last executing test programs:

50.401811199s ago: executing program 4 (id=2886):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2)
close(r4)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
write$tun(r1, &(0x7f0000000100)=ANY=[], 0xc2)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd)

47.832803056s ago: executing program 4 (id=2899):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB='l'], 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4f24, @broadcast}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0), 0x1000, r1}, 0x38) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5000000002060108000000000000001b68000000"], 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x24004090) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) (async)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=<r8=>0x0)
setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@local, @in=@remote, 0x4e23, 0x3, 0x4e23, 0x0, 0x2, 0xa0, 0x80, 0x1d, r6, r8}, {0x3, 0x2, 0x9, 0x2, 0x7, 0x3, 0x6, 0x127}, {0x0, 0xfffffffffffffff9, 0x8, 0x1}, 0x1, 0x6e6bbb, 0x1, 0x1, 0x1, 0x2}, {{@in=@broadcast, 0x4d4, 0xff}, 0xa, @in=@empty, 0x0, 0x1, 0x3, 0x0, 0xfffffffc, 0x800, 0x3215}}, 0xe8) (async)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r9, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async)
getsockopt$sock_buf(r9, 0x1, 0x1c, 0x0, &(0x7f00000001c0))
socket$alg(0x26, 0x5, 0x0) (async)
ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000100)) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0)
close(r11) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (rerun: 32)
ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000140)={'\x00', 0x1000}) (async, rerun: 32)
ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) (rerun: 32)

47.768656436s ago: executing program 4 (id=2900):
r0 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000200)={@dev, <r1=>0x0}, &(0x7f0000000280)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x1e, &(0x7f0000003780)={&(0x7f0000000380)=@newtclass={0x0, 0x28, 0x100, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x3, 0xb}, {0xffe0, 0x9}, {0xa, 0xc}}, [@TCA_RATE={0x0, 0x5, {0x7, 0x1}}]}, 0x17c}}, 0xc0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000003f0007010000000000000000037c000018003780130003007172283414f6bba9"], 0x2c}}, 0x0)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000340)={0x1, 0x1, 'l'})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)={0x110, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r5}, @generic="0926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf", @typed={0x8, 0x96, 0x0, 0x0, @fd=r9}, @nested={0x59, 0x7a, 0x0, 0x1, [@typed={0x8, 0x64, 0x0, 0x0, @fd}, @generic="741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a467f1ef9da", @typed={0x8, 0x108, 0x0, 0x0, @u32=0x180000}]}, @typed={0x8, 0xc3, 0x0, 0x0, @fd}]}]}, 0x110}], 0x1, 0x0, 0x0, 0x20000080}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r11=>0x0})
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x9, 0x7, 0x1, 0x0, "ae30c66524"}]}], {0x14}}, 0xbc}}, 0x0)
sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x1c, r10, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x4)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x4}]}}]}, 0x3c}}, 0x0)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r13, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040084)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

42.449144526s ago: executing program 2 (id=2939):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0xf}, 0x50)
close(0x3)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$MAP_CREATE(0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="0b00000008000000020000000900000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc)

41.930304015s ago: executing program 2 (id=2944):
r0 = socket(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8}, 0x94)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYRES64=0x0, @ANYRESDEC, @ANYRES8, @ANYRES16, @ANYRES64=r0, @ANYRES32=r3, @ANYRES16=r0, @ANYRES8, @ANYRES32=r1, @ANYRES64=r1, @ANYRES16=r2, @ANYRES16=r3, @ANYRES32=0x0], 0x3c}}, 0x24000090)
r4 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_ro(r5, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0)
preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000d40)=""/53, 0x35}], 0x1, 0x401, 0x8bd7)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x0)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r7, &(0x7f00000060c0)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x5, @empty, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@dstopts={{0x18, 0x29, 0x37, {0xc}}}], 0x18}}], 0x1, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r8, 0x0, 0x4000080)
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r10, &(0x7f00000000c0), 0x12)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r11, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4)
listen(r11, 0x0)
r12 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r12, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4)
bind$l2tp(r12, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0x4, 0x2, 0x47, @mcast1, @mcast1, 0x1, 0x8, 0x0, 0x66}})
readv(r10, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}, {0x0}, {&(0x7f00000016c0)=""/4, 0x4}, {&(0x7f0000001700)=""/238, 0xee}], 0x4)

41.702425255s ago: executing program 0 (id=2946):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
socket(0x400000000010, 0x3, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = socket$kcm(0x2, 0x200000000000001, 0x0)
sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x22}}, 0x10, 0x0}, 0x340440f1)
setsockopt$sock_attach_bpf(r4, 0x1, 0x12, &(0x7f00000007c0), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000080)={0x1f, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010101, @private=0xa010101}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r6}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10)
ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000000000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x3, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
getsockopt$inet6_opts(r7, 0x29, 0x36, 0x0, &(0x7f0000000000))
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10)
r9 = socket$kcm(0x2, 0x1, 0x0)
r10 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x89e0, &(0x7f0000000040)={r9})
r11 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r11, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg$unix(r8, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}, {{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000002680)=""/70, 0x46}], 0x1}}], 0x2, 0x0, 0x0)

41.617162271s ago: executing program 2 (id=2947):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000200), r1)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r5, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000050)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r3}, 0x4)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000300)={0xfffffffffffffffc, 0x1217000, 0x800, 0x13, 0x4}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r3}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r2, @ANYRESHEX=r2], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7de5}, 0x94)

41.460375357s ago: executing program 2 (id=2949):
r0 = socket$netlink(0x10, 0x3, 0x9)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = accept4(r1, 0x0, 0x0, 0x0)
recvmsg$unix(r2, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x9100) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3ec}, [], {0x14, 0x3f8}}, 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0x8, 0x4, 0x7, 0x3}, 0x10) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x9f0}}, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async)
r5 = socket(0x400000000010, 0x3, 0x0) (async)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x5}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r9}, 0xc)
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0xffe0, 0xfff2}, {}, {0xa, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x1c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x53}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x14}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x38, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x15}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA]}]}, @TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0x9}, @TCA_FLOWER_INDEV={0x0, 0x2, 'geneve0\x00'}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2600c0a8}, 0x0) (async)
listen(0xffffffffffffffff, 0xa596) (async)
sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x140, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x2}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1112}, @CTA_NAT_DST={0x80, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010101}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x32}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_PROTO={0x34, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private1}]}, @CTA_TUPLE_REPLY={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}]}, @CTA_TUPLE_REPLY={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}]}, 0x140}, 0x1, 0x0, 0x0, 0x10000}, 0x2000c000)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r3, 0xc0096616, &(0x7f0000000380)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})

41.432015839s ago: executing program 1 (id=2950):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000370400"/20, @ANYRES32=r1, @ANYBLOB="83e80500000000002800128008000100677265001c0002808bfe703076b1803277e4c5d3050013000100000005000a00"], 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0x2, 0x0, &(0x7f0000000200)='GPL\x00'}, 0x94)
setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_netdev_private(r2, 0x89f1, &(0x7f0000000000))
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000c505ecc3f46107a500a79a6a3906c05200000080000000000000618755954f", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r7, &(0x7f0000000100)=[{&(0x7f0000000a40)="2e9b3d0090e807e03dd651084a9e77a93070", 0x12}, {&(0x7f0000000040)="dd7fb74d38caf17c75f16d067e11415380270996f3f4b616b45322a4415fe05d003b", 0x22}], 0x2)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00f1ff0000000000000000000000007a07e6ec2ddb15e72507c22fb6fae3350e09f0168193e3b8bfcd3d2313d63f01e4a5bb07df64179cd3215d4834786ec0005cc8e52e5ecf508c864b9674e58f4d93b86f448b9fb6cdc0548a6110cf8c762bb7aee15b8461d848fe03922867bf80ffb81214992f2dfa82abd2b494b3c26d12e3b4e169474e1a09503a96e74c8b0d7b9ee5422dd4d1812ec7e142922499", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x19, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000001f000000000000007e00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007baaf8ff00000000b5080000000000007b8af0593f3755d5186bf0e0896eff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000ffb70200000800000018230000000000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000085000000b30000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r11, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0xfffffffffffffeeb, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10)

41.145058295s ago: executing program 2 (id=2952):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0200001900010000000000000000000a0101000000000000000000000000000a01010100000000000000000000000000000003000000000200002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000000000001000000000000000000000000000000fdffffffffffffffdd02040040000000040000000000000000000100000000008401050020010000000000000000000000000001000000002b00000000000000fc010000000000000000000000000001000000000000ff000000000000000000000000000000000000000000000000000000000100000000320000000000000000000000000000000000fffffffffffffeffffff0000000000000000000000000700000000000000000000000000000000000001000000003c00000002000000000000000000000000000000000000000100000001030000000000000000000009000000ff020000000000000000000000000001000000003200000002000000200100000000000000000000000000010000000000000000000000000300000000000000e0000002000000000000000000000000000000002b000000"], 0x23c}}, 0x8000000)
unshare(0x22000400)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
sendfile(0xffffffffffffffff, r2, &(0x7f0000000280)=0x7fffffffffffffff, 0x9)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x23, 0x5, 0x0)
sendmsg$TIPC_NL_LINK_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x200408c0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r4)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xfffe, 0x20}, &(0x7f00000001c0)=0x18)
syz_emit_ethernet(0xb3, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@llc_tr={0x11, {@llc={0xf4, 0xdc, "ad01", "27aa3bdcb0b02bfc6a80f4bf30d6b303d07e4487abf861412d189df75f139b29fa3b307dd6f074b94dc349135a05c7999b8cde4fd5d84cb690c9f80f9ed9262bc999093a9d0696b112ada1e7ac935ee227006da559f40b3d4bf7b32b7b27aeb05c83cb2c6213b06b21c2da6e2ca47a8e73536657d7fc30aff25349ad6b51f4d11b82902b2e5748ce2dce94b152a9f4e8a0f7493b709b0428ac921224f97a54b656"}}}}}, &(0x7f0000000000)={0x1, 0x1, [0x1ae, 0xc62, 0x60c, 0xe14]})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newtaction={0x114, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbfb, {}, [{0x100, 0x1, [@m_ctinfo={0xfc, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x4, 0x8, 0x0, 0x10001, 0xfffffff9}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x3, 0xffffffffffffffff}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}]}, {0x96, 0x6, "41025a8ed2d25b0ed56e39c1bfb7d79aa8a64d6ca94b2f797c5a5be2e77364d47463083b221ade5bee9dc615f7866b530abe1179264b1cf826de755a1ed356232355779dbf9670054f3e29e9ed10c746efc48518593a3c6c212e01a438353e950d2ddb5562eeb8161d449a6fb6b67f8f91d4f6802d123a6168ee7e47d8cc6f50e74ea5df50c5418a2d74cccd4ede94c35222"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x2005c040}, 0x0)

40.875084786s ago: executing program 2 (id=2953):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000008000000000000000000000000000000000000000000000000000000a344e8a35d040918bfe18003eda51f21d1356b833b59632c0e71b36fbf54eb37fc503d690ca1227066194bf583409b36473954ad4b22b93b94f3362bee5924f1d2d286d3f1c057807f647a2c2eec706d9adb20639ee4116aa97aee316e8313627c3e00fb792e3f05220e7066d73e920028099ae783bfe8d15e6b81a33317eeee1193fb2b4787f2073541be297f98dd90678204b4472bfe5bfbe36e43b09329109e594f60ada4c049a6430d3fc03e904878656583bbee"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000080)='GPL\x00', 0x24ea, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x38, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x20000000)
unshare(0x4a000200)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000200))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg$sock(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4)

40.55816213s ago: executing program 3 (id=2954):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x1, 0x4, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x6783, 0x2, 0x8001, 0x10}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x7c}}, 0x24040084)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0x19}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8004}, 0x0)

40.547834729s ago: executing program 0 (id=2955):
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1402, 0xf08, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x54)
sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008800)
syz_emit_ethernet(0xf5, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="83cd94b72cfa", @val={@val={0x88a8, 0x0, 0x1, 0x1}, {0x8100, 0x2, 0x0, 0x3}}, {@generic={0x806, "c6e6464e54efc6e029efc9c6b4185322611e2d251b736fcee76a39f076488f4a6df00b80f61e9242160256538f6ba34d3ce56200697735cace6adfc5a3179ad62086d54d9d4531df16e28c3074842131ea3399b1b7608c10736605ba56ae58b6ba88d0e7ba336719491caa2ccfd9ed66647912d39b7d5effe2bd97f256ac4396973c79812795dc07ef00af17f0f013293f8eceafef3d2f5fa0b9c46c4b4a049c9f1353e89dc0df39c5b68df140843df3431218c7e8784be63fdeb0beff9f24fc52f2148938afee62a4c80bf97a20510f29757bbbdde4e41ffcd4b294aaecc5"}}}, &(0x7f0000000340)={0x0, 0x2, [0x6b9, 0xc6e, 0xefe, 0x2aa]})
recvmsg$unix(r0, &(0x7f0000000700)={&(0x7f0000000380), 0x6e, &(0x7f0000000640)=[{&(0x7f0000000400)=""/208, 0xd0}, {&(0x7f0000000500)=""/134, 0x86}, {&(0x7f00000005c0)=""/89, 0x59}], 0x3, &(0x7f0000000680)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff]}}], 0x48}, 0x0)
socket$packet(0x11, 0x2, 0x300)
ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000780)={0x38d, 0x30, '\x00', 0x0, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f00000007c0)={'pim6reg\x00', {0x2, 0x0, @private}})
socketpair(0x5, 0x2, 0xff, &(0x7f0000000800)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r7, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x38, r8, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x100, 0x60}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x40ca004)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a00), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000a40)=<r12=>0x0)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r10, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r11, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}}, 0x48045)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000bc0)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl0\x00', <r13=>0x0, 0x0, 0x0, 0x1, 0x2, 0x2, @local, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x80, 0x1000, 0xfffffffe}})
ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000c00)={@loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x101, 0x5, 0x800, 0x100, 0x0, 0x80000000, r13})
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000c80)=0x4, 0x4)
close(r7)
r14 = socket$inet6(0xa, 0x1, 0x2)
setsockopt$inet6_tcp_TLS_RX(r14, 0x11a, 0x2, &(0x7f0000000cc0)=@gcm_128={{0x304}, "4038b9898fe4d81a", "6f09d5c7d3cb211e8db2eaf4be7084b9", "33a47597", "c1956d40ed63c3c8"}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00))
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x50, r8, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x380, 0x2d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000801)
ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000000e80)={@bcast, @default})
socket$packet(0x11, 0x2, 0x300)
r15 = syz_genetlink_get_family_id$nbd(&(0x7f0000000f00), r10)
sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000001040)={&(0x7f0000000ec0), 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xb0, r15, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x822}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '*'}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '+\''}, @NBD_ATTR_BACKEND_IDENTIFIER={0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3}]}, 0xb0}}, 0x20000000)

40.193052704s ago: executing program 3 (id=2956):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004001)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x24}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
accept$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f0000000080)=0x1c)
ioctl$TUNSETLINK(r1, 0x400454cd, 0xffff)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

40.113280109s ago: executing program 0 (id=2957):
r0 = socket$l2tp(0x2, 0x2, 0x73)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'tunl0\x00'})
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r4=>0x0})
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00')
unshare(0x22020600)
r6 = accept$packet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000540)=@req={0x3, 0x7, 0x7, 0x6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000000)=@framed={{0x6, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x4b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8c}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
socket$rds(0x15, 0x5, 0x0)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x98, r7, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x4e, 0xa9, @random="44f5624a931f6f6204948f9529c475fb774ce1a90db65b63acfd419b75b52db526096c59cb937452a465b7337e215174414f4dee721056bd2169b070502be0ffbd2946cd34a824553885"}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000801)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
syz_emit_ethernet(0x86, &(0x7f0000000000)={@remote, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "adf18d000000000000000000490200", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(r8, 0x0, 0x48040)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, r3, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}]}, 0x24}}, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff)

39.940057712s ago: executing program 3 (id=2958):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}, 0xfffffc0f}], 0x1, 0x10021, 0x0) (async)
recvmmsg(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}, 0xfffffc0f}], 0x1, 0x10021, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xd0, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:getty_log_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x20, 0x7, 'system_u:object_r:wtmp_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}]}, 0xd0}, 0x1, 0x0, 0x0, 0x41}, 0x4040000)

