last executing test programs:

6.339237184s ago: executing program 2 (id=626):
r0 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {0x0, 0x0, 0x1}, {0x35, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600)
r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@loopback, 0x1, 0x0, 0x20, 0x0, [{@loopback}, {@empty}]}})
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r3, 0x0, 0x0)
close(r3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000040)=0x1)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @private=0xa010102}, 0x10)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x35c, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)

6.164170318s ago: executing program 2 (id=627):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x806000)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
socket$inet6_sctp(0xa, 0x801, 0x84)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x4)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc})
r7 = socket(0x10, 0x2, 0x0)
write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c)
recvmmsg(r7, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, 0x0, &(0x7f0000000180)=0x3b)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

5.500208105s ago: executing program 0 (id=630):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)

5.381327288s ago: executing program 2 (id=631):
unshare(0x62040200)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$kcm(0x2, 0x5, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x7b, &(0x7f0000000000), 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r5, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8)
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)})
bind$bt_hci(r8, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r8, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001e00431b0000000000000000070000", @ANYRES32, @ANYBLOB="000017000000000008000a00", @ANYRESHEX], 0x2c}}, 0x0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f0000000000)=0x4fd0, 0x4)
bind$inet(r10, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
sendmmsg(r10, &(0x7f0000007fc0), 0x800001d, 0x0)

5.280060872s ago: executing program 0 (id=632):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xc, 0x8, 0x10000002, 0x9, 0x3}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x1ff}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x93}, 0x1, 0x0, 0x0, 0x40080c1}, 0x4800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, 0x0}, 0x4)

4.84169403s ago: executing program 0 (id=634):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000340)="0a000300010000", 0x7)
recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x4c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000023c0)={'wg0\x00', {0x2, 0x4e20, @rand_addr=0x64010100}})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="1073eeda8705da74bc83496ee251e51e6d155c558a4f6dbf7076341df55b7a", 0x1f}, {&(0x7f0000000240)}], 0x2}}], 0x1, 0x8810)
sendmsg$alg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0)
recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x2d, &(0x7f0000000140)=[{&(0x7f0000001140)=""/4083, 0x1002}], 0x1}, 0x12062)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)
socket$kcm(0x29, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x6, 0x0, 0x5}]}, 0x10)
connect$inet6(r4, &(0x7f00000004c0)={0xa, 0x4e24, 0x100, @empty, 0x7}, 0x1c)
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r5, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{0x0}], 0x1}, 0x0)

3.852117815s ago: executing program 1 (id=637):
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, &(0x7f0000000080), 0x0, 0x1}, 0x20)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
socket$unix(0x1, 0x1, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x40106183, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0x11)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4682}, 0x1c)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000100039040000001000009d76a8e96aee", @ANYRES32=r6, @ANYBLOB="01980600000000001800128008000100677265000c00028008000700ac1414"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendto$packet(r3, &(0x7f00000001c0)="11eb", 0x2, 0x2404c081, &(0x7f0000000200)={0x11, 0x88a8, r6, 0x1, 0x4, 0x6, @multicast}, 0x14)

3.532457241s ago: executing program 4 (id=638):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000)

3.490657851s ago: executing program 4 (id=639):
socket$inet6(0xa, 0x2, 0x0)
epoll_create(0x400)
pipe(&(0x7f0000000200))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$l2tp6(0xa, 0x2, 0x73)
socket$igmp6(0xa, 0x3, 0x2)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x3)
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
epoll_create1(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000006b1109000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)

3.409201498s ago: executing program 3 (id=640):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x2, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8)
sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff0300"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000001c0), 0x0, 0x2}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f00)={{0x1}, &(0x7f0000000e80), &(0x7f0000000ec0)}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000240)={'ip6gre0\x00', <r3=>0x0, 0x29, 0x2, 0x7, 0x7, 0x82, @private1, @remote, 0x7, 0x7800, 0x7, 0xc}})
bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x20, 0x11, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0xcc, &(0x7f0000000b00)=""/204, 0x40f00, 0x6, '\x00', r3, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x4, 0x0, 0x8, 0xe}, 0x10, 0xffffffffffffffff, r0, 0x4, 0x0, &(0x7f0000000f80)=[{0x1, 0x3, 0xe, 0x7}, {0x0, 0x3, 0xb, 0x8}, {0x1, 0x2, 0xc, 0x2}, {0x4, 0x1, 0xa, 0x8}], 0x10, 0x9}, 0x94)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000004c0)={'filter\x00', 0x7, 0x4, 0x418, 0x110, 0x0, 0x110, 0x330, 0x330, 0x330, 0x4, 0x0, {[{{@arp={@rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 0x9, 0xb, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, 0xffff, 0xd4bf, 0x3, 0x4, 0x101, 0x7, 'nr0\x00', 'geneve1\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@multicast, @local, @empty, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @remote, 0x2}}}, {{@arp={@multicast1, @multicast2, 0xffffffff, 0xffffff00, 0xe, 0x3, {@empty, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x5, 0x2, 0x0, 0xff, 0x7, 'wg0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x0, 0x14}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mac=@remote, @multicast2, @multicast2, 0x0, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x468)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0x3)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4)
syz_genetlink_get_family_id$nl80211(0x0, r1)
sendmsg$NL80211_CMD_SET_WIPHY(r1, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
setsockopt$inet_int(r4, 0x0, 0x7, &(0x7f0000000040)=0x840c5, 0x4)

