:0x7f1f2bf8f6c9
[  345.366477][T20262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.366490][T20262] RSP: 002b:00007f1f2cd83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  345.366508][T20262] RAX: ffffffffffffffda RBX: 00007f1f2c1e5fa0 RCX: 00007f1f2bf8f6c9
[  345.366521][T20262] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000003
[  345.366532][T20262] RBP: 00007f1f2cd83090 R08: 0000000000000000 R09: 0000000000000000
[  345.366543][T20262] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[  345.366554][T20262] R13: 00007f1f2c1e6038 R14: 00007f1f2c1e5fa0 R15: 00007ffecdfb2a18
[  345.366587][T20262]  </TASK>
[  345.756344][T20258] netlink: 'syz.3.4104': attribute type 13 has an invalid length.
[  345.851769][T20273] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4108'.
[  345.884087][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4109'.
[  345.899688][T20258] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  345.919459][T20275] netlink: 'syz.6.4109': attribute type 1 has an invalid length.
[  345.941103][T20269] syzkaller1: entered promiscuous mode
[  345.947300][T20269] syzkaller1: entered allmulticast mode
[  345.975704][T20275] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4109'.
[  346.162810][T20291] syzkaller1: entered promiscuous mode
[  346.169502][T20291] syzkaller1: entered allmulticast mode
[  346.648252][T20332] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  346.794635][T20339] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4126'.
[  346.895949][T20351] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4129'.
[  346.984001][T20355] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4131'.
[  347.063854][ T8454] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x1
[  347.092445][ T8454] hid-generic 0005:0C45:1012.0002: ignoring exceeding usage max
[  347.112244][ T8454] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x4
[  347.122272][ T8454] hid-generic 0005:0C45:1012.0002: unknown main item tag 0x5
[  347.131493][ T8454] hid-generic 0005:0C45:1012.0002: reserved main item tag 0xd
[  347.139239][ T8454] hid-generic 0005:0C45:1012.0002: item fetching failed at offset 31/200
[  347.139307][T20374] syzkaller0: entered promiscuous mode
[  347.148309][ T8454] hid-generic 0005:0C45:1012.0002: probe with driver hid-generic failed with error -22
[  347.171796][ T8840] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x9e
[  347.181833][T20374] syzkaller0: entered allmulticast mode
[  347.293961][T20388] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4139'.
[  347.307295][T20388] tc_dump_action: action bad kind
[  347.586328][T20399] sctp: [Deprecated]: syz.4.4141 (pid 20399) Use of struct sctp_assoc_value in delayed_ack socket option.
[  347.586328][T20399] Use struct sctp_sack_info instead
[  347.925783][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  347.933827][    C1] lec:lec_tx_timeout: lec0
[  348.003635][T20403] nbd: must specify at least one socket
[  348.230620][T20427] sctp: [Deprecated]: syz.3.4151 (pid 20427) Use of struct sctp_assoc_value in delayed_ack socket option.
[  348.230620][T20427] Use struct sctp_sack_info instead
[  348.482078][T20440] !€ÿ: renamed from bond_slave_0
[  348.487904][T20436] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  348.523956][T20438] bond0: entered promiscuous mode
[  348.530408][T20438] bond_slave_0: entered promiscuous mode
[  348.537546][T20438] bond_slave_1: entered promiscuous mode
[  348.543395][T20438] team0: entered promiscuous mode
[  348.549842][T20438] team_slave_0: entered promiscuous mode
[  348.555889][T20438] team_slave_1: entered promiscuous mode
[  348.562583][T20438] bond3: entered promiscuous mode
[  348.574327][T20438] bond0: left promiscuous mode
[  348.579561][T20438] bond_slave_0: left promiscuous mode
[  348.586747][T20438] bond_slave_1: left promiscuous mode
[  348.592649][T20438] team0: left promiscuous mode
[  348.599146][T20438] team_slave_0: left promiscuous mode
[  348.606191][T20438] team_slave_1: left promiscuous mode
[  348.612135][T20438] bond3: left promiscuous mode
[  348.874351][T20470] syzkaller0: entered promiscuous mode
[  348.895750][T20470] syzkaller0: entered allmulticast mode
[  349.024329][T20488] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  349.036156][T20492] netlink: 'syz.0.4169': attribute type 1 has an invalid length.
[  349.055048][T20492] netlink: 'syz.0.4169': attribute type 2 has an invalid length.
[  349.108812][T20488] syzkaller0: entered promiscuous mode
[  349.114751][T20488] syzkaller0: entered allmulticast mode
[  349.125149][T20488] tipc: Resetting bearer <eth:syzkaller0>
[  349.243646][ T8839] tipc: Resetting bearer <eth:syzkaller0>
[  349.255164][T20487] tipc: Resetting bearer <eth:syzkaller0>
[  349.408782][T20513] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  349.412185][ T7115] IPVS: starting estimator thread 0...
[  349.508947][T20519] IPVS: using max 51 ests per chain, 122400 per kthread
[  349.856589][ T5841] Bluetooth: hci6: command 0x0406 tx timeout
[  350.511817][T20487] tipc: Disabling bearer <eth:syzkaller0>
[  350.546728][ T5981] tipc: Node number set to 2219793403
[  350.700004][T20530] __nla_validate_parse: 9 callbacks suppressed
[  350.700020][T20530] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4180'.
[  350.731350][T20531] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  350.770373][T20530] bond3: option xmit_hash_policy: invalid value (64)
[  350.781993][T20530] bond3 (unregistering): Released all slaves
[  350.786790][T20536] netlink: 'syz.3.4183': attribute type 1 has an invalid length.
[  350.943816][T20549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  350.951099][T20549] IPv6: NLM_F_CREATE should be set when creating new route
[  351.009021][T20549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  351.040004][T20549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  351.159948][T20565] netlink: 212216 bytes leftover after parsing attributes in process `syz.5.4188'.
[  351.381231][T20583] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4194'.
[  351.824481][T20616] bridge0: port 3(batadv3) entered blocking state
[  351.845793][T20616] bridge0: port 3(batadv3) entered disabled state
[  351.865844][T20616] batadv3: entered allmulticast mode
[  351.902614][T20616] batadv3: entered promiscuous mode
[  352.036320][T20639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4208'.
[  352.331840][ T8829] batman_adv: batadv3: No IGMP Querier present - multicast optimizations disabled
[  352.341174][ T8829] batman_adv: batadv3: No MLD Querier present - multicast optimizations disabled
[  352.365938][T20657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4214'.
[  352.384403][T20662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4217'.
[  352.393499][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4214'.
[  352.407261][T20663] xt_hashlimit: size too large, truncated to 1048576
[  352.597527][T20662] team1: entered promiscuous mode
[  352.602596][T20662] team1: entered allmulticast mode
[  352.703171][T20675] dvmrp6: entered allmulticast mode
[  352.711997][T20675] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  352.784391][T20680] ipvlan0: entered promiscuous mode
[  352.793135][T20682] sctp: [Deprecated]: syz.6.4223 (pid 20682) Use of int in maxseg socket option.