39.717061138s ago: executing program 1 (id=2959):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r1 = socket$unix(0x1, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="3f72f3840ddb5188372d62b48f9a802e97044c1d9f518a6ff8d32e2682f97b3e38a96b57495f1c850617cf34093c8f9e7632cc690441649e03b3285c3b1b5648102aa32a554dd6e74e833030c1f595fad713dbac456e", 0x56}, {&(0x7f0000000300)="7919098e4580c4ef817aedfa58cac6fe27240765054fe7da801db0101409d708184b519d75a95e45a8403681742d3240077a1f4214630a0b174130cdf9ad1d6fe27edd7c289ee5e176fd65ac416a12aadc731e93a6f18c862b7ee04db448bc0b1034fde37319821a29cd7c39c9066b4e0e24916589091d93c70599ec5623587d49a65d10403365a2227db0d24e8c8b599e20a131115048030edfa1777006e46d03e2e568aa19b2a7b2413ad29111a6e5d1fed3ebe97d946c67737a82e05e8fe8abbd3999f0a6c8b933aca6d7b6aa4b5fc827b3663e84a8eb8b60f0d8d595410cd3956710e3540ecad69f3abae1731dd37706a76ce2f110", 0xf7}, {&(0x7f0000000400)="049296c68b832d92dfbaa1652c787c6b294bbb3c13db3ef3e9659195d4df7f3c8cd45f89cfb737f3b520a7ccf5ac5efaf1bf396cfaf46c4b0ef403c9f323b1eafb2295d9679761b281f17899cc87a0c4b912805ee7b037289f5b9c8c4f693c0e6a19809627a446942eea9403f1af591410d2ee39596e31dfef3d833ddb22bbe5f98965ac4c3c6f8eeebf871d705edaa950dc1c4860676738cdf8156433ea7d5050b9177882ba8620246ef0fbfd164a306d7caaa15352da6157332378c4e4fdda85bcb31f4dfc2ac21c1307ef40f5e55808a9", 0xd2}, {&(0x7f0000000500)="486e4816e56d7fda4e08b08e792461cd995da688fa15a21e436394a436d0122d6842d912673b27c0590c00cdd76f0703a3eb5fb5e1e03931837e6ce0dfe41ffeb8e5e121793bd0fd30c5990a7bd52a34e70a6575e2e0d0ce7d4bd786ecf1e590e7866bfcf1af45432778c7ff3223d76fae1cc887294a4cda1dc7db3f49f97c28ebc7927477867370df634c0a28917a", 0x8f}], 0x4, &(0x7f00000005c0)=[@ip_retopts={{0xf8, 0x0, 0x7, {[@rr={0x7, 0x1f, 0xc4, [@rand_addr=0x64010101, @private=0xa010102, @multicast1, @private=0xa010101, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x27, 0x6b, [@multicast2, @loopback, @private=0xa010102, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @local, @multicast1, @empty]}, @timestamp={0x44, 0x10, 0x80, 0x0, 0x9, [0xa, 0x8001, 0x400]}, @timestamp={0x44, 0x18, 0x5a, 0x0, 0x8, [0x800, 0x5, 0x7, 0x7, 0x1]}, @lsrr={0x83, 0x1f, 0xb9, [@broadcast, @rand_addr=0x64010102, @broadcast, @multicast2, @empty, @local, @multicast2]}, @cipso={0x86, 0x47, 0x0, [{0x5, 0x11, "3e7307aa761f7a121f038931dd6b70"}, {0x6, 0x12, "cbb46689bb59de3baf5c8232f1637dee"}, {0x2, 0x8, "b382e1a641ab"}, {0x7, 0xa, "d6c3f0cc6dd61085"}, {0x2, 0xc, "b3ecec4b8d97c565a555"}]}, @ssrr={0x89, 0xf, 0x98, [@dev={0xac, 0x14, 0x14, 0xa}, @loopback, @private=0xa010101]}, @generic={0x7, 0x3, "ba"}, @generic={0x7, 0x2}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_retopts={{0x28, 0x0, 0x7, {[@cipso={0x86, 0xb, 0xffffffffffffffff, [{0x2, 0x5, "a05182"}]}, @noop, @ssrr={0x89, 0xb, 0x65, [@rand_addr=0x64010100, @loopback]}, @noop]}}}], 0x150}, 0x40880)
ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='net_dev_xmit\x00', r3}, 0x18) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) (async)
epoll_create(0x4) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000009c0)) (async)
sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
connect$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x8, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x7}], &(0x7f0000000980)='GPL\x00', 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

39.71645904s ago: executing program 3 (id=2960):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, r0, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x4000)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$inet(r1, 0x0, 0x0)
sendmsg$inet(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000500)="1df3000f4a6d6f87e0c14db02e70e1db8a57bffcfc088576775c155122f32b4a2d55c8030c3a09cbcb3a7a116702", 0x2e}, {0x0}], 0x2}, 0x4000)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000900)={&(0x7f0000000a00)=@newtclass={0x2cc, 0x28, 0x800, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x8}, {0x9, 0xc}, {0xd, 0xfffe}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0x40}}}, @c_atm={{0x8}, {0x4}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x2}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x9}}}, @c_cbq={{0x8}, {0x3c, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x0, 0x400, 0x97c0, 0x8, 0x6}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0x7}, 0xfffffffe, 0x776}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x34, 0x0, 0x9, 0x2, 0x7, 0x61, 0x7, 0x2}}]}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x33, 0x3, "d7074dfa41ae69ba03e56f2c0e369487314040895d04069c8acae85a5ff2bedbbb62e448346dce84defaaa13e9ea43"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffe0, 0xfff3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xffff, 0xe}}]}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x5, 0xb, 0x39, 0xfff, 0x404}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x6}, 0x2, 0xcb}}]}}, @c_atm={{0x8}, {0xec, 0x2, [@TCA_ATM_HDR={0x42, 0x3, "b409e4da6868d9b2baf03ea8db80c5e745a584d0180ee50d54344f57ed71c099ee02fc39dc96f20289badeb6d0cedb6625aa6a1f979f7e17d3d29ba67a63"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xd, 0xfff1}}, @TCA_ATM_HDR={0x26, 0x3, "56d17bee84a35aab209fb9946f0e68bb414bc2585e109c3fe32d3b7041992c30244f"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5, 0x7}}, @TCA_ATM_FD={0x8}, @TCA_ATM_FD={0x8}, @TCA_ATM_HDR={0x24, 0x3, "10f8a82597a66cc7bf8acafa82e76e2476196acbfeac5f16506ecd1a14345c8f"}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x2d, 0x3, "c49cce861281fd7d8b2d1771a565cc9856f21a3f2432d7e3c2e1c81958f4e46ac905b158028ec14f14"}]}}, @c_atm={{0x8}, {0x90, 0x2, [@TCA_ATM_HDR={0x31, 0x3, "74c8a96d5e23fdfbcf27585f57340a90969212e61e7a143270c2ca03e52d24b901548213b90db6976657853371"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x78af8dd3d8266b52, 0xffff}}, @TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0x6}}, @TCA_ATM_HDR={0x37, 0x3, "e98949e4e35aa5fef1cebf9208e5a4c3ba2fee98bba766d9417386ab242397a7e69181dc2f52c4c8ae4922243f41547b220fe3"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x8, 0xfff1}}]}}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40000}, 0x81)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
sendmmsg$inet(r1, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="c239f58ddf00000002d57686cb43337243", 0x11}, {&(0x7f0000000800)="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", 0xfe}], 0x2}}], 0x1, 0x480e0)

39.68456492s ago: executing program 0 (id=2961):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff})
getsockopt$sock_buf(r0, 0x1, 0x22, &(0x7f0000000080)=""/116, &(0x7f0000000100)=0x74)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
bind$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4001}, 0xc)

39.621508236s ago: executing program 1 (id=2962):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x609, 0x4, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7, 0x5a018}, [@IFLA_OPERSTATE={0x5, 0x10, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20000040)

39.495036964s ago: executing program 1 (id=2963):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$inet(0x2, 0x80001, 0x84) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket(0x2a, 0x2, 0x13)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00\x00\vF\x00\x00\x00\x00\x00\x00\x00\x00\x00+.\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000060000000a00030008e7eebc872f0000140012800b000100627269646765000004000280"], 0x40}}, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r6)
r7 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', <r8=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r8})
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r9 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005c40), 0xffffffffffffffff) (async, rerun: 32)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 32)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000040)='cubic', 0x5)
setsockopt$inet6_tcp_int(r11, 0x6, 0x24, &(0x7f0000019180)=0x1, 0x4) (async)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf250300000008000400fffbffff3800018014000400fe880000000000000000000000000101080006001100000006000100020000000800030064010102080007"], 0xa4}, 0x1, 0x0, 0x0, 0x890}, 0x0) (async)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r10, @ANYBLOB="10002dbd7000ffdbdf250500000008000400000800000400068008000400090000004c000180050002000d000000080006000800000014000400ff0100000000000000000000000000011400040000000000000000000000000000000001060005004e230000060005004e24000008000200030000003c000680060005004e22000008000300e0000001060005004e2000000500020008000000080003000000000008000300ac1414aa08000700", @ANYRES32=r8, @ANYBLOB="08000300010000003c00018014000400fc020000000000000000000000000001060005000000000014000400fc02000000000000000000000000000108000300ac1414bb"], 0xfc}, 0x1, 0x0, 0x0, 0x4000010}, 0x4804)

39.494003502s ago: executing program 3 (id=2964):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2, @rand_addr=0x64010101, 0x0, 0x7, [@broadcast, @empty, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @loopback]}, 0x2c)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000280)={'macsec0\x00', 0x3})

39.392915997s ago: executing program 0 (id=2965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a07000000687bfdaa079ea642"], 0x14}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x2)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e21, 0x1, @empty}, 0x1c)
sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05a300000000000000000d00000008000300", @ANYRES32=r3], 0x1c}}, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x9, @none, 0x2}, 0xe)

39.289473839s ago: executing program 3 (id=2966):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="240000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000410", @ANYRES16=r2, @ANYBLOB="110727bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) (async)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r3, &(0x7f00000000c0), 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) (async, rerun: 64)
unshare(0x62040200) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 32)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (async)
r9 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r9, &(0x7f0000000280), 0x9) (async)
openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

39.181009645s ago: executing program 0 (id=2967):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r1=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={<r2=>r1, 0x83, "58672dabae190c38398f36584fa69521b43a5c68767271c3231e36f9f2c077d138795e35c96f7944af43cfaa33c0be41f42e0a3db5ff7be483ca3d45ea01e3059c05bbc5f66ba36f0309043346aa83f2c35fa358620108163c09531b354dbb2eceaba67077844e6c5a0da3c42164ffb6a176e71946826917ba15e0c68f9fa1e4b0f705"}, &(0x7f0000000140)=0x8b)
r3 = socket$inet(0x2, 0x1, 0x1)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x2, 0xe9b}, 0xc)
getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f00000001c0), &(0x7f0000000200)=0x8)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@cgroup=<r5=>r4, 0x6, 0x0, 0xd5, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f00000003c0)={0x1f, 0x2, 0x1}, 0x6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_CONFIG(r7, &(0x7f0000000680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000480)={0x198, r8, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x10}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4, 0x10}}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x47}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5b}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x198}, 0x1, 0x0, 0x0, 0x801}, 0x40000)
setsockopt$bt_hci_HCI_TIME_STAMP(r6, 0x0, 0x3, &(0x7f00000006c0)=0xffffffff, 0x4)
r9 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700), 0xa00, 0x0)
ioctl(r9, 0x3ff, &(0x7f0000000740)="9e784cf5a0c7dc65d2839c3df18df4df616dc6316d7647239880b479b17eea6355d483c78ca13a61f28b17eafc75bc6ecb3a5d82493a753af6b0b028601f45dc9293fd83bed0212a2b218f2daca377d416501559f4c556f9160a44d4843394d38b4fcc16f95abf8c663604221dd236657e9dc22a31d3a73e95a02798abd43479182b90b35f38f8a1f52325b6d746bf93e58b8e02fc9546a64aa43424650c37e3f026ae8ae0fbef604776894ef181f25b770403f45ca326c36b04a75bd34c20c2348ff9034031a716a3ac5b9275f07c0f189cd0ba3ca261a15efb45b09ced45d06afba69f24681c5fb18a5a01c37c")
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0x1, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x80000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x200000c0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), r7)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000009c0)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000000ac0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r10, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0x74}}}}, [@NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x9}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r12)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r13, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x30, r14, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x85}, 0x4000000)
bind$llc(0xffffffffffffffff, &(0x7f0000000c40)={0x1a, 0x33a, 0xf7, 0x7f, 0x81, 0x9, @random="ac56b57e5874"}, 0x10)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000c80)={<r15=>r1, @in={{0x2, 0x4e22, @private=0xa010100}}}, &(0x7f0000000d40)=0x84)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r6, 0x4040942c, &(0x7f0000000d80)={0x0, 0xc, [0x4, 0x8, 0x7f, 0x6, 0x7c, 0x4]})
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000dc0)={<r16=>r15, 0x8, 0xc98, 0x0, 0x200, 0x5}, &(0x7f0000000e00)=0x14)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000e40)={r16, 0x1}, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000e80), 0x141a00, 0x0)

39.176671831s ago: executing program 1 (id=2968):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c00000010003df600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030064766d727009000000000000000000001800128008000100707070000c00028008000100", @ANYRES32=r3], 0x4c}}, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x401, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0xfffffffffffffe04, 0x8e, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x48810)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={<r5=>0x0, 0x35, "4caf677bb153d97184b6c5815f83dceea4c5719d6bc26c529b7c5946fdf4b1d09d69bf63e08c83d9531a25665b0f3e457eb9e64f9d"}, &(0x7f0000000080)=0x3d)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000000c0)={r5, 0x7fff, 0x30, 0x6, 0xfffffffffffffff7}, &(0x7f0000000100)=0x18)

39.048375986s ago: executing program 4 (id=2901):
r0 = socket(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) (async)
connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) (async)
clock_gettime(0x0, &(0x7f0000000180)={<r1=>0x0, <r2=>0x0})
r3 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @link_local, 'veth1_vlan\x00'}}) (async, rerun: 32)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f00000001c0)={r1, r2/1000+10000}, 0x10) (async, rerun: 32)
write(r0, &(0x7f0000000000)='\"', 0x1) (async)
recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0)

36.103143957s ago: executing program 1 (id=2969):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0xfe, {{0xa, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0xd7, 0x5e55b37311de6d89, 0x0, @private=0xa010101, @loopback, {[@lsrr={0x83, 0x13, 0xae, [@broadcast, @private=0xa010101, @local, @multicast2]}]}}}}})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x24, r4, 0x200, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, &(0x7f0000001300))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x801)

26.094192227s ago: executing program 4 (id=2971):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x401, 0x20000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000900)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

23.072890108s ago: executing program 32 (id=2953):
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000008000000000000000000000000000000000000000000000000000000a344e8a35d040918bfe18003eda51f21d1356b833b59632c0e71b36fbf54eb37fc503d690ca1227066194bf583409b36473954ad4b22b93b94f3362bee5924f1d2d286d3f1c057807f647a2c2eec706d9adb20639ee4116aa97aee316e8313627c3e00fb792e3f05220e7066d73e920028099ae783bfe8d15e6b81a33317eeee1193fb2b4787f2073541be297f98dd90678204b4472bfe5bfbe36e43b09329109e594f60ada4c049a6430d3fc03e904878656583bbee"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000080)='GPL\x00', 0x24ea, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r3}, 0x4)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000300)=r4, 0x4)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x14, 0x38, 0x229, 0x0, 0x25dfdbfc, {0xa}}, 0x14}}, 0x20000000)
unshare(0x4a000200)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000000)=0x3)
ioctl$PPPIOCGFLAGS1(r6, 0x8004745a, &(0x7f0000000200))
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0)
sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0)
sendmsg$sock(r8, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x4)
setsockopt$sock_int(r7, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r7, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
setsockopt$sock_int(r7, 0x1, 0xb, &(0x7f00000001c0)=0x4, 0x4)

19.771434668s ago: executing program 33 (id=2966):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="240000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00}, 0x94) (rerun: 64)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="00000410", @ANYRES16=r2, @ANYBLOB="110727bd70000000000004000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004094}, 0x8894) (async)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
connect$bt_sco(r3, &(0x7f00000000c0), 0x8)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) (async, rerun: 64)
unshare(0x62040200) (async, rerun: 64)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002021702500000000002020207b1af8ff00000000bfa10000951234d35864aa628023ce005f3d367c00000701fefff7ffffffb702000008000000b703003e6d000083850054308de8c7749781c53da224ccde11e158"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18)
syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async, rerun: 32)
socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 32)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0xffffffffffffffff)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) (async)
r9 = openat$cgroup_type(r6, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_type(r9, &(0x7f0000000280), 0x9) (async)
openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) (async)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)

17.421226s ago: executing program 34 (id=2969):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0xfe, {{0xa, 0x4, 0x0, 0x10, 0x28, 0x0, 0x0, 0xd7, 0x5e55b37311de6d89, 0x0, @private=0xa010101, @loopback, {[@lsrr={0x83, 0x13, 0xae, [@broadcast, @private=0xa010101, @local, @multicast2]}]}}}}})
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x24, r4, 0x200, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f00000002c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r7, 0x84, 0x7, 0x0, &(0x7f0000001300))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRES8, @ANYRES8=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r9, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x801)

16.700946264s ago: executing program 4 (id=2975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r0}, &(0x7f0000000b40), &(0x7f0000000b80)=r3}, 0x20)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000180)={0xffff9a60, 0x2, 0x4, @random="b9dda85a1986", 'ip6_vti0\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="840000000002010400000000000000000a000000300003802c00018014000000000000000400000000000000000000bb14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400200100000000000000000000000000010c0002800500010000000000040001"], 0x84}}, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

