last executing test programs:

3m55.821551261s ago: executing program 3 (id=4035):
r0 = socket$inet6(0xa, 0x4, 0x8010000000000084)
sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}], 0x2, 0x40)
shutdown(r0, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r3, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x40}}, 0x4040000)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x0, 0x180, 0xffffffff, 0x228, 0x228, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@uncond, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@addrtype={{0x30}, {0x1, 0x1c, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @rand_addr=0x64010100, @remote, @gre_key=0x7fff, @port=0x4e24}}}}, {{@ip={@remote, @empty, 0xff000000, 0xff, 'nicvf0\x00', 'pim6reg0\x00', {}, {0xff}, 0x6c}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x6, @rand_addr=0x64010100, @multicast1, @icmp_id=0x67, @port=0x4e23}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x2, @multicast2, @loopback, @icmp_id=0x67, @port=0x4e24}}}}, {{@ip={@empty, @empty, 0xffffff00, 0x0, 'veth0_to_team\x00', 'ip6gretap0\x00', {}, {0xff}, 0x62, 0x3, 0x8}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @multicast1, @empty, @icmp_id=0x65, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r5)
r8 = socket$packet(0x11, 0x3, 0x300)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x5c, r9, 0x20, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffff8001, 0x4c}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x1}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x10, 0x2a, [@supported_rates={0x1, 0x1, [{0x12}]}, @chsw_timing={0x68, 0x4, {0x5, 0x2}}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20014040}, 0x800)
r10 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r10)
getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0)
sendto$packet(r8, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r11, 0x1, 0x4, 0x6, @local}, 0x14)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r5, &(0x7f0000000b00)={0x0, 0x43, &(0x7f0000000440)={&(0x7f00000004c0)={0x40, r7, 0x20, 0x0, 0x0, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x3}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x80)

3m55.57680726s ago: executing program 3 (id=4041):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000000000), r0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7)
setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), r0)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000400)={&(0x7f0000000100), 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x214, r4, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xac}, @TIPC_NLA_NET_NODEID_W1={0xc}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x807}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7f}]}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1fe00000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x80, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf3d3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x35}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1dff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x214}}, 0x4)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000440))
r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r6, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000005c0), r0)
r8 = socket(0x1e, 0x80f, 0x180)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r8)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6tnl0\x00', <r10=>0x0, 0x2b, 0xf, 0xe, 0x0, 0x1, @empty, @remote, 0x710, 0x20, 0x2, 0x7}})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000740)={'pimreg0\x00', <r11=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x70, r9, 0x218, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x2c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x94)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x80047210, &(0x7f0000000880))
ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000008c0))
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000b40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000940)={0x194, r7, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x93, 0xa8, @random="ecf5bd69a7ec602836c497c1721a3918fa5885cddff377b421d95c6d2ab55512187a85b772c47636c120cc14e50f72d2d79c80d84fb4d9b94067f9a3beb362e499b99d17a7985a2aefbbdc38b5c909e6edd9476c16d8d5d1ffe1a522400fb28cc3a3b210f3e2fa08cf7f25c1b11d6a6992668a56bcb4c2ceeea32a2b31840a55a3978ed2646c8db867a04ae138dd6e"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x2}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x1ff}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3c5}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x94, 0xa8, @random="f9e6a3e86e2f76f532df7825be6988f194a888af4e661dde24132cf13efb80a24a212265c77dfe70c1f2ae39656f981a86019b4acac4d3b2fe2ada2bc46403c0baeca37a133941e48d365ec72dec68732e8096796aa1f7755ab63e96ea5dd1d6d793c2c42673a16b0a2c35d78c500d0aba12cb143ee4a74fb0bc90cc9360f8eaf09eeef9ff83830b7613d57cbc4ac712"}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x194}, 0x1, 0x0, 0x0, 0x4080}, 0x20008080)
r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r1)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r12, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4044001)
sendmsg$nl_route_sched(r8, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d00)=@deltaction={0x11c, 0x31, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9c5}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffe9e2}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xcab}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa8b}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20040001}, 0xb59b0ae09c15c12)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000ec0)={<r13=>0x0, @in6={{0xa, 0x4e23, 0x9c09, @remote, 0x8001}}, 0xf, 0x8}, &(0x7f0000000f80)=0x90)
setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, &(0x7f0000000fc0)=@assoc_id=r13, 0x4)
r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_procs(r14, &(0x7f0000001040)='cgroup.threads\x00', 0x2, 0x0)
setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000001080), 0x4)

3m55.40523364s ago: executing program 3 (id=4044):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1)
sendmsg$NFC_CMD_START_POLL(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r2, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

3m55.24694033s ago: executing program 3 (id=4048):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000)

3m55.055642947s ago: executing program 3 (id=4053):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x9, 0x7, 0xfffffff9, 0x9, 0xffffff56, 0x8, 0x2, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r7)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = accept4$bt_l2cap(r2, &(0x7f0000000140), &(0x7f00000001c0)=0xe, 0x0)
getsockname(r10, &(0x7f0000000300)=@ax25={{0x3, @bcast}, [@default, @rose, @remote, @remote, @default, @null, @bcast, @rose]}, &(0x7f0000000380)=0x80)
r11 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r12, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x2, 0x5, 0x10004, 0x40}, 0x8, 0x5, [{0x100, 0xa, 0x3, 0x0, 0x1, 0x7}]}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x5, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xc58, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x9, 0x9, 0x5, 0x3, 0x10000001}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x84, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x2, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x0, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x4}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_emit_ethernet(0x21, &(0x7f0000001a40)={@local, @empty, @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, "e3", "dc094a", 0x22eb, "81b5be3181fd3b87d0a0a7"}}}}}, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0300002e00090027bd70000000000004000000480311802ef9"], 0x35c}, 0x1, 0x0, 0x0, 0x42804}, 0x4000010)

3m54.557505385s ago: executing program 3 (id=4062):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20)
getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000040))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000040), 0x1)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004)

3m39.535996835s ago: executing program 32 (id=4062):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
r7 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r7, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0)
sendmsg$can_bcm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20)
getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000040))
r8 = socket$nl_generic(0x10, 0x3, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x1ff)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r10 = openat$cgroup_int(r9, &(0x7f0000000840)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r10, &(0x7f0000000040), 0x1)
sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004)

3m25.605872072s ago: executing program 1 (id=4495):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000540)={<r0=>0xffffffffffffffff, &(0x7f0000000440)='nr0\x00', 0x781241, &(0x7f0000000480)={@_ha_fsid={[0x9, 0x5]}, {0x9, 0x2, 0x5, 0x4}}, 0x9, &(0x7f00000004c0)={@_ha_fsid}, &(0x7f0000000500)=0xc1})
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000027f00000000850000005642814e2403872b00000000"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYBLOB="1dbe65faed397e3d8ad724393368dc05270c3479c43895a1a3d8a56563ab3b88ac2d1bc82c93ead406b5324f33316f4410e0ca0bfd66bdbbb86f31fe34faf411d41f44f6c83e38d83a0a55e7c94cc0fc0e5a8a8467fbf08798362318e48893ce0621d730bb98ec12f8860d0c7f3e46ce0125feee1f5af9bc4e93afca"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0xc0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20040000)
socket$inet6(0xa, 0x3, 0x3a)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r8 = socket$kcm(0x2, 0xa, 0x2)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f00000028c0)=ANY=[@ANYBLOB="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"], 0xfce)
sendmsg$NFT_BATCH(r6, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000bc0)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x128, 0x18, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macvtap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'macvlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_NEWSET={0xd8, 0x9, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x11}, @NFTA_SET_USERDATA={0xbb, 0xd, 0x1, 0x0, "22b58b3dd19354128cd4ed5053159af87cee0ecdad35cd44d4660e9b58d54e3c8f06135d0fdae3c1fc87c711ccaa154eada5d5d00868a4d1fc18c87aece78bdfe4068335d379f38015c7941ea84f3c9870ad14cde0594d73bb76072eb0551db8b7f8c37dd15a49ac1bc4a51dff7c52ece5d43ced24be53046ab79c9952b4fbaf9a54c123c48922f133d1908ba0a1b895a79e04b697f190b2f74dfdc7e621f43f96cb52bbc3697c1cf65dddd922ad4a1a88ad144130a965"}]}, @NFT_MSG_NEWTABLE={0x124, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0xee, 0x6, "2fc79240d86c47ace15bb7d3fe7ad60fae9a398ac262105294dddfd713bff717131ac8219b01198d054b0a89baf0ef861ebd7980d3f2d861a1b55ad1c3d5f4ea956ad780fb9a5ac8c6287591625cb948f59887bf380e48055392fa62147a6148c6deede60096ff6f9c497830327dfa0e7d1615b04aa2cd9f5f5f32a8c3ed152af6443a2c51cdc1edd042ebb1851a3e573463a722232208914852454e01e0c748e2fcfc9403793024d787bfd9e85c1df7f2e9bc24f2b0ee31fb04cd8017df81f51e5abd3c5ca0292a6ca291547d9c978bf8aadc43f59a55b32e241e462ca6ebc95879bc231b7df0428d04"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x360}}, 0x40000)
close(r4)
socket$unix(0x1, 0x5, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a01010000000000000000010000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016500000000c0a010300000000000000000100000008000440000000000900010073797a30000000002800038024000080200001801a00010010c4e3257eaa66a5725a38cd58d26115453baa910be00000140000001000010000360000000000000000000a"], 0xc8}}, 0x0)
shutdown(r2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="440000004ec6"})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0)

3m24.685775701s ago: executing program 1 (id=4510):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) (async, rerun: 32)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000067bd166de0c0ef89a7339ea60000000a60000000060a0b0400000000000000000200000034000480300001800b0001007461726765740000200002800a000100415544495400000005000300ef00000008000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x88}}, 0x0) (async)
syz_emit_ethernet(0x2a, &(0x7f0000000880)=ANY=[@ANYBLOB="0180c2000003fa34db48716e08004500001c0000000000119078000000000000000000004e2000089078"], 0x0) (async, rerun: 32)
ppoll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0xc4}, {}], 0x2, 0x0, 0x0, 0x0) (async, rerun: 32)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r4, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64)
getsockopt$inet_udp_int(r1, 0x11, 0xa, &(0x7f0000000100), &(0x7f00000001c0)=0x4) (async, rerun: 64)
recvmsg$unix(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x10, 0x803, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
socket$inet6(0x10, 0x3, 0x0) (async, rerun: 32)
socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0900000081f7ffff081dc82769fc7f93020000000500000016010000", @ANYRES32, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async, rerun: 64)
r6 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async, rerun: 64)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (rerun: 64)
bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x48) (async)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) (async)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) (async)
sendto$inet6(r6, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f)

3m24.587647655s ago: executing program 1 (id=4514):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) (async)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000002c0)={0x3, {{0x2, 0x4e22, @multicast2}}}, 0x88) (async, rerun: 32)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r4, 0xff09, 0x110c2300fe) (async, rerun: 32)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf)

3m24.453554427s ago: executing program 1 (id=4518):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x4, &(0x7f0000000380)=0x1, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_INTERVAL={0x8}]}}]}, 0x3c}}, 0x0)

3m24.317666945s ago: executing program 1 (id=4520):
syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x3c, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts], "fb36eeca"}}}}}}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'})
socket$rxrpc(0x21, 0x2, 0xa) (async)
r1 = socket$rxrpc(0x21, 0x2, 0xa)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb) (async)
setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb)
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0xd1, 0x4)

3m24.253772819s ago: executing program 1 (id=4524):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448cb, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

2m58.51030103s ago: executing program 33 (id=4524):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000)
mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x2000)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r4, 0x400448cb, 0x0)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

2m38.81410036s ago: executing program 5 (id=4787):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x2}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008001}, 0x44000)

2m38.742971795s ago: executing program 5 (id=4789):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x6, 0xc, 0x200, 0x8}, &(0x7f00000006c0)=0x10)
setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000080)=0xffff7b6e, 0x4)
socket$unix(0x1, 0x1, 0x0)
getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{}, "2c688ff20bf1ec94", "94642f7ca41ea509aeecaa30dee790ac", "9974b95f", "58eb44017f0cb469"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f5d937e5523", "4705a7b6113b967d7314f7201eb2babf", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r3, &(0x7f0000000580)=""/4065, 0xfe1, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3)
setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6c00000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020000780050003001f0000000c0001800800014000000000080006000400000005000500020000000500010006"], 0x6c}}, 0x0)
r5 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008884}, 0x894)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040881)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xb37, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xffffff00}, @TCA_FLOWER_KEY_IP_TTL={0x5, 0x4b, 0x1}]}}]}, 0x44}}, 0x24000800)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="10f3a57f3455ff041459200000000000000000000041"], 0x10}, 0x1, 0x0, 0x0, 0x48}, 0x8000)
syz_emit_ethernet(0x87a2f, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)

2m38.555143926s ago: executing program 5 (id=4794):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x9, 0x8, 0x1]}, &(0x7f00000000c0)=0x44)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r1, &(0x7f0000000340)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
bind$rxrpc(r1, &(0x7f0000001280)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24)
listen(r0, 0x3)
r2 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r2, &(0x7f0000000000)={0x2, 0x0, @local, 0x4}, 0x10)
ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r4, 0xff03, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', <r8=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fddbdf250500000014000380040004000400010008000200000000000c00018008000100", @ANYRES32=r8, @ANYBLOB="080005"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$inet(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)="99f67301a354d3e1ccf9ce6cdd58ae114eb0477d16bc207db75c2b46e831d3fe455e277193873edfc3f2f3dabcd70f451af377e8d12c710f4fc8a70e42f8509bdad1dd2390c1fe2e7740d5a31883c26e93b6a23bf8ef3219055c568cbbd316187c7ee5f6f8ded502d027689ec4b4f95757bae2cdfb08cec574881c37f9473798806a6a06aca741f13caac8249d0ada", 0x8f}, {&(0x7f00000001c0)="09e0024abcdca0e8b6f50016e3", 0xd}, {&(0x7f0000000200)="98a8e9e2a18bd143500933760c8d3019c98af79cb47b3f59d402cff2c66e9fa88ad6f216043f36b02f89697e578d19", 0x2f}], 0x3, &(0x7f0000000280)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_retopts={{0xd0, 0x0, 0x7, {[@rr={0x7, 0xf, 0x9, [@broadcast, @remote, @remote]}, @timestamp_addr={0x44, 0x1c, 0xbd, 0x1, 0xa, [{@private=0xa010102, 0x48}, {@rand_addr=0x64010102, 0xfffffffe}, {@multicast2}]}, @cipso={0x86, 0x53, 0xffffffffffffffff, [{0x7, 0xd, "6fc7b42efcc96e04ff8561"}, {0x1, 0xa, "c3898f4cd70a6df3"}, {0x0, 0xc, "0046787a0840445a4aef"}, {0x6, 0xe, "976d5f5ce1701c9d67b64cdd"}, {0x6, 0xa, "63bd32d2d73b30ca"}, {0x0, 0x12, "1ca2307145604eb6f9ac598b794b528e"}]}, @rr={0x7, 0x1b, 0x48, [@dev={0xac, 0x14, 0x14, 0x34}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}]}, @cipso={0x86, 0x24, 0x3, [{0x2, 0x2}, {0x2, 0x7, "8aaa2e8037"}, {0x7, 0x6, "31b8fdfa"}, {0x1, 0x8, "cbd62abca310"}, {0x5, 0x7, "419f6fa473"}]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast2}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8001}}], 0x120}, 0x4000)

2m37.56830677s ago: executing program 5 (id=4810):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a19b3c}, 0x94)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
ioctl$TUNSETFILTEREBPF(r0, 0x8008b705, 0x0)

2m37.404652297s ago: executing program 5 (id=4813):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xb0}}, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, 0x0, 0x17)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3)
sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x20, r4, 0x644ad2ec32b79f57, 0x70bd29, 0x25cfdc03, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001814010000000000000000000800010000000000080003"], 0x20}}, 0x0)

2m37.344691631s ago: executing program 5 (id=4817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0xff05, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x17fef}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000002840)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x10001, @local, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002c40)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x6e}}}, @dstopts={{0x18, 0x29, 0x37, {0x6c}}}], 0x30}}], 0x1, 0x4000000) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r8, &(0x7f0000000d40), 0x0}, 0x20) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x5, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

2m22.270576904s ago: executing program 34 (id=4817):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r4=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0xff05, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x17fef}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x4, 0x0, 0x0, 0x3, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000002840)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x10001, @local, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000002c40)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x6e}}}, @dstopts={{0x18, 0x29, 0x37, {0x6c}}}], 0x30}}], 0x1, 0x4000000) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r7}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r8}, &(0x7f0000000840), &(0x7f0000000880)=r7}, 0x20) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x5, 0xff}, 0x48) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r8, &(0x7f0000000d40), 0x0}, 0x20) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r9 = socket(0x400000000010, 0x3, 0x0) (async)
r10 = socket$unix(0x1, 0x5, 0x0) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r12, {0x10, 0xffe0}, {}, {0x9, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)

22.440520843s ago: executing program 2 (id=5934):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
close(r2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r5 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={r7}, &(0x7f0000000080)=0x8)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x3c, r8, 0x1, 0x0, 0x0, {0x2d}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0)

22.110228512s ago: executing program 2 (id=5939):
syz_emit_ethernet(0x56, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x20, 0x2c, 0x0, @dev, @mcast2, {[@hopopts={0x3c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8001}]}, @dstopts={0x62}], @echo_reply}}}}}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea20864160af3653c000cc00400020208000200030001001400030007b556a737c160f9555b4755bb05251e618200000051f60a84c9f4d4938037e786a6", 0x56}, {&(0x7f0000000140)="7e3f15d6d2ee", 0x6}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

21.860622221s ago: executing program 2 (id=5942):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x0, 0x0, 0x0, 0x3866, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48)
syz_genetlink_get_family_id$batadv(&(0x7f000009f580), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140))
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x9f82238cc0791f9e}, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)