[  352.793135][T20682] Use struct sctp_assoc_value instead
[  352.820582][T20685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4224'.
[  352.839004][T20685] syzkaller1: entered promiscuous mode
[  352.844886][T20685] syzkaller1: entered allmulticast mode
[  352.862931][T20685] vlan0: entered promiscuous mode
[  352.874168][T20685] vlan0: entered allmulticast mode
[  352.887623][T20685] veth0_vlan: entered allmulticast mode
[  352.985368][T20691] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4226'.
[  353.247936][T20704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4230'.
[  353.295056][ T8829] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.313483][ T8829] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  353.335996][ T8829] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.344744][ T8829] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.640101][T20696] wlan0 speed is unknown, defaulting to 1000
[  353.717857][T20696] hsr0 speed is unknown, defaulting to 1000
[  353.873454][T20736] 8021q: VLANs not supported on ip_vti0
[  353.982850][T20734] 8021q: adding VLAN 0 to HW filter on device bond5
[  354.138766][T20749] netlink: 'syz.4.4240': attribute type 12 has an invalid length.
[  354.238995][T20749] bond4: option primary_reselect: invalid value (255)
[  354.252981][T20749] bond4 (unregistering): Released all slaves
[  354.323156][T20756] netlink: 'syz.5.4243': attribute type 10 has an invalid length.
[  354.395012][T20760] netlink: 'syz.5.4243': attribute type 2 has an invalid length.
[  354.529863][T20756] bond0: (slave team0): Releasing backup interface
[  354.573140][T20756] bridge0: port 3(team0) entered blocking state
[  354.579621][T20756] bridge0: port 3(team0) entered disabled state
[  354.595986][T20756] team0: entered allmulticast mode
[  354.606168][T20761] netlink: 'syz.0.4242': attribute type 4 has an invalid length.
[  354.615624][T20756] team_slave_0: entered allmulticast mode
[  354.621372][T20756] team_slave_1: entered allmulticast mode
[  354.770657][T20756] team0: entered promiscuous mode
[  354.779408][T20756] team_slave_0: entered promiscuous mode
[  354.793307][T20756] team_slave_1: entered promiscuous mode
[  355.037639][T20781] netlink: 'syz.6.4249': attribute type 1 has an invalid length.
[  355.391211][T20784] bond7: (slave gretap1): making interface the new active one
[  355.400036][T20784] bond7: (slave gretap1): Enslaving as an active interface with an up link
[  356.053737][T20829] __nla_validate_parse: 7 callbacks suppressed
[  356.053753][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4263'.
[  356.191087][   T30] audit: type=1800 audit(1763077214.422:5): pid=20832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4264" name="memory.events" dev="tmpfs" ino=1972 res=0 errno=0
[  356.340808][T20843] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4268'.
[  356.406750][T20847] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4269'.
[  356.589779][T20858] netlink: 'syz.0.4273': attribute type 6 has an invalid length.
[  356.661252][T20860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4275'.
[  356.676715][T20860] block nbd2: Unsupported socket: should be TCP or UNIX.
[  356.689178][T20862] netlink: 'syz.6.4274': attribute type 32 has an invalid length.
[  356.982633][T20886] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4280'.
[  357.010901][T20889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4278'.
[  357.239751][T20893] netlink: 'syz.3.4281': attribute type 2 has an invalid length.
[  357.255387][T20893] netlink: 'syz.3.4281': attribute type 2 has an invalid length.
[  357.265570][T20893] netlink: 'syz.3.4281': attribute type 2 has an invalid length.
[  357.430465][T20903] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4285'.
[  357.449282][T20903] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4285'.
[  357.811590][T20927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4291'.
[  357.879452][T20923] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4290'.
[  357.978088][T20935] openvswitch: netlink: nsh attr 60 is out of range max 3
[  357.985337][T20935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.001242][T20939] FAULT_INJECTION: forcing a failure.
[  358.001242][T20939] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  358.070642][T20939] CPU: 1 UID: 0 PID: 20939 Comm: syz.5.4295 Not tainted syzkaller #0 PREEMPT(full) 
[  358.070668][T20939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  358.070687][T20939] Call Trace:
[  358.070695][T20939]  <TASK>
[  358.070702][T20939]  dump_stack_lvl+0x189/0x250
[  358.070729][T20939]  ? __pfx____ratelimit+0x10/0x10
[  358.070753][T20939]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.070774][T20939]  ? __pfx__printk+0x10/0x10
[  358.070806][T20939]  should_fail_ex+0x414/0x560
[  358.070837][T20939]  _copy_to_user+0x31/0xb0
[  358.070860][T20939]  simple_read_from_buffer+0xe1/0x170
[  358.070890][T20939]  proc_fail_nth_read+0x1b3/0x220
[  358.070915][T20939]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  358.070939][T20939]  ? rw_verify_area+0x2a6/0x4d0
[  358.070959][T20939]  ? __lock_acquire+0xab9/0xd20
[  358.070975][T20939]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  358.070998][T20939]  vfs_read+0x200/0xa30
[  358.071019][T20939]  ? fdget_pos+0x247/0x320
[  358.071041][T20939]  ? __pfx___mutex_lock+0x10/0x10
[  358.071064][T20939]  ? __pfx_vfs_read+0x10/0x10
[  358.071088][T20939]  ? __fget_files+0x2a/0x420
[  358.071109][T20939]  ? __fget_files+0x3a0/0x420
[  358.071124][T20939]  ? __fget_files+0x2a/0x420
[  358.071150][T20939]  ksys_read+0x145/0x250
[  358.071175][T20939]  ? __pfx_ksys_read+0x10/0x10
[  358.071201][T20939]  ? do_syscall_64+0xbe/0xfa0
[  358.071228][T20939]  do_syscall_64+0xfa/0xfa0
[  358.071251][T20939]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.071267][T20939]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  358.071284][T20939]  ? clear_bhb_loop+0x60/0xb0
[  358.071305][T20939]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.071321][T20939] RIP: 0033:0x7f14b9d8e0dc
[  358.071335][T20939] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  358.071349][T20939] RSP: 002b:00007f14bac46030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  358.071367][T20939] RAX: ffffffffffffffda RBX: 00007f14b9fe5fa0 RCX: 00007f14b9d8e0dc
[  358.071380][T20939] RDX: 000000000000000f RSI: 00007f14bac460a0 RDI: 0000000000000004
[  358.071391][T20939] RBP: 00007f14bac46090 R08: 0000000000000000 R09: 0000000000000000
[  358.071402][T20939] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001
[  358.071412][T20939] R13: 00007f14b9fe6038 R14: 00007f14b9fe5fa0 R15: 00007fffbeaad668
[  358.071445][T20939]  </TASK>
[  358.447071][T20950] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  358.464539][T20950] xt_time: invalid argument - start or stop time greater than 23:59:59
[  359.669322][T21042] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1514) !