0s ago: executing program 35 (id=2975):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x18)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xd, 0xf, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffff7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r0}, &(0x7f0000000b40), &(0x7f0000000b80)=r3}, 0x20)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000180)={0xffff9a60, 0x2, 0x4, @random="b9dda85a1986", 'ip6_vti0\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="840000000002010400000000000000000a000000300003802c00018014000000000000000400000000000000000000bb14000400000000000000000000000000000000003c0002802c00018014000300fc00000000000000000000000000000014000400200100000000000000000000000000010c0002800500010000000000040001"], 0x84}}, 0x0)
socket$kcm(0x11, 0x3, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0)

kernel console output (not intermixed with test programs):

 your ipvs configuration
[  338.482399][T11994] netlink: 'syz.3.1550': attribute type 11 has an invalid length.
[  338.490407][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  338.490447][    C1] lec:lec_tx_timeout: lec0
[  338.498779][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  338.516541][T11995] bridge_slave_1: left allmulticast mode
[  338.527864][T11995] bridge_slave_1: left promiscuous mode
[  338.543987][T11995] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.547135][T11994] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1550'.
[  338.573213][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'.
[  338.801076][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1554'.
[  338.856485][T12010] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  339.008515][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1558'.
[  339.248042][T12010] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  339.433059][T12045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'.
[  339.462249][T12010] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  339.600027][T12010] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  339.811515][T12064] openvswitch: netlink: Tunnel attr 15060 out of range max 16
[  339.856866][T10562] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  339.929692][T10562] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  339.996319][T12072] bond0: (slave rose0): Error: Device can not be enslaved while up
[  340.008691][T10562] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  340.038298][T10562] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  340.283099][T12090] batadv1: entered promiscuous mode
[  340.987765][T12108] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  341.041999][T12112] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  341.062350][T12112] syzkaller0: entered promiscuous mode
[  341.085357][T12112] syzkaller0: entered allmulticast mode
[  341.100384][T12112] tipc: Resetting bearer <eth:syzkaller0>
[  341.190857][T12109] tipc: Resetting bearer <eth:syzkaller0>
[  341.264102][T12109] tipc: Disabling bearer <eth:syzkaller0>
[  341.390016][T12126] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  341.471681][T12126] tipc: Resetting bearer <eth:syzkaller0>
[  342.084475][T12150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  342.096936][T12146] netlink: 'syz.3.1590': attribute type 1 has an invalid length.
[  342.287897][T12146] 8021q: adding VLAN 0 to HW filter on device bond7
[  342.498775][T12166] netlink: 'syz.3.1595': attribute type 3 has an invalid length.
[  342.516822][T12166] __nla_validate_parse: 5 callbacks suppressed
[  342.516844][T12166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1595'.
[  342.580488][T12170] syzkaller1: entered promiscuous mode
[  342.589334][T12172] netlink: 'syz.3.1595': attribute type 8 has an invalid length.
[  342.608239][T12170] syzkaller1: entered allmulticast mode
[  342.615328][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'.
[  342.668861][T12166] netlink: 'syz.3.1595': attribute type 8 has an invalid length.
[  342.679523][T12172] bond0: entered promiscuous mode
[  342.695861][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'.
[  342.715130][T12172] bond_slave_0: entered promiscuous mode
[  342.730046][T12172] bond_slave_1: entered promiscuous mode
[  342.754648][T12172] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  342.795873][T12172] team0: entered promiscuous mode
[  342.801201][T12172] team_slave_1: entered promiscuous mode
[  342.818783][T12172] bond0: left promiscuous mode
[  342.823720][T12172] bond_slave_0: left promiscuous mode
[  342.835200][T12172] bond_slave_1: left promiscuous mode
[  342.844499][T12172] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  342.862020][T12172] team0: left promiscuous mode
[  342.874901][T12172] team_slave_1: left promiscuous mode
[  342.915994][T12166] bond0: entered promiscuous mode
[  342.927434][T12166] bond_slave_0: entered promiscuous mode
[  342.955030][T12166] bond_slave_1: entered promiscuous mode
[  342.975242][T12166] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  342.988166][T12166] team0: entered promiscuous mode
[  342.999136][T12166] team_slave_1: entered promiscuous mode
[  343.016983][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1597'.
[  343.027106][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1597'.
[  343.041640][T12166] bond0: left promiscuous mode
[  343.047022][T12166] bond_slave_0: left promiscuous mode
[  343.067537][T12166] bond_slave_1: left promiscuous mode
[  343.077427][T12166] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  343.097985][T12166] team0: left promiscuous mode
[  343.117342][T12166] team_slave_1: left promiscuous mode
[  343.179881][T12181] vlan2: entered allmulticast mode
[  343.905157][T12207] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1604'.
[  344.087492][T12226] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.236830][T12226] syzkaller0: entered promiscuous mode
[  344.262792][T12226] syzkaller0: entered allmulticast mode
[  344.269280][T12226] tipc: Resetting bearer <eth:syzkaller0>
[  344.460404][T12209] tipc: Resetting bearer <eth:syzkaller0>
[  344.466293][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5970 ms
[  344.466331][    C1] lec:lec_tx_timeout: lec0
[  344.488689][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  346.239529][T12209] tipc: Disabling bearer <eth:syzkaller0>
[  346.267625][T12247] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  346.269838][  T116] tipc: Node number set to 2584497969
[  346.468477][T12259] syzkaller0: entered promiscuous mode
[  346.474021][T12259] syzkaller0: entered allmulticast mode
[  346.604991][T12261] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1617'.
[  346.639772][T12267] netlink: 'syz.4.1620': attribute type 21 has an invalid length.
[  346.743980][T12275] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  346.790255][T12267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1620'.
[  346.813404][T12267] netlink: 'syz.4.1620': attribute type 1 has an invalid length.
[  346.896609][T12272] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1621'.
[  347.060085][T12293] x_tables: duplicate underflow at hook 2
[  347.080605][T12293] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'.
[  347.240680][T12304] erspan0: entered promiscuous mode
[  348.037065][T12331] __nla_validate_parse: 1 callbacks suppressed
[  348.037158][T12331] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1633'.
[  348.652861][T12361] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  348.682392][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1641'.
[  348.718890][T12361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1641'.
[  348.759275][T12368] gretap0: entered promiscuous mode
[  348.764944][T12368] macsec2: entered promiscuous mode
[  348.770505][T12368] macsec2: entered allmulticast mode
[  348.776684][T12368] gretap0: entered allmulticast mode
[  348.784679][T12368] gretap0: left allmulticast mode
[  348.790659][T12368] gretap0: left promiscuous mode
[  348.895263][T12371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1645'.
[  348.929720][T12371] macvtap1: entered promiscuous mode
[  348.935289][T12371] veth1_to_hsr: entered promiscuous mode
[  348.941403][T12371] macvtap1: entered allmulticast mode
[  348.948553][T12371] veth1_to_hsr: entered allmulticast mode
[  348.961247][T12371] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1645'.
[  349.130145][T12385] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1649'.
[  349.153617][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1650'.
[  349.265229][ T5833] Bluetooth: hci4: command 0x0405 tx timeout
[  349.482702][T12408] netlink: 'syz.0.1654': attribute type 10 has an invalid length.
[  349.502223][T12411] lo: Caught tx_queue_len zero misconfig
[  349.508964][T12411] netlink: 'syz.3.1656': attribute type 6 has an invalid length.
[  349.585905][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 120 seconds
[  349.597498][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 120 seconds
[  349.612470][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 120 seconds
[  349.629220][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 120 seconds
[  349.814523][T12420] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1657'.
[  349.892987][T12431] netlink: 'syz.4.1661': attribute type 11 has an invalid length.
[  350.151386][T12442] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1663'.
[  350.304868][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  350.313035][    C1] lec:lec_tx_timeout: lec0
[  350.318537][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  351.015104][T12483] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  351.175556][   T30] audit: type=1800 audit(1764141444.360:5): pid=12449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1664" name="memory.events" dev="tmpfs" ino=1559 res=0 errno=0
[  351.387082][T12495] FAULT_INJECTION: forcing a failure.
[  351.387082][T12495] name failslab, interval 1, probability 0, space 0, times 0
[  351.405832][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1675'.
[  351.421207][T12495] CPU: 0 UID: 0 PID: 12495 Comm: syz.4.1674 Not tainted syzkaller #0 PREEMPT(full) 
[  351.421237][T12495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  351.421251][T12495] Call Trace:
[  351.421259][T12495]  <TASK>
[  351.421267][T12495]  dump_stack_lvl+0x189/0x250
[  351.421306][T12495]  ? __pfx____ratelimit+0x10/0x10
[  351.421332][T12495]  ? __pfx_dump_stack_lvl+0x10/0x10
[  351.421361][T12495]  ? __pfx__printk+0x10/0x10
[  351.421385][T12495]  ? __pfx___might_resched+0x10/0x10
[  351.421408][T12495]  ? fs_reclaim_acquire+0x7d/0x100
[  351.421433][T12495]  should_fail_ex+0x414/0x560
[  351.421470][T12495]  should_failslab+0xa8/0x100
[  351.421500][T12495]  kmem_cache_alloc_node_noprof+0x77/0x710
[  351.421530][T12495]  ? __alloc_skb+0x255/0x430
[  351.421552][T12495]  ? napi_skb_cache_get+0x4a5/0x790
[  351.421572][T12495]  ? napi_skb_cache_get+0x151/0x790
[  351.421599][T12495]  __alloc_skb+0x255/0x430
[  351.421626][T12495]  ? __pfx___alloc_skb+0x10/0x10
[  351.421654][T12495]  ? fib6_rule_lookup+0x1a1/0x6f0
[  351.421681][T12495]  __ip6_append_data+0x2c16/0x3f30
[  351.421706][T12495]  ? __lock_acquire+0xab9/0xd20
[  351.421754][T12495]  ? __pfx_raw6_getfrag+0x10/0x10
[  351.421806][T12495]  ? __pfx___ip6_append_data+0x10/0x10
[  351.421837][T12495]  ? __pfx_ip6_mtu+0x10/0x10
[  351.421872][T12495]  ip6_append_data+0x1c1/0x380
[  351.421903][T12495]  ? __pfx_raw6_getfrag+0x10/0x10
[  351.421936][T12495]  rawv6_sendmsg+0x1286/0x1830
[  351.421987][T12495]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  351.422047][T12495]  ? __pfx_aa_sk_perm+0x10/0x10
[  351.422083][T12495]  ? sock_rps_record_flow+0x19/0x410
[  351.422114][T12495]  ? inet_sendmsg+0x2f4/0x370
[  351.422139][T12495]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  351.422166][T12495]  __sock_sendmsg+0x19c/0x270
[  351.422204][T12495]  ____sys_sendmsg+0x505/0x830
[  351.422239][T12495]  ? __pfx_____sys_sendmsg+0x10/0x10
[  351.422278][T12495]  ? import_iovec+0x74/0xa0
[  351.422312][T12495]  ___sys_sendmsg+0x21f/0x2a0
[  351.422343][T12495]  ? __pfx____sys_sendmsg+0x10/0x10
[  351.422416][T12495]  ? __fget_files+0x2a/0x420
[  351.422437][T12495]  ? __fget_files+0x3a0/0x420
[  351.422472][T12495]  __x64_sys_sendmsg+0x19b/0x260
[  351.422503][T12495]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  351.422542][T12495]  ? __pfx_ksys_write+0x10/0x10
[  351.422580][T12495]  ? do_syscall_64+0xbe/0xfa0
[  351.422611][T12495]  do_syscall_64+0xfa/0xfa0
[  351.422635][T12495]  ? lockdep_hardirqs_on+0x9c/0x150
[  351.422661][T12495]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.422684][T12495]  ? clear_bhb_loop+0x60/0xb0
[  351.422711][T12495]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  351.422733][T12495] RIP: 0033:0x7fdc7798f749
[  351.422754][T12495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  351.422773][T12495] RSP: 002b:00007fdc788bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.422797][T12495] RAX: ffffffffffffffda RBX: 00007fdc77be6090 RCX: 00007fdc7798f749
[  351.422821][T12495] RDX: 0000000000044004 RSI: 00002000000000c0 RDI: 0000000000000003
[  351.422835][T12495] RBP: 00007fdc788bb090 R08: 0000000000000000 R09: 0000000000000000
[  351.422849][T12495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  351.422862][T12495] R13: 00007fdc77be6128 R14: 00007fdc77be6090 R15: 00007ffc13ac3298
[  351.422901][T12495]  </TASK>
[  351.463049][T12497] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:20002
[  351.840516][T12496] bridge_slave_0: left promiscuous mode
[  351.850723][T12496] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.236788][T12523] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[  352.281250][T12527] erspan0: left allmulticast mode
[  352.301754][T12527] tipc: Resetting bearer <eth:syzkaller0>
[  353.075347][T12527] syzkaller0: left promiscuous mode
[  353.080627][T12527] syzkaller0: left allmulticast mode
[  353.098821][T12527] veth1_to_hsr: left allmulticast mode
[  353.104461][T12527] veth1_to_hsr: left promiscuous mode
[  353.112555][T12527] macvtap1: left promiscuous mode
[  353.117911][T12527] macvtap1: left allmulticast mode
[  353.165032][T12545] __nla_validate_parse: 4 callbacks suppressed
[  353.165054][T12545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1687'.
[  353.183029][ T1153] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20004 - 0
[  353.206606][ T1153] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20004 - 0
[  353.224969][ T1153] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20004 - 0
[  353.233486][ T1153] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20004 - 0
[  353.305347][T12549] netlink: 'syz.3.1689': attribute type 10 has an invalid length.
[  353.343475][T12549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1689'.
[  353.378313][T12549] batadv0: entered promiscuous mode
[  353.386227][T12549] batadv0: entered allmulticast mode
[  353.392023][T12549] bridge0: port 3(batadv0) entered blocking state
[  353.400371][T12549] bridge0: port 3(batadv0) entered disabled state
[  353.414382][T12547] tipc: Resetting bearer <eth:syzkaller0>
[  353.466210][T12546] tipc: Resetting bearer <eth:syzkaller0>
[  353.638192][T12571] netlink: 'syz.1.1696': attribute type 1 has an invalid length.
[  353.656808][T10562] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[  353.657966][T12571] netlink: 'syz.1.1696': attribute type 2 has an invalid length.
[  353.666570][T10562] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[  354.328245][T12605] netlink: 'syz.1.1703': attribute type 1 has an invalid length.
[  354.384586][T10562] tipc: Resetting bearer <eth:syzkaller0>
[  354.866297][T12626] bridge6: entered promiscuous mode
[  354.871592][T12626] bridge6: entered allmulticast mode
[  354.897011][T12629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1711'.
[  355.169915][T12642] vlan2: entered promiscuous mode
[  355.185476][T12642] vlan2: entered allmulticast mode
[  355.197209][T12642] hsr_slave_1: entered allmulticast mode
[  355.324788][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  355.332904][    C1] lec:lec_tx_timeout: lec0
[  355.344899][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  355.354214][T12654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'.
[  355.422664][T12656] netlink: 'syz.4.1717': attribute type 10 has an invalid length.
[  355.451709][T12656] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1717'.
[  355.478803][T12656] team0: Port device geneve0 added
[  355.592853][   T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  355.618963][   T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  355.642976][   T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  355.706115][T12668] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1720'.
[  355.722481][T12668] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  355.743158][T10562] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  356.068385][T12690] dvmrp1: entered allmulticast mode
[  356.074487][T12694] dvmrp1: left allmulticast mode
[  357.155773][T12707] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  357.379289][T12720] xt_CT: No such helper "netbios-ns"
[  357.489214][T12732] netlink: 'syz.0.1737': attribute type 7 has an invalid length.
[  357.525183][T12732] netlink: 'syz.0.1737': attribute type 8 has an invalid length.
[  357.552879][T12735] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  357.628820][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'.
[  357.654826][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'.
[  357.780042][T12749] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1742'.
[  358.171128][T12770] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1747'.
[  358.205157][T12769] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1747'.
[  358.344158][T12779] syz_tun: entered allmulticast mode
[  358.375180][T12777] syz_tun: left allmulticast mode
[  358.428929][T12780] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1748'.
[  358.627622][T12793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1752'.
[  358.651386][T12792] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1753'.
[  358.663524][T12792] 0��{X��: renamed from gretap0
[  358.687974][T12792] 0��{X��: entered allmulticast mode
[  358.697745][T12792] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  358.955961][T12797] bond0: Caught tx_queue_len zero misconfig
[  358.993336][T12799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1755'.
[  359.180851][T12804] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1756'.
[  359.234986][T12809] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1757'.
[  359.438045][T12823] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.1762'.
[  359.456882][T12823] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  360.077705][T12860] Cannot find del_set index 4 as target
[  360.124102][T12860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1769'.
[  360.147582][T12860] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1769'.
[  360.259304][T12867] sctp: [Deprecated]: syz.3.1771 (pid 12867) Use of int in max_burst socket option.
[  360.259304][T12867] Use struct sctp_assoc_value instead
[  360.364770][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  360.372876][    C1] lec:lec_tx_timeout: lec0
[  360.377578][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  360.672907][T12880] FAULT_INJECTION: forcing a failure.
[  360.672907][T12880] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  360.706901][T12880] CPU: 0 UID: 0 PID: 12880 Comm: syz.3.1774 Not tainted syzkaller #0 PREEMPT(full) 
[  360.706934][T12880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  360.706948][T12880] Call Trace:
[  360.706957][T12880]  <TASK>
[  360.706966][T12880]  dump_stack_lvl+0x189/0x250
[  360.707001][T12880]  ? __pfx____ratelimit+0x10/0x10
[  360.707027][T12880]  ? __pfx_dump_stack_lvl+0x10/0x10
[  360.707056][T12880]  ? __pfx__printk+0x10/0x10
[  360.707079][T12880]  ? __might_fault+0xb0/0x130
[  360.707124][T12880]  should_fail_ex+0x414/0x560