21.5288983s ago: executing program 2 (id=5944):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
sendto$l2tp6(r1, &(0x7f0000000000)="331b5ace7c3bdf4259160e902e29294959bdd08331aa61f910bdccbef92514a1772388cf6bc4c92da472f9720f6bb87e884aad7929f336fcae0513effd02b0edee8740aa867e5975d02c8fd23e6583da9b966fe6ba3e9b7d2fbb6bef325e886755d8", 0x62, 0x40, &(0x7f0000000080)={0xa, 0x0, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2, 0x4}, 0x20) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1901, 0x0)
write$tun(r2, &(0x7f0000000100)={@val={0x0, 0x3}, @val={0x0, 0x1, 0x2, 0x9, 0x4, 0x8}, @ipv4=@icmp={{0xa, 0x4, 0x0, 0x2, 0x11c, 0x68, 0x0, 0x7f, 0x1, 0x0, @multicast2, @loopback, {[@noop, @noop, @end, @rr={0x7, 0xf, 0x69, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x15}, @local]}]}}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xb, "f7b86e1865b8404b7f6023b54ce928ba7424850a1c343841a2087ff640b01a1f72898ed1e53fe315be3d6539a8763daeadaa48bbb7b44dc3d38a9d129b2220a696a56e9f0a5f044046457488170380cd4c65c36d7f973d11d5b42d62cb309bdb922869007ceb84f2af277fef5c53089293ab99da67942accb1541e5df8294ad4165c2982ad905849ddcc300cac0b27217d05857f0936b52ebfaef8efc012ee7beaee5d3b670cfb6c6fd8c32f1cb4027047fd4cb6ca14825430edb20691b5bcffe4659f48edf74345d240b65827e24fe700bb998afbf5f82e0087cbc1503312729a07d0221d472b90fa4f2da7"}}}, 0x12a)
r3 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x40) (async)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x44042, 0x0)
ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000380)={0x1, 0x6, [@broadcast, @broadcast, @multicast, @random="74cf9f285173", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote]})
getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f00000003c0)={@multicast2, @broadcast, @remote}, &(0x7f0000000400)=0xc)
ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, &(0x7f0000000440)) (async)
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000480)={0x0, 0x6}) (async)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = bpf$ITER_CREATE(0x21, &(0x7f00000004c0), 0x8)
connect$pppl2tp(r5, &(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x1, 0x2, 0x1, {0xa, 0x4e24, 0xa000000, @remote, 0xffffffff}}}, 0x32) (async)
ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000540)) (async)
setsockopt$CAN_RAW_FD_FRAMES(r6, 0x65, 0x5, &(0x7f0000000580), 0x4) (async)
ioctl$OCFS2_IOC_GROUP_ADD(r3, 0x40186f02, &(0x7f00000005c0)={0x0, 0x2, 0x1, 0x9}) (async)
getpeername$netlink(r0, &(0x7f0000000600), &(0x7f0000000640)=0xc) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'team_slave_0\x00', <r7=>0x0}) (async)
bind$802154_raw(r6, &(0x7f00000006c0)={0x24, @none={0x0, 0x3}}, 0x14) (async)
ioctl$AUTOFS_IOC_SETTIMEOUT(r4, 0x80049367, &(0x7f0000000700)=0x7)
sendmsg$alg(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="1f167b1eb962b069199b60a34618469664d61d139c10320c0562f9e96407afb8ef3e6050d817563caa6d76bed8148f1cd288a5ee09c872342c4c9e7229f7884850dab77b45826143ff04e145bcdc40dcce7a211d0cb0a3ddb14b191315f77359a9ae", 0x62}, {&(0x7f00000007c0)="1df788c90e2faf5dce0435784344fe1a8c6b711d836c56aa", 0x18}, {&(0x7f0000000800)="053713074dadbf954eab17036caf5363f52cf3a391ebde3785ce7ea9962e15622de990295f346542d47d3e715993aea09b63b6c98cef974e8740f33f1dc00cde69", 0x41}], 0x3, &(0x7f00000008c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0xbb}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x110, 0x117, 0x2, 0xfa, "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"}], 0x170, 0x8000}, 0x20000080) (async)
recvmmsg(r6, &(0x7f0000002000)=[{{&(0x7f0000000a80)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000b00)=""/186, 0xba}, {&(0x7f0000000bc0)=""/246, 0xf6}, {&(0x7f0000000cc0)=""/51, 0x33}, {&(0x7f0000000d00)=""/155, 0x9b}, {&(0x7f0000000dc0)=""/41, 0x29}, {&(0x7f0000000e00)=""/167, 0xa7}, {&(0x7f0000000ec0)=""/4096, 0x1000}], 0x7, &(0x7f0000001f40)=""/165, 0xa5}, 0x100}], 0x1, 0x1, 0x0) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000002040), r6)
ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000002080)={{<r8=>0x0, 0x7, 0x1, 0x101, 0x51b8, 0x3, 0x200, 0x101, 0xfffffffa, 0x7, 0x66f, 0x1b8c53a3, 0x4, 0x9, 0xd530}})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000003080)={{r8, 0x3, 0xac6, 0x90e, 0xffffffffffffffff, 0xfff, 0x3, 0x7, 0x6, 0x4, 0x3ab, 0x2, 0x7, 0x0, 0x1}, 0x10, [0x0, 0x0]})
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003140), r6)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r6, &(0x7f0000003240)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003200)={&(0x7f0000003180)={0x44, r9, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async)
socket$nl_generic(0x10, 0x3, 0x10)

21.490903862s ago: executing program 2 (id=5945):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f0000000080)=""/124, &(0x7f0000000040)=0x7c)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={<r3=>0x0, 0x0, 0x20, 0x9, 0x6}, &(0x7f0000000080)=0x18)
getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0x25b7, 0x800a, 0x1, 0x9, 0x0, 0x9, 0x7, r3}, &(0x7f0000000100)=0x20)
setsockopt$inet_int(r2, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4)
connect$inet(r0, &(0x7f0000000400)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000002380)={0x0, 0x1, 0x6, @broadcast}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={<r7=>0x0}, &(0x7f0000000080)=0x8)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000380)={r7, @in={{0x2, 0x4e21, @empty}}, 0x6, 0x25, 0x0, 0xbb, 0x20, 0x2, 0x8}, &(0x7f0000000240)=0x9c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x6e, &(0x7f0000000940)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb8000", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x9, {0x5, 0x6, '\x00', 0x6, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, @mcast2, [], "672fef0f8359cfd4"}}}}}}}, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r7, 0x8}, &(0x7f0000000180)=0x8)
sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x2c, 0x17, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4011}, 0x20002010)
listen(r2, 0x7fffffff)

20.471428063s ago: executing program 2 (id=5959):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xc8, 0x4, 0x0, 0x1, [{0xc4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xb4, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x9f, 0x3, "62e39c344d5c0cad6ada4e087e48c84708cf6f91adc49cb8f99863258a4925576d7e84f9d775ca9b2bb365af79e91102c011194eb69272c5c4ff4b52c56efa53f24655bbbbcfba61ad7fdbf28f9b9bc151bf16986727b379792af742757256e8b11ba66a521446aa07101b4e353410aa393698ce78d39a52e9d5b633d8df18db3176ba34ca38f92fbf97e16392608e7fc8bfd4e6e3bb32550667bf"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x118}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180f010000000000000000000020000000000000", @ANYRES32=r2, @ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000680)=r3, 0x4)
sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

5.412705343s ago: executing program 35 (id=5959):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0xf0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0xc8, 0x4, 0x0, 0x1, [{0xc4, 0x1, 0x0, 0x1, @target={{0xb}, @val={0xb4, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x9f, 0x3, "62e39c344d5c0cad6ada4e087e48c84708cf6f91adc49cb8f99863258a4925576d7e84f9d775ca9b2bb365af79e91102c011194eb69272c5c4ff4b52c56efa53f24655bbbbcfba61ad7fdbf28f9b9bc151bf16986727b379792af742757256e8b11ba66a521446aa07101b4e353410aa393698ce78d39a52e9d5b633d8df18db3176ba34ca38f92fbf97e16392608e7fc8bfd4e6e3bb32550667bf"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x118}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x1}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f0000000900)=ANY=[@ANYBLOB="180f010000000000000000000020000000000000", @ANYRES32=r2, @ANYRESHEX=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000680)=r3, 0x4)
sendmsg$inet(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40)
r6 = epoll_create(0x5)
epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r2)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

2.14077998s ago: executing program 0 (id=6187):
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x2001, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "dbdd9ede7e2313a7a23925f03dbbcf5cde982cab6b38bf7b463ae5f42c35dd1d", "6a7710ebcf55344ae76b375fa62e3502b74659d7dbde072d61b6238412ad5f1a0a4f358515e45cea781c9e9b26806f68", "dd72b3bd460f4ebd662f8cd823dfd0d963970deffa6dd57d8176d2b5", {"4e3bc06c34c945e45e27e747494b407f", "256d9ddc3e6e1f7c5f7b4c5e69c1dd72"}}}}}}}, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000000)="170000000a00020000ffbe8c5ee17688a2002b00010100000057fc5ad90200fb6a880000d6c9db0000db15d088bd8b7002300e00d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c805bbf9315033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e60500", 0x105)
ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1, 0x3}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000080)=@srh, 0x8)
setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000100)=ANY=[], 0x68)
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, ["", "", "", ""]}, 0x14}}, 0x4081)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a01040000000000000000050000004a9d224c0af88aa82408000b40000000002c0004802800018007000100637400001c0002800800014000000015050003000000000008000240000000080900010073797a30000000001400000011000100000000"], 0xc8}}, 0x0)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc)

1.905769264s ago: executing program 0 (id=6191):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf250202020009dbff3f132e47fc4f0073797a3100000000"], 0x2c}, 0x1, 0x40030000000000, 0x0, 0x800}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0xa0}, 0x1)

1.705198073s ago: executing program 0 (id=6193):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000180)={<r1=>r0, &(0x7f0000000080)='\x00', 0xc8800, &(0x7f00000000c0)={@align=0x2, {0x8, 0x0, 0x5, 0xfffffffffffffff8}}, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x80000000})
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r3, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r1)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x18018}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x10c, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xf}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff6}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x27}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd36}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x81}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8000)
getpeername(r1, &(0x7f0000000580)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000600)=0x80)
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4080880}, 0x40080)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'vcan0\x00', <r6=>0x0})
clock_gettime(0x0, &(0x7f00000007c0)={<r7=>0x0, <r8=>0x0})
sendmsg$can_bcm(r1, &(0x7f00000008c0)={&(0x7f0000000780)={0x1d, r6}, 0x10, &(0x7f0000000880)={&(0x7f0000000800)={0x5, 0x8, 0xffff71a2, {r7, r8/1000+10000}, {0x0, 0xea60}, {0x2, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x1, 0x1}, 0x6, 0x1, 0x0, 0x0, "67c778c6ce72106ac4acbc90f67bb1741e72ba86b7977ac0afe9e6ce8f5bb210f05c6918b4ea77a2db45b503ec6d098c2fd5e9f9dc8ffc209a48f1db84956d6d"}}, 0x80}}, 0x20040811)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000940)={0x2, &(0x7f0000000900)=[{0x0, 0xfb, 0x3, 0xffffffe5}, {0xb, 0xb, 0x6, 0x7}]}, 0x10)
read(r2, &(0x7f0000000980)=""/4096, 0x1000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000019c0)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, r3, 0x100, 0x10001, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x4040081)
pipe(&(0x7f0000001ac0)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$IPVS_CMD_NEW_DAEMON(r10, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b40)={0x7c, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x105}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x9}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x22}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x44080}, 0x44400)
getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001c80)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r12=>0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001d80)=0xe8)
sendmsg$nl_xfrm(r11, &(0x7f0000002080)={&(0x7f0000001c40), 0xc, &(0x7f0000002040)={&(0x7f0000001dc0)=@report={0x264, 0x20, 0x200, 0x70bd29, 0x25dfdbff, {0x6c, {@in6=@mcast1, @in=@multicast1, 0x4e20, 0x101, 0x4e21, 0xb46a, 0x2, 0x0, 0x0, 0x32, r6, r12}}, [@mark={0xc, 0x15, {0x350759, 0x200}}, @lifetime_val={0x24, 0x9, {0x1, 0x6, 0x81, 0x45309aa4}}, @srcaddr={0x14, 0xd, @in6=@loopback}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}, @address_filter={0x28, 0x1a, {@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@local, 0x2, 0x0, 0x70}}, @offload={0xc, 0x1c, {0x0, 0x3}}, @replay_val={0x10, 0xa, {0x70bd2a, 0x70bd28, 0xa0000000}}, @replay_thresh={0x8, 0xb, 0xfffffc01}, @migrate={0x180, 0x11, [{@in6=@empty, @in6=@private0, @in=@empty, @in6=@private1, 0x32, 0x1, 0x0, 0x3500, 0xa, 0xa}, {@in=@remote, @in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x2b, 0x1, 0x0, 0x3501, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x2a}, @in6=@mcast2, @in=@local, @in6=@mcast1, 0x33, 0x2, 0x0, 0x3505, 0xa, 0x2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xff, 0x4, 0x0, 0x0, 0x2, 0x2}, {@in=@local, @in=@empty, @in=@private=0x8001, @in=@broadcast, 0x3c, 0x0, 0x0, 0x3507, 0x2, 0x2}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f00000020c0)={0x0, 0x4e91, 0x9})
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r10, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x18, 0x1412, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008080}, 0x4885)
getsockname$packet(r10, &(0x7f0000002200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000002240)=0x14)
r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000022c0), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000002380)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x40, r13, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x4804}, 0x48004)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r11, 0x84, 0x10, &(0x7f00000023c0)=@assoc_value={0x0, 0x2}, &(0x7f0000002400)=0x8)

1.588064017s ago: executing program 6 (id=6196):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
r5 = socket(0x1, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0)
socket$kcm(0x21, 0x2, 0xa)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x3, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x20)
close(0x4)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x400000000000235, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)

1.460841957s ago: executing program 7 (id=6197):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="5402000017000100000000000040523ee83c00000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13340000000000005ab9594700"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "00e200"}]}]}, 0x104}}, 0x4)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)

1.361139937s ago: executing program 4 (id=6198):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x220, 0xffffffff, 0xffffffff, 0x220, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast1, [0xff0000ff, 0xff0001fe, 0xff000000, 0xffffff00], [0xffffffff, 0xffffffff, 0x0, 0xff000000], 'pim6reg1\x00', 'bridge0\x00', {0xff}, {0xff}, 0x87, 0xb, 0x3, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x7ff, 0x101}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, [], [0xffffffff], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x87, 0x0, 0x0, 0x2}, 0x0, 0x128, 0x150, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x200003, 0x4, 0x7, 0x5, 0x2ca9570ab73812e0, 0xa8}}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x6}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x54}}, 0x0)

1.180780086s ago: executing program 6 (id=6199):
r0 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="d8000000150081044e81f782db44b9040a78080206000000040000a118000300ff05000006000e1208000f0100810401a80016eaa400010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b06218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600000000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccf85df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) (async, rerun: 32)
r2 = socket$inet6(0xa, 0x3, 0x2) (rerun: 32)
setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x48, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, 0xe8) (async, rerun: 32)
bind$inet(r0, &(0x7f0000000300)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async, rerun: 32)
socket$inet_sctp(0x2, 0x1, 0x84)

1.093079415s ago: executing program 4 (id=6200):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800ef012bbd7000000000000a0000000000fd0000000000140005000000000000000000000000000000000208000400", @ANYRES32=r3], 0x38}, 0x1, 0x11}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20018}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0xffffffffffffffff}]}}}]}, 0x40}}, 0x0)

1.091334263s ago: executing program 7 (id=6201):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000000000000200000d000000000000000000002900005f100000000000000000"], 0x0, 0x39}, 0x28)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x31, &(0x7f0000000000)={0x0, 0x0}, 0x10)
bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e20, 0x10001, @empty, 0x3}, 0x1c)
r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0, <r3=>0xffffffffffffffff}, 0x4)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x40, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x2}]}]}, 0x40}}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r6}, &(0x7f0000000080), &(0x7f0000000340)=r7}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x5, 0xe, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x36, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xff7ffffe}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_idx_val={0x18, 0x8b8351f1d06ae4ad, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2e}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @cb_func={0x18, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711007000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)

1.023400492s ago: executing program 6 (id=6202):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000500)={0x494, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0x478, 0x8, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1cd91aa5531c542f68112937039f21b52a36af8f6ed59c55ff0cd13745e4751a"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "00d5f011f728efd7bb2d97f6cacc655276d86d746a56c75c70deb43146f21f59"}]}, {0x3f8, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x168, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a9f8b9931f4e52421e476e5ec077385b77ede35712b7bfd296e0e3196baef444"}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}}, @WGPEER_A_ALLOWEDIPS={0xe0, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0x160, 0x9, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x494}, 0x1, 0x0, 0x0, 0x8006}, 0x24048815)

956.168809ms ago: executing program 7 (id=6203):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10011}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = socket(0x23, 0x80000, 0x101)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1)

869.040536ms ago: executing program 4 (id=6204):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x3, 0x2)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
r4 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r4, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10)
sendmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5)
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a340977770a89"], 0xa)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="0580c200000050a245d5cde0080045000028000087567853907800001b00ffffffff12009078e000000200000000000000000000000076b1825c222dd774043ce2f4af0379a39a69d39a6d3a1f03eb3ed2ea5950e2d140c73281553b91174073292f01f731869210efb2a601bc20ec2b215d0693e9f45a30cfa13f8ff4de917c6b21be7e916bfcf8e66e39f28b3c07eceabcdc6808497e2b673e576e463e8da522a0f5b4491dbd974d7e5e60c6fde13a78c932326f923afd3ec0c94041a6815af2bf18784b9d2f9c64072a5e0e0637f27bbfb777eb928a3d684dbe0834e9b2d60000000000000000"], 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a010100d7b90000001653dcf800000a0000000900020073797a30000000000900010073797a31000000000900020073797a3200000000140000001100010000000000000000000000000a2743433b40b6802e3343f6d886bbb5849aa93c6bd260990cefd849098ae0bf435f9867fe30f9d91502d483040282c2f6594b465c7bfcf218c45098f85757c1bd847575186d379193ff3768c8e33c35b0214cbf78608527fa58f1aedf28fe476aff902dd2c1fd88a1"], 0x60}, 0x1, 0x0, 0x0, 0x44010}, 0x20004800)
close(0x3)
openat$cgroup_ro(r1, &(0x7f0000000240)='memory.stat\x00', 0x0, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x0, 0x26, 0x0, 0x5, 0x71e}, 0x28)
ioctl$XFS_IOC_DIOINFO(r5, 0x800c581e, &(0x7f0000000000))

859.55971ms ago: executing program 6 (id=6205):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000009500001b95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000085100000030000001800000000000000000000000000000095"], 0x0}, 0x94)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000040))
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

739.821149ms ago: executing program 4 (id=6206):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
sendmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYRES8, @ANYBLOB="f310559d50a085e17f5a3c7a6adc6e86d027c747a3393922a761d755b5137f9f8030dad41de20b8e81bbac07fcd7e2226a9d21344b4948eff77603a6627d3ffb671d1f07bbefc0ab7250de3b8439e1a4a13bbe5e07975dc48deb5f34f7c714f2c925cc0ee3ac3d136b971aaa256f508da0b91ec951983f26d17b182c61a78e9040ec97f206d104348b5d2113d61c1007954544e8598c618a0eee08f1b67d7c5a1071e8f422", @ANYRES8=r0, @ANYRES32=r0, @ANYRES64=r0, @ANYRES8=r0], 0x18, 0xe000}, 0x5}], 0x1, 0x4000000)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000180))
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x1000, 0x5, 0x800, 0x52c7, 0x8}, &(0x7f00000006c0)=0x14)
listen(r2, 0x8)
r3 = accept4(r2, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000080), 0x8)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000280)={<r5=>0x0, 0x4}, &(0x7f00000002c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000300)={r5, 0x8}, 0x8)
clock_gettime(0xfffffffffffffffd, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', <r6=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="28a65584bb000000100001000000000000000000", @ANYRES32=r6, @ANYBLOB="688100000000000008000f0005000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000080)
r7 = socket$netlink(0x10, 0x3, 0x9)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0)
openat$cgroup_ro(r8, &(0x7f0000000380)='memory.numa_stat\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00'})
sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x3f2, 0x1, 0x70bd2d, 0x25dfdbff, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000810}, 0x24008005)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x3)
r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r9, 0x0, 0x2, 0x0, &(0x7f00000000c0))
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x4, r6, 0x1}, 0xc)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000107000000810000000003"], 0x14}}, 0x0)
recvmmsg(r10, &(0x7f0000005680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r10)
sendmsg$nl_generic(r10, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xa0, 0x32, 0x10, 0x70bd25, 0x25dfdbfd, {0x1c}, [@nested={0x84, 0xec, 0x0, 0x1, [@nested={0x4, 0x15a}, @generic="6c3b4e57738e11cc3dea368573aff85c990cc765cfbc190be70facb251b1c7ae53bacab011e37fd207c70db4015dbdf119457bf199d54b759c3752aa436ea3c953173bc0dbe06fe0eeaef70bcb130283ee2917f3a62d0f938418e7434440a8a836c65642a18cec55c158c440f88e410b5c5454b7b6dfc33cd12b80d5"]}, @nested={0x8, 0x9, 0x0, 0x1, [@nested={0x4, 0x20}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x880}, 0x44894)

416.934091ms ago: executing program 0 (id=6207):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0x8, 0x1, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}], &(0x7f0000000000)='GPL\x00'}, 0x94)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa2, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x20000, 0x0, {0x1}}, 0x14}}, 0x4000)
socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x1, &(0x7f00000001c0)=@raw=[@jmp={0x5, 0x1, 0x8, 0x1, 0x5, 0xfffffffffffffff0, 0xffffffffffffffff}], &(0x7f0000000000)='GPL\x00'}, 0x94) (async)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xffffffffffffffa2, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x3a, 0x301, 0x20000, 0x0, {0x1}}, 0x14}}, 0x4000) (async)