[  359.902979][T21060] validate_nla: 2 callbacks suppressed
[  359.902996][T21060] netlink: 'syz.3.4325': attribute type 33 has an invalid length.
[  359.942565][T21060] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  359.966435][T21060] bond7 (unregistering): Released all slaves
[  359.993129][T21066] netlink: 'syz.4.4326': attribute type 21 has an invalid length.
[  360.045241][T21069] netlink: zone id is out of range
[  360.056245][T21069] netlink: set zone limit has 8 unknown bytes
[  360.184051][T21077] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  360.338586][T21088] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  360.451103][T21092] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  360.992864][T21127] netlink: 'syz.5.4346': attribute type 1 has an invalid length.
[  361.044710][T21127] bond4: (slave gretap1): making interface the new active one
[  361.056757][T21127] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  361.077114][T21130] __nla_validate_parse: 12 callbacks suppressed
[  361.077131][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4347'.
[  361.110701][T21127] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  361.151305][T21125] syzkaller0: entered promiscuous mode
[  361.167737][T21133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4349'.
[  361.177103][T21125] syzkaller0: entered allmulticast mode
[  361.185686][T21130] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4347'.
[  361.217893][T21138] : entered promiscuous mode
[  361.411063][T21149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4353'.
[  361.462780][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4356'.
[  361.465744][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4353'.
[  361.517817][T21154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4356'.
[  361.584248][T21161] netlink: 'syz.3.4353': attribute type 1 has an invalid length.
[  361.627982][T21164] Bluetooth: MGMT ver 1.23
[  361.642124][T21161] bond7: entered promiscuous mode
[  361.649801][T21161] 8021q: adding VLAN 0 to HW filter on device bond7
[  361.750128][T21175] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4362'.
[  361.782777][T21177] sctp: [Deprecated]: syz.3.4363 (pid 21177) Use of int in maxseg socket option.
[  361.782777][T21177] Use struct sctp_assoc_value instead
[  361.802782][T21175] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4362'.
[  361.877409][T21180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4364'.
[  361.889035][T21180] openvswitch: netlink: Flow actions attr not present in new flow.
[  362.835031][T21255] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  363.284357][T21268] netlink: 'syz.5.4393': attribute type 10 has an invalid length.
[  363.628401][T21290] netlink: 'syz.0.4399': attribute type 1 has an invalid length.
[  363.745779][T21305] netlink: 'syz.6.4403': attribute type 10 has an invalid length.
[  363.816698][T21305] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  364.146266][T21330] sctp: [Deprecated]: syz.6.4414 (pid 21330) Use of int in maxseg socket option.
[  364.146266][T21330] Use struct sctp_assoc_value instead
[  364.239478][T21335] netlink: 'syz.5.4415': attribute type 33 has an invalid length.
[  364.499180][T21351] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  364.513965][T21351] bond2 (unregistering): Released all slaves
[  366.407014][T21407] mac80211_hwsim hwsim50 wlan1: entered allmulticast mode
[  366.421559][T21406] __nla_validate_parse: 24 callbacks suppressed
[  366.421576][T21406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4434'.
[  366.443730][T21408] syzkaller0: entered promiscuous mode
[  366.468750][T21408] syzkaller0: entered allmulticast mode
[  366.480305][T21415] FAULT_INJECTION: forcing a failure.
[  366.480305][T21415] name failslab, interval 1, probability 0, space 0, times 0
[  366.506368][T21415] CPU: 0 UID: 0 PID: 21415 Comm: syz.5.4435 Not tainted syzkaller #0 PREEMPT(full) 
[  366.506392][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  366.506403][T21415] Call Trace:
[  366.506410][T21415]  <TASK>
[  366.506417][T21415]  dump_stack_lvl+0x189/0x250
[  366.506445][T21415]  ? __pfx____ratelimit+0x10/0x10
[  366.506466][T21415]  ? __pfx_dump_stack_lvl+0x10/0x10
[  366.506487][T21415]  ? __pfx__printk+0x10/0x10
[  366.506508][T21415]  ? __pfx___might_resched+0x10/0x10
[  366.506523][T21415]  ? fs_reclaim_acquire+0x7d/0x100
[  366.506550][T21415]  should_fail_ex+0x414/0x560
[  366.506579][T21415]  should_failslab+0xa8/0x100
[  366.506596][T21415]  __kmalloc_cache_node_noprof+0x74/0x6f0
[  366.506619][T21415]  ? page_pool_create_percpu+0x76/0xbc0
[  366.506647][T21415]  page_pool_create_percpu+0x76/0xbc0
[  366.506667][T21415]  ? bpf_test_run_xdp_live+0x1ba/0x1b10
[  366.506689][T21415]  bpf_test_run_xdp_live+0x1cf/0x1b10
[  366.506706][T21415]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  366.506734][T21415]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  366.506765][T21415]  ? synchronize_rcu+0x11a/0x310
[  366.506783][T21415]  ? __pfx_synchronize_rcu+0x10/0x10
[  366.506806][T21415]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  366.506824][T21415]  ? bpf_dispatcher_xdp+0x800/0x1000
[  366.506857][T21415]  ? 0xffffffffa02019d0
[  366.506869][T21415]  ? 0xffffffffa0201a08
[  366.506881][T21415]  ? 0xffffffffa0201a4c
[  366.506894][T21415]  ? 0xffffffffa0207c8c
[  366.506932][T21415]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  366.506962][T21415]  ? _copy_from_user+0x94/0xb0
[  366.506982][T21415]  ? bpf_test_init+0x113/0x150
[  366.507003][T21415]  ? xdp_convert_md_to_buff+0x5b/0x330
[  366.507023][T21415]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  366.507063][T21415]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  366.507085][T21415]  ? __fget_files+0x2a/0x420
[  366.507107][T21415]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  366.507125][T21415]  bpf_prog_test_run+0x2c7/0x340
[  366.507147][T21415]  __sys_bpf+0x562/0x860
[  366.507166][T21415]  ? __pfx___sys_bpf+0x10/0x10
[  366.507198][T21415]  ? ksys_write+0x22a/0x250
[  366.507222][T21415]  ? __pfx_ksys_write+0x10/0x10
[  366.507249][T21415]  __x64_sys_bpf+0x7c/0x90
[  366.507271][T21415]  do_syscall_64+0xfa/0xfa0
[  366.507292][T21415]  ? lockdep_hardirqs_on+0x9c/0x150
[  366.507314][T21415]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.507330][T21415]  ? clear_bhb_loop+0x60/0xb0
[  366.507350][T21415]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  366.507367][T21415] RIP: 0033:0x7f14b9d8f6c9
[  366.507382][T21415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.507396][T21415] RSP: 002b:00007f14bac46038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  366.507415][T21415] RAX: ffffffffffffffda RBX: 00007f14b9fe5fa0 RCX: 00007f14b9d8f6c9
[  366.507428][T21415] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 000000000000000a
[  366.507438][T21415] RBP: 00007f14bac46090 R08: 0000000000000000 R09: 0000000000000000
[  366.507448][T21415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  366.507458][T21415] R13: 00007f14b9fe6038 R14: 00007f14b9fe5fa0 R15: 00007fffbeaad668
[  366.507489][T21415]  </TASK>
[  367.179665][T21445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4443'.