[  360.707164][T12880]  _copy_from_user+0x2d/0xb0
[  360.707194][T12880]  ___sys_sendmsg+0x158/0x2a0
[  360.707225][T12880]  ? __pfx____sys_sendmsg+0x10/0x10
[  360.707295][T12880]  ? __fget_files+0x2a/0x420
[  360.707316][T12880]  ? __fget_files+0x3a0/0x420
[  360.707350][T12880]  __sys_sendmmsg+0x227/0x430
[  360.707384][T12880]  ? __pfx___sys_sendmmsg+0x10/0x10
[  360.707423][T12880]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  360.707473][T12880]  ? ksys_write+0x22a/0x250
[  360.707508][T12880]  ? __pfx_ksys_write+0x10/0x10
[  360.707546][T12880]  __x64_sys_sendmmsg+0xa0/0xc0
[  360.707575][T12880]  do_syscall_64+0xfa/0xfa0
[  360.707599][T12880]  ? lockdep_hardirqs_on+0x9c/0x150
[  360.707624][T12880]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.707647][T12880]  ? clear_bhb_loop+0x60/0xb0
[  360.707674][T12880]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  360.707695][T12880] RIP: 0033:0x7f4b92f8f749
[  360.707715][T12880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  360.707734][T12880] RSP: 002b:00007f4b93e93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  360.707758][T12880] RAX: ffffffffffffffda RBX: 00007f4b931e5fa0 RCX: 00007f4b92f8f749
[  360.707775][T12880] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006
[  360.707789][T12880] RBP: 00007f4b93e93090 R08: 0000000000000000 R09: 0000000000000000
[  360.707803][T12880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  360.707825][T12880] R13: 00007f4b931e6038 R14: 00007f4b931e5fa0 R15: 00007ffff4a0fea8
[  360.707863][T12880]  </TASK>
[  361.488185][T12897] bond6 (unregistering): Released all slaves
[  361.619962][T12910] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  361.722691][T12916] x_tables: duplicate underflow at hook 1
[  361.816489][T12921] syzkaller0: entered promiscuous mode
[  361.822026][T12921] syzkaller0: entered allmulticast mode
[  362.129345][T12931] FAULT_INJECTION: forcing a failure.
[  362.129345][T12931] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  362.169314][T12931] CPU: 1 UID: 0 PID: 12931 Comm: syz.4.1788 Not tainted syzkaller #0 PREEMPT(full) 
[  362.169347][T12931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  362.169361][T12931] Call Trace:
[  362.169370][T12931]  <TASK>
[  362.169379][T12931]  dump_stack_lvl+0x189/0x250
[  362.169416][T12931]  ? __pfx____ratelimit+0x10/0x10
[  362.169441][T12931]  ? __pfx_dump_stack_lvl+0x10/0x10
[  362.169471][T12931]  ? __pfx__printk+0x10/0x10
[  362.169510][T12931]  should_fail_ex+0x414/0x560
[  362.169551][T12931]  _copy_from_user+0x2d/0xb0
[  362.169580][T12931]  __copy_msghdr+0x3c5/0x5b0
[  362.169613][T12931]  ___sys_sendmsg+0x1a5/0x2a0
[  362.169643][T12931]  ? __pfx____sys_sendmsg+0x10/0x10
[  362.169709][T12931]  ? __fget_files+0x2a/0x420
[  362.169729][T12931]  ? __fget_files+0x3a0/0x420
[  362.169762][T12931]  __sys_sendmmsg+0x227/0x430
[  362.169797][T12931]  ? __pfx___sys_sendmmsg+0x10/0x10
[  362.169836][T12931]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  362.169886][T12931]  ? ksys_write+0x22a/0x250
[  362.169921][T12931]  ? __pfx_ksys_write+0x10/0x10
[  362.169958][T12931]  __x64_sys_sendmmsg+0xa0/0xc0
[  362.170008][T12931]  do_syscall_64+0xfa/0xfa0
[  362.170032][T12931]  ? lockdep_hardirqs_on+0x9c/0x150
[  362.170057][T12931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.170079][T12931]  ? clear_bhb_loop+0x60/0xb0
[  362.170107][T12931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.170128][T12931] RIP: 0033:0x7fdc7798f749
[  362.170148][T12931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  362.170168][T12931] RSP: 002b:00007fdc788dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  362.170191][T12931] RAX: ffffffffffffffda RBX: 00007fdc77be5fa0 RCX: 00007fdc7798f749
[  362.170206][T12931] RDX: 0000000000000027 RSI: 00002000000017c0 RDI: 0000000000000006
[  362.170219][T12931] RBP: 00007fdc788dc090 R08: 0000000000000000 R09: 0000000000000000
[  362.170232][T12931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  362.170246][T12931] R13: 00007fdc77be6038 R14: 00007fdc77be5fa0 R15: 00007ffc13ac3298
[  362.170283][T12931]  </TASK>
[  362.803167][T12940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  362.916102][T12953] netlink: 'syz.1.1793': attribute type 1 has an invalid length.
[  362.938470][T12953] netlink: 'syz.1.1793': attribute type 1 has an invalid length.
[  363.297388][T12969] 8021q: adding VLAN 0 to HW filter on device bond8
[  363.366599][T12969] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode
[  363.400731][T12969] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  363.442788][T12969] bond8: (slave macvlan2): Enslaving as a backup interface with an up link
[  363.519815][T12981] __nla_validate_parse: 6 callbacks suppressed
[  363.519836][T12981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1801'.
[  363.525534][T10564] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  363.526260][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1801'.
[  363.634889][   T13] bond8: (slave macvlan2): link status up again after 0 ms
[  363.645179][   T13] bond8: (slave macvlan2): failed to get link speed/duplex
[  363.652741][   T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  363.793090][T12993] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  363.875226][   T13] bond8: (slave macvlan2): failed to get link speed/duplex
[  364.033780][T13006] netlink: 'syz.1.1805': attribute type 10 has an invalid length.
[  364.064512][T13006] team0: Port device bond0 added
[  364.235430][ T3499] bond8: (slave macvlan2): failed to get link speed/duplex
[  364.494945][ T3499] bond8: (slave macvlan2): failed to get link speed/duplex
[  364.640108][T13024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1811'.
[  364.676164][T13023] netlink: 'syz.4.1812': attribute type 1 has an invalid length.
[  364.819671][ T1153] bond8: (slave macvlan2): failed to get link speed/duplex
[  364.898338][T13036] tipc: Enabled bearer <udp:syz2>, priority 10
[  364.994882][T10564] bond8: (slave macvlan2): failed to get link speed/duplex
[  365.106718][T10564] bond8: (slave macvlan2): failed to get link speed/duplex
[  365.204308][T13055] wg2: entered promiscuous mode
[  365.217378][T13055] wg2: entered allmulticast mode
[  365.228029][T13056] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1819'.
[  365.384797][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  365.392908][    C1] lec:lec_tx_timeout: lec0
[  365.398052][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  365.554005][T13074] netlink: 'syz.0.1825': attribute type 1 has an invalid length.
[  365.607803][T13075] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1825'.
[  365.612191][T13074] 8021q: adding VLAN 0 to HW filter on device bond6
[  365.648293][T13074] bond6: entered allmulticast mode
[  365.714938][T13082] tipc: Resetting bearer <eth:syzkaller0>
[  365.804612][T13086] netlink: 'syz.4.1829': attribute type 1 has an invalid length.
[  365.839195][T13086] 8021q: adding VLAN 0 to HW filter on device bond7
[  365.847402][T13082] tipc: Resetting bearer <eth:syzkaller0>
[  365.855669][T13086] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1829'.
[  366.118031][T13096] tipc: Can't bind to reserved service type 2
[  366.182336][ T1153] tipc: Resetting bearer <eth:syzkaller0>
[  366.403146][T13099] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'.
[  366.458245][T13101] syzkaller0: entered promiscuous mode
[  366.467174][T13101] syzkaller0: entered allmulticast mode
[  366.674266][T13107] batadv1: entered promiscuous mode
[  366.706354][T13110] sctp: [Deprecated]: syz.0.1835 (pid 13110) Use of struct sctp_assoc_value in delayed_ack socket option.
[  366.706354][T13110] Use struct sctp_sack_info instead
[  367.006820][T13124] vlan2: entered promiscuous mode
[  367.025720][T13124] bond0: entered promiscuous mode
[  367.031200][T13124] bond_slave_0: entered promiscuous mode
[  367.037951][T13124] bond_slave_1: entered promiscuous mode
[  367.045958][T13124] team0: entered promiscuous mode
[  367.051180][T13124] team_slave_1: entered promiscuous mode
[  367.120415][T13134] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1840'.
[  367.148496][T13134] netlink: 175 bytes leftover after parsing attributes in process `syz.0.1840'.
[  367.239447][T13140] syzkaller1: entered promiscuous mode
[  367.266523][T13140] syzkaller1: entered allmulticast mode
[  367.286436][T13143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1843'.
[  368.690301][T13199] netlink: 'syz.2.1858': attribute type 13 has an invalid length.
[  368.755166][T10562] net_ratelimit: 24 callbacks suppressed
[  368.755190][T10562] bond8: (slave macvlan2): failed to get link speed/duplex
[  368.829186][T13199] netlink: 'syz.2.1858': attribute type 13 has an invalid length.
[  368.963050][T13209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  369.216637][T13226] sctp: [Deprecated]: syz.3.1864 (pid 13226) Use of struct sctp_assoc_value in delayed_ack socket option.
[  369.216637][T13226] Use struct sctp_sack_info instead
[  369.455202][T13232] __nla_validate_parse: 4 callbacks suppressed
[  369.455223][T13232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1864'.
[  369.615758][T10562] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  369.625163][T10562] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  369.633541][T10562] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  369.663575][T13217] netlink: 'syz.0.1862': attribute type 1 has an invalid length.
[  369.681877][T13217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.806014][T10562] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  369.824894][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'.
[  369.829492][T10562] bond8: (slave macvlan2): failed to get link speed/duplex
[  369.856846][T13237] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1865'.
[  369.884973][T13237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  369.985231][ T3499] bond8: (slave macvlan2): failed to get link speed/duplex
[  370.184904][T10564] bond8: (slave macvlan2): failed to get link speed/duplex
[  370.303182][ T3499] bond8: (slave macvlan2): failed to get link speed/duplex
[  370.313003][T13263] netlink: 'syz.0.1871': attribute type 49 has an invalid length.
[  370.404790][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  370.412916][    C1] lec:lec_tx_timeout: lec0
[  370.414953][T10566] bond8: (slave macvlan2): failed to get link speed/duplex
[  370.417774][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  370.501903][T13263] tipc: Cannot configure node identity twice
[  370.582563][T13277] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1875'.
[  370.634931][T10566] bond8: (slave macvlan2): failed to get link speed/duplex
[  370.744866][   T13] bond8: (slave macvlan2): failed to get link speed/duplex
[  370.817694][T13293] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1880'.
[  370.901113][T13298] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1882'.
[  370.923964][T13298] nbd: must specify at least one socket
[  371.069018][T13305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1883'.
[  371.111382][T13305] netlink: 'syz.0.1883': attribute type 21 has an invalid length.
[  371.160263][T13305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1883'.
[  371.300154][T13316] netlink: 'syz.2.1885': attribute type 10 has an invalid length.
[  371.440230][T13326] bond8: option mode: unable to set because the bond device has slaves
[  371.482672][T13326] bond8: (slave macvlan3): Error -98 calling set_mac_address
[  371.524345][T13329] netlink: 'syz.3.1887': attribute type 16 has an invalid length.
[  371.553643][T13329] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1887'.
[  371.590077][T13332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  371.611757][T13328] netlink: 'syz.2.1888': attribute type 13 has an invalid length.
[  371.626454][T13334] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  371.638394][T13334] syzkaller0: entered promiscuous mode
[  371.644089][T13334] syzkaller0: entered allmulticast mode
[  371.652923][T13334] tipc: Resetting bearer <eth:syzkaller0>
[  371.752368][T13328] macsec0: left allmulticast mode
[  371.781269][T13331] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.1889'.
[  371.792882][T13331] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  371.812527][ T3499] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.821627][ T3499] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.845063][T13327] tipc: Disabling bearer <eth:syzkaller0>
[  371.866744][ T3499] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  371.938914][ T3499] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.059027][T13351] netlink: 'syz.2.1893': attribute type 5 has an invalid length.
[  373.845084][T10566] net_ratelimit: 6 callbacks suppressed
[  373.845110][T10566] bond8: (slave macvlan2): failed to get link speed/duplex
[  374.024891][T10566] bond8: (slave macvlan2): failed to get link speed/duplex
[  374.134915][ T3499] bond8: (slave macvlan2): failed to get link speed/duplex
[  374.187165][T13396] x_tables: duplicate underflow at hook 1
[  374.266115][T10566] bond8: (slave macvlan2): failed to get link speed/duplex
[  374.277073][T13406] netem: change failed
[  374.306750][T13406] netem: change failed
[  374.414877][ T1153] bond8: (slave macvlan2): failed to get link speed/duplex
[  374.541362][T13422] gretap0: entered promiscuous mode
[  374.575888][T13422] 8021q: adding VLAN 0 to HW filter on device team0
[  374.591091][T13422] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  374.656272][T10562] bond8: (slave macvlan2): failed to get link speed/duplex
[  374.765521][   T13] bond8: (slave macvlan2): failed to get link speed/duplex
[  374.875109][   T13] bond8: (slave macvlan2): failed to get link speed/duplex
[  375.089570][T10566] bond8: (slave macvlan2): failed to get link speed/duplex
[  375.293496][T13449] __nla_validate_parse: 2 callbacks suppressed
[  375.293519][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1918'.
[  375.434776][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  375.442907][    C1] lec:lec_tx_timeout: lec0
[  375.447679][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  375.468276][T13454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1917'.
[  376.050674][T13484] netlink: 'syz.3.1923': attribute type 27 has an invalid length.
[  376.058976][T13482] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1924'.
[  376.132427][T13484] erspan0: left allmulticast mode
[  376.141002][T13484] sit0: left promiscuous mode
[  376.357937][T13484] batman_adv: batadv0: Interface deactivated: dummy0
[  376.410981][   T30] audit: type=1800 audit(1764141469.590:6): pid=13496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1925" name="memory.events" dev="tmpfs" ino=1952 res=0 errno=0
[  376.433217][T13484] wg2: left promiscuous mode
[  376.438538][T13484] wg2: left allmulticast mode
[  376.452658][T13484] mac80211_hwsim hwsim3 wlan0: left promiscuous mode
[  376.473850][   T30] audit: type=1804 audit(1764141469.650:7): pid=13500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1925" name="/newroot/378/memory.events" dev="tmpfs" ino=1952 res=1 errno=0
[  376.496274][T13500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1925'.
[  376.524931][T13484] bond3: left promiscuous mode
[  376.529906][T13484] bond3: left allmulticast mode
[  376.547716][T13478] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  376.554454][T13484] geneve2: left promiscuous mode
[  376.580688][T13503] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  376.731307][T13484] veth5: left promiscuous mode
[  376.819580][T13484] vlan2: left promiscuous mode
[  376.824401][T13484] bond0: left promiscuous mode
[  376.829900][T13484] bond_slave_0: left promiscuous mode
[  376.837185][T13484] bond_slave_1: left promiscuous mode
[  376.842963][T13484] mac80211_hwsim hwsim5 wlan1: left promiscuous mode
[  376.850053][T13484] team0: left promiscuous mode
[  376.855066][T13484] team_slave_1: left promiscuous mode
[  376.920632][T13486] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.929404][T13486] 8021q: adding VLAN 0 to HW filter on device team0
[  376.939478][T13486] batman_adv: batadv0: Interface activated: dummy0
[  376.967493][ T1153] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 20001 - 0
[  376.976353][ T1153] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 20001 - 0
[  377.017706][ T1153] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 20001 - 0
[  377.036624][ T1153] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 20001 - 0
[  377.221570][T13518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1931'.
[  377.575482][T13540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1935'.
[  377.614959][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1936'.
[  377.639855][T13542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1937'.
[  377.653965][T13541] netlink: 'syz.3.1936': attribute type 4 has an invalid length.
[  377.690746][T13546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1938'.
[  377.711047][T13547] Unsupported ieee802154 address type: 0
[  377.729414][T13546] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1938'.
[  377.739770][T13541] nbd: must specify a device to reconfigure
[  378.118689][T13561] netlink: 'syz.0.1942': attribute type 3 has an invalid length.
[  378.131820][T13566] can: request_module (can-proto-5) failed.
[  378.177365][T13571] sctp: [Deprecated]: syz.3.1945 (pid 13571) Use of struct sctp_assoc_value in delayed_ack socket option.
[  378.177365][T13571] Use struct sctp_sack_info instead
[  378.419305][T13588] netlink: 'syz.0.1950': attribute type 4 has an invalid length.
[  378.699278][T13600] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  379.270049][T13626] xt_CT: You must specify a L4 protocol and not use inversions on it
[  379.331298][T13626] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  379.395295][T13636] netlink: 'syz.0.1962': attribute type 2 has an invalid length.
[  379.478143][T13636] netlink: 'syz.0.1962': attribute type 11 has an invalid length.
[  379.665052][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 150 seconds
[  379.676210][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 150 seconds
[  379.687440][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 150 seconds
[  379.698671][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 150 seconds
[  380.121287][T13648] tc_dump_action: action bad kind
[  380.350348][T13665] __nla_validate_parse: 13 callbacks suppressed
[  380.350373][T13665] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1969'.
[  380.454877][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  380.462995][    C1] lec:lec_tx_timeout: lec0
[  380.467960][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  380.477884][T13669] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1969'.
[  381.266772][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1979'.
[  381.281976][T13698] xt_HMARK: spi-set and port-set can't be combined
[  381.292328][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1978'.
[  381.566676][T13720] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002
[  381.772151][T13730] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1986'.
[  381.784347][T13730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1986'.
[  381.838301][T13732] netlink: 'syz.4.1987': attribute type 1 has an invalid length.
[  381.901477][T13732] 8021q: adding VLAN 0 to HW filter on device bond8
[  382.821822][T13767] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1995'.
[  382.973241][T13784] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1997'.
[  383.067692][T13787] bridge_slave_1: left allmulticast mode
[  383.073623][T13787] bridge_slave_1: left promiscuous mode
[  383.079869][T13787] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.409614][T13809] net_ratelimit: 6 callbacks suppressed
[  383.409640][T13809] IPv6: addrconf: prefix option has invalid lifetime
[  383.530195][T13815] netlink: 'syz.3.2008': attribute type 29 has an invalid length.