416.145432ms ago: executing program 7 (id=6208):
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1a}, 0x20)
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x3ec, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3000, 0x23}}}}, [@NL80211_ATTR_BEACON_HEAD={0x2d2, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_a, @device_a, @initial, {0x8, 0xc}}, 0x7, @default, 0x1, @void, @val={0x1, 0x4, [{0x3, 0x1}, {0xc}, {0x60}, {0x1, 0x1}]}, @val={0x3, 0x1, 0x99}, @val={0x4, 0x6, {0x2, 0xe, 0x8, 0x9}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @void, [{0xdd, 0x98, "1cd73fd02919baf3d165ae0702eeb5692f7cd2c72b7003239f69155f51a94e63d084233dc665aff0c15e0b22bd376b23671f232f03baa89f19964a1cd6bec0a75dbf385b57e987e37d965cc7edcc53458e85e22753dfd2ba1077e8ac28090e5e92dfdbdfc5e8f8967a231af0f6afc9c94fd22ba19038460d687c55333ba73096b83d5df9b0b66a95a8bc0ca33d51064cf85e662c17fc8794"}, {0xdd, 0xde, "dc90c9da1edc94fb72f6a1f8742462b58f466fd9d8148cd46ac551cee441ab4c1cbf47674720d8a37a8092c277bcdb93c80f062830707323935259d250f5bce3e21e225cb9777c34344ac0ee5219aaa413b404e49c96d9c90ec057b2b21c41bfeb86f180c4c3e3b382fe57710f1bd9d559e52bde845f29475517e1854005e2631dc8159e68f12f7a22c705c4753f4354999eb71c21aef71fb27c502df7174ad4c3b4b626989681a7ca4f9eff4bf12271d5294484d5453ff50db47c5a15592bb5d697f31d56c7b5902e5ea57ad42a7d48b2037692d3f732529c4e1ad91d35"}, {0xdd, 0x20, "56d87c9ea239e9f72a584ebe11e6e4fa4636587dff55c760c268513c1a1337ee"}, {0xdd, 0xe7, "f149b65af668a0a51f7b3539e599b0d581e70b6dc1b94e7d394e005ad4b35bcf7c06b2edec06a9e7701c361c7089f8002942493970e187bbf10c638601114d4f78c3758dfcbd872ccc9fd89043d0a8cd9df4a3003f8f632ddfafd80433b9b9b881b8d1dac1944b40bb39ddd6853ffb57efa184b69424e5a1b0a946908ae38c589be5fe2808665e7e498b0999179636c2997795a1306573a1fba95c84cd9f35804248164ceab8aeeac6f6ed581393bf7decab83938d5050d7ee52e3fa0941bebaa1ad85101f266e6f2c7a0833b8c54c5c4cd2997cbb9e61c8193e3fdc9a5c51da63571b701901fe"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xef, 0x7f, [@tim={0x5, 0xe1, {0xb3, 0xa7, 0x81, "494a4bcfd277da25ba654ed2762cdeaed63a5ab59664e162eea70f6761c2eb32aab2e4f75c69f050847c251f4e32537d254db74fec726a5817b98fb866a042e9274b1c64ae1807c353189a48d62aa1a4f9451cb62c0bb5210cabc7a932ef16f7e088d7514265674aa29392cd0e8c3ba013632f816786fa95cda74278c744ff3627e75c5d8b3d0f9f910bbcc80e09917a6239af74056eebb73af3f03915accaecf153c5bba64d6f38d283d1171b12250c416a600608b5d9de05148341cf5e0592e5c15ff2c8283ddf3420431acbf4db2800acaf740ede26fcce63b54e7c4c"}}, @channel_switch={0x25, 0x3, {0x1, 0x8, 0x1}}, @dsss={0x3, 0x1, 0xb7}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1a}, 0x20) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) (async)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000001c0)={0x3ec, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x3000, 0x23}}}}, [@NL80211_ATTR_BEACON_HEAD={0x2d2, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x81}, @device_a, @device_a, @initial, {0x8, 0xc}}, 0x7, @default, 0x1, @void, @val={0x1, 0x4, [{0x3, 0x1}, {0xc}, {0x60}, {0x1, 0x1}]}, @val={0x3, 0x1, 0x99}, @val={0x4, 0x6, {0x2, 0xe, 0x8, 0x9}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x9, 0x20}}, @void, [{0xdd, 0x98, "1cd73fd02919baf3d165ae0702eeb5692f7cd2c72b7003239f69155f51a94e63d084233dc665aff0c15e0b22bd376b23671f232f03baa89f19964a1cd6bec0a75dbf385b57e987e37d965cc7edcc53458e85e22753dfd2ba1077e8ac28090e5e92dfdbdfc5e8f8967a231af0f6afc9c94fd22ba19038460d687c55333ba73096b83d5df9b0b66a95a8bc0ca33d51064cf85e662c17fc8794"}, {0xdd, 0xde, "dc90c9da1edc94fb72f6a1f8742462b58f466fd9d8148cd46ac551cee441ab4c1cbf47674720d8a37a8092c277bcdb93c80f062830707323935259d250f5bce3e21e225cb9777c34344ac0ee5219aaa413b404e49c96d9c90ec057b2b21c41bfeb86f180c4c3e3b382fe57710f1bd9d559e52bde845f29475517e1854005e2631dc8159e68f12f7a22c705c4753f4354999eb71c21aef71fb27c502df7174ad4c3b4b626989681a7ca4f9eff4bf12271d5294484d5453ff50db47c5a15592bb5d697f31d56c7b5902e5ea57ad42a7d48b2037692d3f732529c4e1ad91d35"}, {0xdd, 0x20, "56d87c9ea239e9f72a584ebe11e6e4fa4636587dff55c760c268513c1a1337ee"}, {0xdd, 0xe7, "f149b65af668a0a51f7b3539e599b0d581e70b6dc1b94e7d394e005ad4b35bcf7c06b2edec06a9e7701c361c7089f8002942493970e187bbf10c638601114d4f78c3758dfcbd872ccc9fd89043d0a8cd9df4a3003f8f632ddfafd80433b9b9b881b8d1dac1944b40bb39ddd6853ffb57efa184b69424e5a1b0a946908ae38c589be5fe2808665e7e498b0999179636c2997795a1306573a1fba95c84cd9f35804248164ceab8aeeac6f6ed581393bf7decab83938d5050d7ee52e3fa0941bebaa1ad85101f266e6f2c7a0833b8c54c5c4cd2997cbb9e61c8193e3fdc9a5c51da63571b701901fe"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0xef, 0x7f, [@tim={0x5, 0xe1, {0xb3, 0xa7, 0x81, "494a4bcfd277da25ba654ed2762cdeaed63a5ab59664e162eea70f6761c2eb32aab2e4f75c69f050847c251f4e32537d254db74fec726a5817b98fb866a042e9274b1c64ae1807c353189a48d62aa1a4f9451cb62c0bb5210cabc7a932ef16f7e088d7514265674aa29392cd0e8c3ba013632f816786fa95cda74278c744ff3627e75c5d8b3d0f9f910bbcc80e09917a6239af74056eebb73af3f03915accaecf153c5bba64d6f38d283d1171b12250c416a600608b5d9de05148341cf5e0592e5c15ff2c8283ddf3420431acbf4db2800acaf740ede26fcce63b54e7c4c"}}, @channel_switch={0x25, 0x3, {0x1, 0x8, 0x1}}, @dsss={0x3, 0x1, 0xb7}]}]}, 0x3ec}, 0x1, 0x0, 0x0, 0x40010}, 0x20004000) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008000b00736970"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)

390.207555ms ago: executing program 6 (id=6209):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c010000100013070000000000000000ac1414bb00000000000000000000000000000000000000000000ffffac14140000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff0100000000000000000000000000010000000032000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000002bbd7000000000000200000000000000000000004c00120061656769733132386c2d6117736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080"], 0x13c}}, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101842, 0x0)
ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x40047452, 0x0)
ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0xb, 0x4, 0x3, 0x7}]})
r4 = socket(0x26, 0x3, 0x3)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, 0x52, 0x3ab3666c4349b199, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
socket$nl_audit(0x10, 0x3, 0x9)
getsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000000c0), &(0x7f0000000100)=0x4)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x2, 0x7, @vifc_lcl_addr=@multicast2, @broadcast}, 0x10)
setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f0000000040)=0xd0, 0x4)
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d004e24000006001c"], 0x2c}}, 0x0)
setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000080)=0x4, 0x1)

389.695752ms ago: executing program 7 (id=6210):
r0 = socket$kcm(0xa, 0x922000000003, 0x11)
socket$netlink(0x10, 0x3, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2002}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0\x00', <r4=>0x0})
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000040)={r4, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x9}}, 0x10)
setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @remote}, 0x10)
write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000cc0)=0x2300, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan1\x00'})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000008c0)={'virt_wifi0\x00', &(0x7f00000007c0)=@ethtool_drvinfo={0x3, "a138fb1f9492db9fe417b3de0dc411f4be81e902cb8ad5ef160c3e91c8864bb7", "c74bc4ef2a0425cefce2c7579110656b869d50da807f8ce7eb61814a429da10f", "4143b5a7b3752f1fa33f9474bb9787fed87fd666facd431277f34724409c761c", "4ea34884b1e011143195b2d3bd9b36c6b9a1e472440ca265d7f6f1660c6dc12a", "a646ed89db088d4f147cea6360ac305aa1328e4ab21a28764b42e0c6e6e52867", "18f1342f43747e64fe9c3e69", 0x18, 0x3, 0x10000, 0xeef6105, 0xfffffff5}})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x1113, r5, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d3ca7", 0x2a}, {&(0x7f00000000c0)="6312c7f272e99d50a5ee6d14bb4ebf58d0cef2514cb431523a55a02b13859f5b26767c", 0x23}, {&(0x7f0000000100)="91524dc1f1c32310b68106f354be889eb6716feb6fe4a37cdd6d2655926e35abfc66e895ec8b0f1ffcd89ca9e91e8669978e9fd2fe38dbee6bc2faa099f78bb49cda6725f20026e484c25a884ea10836a420899a7fb34d589fb9be8a96f0ca43fcfc9bfb33d34465606ec5c27c2cc48c8ad62b1cd890acc74bd070735dd8acb8e879c5f38b1e91ba2712d88e006a0e0d87c910b86bf9be8ad84bf3f89303882d0a0f2b88750f9fa231f29b99", 0xac}], 0x3}, 0x20008060)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'veth1_vlan\x00', {'wg0\x00'}, 0x100})

389.223741ms ago: executing program 0 (id=6211):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x6011, r1, 0x0)

384.330597ms ago: executing program 4 (id=6212):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'wg1\x00', {0x2, 0x4e21, @private=0xa010100}})
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)

325.529167ms ago: executing program 0 (id=6213):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c10277582b9", 0x20)
recvmmsg(r1, &(0x7f00000021c0), 0x5b, 0x2, 0x0)
ppoll(&(0x7f00000001c0)=[{r0, 0x5107}], 0x1, &(0x7f0000000200)={0x0, 0x3938700}, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r3)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003"], 0x0, 0x37}, 0x28)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r3}, 0x8)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)={&(0x7f0000002100)=ANY=[@ANYBLOB="280927bd7000ffdbdf0d00"/20, @ANYRES32=0x0, @ANYBLOB="00000000010c020008001b00ff030000"], 0x28}}, 0x0)
ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f00000000c0)=r7)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x5}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x200000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040845}, 0x4000000)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000240)={'wg1\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r5, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="78010000", @ANYRES16=r11, @ANYBLOB="00022abd7000fddbdf250d0000000c0001800800030001000000500001801400020076657468315f746f5f6261746164760008000100", @ANYRES32=r9, @ANYBLOB="1400020077673100000077633946000000000000000000000800030001000000140002006272696467655f736c6176655f31000028000180080003000200000008000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f746f5f7465616d0000006c0001801400020076657468305f746f5f626f6e64000000140002006d6163766c616e300000000000000000140002006e657464657673696d3000000000000008000100", @ANYRES32=r9, @ANYBLOB="14000200776c616e300000000000000000000000080003000000000008000100", @ANYRES32=r9, @ANYBLOB="1400018008000300010000000800030001000000600001801400020070696d36726567310000000000000000140002007369743000000000000000000000000008000100", @ANYRES32=r9, @ANYBLOB="140002007866726d300000000000000000000000080003000300000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB], 0x178}, 0x1, 0x0, 0x0, 0x814}, 0x20000000)
r13 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r13, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0xd7, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14)

257.593753ms ago: executing program 6 (id=6214):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00'})
pipe(&(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8)
write(r2, &(0x7f0000000340), 0x11000)
vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f00000001c0)="adba69b8faf1fafbc15e7fee388d121381cf70f5f5cea82140b46a3b8d7234cde6eb75f3b89d275bd9ed38ec804a94c3c637ed69c4c04b7ad6ea2908ac095e0f", 0x40}], 0x1, 0xf)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00010000b424d7d58bc8453e"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x94)
r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
writev(r5, &(0x7f0000000240)=[{&(0x7f00000018c0)="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", 0x1000}, {&(0x7f0000001380)="625acd8f38fb2d83d2e0aa839a894c77c03015b83731793e2a2fa534307fbbf2c990592cb642f557ecb70bbe625ae3248727161901baaa286f0cd36aafeb5c1d487e8506490fe0616a2af6"}], 0x4b)
sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0xfffd, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0xffffffffffffffbf, &(0x7f0000000280)=[{&(0x7f0000000180)="f9369254c92970a4", 0x8}], 0x1}}], 0x2, 0x40)
r6 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r7 = socket$inet6(0xa, 0x80002, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c)
bind$inet6(r7, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
r9 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c)
r10 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r11 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r11, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)
bind$inet6(r11, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c)
r12 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$sock_int(r12, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4)

182.731905ms ago: executing program 4 (id=6215):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r2, &(0x7f0000000140)={0x1d, r1, 0x3, {0x1, 0xff, 0x4}}, 0x18)
sendmmsg(r0, &(0x7f0000003dc0)=[{{&(0x7f0000000180)=@can, 0x80, &(0x7f0000001600)=[{&(0x7f0000000440)="4e358ed59ee7a636d3a35d9bb1a218701d8f6d70ee6d34b9565d847dddb24e725b783f9101eb20349037dec5", 0x2c}, {&(0x7f0000000600)}], 0x2}}], 0x1, 0x48010)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000000)=0xfffffffd, 0x4)
setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000180)=0x40000000, 0x4)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[], 0x30}}, 0x0)
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15e3000000000000140012800c0001006d61637674617000", @ANYRES32, @ANYBLOB="0a0001"], 0x48}}, 0x0)
sendmmsg$alg(r5, &(0x7f00000000c0), 0x492492492492627, 0x0)
sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400d1efb6374f4fc82efd91250068070000", @ANYRES16=r7, @ANYBLOB="010025bd7000fbdbdf251b00000006002100620000000800010035000000"], 0x24}, 0x1, 0x0, 0x0, 0xf4dd599dff997f7}, 0x20000090)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000009c0)={0x0, ""/256, 0x0, 0x0, <r10=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r9, 0xc0c89425, &(0x7f0000000bc0)={"d743a286ca8e7425673830acffdd79e7", <r11=>0x0, 0x0, {0x6, 0xfffffffa}, {0xb63, 0x3}, 0x0, [0x5, 0x7f, 0x4272, 0x7fffffffffffffff, 0xc, 0x7, 0x3, 0x4, 0x6, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x1ff, 0x7, 0x4]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000cc0)={"ff1d2c406a35a1e1a20b82a6032819cc", r10, r11, {0x4, 0x8}, {0xe, 0x4}, 0x5, [0xb, 0x4, 0x9, 0x5, 0x6, 0x4, 0x20, 0x3, 0x0, 0x3, 0x5, 0x8, 0xfff, 0x9, 0xc9d, 0x5]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"128b2e3f1726982a5dbfc24a7d157727", 0x0, r10, {0x6, 0x9}, {0x45e, 0x8}, 0x0, [0x8000, 0x6, 0x4, 0x1, 0x303, 0xe, 0x0, 0x1ff, 0x6, 0x2, 0xbc9, 0x80, 0x22, 0x8, 0x6, 0x4]})

0s ago: executing program 7 (id=6216):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000440)={@vsock={0x28, 0x0, 0x0, @hyper}, {&(0x7f0000000300)=""/225, 0xe1}, &(0x7f0000000400), 0x21}, 0xa0) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={<r3=>0x0, 0x400, 0x101, 0xfffffff7, 0x9, 0x1}, &(0x7f00000000c0)=0x14) (rerun: 32)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x3, 0x8, 0x3, 0x7f, r3}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) (async, rerun: 32)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async, rerun: 32)
pipe(&(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async, rerun: 64)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (rerun: 64)
write$cgroup_subtree(r6, &(0x7f0000000000)={[{0x6, 'net'}]}, 0x5) (async, rerun: 32)
splice(r5, 0x0, r7, 0x0, 0x3, 0x4) (rerun: 32)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) (async)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c9, &(0x7f0000000100))

kernel console output (not intermixed with test programs):

84] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4498'.
[  390.162903][T22082] bridge0: entered promiscuous mode
[  390.190575][T22082] macsec3: entered promiscuous mode
[  390.233946][T22082] macsec3: entered allmulticast mode
[  390.243480][T22082] bridge0: entered allmulticast mode
[  390.251985][T22082] bridge0: port 1(macsec3) entered blocking state
[  390.259035][T22082] bridge0: port 1(macsec3) entered disabled state
[  390.274520][T22082] bridge0: left allmulticast mode
[  390.279963][T22082] bridge0: left promiscuous mode
[  390.298159][T22089] syzkaller0: MTU too low for tipc bearer
[  390.305470][T22089] tipc: Disabling bearer <eth:syzkaller0>
[  390.371248][T22097] xt_addrtype: ipv6 does not support BROADCAST matching
[  390.443450][T22100] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4503'.
[  390.458351][T22101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  390.630744][T22111] sctp: [Deprecated]: syz.2.4504 (pid 22111) Use of int in max_burst socket option.
[  390.630744][T22111] Use struct sctp_assoc_value instead
[  390.762520][T22117] netlink: 'syz.2.4508': attribute type 1 has an invalid length.
[  390.837576][ T5837] Bluetooth: hci4: command 0x0406 tx timeout
[  390.958294][T22139] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4512'.
[  391.092865][T22146] netlink: 40128 bytes leftover after parsing attributes in process `syz.4.4517'.
[  391.133934][T22148] netlink: 'syz.0.4516': attribute type 3 has an invalid length.
[  391.155491][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4516'.
[  391.296105][T22161] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  391.387399][T22172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4526'.
[  391.703316][T22197] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20000
[  391.726094][T22200] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4535'.
[  391.752089][T22200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4535'.
[  391.812987][T22204] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  391.852387][T22204] tipc: Failed to remove unknown binding: 66,1,1/0:738562689/738562691
[  391.861609][T22204] tipc: Failed to remove unknown binding: 66,1,1/0:738562689/738562691
[  391.890375][T22211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4538'.
[  391.910524][T22211] ip6tnl3: entered promiscuous mode
[  392.182492][T22231] netlink: 'syz.0.4546': attribute type 1 has an invalid length.
[  392.394772][T22237] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  395.959086][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  408.603049][T22159] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  408.824942][  T142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  408.835633][  T142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  408.880019][  T142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  408.890348][  T142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  408.939591][  T142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  408.950755][  T142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  408.978624][  T142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  408.989019][  T142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0
[  409.148961][  T142] bond3 (unregistering): (slave ip6gretap1): Releasing active interface
[  409.157471][  T142] ip6gretap1 (unregistering): left allmulticast mode
[  409.265324][  T142] bond2 (unregistering): (slave gretap1): Releasing active interface
[  409.305391][  T142] dvmrp0 (unregistering): left allmulticast mode
[  409.363724][  T142] bond5 (unregistering): (slave bridge1): Releasing backup interface
[  409.495767][  T142] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  409.509658][  T142] bond0 (unregistering): Released all slaves
[  409.519571][  T142] bond1 (unregistering): Released all slaves
[  409.532061][  T142] bond2 (unregistering): Released all slaves
[  409.544402][  T142] bond3 (unregistering): Released all slaves
[  409.562226][  T142] bond4 (unregistering): Released all slaves
[  409.575111][  T142] bond5 (unregistering): Released all slaves
[  409.588437][  T142] bond6 (unregistering): Released all slaves
[  409.604336][ T5489] 8021q: adding VLAN 0 to HW filter on device eth1
[  409.661233][  T142] : left promiscuous mode
[  409.749661][  T142] tipc: Left network mode
[  410.052298][ T5489] 8021q: adding VLAN 0 to HW filter on device eth2
[  410.101323][  T142] hsr_slave_0: left promiscuous mode
[  410.120051][  T142] hsr_slave_1: left promiscuous mode
[  410.550634][ T5489] 8021q: adding VLAN 0 to HW filter on device eth3
[  410.906461][ T5489] 8021q: adding VLAN 0 to HW filter on device eth4
[  417.035387][T22329] __nla_validate_parse: 4 callbacks suppressed
[  417.035407][T22329] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4553'.
[  417.126465][T22333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  417.138266][T22334] syzkaller0: entered promiscuous mode
[  417.164812][T22340] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4558'.
[  417.185226][T22334] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  417.254292][T21145] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  417.264508][T21145] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  417.274782][T21145] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  417.284065][T21145] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  417.294907][T21145] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  417.361632][T22346] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  417.433039][T22341] wg1 speed is unknown, defaulting to 1000
[  417.444413][T22341] lo speed is unknown, defaulting to 1000
[  417.547762][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4563'.
[  417.612855][T22358] bond4: option xmit_hash_policy: invalid value (64)
[  417.622270][T22358] bond4 (unregistering): Released all slaves
[  417.717213][T22364] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4564'.
[  417.913679][T22341] chnl_net:caif_netlink_parms(): no params data found
[  417.939685][T22376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4568'.
[  417.966890][T22379] netlink: zone id is out of range
[  417.972048][T22379] netlink: zone id is out of range
[  417.982092][T22380] netlink: zone id is out of range
[  417.989009][T22380] netlink: zone id is out of range
[  417.994799][T22380] netlink: zone id is out of range
[  418.000900][T22379] netlink: zone id is out of range
[  418.006020][T22379] netlink: zone id is out of range
[  418.015065][T22380] netlink: zone id is out of range
[  418.055742][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4571'.
[  418.075445][T22380] netlink: zone id is out of range
[  418.266087][T22341] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.274264][T22341] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.287592][T22341] bridge_slave_0: entered allmulticast mode
[  418.297061][T22341] bridge_slave_0: entered promiscuous mode
[  418.305514][T22341] bridge0: port 2(bridge_slave_1) entered blocking state
[  418.313064][T22341] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.324334][T22341] bridge_slave_1: entered allmulticast mode
[  418.331980][T22341] bridge_slave_1: entered promiscuous mode
[  418.373514][T22341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  418.401878][T22341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  418.482762][T22341] team0: Port device team_slave_0 added
[  418.503911][T22341] team0: Port device team_slave_1 added
[  418.556949][T22414] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4577'.
[  418.567521][T22414] tc_dump_action: action bad kind
[  418.574525][T22341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  418.587533][T22341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.695532][T22341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  418.740093][T22341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  418.764217][T22341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  418.830761][T22341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  418.926493][T22431] netlink: 'syz.2.4582': attribute type 1 has an invalid length.
[  418.940456][T22341] hsr_slave_0: entered promiscuous mode
[  418.958584][T22341] hsr_slave_1: entered promiscuous mode
[  418.964908][T22341] debugfs: 'hsr0' already exists in 'hsr'
[  418.976872][T22341] Cannot create hsr debugfs directory
[  419.013401][T22431] bond4: entered promiscuous mode
[  419.019536][T22431] 8021q: adding VLAN 0 to HW filter on device bond4
[  419.085484][T22431] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  419.107700][T22431] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  419.121960][T22431] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  419.263855][T22437] wg1 speed is unknown, defaulting to 1000
[  419.401461][T22437] lo speed is unknown, defaulting to 1000
[  419.407240][T21145] Bluetooth: hci4: command tx timeout
[  419.715209][T22460] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4589'.
[  419.963859][T22473] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4592'.
[  420.097866][T22473] bond1: Invalid ad_actor_system MAC address.
[  420.104133][T22473] bond1: option ad_actor_system: invalid value (1)
[  420.116346][T22473] bond1 (unregistering): Released all slaves
[  420.511069][T22489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4596'.
[  420.521702][T22341] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  420.577843][T22341] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  420.602619][T22341] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  420.638111][T22341] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  420.669181][T22341] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  420.730234][T22341] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  420.748399][T22341] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  420.820725][T22341] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  421.091147][T22527] netlink: 'syz.2.4606': attribute type 1 has an invalid length.
[  421.212787][T22341] 8021q: adding VLAN 0 to HW filter on device bond0
[  421.239940][T22534] macvlan0: entered promiscuous mode
[  421.290908][T22341] 8021q: adding VLAN 0 to HW filter on device team0
[  421.477356][T21145] Bluetooth: hci4: command tx timeout
[  421.498899][T22341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  421.589205][T22341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  421.655518][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state
[  421.662718][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state
[  421.721905][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state
[  421.729114][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  422.040125][T22594] __nla_validate_parse: 76 callbacks suppressed
[  422.040145][T22594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4618'.
[  422.134370][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4619'.
[  422.159501][T22597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4619'.
[  422.213765][ T6303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  422.234364][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4619'.
[  422.245929][ T6303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  422.268046][T22341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  422.278998][T22597] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4619'.
[  422.301321][T22602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4619'.
[  422.311445][T22604] netlink: 'syz.0.4620': attribute type 10 has an invalid length.
[  422.317035][T22597] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4619'.
[  422.328288][T22604] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4620'.
[  422.381931][T22597] netlink: 'syz.4.4619': attribute type 6 has an invalid length.
[  422.387461][T22603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  422.422577][T22597] netlink: 'syz.4.4619': attribute type 5 has an invalid length.
[  422.462547][T22597] netlink: 43 bytes leftover after parsing attributes in process `syz.4.4619'.
[  422.785119][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4625'.
[  423.071596][T22645] netlink: 'syz.5.4629': attribute type 1 has an invalid length.
[  423.083564][T22341] veth0_vlan: entered promiscuous mode
[  423.206333][T22661] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  423.218650][T22661] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  423.238861][T22661] bond1: (slave ip6gre1): making interface the new active one
[  423.272380][T22661] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[  423.301519][T22341] veth1_vlan: entered promiscuous mode
[  423.383084][T22341] veth0_macvtap: entered promiscuous mode
[  423.415017][T22341] veth1_macvtap: entered promiscuous mode
[  423.503807][T22341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  423.556882][T21145] Bluetooth: hci4: command tx timeout
[  423.698084][T22341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  423.724964][ T6306] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  423.744452][T22686] net_ratelimit: 27 callbacks suppressed
[  423.744469][T22686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  423.788780][ T6306] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  423.813701][ T6306] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  423.814524][T22694] netlink: 'syz.4.4640': attribute type 11 has an invalid length.
[  423.837270][T22694] netlink: 'syz.4.4640': attribute type 4 has an invalid length.
[  423.838139][ T6306] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  423.845020][T22694] netlink: 'syz.4.4640': attribute type 5 has an invalid length.
[  423.845036][T22694] netlink: 'syz.4.4640': attribute type 6 has an invalid length.
[  424.156056][T22545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.187000][T22545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.341334][ T6303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  424.369546][ T6303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  424.543725][T22741] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  424.938532][T22762] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  424.957911][T22762] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  424.964037][T22762] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  425.340879][T22788] netlink: 'syz.0.4657': attribute type 33 has an invalid length.
[  425.451210][T22794] syzkaller0: entered promiscuous mode
[  425.464070][T22794] 0: reclassify loop, rule prio 0, protocol 800
[  425.637215][T21145] Bluetooth: hci4: command tx timeout
[  425.765020][T22814] netlink: 'syz.6.4664': attribute type 16 has an invalid length.
[  425.793759][T22814] netlink: 'syz.6.4664': attribute type 17 has an invalid length.
[  425.819709][T22815] pim6reg1: entered promiscuous mode
[  425.829488][T22815] pim6reg1: entered allmulticast mode
[  425.985629][T22825] syz.4.4668 (22825) used obsolete PPPIOCDETACH ioctl
[  426.238176][T22849] xt_hashlimit: size too large, truncated to 1048576
[  426.545661][T22860] netlink: 'syz.0.4676': attribute type 1 has an invalid length.
[  427.865579][T22852] �: renamed from vxcan1 (while UP)
[  427.928600][T22872] netlink: 'syz.5.4678': attribute type 12 has an invalid length.
[  428.005099][T22882] netlink: 'syz.0.4680': attribute type 1 has an invalid length.
[  428.013756][T22882] __nla_validate_parse: 5 callbacks suppressed
[  428.013770][T22882] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4680'.
[  428.015886][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4681'.
[  428.046297][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4681'.
[  428.329336][T22907] netlink: 'syz.0.4688': attribute type 21 has an invalid length.
[  428.332531][T22908] netlink: 'syz.4.4689': attribute type 1 has an invalid length.
[  428.337252][T22907] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4688'.
[  428.338169][T22907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4688'.
[  428.391620][T22908] 8021q: adding VLAN 0 to HW filter on device bond4
[  428.417832][T22907] netlink: 'syz.0.4688': attribute type 1 has an invalid length.
[  428.426339][T22907] netlink: 'syz.0.4688': attribute type 2 has an invalid length.
[  428.495835][T22910] bond4: (slave veth5): Enslaving as an active interface with a down link
[  428.517777][T22908] macvlan3: entered promiscuous mode
[  428.524000][T22908] macvlan3: entered allmulticast mode
[  428.534209][T22908] bond4: entered promiscuous mode
[  428.540941][T22908] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  428.549843][T22908] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  428.568291][T22908] bond4: left promiscuous mode
[  428.595420][T22910] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4689'.
[  428.616400][T22919] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4692'.
[  428.693671][T22921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4693'.
[  428.715523][T22924] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.4694'.
[  428.720507][T22921] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.732323][T22921] bridge0: port 1(
0�x9�) entered disabled state
[  428.748664][T22924] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  428.839697][T22929] sock: sock_set_timeout: `syz.5.4696' (pid 22929) tries to set negative timeout
[  428.918546][T22934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4697'.
[  429.294030][T22950] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) !
[  429.559660][T22969] netdevsim netdevsim2 
: renamed from netdevsim0 (while UP)
[  429.836598][T22985] bond5: option arp_all_targets: invalid value (18446744073709551613)
[  429.919106][T22985] bond5 (unregistering): Released all slaves
[  430.032116][T22998] sctp: [Deprecated]: syz.6.4719 (pid 22998) Use of struct sctp_assoc_value in delayed_ack socket option.
[  430.032116][T22998] Use struct sctp_sack_info instead
[  430.102407][T23007] ipt_rpfilter: unknown options
[  430.132320][T23011] xt_cgroup: invalid path, errno=-2
[  430.275338][T23018] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20000
[  430.553945][T23016] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  430.885227][T23001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  431.119005][T23034] bond5: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  431.131654][T23044] xt_hashlimit: size too large, truncated to 1048576
[  431.193079][T23036] veth3: entered promiscuous mode
[  431.295356][T23058] ip6t_srh: unknown srh match flags  4000
[  431.314126][T23049] dvmrp0: entered allmulticast mode
[  431.694199][T23087] xt_hashlimit: size too large, truncated to 1048576
[  431.822329][T23094] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.863233][T23094] bridge_slave_0 (unregistering): left allmulticast mode
[  431.886527][T23094] bridge_slave_0 (unregistering): left promiscuous mode
[  431.904154][T23094] bridge0: port 1(bridge_slave_0) entered disabled state
[  432.159762][T23112] tipc: Resetting bearer <eth:syzkaller0>
[  432.427126][T23124] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.474500][T23128] validate_nla: 5 callbacks suppressed
[  432.474520][T23128] netlink: 'syz.2.4754': attribute type 1 has an invalid length.
[  432.478194][T23126] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  432.504064][T23128] netlink: 'syz.2.4754': attribute type 2 has an invalid length.
[  432.620836][T23128] openvswitch: netlink: Message has 7 unknown bytes.
[  432.771982][T23147] netlink: Unknown conntrack attr (type=2304, max=9)
[  432.998572][T23168] netlink: 'syz.4.4765': attribute type 10 has an invalid length.
[  433.015783][T23168] vxcan1: entered promiscuous mode
[  433.030539][T23168] vxcan1: entered allmulticast mode
[  433.035923][T23168] team0: Device vxcan1 is of different type
[  433.072293][T23170] netlink: 'syz.5.4766': attribute type 1 has an invalid length.
[  433.084429][T23170] __nla_validate_parse: 14 callbacks suppressed
[  433.084449][T23170] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4766'.
[  433.394895][T23192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4767'.
[  433.434978][T23191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4772'.
[  433.504446][T23191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4772'.
[  433.650576][T23212] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4778'.
[  433.673255][T23212] 8021q: VLANs not supported on gre0
[  433.707486][T23215] wg1: entered promiscuous mode
[  433.712601][T23215] wg1: entered allmulticast mode
[  433.721293][T23215] netlink: 'syz.4.4777': attribute type 30 has an invalid length.
[  433.751303][T23215] bond5: option arp_missed_max: invalid value (0)
[  433.758456][T23215] bond5: option arp_missed_max: allowed values 1 - 255
[  433.775230][T23215] bond5 (unregistering): Released all slaves
[  433.837451][T23214] wg1 speed is unknown, defaulting to 1000
[  433.845252][T23214] lo speed is unknown, defaulting to 1000
[  434.185968][T23236] netlink: 'syz.2.4783': attribute type 10 has an invalid length.
[  434.194630][T23236] bond0: (slave wlan1): Opening slave failed
[  436.588724][T23205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  436.751544][T23243] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4786'.
[  436.761728][T23244] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.4784'.
[  436.873448][T23248] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4788'.
[  437.041488][T23262] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4793'.
[  437.053015][T23266] veth0: entered promiscuous mode
[  437.064653][T23266] netlink: 'syz.2.4795': attribute type 39 has an invalid length.
[  437.125522][T23270] bond7: Unable to set down delay as MII monitoring is disabled
[  437.136443][T23270] bond7 (unregistering): Released all slaves
[  437.273040][T23264] veth0: left promiscuous mode
[  437.293618][T23283] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4798'.
[  437.345031][T23283] netlink: 'syz.6.4798': attribute type 10 has an invalid length.
[  437.445479][T23283] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[  437.466386][T23283] bond1 (unregistering): Released all slaves
[  437.611631][T23304] netlink: 'syz.0.4806': attribute type 1 has an invalid length.
[  437.651634][T23299] netlink: 'syz.4.4803': attribute type 1 has an invalid length.
[  437.690457][T23299] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  437.745553][T23310] bond7: (slave geneve4): making interface the new active one
[  437.809601][T23310] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  437.861875][T22553] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0
[  437.887442][T22553] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0
[  437.943721][T22553] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0
[  437.973602][T22553] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0
[  437.996185][T23322] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  438.252407][T23340] __nla_validate_parse: 3 callbacks suppressed
[  438.252422][T23340] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4816'.
[  438.432463][T23354] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4821'.
[  438.501536][T23360] x_tables: duplicate underflow at hook 1
[  439.030861][T23387] netlink: 'syz.0.4832': attribute type 4 has an invalid length.
[  439.100215][T23389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4833'.
[  439.437829][T23410] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4838'.
[  439.467984][T23410] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4838'.
[  439.725113][T23417] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4841'.
[  439.963191][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  439.975926][T23424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4843'.
[  440.062817][T23424] bond6: entered promiscuous mode
[  440.075718][T23424] bond6: entered allmulticast mode
[  440.091952][T23424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4843'.
[  440.179583][T23424] hsr_slave_1 (unregistering): left promiscuous mode
[  440.201567][T23434] x_tables: duplicate underflow at hook 1
[  440.660167][T23463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4856'.
[  440.974642][T23486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4862'.
[  441.081174][T23490] xt_nfacct: accounting object `syz1' does not exist
[  441.092940][T23491] xt_nfacct: accounting object `syz1' does not exist
[  441.238327][T23503] netlink: 'syz.0.4867': attribute type 29 has an invalid length.
[  441.249823][T23503] netlink: 'syz.0.4867': attribute type 29 has an invalid length.
[  441.332716][T23508] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  441.344590][T23508] bond8 (unregistering): Released all slaves
[  441.547741][T23521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  441.562042][T23521] netlink: 'syz.4.4872': attribute type 1 has an invalid length.
[  442.035280][T23554] ieee802154 phy1 wpan1: encryption failed: -22
[  442.067609][T23563] veth1_macvtap: left promiscuous mode
[  442.339033][T23588] netlink: 'syz.2.4892': attribute type 21 has an invalid length.