[  367.291673][T21446] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4443'.
[  367.566304][T21461] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.583792][T21461] syzkaller0: entered promiscuous mode
[  367.597708][T21461] syzkaller0: entered allmulticast mode
[  367.656254][T21468] bond0: Device is already in use.
[  367.685464][T21461] tipc: Resetting bearer <eth:syzkaller0>
[  367.714086][T21472] FAULT_INJECTION: forcing a failure.
[  367.714086][T21472] name failslab, interval 1, probability 0, space 0, times 0
[  367.738728][T21472] CPU: 1 UID: 0 PID: 21472 Comm: syz.6.4454 Not tainted syzkaller #0 PREEMPT(full) 
[  367.738761][T21472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  367.738771][T21472] Call Trace:
[  367.738777][T21472]  <TASK>
[  367.738784][T21472]  dump_stack_lvl+0x189/0x250
[  367.738811][T21472]  ? __pfx____ratelimit+0x10/0x10
[  367.738834][T21472]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.738856][T21472]  ? __pfx__printk+0x10/0x10
[  367.738876][T21472]  ? __pfx___might_resched+0x10/0x10
[  367.738895][T21472]  ? fs_reclaim_acquire+0x7d/0x100
[  367.738924][T21472]  should_fail_ex+0x414/0x560
[  367.738955][T21472]  should_failslab+0xa8/0x100
[  367.738972][T21472]  __kvmalloc_node_noprof+0x158/0x910
[  367.738994][T21472]  ? __kmalloc_cache_node_noprof+0x471/0x6f0
[  367.739014][T21472]  ? page_pool_create_percpu+0x314/0xbc0
[  367.739035][T21472]  ? page_pool_create_percpu+0xb2/0xbc0
[  367.739059][T21472]  page_pool_create_percpu+0x314/0xbc0
[  367.739079][T21472]  ? bpf_test_run_xdp_live+0x1ba/0x1b10
[  367.739102][T21472]  bpf_test_run_xdp_live+0x1cf/0x1b10
[  367.739119][T21472]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  367.739147][T21472]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  367.739177][T21472]  ? synchronize_rcu+0x11a/0x310
[  367.739196][T21472]  ? __pfx_synchronize_rcu+0x10/0x10
[  367.739219][T21472]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  367.739237][T21472]  ? bpf_dispatcher_xdp+0x800/0x1000
[  367.739268][T21472]  ? 0xffffffffa02019d0
[  367.739281][T21472]  ? 0xffffffffa0201a08
[  367.739293][T21472]  ? 0xffffffffa0201a4c
[  367.739305][T21472]  ? 0xffffffffa0207d08
[  367.739345][T21472]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  367.739371][T21472]  ? _copy_from_user+0x94/0xb0
[  367.739391][T21472]  ? bpf_test_init+0x113/0x150
[  367.739412][T21472]  ? xdp_convert_md_to_buff+0x5b/0x330
[  367.739432][T21472]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  367.739465][T21472]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  367.739487][T21472]  ? __fget_files+0x2a/0x420
[  367.739510][T21472]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  367.739527][T21472]  bpf_prog_test_run+0x2c7/0x340
[  367.739550][T21472]  __sys_bpf+0x562/0x860
[  367.739568][T21472]  ? __pfx___sys_bpf+0x10/0x10
[  367.739601][T21472]  ? ksys_write+0x22a/0x250
[  367.739626][T21472]  ? __pfx_ksys_write+0x10/0x10
[  367.739655][T21472]  __x64_sys_bpf+0x7c/0x90
[  367.739678][T21472]  do_syscall_64+0xfa/0xfa0
[  367.739698][T21472]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.739720][T21472]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.739737][T21472]  ? clear_bhb_loop+0x60/0xb0
[  367.739767][T21472]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  367.739784][T21472] RIP: 0033:0x7f1f2bf8f6c9
[  367.739799][T21472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  367.739813][T21472] RSP: 002b:00007f1f2cd83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  367.739832][T21472] RAX: ffffffffffffffda RBX: 00007f1f2c1e5fa0 RCX: 00007f1f2bf8f6c9
[  367.739846][T21472] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 000000000000000a
[  367.739857][T21472] RBP: 00007f1f2cd83090 R08: 0000000000000000 R09: 0000000000000000
[  367.739868][T21472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  367.739878][T21472] R13: 00007f1f2c1e6038 R14: 00007f1f2c1e5fa0 R15: 00007ffecdfb2a18
[  367.739909][T21472]  </TASK>
[  367.739981][T21472] page_pool_create_percpu() gave up with errno -12
[  368.077077][T21460] tipc: Resetting bearer <eth:syzkaller0>
[  368.114539][T21460] tipc: Disabling bearer <eth:syzkaller0>
[  368.171632][T21490] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4458'.
[  368.226085][T21490] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4458'.
[  368.504223][T21511] FAULT_INJECTION: forcing a failure.
[  368.504223][T21511] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  368.536346][T21511] CPU: 1 UID: 0 PID: 21511 Comm: syz.6.4464 Not tainted syzkaller #0 PREEMPT(full) 
[  368.536372][T21511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  368.536382][T21511] Call Trace:
[  368.536389][T21511]  <TASK>
[  368.536398][T21511]  dump_stack_lvl+0x189/0x250
[  368.536425][T21511]  ? __pfx____ratelimit+0x10/0x10
[  368.536469][T21511]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.536491][T21511]  ? __pfx__printk+0x10/0x10
[  368.536509][T21511]  ? __might_fault+0xb0/0x130
[  368.536545][T21511]  should_fail_ex+0x414/0x560
[  368.536574][T21511]  _copy_from_user+0x2d/0xb0
[  368.536597][T21511]  ___sys_sendmsg+0x158/0x2a0
[  368.536620][T21511]  ? __pfx____sys_sendmsg+0x10/0x10
[  368.536684][T21511]  ? __fget_files+0x2a/0x420
[  368.536700][T21511]  ? __fget_files+0x3a0/0x420
[  368.536727][T21511]  __sys_sendmmsg+0x227/0x430
[  368.536752][T21511]  ? __pfx___sys_sendmmsg+0x10/0x10
[  368.536781][T21511]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  368.536825][T21511]  ? ksys_write+0x22a/0x250
[  368.536850][T21511]  ? __pfx_ksys_write+0x10/0x10
[  368.536877][T21511]  __x64_sys_sendmmsg+0xa0/0xc0
[  368.536898][T21511]  do_syscall_64+0xfa/0xfa0
[  368.536919][T21511]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.536941][T21511]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.536958][T21511]  ? clear_bhb_loop+0x60/0xb0
[  368.536979][T21511]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.536996][T21511] RIP: 0033:0x7f1f2bf8f6c9
[  368.537012][T21511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.537027][T21511] RSP: 002b:00007f1f2cd62038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  368.537046][T21511] RAX: ffffffffffffffda RBX: 00007f1f2c1e6090 RCX: 00007f1f2bf8f6c9
[  368.537058][T21511] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000004
[  368.537070][T21511] RBP: 00007f1f2cd62090 R08: 0000000000000000 R09: 0000000000000000
[  368.537081][T21511] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001
[  368.537092][T21511] R13: 00007f1f2c1e6128 R14: 00007f1f2c1e6090 R15: 00007ffecdfb2a18
[  368.537124][T21511]  </TASK>
[  368.841573][T21518] FAULT_INJECTION: forcing a failure.