[  384.078843][T13845] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2014'.
[  384.525640][T13872] tipc: Resetting bearer <eth:syzkaller0>
[  384.553835][T13872] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2021'.
[  384.581058][T13872] syzkaller0: left promiscuous mode
[  384.586429][T13872] syzkaller0: left allmulticast mode
[  384.808296][T13866] tipc: Resetting bearer <eth:syzkaller0>
[  384.855896][T13883] ip6gretap2: entered allmulticast mode
[  384.958945][T10564] tipc: Resetting bearer <eth:syzkaller0>
[  385.076911][T13903] vlan0: entered promiscuous mode
[  385.082104][T13903] team0: entered promiscuous mode
[  385.088784][T13903] team_slave_0: entered promiscuous mode
[  385.096458][T13903] team_slave_1: entered promiscuous mode
[  385.161112][T13905] tipc: Resetting bearer <eth:syzkaller0>
[  385.251800][T13902] tipc: Resetting bearer <eth:syzkaller0>
[  385.468370][T13925] bond9: entered promiscuous mode
[  385.473958][T13925] 8021q: adding VLAN 0 to HW filter on device bond9
[  385.480738][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  385.480775][    C1] lec:lec_tx_timeout: lec0
[  385.489135][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  385.576870][T13934] 8021q: adding VLAN 0 to HW filter on device bond10
[  385.591293][T13934] bond10: entered promiscuous mode
[  385.598142][T13934] bond9: (slave bond10): Enslaving as an active interface with an up link
[  385.699100][T13933] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  385.916543][T13938] __nla_validate_parse: 4 callbacks suppressed
[  385.916692][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'.
[  386.092728][T13954] macvlan3: entered promiscuous mode
[  386.106353][T13954] vlan0: entered promiscuous mode
[  386.138520][T10566] tipc: Resetting bearer <eth:syzkaller0>
[  386.213743][T13951] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2042'.
[  388.311455][T13979] netlink: 'syz.1.2049': attribute type 13 has an invalid length.
[  388.325435][T13985] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  388.337913][T13985] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  388.359000][T13987] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  388.375041][T13996] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  389.194149][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2061'.
[  389.222301][T14039] nbd: illegal input index 1090519040
[  389.834195][T14051] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2065'.
[  391.266314][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  391.274410][    C1] lec:lec_tx_timeout: lec0
[  391.279587][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  391.697317][T14090] netlink: 'syz.3.2075': attribute type 5 has an invalid length.
[  392.112943][T14112] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2082'.
[  392.453075][T14134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2089'.
[  392.506983][T14136] 8021q: VLANs not supported on ip_vti0
[  392.556094][T14121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2086'.
[  392.700336][T14147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2095'.
[  392.741477][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880326cbc00: rx timeout, send abort
[  393.156795][T14170] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2100'.
[  393.178302][T14172] IPv6: Can't replace route, no match found
[  393.251023][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880326cbc00: abort rx timeout. Force session deactivation
[  393.343862][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'.
[  393.355634][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'.
[  393.368742][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'.
[  393.381606][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'.
[  393.395910][T14176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'.
[  393.542778][T14182] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  393.568293][T14182] syzkaller0: entered promiscuous mode
[  393.573936][T14182] syzkaller0: entered allmulticast mode
[  393.635226][T14182] tipc: Resetting bearer <eth:syzkaller0>
[  393.665093][T14181] tipc: Resetting bearer <eth:syzkaller0>
[  393.745566][T14181] tipc: Disabling bearer <eth:syzkaller0>
[  394.342117][T14213] syz_tun: entered allmulticast mode
[  394.479996][T14213] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  394.557726][T14213] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  394.649256][T14222] syzkaller0: entered promiscuous mode
[  394.654998][T14222] syzkaller0: entered allmulticast mode
[  394.681496][T14222] macsec2: entered promiscuous mode
[  394.720631][T14212] syz_tun: left allmulticast mode
[  394.726191][T14224] netlink: 'syz.2.2115': attribute type 10 has an invalid length.
[  394.750080][T14224] team0: Cannot enslave team device to itself
[  395.141104][T14250] netlink: 'syz.4.2124': attribute type 9 has an invalid length.
[  395.399664][ T5949] IPVS: starting estimator thread 0...
[  395.505427][T14263] IPVS: using max 24 ests per chain, 57600 per kthread
[  395.899988][T14259] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20001
[  395.935895][ T5829] IPVS: starting estimator thread 0...
[  395.970739][T14288] vlan0: entered allmulticast mode
[  395.996767][T14288] dummy0: entered allmulticast mode
[  396.048267][T14289] IPVS: using max 27 ests per chain, 64800 per kthread
[  396.067381][T14292] syzkaller0: entered promiscuous mode
[  396.093765][T14292] syzkaller0: entered allmulticast mode
[  396.304817][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  396.312924][    C1] lec:lec_tx_timeout: lec0
[  396.318521][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  396.633240][T14322] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  396.841414][T14333] ����: entered promiscuous mode
[  397.050983][T14348] x_tables: duplicate underflow at hook 1
[  397.296847][T14358] netlink: 'syz.3.2154': attribute type 1 has an invalid length.
[  397.306034][T14358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  397.362459][T14354] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  397.465961][T14354] syzkaller0: entered promiscuous mode
[  397.471622][T14354] syzkaller0: entered allmulticast mode
[  397.490625][T14354] tipc: Resetting bearer <eth:syzkaller0>
[  397.556079][T14353] tipc: Resetting bearer <eth:syzkaller0>
[  397.605847][T14353] tipc: Disabling bearer <eth:syzkaller0>
[  397.797648][T14380] __nla_validate_parse: 21 callbacks suppressed
[  397.797672][T14380] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2161'.
[  398.045071][T14398] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2166'.
[  398.282777][T14405] lo speed is unknown, defaulting to 1000
[  398.296413][T14396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2162'.
[  398.337227][T14405] lo speed is unknown, defaulting to 1000
[  398.353589][T14405] lo speed is unknown, defaulting to 1000
[  398.419961][T14405] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  398.540142][T14405] lo speed is unknown, defaulting to 1000
[  398.600555][T14419] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2170'.
[  398.610245][T14424] Timeout policy `syz0' can only be used by L3 protocol number 25
[  398.620819][T14405] lo speed is unknown, defaulting to 1000
[  398.622509][T14417] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2170'.
[  398.657220][T14405] lo speed is unknown, defaulting to 1000
[  398.709556][T14405] lo speed is unknown, defaulting to 1000
[  398.718002][T14405] lo speed is unknown, defaulting to 1000
[  398.886921][T14435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2176'.
[  398.898530][T14435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2176'.
[  398.962760][T14435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2176'.
[  399.077600][T14441] netlink: ct family unspecified
[  399.082737][T14441] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  399.304589][T14450] bond0: Device is already in use.
[  399.661482][T14463] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  399.686005][T14463] syzkaller0: entered promiscuous mode
[  399.706969][T14467] netlink: 'syz.2.2184': attribute type 3 has an invalid length.
[  399.715962][T14463] syzkaller0: entered allmulticast mode
[  399.747642][T14467] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2184'.
[  399.841656][T14469] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2185'.
[  399.861252][T14467] 8021q: VLANs not supported on sit0
[  399.884086][T14472] tipc: Resetting bearer <eth:syzkaller0>
[  400.095875][T14478] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  400.115861][T14478] syzkaller0: entered promiscuous mode
[  400.128981][T14478] syzkaller0: entered allmulticast mode
[  400.240409][T14478] tipc: Resetting bearer <eth:syzkaller0>
[  400.315843][T14478] tipc: Resetting bearer <eth:syzkaller0>
[  400.381057][T14478] tipc: Disabling bearer <eth:syzkaller0>
[  400.431298][T14459] tipc: Resetting bearer <eth:syzkaller0>
[  400.595626][T14459] tipc: Disabling bearer <eth:syzkaller0>
[  400.815218][T14493] netlink: 'syz.2.2187': attribute type 58 has an invalid length.
[  400.937206][T14508] Unsupported ieee802154 address type: 0
[  400.970996][T14508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  401.095842][T14508] syzkaller0: entered promiscuous mode
[  401.101395][T14508] syzkaller0: entered allmulticast mode
[  401.115913][T14508] tipc: Resetting bearer <eth:syzkaller0>
[  401.191055][T14507] tipc: Resetting bearer <eth:syzkaller0>
[  401.324766][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  401.332833][    C1] lec:lec_tx_timeout: lec0
[  401.337594][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  402.151250][T14548] netlink: 'syz.4.2203': attribute type 1 has an invalid length.
[  403.369611][T14507] tipc: Disabling bearer <eth:syzkaller0>
[  403.389160][T14541] __nla_validate_parse: 3 callbacks suppressed
[  403.389181][T14541] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2201'.
[  403.412957][ T5829] tipc: Node number set to 1944163936
[  403.429227][T14548] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  403.507399][T14549] veth5: entered promiscuous mode
[  403.592082][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2205'.
[  403.778461][T14562] lo speed is unknown, defaulting to 1000
[  403.782252][T14567] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2209'.
[  403.859573][T14571] netlink: 'syz.2.2210': attribute type 1 has an invalid length.
[  404.002018][T14571] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2210'.
[  404.307741][T14587] syzkaller1: entered promiscuous mode
[  404.334817][T14587] syzkaller1: entered allmulticast mode
[  404.352578][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2214'.
[  404.360619][T14589] netlink: 'syz.0.2213': attribute type 1 has an invalid length.
[  404.399161][T14593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2216'.
[  404.424068][T14587] syzkaller1: left promiscuous mode
[  404.434911][T14587] syzkaller1: left allmulticast mode
[  404.524224][T14595] lo speed is unknown, defaulting to 1000
[  404.639856][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'.
[  404.659282][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2219'.
[  404.708798][T14604] 0��{X��: entered promiscuous mode
[  404.719496][T14604] 0��{X��: left promiscuous mode
[  404.742935][T14610] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2222'.
[  404.977405][T14614] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2223'.
[  404.983305][T14610] bond11: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  405.005965][T14610] bond11 (unregistering): Released all slaves
[  405.023064][T14614] netlink: 'syz.3.2223': attribute type 3 has an invalid length.
[  405.842526][T14658] netlink: 'syz.3.2236': attribute type 13 has an invalid length.
[  406.213131][T14658] batman_adv: batadv0: Interface deactivated: dummy0
[  406.245869][T14683] netlink: 'syz.1.2235': attribute type 4 has an invalid length.
[  406.281628][T14658] vlan0: left promiscuous mode
[  406.327941][T14666] netlink: 'syz.1.2235': attribute type 12 has an invalid length.
[  406.338844][T14671] �x9�: renamed from bridge_slave_0
[  406.344775][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  406.352920][    C1] lec:lec_tx_timeout: lec0
[  406.358036][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  406.425443][ T5901] lo speed is unknown, defaulting to 1000
[  406.442312][ T5901] syz1: Port: 1 Link DOWN
[  407.220476][T14725] bond9: entered allmulticast mode
[  407.256882][T14725] 8021q: adding VLAN 0 to HW filter on device bond9
[  407.287882][T14725] team0: Port device bond9 added
[  407.326403][T14738] lo speed is unknown, defaulting to 1000
[  408.012186][T14776] netlink: 'syz.3.2254': attribute type 9 has an invalid length.
[  408.407905][T14785] __nla_validate_parse: 8 callbacks suppressed
[  408.407928][T14785] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2258'.
[  408.418075][T14786] syzkaller0: entered promiscuous mode
[  408.447565][T14786] syzkaller0: entered allmulticast mode
[  408.453885][T14786] tipc: Resetting bearer <eth:syzkaller0>
[  408.471815][T14788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2257'.
[  409.050763][T14811] TCP: TCP_TX_DELAY enabled
[  409.350924][T14823] ip6gretap1: entered promiscuous mode
[  409.516158][T14833] xt_TPROXY: Can be used only with -p tcp or -p udp
[  409.598377][T14842] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2270'.
[  409.745262][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 180 seconds
[  409.756138][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 180 seconds
[  409.767305][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 180 seconds
[  409.778487][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 180 seconds
[  409.783289][T14847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2272'.
[  409.955597][T14852] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2273'.
[  410.392289][T14883] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  410.778509][T14894] lo speed is unknown, defaulting to 1000
[  411.307805][   T30] audit: type=1107 audit(1764141504.480:8): pid=14913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  411.364869][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  411.464495][    C1] lec:lec_tx_timeout: lec0
[  411.469610][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  411.630019][T14931] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2288'.
[  411.748833][T14936] x_tables: duplicate underflow at hook 1
[  411.979679][T14945] 8021q: adding VLAN 0 to HW filter on device bond0
[  412.004615][T14945] 8021q: adding VLAN 0 to HW filter on device team0
[  412.028108][T14945] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  412.059217][T14958] tipc: Resetting bearer <eth:syzkaller0>
[  412.111393][T14956] tipc: Resetting bearer <eth:syzkaller0>
[  412.200747][T14946] lo speed is unknown, defaulting to 1000
[  412.414082][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'.
[  412.520933][T14983] netlink: 'syz.0.2300': attribute type 1 has an invalid length.
[  412.828474][T15000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2303'.
[  412.981578][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2304'.
[  413.258819][ T3499] tipc: Resetting bearer <eth:syzkaller0>
[  413.302892][T15025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'.
[  413.675987][T15043] __nla_validate_parse: 1 callbacks suppressed
[  413.676009][T15043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2314'.
[  413.722909][T15043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'.
[  414.638623][T15086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  414.656173][T15085] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2325'.
[  414.668585][T15085] netlink: 'syz.2.2325': attribute type 1 has an invalid length.
[  414.686501][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'.
[  414.707185][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2326'.
[  415.586311][T15124] netlink: 'syz.3.2335': attribute type 3 has an invalid length.
[  415.605375][T15127] lo: entered allmulticast mode
[  415.613289][T15130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2336'.
[  415.806067][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2337'.
[  415.914634][T15143] netlink: 'syz.0.2337': attribute type 13 has an invalid length.
[  415.979625][T15143] 0��{X��: left allmulticast mode
[  416.023659][T15143] 0��{X��: refused to change device tx_queue_len
[  416.058373][T15143] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  416.082397][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2341'.
[  416.115406][T15160] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  416.173879][T15164] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2344'.
[  416.341004][T15170] x_tables: duplicate underflow at hook 1
[  416.377370][T15169] lo speed is unknown, defaulting to 1000
[  416.484825][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  416.493088][    C1] lec:lec_tx_timeout: lec0
[  416.498489][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  416.658945][T15182] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2347'.
[  416.731552][T15185] openvswitch: netlink: IP tunnel dst address not specified
[  416.848586][T15184] netlink: 'syz.0.2348': attribute type 1 has an invalid length.
[  417.124878][T15200] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check.
[  417.173675][T15184] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.182834][T15186] syzkaller0: entered promiscuous mode
[  417.190189][T15186] syzkaller0: entered allmulticast mode
[  417.225709][T15210] tipc: Resetting bearer <eth:syzkaller0>
[  417.241697][T15182] lo speed is unknown, defaulting to 1000
[  417.249535][T15183] tipc: Resetting bearer <eth:syzkaller0>
[  417.267105][T15183] tipc: Disabling bearer <eth:syzkaller0>
[  417.281570][T15215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  417.392197][T15216] tipc: Disabling bearer <eth:syzkaller0>
[  417.914516][T15257] netlink: 'syz.1.2359': attribute type 1 has an invalid length.
[  418.008110][T15257] bond4: entered promiscuous mode
[  418.013839][T15257] 8021q: adding VLAN 0 to HW filter on device bond4
[  418.132817][T15257] bond4: (slave bridge7): making interface the new active one
[  418.152412][T15257] bridge7: entered promiscuous mode
[  418.177222][T15257] bond4: (slave bridge7): Enslaving as an active interface with an up link
[  418.188414][T15266] lo: Caught tx_queue_len zero misconfig
[  418.977196][T15307] __nla_validate_parse: 4 callbacks suppressed
[  418.977231][T15307] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2372'.
[  419.077521][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2374'.
[  419.101671][T15310] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  419.118210][T15316] netlink: 'syz.0.2373': attribute type 1 has an invalid length.
[  419.143639][T15313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2373'.
[  419.194473][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2373'.
[  419.204100][T15313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'.
[  419.287198][T15316] bond9: entered promiscuous mode
[  419.296202][T15316] 8021q: adding VLAN 0 to HW filter on device bond9
[  419.455116][T15331] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'.
[  419.514219][T15335] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2379'.
[  419.623369][T15335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2379'.
[  419.714213][T15350] xt_cgroup: xt_cgroup: no path or classid specified
[  419.759332][T15346] lo speed is unknown, defaulting to 1000
[  419.821598][T15353] netlink: 207952 bytes leftover after parsing attributes in process `syz.2.2383'.
[  420.227002][T15366] lo speed is unknown, defaulting to 1000
[  420.289112][T15376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2387'.
[  420.601221][T15390] gtp1: entered promiscuous mode
[  420.625341][T15390] gtp1: entered allmulticast mode
[  420.679115][T15392] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  420.861231][T15413] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  421.270475][   T13] tipc: Subscription rejected, illegal request