[  442.380012][T23591] netlink: 'syz.0.4893': attribute type 10 has an invalid length.
[  442.434187][T23593] netlink: 'syz.4.4894': attribute type 1 has an invalid length.
[  442.630943][T23607] sctp: [Deprecated]: syz.4.4897 (pid 23607) Use of int in maxseg socket option.
[  442.630943][T23607] Use struct sctp_assoc_value instead
[  442.762501][T23610] syzkaller1: entered promiscuous mode
[  442.770814][T23610] syzkaller1: entered allmulticast mode
[  442.799778][T23618] ��: renamed from team_slave_1
[  442.865619][T23618] syzkaller1: entered promiscuous mode
[  442.874204][T23618] syzkaller1: entered allmulticast mode
[  443.126329][T23635] batman_adv: batadv0: Removing interface: batadv_slave_1
[  443.155361][T23637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  443.166557][T23644] netlink: 'syz.0.4910': attribute type 10 has an invalid length.
[  443.183165][T23644] bridge_slave_1: left allmulticast mode
[  443.195525][T23644] bridge_slave_1: left promiscuous mode
[  443.202206][T23644] bridge0: port 2(bridge_slave_1) entered disabled state
[  443.227385][T23644] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  443.319641][T23652] vlan4: entered promiscuous mode
[  443.708559][T23657] infiniband syz1: set active
[  443.715032][T23657] infiniband syz1: added ipvlan1
[  443.764949][T23657] RDS/IB: syz1: added
[  443.772045][T23657] smc: adding ib device syz1 with port count 1
[  443.779571][T23657] smc:    ib device syz1 port 1 has no pnetid
[  443.826503][T23677] __nla_validate_parse: 13 callbacks suppressed
[  443.826523][T23677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4922'.
[  443.920210][T23679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4923'.
[  444.343264][T23697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  444.354862][T23697] netlink: 'syz.0.4928': attribute type 10 has an invalid length.
[  444.565421][T23700] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  444.580476][T23700] bond1 (unregistering): Released all slaves
[  444.607527][T23702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4929'.
[  444.894647][T23712] ip6tnl0: entered promiscuous mode
[  445.012794][T23718] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4933'.
[  445.328611][T23731] bond1: (slave bond_slave_1): Device is not our slave
[  445.335714][T23731] bond1: option active_slave: invalid value (bond_slave_1)
[  445.345495][T23731] bond1 (unregistering): Released all slaves
[  445.377443][T23734] pim6reg1: entered promiscuous mode
[  445.382863][T23734] pim6reg1: entered allmulticast mode
[  446.042919][T23753] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4947'.
[  446.052790][T23753] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4947'.
[  446.102350][T23753] syzkaller0: entered promiscuous mode
[  446.127697][T23753] syzkaller0: entered allmulticast mode
[  446.153963][T23756] netlink: 'syz.4.4949': attribute type 1 has an invalid length.
[  446.193358][T23756] 8021q: adding VLAN 0 to HW filter on device bond5
[  446.227487][T23757] wg1 speed is unknown, defaulting to 1000
[  446.257564][T23757] lo speed is unknown, defaulting to 1000
[  446.350835][T23763] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  446.611460][T23777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4954'.
[  446.630139][T23777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4954'.
[  446.681313][T23779] syzkaller0: entered promiscuous mode
[  446.708242][T23779] 0: reclassify loop, rule prio 0, protocol 800
[  446.714160][T23781] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  447.016789][T23791] sch_fq: defrate 0 ignored.
[  447.031768][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4960'.
[  447.042002][T23791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4960'.
[  447.052213][T23791] netlink: 'syz.4.4960': attribute type 16 has an invalid length.
[  447.196618][T23806] netlink: 'syz.2.4963': attribute type 7 has an invalid length.
[  447.219953][T23806] netlink: 'syz.2.4963': attribute type 7 has an invalid length.
[  447.631955][T23824] syzkaller0: entered promiscuous mode
[  447.643054][T23824] 0: reclassify loop, rule prio 0, protocol 800
[  447.873111][T23802] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  448.013439][T21145] block nbd2: Receive control failed (result -32)
[  448.040557][T23841] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  448.423337][T23861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  448.443154][T23861] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.462369][T23859] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  448.478202][T23865] syzkaller0: entered promiscuous mode
[  448.486498][ T6303] 0: reclassify loop, rule prio 0, protocol 800
[  448.572113][T23861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  448.601374][T23861] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.692548][T23861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  448.704026][T23861] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  448.822984][T23861] netdevsim netdevsim2 
 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  448.866590][T23861] netdevsim netdevsim2 
 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  449.082475][T22545] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  449.091704][T22545] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  449.113437][T22545] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  449.125043][T22545] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  449.185356][T22545] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  449.207944][T22545] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  449.227626][T22545] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  449.236091][T22545] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  449.400671][T23908] __nla_validate_parse: 7 callbacks suppressed
[  449.400694][T23908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4992'.
[  449.423038][T23908] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4992'.
[  449.435424][T23908] netlink: 11562 bytes leftover after parsing attributes in process `syz.6.4992'.
[  449.883051][T23930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4999'.
[  449.971951][T23934] 8021q: adding VLAN 0 to HW filter on device team0
[  450.132319][T23950] syzkaller0: entered promiscuous mode
[  450.140770][T23950] syzkaller0: entered allmulticast mode
[  453.047095][T23943] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  453.250801][T23965] netlink: 'syz.0.5009': attribute type 1 has an invalid length.
[  453.282400][T23971] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5012'.
[  453.414543][T23980] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.5015'.
[  453.425653][T23980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5015'.
[  453.466436][T23986] netlink: 9 bytes leftover after parsing attributes in process `syz.4.5017'.
[  453.477626][T23987] netlink: 'syz.0.5016': attribute type 39 has an invalid length.
[  453.535429][ T5145] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  453.549089][ T5145] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  453.557319][ T5145] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  453.565206][ T5145] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  453.575743][ T5145] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  453.608226][T23997] netlink: 'syz.2.5018': attribute type 1 has an invalid length.
[  453.753936][T23988] wg1 speed is unknown, defaulting to 1000
[  453.774037][T24001] IPVS: set_ctl: invalid protocol: 2 172.20.20.29:20002
[  453.782591][T23988] lo speed is unknown, defaulting to 1000
[  453.983003][T24010] netlink: 'syz.6.5021': attribute type 1 has an invalid length.
[  454.058383][T24013] netlink: 'syz.2.5023': attribute type 10 has an invalid length.
[  454.394817][   T24] IPVS: starting estimator thread 0...
[  454.448077][T24040] openvswitch: netlink: ct_state flags 010000e0 unsupported
[  454.497424][T24036] IPVS: using max 34 ests per chain, 81600 per kthread
[  454.614778][T24050] netlink: 'syz.2.5033': attribute type 1 has an invalid length.
[  454.630995][T23988] chnl_net:caif_netlink_parms(): no params data found
[  454.638218][T24050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5033'.
[  454.816579][T24072] netlink: 'syz.0.5039': attribute type 1 has an invalid length.
[  454.826429][T24070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5037'.
[  454.836464][T24070] openvswitch: netlink: Missing key (keys=40, expected=80)
[  454.843810][T24072] netlink: 280 bytes leftover after parsing attributes in process `syz.0.5039'.
[  454.904146][T23988] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.912368][T23988] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.920334][T23988] bridge_slave_0: entered allmulticast mode
[  454.928874][T23988] bridge_slave_0: entered promiscuous mode
[  454.940199][T23988] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.948049][T23988] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.955316][T23988] bridge_slave_1: entered allmulticast mode
[  454.964157][T23988] bridge_slave_1: entered promiscuous mode
[  455.012976][T23988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.049289][T23988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.172194][T23988] team0: Port device team_slave_0 added
[  455.194053][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5043'.
[  455.196565][T23988] team0: Port device team_slave_1 added
[  455.238997][T24089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5043'.
[  455.328005][T24103] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5047'.
[  455.353301][T24089] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5043'.
[  455.364332][T23988] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.373346][T23988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.401706][T24089] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5043'.
[  455.412628][T23988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.444240][T22545] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  455.454019][T22545] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  455.471762][T24107] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5047'.
[  455.478337][T23988] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.500657][T23988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  455.550172][T23988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.581145][T22545] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  455.600835][T22545] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0
[  455.654384][ T5145] Bluetooth: hci6: command tx timeout
[  455.775852][T24118] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  455.811385][T24125] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.5052'.
[  455.978648][T23988] hsr_slave_0: entered promiscuous mode
[  455.987501][T23988] hsr_slave_1: entered promiscuous mode
[  456.005470][T23988] debugfs: 'hsr0' already exists in 'hsr'
[  456.012525][T23988] Cannot create hsr debugfs directory
[  456.127108][T24128] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  456.460184][T24116] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  456.592652][T24163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  456.642609][T23988] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  456.688572][T23988] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  456.715648][T23988] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  456.789367][T23988] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  456.825001][T23988] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  456.862669][T23988] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  456.887991][T23988] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  456.909629][T23988] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  457.068300][T23988] 8021q: adding VLAN 0 to HW filter on device bond0
[  457.101511][T23988] 8021q: adding VLAN 0 to HW filter on device team0
[  457.124392][ T6306] bridge0: port 1(bridge_slave_0) entered blocking state
[  457.131559][ T6306] bridge0: port 1(bridge_slave_0) entered forwarding state
[  457.155959][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state
[  457.163181][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  457.195892][T24210] veth0_virt_wifi: entered promiscuous mode
[  457.499682][T24228] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  457.536568][T23988] 8021q: adding VLAN 0 to HW filter on device batadv0
[  457.717041][ T5145] Bluetooth: hci6: command tx timeout
[  457.801337][T24198] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  457.852413][T23988] veth0_vlan: entered promiscuous mode
[  457.896083][T23988] veth1_vlan: entered promiscuous mode
[  458.013069][T23988] veth0_macvtap: entered promiscuous mode
[  458.046074][T23988] veth1_macvtap: entered promiscuous mode
[  458.133159][T23988] batman_adv: batadv0: Interface activated: batadv_slave_0
[  458.171604][T23988] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.219091][ T6306] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.257623][ T6306] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.287744][ T6306] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.347217][ T6306] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  458.536261][T24280] bridge_slave_1: entered promiscuous mode
[  458.675533][ T6303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.707540][ T6303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  458.806554][T22560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  458.846988][T22560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  459.034817][T24312] wg1 speed is unknown, defaulting to 1000
[  459.168299][T24312] lo speed is unknown, defaulting to 1000
[  459.222037][T24329] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.742552][T24347] __nla_validate_parse: 17 callbacks suppressed
[  459.742573][T24347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5097'.
[  459.774486][T24347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5097'.
[  459.797157][ T5145] Bluetooth: hci6: command tx timeout
[  460.078132][T24360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5100'.
[  460.560931][T24382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.588290][T24387] netlink: 'syz.7.5110': attribute type 4 has an invalid length.
[  460.633344][T24382] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5108'.
[  460.775019][T24397] netlink: 'syz.7.5114': attribute type 3 has an invalid length.
[  460.830064][T24402] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 2, id = 0
[  460.901818][T24405] openvswitch: netlink: IP tunnel dst address not specified
[  460.929472][T24407] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5117'.
[  461.040584][T24416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5120'.
[  461.180250][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5121'.
[  461.191740][T24423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  461.202245][T24425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5123'.
[  461.301245][T24429] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5124'.
[  461.335127][ T6303] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  461.351814][ T6303] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  461.361291][T17264] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  461.447437][T17264] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  461.782377][T24453] xt_hashlimit: size too large, truncated to 1048576
[  461.795612][T24455] netlink: 'syz.7.5133': attribute type 21 has an invalid length.
[  461.812573][T24455] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5133'.
[  461.878177][ T5145] Bluetooth: hci6: command tx timeout
[  461.972956][T24461] netlink: 'syz.7.5135': attribute type 1 has an invalid length.
[  462.071732][T24471] netlink: 'syz.4.5139': attribute type 11 has an invalid length.
[  462.188544][T24477] netlink: 'syz.2.5142': attribute type 39 has an invalid length.
[  462.233097][T24480] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  462.277790][T17264] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  462.296566][T24482] wg1 speed is unknown, defaulting to 1000
[  462.340650][T24482] lo speed is unknown, defaulting to 1000
[  462.436160][T24498] netlink: 'syz.6.5148': attribute type 3 has an invalid length.
[  462.546401][T24502] netlink: 'syz.2.5149': attribute type 1 has an invalid length.
[  462.588844][T24505] x_tables: duplicate underflow at hook 2
[  462.698696][T24502] 8021q: adding VLAN 0 to HW filter on device bond7
[  462.812565][T24521] IPVS: set_ctl: invalid protocol: 60 10.1.1.1:20003
[  462.838839][T24523] IPVS: set_ctl: invalid protocol: 8 127.0.0.1:20000
[  463.168806][T24549] delete_channel: no stack
[  463.174183][T24549] delete_channel: no stack
[  463.852507][T24589] netlink: 'syz.2.5170': attribute type 9 has an invalid length.
[  463.866611][T24589] netlink: 'syz.2.5170': attribute type 11 has an invalid length.
[  464.013301][T24604] xt_time: invalid argument - start or stop time greater than 23:59:59
[  464.104502][T24615] xt_CT: You must specify a L4 protocol and not use inversions on it
[  464.654286][T22563] tipc: Subscription rejected, illegal request
[  465.003129][T24681] __nla_validate_parse: 16 callbacks suppressed
[  465.003152][T24681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5199'.
[  465.298651][T24693] bond7: option min_links: invalid value (18446744073709551614)
[  465.323809][T24693] bond7: option min_links: allowed values 0 - 2147483647
[  465.359783][T24693] bond7 (unregistering): Released all slaves
[  465.397615][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  465.467527][T24711] netlink: 220 bytes leftover after parsing attributes in process `syz.7.5206'.
[  465.870714][T24731] macvtap1: entered promiscuous mode
[  465.884657][T24734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5214'.
[  465.897594][T24731] macvtap1: entered allmulticast mode
[  465.903046][T24731] veth1_vlan: entered allmulticast mode
[  465.963916][T24738] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5213'.
[  466.015588][T24731] macvtap2: entered promiscuous mode
[  466.037228][T24731] macvtap2: entered allmulticast mode
[  466.059344][T24736] SET target dimension over the limit!
[  466.071466][T24751] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5213'.
[  466.084909][T24736] netlink: 5 bytes leftover after parsing attributes in process `syz.7.5211'.
[  466.103511][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5211'.
[  466.141402][T24758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5219'.
[  466.439211][T24765] validate_nla: 1 callbacks suppressed
[  466.439231][T24765] netlink: 'syz.7.5221': attribute type 20 has an invalid length.
[  466.457340][T24765] IPv6: NLM_F_CREATE should be specified when creating new route
[  466.545286][T24785] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5227'.
[  466.879645][T24813] tipc: Invalid UDP bearer configuration
[  466.879698][T24813] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  466.901786][T24810] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5234'.
[  466.985042][T24810] wg1 speed is unknown, defaulting to 1000
[  466.996488][T24810] lo speed is unknown, defaulting to 1000
[  467.417425][T24839] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  467.450389][T24849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.582028][T24853] syzkaller0: entered promiscuous mode
[  467.589008][T24853] syzkaller0: entered allmulticast mode
[  467.750695][T24867] syzkaller0: entered promiscuous mode
[  467.772822][T24867] 0: reclassify loop, rule prio 0, protocol 800
[  467.815538][T24869] batman_adv: batadv0: Removing interface: batadv_slave_0
[  468.166543][T24890] netlink: 'syz.4.5257': attribute type 18 has an invalid length.
[  468.186596][T24890] netlink: 'syz.4.5257': attribute type 18 has an invalid length.
[  468.219117][T24890] netlink: 'syz.4.5257': attribute type 21 has an invalid length.
[  468.230708][T24890] netlink: 'syz.4.5257': attribute type 22 has an invalid length.
[  468.240206][T24890] netlink: 'syz.4.5257': attribute type 23 has an invalid length.
[  468.248594][T24890] netlink: 'syz.4.5257': attribute type 25 has an invalid length.
[  468.257011][T24890] netlink: 'syz.4.5257': attribute type 26 has an invalid length.
[  468.278292][T24893] xt_NFQUEUE: number of queues (65025) out of range (got 119064)
[  468.333755][T24895] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved
[  468.436264][T24905] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  468.768506][T24921] netlink: 'syz.6.5271': attribute type 83 has an invalid length.
[  468.947511][T24938] netlink: 'syz.7.5275': attribute type 1 has an invalid length.
[  469.244672][T24953] bond1: option miimon: invalid value (18446744073709551585)
[  469.252772][T24953] bond1: option miimon: allowed values 0 - 2147483647
[  469.261508][T24953] bond1 (unregistering): Released all slaves
[  469.268350][T24956] block nbd3: server does not support multiple connections per device.
[  469.279816][T24956] block nbd3: shutting down sockets
[  469.314695][T24966] hsr0: entered promiscuous mode
[  469.321171][T24966] macvlan2: entered allmulticast mode
[  469.326575][T24966] hsr0: entered allmulticast mode
[  469.332559][T24966] hsr_slave_0: entered allmulticast mode
[  469.339220][T24966] hsr_slave_1: entered allmulticast mode
[  470.066587][T25026] __nla_validate_parse: 10 callbacks suppressed
[  470.066608][T25026] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5305'.
[  470.204544][T25039] netlink: 'syz.2.5310': attribute type 11 has an invalid length.
[  470.213491][T25039] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5310'.
[  470.226605][T25042] netlink: 'syz.2.5310': attribute type 11 has an invalid length.
[  470.238015][T25042] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5310'.
[  470.384902][T25047] nbd: error processing sock list
[  470.429942][T25053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5312'.
[  470.465088][T25053] team1 (uninitialized): Failed to send options change via netlink (err -105)
[  470.502250][T25057] netlink: 224 bytes leftover after parsing attributes in process `syz.7.5312'.
[  470.545444][T25053] team1: entered promiscuous mode
[  470.550651][T25053] team1: entered allmulticast mode
[  470.569968][T25063] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5319'.
[  470.730553][T25075] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  470.777715][T25075] tipc: Started in network mode
[  470.782634][T25075] tipc: Node identity 010000000000000001, cluster identity 4711
[  470.823373][T25075] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5323'.
[  471.057981][T25091] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5329'.
[  471.106240][T25091] bridge_slave_1: left allmulticast mode
[  471.129740][T25091] bridge_slave_1: left promiscuous mode
[  471.158394][T25091] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.193390][T25091] bridge_slave_0: left allmulticast mode
[  471.223401][T25091] bridge_slave_0: left promiscuous mode
[  471.254031][T25091] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.960323][T25145] netlink: 210820 bytes leftover after parsing attributes in process `syz.7.5339'.
[  472.083693][T25143] ieee802154 phy1 wpan1: encryption failed: -90
[  472.190594][T25119] lec:lec_atm_close: lec0: Shut down!
[  472.701952][T25189] block nbd6: NBD_DISCONNECT
[  472.856220][T25203] validate_nla: 3 callbacks suppressed
[  472.856240][T25203] netlink: 'syz.6.5353': attribute type 10 has an invalid length.
[  472.882430][T25200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5352'.
[  472.942411][T25203] netdevsim netdevsim6 netdevsim0: left promiscuous mode
[  472.976306][T25203] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  473.010816][T25203] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  473.039919][T25208] lo: left allmulticast mode
[  473.058092][T25208] tunl0: left allmulticast mode
[  473.081879][T25208] gre0: left allmulticast mode
[  473.099841][T25208] gretap0: left allmulticast mode
[  473.138280][T25208] erspan0: left allmulticast mode
[  473.150753][T25208] ip6_vti0: left allmulticast mode
[  473.156613][T25215] netlink: 'syz.6.5357': attribute type 25 has an invalid length.
[  473.211791][T25215] netlink: 'syz.6.5357': attribute type 25 has an invalid length.
[  473.217375][T22545] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  473.231513][T22545] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  473.246818][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  473.260407][T22545] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  473.289190][T22545] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  473.365658][T25229] bond0: entered promiscuous mode
[  473.396422][T25229] bond_slave_0: entered promiscuous mode
[  473.412365][T25233] netlink: 'syz.6.5362': attribute type 1 has an invalid length.
[  473.421293][T25229] bond_slave_1: entered promiscuous mode
[  473.431478][T25229] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode
[  473.447117][T25229] bridge_slave_1: entered promiscuous mode
[  473.461746][T25229] bond0: left promiscuous mode
[  473.469233][T25229] bond_slave_0: left promiscuous mode
[  473.476270][T25229] bond_slave_1: left promiscuous mode
[  473.483840][T25229] mac80211_hwsim hwsim39 wlan1: left promiscuous mode
[  473.491590][T25229] bridge_slave_1: left promiscuous mode
[  473.573745][T25238] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  473.575072][T25234] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  473.591808][T25244] tc_dump_action: action bad kind
[  473.706610][T25255] : entered promiscuous mode
[  474.174574][T25286] Set syz0 is full, maxelem 0 reached
[  475.074490][T25346] __nla_validate_parse: 9 callbacks suppressed
[  475.074511][T25346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5391'.
[  475.151934][T25348] h: entered promiscuous mode
[  475.176251][T25355] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5393'.
[  475.195605][T25352] geneve2: entered promiscuous mode
[  475.210150][T25352] geneve2: entered allmulticast mode
[  475.251718][T22559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  475.268571][T22559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  475.308023][T22559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  475.346052][T22559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  475.363848][T25365] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5394'.
[  475.410954][T25370] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5397'.
[  475.421237][T22559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  475.449367][  T797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  475.458774][T22559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  475.493308][T25375] pim6reg1: entered promiscuous mode
[  475.508261][T25375] pim6reg1: entered allmulticast mode
[  475.706304][ T5489] lec:lec_start_xmit: lec0:No lecd attached
[  475.735773][T10571] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  476.277309][T10571] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  479.157156][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  480.737386][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  480.745740][    C1] lec:lec_tx_timeout: lec0
[  480.750364][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  485.796759][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms
[  485.804791][    C1] lec:lec_tx_timeout: lec0
[  485.809865][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  486.060337][   T24] wg1 speed is unknown, defaulting to 1000
[  486.066207][   T24] syz2: Port: 1 Link DOWN
[  486.072488][T22563] bridge_slave_1: left allmulticast mode
[  486.078915][T22563] bridge_slave_1: left promiscuous mode
[  486.086323][T22563] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.099127][T22563] bridge_slave_0: left allmulticast mode
[  486.104803][T22563] bridge_slave_0: left promiscuous mode
[  486.115251][T22563] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.354221][T22563] bond3 (unregistering): (slave ip6gretap1): Releasing active interface
[  486.676848][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  486.901443][T22563] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.912384][T22563] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.926209][T22563] 
 (unregistering): Released all slaves
[  486.936119][T22563] bond1 (unregistering): (slave veth3): Releasing active interface
[  486.946383][T22563] bond1 (unregistering): (slave veth5): Releasing active interface
[  486.956379][T22563] bond1 (unregistering): Released all slaves
[  486.973196][T22563] bond2 (unregistering): Released all slaves
[  486.985459][T22563] bond3 (unregistering): Released all slaves
[  486.997970][T22563] bond4 (unregistering): Released all slaves
[  487.011766][T22563] bond5 (unregistering): Released all slaves
[  487.160390][T22563] tipc: Left network mode
[  487.628983][T22563] hsr_slave_0: left promiscuous mode
[  487.635523][T22563] hsr_slave_1: left promiscuous mode
[  487.641798][T22563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  487.650706][T22563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  487.659413][T22563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  487.668212][T22563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  487.675847][T22563] batman_adv: batadv0: Interface deactivated: ipvlan2
[  487.683834][T22563] batman_adv: batadv0: Removing interface: ipvlan2
[  487.691026][T22563] batman_adv: batadv0: Interface deactivated: ipvlan3
[  487.697915][T22563] batman_adv: batadv0: Removing interface: ipvlan3
[  487.704936][T22563] batman_adv: batadv0: Interface deactivated: veth0
[  487.712088][T22563] batman_adv: batadv0: Removing interface: veth0
[  487.732882][T22563] veth0_macvtap: left allmulticast mode
[  487.739109][T22563] veth1_macvtap: left promiscuous mode
[  487.744596][T22563] veth0_macvtap: left promiscuous mode
[  487.751186][T22563] veth1_vlan: left promiscuous mode
[  487.810803][T22563] pim6reg (unregistering): left allmulticast mode
[  487.993116][T22563] team0 (unregistering): Port device 
2
6�� removed
[  488.007409][T22563] team0 (unregistering): Port device team_slave_0 removed
[  488.360354][T22563] IPVS: stop unused estimator thread 0...
[  489.237068][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  490.827286][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  490.835326][    C1] lec:lec_tx_timeout: lec0
[  490.840240][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  495.846695][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  495.854727][    C1] lec:lec_tx_timeout: lec0
[  495.859964][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  500.117054][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  500.866786][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  500.874838][    C1] lec:lec_tx_timeout: lec0
[  500.879986][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  501.400875][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  503.477525][T21145] Bluetooth: hci2: command 0x0406 tx timeout
[  505.886718][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  505.894751][    C1] lec:lec_tx_timeout: lec0
[  505.899437][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  510.906841][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  510.914895][    C1] lec:lec_tx_timeout: lec0
[  510.920096][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  515.927285][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  515.936280][    C1] lec:lec_tx_timeout: lec0
[  515.940853][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  520.956888][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  520.964919][    C1] lec:lec_tx_timeout: lec0
[  520.969861][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  521.236805][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  525.987339][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  525.995482][    C1] lec:lec_tx_timeout: lec0
[  526.000095][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  527.636923][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  532.117526][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6120 ms
[  532.125574][    C1] lec:lec_tx_timeout: lec0
[  532.130837][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  533.881625][T25439] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5403'.
[  533.891229][T25439] netlink: 'syz.4.5403': attribute type 7 has an invalid length.
[  533.907041][T25439] netlink: 'syz.4.5403': attribute type 8 has an invalid length.
[  533.935144][T25439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5403'.
[  534.022791][T25455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5406'.
[  534.070850][T25462] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5406'.
[  534.126482][T25469] netlink: 'syz.4.5410': attribute type 1 has an invalid length.
[  534.139019][T25469] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5410'.
[  534.158397][T25471] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5409'.
[  534.188482][T25473] netlink: 'syz.0.5411': attribute type 1 has an invalid length.
[  534.264385][T25473] bond8: entered promiscuous mode
[  534.273452][T25473] 8021q: adding VLAN 0 to HW filter on device bond8
[  534.298531][T25473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5411'.
[  534.348848][T25485] netlink: 'syz.4.5415': attribute type 2 has an invalid length.
[  534.479954][T25491] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5417'.
[  534.855345][T25509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5423'.
[  535.726562][T25575] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5442'.
[  536.122504][T25597] bridge3: entered promiscuous mode
[  536.149947][T25597] bridge3: entered allmulticast mode
[  536.155512][T25596] netlink: 'syz.2.5448': attribute type 29 has an invalid length.
[  536.168038][T25600] SET target dimension over the limit!
[  536.182113][T25603] netlink: 'syz.2.5448': attribute type 29 has an invalid length.
[  536.205897][T25596] netlink: 'syz.2.5448': attribute type 32 has an invalid length.
[  536.564642][T25628] netlink: 'syz.2.5458': attribute type 2 has an invalid length.
[  536.781046][T25646] gretap0: entered promiscuous mode
[  536.793010][T25646] gretap0: entered allmulticast mode
[  537.288456][T25695] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  537.295736][T25695] IPv6: NLM_F_CREATE should be set when creating new route
[  537.339881][T25695] netlink: 'syz.6.5476': attribute type 21 has an invalid length.
[  537.368734][T25700] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  537.409053][T25701] syzkaller0: entered promiscuous mode
[  537.414624][T25701] syzkaller0: entered allmulticast mode
[  537.877008][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms
[  537.885158][    C1] lec:lec_tx_timeout: lec0
[  537.890468][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  538.329755][T25769] nbd: couldn't find device at index 65536
[  538.444713][T25776] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  538.595206][T25785] syzkaller1: entered promiscuous mode
[  538.618870][T25785] syzkaller1: entered allmulticast mode
[  538.713941][T25794] IPVS: Error connecting to the multicast addr
[  538.767570][T25798] netlink: 'syz.7.5509': attribute type 11 has an invalid length.
[  538.867602][T25803] 8021q: adding VLAN 0 to HW filter on device bond9
[  538.993121][T25818] __nla_validate_parse: 26 callbacks suppressed
[  538.993143][T25818] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5511'.
[  539.015622][T25809] bond9: (slave bridge6): making interface the new active one
[  539.047092][T25809] bond9: (slave bridge6): Enslaving as an active interface with an up link
[  539.072426][T25819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5511'.
[  539.115320][T25818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5511'.
[  539.140201][T25819] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5511'.
[  539.172214][T25821] tipc: Started in network mode
[  539.183962][T25821] tipc: Node identity 3aeb5a8a06, cluster identity 4711
[  539.195543][T25821] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  539.196138][T25826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  539.271251][T25824] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5514'.
[  539.286446][T25821] syzkaller0: entered promiscuous mode
[  539.292936][T25821] syzkaller0: entered allmulticast mode
[  539.300543][T25821] tipc: Resetting bearer <eth:syzkaller0>
[  539.302678][T25833] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  539.338486][T25832] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5519'.
[  539.364104][T25820] tipc: Resetting bearer <eth:syzkaller0>
[  539.463318][T25840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5521'.
[  540.889487][T25820] tipc: Disabling bearer <eth:syzkaller0>
[  540.899983][T25838] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  540.925246][T25842] bond0: entered promiscuous mode
[  540.931184][T25842] bond0: entered allmulticast mode
[  540.936834][T25842] 8021q: adding VLAN 0 to HW filter on device bond0
[  540.976515][T13831] tipc: Node number set to 1022057098
[  541.127751][T25855] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  541.150516][T25855] bond1 (unregistering): Released all slaves
[  541.202402][T25859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5526'.
[  541.507888][T25876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5531'.
[  541.530200][T25875] validate_nla: 5 callbacks suppressed
[  541.530222][T25875] netlink: 'syz.7.5529': attribute type 5 has an invalid length.
[  541.673758][T25897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5535'.
[  542.106081][T25938] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  542.227972][T25940] netlink: 'syz.7.5548': attribute type 10 has an invalid length.
[  542.228339][T22560] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  542.267567][T22560] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  542.287064][T25940] team0: Device vxcan1 is of different type
[  542.310309][T22560] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  542.345746][T22560] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  542.452524][T25953] syzkaller0: entered promiscuous mode
[  542.472357][T25953] syzkaller0: entered allmulticast mode
[  542.484934][T25959] veth0: entered promiscuous mode
[  542.625484][T25959] veth0: left promiscuous mode
[  542.768592][T25973] netlink: 'syz.4.5557': attribute type 9 has an invalid length.
[  542.896708][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  542.904769][    C1] lec:lec_tx_timeout: lec0
[  542.909522][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  543.014293][T25989] netlink: 'syz.6.5561': attribute type 3 has an invalid length.
[  543.050297][T25989] netlink: 'syz.6.5561': attribute type 3 has an invalid length.
[  543.071352][T25995] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.288831][T26011] netlink: 'syz.6.5567': attribute type 16 has an invalid length.
[  543.306389][T26013] netlink: 'syz.7.5570': attribute type 1 has an invalid length.
[  543.332618][T26011] netlink: 'syz.6.5567': attribute type 17 has an invalid length.
[  543.350449][T26009] bridge0: port 2(bridge_slave_1) entered disabled state
[  543.362860][T26017] ieee802154 phy1 wpan1: encryption failed: -22
[  543.480802][T26021] bond1: (slave geneve2): making interface the new active one
[  543.489574][T26021] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  543.510068][T26011] ip6tnl0: left promiscuous mode
[  543.524398][T26011] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  543.621196][ T6303] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  543.662187][ T6303] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  543.740593][ T6303] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  543.751630][ T6303] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  543.856027][T26055] netlink: 'syz.6.5581': attribute type 1 has an invalid length.
[  543.875025][ T6303] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3
[  543.997760][T26070] __nla_validate_parse: 22 callbacks suppressed
[  543.997781][T26070] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5585'.
[  544.094261][T26070] bond2: Removing last ns target with arp_interval on
[  544.389522][T26069] syzkaller0: entered promiscuous mode
[  544.397440][T26069] syzkaller0: entered allmulticast mode
[  544.629940][T26109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5594'.
[  546.050748][T26114] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5595'.
[  546.060895][T26114] tipc: Invalid UDP bearer configuration
[  546.060966][T26114] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  546.206040][T26122] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  546.216622][T26121] netlink: 'syz.6.5599': attribute type 1 has an invalid length.
[  546.224634][T26121] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5599'.
[  546.240021][T26122] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5597'.
[  546.538721][T26134] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  546.665193][T21145] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  546.675692][T21145] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  546.685112][T21145] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  546.693766][T21145] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  546.699228][T26134] syzkaller0: entered promiscuous mode
[  546.701959][T21145] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  546.719282][T26134] syzkaller0: entered allmulticast mode
[  546.735885][T26134] tipc: Resetting bearer <eth:syzkaller0>
[  547.165964][T26133] tipc: Resetting bearer <eth:syzkaller0>
[  547.927238][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  547.935256][    C1] lec:lec_tx_timeout: lec0
[  547.939850][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  548.757679][T21145] Bluetooth: hci7: command tx timeout
[  550.837730][T21145] Bluetooth: hci7: command tx timeout
[  550.870092][T26133] tipc: Disabling bearer <eth:syzkaller0>
[  550.884239][T26144] lo speed is unknown, defaulting to 1000
[  550.887703][T26159] syzkaller1: left promiscuous mode
[  550.895767][T26159] syzkaller1: left allmulticast mode
[  550.983036][T26172] veth3: entered promiscuous mode
[  550.990222][T26172] veth3: entered allmulticast mode
[  551.287768][T22563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  551.324945][T22563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.524660][T26211] Cannot find del_set index 4 as target
[  551.554367][T26211] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5623'.
[  551.565610][T22563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  551.586923][T22563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.689717][T22563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  551.721819][T22563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.820471][T26226] team0 (unregistering): Port device team_slave_0 removed
[  551.853229][T26226] team0 (unregistering): Port device team_slave_1 removed
[  551.876190][T22563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  551.887666][T22563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  551.908773][T26224] validate_nla: 1 callbacks suppressed
[  551.908790][T26224] netlink: 'syz.2.5626': attribute type 9 has an invalid length.
[  551.925712][T26229] ipt_REJECT: TCP_RESET invalid for non-tcp
[  552.097627][T26144] chnl_net:caif_netlink_parms(): no params data found
[  552.154166][T26238] xt_time: invalid argument - start or stop time greater than 23:59:59
[  552.305396][ T6306] netdevsim netdevsim4 eth5: set [0, 0] type 1 family 0 port 8472 - 0
[  552.415645][T26144] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.423546][T26144] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.433031][T26144] bridge_slave_0: entered allmulticast mode
[  552.442202][T26144] bridge_slave_0: entered promiscuous mode
[  552.512832][T26144] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.536860][T26144] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.544249][T26144] bridge_slave_1: entered allmulticast mode
[  552.555948][T26144] bridge_slave_1: entered promiscuous mode
[  552.578389][ T6303] netdevsim netdevsim4 eth6: set [0, 0] type 1 family 0 port 8472 - 0
[  552.587930][ T6303] netdevsim netdevsim4 eth7: set [0, 0] type 1 family 0 port 8472 - 0
[  552.620622][T26259] bridge1: entered promiscuous mode
[  552.626107][T26259] bridge1: entered allmulticast mode
[  552.638346][T26259] team0: Port device bridge1 added
[  552.752738][T26144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  552.780841][T26144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  552.806224][ T6303] netdevsim netdevsim4 eth8: set [0, 0] type 1 family 0 port 8472 - 0
[  552.917482][T21145] Bluetooth: hci7: command tx timeout
[  552.947350][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  552.955439][    C1] lec:lec_tx_timeout: lec0
[  552.960043][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  553.193651][T22563] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  553.204274][T22563] bond_slave_0: left promiscuous mode
[  553.210642][T22563] bond_slave_0: left allmulticast mode
[  553.220449][T22563] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  553.230415][T22563] bond_slave_1: left promiscuous mode
[  553.236012][T22563] bond_slave_1: left allmulticast mode
[  553.244833][T22563] .` (unregistering): Released all slaves
[  553.256456][T22563] bond1 (unregistering): Released all slaves
[  553.277995][T22563] bond0 (unregistering): Released all slaves
[  553.296341][T22563] bond2 (unregistering): Released all slaves
[  553.333854][T22563] bond3 (unregistering): (slave veth3): Releasing active interface
[  553.349573][T22563] bond3 (unregistering): Released all slaves
[  553.363420][T22563] bond4 (unregistering): (slave veth5): Releasing active interface
[  553.376492][T22563] bond4 (unregistering): Released all slaves
[  553.390693][T22563] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface
[  553.401718][T22563] bond5 (unregistering): Released all slaves
[  553.414175][T22563] bond6 (unregistering): Released all slaves
[  553.517403][T26144] team0: Port device team_slave_0 added
[  553.590488][T22563] : left promiscuous mode
[  553.614051][T26286] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5643'.
[  553.669318][T26286] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5643'.
[  553.691402][T26144] team0: Port device team_slave_1 added
[  553.824310][T22563] tipc: Disabling bearer <udp:syz2>
[  553.835543][T22563] tipc: Left network mode
[  553.846108][T26144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  553.868785][T26300] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5648'.
[  553.877858][T26144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  553.877891][T26144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  553.879848][T26144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  553.939658][T26144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  553.999016][T26144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  554.291988][T26318] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  554.305417][T26318] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.354457][T26298] syzkaller0: entered promiscuous mode
[  554.361781][T26298] syzkaller0: entered allmulticast mode
[  554.391508][T26144] hsr_slave_0: entered promiscuous mode
[  554.416187][T26144] hsr_slave_1: entered promiscuous mode
[  554.435643][T26144] debugfs: 'hsr0' already exists in 'hsr'
[  554.456931][T26144] Cannot create hsr debugfs directory
[  554.560161][T26318] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  554.574632][T26318] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.810797][T26318] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  554.824725][T26318] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  554.971715][T26345] syzkaller0: entered promiscuous mode
[  554.984133][T26350] openvswitch: netlink: IP tunnel dst address not specified
[  554.986085][T26345] syzkaller0: entered allmulticast mode
[  554.998612][T21145] Bluetooth: hci7: command tx timeout
[  555.005423][T26353] SET target dimension over the limit!
[  555.026528][T26318] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.048249][T26318] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  555.190013][T26356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5658'.
[  555.218318][T26364] ipt_REJECT: TCP_RESET invalid for non-tcp
[  555.243767][ T5489] 8021q: adding VLAN 0 to HW filter on device eth5
[  555.351806][T26372] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5661'.
[  555.422301][ T6306] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  555.446253][ T6306] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  555.514321][T22545] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  555.547656][T22545] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  555.616548][T26144] netdevsim netdevsim4 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.707379][T22545] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  555.715707][T22545] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  555.774721][T26144] netdevsim netdevsim4 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  555.843370][ T6319] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  555.863245][ T6319] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  556.022867][T26144] netdevsim netdevsim4 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  556.303061][T26144] netdevsim netdevsim4 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  556.378404][T26382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  556.571794][T22563] hsr_slave_0: left promiscuous mode
[  556.578205][T26434] nbd: couldn't find device at index 0
[  556.641054][T26437] netlink: 'syz.2.5674': attribute type 4 has an invalid length.
[  556.652373][T22563] hsr_slave_1: left promiscuous mode