[  368.841573][T21518] name failslab, interval 1, probability 0, space 0, times 0
[  368.854872][T21518] CPU: 1 UID: 0 PID: 21518 Comm: syz.4.4468 Not tainted syzkaller #0 PREEMPT(full) 
[  368.854897][T21518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  368.854908][T21518] Call Trace:
[  368.854916][T21518]  <TASK>
[  368.854924][T21518]  dump_stack_lvl+0x189/0x250
[  368.854951][T21518]  ? __pfx____ratelimit+0x10/0x10
[  368.854974][T21518]  ? __pfx_dump_stack_lvl+0x10/0x10
[  368.854996][T21518]  ? __pfx__printk+0x10/0x10
[  368.855016][T21518]  ? __pfx___might_resched+0x10/0x10
[  368.855036][T21518]  ? fs_reclaim_acquire+0x7d/0x100
[  368.855066][T21518]  should_fail_ex+0x414/0x560
[  368.855096][T21518]  should_failslab+0xa8/0x100
[  368.855115][T21518]  __kmalloc_cache_noprof+0x6f/0x6f0
[  368.855137][T21518]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  368.855161][T21518]  ? __xdp_reg_mem_model+0x1d8/0x5a0
[  368.855186][T21518]  __xdp_reg_mem_model+0x1d8/0x5a0
[  368.855211][T21518]  ? __pfx___xdp_reg_mem_model+0x10/0x10
[  368.855233][T21518]  ? page_pool_create_percpu+0x7ea/0xbc0
[  368.855260][T21518]  xdp_reg_mem_model+0x22/0x40
[  368.855279][T21518]  bpf_test_run_xdp_live+0x21a/0x1b10
[  368.855298][T21518]  ? bpf_dispatcher_change_prog+0xb35/0xc90
[  368.855326][T21518]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  368.855357][T21518]  ? synchronize_rcu+0x11a/0x310
[  368.855376][T21518]  ? __pfx_synchronize_rcu+0x10/0x10
[  368.855399][T21518]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  368.855418][T21518]  ? bpf_dispatcher_xdp+0x800/0x1000
[  368.855454][T21518]  ? 0xffffffffa02019d0
[  368.855467][T21518]  ? 0xffffffffa0201a08
[  368.855481][T21518]  ? 0xffffffffa0201a4c
[  368.855494][T21518]  ? 0xffffffffa0207c98
[  368.855536][T21518]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  368.855564][T21518]  ? _copy_from_user+0x94/0xb0
[  368.855583][T21518]  ? bpf_test_init+0x113/0x150
[  368.855611][T21518]  ? xdp_convert_md_to_buff+0x5b/0x330
[  368.855628][T21518]  bpf_prog_test_run_xdp+0x7c0/0x10e0
[  368.855659][T21518]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  368.855681][T21518]  ? __fget_files+0x2a/0x420
[  368.855702][T21518]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  368.855718][T21518]  bpf_prog_test_run+0x2c7/0x340
[  368.855740][T21518]  __sys_bpf+0x562/0x860
[  368.855759][T21518]  ? __pfx___sys_bpf+0x10/0x10
[  368.855794][T21518]  ? ksys_write+0x22a/0x250
[  368.855819][T21518]  ? __pfx_ksys_write+0x10/0x10
[  368.855847][T21518]  __x64_sys_bpf+0x7c/0x90
[  368.855871][T21518]  do_syscall_64+0xfa/0xfa0
[  368.855893][T21518]  ? lockdep_hardirqs_on+0x9c/0x150
[  368.855915][T21518]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.855933][T21518]  ? clear_bhb_loop+0x60/0xb0
[  368.855954][T21518]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  368.855971][T21518] RIP: 0033:0x7f0d78b8f6c9
[  368.855986][T21518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  368.856000][T21518] RSP: 002b:00007f0d79aa9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  368.856019][T21518] RAX: ffffffffffffffda RBX: 00007f0d78de5fa0 RCX: 00007f0d78b8f6c9
[  368.856033][T21518] RDX: 0000000000000048 RSI: 0000200000000240 RDI: 000000000000000a
[  368.856044][T21518] RBP: 00007f0d79aa9090 R08: 0000000000000000 R09: 0000000000000000
[  368.856055][T21518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  368.856066][T21518] R13: 00007f0d78de6038 R14: 00007f0d78de5fa0 R15: 00007ffd1b9cfc78
[  368.856098][T21518]  </TASK>
[  369.286160][T21527] FAULT_INJECTION: forcing a failure.