[  421.953095][T15475] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  422.060426][T15480] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  422.360672][T15495] macsec0: entered allmulticast mode
[  422.544930][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6050 ms
[  422.553091][    C1] lec:lec_tx_timeout: lec0
[  422.558115][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  423.058143][ T5842] block nbd2: Receive control failed (result -22)
[  423.108440][T15536] nbd2: detected capacity change from 0 to 32
[  423.168434][ T5842] block nbd3: Receive control failed (result -22)
[  423.175563][T15546] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  423.193689][T15532] nbd3: detected capacity change from 0 to 32
[  423.211690][T15543] bond10 (unregistering): Released all slaves
[  423.319303][T15531] lo speed is unknown, defaulting to 1000
[  423.394420][T15508] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  423.860273][T15580] netlink: 'syz.3.2435': attribute type 13 has an invalid length.
[  423.870014][T15580] netlink: 'syz.3.2435': attribute type 17 has an invalid length.
[  423.879101][T15574] bond0: (slave rose0): Enslaving as an active interface with an up link
[  424.146581][T15580] 8021q: adding VLAN 0 to HW filter on device bond0
[  424.170953][T15580] 8021q: adding VLAN 0 to HW filter on device team0
[  424.186655][T15585] siw: device registration error -23
[  424.195934][T15580] batman_adv: batadv0: Interface activated: dummy0
[  424.206353][T15580] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  424.313174][T15584] lo speed is unknown, defaulting to 1000
[  424.362117][T15603] __nla_validate_parse: 13 callbacks suppressed
[  424.362140][T15603] netlink: 288 bytes leftover after parsing attributes in process `syz.0.2440'.
[  424.419101][T15588] lo speed is unknown, defaulting to 1000
[  424.569866][T15616] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  424.589974][T15613] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  424.616189][T15616] geneve2: entered promiscuous mode
[  424.621448][T15616] geneve2: entered allmulticast mode
[  424.637915][T15613] syzkaller0: entered promiscuous mode
[  424.643835][T15613] syzkaller0: entered allmulticast mode
[  424.691620][T15613] tipc: Resetting bearer <eth:syzkaller0>
[  424.838920][T15613] tipc: Disabling bearer <eth:syzkaller0>
[  424.917102][T15622] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  424.962197][T15627] netlink: 'syz.3.2445': attribute type 33 has an invalid length.
[  424.980623][T15627] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2445'.
[  425.005012][T15627] `: renamed from team0 (while UP)
[  425.251602][T15643] lo speed is unknown, defaulting to 1000
[  425.389700][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2452'.
[  425.422847][T15639] pim6reg: entered allmulticast mode
[  425.430561][T15650] pim6reg: left allmulticast mode
[  425.490502][T15647] x_tables: (null)_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING
[  425.691587][T15660] lo speed is unknown, defaulting to 1000
[  425.763174][T15668] lo speed is unknown, defaulting to 1000
[  425.916603][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'.
[  426.127813][T15677] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2457'.
[  426.409268][T15686] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2459'.
[  426.515212][T15691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2461'.
[  426.543774][T15692] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2458'.
[  426.573305][T15683] lo speed is unknown, defaulting to 1000
[  426.592463][T15690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2459'.
[  427.717182][T15718] netlink: 'syz.0.2464': attribute type 1 has an invalid length.
[  427.739034][T15718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2464'.
[  428.308264][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms
[  428.316555][    C1] lec:lec_tx_timeout: lec0
[  428.322397][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  429.197783][T15705] syzkaller1: entered promiscuous mode
[  429.203430][T15705] syzkaller1: entered allmulticast mode
[  429.673623][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2471'.
[  430.099129][T15756] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2476'.
[  430.615259][T15782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2482'.
[  430.662099][T15772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2480'.
[  430.710768][T15789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2482'.
[  430.826318][T15772] IPv6: Can't replace route, no match found
[  431.331563][T15788] lo speed is unknown, defaulting to 1000
[  431.338712][T15799] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2488'.
[  431.356090][T15799] netlink: 245 bytes leftover after parsing attributes in process `syz.4.2488'.
[  431.482885][T15803] geneve2: entered promiscuous mode
[  431.489413][T15805] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2491'.
[  431.845041][T15821] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2495'.
[  431.898715][T15824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2496'.
[  431.931409][T15828] syzkaller0: entered promiscuous mode
[  431.938045][T15828] syzkaller0: entered allmulticast mode
[  431.991260][T15836] netlink: 'syz.3.2500': attribute type 13 has an invalid length.
[  432.157455][T15836] gretap0: refused to change device tx_queue_len
[  432.175805][T15836] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  432.268460][T15853] tipc: Resetting bearer <eth:syzkaller0>
[  432.337297][T15852] tipc: Resetting bearer <eth:syzkaller0>
[  432.395858][   T13] tipc: Resetting bearer <eth:syzkaller0>
[  432.485576][T15865] netlink: 'syz.1.2509': attribute type 10 has an invalid length.
[  432.705607][   T13] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96
[  432.875663][T15879] lo speed is unknown, defaulting to 1000
[  432.977020][T15882] lo speed is unknown, defaulting to 1000
[  433.334776][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  433.342905][    C1] lec:lec_tx_timeout: lec0
[  433.497401][T15907] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  433.998502][T15927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  434.037121][T15927] syzkaller0: entered promiscuous mode
[  434.051183][T15927] syzkaller0: entered allmulticast mode
[  434.165179][T15937] bridge0: entered promiscuous mode
[  434.172020][T15937] ip6gretap0: entered promiscuous mode
[  434.181039][T15937] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  434.198498][T15927] tipc: Resetting bearer <eth:syzkaller0>
[  434.275362][T15943] xt_hashlimit: size too large, truncated to 1048576
[  434.349767][T15927] can: request_module (can-proto-0) failed.
[  434.369194][T15926] tipc: Resetting bearer <eth:syzkaller0>
[  434.526919][T15926] tipc: Disabling bearer <eth:syzkaller0>
[  435.012128][T15972] lo speed is unknown, defaulting to 1000
[  435.128145][T15982] tipc: Resetting bearer <eth:syzkaller0>
[  435.154610][T15982] __nla_validate_parse: 13 callbacks suppressed
[  435.154633][T15982] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2541'.
[  435.205846][T15982] syzkaller0: left promiscuous mode
[  435.222476][T15982] syzkaller0: left allmulticast mode
[  435.258313][T15978] tipc: Resetting bearer <eth:syzkaller0>
[  435.557715][T15995] netlink: 'syz.2.2545': attribute type 8 has an invalid length.
[  435.578504][T10563] tipc: Resetting bearer <eth:syzkaller0>
[  435.712957][T16006] netlink: 'syz.3.2548': attribute type 3 has an invalid length.
[  435.800502][T16010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2550'.
[  435.939402][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2553'.
[  435.956051][T16015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2553'.
[  435.968439][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2553'.
[  436.421892][T16040] netlink: 'syz.1.2560': attribute type 5 has an invalid length.
[  436.440606][T16040] netlink: 'syz.1.2560': attribute type 5 has an invalid length.
[  436.974270][T16061] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  436.983646][T16061] syzkaller0: entered promiscuous mode
[  436.990157][T16061] syzkaller0: entered allmulticast mode
[  436.996274][T16061] tipc: Resetting bearer <eth:syzkaller0>
[  437.110842][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2565'.
[  437.230779][T16066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2566'.
[  437.359752][T16070] netlink: 'syz.2.2568': attribute type 21 has an invalid length.
[  437.368121][T16070] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2568'.
[  437.537728][T16083] siw: device registration error -23
[  437.563261][T16085] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2573'.
[  437.619604][T16088] netlink: 'syz.0.2569': attribute type 2 has an invalid length.
[  437.638271][T16088] netlink: 'syz.0.2569': attribute type 8 has an invalid length.
[  437.652930][T16088] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2569'.
[  437.677741][T16099] xt_TCPMSS: Only works on TCP SYN packets
[  437.828946][T16102] team0: Caught tx_queue_len zero misconfig
[  438.070860][T16117] 0�X���: renamed from caif0
[  438.081895][T16117] 0�X���: entered allmulticast mode
[  438.087484][T16117] A link change request failed with some changes committed already. Interface 
60�X��� may have been left with an inconsistent configuration, please check.
[  438.204260][T16120] bond6: entered allmulticast mode
[  438.210243][T16120] 8021q: adding VLAN 0 to HW filter on device bond6
[  438.448414][T16132] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1
[  438.464296][T16132] erspan1: entered allmulticast mode
[  439.383515][T16166] lo speed is unknown, defaulting to 1000
[  439.682921][T16172] lo speed is unknown, defaulting to 1000
[  439.730164][T16179] lo speed is unknown, defaulting to 1000
[  439.825383][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 210 seconds
[  439.836541][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 210 seconds
[  439.847679][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 210 seconds
[  439.858849][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 210 seconds
[  445.590348][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  451.265062][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms
[  451.273201][    C1] lec:lec_tx_timeout: lec0
[  468.598708][T16184] __nla_validate_parse: 7 callbacks suppressed
[  468.598731][T16184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2598'.
[  468.616761][T16184] netlink: 'syz.0.2598': attribute type 7 has an invalid length.
[  468.633162][T16184] netlink: 'syz.0.2598': attribute type 8 has an invalid length.
[  468.650447][T16186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'.
[  468.658563][T16184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2598'.
[  468.707129][T16189] 0��{X��: left allmulticast mode
[  468.727605][T16189] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  468.776426][T16196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2599'.
[  468.782508][T16184] bridge0: entered promiscuous mode
[  468.793482][T16184] ip6gretap0: entered promiscuous mode
[  468.805843][T16184] bridge0: left promiscuous mode
[  468.822320][T16184] ip6gretap0: left promiscuous mode
[  468.907927][T16186] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address
[  468.920247][T16186] bond5: (slave vxcan5): Error -95 calling set_mac_address
[  468.973141][T16196] macvlan2: entered promiscuous mode
[  468.982936][T16196] macvlan2: entered allmulticast mode
[  469.118191][T16200] lo speed is unknown, defaulting to 1000
[  469.153698][T16217] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2607'.
[  469.175019][T16215] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2607'.
[  469.274036][   T30] audit: type=1107 audit(1764141562.450:9): pid=16222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='+H_?m;4�x/YLVd<�M�\ɀ#���F>Ͳ�{����%����g��Q+X0I;0y\�	�����.���1����p�~o�Mg�o`�=����4�X�S6�&�i@���%�AV��xTaT�9۞��a6�YF�<�g��<�^rn�'�ҕW�8-S<xB��B�&y�)0,>C���U�f�(p�<���c�{�0$���OC�:�#���O~�l���'
[  469.775067][T16235] netlink: 'syz.1.2611': attribute type 1 has an invalid length.
[  469.910216][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 240 seconds
[  469.921278][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 240 seconds
[  469.936958][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 240 seconds
[  469.948669][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 240 seconds
[  470.013663][T16247] pim6reg: entered allmulticast mode
[  470.036174][T16245] tipc: Resetting bearer <eth:syzkaller0>
[  470.134319][T16251] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2617'.
[  470.143751][T16251] .70�: renamed from hsr0 (while UP)
[  470.172876][T16251] .70�: entered allmulticast mode
[  470.194981][T16251] hsr_slave_0: entered allmulticast mode
[  470.201666][T16251] A link change request failed with some changes committed already. Interface .70� may have been left with an inconsistent configuration, please check.
[  470.272280][T16257] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1
[  470.277569][T16260] Cannot find map_set index 0 as target
[  470.771095][T16287] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2627'.
[  470.969468][T16244] tipc: Resetting bearer <eth:syzkaller0>
[  471.315256][T16307] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2632'.
[  471.330052][T16309] lo speed is unknown, defaulting to 1000
[  471.404169][T16314] pim6reg: entered allmulticast mode
[  471.828729][   T36] tipc: Resetting bearer <eth:syzkaller0>
[  471.922912][T16336] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0
[  471.975840][T16344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2644'.
[  471.978806][T16336] batman_adv: batadv0: Adding interface: gretap0
[  471.997084][T16336] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  472.027013][T16336] batman_adv: batadv0: Interface activated: gretap0
[  472.153497][T16351] netlink: 'syz.4.2645': attribute type 1 has an invalid length.
[  472.184947][T16343] lo speed is unknown, defaulting to 1000
[  472.383858][T16351] 8021q: adding VLAN 0 to HW filter on device bond11
[  472.453013][T16352] bond11: (slave veth11): Enslaving as an active interface with a down link
[  472.842452][T16369] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  473.049979][T16378] delete_channel: no stack
[  473.428878][T16401] netlink: 'syz.3.2657': attribute type 11 has an invalid length.
[  473.487755][T16401] netlink: 'syz.3.2657': attribute type 11 has an invalid length.
[  473.842084][T16399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  473.994346][T16425] __nla_validate_parse: 4 callbacks suppressed
[  473.994370][T16425] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2665'.
[  474.026668][T16428] netlink: 'syz.4.2666': attribute type 5 has an invalid length.
[  474.250506][T16438] bridge0: port 3(dummy0) entered disabled state
[  474.257196][T16438] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.264558][T16438] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.310921][T16448] x_tables: duplicate underflow at hook 2
[  474.330959][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2670'.
[  474.376914][T16438] batadv_slave_0: left promiscuous mode
[  474.382706][T16438] xfrm0: left promiscuous mode
[  474.388353][T16438] xfrm0: left allmulticast mode
[  474.400993][T16438] .70�: left allmulticast mode
[  474.406351][T16438] hsr_slave_0: left allmulticast mode
[  474.433217][T16438] vlan0: left promiscuous mode
[  474.449553][T16438] ipvlan0: left promiscuous mode
[  474.479731][T16438] bond1: left promiscuous mode
[  474.489028][T16438] vlan2: left promiscuous mode
[  474.493861][T16438] geneve1: left promiscuous mode
[  474.499286][T16438] vlan2: left allmulticast mode
[  474.504394][T16438] geneve1: left allmulticast mode
[  474.543994][T16438] bond3: left promiscuous mode
[  474.549168][T16438] bond4: left promiscuous mode
[  474.564614][T16438] bond6: left allmulticast mode
[  474.595021][T16438] bond9: left promiscuous mode
[  474.661134][   T13] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.675040][   T13] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.683535][   T13] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.704445][   T13] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  474.758281][T16442] lo speed is unknown, defaulting to 1000
[  475.019751][T16472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2676'.
[  475.472127][T16496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2683'.
[  475.689504][T16505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2686'.
[  475.704284][T16503] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32)
[  476.165258][T16521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2689'.
[  476.209344][T16521] : entered promiscuous mode
[  476.237221][T16521] netlink: 'syz.4.2689': attribute type 1 has an invalid length.
[  476.265228][T16521] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2689'.
[  476.316440][T16524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2689'.
[  476.437892][T16533] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2693'.
[  476.667489][T16550] netlink: 'syz.2.2697': attribute type 1 has an invalid length.
[  476.695562][T16550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2697'.
[  476.799138][T16552] lo speed is unknown, defaulting to 1000
[  477.128173][T16578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  477.241495][T16573] tipc: Invalid UDP bearer configuration
[  477.241554][T16573] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  477.383780][T16567] lo speed is unknown, defaulting to 1000
[  477.451810][T16590] netlink: 'syz.2.2706': attribute type 8 has an invalid length.
[  477.517232][T16583] lo speed is unknown, defaulting to 1000
[  477.764491][T16590] lo speed is unknown, defaulting to 1000
[  478.093634][T16613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.115072][T16612] lo speed is unknown, defaulting to 1000
[  478.187566][T16620] lo speed is unknown, defaulting to 1000
[  478.767791][T16645] nbd: must specify a device to reconfigure
[  478.833441][T16620] netlink: 'syz.0.2713': attribute type 2 has an invalid length.
[  479.250889][T16664] __nla_validate_parse: 4 callbacks suppressed
[  479.250909][T16664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2725'.
[  479.362072][T16669] netlink: 'syz.4.2726': attribute type 6 has an invalid length.
[  479.370298][T16669] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2726'.
[  480.519171][T16730] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2742'.
[  480.536070][T16729] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  480.555344][T16729] syzkaller0: entered promiscuous mode
[  480.560895][T16729] syzkaller0: entered allmulticast mode
[  480.635410][T16729] tipc: Resetting bearer <eth:syzkaller0>
[  480.658966][T16728] tipc: Resetting bearer <eth:syzkaller0>
[  480.700612][T16728] tipc: Disabling bearer <eth:syzkaller0>
[  480.924315][T16739] syzkaller0: entered promiscuous mode
[  480.934936][T16739] syzkaller0: entered allmulticast mode
[  481.159060][T16750] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2749'.
[  481.560647][T16777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2754'.
[  481.612379][T16777] bond7: (slave bridge8): Enslaving as an active interface with an up link
[  481.785766][T16786] bond0: (slave syz_tun): Releasing backup interface
[  481.913723][T16791] RDS: rds_bind could not find a transport for ::ffff:172.20.20.26, load rds_tcp or rds_rdma?
[  481.932717][T16786] �x9�: left allmulticast mode
[  481.951114][T16786] �x9�: left promiscuous mode
[  481.957733][T16786] bridge0: port 1(
1�x9�) entered disabled state
[  481.970801][T16786] bridge_slave_1: left allmulticast mode
[  481.984253][T16786] bridge_slave_1: left promiscuous mode
[  482.003716][T16786] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.021650][T16786] bond0: (slave bond_slave_0): Releasing backup interface
[  482.037552][T16786] bond0: (slave bond_slave_1): Releasing backup interface