[  556.652473][T26437] netlink: 'syz.2.5674': attribute type 1 has an invalid length.
[  556.691135][T26437] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5674'.
[  556.705451][T22563] veth1_vlan: left allmulticast mode
[  556.844444][T26447] netlink: 'syz.2.5674': attribute type 61 has an invalid length.
[  556.854268][T26447] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5674'.
[  556.920704][T22563] �� (unregistering): left promiscuous mode
[  556.927688][T22563] �� (unregistering): left allmulticast mode
[  556.935371][T22563] team0 (unregistering): Port device 
2
6�� removed
[  556.950295][T22563] team_slave_0 (unregistering): left promiscuous mode
[  556.957666][T22563] team_slave_0 (unregistering): left allmulticast mode
[  556.965291][T22563] team0 (unregistering): Port device team_slave_0 removed
[  557.413408][T26144] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  557.475525][T26144] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  557.486144][T26144] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  557.514877][T26144] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  557.532517][T26144] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  557.550583][T26144] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  557.565610][T26144] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  557.604331][T26144] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  557.827216][T26144] 8021q: adding VLAN 0 to HW filter on device bond0
[  557.863047][T26144] 8021q: adding VLAN 0 to HW filter on device team0
[  557.883035][T22563] bridge0: port 1(bridge_slave_0) entered blocking state
[  557.890234][T22563] bridge0: port 1(bridge_slave_0) entered forwarding state
[  557.943312][ T6306] bridge0: port 2(bridge_slave_1) entered blocking state
[  557.950558][ T6306] bridge0: port 2(bridge_slave_1) entered forwarding state
[  557.967416][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  557.975630][    C1] lec:lec_tx_timeout: lec0
[  557.980484][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  558.177712][T26504] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5688'.
[  558.219172][T26504] IPv6: sit2: Disabled Multicast RS
[  558.251032][T26504] sit2: entered allmulticast mode
[  558.482151][T26528] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048)
[  558.511844][T26517] lo speed is unknown, defaulting to 1000
[  558.823906][T26144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  559.199335][T26566] netlink: 'syz.0.5700': attribute type 4 has an invalid length.
[  559.210588][T26565] netlink: 'syz.0.5700': attribute type 4 has an invalid length.
[  559.219001][T26566] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5700'.
[  559.235991][T26565] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5700'.
[  559.249323][T26565] netlink: 'syz.0.5700': attribute type 23 has an invalid length.
[  559.668887][T26144] veth0_vlan: entered promiscuous mode
[  559.707392][T26144] veth1_vlan: entered promiscuous mode
[  559.753211][T26592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5704'.
[  559.805922][T26144] veth0_macvtap: entered promiscuous mode
[  559.813921][T26592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5704'.
[  559.838911][T26597] netlink: 'syz.0.5704': attribute type 8 has an invalid length.
[  559.840476][T26144] veth1_macvtap: entered promiscuous mode
[  559.903144][T26144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  559.942094][T26144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  560.000545][T22559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.059378][T22559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.070403][T22559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.099548][T22559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.261495][T22563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.291853][T22563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.340650][T22563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.349609][T22563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.485174][T26625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5605'.
[  560.495614][T26626] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5605'.
[  560.521043][T26627] geneve3: entered promiscuous mode
[  560.534182][T26627] geneve3: entered allmulticast mode
[  560.568596][T22560] netdevsim netdevsim7 netdevsim0: set [1, 2] type 2 family 0 port 19999 - 0
[  560.586507][T22560] netdevsim netdevsim7 netdevsim1: set [1, 2] type 2 family 0 port 19999 - 0
[  560.705348][T26641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5719'.
[  560.723840][T22560] netdevsim netdevsim7 netdevsim2: set [1, 2] type 2 family 0 port 19999 - 0
[  560.760714][T22560] netdevsim netdevsim7 netdevsim3: set [1, 2] type 2 family 0 port 19999 - 0
[  560.811163][T26645] netlink: 'syz.2.5720': attribute type 2 has an invalid length.
[  561.053891][T26663] netlink: 'syz.7.5726': attribute type 2 has an invalid length.
[  561.087425][T26663] netlink: 'syz.7.5726': attribute type 11 has an invalid length.
[  561.214962][T26671] netlink: 'syz.2.5729': attribute type 1 has an invalid length.
[  561.460146][T26685] netlink: 'syz.2.5732': attribute type 4 has an invalid length.
[  561.569851][T13831] lo speed is unknown, defaulting to 1000
[  561.591442][T13831] syz0: Port: 1 Link DOWN
[  561.626933][T26695] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[  561.640000][T26695] ip6_vti0: entered promiscuous mode
[  561.675807][T26695] ip6_vti0: entered allmulticast mode
[  562.258865][T26741] netlink: 'syz.0.5747': attribute type 3 has an invalid length.
[  562.380304][T26746] __nla_validate_parse: 5 callbacks suppressed
[  562.380326][T26746] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5750'.
[  562.471707][T26749] bond1: Unable to set down delay as MII monitoring is disabled
[  562.504771][T26753] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  562.539250][T26749] bond1 (unregistering): Released all slaves
[  562.657772][T26756] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5752'.
[  562.693919][T26759] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  562.715048][T26759] x_tables: duplicate underflow at hook 2
[  562.808734][T26762] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5754'.
[  562.841769][ T1302] ieee802154 phy1 wpan1: encryption failed: -22
[  562.886255][T26764] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5754'.
[  563.168676][T26779] xt_l2tp: v2 doesn't support IP mode
[  563.232048][T26766] tipc: Enabled bearer <ib:gretap0>, priority 10
[  563.246493][T26784] delete_channel: no stack
[  563.279990][T26785] netlink: 88 bytes leftover after parsing attributes in process `syz.6.5759'.
[  563.387008][T26791] netlink: 240 bytes leftover after parsing attributes in process `syz.6.5761'.
[  563.398516][T26791] syzkaller1: entered promiscuous mode
[  563.434163][T26791] syzkaller1: entered allmulticast mode
[  563.538860][T26794] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5762'.
[  563.781643][T17264] IPVS: starting estimator thread 0...
[  563.796789][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5820 ms
[  563.800908][T26813] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5769'.
[  563.804863][    C1] lec:lec_tx_timeout: lec0
[  563.819954][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  563.908147][T26814] IPVS: using max 31 ests per chain, 74400 per kthread
[  564.057159][T26833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5775'.
[  564.105016][T26833] ipip1: entered promiscuous mode
[  564.133562][T26841] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5776'.
[  564.278203][T26849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  564.483834][T26863] syzkaller0: entered promiscuous mode
[  564.496425][T26863] syzkaller0: entered allmulticast mode
[  564.854498][T26889] openvswitch: netlink: IP tunnel dst address not specified
[  564.900996][T26891] syzkaller0: entered promiscuous mode
[  564.906601][T26891] syzkaller0: entered allmulticast mode
[  564.922030][T21145] Bluetooth: hci4: command 0x0406 tx timeout
[  564.996270][T26897] syzkaller1: entered promiscuous mode
[  565.005850][T26897] syzkaller1: entered allmulticast mode
[  565.090068][T26902] veth0: entered promiscuous mode
[  565.282035][T26915] validate_nla: 3 callbacks suppressed
[  565.282053][T26915] netlink: 'syz.6.5801': attribute type 10 has an invalid length.
[  565.309055][T26915] team0: Device veth0_vlan failed to register rx_handler
[  565.444343][T26922] netlink: 'syz.6.5805': attribute type 1 has an invalid length.
[  565.654934][T26937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  565.734555][T26939] delete_channel: no stack
[  566.079781][T26977] syzkaller0: entered promiscuous mode
[  566.255083][T26990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  566.335095][T26995] lo: entered promiscuous mode
[  566.341707][T26995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  566.361567][T26995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  566.474083][T27001] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  566.583230][T27010] netlink: 'syz.6.5832': attribute type 1 has an invalid length.
[  567.122095][T27048] x_tables: duplicate underflow at hook 2
[  567.201836][T27056] netlink: 'syz.6.5847': attribute type 51 has an invalid length.
[  567.214095][T27050] netlink: 'syz.4.5846': attribute type 2 has an invalid length.
[  567.228028][T27058] xt_hashlimit: size too large, truncated to 1048576
[  567.465527][T27078] netlink: 'syz.0.5854': attribute type 62 has an invalid length.
[  567.642277][T27095] __nla_validate_parse: 20 callbacks suppressed
[  567.642298][T27095] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5860'.
[  567.649787][T27094] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.5859'.
[  567.759146][T27098] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5861'.
[  567.791677][T27098] ipvlan2: entered allmulticast mode
[  567.819314][T27098] syz_tun: entered allmulticast mode
[  567.911362][T27103] syzkaller0: entered promiscuous mode
[  567.917072][T27103] syzkaller0: entered allmulticast mode
[  568.112083][T27116] lo speed is unknown, defaulting to 1000
[  568.171083][T27127] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5872'.
[  568.228049][T27127] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5872'.
[  568.359934][T27138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5877'.
[  568.382723][T27140] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5875'.
[  568.397288][T27141] netlink: 'syz.4.5877': attribute type 16 has an invalid length.
[  568.413621][T27139] netlink: 252 bytes leftover after parsing attributes in process `syz.6.5876'.
[  568.464677][T27141] netlink: 'syz.4.5877': attribute type 17 has an invalid length.
[  568.519765][T27141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  568.775954][T27161] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5885'.
[  568.790705][T27161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5885'.
[  568.820277][T27161] hsr_slave_0: left promiscuous mode
[  568.826695][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  568.834757][    C1] lec:lec_tx_timeout: lec0
[  568.839609][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  568.842629][T27161] hsr_slave_1: left promiscuous mode
[  569.032941][T27171] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  569.040744][T27174] netlink: 'syz.4.5888': attribute type 15 has an invalid length.
[  569.164740][T27178] syzkaller0: entered promiscuous mode
[  569.176243][T27178] 0: reclassify loop, rule prio 0, protocol 800
[  569.448344][T27195] IPVS: set_ctl: invalid protocol: 50 100.1.1.1:20001
[  569.591204][T27206] syzkaller0: entered promiscuous mode
[  569.597282][T27206] syzkaller0: entered allmulticast mode
[  569.735981][T27218] bridge: RTM_NEWNEIGH with invalid ether address
[  569.743690][T27218] bridge: RTM_NEWNEIGH with invalid ether address
[  569.898246][T27220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  570.114630][T27228] syzkaller0: entered promiscuous mode
[  570.124024][T27228] 0: reclassify loop, rule prio 0, protocol 800
[  570.835608][T27270] syzkaller0: entered promiscuous mode
[  570.843630][T27270] syzkaller0: entered allmulticast mode
[  570.852629][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.861378][ T6303] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.874541][T27270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  570.883186][T27270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  571.220404][T27291] lo speed is unknown, defaulting to 1000
[  571.611349][T27305] xt_hashlimit: size too large, truncated to 1048576
[  571.716886][ T5145] Bluetooth: hci7: command tx timeout
[  572.436364][T27195] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  572.599554][T27312] netlink: 'syz.7.5917': attribute type 1 has an invalid length.
[  572.776311][T27322] __nla_validate_parse: 10 callbacks suppressed
[  572.776331][T27322] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5923'.
[  572.814167][T27328] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5923'.
[  573.265343][T27360] openvswitch: netlink: Key type 30 is not supported
[  573.309491][T27360] openvswitch: netlink: Key type 30 is not supported
[  573.718348][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.751011][T13831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.815364][T21145] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  573.827922][T21145] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  573.844889][T21145] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  573.853549][T21145] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  573.856701][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  573.868560][    C1] lec:lec_tx_timeout: lec0
[  573.873735][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  573.890947][T21145] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  574.107501][T27385] lo speed is unknown, defaulting to 1000
[  574.374818][T27410] netlink: 'syz.7.5948': attribute type 1 has an invalid length.
[  574.403871][T27410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  574.441763][T27415] IPVS: length: 27 != 174798152376
[  574.650968][T27421] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  574.740641][ T6319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.753460][ T6319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  574.765084][ T6319] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  574.778278][ T9875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  574.804459][T27430] gtp0: entered promiscuous mode
[  574.810062][T27430] gtp0: entered allmulticast mode
[  574.844632][T27428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5953'.
[  574.868176][T27428] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5953'.
[  574.923875][ T6319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  574.934909][ T6319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  574.945786][ T6319] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  575.014559][T27436] erspan0: entered promiscuous mode
[  575.025232][T27436] erspan0: entered allmulticast mode
[  575.126496][ T6319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.141484][ T6319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  575.153210][ T6319] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  575.282856][ T6319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  575.298784][ T6319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  575.358137][ T6319] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0
[  575.660478][T27385] chnl_net:caif_netlink_parms(): no params data found
[  575.671191][T27473] netlink: 'syz.7.5965': attribute type 3 has an invalid length.
[  575.686054][T22563] netdevsim netdevsim0 eth5: set [0, 0] type 1 family 0 port 8472 - 0
[  575.742012][T22563] netdevsim netdevsim0 eth6: set [0, 0] type 1 family 0 port 8472 - 0
[  575.797101][T13831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  575.839697][ T6303] netdevsim netdevsim0 eth7: set [0, 0] type 1 family 0 port 8472 - 0
[  575.964538][T21145] Bluetooth: hci5: command tx timeout
[  575.973968][T27483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5967'.
[  575.990473][ T6306] netdevsim netdevsim0 eth8: set [0, 0] type 1 family 0 port 8472 - 0
[  576.045688][ T6319] �x9�: left allmulticast mode
[  576.051241][ T6319] �x9�: left promiscuous mode
[  576.056122][ T6319] bridge0: port 1(
0�x9�) entered disabled state
[  576.093895][T27490] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5968'.
[  576.121861][T17264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.338485][ T6319] dvmrp0 (unregistering): left allmulticast mode
[  576.356234][ T6319] bond7 (unregistering): (slave geneve4): Releasing active interface
[  576.471835][ T6319] bond2 (unregistering): (slave bridge2): Releasing backup interface
[  576.480297][ T6319] bridge2 (unregistering): left promiscuous mode
[  576.650170][ T6319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  576.661031][ T6319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  576.671880][ T6319] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  576.682340][ T6319] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  576.692815][ T6319] bond0 (unregistering): Released all slaves
[  576.704817][ T6319] bond1 (unregistering): Released all slaves
[  576.718596][ T6319] bond2 (unregistering): Released all slaves
[  576.732042][ T6319] bond3 (unregistering): Released all slaves
[  576.752289][ T6319] bond4 (unregistering): Released all slaves
[  576.765830][ T6319] bond5 (unregistering): Released all slaves
[  576.779839][ T6319] bond6 (unregistering): Released all slaves
[  576.792978][ T6319] bond7 (unregistering): Released all slaves
[  576.820780][ T6319] bond8 (unregistering): Released all slaves
[  576.834386][ T6319] bond9 (unregistering): Released all slaves
[  576.847166][ T9875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.872476][T27385] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.891646][T27385] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.902413][T27385] bridge_slave_0: entered allmulticast mode
[  576.910638][T27385] bridge_slave_0: entered promiscuous mode
[  576.922400][T27490] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  576.964629][T27495] vxcan2: entered promiscuous mode
[  577.024132][T27499] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5970'.
[  577.056890][T27385] bridge0: port 2(bridge_slave_1) entered blocking state
[  577.064165][T27385] bridge0: port 2(bridge_slave_1) entered disabled state
[  577.107366][T27385] bridge_slave_1: entered allmulticast mode
[  577.115207][T27385] bridge_slave_1: entered promiscuous mode
[  577.143645][ T6319] �9: left promiscuous mode
[  577.217764][T27510] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5973'.
[  577.305694][T27385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.319709][ T6319] tipc: Left network mode
[  577.322364][T27385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  577.557453][T27385] team0: Port device team_slave_0 added
[  577.616043][T27385] team0: Port device team_slave_1 added
[  577.772443][T27385] batman_adv: batadv0: Adding interface: batadv_slave_0
[  577.782115][T27385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  577.835739][T27542] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5980'.
[  577.864419][T27385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  577.879971][T13831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  577.926391][T27385] batman_adv: batadv0: Adding interface: batadv_slave_1
[  577.941317][T27385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.001977][T27385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  578.037004][T21145] Bluetooth: hci5: command tx timeout
[  578.121171][T27559] netlink: 104 bytes leftover after parsing attributes in process `syz.6.5982'.
[  578.368756][T27385] hsr_slave_0: entered promiscuous mode
[  578.376294][T27385] hsr_slave_1: entered promiscuous mode
[  578.409443][T27385] debugfs: 'hsr0' already exists in 'hsr'
[  578.415326][T27385] Cannot create hsr debugfs directory
[  578.592405][ T5489] 8021q: adding VLAN 0 to HW filter on device eth5
[  578.692030][T27591] netlink: 228 bytes leftover after parsing attributes in process `syz.7.5990'.
[  578.869980][T27599] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  578.887092][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  578.887706][T27599] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  578.895141][    C1] lec:lec_tx_timeout: lec0
[  578.908221][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  578.910924][T27599] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  578.929614][ T9875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.008120][T27606] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.5994'.
[  579.078785][T27385] netdevsim netdevsim0 eth8 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  579.163654][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  579.245752][T27615] lo speed is unknown, defaulting to 1000
[  579.259554][T27385] netdevsim netdevsim0 eth7 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  579.394577][ T6319] hsr_slave_0: left promiscuous mode
[  579.427537][ T6319] hsr_slave_1: left promiscuous mode
[  579.449423][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  579.459433][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_0
[  579.468871][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  579.490655][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_1
[  579.518044][ T6319] veth1_macvtap: left promiscuous mode
[  579.533824][ T6319] veth0_macvtap: left promiscuous mode
[  579.544896][ T6319] veth1_vlan: left promiscuous mode
[  579.575316][T27600] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  579.595386][T27600] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  579.607609][T27600] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  579.957038][T13831] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.017676][T27385] netdevsim netdevsim0 eth6 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  580.117757][ T5145] Bluetooth: hci5: command tx timeout
[  580.212304][T27385] netdevsim netdevsim0 eth5 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  580.278039][ T5145] Bluetooth: hci6: command 0x0406 tx timeout
[  580.495502][ T6319] IPVS: stop unused estimator thread 0...
[  580.622547][T27385] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  580.640021][T27385] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  580.648799][T27385] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  580.671694][T27385] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  580.693021][T27385] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  580.693864][T27657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.711822][T27657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.726000][T27657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.730052][T27385] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  580.752065][T27385] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  580.776351][T27385] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  580.791099][T27657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  580.807130][T27657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.001139][ T9875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  581.038591][T27385] 8021q: adding VLAN 0 to HW filter on device bond0
[  581.091932][T27676] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6006'.
[  581.130927][T27385] 8021q: adding VLAN 0 to HW filter on device team0
[  581.170393][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state
[  581.177581][ T6319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  581.218624][T27682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6006'.
[  581.230934][ T6319] tipc: Subscription rejected, illegal request
[  581.254369][T22560] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.261542][T22560] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.329021][T27686] openvswitch: netlink: Flow actions attr not present in new flow.
[  581.632910][T27706] netlink: 216 bytes leftover after parsing attributes in process `syz.7.6011'.
[  581.644225][T27706] netlink: 'syz.7.6011': attribute type 2 has an invalid length.
[  581.691136][T27385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  581.801965][T27385] veth0_vlan: entered promiscuous mode
[  581.828667][T27385] veth1_vlan: entered promiscuous mode
[  581.871531][T27385] veth0_macvtap: entered promiscuous mode
[  581.905620][T27385] veth1_macvtap: entered promiscuous mode
[  581.971950][T27385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  582.012891][T27385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  582.044529][ T6303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  582.069610][ T6303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  582.133034][ T6306] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  582.159966][T27727] xt_l2tp: v2 tid > 0xffff: 1114244