[  369.286160][T21527] name failslab, interval 1, probability 0, space 0, times 0
[  369.364467][T21527] CPU: 0 UID: 0 PID: 21527 Comm: syz.3.4480 Not tainted syzkaller #0 PREEMPT(full) 
[  369.364500][T21527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  369.364510][T21527] Call Trace:
[  369.364517][T21527]  <TASK>
[  369.364524][T21527]  dump_stack_lvl+0x189/0x250
[  369.364551][T21527]  ? __pfx____ratelimit+0x10/0x10
[  369.364572][T21527]  ? __pfx_dump_stack_lvl+0x10/0x10
[  369.364594][T21527]  ? __pfx__printk+0x10/0x10
[  369.364619][T21527]  ? __pfx___might_resched+0x10/0x10
[  369.364636][T21527]  ? fs_reclaim_acquire+0x7d/0x100
[  369.364665][T21527]  should_fail_ex+0x414/0x560
[  369.364692][T21527]  should_failslab+0xa8/0x100
[  369.364712][T21527]  kmem_cache_alloc_node_noprof+0x77/0x710
[  369.364733][T21527]  ? __lock_acquire+0xab9/0xd20
[  369.364749][T21527]  ? __alloc_skb+0x112/0x2d0
[  369.364770][T21527]  __alloc_skb+0x112/0x2d0
[  369.364790][T21527]  alloc_skb_with_frags+0xca/0x890
[  369.364810][T21527]  ? __lock_acquire+0xab9/0xd20
[  369.364836][T21527]  sock_alloc_send_pskb+0x84d/0x980
[  369.364877][T21527]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[  369.364899][T21527]  ? is_bpf_text_address+0x26/0x2b0
[  369.364921][T21527]  ? is_bpf_text_address+0x292/0x2b0
[  369.364938][T21527]  ? is_bpf_text_address+0x26/0x2b0
[  369.364960][T21527]  __ip6_append_data+0x2b43/0x3f30
[  369.365008][T21527]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  369.365051][T21527]  ? __pfx___ip6_append_data+0x10/0x10
[  369.365074][T21527]  ? ip6_setup_cork+0xa1c/0x10e0
[  369.365104][T21527]  ip6_make_skb+0x2ce/0x410
[  369.365127][T21527]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  369.365150][T21527]  ? __pfx_ip6_make_skb+0x10/0x10
[  369.365170][T21527]  ? ip6_dst_check+0x5e3/0x7e0
[  369.365199][T21527]  ? ip6_sk_dst_lookup_flow+0x696/0x9b0
[  369.365230][T21527]  udpv6_sendmsg+0x1d1a/0x2510
[  369.365264][T21527]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  369.365293][T21527]  ? __pfx_udpv6_sendmsg+0x10/0x10
[  369.365323][T21527]  ? __pfx___might_resched+0x10/0x10
[  369.365357][T21527]  ? aa_sk_perm+0x81e/0x950
[  369.365378][T21527]  ? __lock_acquire+0xab9/0xd20
[  369.365406][T21527]  ? inet_send_prepare+0x5c/0x270
[  369.365426][T21527]  ? inet6_sendmsg+0xe4/0x120
[  369.365452][T21527]  __sock_sendmsg+0xe5/0x270
[  369.365477][T21527]  ____sys_sendmsg+0x52d/0x830
[  369.365509][T21527]  ? __pfx_____sys_sendmsg+0x10/0x10
[  369.365534][T21527]  ? import_iovec+0x74/0xa0
[  369.365556][T21527]  ___sys_sendmsg+0x21f/0x2a0
[  369.365576][T21527]  ? __pfx____sys_sendmsg+0x10/0x10
[  369.365630][T21527]  ? __fget_files+0x2a/0x420
[  369.365646][T21527]  ? __fget_files+0x3a0/0x420
[  369.365671][T21527]  __sys_sendmmsg+0x227/0x430
[  369.365696][T21527]  ? __pfx___sys_sendmmsg+0x10/0x10
[  369.365723][T21527]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  369.365765][T21527]  ? ksys_write+0x22a/0x250
[  369.365788][T21527]  ? __pfx_ksys_write+0x10/0x10
[  369.365815][T21527]  __x64_sys_sendmmsg+0xa0/0xc0
[  369.365836][T21527]  do_syscall_64+0xfa/0xfa0
[  369.365857][T21527]  ? lockdep_hardirqs_on+0x9c/0x150
[  369.365879][T21527]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.365896][T21527]  ? clear_bhb_loop+0x60/0xb0
[  369.365917][T21527]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  369.365933][T21527] RIP: 0033:0x7f8752d8f6c9
[  369.365949][T21527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  369.365964][T21527] RSP: 002b:00007f8753c42038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  369.365982][T21527] RAX: ffffffffffffffda RBX: 00007f8752fe5fa0 RCX: 00007f8752d8f6c9
[  369.365995][T21527] RDX: 0000000000000001 RSI: 0000200000003cc0 RDI: 0000000000000004
[  369.366006][T21527] RBP: 00007f8753c42090 R08: 0000000000000000 R09: 0000000000000000
[  369.366017][T21527] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001
[  369.366028][T21527] R13: 00007f8752fe6038 R14: 00007f8752fe5fa0 R15: 00007ffc5a071188
[  369.366059][T21527]  </TASK>
[  369.827279][T21531] netlink: 'syz.0.4471': attribute type 13 has an invalid length.
[  369.846342][T21531] netlink: 'syz.0.4471': attribute type 27 has an invalid length.
[  369.904764][T21533] bridge0: port 3(veth0_to_bridge) entered blocking state
[  369.930573][T21544] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4474'.
[  369.940239][T21533] bridge0: port 3(veth0_to_bridge) entered disabled state
[  369.947774][T21533] veth0_to_bridge: entered allmulticast mode
[  369.955663][T21533] veth0_to_bridge: entered promiscuous mode
[  369.989887][T21544] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4474'.
[  370.266277][T21564] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003
[  370.441734][T21578] FAULT_INJECTION: forcing a failure.
[  370.441734][T21578] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  370.458789][T21578] CPU: 1 UID: 0 PID: 21578 Comm: syz.0.4489 Not tainted syzkaller #0 PREEMPT(full) 
[  370.458813][T21578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  370.458823][T21578] Call Trace:
[  370.458830][T21578]  <TASK>
[  370.458837][T21578]  dump_stack_lvl+0x189/0x250
[  370.458863][T21578]  ? __pfx____ratelimit+0x10/0x10
[  370.458886][T21578]  ? __pfx_dump_stack_lvl+0x10/0x10
[  370.458907][T21578]  ? __pfx__printk+0x10/0x10
[  370.458925][T21578]  ? __might_fault+0xb0/0x130
[  370.458961][T21578]  should_fail_ex+0x414/0x560
[  370.458990][T21578]  _copy_from_user+0x2d/0xb0
[  370.459013][T21578]  kstrtouint_from_user+0xc4/0x170
[  370.459034][T21578]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  370.459070][T21578]  proc_fail_nth_write+0x88/0x200
[  370.459090][T21578]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  370.459117][T21578]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  370.459138][T21578]  vfs_write+0x27e/0xb30
[  370.459171][T21578]  ? __pfx_vfs_write+0x10/0x10
[  370.459196][T21578]  ? __fget_files+0x2a/0x420
[  370.459217][T21578]  ? __fget_files+0x3a0/0x420
[  370.459232][T21578]  ? __fget_files+0x2a/0x420
[  370.459258][T21578]  ksys_write+0x145/0x250
[  370.459283][T21578]  ? __pfx_ksys_write+0x10/0x10
[  370.459309][T21578]  ? do_syscall_64+0xbe/0xfa0
[  370.459335][T21578]  do_syscall_64+0xfa/0xfa0
[  370.459356][T21578]  ? lockdep_hardirqs_on+0x9c/0x150
[  370.459378][T21578]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.459403][T21578]  ? clear_bhb_loop+0x60/0xb0
[  370.459424][T21578]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  370.459441][T21578] RIP: 0033:0x7f2e0df8e17f
[  370.459457][T21578] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  370.459471][T21578] RSP: 002b:00007f2e0edad030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  370.459490][T21578] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2e0df8e17f
[  370.459502][T21578] RDX: 0000000000000001 RSI: 00007f2e0edad0a0 RDI: 0000000000000005
[  370.459512][T21578] RBP: 00007f2e0edad090 R08: 0000000000000000 R09: 0000000000000000
[  370.459523][T21578] R10: 0000000004001c00 R11: 0000000000000293 R12: 0000000000000001
[  370.459533][T21578] R13: 00007f2e0e1e6038 R14: 00007f2e0e1e5fa0 R15: 00007ffcc6c90418
[  370.459562][T21578]  </TASK>
[  370.501160][T21585] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4492'.