[  482.064464][T16786] team0: Port device team_slave_1 removed
[  482.111211][T16786] batman_adv: batadv0: Removing interface: batadv_slave_0
[  482.134018][T16809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2763'.
[  482.156385][T16786] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.277274][T16804] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2763'.
[  482.360083][T16786] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  482.402024][T16795] vlan1: entered promiscuous mode
[  482.410580][T16795] bond0: entered promiscuous mode
[  482.419143][T16795] bond_slave_0: entered promiscuous mode
[  482.436775][T16795] bond_slave_1: entered promiscuous mode
[  482.445814][T16795] vlan1: entered allmulticast mode
[  482.461535][T16795] bond0: entered allmulticast mode
[  482.474022][T16795] bond_slave_0: entered allmulticast mode
[  482.499974][T16795] bond_slave_1: entered allmulticast mode
[  482.535966][T16801] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2762'.
[  482.717822][T16817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2766'.
[  482.792856][T16822] netlink: 'syz.2.2767': attribute type 58 has an invalid length.
[  482.828106][T16822] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2767'.
[  482.903120][T16825] lo speed is unknown, defaulting to 1000
[  483.325624][T16854] netlink: 'syz.1.2775': attribute type 8 has an invalid length.
[  483.430876][T16856] netlink: 'syz.2.2778': attribute type 1 has an invalid length.
[  484.488320][T16898] __nla_validate_parse: 5 callbacks suppressed
[  484.488344][T16898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2791'.
[  484.871182][T16905] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2792'.
[  484.918074][T16910] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  484.929747][T16903] lo speed is unknown, defaulting to 1000
[  485.158221][T16921] netlink: 'syz.0.2797': attribute type 8 has an invalid length.
[  485.301243][T16917] lo speed is unknown, defaulting to 1000
[  485.330202][T16921] lo speed is unknown, defaulting to 1000
[  485.544509][T16929] IPv6: Can't replace route, no match found
[  486.343974][T16962] netlink: 'syz.1.2806': attribute type 21 has an invalid length.
[  486.353539][T16962] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2806'.
[  486.411170][T16962] netlink: 'syz.1.2806': attribute type 5 has an invalid length.
[  486.419233][T16962] netlink: 'syz.1.2806': attribute type 6 has an invalid length.
[  486.427456][T16962] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2806'.
[  486.474447][T16963] tipc: Failed to remove unknown binding: 66,1,1/0:441950808/441950810
[  486.511004][T16965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2808'.
[  486.562620][T16966] tipc: Failed to remove unknown binding: 66,1,1/0:441950808/441950810
[  486.592050][T16966] tipc: Failed to remove unknown binding: 66,1,1/0:441950808/441950810
[  486.685303][T16965] syzkaller0: entered promiscuous mode
[  486.692023][T16965] syzkaller0: entered allmulticast mode
[  486.813624][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2810'.
[  486.956211][T16987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2812'.
[  488.678389][T17001] x_tables: duplicate underflow at hook 2
[  489.019903][T17019] netlink: 'syz.1.2819': attribute type 39 has an invalid length.
[  489.217412][T17020] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  489.381496][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2822'.
[  489.501928][T17035] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2823'.
[  489.600708][T17046] ip6_vti0: entered promiscuous mode
[  489.603396][T17042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2826'.
[  489.608208][T17046] ip6_vti0: entered allmulticast mode
[  489.636477][T17049] xt_hashlimit: invalid interval
[  489.643665][T17049] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2827'.
[  489.675895][T17049] netlink: 'syz.0.2827': attribute type 1 has an invalid length.
[  489.693907][T17049] netlink: 'syz.0.2827': attribute type 3 has an invalid length.
[  489.719490][T17049] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2827'.
[  490.092510][T17063] lo speed is unknown, defaulting to 1000
[  490.234105][T17089] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2840'.
[  490.258902][T17089] netlink: 35 bytes leftover after parsing attributes in process `syz.0.2840'.
[  490.348985][T17089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2840'.
[  490.385672][T17099] xt_CT: You must specify a L4 protocol and not use inversions on it
[  490.401064][T17096] lo speed is unknown, defaulting to 1000
[  490.406289][T17089] dummy0: left allmulticast mode
[  490.411931][T17089] dummy0: left promiscuous mode
[  490.417271][T17089] bridge0: port 3(dummy0) entered disabled state
[  490.428719][T17089] bridge_slave_1: left allmulticast mode
[  490.434908][T17089] bridge_slave_1: left promiscuous mode
[  490.440767][T17089] bridge0: port 2(bridge_slave_1) entered disabled state
[  490.467938][T17089] bridge_slave_0: left allmulticast mode
[  490.473782][T17089] bridge_slave_0: left promiscuous mode
[  490.480061][T17089] bridge0: port 1(bridge_slave_0) entered disabled state
[  490.688355][T17104] dvmrp6: entered allmulticast mode
[  490.703236][T17104] pimreg: entered allmulticast mode
[  490.711104][T17103] pimreg: left allmulticast mode
[  490.751136][ T5842] Bluetooth: hci4: link tx timeout
[  490.766006][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  490.778810][ T5833] Bluetooth: hci4: link tx timeout
[  490.784002][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  490.796596][ T5833] Bluetooth: hci4: link tx timeout
[  490.801780][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  490.809755][ T5833] Bluetooth: hci4: link tx timeout
[  490.815065][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  490.823881][ T5833] Bluetooth: hci4: link tx timeout
[  490.829349][ T5833] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  490.949430][T17119] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  491.000162][T17116] netlink: 'syz.1.2847': attribute type 10 has an invalid length.
[  491.065834][T17114] tipc: Disabling bearer <eth:syzkaller0>
[  491.237589][T17141] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.345227][T17147] Cannot find add_set index 0 as target
[  491.472137][T17153] netlink: 'syz.4.2856': attribute type 10 has an invalid length.
[  491.497031][T17153] hsr0: entered promiscuous mode
[  491.511163][T17153] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  491.522941][T17153] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  491.536444][T17153] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  491.600345][T17157] geneve3: entered promiscuous mode
[  491.610682][T10562] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  491.624960][T10562] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  491.650833][T17163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2860'.
[  491.671355][T17150] lo speed is unknown, defaulting to 1000
[  491.677754][T10562] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  491.696070][ T3445] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  491.760593][T17170] netlink: 'syz.4.2862': attribute type 1 has an invalid length.
[  491.779028][T17170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2862'.
[  492.132556][T17193] syzkaller0: entered promiscuous mode
[  492.140556][T17193] syzkaller0: entered allmulticast mode
[  492.163495][T17191] lo speed is unknown, defaulting to 1000
[  492.299376][T17197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2867'.
[  492.314456][T17200] netlink: 'syz.1.2869': attribute type 23 has an invalid length.
[  492.865559][ T5842] Bluetooth: hci4: command 0x0405 tx timeout
[  493.042530][T17209] erspan0: entered promiscuous mode
[  493.601185][T17245] wg2: entered promiscuous mode
[  493.625514][T17245] wg2: entered allmulticast mode
[  493.843155][T17252] openvswitch: netlink: Missing key (keys=40, expected=80)
[  493.853404][T17252] tunl0: Caught tx_queue_len zero misconfig
[  493.926776][T17257] dummy0: entered promiscuous mode
[  493.935918][T17257] macvlan5: entered promiscuous mode
[  493.950799][T17257] macvlan5: entered allmulticast mode
[  493.965037][T17257] dummy0: entered allmulticast mode
[  493.982208][T17257] dummy0: left allmulticast mode
[  493.988165][T17257] dummy0: left promiscuous mode
[  494.025330][T17262] Bluetooth: MGMT ver 1.23
[  494.048809][T17263] netlink: 'syz.4.2886': attribute type 10 has an invalid length.
[  494.146999][T17261] netlink: 'syz.4.2886': attribute type 10 has an invalid length.
[  494.189849][T17263] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  494.215431][T17263] team0: Failed to send options change via netlink (err -105)
[  494.223059][T17263] team0: Port device dummy0 added
[  494.232639][T17261] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  494.292265][T17261] team0: Failed to send options change via netlink (err -105)
[  494.312325][T17261] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  494.322593][T17261] team0: Port device dummy0 removed
[  494.337283][T17261] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  494.719153][T17293] netlink: 'syz.1.2895': attribute type 12 has an invalid length.
[  494.902596][T17300] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  496.074955][ T5833] Bluetooth: hci2: command 0x0406 tx timeout
[  496.081249][ T5842] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  496.491895][T17298] ip6_vti0: left promiscuous mode
[  496.505855][T17298] ip6_vti0: left allmulticast mode
[  496.525995][T17299] ip6_vti0 speed is unknown, defaulting to 1000
[  496.533414][T17306] __nla_validate_parse: 7 callbacks suppressed
[  496.533436][T17306] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2899'.
[  496.556597][T17276] lo speed is unknown, defaulting to 1000
[  496.612650][T17310] bond8: option lacp_rate: invalid value (255)
[  496.621848][T17310] bond8 (unregistering): Released all slaves
[  496.666596][T17313] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2897'.
[  496.702806][T17299] ip6_vti0 speed is unknown, defaulting to 1000
[  496.762767][T17299] ip6_vti0 speed is unknown, defaulting to 1000
[  497.195067][T17328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2903'.
[  497.391376][T17299] infiniband syz2: set down
[  497.400528][T17329] openvswitch: netlink: ufid size 164 bytes exceeds the range (1, 16)
[  497.414838][T17299] infiniband syz2: added ip6_vti0
[  497.426562][T17299] syz2: rxe_create_cq: returned err = -12
[  497.432683][T17299] infiniband syz2: Couldn't create ib_mad CQ
[  497.450742][ T5829] ip6_vti0 speed is unknown, defaulting to 1000
[  497.463587][T17328] lo speed is unknown, defaulting to 1000
[  497.473729][T17299] infiniband syz2: Couldn't open port 1
[  497.481396][T17328] ip6_vti0 speed is unknown, defaulting to 1000
[  497.619026][T17299] RDS/IB: syz2: added
[  497.623717][T17299] smc: adding ib device syz2 with port count 1
[  497.649511][T17299] smc:    ib device syz2 port 1 has no pnetid
[  497.735267][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  497.744061][ T5900] ip6_vti0 speed is unknown, defaulting to 1000
[  497.753744][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  497.762824][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  497.771538][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  497.780912][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  497.782469][T17335] syzkaller0: entered promiscuous mode
[  497.815672][T17335] syzkaller0: entered allmulticast mode
[  497.864265][T17339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2906'.
[  497.867641][T17336] lo speed is unknown, defaulting to 1000
[  497.942171][T17345] nftables ruleset with unbound set
[  497.955751][T17345] Bluetooth: MGMT ver 1.23
[  497.961163][T17345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2907'.
[  498.017985][T17299] ip6_vti0 speed is unknown, defaulting to 1000
[  498.268442][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2910'.
[  498.278890][T17357] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.2910'.
[  498.288713][T17357] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  498.428540][T17299] ip6_vti0 speed is unknown, defaulting to 1000
[  498.449718][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'.
[  498.469082][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2911'.
[  498.690985][T17336] ip6_vti0 speed is unknown, defaulting to 1000
[  498.896291][T17299] ip6_vti0 speed is unknown, defaulting to 1000
[  499.209566][T17336] chnl_net:caif_netlink_parms(): no params data found
[  499.369911][T17299] ip6_vti0 speed is unknown, defaulting to 1000
[  499.437975][T17336] bridge0: port 1(bridge_slave_0) entered blocking state
[  499.456173][T17336] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.466272][T17336] bridge_slave_0: entered allmulticast mode
[  499.486394][T17336] bridge_slave_0: entered promiscuous mode
[  499.506678][T17336] bridge0: port 2(bridge_slave_1) entered blocking state
[  499.523037][T17336] bridge0: port 2(bridge_slave_1) entered disabled state
[  499.530669][T17336] bridge_slave_1: entered allmulticast mode
[  499.540574][T17336] bridge_slave_1: entered promiscuous mode
[  499.605366][T17399] netlink: 'syz.3.2921': attribute type 1 has an invalid length.
[  499.667029][T17399] 8021q: adding VLAN 0 to HW filter on device bond10
[  499.678591][T17336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  499.702924][T17402] bond10: (slave geneve4): making interface the new active one
[  499.716644][T17402] bond10: (slave geneve4): Enslaving as an active interface with an up link
[  499.728666][T17336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  499.738271][   T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  499.749882][T17299] ip6_vti0 speed is unknown, defaulting to 1000
[  499.778873][   T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.791657][   T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.827894][   T12] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.843394][T17336] team0: Port device team_slave_0 added
[  499.854183][T17336] team0: Port device team_slave_1 added
[  499.906126][ T5842] Bluetooth: hci0: command tx timeout
[  499.918278][T17336] batman_adv: batadv0: Adding interface: batadv_slave_0
[  499.925696][T17336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.952525][T17336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  499.966714][T17336] batman_adv: batadv0: Adding interface: batadv_slave_1
[  499.973913][T17336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  499.985862][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 270 seconds
[  500.006966][T17336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  500.011485][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 270 seconds
[  500.032971][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 270 seconds
[  500.044253][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 270 seconds
[  500.111819][T17299] ip6_vti0 speed is unknown, defaulting to 1000
[  500.120943][T17336] hsr_slave_0: entered promiscuous mode
[  500.128243][T17336] hsr_slave_1: entered promiscuous mode
[  500.135443][T17336] debugfs: 'hsr0' already exists in 'hsr'
[  500.141397][T17336] Cannot create hsr debugfs directory
[  500.425547][T17336] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.436745][T17336] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.470441][T17399] lo speed is unknown, defaulting to 1000
[  500.634921][T17336] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.644997][T17336] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.662784][T17413] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2923'.
[  500.698614][T17413] team0: No ports can be present during mode change
[  500.822172][T17336] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.836888][T17336] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  500.934325][T17336] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  500.965532][T17336] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  501.354234][T17336] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  501.386056][T17336] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  501.426152][T17336] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  501.458492][T17336] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  501.546247][T17447] netlink: 'syz.2.2933': attribute type 3 has an invalid length.
[  501.554049][T17447] netlink: 'syz.2.2933': attribute type 1 has an invalid length.
[  501.579364][T17450] Bluetooth: MGMT ver 1.23
[  501.598195][T17447] __nla_validate_parse: 1 callbacks suppressed
[  501.598216][T17447] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2933'.
[  501.644559][T17451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'.
[  501.675042][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2935'.
[  501.688687][T17447] netlink: 'syz.2.2933': attribute type 3 has an invalid length.
[  501.722057][T17447] netlink: 'syz.2.2933': attribute type 1 has an invalid length.
[  501.747110][T17336] 8021q: adding VLAN 0 to HW filter on device bond0
[  501.760285][T17447] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2933'.
[  501.799325][T17336] 8021q: adding VLAN 0 to HW filter on device team0
[  501.847005][ T3445] bridge0: port 1(bridge_slave_0) entered blocking state
[  501.854284][ T3445] bridge0: port 1(bridge_slave_0) entered forwarding state
[  501.909262][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state
[  501.916671][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state
[  501.985128][ T5842] Bluetooth: hci0: command tx timeout
[  502.285220][T17481] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0
[  502.358122][T17484] netlink: 'syz.3.2943': attribute type 1 has an invalid length.
[  502.398575][T17484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2943'.
[  502.514014][T17489] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2944'.
[  502.626479][T17491] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2945'.
[  502.719536][T17493] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2945'.
[  502.747954][T17493] netlink: 'syz.3.2945': attribute type 4 has an invalid length.
[  502.771805][T17336] 8021q: adding VLAN 0 to HW filter on device batadv0
[  503.041182][T17509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2950'.
[  503.742880][T17531] lo speed is unknown, defaulting to 1000
[  503.839168][T17531] ip6_vti0 speed is unknown, defaulting to 1000
[  503.926529][T17538] netlink: 'syz.3.2954': attribute type 17 has an invalid length.
[  503.957664][T17538] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2954'.
[  504.005354][T17538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  504.068151][ T5842] Bluetooth: hci0: command tx timeout
[  504.268271][T17336] veth0_vlan: entered promiscuous mode
[  504.335556][T17336] veth1_vlan: entered promiscuous mode
[  504.429722][T17336] veth0_macvtap: entered promiscuous mode
[  504.467009][T17336] veth1_macvtap: entered promiscuous mode
[  504.580248][T17336] batman_adv: batadv0: Interface activated: batadv_slave_0
[  504.612329][T17336] batman_adv: batadv0: Interface activated: batadv_slave_1
[  504.685274][ T3445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  504.710255][ T3445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  504.746785][ T3445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  504.769269][ T3445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  505.006994][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.026039][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  505.143114][T10564] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  505.158627][T10564] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  506.161805][ T5833] Bluetooth: hci0: command tx timeout
[  507.103853][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  508.241949][ T5833] Bluetooth: hci0: command 0x0405 tx timeout
[  512.309542][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms
[  512.320155][    C1] lec:lec_tx_timeout: lec0