[  582.160731][ T6306] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  582.179882][T27727] netlink: 'syz.6.6016': attribute type 3 has an invalid length.
[  582.200811][T21145] Bluetooth: hci5: command tx timeout
[  582.362520][ T6319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.373750][T27725] syzkaller0: entered promiscuous mode
[  582.382666][T27725] syzkaller0: entered allmulticast mode
[  582.390729][ T6319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.500542][ T6306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  582.526631][ T6306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  582.771462][T27756] tap0: tun_chr_ioctl cmd 1074025678
[  582.787196][T27756] tap0: group set to 0
[  582.841655][T27756] tap0: tun_chr_ioctl cmd 2147767517
[  583.316894][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  583.571541][T27804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6035'.
[  583.585445][T27804] netlink: 'syz.0.6035': attribute type 4 has an invalid length.
[  583.799103][T27812] syzkaller0: entered promiscuous mode
[  583.804729][T27812] syzkaller0: entered allmulticast mode
[  583.824497][T27812] netlink: 'syz.0.6038': attribute type 13 has an invalid length.
[  583.861759][T27812] veth0_macvtap: left promiscuous mode
[  583.877473][T27811] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6037'.
[  583.879728][T27812] macvtap0: entered allmulticast mode
[  583.910265][T27812] macvtap0: refused to change device tx_queue_len
[  583.917132][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  583.917162][    C1] lec:lec_tx_timeout: lec0
[  583.929787][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  584.019329][T27829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6042'.
[  584.028905][T27829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6042'.
[  584.038393][T27827] net_ratelimit: 7 callbacks suppressed
[  584.038410][T27827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.119572][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  584.474435][T27855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6053'.
[  584.484211][T27857] netlink: 'syz.6.6054': attribute type 83 has an invalid length.
[  584.566363][T27859] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  584.599220][T27865] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6056'.
[  584.601739][T27866] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6057'.
[  584.658975][T27866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6057'.
[  584.668507][T27866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6057'.
[  584.678439][T27866] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6057'.
[  584.980350][T27883] syzkaller1: entered promiscuous mode
[  584.985904][T27883] syzkaller1: entered allmulticast mode
[  585.159397][  T796] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  585.183407][T27890] bond1: option arp_validate: mode dependency failed, not supported in mode balance-alb(6)
[  585.301319][T27890] bond1 (unregistering): Released all slaves
[  585.598996][T27917] lo: entered promiscuous mode
[  585.611534][T27917] tunl0: entered promiscuous mode
[  585.631238][T27917] gre0: entered promiscuous mode
[  585.687605][T27917] gretap0: entered promiscuous mode
[  585.737547][T27917] erspan0: entered promiscuous mode
[  585.746081][T27917] ip_vti0: entered promiscuous mode
[  585.768521][T27919] netlink: 'syz.6.6076': attribute type 22 has an invalid length.
[  586.057503][T27931] netlink: 'syz.6.6077': attribute type 7 has an invalid length.
[  586.065632][T27931] netlink: 'syz.6.6077': attribute type 8 has an invalid length.
[  586.509350][T27969] netlink: 'syz.0.6089': attribute type 1 has an invalid length.
[  586.631879][T27973] syzkaller0: entered promiscuous mode
[  586.637628][T27973] syzkaller0: entered allmulticast mode
[  586.665677][T27969] ipvlan2: entered allmulticast mode
[  586.677883][T27969] veth1_to_batadv: entered allmulticast mode
[  586.718354][T27969] ipvlan3: entered allmulticast mode
[  586.805639][T27984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  587.183188][T28012] netlink: 'syz.0.6102': attribute type 1 has an invalid length.
[  587.195407][T28012] netlink: 'syz.0.6102': attribute type 1 has an invalid length.
[  587.408989][T28027] bond3: entered allmulticast mode
[  587.428304][T28027] bridge0: entered promiscuous mode
[  587.433789][T28027] bridge0: entered allmulticast mode
[  587.443249][T28027] bond3: (slave bridge0): Enslaving as an active interface with an up link
[  587.744010][T28053] geneve2: entered promiscuous mode
[  587.749424][T28053] geneve2: entered allmulticast mode
[  587.947974][T28062] syzkaller0: entered promiscuous mode
[  587.966301][T28062] 0: reclassify loop, rule prio 0, protocol 800
[  588.104391][T28078] netlink: 'syz.4.6120': attribute type 11 has an invalid length.
[  588.253851][T28086] netlink: 'syz.6.6123': attribute type 13 has an invalid length.
[  588.263909][T28083] netlink: 'syz.4.6121': attribute type 32 has an invalid length.
[  588.279608][T28086] gretap0: refused to change device tx_queue_len
[  588.292224][T28086] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  588.529287][T28102] netlink: 'syz.7.6127': attribute type 10 has an invalid length.
[  588.645052][T28116] __nla_validate_parse: 18 callbacks suppressed
[  588.645072][T28116] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6129'.
[  588.748910][T28122] netlink: 'syz.7.6130': attribute type 9 has an invalid length.
[  588.759051][T28122] netlink: 'syz.7.6130': attribute type 11 has an invalid length.
[  588.767454][T28122] netlink: 'syz.7.6130': attribute type 12 has an invalid length.
[  588.775282][T28122] netlink: 210020 bytes leftover after parsing attributes in process `syz.7.6130'.
[  588.816915][T28122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6130'.
[  588.936757][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  588.944824][    C1] lec:lec_tx_timeout: lec0
[  588.949672][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  589.071476][T28138] syzkaller0: entered promiscuous mode
[  589.081038][T28138] 0: reclassify loop, rule prio 0, protocol 800
[  589.095140][T28142] netlink: 52 bytes leftover after parsing attributes in process `syz.4.6135'.
[  589.128192][T28142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6135'.
[  589.160576][T28142] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6135'.
[  589.170877][T28142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6135'.
[  589.216502][T28151] set match dimension is over the limit!
[  589.228659][T28151] block nbd3: Unsupported socket: should be TCP or UNIX.
[  589.338836][T28154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6137'.
[  589.413471][T28159] netlink: 'syz.4.6137': attribute type 2 has an invalid length.
[  589.474255][T28154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6137'.
[  589.594869][T28167] bond4: option min_links: invalid value (18446744073709551614)
[  589.603419][T28167] bond4: option min_links: allowed values 0 - 2147483647
[  589.613299][T28167] bond4 (unregistering): Released all slaves
[  589.745056][T28178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6142'.
[  589.787646][T28178] hsr_slave_0: left promiscuous mode
[  589.812030][T28178] hsr_slave_1: left promiscuous mode
[  590.024636][T28200] x_tables: duplicate underflow at hook 2
[  590.388772][ T5145] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  590.398849][T28222] syzkaller0: entered promiscuous mode
[  590.404382][T28222] syzkaller0: entered allmulticast mode
[  590.410990][ T5145] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  590.421533][ T5145] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  590.450974][ T5145] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  590.492447][ T5145] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  590.642754][T28221] lo speed is unknown, defaulting to 1000
[  590.761813][T28233] netlink: 'syz.6.6155': attribute type 5 has an invalid length.
[  591.129785][T28257] 8021q: adding VLAN 0 to HW filter on device bond4
[  591.181815][T28256] bond4: (slave veth1): Enslaving as an active interface with a down link
[  591.227649][T28257] 8021q: adding VLAN 0 to HW filter on device batadv1
[  591.234700][T28257] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  591.278916][T28267] xt_hashlimit: size too large, truncated to 1048576
[  591.532428][T28271] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.584995][T28271] bridge_slave_0 (unregistering): left allmulticast mode
[  591.597191][T28271] bridge_slave_0 (unregistering): left promiscuous mode
[  591.604396][T28271] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.909314][T28291] x_tables: unsorted entry at hook 3
[  592.044680][T28295] syzkaller1: entered promiscuous mode
[  592.052645][T28295] syzkaller1: entered allmulticast mode
[  592.073790][T28221] chnl_net:caif_netlink_parms(): no params data found
[  592.138855][T28308] syzkaller1: entered promiscuous mode
[  592.144386][T28308] syzkaller1: entered allmulticast mode
[  592.519246][T21145] Bluetooth: hci1: command tx timeout
[  592.536579][T28328] xt_hashlimit: size too large, truncated to 1048576
[  592.566048][T28331] IPVS: ip_vs_edit_dest(): server weight less than zero
[  592.573619][  T797] IPVS: starting estimator thread 0...
[  592.616467][T28221] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.667343][T28332] IPVS: using max 35 ests per chain, 84000 per kthread
[  592.682007][T28221] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.707440][T28221] bridge_slave_0: entered allmulticast mode
[  592.727098][T28221] bridge_slave_0: entered promiscuous mode
[  592.752309][T28221] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.790754][T28221] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.808609][T28221] bridge_slave_1: entered allmulticast mode
[  592.837699][T28221] bridge_slave_1: entered promiscuous mode
[  593.030930][T28221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  593.060792][T28221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  593.254538][T28221] team0: Port device team_slave_0 added
[  593.301300][T28221] team0: Port device team_slave_1 added
[  593.334979][T28381] validate_nla: 1 callbacks suppressed
[  593.334999][T28381] netlink: 'syz.7.6185': attribute type 142 has an invalid length.
[  593.439756][T28221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  593.459156][T28221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.529305][T28221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  593.575887][T28221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  593.623753][T28221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  593.681457][T28406] __nla_validate_parse: 7 callbacks suppressed
[  593.681475][T28406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6191'.
[  593.702057][T28221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  593.941295][T28416] veth3: entered allmulticast mode
[  593.950911][T28421] netlink: 'syz.6.6196': attribute type 1 has an invalid length.
[  593.958905][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  593.958938][    C1] lec:lec_tx_timeout: lec0
[  593.967090][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  593.989180][T28419] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6195'.
[  593.992137][T28221] hsr_slave_0: entered promiscuous mode
[  594.007585][T28221] hsr_slave_1: entered promiscuous mode
[  594.013953][T28221] debugfs: 'hsr0' already exists in 'hsr'
[  594.020764][T28221] Cannot create hsr debugfs directory
[  594.059446][T28421] bond3: entered promiscuous mode
[  594.065716][T28421] 8021q: adding VLAN 0 to HW filter on device bond3
[  594.100542][T28424] ipvlan2: entered allmulticast mode
[  594.115311][T28424] bond3: entered allmulticast mode
[  594.131717][T28431] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6197'.
[  594.206603][T28421] bond3: (slave bridge3): making interface the new active one
[  594.215276][T28421] bridge3: entered promiscuous mode
[  594.224107][T28421] bridge3: entered allmulticast mode
[  594.233305][T28421] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  594.249187][T28437] netlink: 'syz.7.6197': attribute type 1 has an invalid length.
[  594.281967][T28439] xt_hashlimit: size too large, truncated to 1048576
[  594.296173][T28437] netlink: 280 bytes leftover after parsing attributes in process `syz.7.6197'.
[  594.442816][T28449] IPv6: NLM_F_REPLACE set, but no existing node found!
[  594.516140][T28449] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  594.600199][T21145] Bluetooth: hci1: command tx timeout
[  594.613598][T28457] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6203'.
[  594.695907][T28457] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6203'.
[  594.921142][T28221] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  594.961211][T28221] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  594.975487][T28221] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  594.992688][T28221] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  595.066847][T28221] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  595.114894][T28221] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  595.173967][T28221] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  595.200098][T28221] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  595.215539][T28487] veth0: entered promiscuous mode
[  595.328312][T28484] veth0: left promiscuous mode
[  595.334596][T28495] syzkaller0: entered promiscuous mode
[  595.340188][T28495] syzkaller0: entered allmulticast mode
[  595.341263][T28510] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  595.480309][   T30] INFO: task syz.5.4817:23341 blocked for more than 143 seconds.
[  595.507821][   T30]       Not tainted syzkaller #0
[  595.521919][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  595.531729][   T30] task:syz.5.4817      state:D stack:26632 pid:23341 tgid:23339 ppid:21323  task_flags:0x400140 flags:0x00080002
[  595.548076][T28221] 8021q: adding VLAN 0 to HW filter on device bond0
[  595.567477][   T30] Call Trace:
[  595.575292][   T30]  <TASK>
[  595.600765][   T30]  __schedule+0x15dd/0x52d0
[  595.614397][T28221] 8021q: adding VLAN 0 to HW filter on device team0
[  595.628404][   T30]  ? __pfx___schedule+0x10/0x10
[  595.634515][   T30]  ? schedule+0x90/0x360
[  595.643773][T28520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6215'.
[  595.645132][   T30]  schedule+0x164/0x360
[  595.652866][T28520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6215'.
[  595.678330][   T30]  schedule_preempt_disabled+0x13/0x30
[  595.685958][T22562] bridge0: port 1(bridge_slave_0) entered blocking state
[  595.693149][T22562] bridge0: port 1(bridge_slave_0) entered forwarding state
[  595.708936][T22562] bridge0: port 2(bridge_slave_1) entered blocking state
[  595.716133][T22562] bridge0: port 2(bridge_slave_1) entered forwarding state
[  595.724325][   T30]  __mutex_lock+0x7fe/0x1300
[  595.729700][   T30]  ? __mutex_lock+0x5ac/0x1300
[  595.734637][   T30]  ? nfsd_nl_version_get_doit+0x17c/0xc40
[  595.747358][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  595.752621][   T30]  ? __nlmsg_put+0xef/0x1b0
[  595.766829][   T30]  ? genlmsg_put+0x137/0x2e0
[  595.774606][   T30]  nfsd_nl_version_get_doit+0x17c/0xc40
[  595.785828][   T30]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  595.802821][   T30]  genl_family_rcv_msg_doit+0x22a/0x330
[  595.817429][   T30]  ? __asan_memcpy+0x40/0x70
[  595.822252][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  595.833508][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  595.839978][   T30]  genl_rcv_msg+0x61c/0x7a0
[  595.844882][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  595.851475][   T30]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  595.859025][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  595.864125][   T30]  netlink_rcv_skb+0x232/0x4b0
[  595.870042][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  595.882024][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  595.894891][   T30]  ? down_read+0x272/0x2e0
[  595.906100][   T30]  ? genl_rcv+0xd/0x40
[  595.915401][   T30]  genl_rcv+0x28/0x40
[  595.927332][   T30]  netlink_unicast+0x80f/0x9b0
[  595.938533][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  595.950624][   T30]  ? netlink_sendmsg+0x650/0xb40
[  595.961146][   T30]  ? skb_put+0x11b/0x210
[  595.965605][   T30]  netlink_sendmsg+0x813/0xb40
[  595.971483][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  595.977780][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  595.983097][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  595.989697][   T30]  ____sys_sendmsg+0x972/0x9f0
[  595.995019][   T30]  ? futex_unqueue+0x211/0x240
[  596.000996][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  596.006568][   T30]  ? import_iovec+0x73/0xa0
[  596.012442][   T30]  ___sys_sendmsg+0x2a5/0x360
[  596.018167][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  596.023473][   T30]  ? futex_wait+0x29a/0x380
[  596.029444][   T30]  ? __fget_files+0x2a/0x420
[  596.034122][   T30]  ? __fget_files+0x3a0/0x420
[  596.051380][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  596.056565][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  596.065833][   T30]  ? rcu_is_watching+0x15/0xb0
[  596.074086][T28221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  596.081110][   T30]  do_syscall_64+0x14d/0xf80
[  596.085739][   T30]  ? trace_irq_disable+0x3b/0x150
[  596.091958][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.099126][   T30]  ? clear_bhb_loop+0x40/0x90
[  596.103846][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  596.110410][   T30] RIP: 0033:0x7efec0b9c819
[  596.114922][   T30] RSP: 002b:00007efec1a8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  596.146475][   T30] RAX: ffffffffffffffda RBX: 00007efec0e15fa0 RCX: 00007efec0b9c819
[  596.155336][   T30] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 000000000000000d
[  596.164336][   T30] RBP: 00007efec0c32c91 R08: 0000000000000000 R09: 0000000000000000
[  596.173062][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  596.181873][   T30] R13: 00007efec0e16038 R14: 00007efec0e15fa0 R15: 00007ffc6ea57428
[  596.190921][   T30]  </TASK>
[  596.195492][   T30] 
[  596.195492][   T30] Showing all locks held in the system:
[  596.236160][   T30] 1 lock held by khungtaskd/30:
[  596.242052][   T30]  #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  596.253946][   T30] 2 locks held by getty/5580:
[  596.260304][   T30]  #0: ffff888036c780a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  596.271344][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  596.284676][   T30] 4 locks held by kworker/1:9/9875:
[  596.291402][   T30] 3 locks held by kworker/0:7/10571:
[  596.298753][   T30]  #0: ffff88813fe0f148 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  596.311495][   T30]  #1: ffffc9001be9fc40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  596.324964][   T30]  #2: ffff8880472e2240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0
[  596.336138][   T30] 2 locks held by syz.3.4062/20486:
[  596.342233][   T30]  #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  596.351403][   T30]  #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  596.362236][   T30] 3 locks held by kworker/u8:17/22545:
[  596.368571][   T30]  #0: ffff888031530148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  596.380731][   T30]  #1: ffffc90010b27c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  596.393722][   T30]  #2: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[  596.403954][   T30] 4 locks held by kworker/u8:21/22553:
[  596.409909][   T30] 2 locks held by syz.5.4817/23341:
[  596.415253][   T30]  #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  596.424279][   T30]  #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40
[  596.434920][   T30] 2 locks held by syz.2.5959/27448:
[  596.440776][   T30]  #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  596.449678][   T30]  #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  596.460424][   T30] 1 lock held by syz-executor/28221:
[  596.465709][   T30]  #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x65f/0xe30
[  596.475761][   T30] 2 locks held by syz.0.6213/28494:
[  596.481500][   T30]  #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  596.491256][   T30]  #1: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  596.502797][   T30] 2 locks held by syz.4.6215/28514:
[  596.509332][   T30]  #0: ffff88805846a488 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  596.520659][   T30]  #1: ffff888022686260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: j1939_sk_release+0xb1/0x7e0
[  596.531048][   T30] 
[  596.533390][   T30] =============================================
[  596.533390][   T30] 
[  596.542521][   T30] NMI backtrace for cpu 0
[  596.542542][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  596.542562][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  596.542572][   T30] Call Trace:
[  596.542579][   T30]  <TASK>
[  596.542585][   T30]  dump_stack_lvl+0xe8/0x150
[  596.542614][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  596.542642][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  596.542673][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  596.542696][   T30]  sys_info+0x135/0x170
[  596.542711][   T30]  watchdog+0xfd9/0x1030
[  596.542733][   T30]  ? watchdog+0x21a/0x1030
[  596.542757][   T30]  kthread+0x388/0x470
[  596.542775][   T30]  ? __pfx_watchdog+0x10/0x10
[  596.542790][   T30]  ? __pfx_kthread+0x10/0x10
[  596.542809][   T30]  ret_from_fork+0x51e/0xb90
[  596.542834][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  596.542886][   T30]  ? __switch_to+0xc7d/0x1450
[  596.542914][   T30]  ? __pfx_kthread+0x10/0x10
[  596.542933][   T30]  ret_from_fork_asm+0x1a/0x30
[  596.542979][   T30]  </TASK>
[  596.542986][   T30] Sending NMI from CPU 0 to CPUs 1:
[  596.658822][    C1] NMI backtrace for cpu 1
[  596.658839][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  596.658856][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  596.658865][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  596.658888][    C1] Code: 6e 6b 02 c3 cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 82 19 00 fb f4 <e9> fc e9 02 00 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  596.658902][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242
[  596.658915][    C1] RAX: 00000000001d2ce5 RBX: ffffffff819a9d1a RCX: 0000000080000001
[  596.658926][    C1] RDX: 0000000000000001 RSI: ffffffff8defc649 RDI: ffffffff8c27d580
[  596.658937][    C1] RBP: ffffc90000197f10 R08: ffff8880b873399b R09: 1ffff110170e6733
[  596.658947][    C1] R10: dffffc0000000000 R11: ffffed10170e6734 R12: 0000000000000001
[  596.658957][    C1] R13: 1ffff11003b59000 R14: 0000000000000001 R15: 1ffff11003b59000
[  596.658968][    C1] FS:  0000000000000000(0000) GS:ffff888125554000(0000) knlGS:0000000000000000
[  596.658980][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  596.658990][    C1] CR2: 00007ffae22cae9c CR3: 0000000076224000 CR4: 00000000003526f0
[  596.659004][    C1] Call Trace:
[  596.659010][    C1]  <TASK>
[  596.659015][    C1]  default_idle+0x9/0x20
[  596.659029][    C1]  default_idle_call+0x72/0xb0
[  596.659044][    C1]  do_idle+0x36a/0x5f0
[  596.659066][    C1]  ? __pfx_do_idle+0x10/0x10
[  596.659088][    C1]  cpu_startup_entry+0x43/0x60
[  596.659110][    C1]  start_secondary+0x101/0x110
[  596.659127][    C1]  common_startup_64+0x13e/0x147
[  596.659150][    C1]  </TASK>
[  596.683760][T21145] Bluetooth: hci1: command tx timeout
[  596.841106][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  596.847996][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  596.857097][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  596.867146][   T30] Call Trace:
[  596.870511][   T30]  <TASK>
[  596.873443][   T30]  vpanic+0x56c/0xa60
[  596.877438][   T30]  ? __pfx___schedule+0x10/0x10
[  596.882412][   T30]  ? __pfx_vpanic+0x10/0x10
[  596.887017][   T30]  ? __pfx_console_unlock+0x10/0x10
[  596.892251][   T30]  panic+0xc5/0xd0
[  596.895991][   T30]  ? __pfx_panic+0x10/0x10
[  596.900407][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  596.905777][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  596.911936][   T30]  watchdog+0x1023/0x1030
[  596.916278][   T30]  ? watchdog+0x21a/0x1030
[  596.920690][   T30]  kthread+0x388/0x470
[  596.924748][   T30]  ? __pfx_watchdog+0x10/0x10
[  596.929423][   T30]  ? __pfx_kthread+0x10/0x10
[  596.934003][   T30]  ret_from_fork+0x51e/0xb90
[  596.938590][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  596.943702][   T30]  ? __switch_to+0xc7d/0x1450
[  596.948377][   T30]  ? __pfx_kthread+0x10/0x10
[  596.952960][   T30]  ret_from_fork_asm+0x1a/0x30
[  596.957730][   T30]  </TASK>
[  596.960881][   T30] Kernel Offset: disabled
[  596.965192][   T30] Rebooting in 86400 seconds..