[  370.745153][T21590] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4492'.
[  370.822031][T21598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4495'.
[  371.192270][T21625] netlink: 'syz.0.4505': attribute type 83 has an invalid length.
[  371.201628][T21630] openvswitch: netlink: Missing key (keys=40, expected=80)
[  371.242254][T21628] syz_tun: entered allmulticast mode
[  371.323499][T21628] pimreg: entered allmulticast mode
[  371.441767][T21628] syz_tun: left allmulticast mode
[  371.457886][T21640] __nla_validate_parse: 2 callbacks suppressed
[  371.457902][T21640] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4511'.
[  371.637411][T21659] netlink: 14560 bytes leftover after parsing attributes in process `syz.0.4518'.
[  372.004255][T21688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4527'.
[  372.017623][T21691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4527'.
[  372.055419][T21696] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4526'.
[  372.087926][   T31] INFO: task syz.2.2070:13208 blocked for more than 143 seconds.
[  372.102127][   T31]       Not tainted syzkaller #0
[  372.122734][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  372.157061][   T31] task:syz.2.2070      state:D stack:26984 pid:13208 tgid:13207 ppid:5843   task_flags:0x400140 flags:0x00080002
[  372.193370][   T31] Call Trace:
[  372.197123][   T31]  <TASK>
[  372.200229][   T31]  __schedule+0x1798/0x4cc0
[  372.204888][   T31]  ? __lock_acquire+0xab9/0xd20
[  372.209912][   T31]  ? __lock_acquire+0xab9/0xd20
[  372.214932][   T31]  ? __pfx___schedule+0x10/0x10
[  372.220263][   T31]  ? schedule+0x91/0x360
[  372.224650][   T31]  schedule+0x165/0x360
[  372.229656][   T31]  schedule_preempt_disabled+0x13/0x30
[  372.235258][   T31]  __mutex_lock+0x7e6/0x1350
[  372.241076][   T31]  ? __mutex_lock+0x5bb/0x1350
[  372.247897][   T31]  ? nfsd_nl_listener_set_doit+0x137/0x1690
[  372.253989][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  372.259497][   T31]  ? __asan_memset+0x22/0x50
[  372.264275][   T31]  ? __x64_sys_sendmsg+0x19b/0x260
[  372.269594][   T31]  ? do_syscall_64+0xfa/0xfa0
[  372.274449][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.287028][   T31]  nfsd_nl_listener_set_doit+0x137/0x1690
[  372.292921][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[  372.300807][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  372.307371][   T31]  ? rcu_is_watching+0x15/0xb0
[  372.312329][   T31]  ? __nla_parse+0x40/0x60
[  372.317091][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  372.323622][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  372.348386][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  372.354921][   T31]  ? bpf_lsm_capable+0x9/0x20
[  372.360554][   T31]  ? security_capable+0x7e/0x2e0
[  372.365689][   T31]  genl_rcv_msg+0x60e/0x790
[  372.370341][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.375983][   T31]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[  372.382490][   T31]  netlink_rcv_skb+0x208/0x470
[  372.388804][   T31]  ? __lock_acquire+0xab9/0xd20
[  372.394662][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  372.400290][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  372.409445][   T31]  ? down_read+0x1ad/0x2e0
[  372.414054][   T31]  genl_rcv+0x28/0x40
[  372.418754][   T31]  netlink_unicast+0x82f/0x9e0
[  372.423874][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  372.429381][   T31]  ? netlink_sendmsg+0x642/0xb30
[  372.434538][   T31]  ? skb_put+0x11b/0x210
[  372.439127][   T31]  netlink_sendmsg+0x805/0xb30
[  372.444084][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.449721][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[  372.454847][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  372.461512][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  372.467008][   T31]  __sock_sendmsg+0x21c/0x270
[  372.471829][   T31]  ____sys_sendmsg+0x505/0x830
[  372.476947][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  372.482443][   T31]  ? import_iovec+0x74/0xa0
[  372.489606][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  372.497361][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  372.502752][   T31]  ? __fget_files+0x2a/0x420
[  372.507694][   T31]  ? __fget_files+0x3a0/0x420
[  372.512486][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  372.519163][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  372.524756][   T31]  ? do_syscall_64+0xbe/0xfa0
[  372.529829][   T31]  do_syscall_64+0xfa/0xfa0
[  372.534914][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  372.544162][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.550405][   T31]  ? clear_bhb_loop+0x60/0xb0
[  372.555251][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  372.561802][   T31] RIP: 0033:0x7f15bd58f6c9
[  372.566455][   T31] RSP: 002b:00007f15bb7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  372.574974][   T31] RAX: ffffffffffffffda RBX: 00007f15bd7e5fa0 RCX: 00007f15bd58f6c9
[  372.583419][   T31] RDX: 0000000020048000 RSI: 0000200000000000 RDI: 0000000000000003
[  372.591564][   T31] RBP: 00007f15bd611f91 R08: 0000000000000000 R09: 0000000000000000
[  372.599920][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  372.608067][   T31] R13: 00007f15bd7e6038 R14: 00007f15bd7e5fa0 R15: 00007ffdc8fe5738
[  372.616718][   T31]  </TASK>
[  372.685979][   T31] 
[  372.685979][   T31] Showing all locks held in the system:
[  372.693733][   T31] 1 lock held by khungtaskd/31:
[  372.700827][   T31]  #0: ffffffff8df3d660 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  372.710957][   T31] 2 locks held by getty/5590:
[  372.715724][   T31]  #0: ffff88803383d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  372.726238][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  372.736965][   T31] 4 locks held by kworker/u8:18/8839:
[  372.742417][   T31]  #0: ffff8880b883a058 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  372.752562][   T31]  #1: ffff8880b8824048 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  372.761503][   T31]  #2: ffff8880b8825958 (&base->lock){-.-.}-{2:2}, at: static_key_enable+0x12/0x20
[  372.770990][   T31]  #3: ffffffff8dff8788 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x250
[  372.782232][   T31] 2 locks held by syz.1.1959/12807:
[  372.787585][   T31]  #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  372.795831][   T31]  #1: ffffffff8e226ee8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  372.806144][   T31] 2 locks held by syz.2.2070/13208:
[  372.811359][   T31]  #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  372.819688][   T31]  #1: ffffffff8e226ee8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1690
[  372.830054][   T31] 3 locks held by syz.5.4526/21685:
[  372.835266][   T31]  #0: ffff8880597a3008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  372.846096][   T31]  #1: ffffffff8f32fa10 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90