[  523.193957][T17579] lo speed is unknown, defaulting to 1000
[  527.272347][T17579] ip6_vti0 speed is unknown, defaulting to 1000
[  530.252991][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 300 seconds
[  530.282080][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 300 seconds
[  530.312045][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 300 seconds
[  530.342366][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 300 seconds
[  553.812463][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  554.131866][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  554.760352][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  555.344167][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  556.003817][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  556.914387][T17613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  557.233814][T17610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  557.421854][T17610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  558.343340][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  558.833865][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  559.723277][T17613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  559.843301][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  560.022237][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  560.381998][T17610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  560.712599][T17610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  560.852881][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 330 seconds
[  560.882467][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 330 seconds
[  560.903624][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 330 seconds
[  560.953080][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 330 seconds
[  561.392254][T17610] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  561.583377][T17610] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  561.601641][ T5833] Bluetooth: hci3: command tx timeout
[  561.892518][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  562.003039][ T5833] Bluetooth: hci1: command tx timeout
[  562.754408][T17610] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  563.174413][T17610] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  563.374510][T17610] Bluetooth: hci5: command tx timeout
[  563.673544][ T5842] Bluetooth: hci3: command tx timeout
[  564.074014][ T5842] Bluetooth: hci1: command tx timeout
[  565.443271][ T5842] Bluetooth: hci5: command tx timeout
[  565.753865][ T5842] Bluetooth: hci3: command tx timeout
[  566.184105][ T5842] Bluetooth: hci1: command tx timeout
[  566.333112][ T5842] Bluetooth: hci6: command tx timeout
[  567.538950][ T5842] Bluetooth: hci5: command tx timeout
[  567.854227][ T5842] Bluetooth: hci3: command tx timeout
[  568.242879][ T5842] Bluetooth: hci1: command tx timeout
[  568.393808][ T5842] Bluetooth: hci6: command tx timeout
[  568.503976][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  569.611881][ T5842] Bluetooth: hci5: command tx timeout
[  570.472870][ T5842] Bluetooth: hci6: command tx timeout
[  572.573384][ T5842] Bluetooth: hci6: command tx timeout
[  574.311381][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms
[  574.322713][    C1] lec:lec_tx_timeout: lec0
[  578.102788][T17612] lo speed is unknown, defaulting to 1000
[  580.914124][T17610] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  581.284491][T17610] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  581.454097][T17610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  581.873975][T17610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  582.264555][T17610] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  584.711653][T17610] Bluetooth: hci0: command tx timeout
[  586.802859][T17610] Bluetooth: hci0: command tx timeout
[  587.371806][T17609] lo speed is unknown, defaulting to 1000
[  587.503988][T17612] ip6_vti0 speed is unknown, defaulting to 1000
[  587.633771][T17615] lo speed is unknown, defaulting to 1000
[  588.884228][T17610] Bluetooth: hci0: command tx timeout
[  589.683966][T17618] lo speed is unknown, defaulting to 1000
[  590.962799][T17610] Bluetooth: hci0: command tx timeout
[  591.624398][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 360 seconds
[  591.642767][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 360 seconds
[  591.672868][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 360 seconds
[  591.702622][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 360 seconds
[  607.653640][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  608.124298][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  608.361656][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  609.043736][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  609.474548][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  612.483051][T17610] Bluetooth: hci4: command tx timeout
[  614.572387][T17610] Bluetooth: hci4: command tx timeout
[  615.443435][ T5842] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  616.103585][ T5842] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  616.352450][ T5842] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  616.653123][ T5842] Bluetooth: hci4: command tx timeout
[  617.021079][ T5842] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  617.292882][ T5842] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  618.723199][ T5842] Bluetooth: hci4: command tx timeout
[  618.763521][ T5842] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  618.863423][ T5842] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  619.083410][ T5842] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  620.082813][ T5842] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  620.563188][ T5842] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  621.282434][ T5842] Bluetooth: hci7: command tx timeout
[  622.311646][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 390 seconds
[  622.334053][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 390 seconds
[  622.352141][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 390 seconds
[  622.374582][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 390 seconds
[  623.124259][ T5842] Bluetooth: hci8: command tx timeout
[  623.353365][ T5842] Bluetooth: hci7: command tx timeout
[  625.194187][ T5842] Bluetooth: hci8: command tx timeout
[  625.452393][ T5842] Bluetooth: hci7: command tx timeout
[  627.284415][T17610] Bluetooth: hci8: command tx timeout
[  627.364219][T17610] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  627.542936][ T5833] Bluetooth: hci7: command tx timeout
[  627.594291][T17610] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  627.723393][T17610] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  628.233619][T17610] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  628.818391][T17610] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  629.362817][ T5842] Bluetooth: hci8: command tx timeout
[  629.964580][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  631.543358][ T5842] Bluetooth: hci9: command tx timeout
[  633.594441][ T5842] Bluetooth: hci9: command tx timeout
[  635.278010][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5290 ms
[  635.289578][    C1] lec:lec_tx_timeout: lec0
[  635.679722][ T5842] Bluetooth: hci9: command tx timeout
[  637.763735][ T5842] Bluetooth: hci9: command tx timeout
[  639.861846][T17610] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  640.213444][T17610] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  640.382985][T17610] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  640.823936][T17610] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  641.161629][T17610] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  644.071833][T17610] Bluetooth: hci10: command tx timeout
[  646.160359][T17610] Bluetooth: hci10: command tx timeout
[  648.231406][T17610] Bluetooth: hci10: command tx timeout
[  650.333357][T17610] Bluetooth: hci10: command tx timeout
[  651.334002][T10564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  652.477020][T10564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  653.023599][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 420 seconds
[  653.053202][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 420 seconds
[  653.082746][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 420 seconds
[  653.109268][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 420 seconds
[  653.240251][T10564] bond0 (unregistering): Released all slaves
[  668.344458][T10564] bond1 (unregistering): Released all slaves
[  669.214463][T10564] bond2 (unregistering): Released all slaves
[  669.493302][ T5842] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  669.644334][ T5842] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  669.769787][ T5842] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  670.182795][ T5842] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  670.552140][ T5842] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  673.511228][ T5842] Bluetooth: hci11: command tx timeout
[  675.592232][T17610] Bluetooth: hci11: command tx timeout
[  675.751418][T17610] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  675.923699][T17610] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  676.313362][T17610] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  676.764394][T17610] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  676.994551][T17610] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  677.683523][ T5842] Bluetooth: hci11: command tx timeout
[  678.684336][T17610] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  678.872149][T17610] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  678.973908][T17610] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  679.754457][T17610] Bluetooth: hci11: command tx timeout
[  679.842733][T17610] Bluetooth: hci12: command tx timeout
[  680.063108][T17610] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  680.333774][T17610] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  681.922126][T17617] Bluetooth: hci12: command tx timeout
[  682.982371][T17617] Bluetooth: hci13: command tx timeout
[  683.232173][T17617] Bluetooth: hci3: command 0x0406 tx timeout
[  683.233683][ T5833] Bluetooth: hci1: command 0x0406 tx timeout
[  683.754181][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 450 seconds
[  683.788486][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 450 seconds
[  683.823647][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 450 seconds
[  683.842249][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 450 seconds
[  684.013174][ T5833] Bluetooth: hci12: command tx timeout
[  685.003388][T17617] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  685.113342][T17617] Bluetooth: hci13: command tx timeout
[  685.241575][T17617] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  685.553525][ T5842] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  685.634336][T10564] bond3 (unregistering): (slave bond4): Releasing backup interface
[  686.089358][T17610] Bluetooth: hci12: command tx timeout
[  686.153004][T17610] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  686.744204][T10564] bond3 (unregistering): Released all slaves
[  686.982939][T17650] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  687.230692][T17650] Bluetooth: hci13: command tx timeout
[  688.312592][ T5833] Bluetooth: hci5: command 0x0406 tx timeout
[  688.314379][T17650] Bluetooth: hci6: command 0x0406 tx timeout
[  689.354127][T17610] Bluetooth: hci13: command tx timeout
[  690.163717][ T5842] Bluetooth: hci14: command tx timeout
[  691.413477][ T1302] lec:lec_start_xmit: lec0:No lecd attached
[  692.243911][ T5842] Bluetooth: hci14: command tx timeout
[  694.324212][ T5842] Bluetooth: hci14: command tx timeout
[  696.412337][ T5842] Bluetooth: hci14: command tx timeout
[  696.428163][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  696.440185][    C1] lec:lec_tx_timeout: lec0
[  698.342589][T10564] bond4 (unregistering): Released all slaves
[  700.923154][T17610] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  701.183466][T17610] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  701.413599][T17610] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  701.862959][T17610] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  702.083034][T17610] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  704.634158][T17610] Bluetooth: hci15: command tx timeout
[  706.723242][T17610] Bluetooth: hci15: command tx timeout
[  708.804360][T17610] Bluetooth: hci0: command 0x0406 tx timeout
[  708.823392][T17650] Bluetooth: hci15: command tx timeout
[  710.613445][T10564] bond5 (unregistering): Released all slaves
[  710.883807][ T5842] Bluetooth: hci15: command tx timeout
[  714.513393][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 480 seconds
[  714.539826][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 480 seconds
[  714.574069][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 480 seconds
[  714.591742][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 480 seconds
[  723.272886][T10564] bond6 (unregistering): Released all slaves
[  724.073883][T10564] bond7 (unregistering): Released all slaves
[  725.573523][T10564] bond8 (unregistering): Released all slaves
[  730.631710][T17650] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  730.848824][T17650] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  730.983008][T17650] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  731.574269][T17650] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  731.891542][T17650] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  733.893883][T17650] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  734.332109][T17650] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  734.394353][T17650] Bluetooth: hci4: command 0x0406 tx timeout
[  734.463667][T17650] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  734.732649][T17650] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  734.874450][T17650] Bluetooth: hci16: command tx timeout
[  735.023173][ T5833] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  736.962181][ T5842] Bluetooth: hci16: command tx timeout
[  738.792278][ T5842] Bluetooth: hci17: command tx timeout
[  739.052196][ T5842] Bluetooth: hci16: command tx timeout
[  739.211069][T10564] bond9 (unregistering): Released all slaves
[  740.271978][T17610] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  740.463277][T17610] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  740.703910][T17610] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  740.882718][T17610] Bluetooth: hci17: command tx timeout
[  740.972596][T17610] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  741.133459][T17610] Bluetooth: hci16: command tx timeout
[  741.342408][   T31] INFO: task syz.3.2966:17579 blocked for more than 144 seconds.
[  741.533880][   T31]       Not tainted syzkaller #0
[  741.562854][T17610] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  741.761453][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  741.813593][   T31] task:syz.3.2966      state:D stack:23712 pid:17579 tgid:17577 ppid:5832   task_flags:0x400140 flags:0x00080003
[  742.020990][   T31] Call Trace:
[  742.024355][   T31]  <TASK>
[  742.054177][   T31]  __schedule+0x1798/0x4cc0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  742.324499][   T31]  ? __lock_acquire+0xab9/0xd20
[  742.451981][   T31]  ? __lock_acquire+0xab9/0xd20
[  742.553246][   T31]  ? __pfx___schedule+0x10/0x10
[  742.723612][   T31]  ? schedule+0x91/0x360
[  742.883461][   T31]  schedule+0x165/0x360
[  742.963826][T17650] Bluetooth: hci17: command tx timeout
[  743.171870][T17609] ip6_vti0 speed is unknown, defaulting to 1000
[  743.582971][   T31]  schedule_preempt_disabled+0x13/0x30
[  743.821422][   T31]  rwsem_down_write_slowpath+0x872/0xfe0
[  744.134536][   T31]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  744.232682][T17650] Bluetooth: hci18: command tx timeout
[  744.251826][   T31]  ? rwsem_down_write_slowpath+0x472/0xfe0
[  744.251886][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  744.251922][   T31]  ? __lock_acquire+0xab9/0xd20
[  744.251960][   T31]  ? rdma_dev_exit_net+0x8c/0x340
[  744.252006][   T31]  down_write+0x1ab/0x1f0
[  744.252047][   T31]  ? __pfx_down_write+0x10/0x10
[  744.252081][   T31]  ? rdma_net_to_dev_net+0x23/0x240
[  744.252106][   T31]  ? rdma_net_to_dev_net+0x23/0x240
[  744.252135][   T31]  ? rdma_net_to_dev_net+0x1ed/0x240
[  744.252165][   T31]  rdma_dev_exit_net+0x8c/0x340
[  744.252193][   T31]  ? __pfx___might_resched+0x10/0x10
[  744.252226][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[  744.252251][   T31]  ? net_generic+0x1e/0x240
[  744.252285][   T31]  ? mutex_is_locked+0x17/0x50
[  744.252312][   T31]  ? rtnl_is_locked+0x15/0x20
[  744.252347][   T31]  ops_undo_list+0x49a/0x990
[  744.252382][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[  744.252406][   T31]  ? ops_init+0x469/0x5c0
[  744.252442][   T31]  setup_net+0x2d6/0x320
[  744.252469][   T31]  ? __pfx_setup_net+0x10/0x10
[  744.252496][   T31]  ? copy_net_ns+0x337/0x4e0
[  744.252519][   T31]  ? down_read_killable+0x1d1/0x350
[  744.252551][   T31]  ? preinit_net+0x47d/0x780
[  744.252576][   T31]  copy_net_ns+0x34e/0x4e0
[  744.252606][   T31]  create_new_namespaces+0x3f3/0x720
[  744.252636][   T31]  ? security_capable+0x7e/0x2e0
[  744.252675][   T31]  unshare_nsproxy_namespaces+0x11c/0x170
[  744.252704][   T31]  ksys_unshare+0x4c8/0x8c0
[  744.682810][ T5833] Bluetooth: hci7: command 0x0406 tx timeout
[  744.704528][T17650] Bluetooth: hci8: command 0x0406 tx timeout
[  744.783964][   T31]  ? __pfx_ksys_unshare+0x10/0x10
[  744.904253][   T31]  __x64_sys_unshare+0x38/0x50
[  745.032348][ T5833] Bluetooth: hci17: command tx timeout
[  745.192694][   T56] block nbd0: Possible stuck request ffff88802505e000: control (read@0,1024B). Runtime 510 seconds
[  745.221955][   T56] block nbd0: Possible stuck request ffff88802505e1c0: control (read@1024,1024B). Runtime 510 seconds
[  745.243747][   T56] block nbd0: Possible stuck request ffff88802505e380: control (read@2048,1024B). Runtime 510 seconds
[  745.263832][   T56] block nbd0: Possible stuck request ffff88802505e540: control (read@3072,1024B). Runtime 510 seconds
[  745.361896][   T31]  do_syscall_64+0xfa/0xfa0
[  746.081705][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  746.262761][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.343577][ T5833] Bluetooth: hci18: command tx timeout
[  746.393608][   T31]  ? clear_bhb_loop+0x60/0xb0
[  746.432620][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.561524][   T31] RIP: 0033:0x7f4b92f8f749
[  746.761374][   T31] RSP: 002b:00007f4b93e72038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110
[  747.041729][   T31] RAX: ffffffffffffffda RBX: 00007f4b931e6090 RCX: 00007f4b92f8f749
[  747.292478][   T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200
[  747.743193][   T31] RBP: 00007f4b93013f91 R08: 0000000000000000 R09: 0000000000000000
[  748.043876][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  748.352262][   T31] R13: 00007f4b931e6128 R14: 00007f4b931e6090 R15: 00007ffff4a0fea8
[  748.402528][ T5833] Bluetooth: hci18: command tx timeout
[  748.464445][   T31]  </TASK>
[  748.584026][   T31] INFO: task syz-executor:17615 blocked for more than 151 seconds.
[  749.044147][   T31]       Not tainted syzkaller #0
[  749.342943][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  749.663213][   T31] task:syz-executor    state:D stack:22944 pid:17615 tgid:17615 ppid:1      task_flags:0x400140 flags:0x00080003
[  749.972310][   T31] Call Trace:
[  750.111887][   T31]  <TASK>
[  750.203884][   T31]  __schedule+0x1798/0x4cc0
[  750.313418][   T31]  ? __lock_acquire+0xab9/0xd20
[  750.422389][   T31]  ? __lock_acquire+0xab9/0xd20
[  750.482043][ T5833] Bluetooth: hci18: command tx timeout
[  750.771851][   T31]  ? __pfx___schedule+0x10/0x10
[  750.883072][   T31]  ? schedule+0x91/0x360
[  751.313672][   T31]  schedule+0x165/0x360