[  372.857679][   T31]  #2: ffff88805a71bcd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nft_rcv_nl_event+0x116/0x640
[  372.868208][   T31] 2 locks held by syz.5.4526/21686:
[  372.873390][   T31]  #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  372.881596][   T31]  #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  372.891500][   T31] 1 lock held by syz.5.4526/21690:
[  372.896887][   T31]  #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: ip6_mroute_setsockopt+0x323/0xf00
[  372.906822][   T31] 3 locks held by syz.5.4526/21696:
[  372.912036][   T31]  #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  372.920383][   T31]  #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  372.929410][   T31]  #2: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0xa00
[  372.938842][   T31] 2 locks held by syz.5.4526/21697:
[  372.944113][   T31]  #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  372.952402][   T31]  #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  372.961862][   T31] 2 locks held by syz.5.4526/21699:
[  372.967116][   T31]  #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  372.975372][   T31]  #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  372.984667][   T31] 2 locks held by syz.5.4526/21700:
[  372.989896][   T31]  #0: ffffffff8f331590 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  372.998197][   T31]  #1: ffffffff8f3313a8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  373.007242][   T31] 2 locks held by syz.4.4527/21691:
[  373.012434][   T31]  #0: ffffffff8f2cb708 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dellink+0x346/0x700
[  373.021585][   T31]  #1: ffffffff8df430f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  373.032609][   T31] 
[  373.034998][   T31] =============================================
[  373.034998][   T31] 
[  373.045413][   T31] NMI backtrace for cpu 0
[  373.045428][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  373.045447][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  373.045456][   T31] Call Trace:
[  373.045462][   T31]  <TASK>
[  373.045469][   T31]  dump_stack_lvl+0x189/0x250
[  373.045497][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  373.045523][   T31]  ? __pfx__printk+0x10/0x10
[  373.045551][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  373.045573][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  373.045594][   T31]  ? __pfx__printk+0x10/0x10
[  373.045615][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  373.045642][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  373.045665][   T31]  watchdog+0xf60/0xfa0
[  373.045686][   T31]  ? watchdog+0x1e2/0xfa0
[  373.045708][   T31]  kthread+0x711/0x8a0
[  373.045731][   T31]  ? __pfx_watchdog+0x10/0x10
[  373.045748][   T31]  ? __pfx_kthread+0x10/0x10
[  373.045771][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  373.045792][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.045811][   T31]  ? __pfx_kthread+0x10/0x10
[  373.045833][   T31]  ret_from_fork+0x4bc/0x870
[  373.045852][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  373.045878][   T31]  ? __switch_to_asm+0x39/0x70
[  373.045891][   T31]  ? __switch_to_asm+0x33/0x70
[  373.045904][   T31]  ? __pfx_kthread+0x10/0x10
[  373.045926][   T31]  ret_from_fork_asm+0x1a/0x30
[  373.045959][   T31]  </TASK>
[  373.184720][T21686] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4526'.
[  373.187075][   T31] Sending NMI from CPU 0 to CPUs 1:
[  373.198805][    C1] NMI backtrace for cpu 1
[  373.198820][    C1] CPU: 1 UID: 0 PID: 8839 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) 
[  373.198837][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  373.198848][    C1] Workqueue: events_unbound toggle_allocation_gate
[  373.198867][    C1] RIP: 0010:__text_poke+0x169/0xa10
[  373.198888][    C1] Code: 00 48 8b 1d 69 6f 2a 0c 4c 89 e7 e8 c1 78 0d 00 49 89 c7 49 c1 ef 06 49 83 e7 c0 49 01 df 4d 89 fe 49 c1 ee 03 43 80 3c 2e 00 <74> 08 4c 89 ff e8 cd d5 bd 00 49 8b 1f 48 c7 c7 ff ff ff ff 48 89
[  373.198901][    C1] RSP: 0018:ffffc900036676a0 EFLAGS: 00000246
[  373.198914][    C1] RAX: 00000000021a5e95 RBX: ffffea0000000000 RCX: ffff88802a0abc80
[  373.198926][    C1] RDX: 0000000000000000 RSI: 00000000021a5e95 RDI: 000000001fffffff
[  373.198936][    C1] RBP: ffffc900036677f0 R08: ffff88801a064063 R09: 1ffff1100340c80c
[  373.198947][    C1] R10: dffffc0000000000 R11: ffffed100340c80d R12: ffffffff821a5e95
[  373.198959][    C1] R13: dffffc0000000000 R14: 1ffffd4000010d28 R15: ffffea0000086940
[  373.198970][    C1] FS:  0000000000000000(0000) GS:ffff88812623b000(0000) knlGS:0000000000000000
[  373.198982][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  373.198993][    C1] CR2: 0000001b2ed24224 CR3: 000000000dd38000 CR4: 00000000003526f0
[  373.199007][    C1] Call Trace:
[  373.199012][    C1]  <TASK>
[  373.199024][    C1]  ? __pfx_text_poke_memcpy+0x10/0x10
[  373.199043][    C1]  ? __kmem_cache_alloc_bulk+0x10b/0x590
[  373.199062][    C1]  ? __pfx___text_poke+0x10/0x10
[  373.199078][    C1]  ? rcu_is_watching+0x15/0xb0
[  373.199096][    C1]  ? trace_contention_end+0x39/0x120
[  373.199121][    C1]  smp_text_poke_batch_finish+0xd0f/0x1130
[  373.199153][    C1]  ? __pfx_smp_text_poke_batch_finish+0x10/0x10
[  373.199176][    C1]  ? arch_jump_label_transform_queue+0x97/0x110
[  373.199203][    C1]  arch_jump_label_transform_apply+0x1c/0x30
[  373.199223][    C1]  static_key_enable_cpuslocked+0x128/0x250
[  373.199244][    C1]  static_key_enable+0x1a/0x20
[  373.199262][    C1]  toggle_allocation_gate+0xad/0x240
[  373.199276][    C1]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  373.199290][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  373.199311][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  373.199326][    C1]  ? process_scheduled_works+0x9ef/0x17b0
[  373.199342][    C1]  process_scheduled_works+0xae1/0x17b0
[  373.199374][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  373.199399][    C1]  worker_thread+0x8a0/0xda0
[  373.199429][    C1]  kthread+0x711/0x8a0
[  373.199449][    C1]  ? __pfx_worker_thread+0x10/0x10
[  373.199464][    C1]  ? __pfx_kthread+0x10/0x10
[  373.199483][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  373.199502][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  373.199519][    C1]  ? __pfx_kthread+0x10/0x10
[  373.199538][    C1]  ret_from_fork+0x4bc/0x870
[  373.199554][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  373.199573][    C1]  ? __switch_to_asm+0x39/0x70
[  373.199586][    C1]  ? __switch_to_asm+0x33/0x70
[  373.199597][    C1]  ? __pfx_kthread+0x10/0x10
[  373.199616][    C1]  ret_from_fork_asm+0x1a/0x30
[  373.199638][    C1]  </TASK>
[  378.488931][ T1302] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  378.499403][ T1302] lec:lec_start_xmit: lec0:No lecd attached