3.332724763s ago: executing program 4 (id=641):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x1, 0x20, 0x80000000, 0x6a4, {{0x5, 0x4, 0x3, 0x3, 0x14, 0x66, 0x0, 0x10, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}}}}})
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x60, r5, 0x4c1dad3e3d6a7499, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0x774}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x6, @loopback, 0x40}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0x5, 0x5, 0x40, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x40, 0xf376, 0x1c}})
r6 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES64=r5, @ANYRES32=r6], 0x1c}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a30000000000900030073797a30000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002d05000200070000003c0001800c00010062697477697365002c000280080002400000000a08000340000000010800064000000000080001400000001204000580040004800900010073797a30", @ANYRES32=r0], 0x110}}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x398, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x468, 0x468, 0x468, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xff000000, 0xff000000, 0xffffffff], 'wg1\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private1, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0x8, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r8 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r8, 0x118, 0x1, 0x0, 0x0)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f00000004c0)=0x8)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x77, &(0x7f0000000180)={r11, 0x0, 0x3, [0xe, 0x82, 0x0]}, &(0x7f00000001c0)=0xe)

2.958459386s ago: executing program 1 (id=642):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={<r2=>r1, &(0x7f0000000080)='bridge0\x00', 0x501a00, &(0x7f00000000c0)={@_ha_fsid={[0x14b4, 0x400]}, {0x2, 0x9, 0x7fff, 0x5}}, 0xf6, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x1})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x2}, 0x94)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000)
connect$bt_rfcomm(r5, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa)
shutdown(r5, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r3, <r8=>0xffffffffffffffff}, 0x4)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48)
r10 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbff"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x3a, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0xa, 0x7, 0x8, 0x18, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000b80)='GPL\x00', 0x2, 0xd, &(0x7f0000000bc0)=""/13, 0x41000, 0x58, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000000c00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x6, 0x0, 0x400}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[r3, r9, r2], 0x0, 0x10, 0xffff0001}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x48, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x12, 0x2, 0xf3d8, 0x0, 0x10, {[@mptcp=@ack={0x1e, 0x16, 0x8, 0x4, "a8c62540169d563df1167b340b68027cd8ac"}, @mptcp=@mp_join={0x1e, 0x3, 0x2}, @sack_perm={0x4, 0x2}, @sack={0x5, 0x16, [0x40, 0x200, 0x1ff, 0x1, 0x800]}]}}}}}}}}, 0x0)

2.327042367s ago: executing program 4 (id=643):
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000b0000000080000004"], 0x50)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000)
r2 = socket$netlink(0x10, 0x3, 0x8)
sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r3)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r5)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r8, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x64}}, 0x8080)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2235, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x6, 0x8, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x7, 0x6, 0x2, 0x2, 0x6, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0xe72, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0x200af6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x6, 0x354d, 0x5, 0x5, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x8, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x0, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x140, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0xffffffff, 0x3, 0x9, 0xc, 0x5, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbba, 0x50, 0xf, 0xf, 0xe, 0xd, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x6, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x28, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}]}, 0x28}}, 0x0)

2.302071599s ago: executing program 2 (id=644):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4)
bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x44010)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', <r6=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4)
bind$xdp(r5, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10)
bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r6, 0x0, r5}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)

2.153992674s ago: executing program 3 (id=645):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x84)
r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0)
socket$packet(0x11, 0x3, 0x300)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc008}, 0x4008010)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(r3, 0x0, 0x40)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
socket$inet6(0xa, 0x2, 0x0)
r6 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r5, &(0x7f0000000540)={@val={0xa, 0x1b}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x64, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x2, "da5dc24239496439975810e2461c3a0ca421b32bb23bc484f2abba01d398a9c0", "0c24a4bee93167b416488d3daf5cebe0", {"fa74669b2555dcba434270e46f21388e", "4d24cdd537af8e334b8c65dd1ba60de8"}}}}}}}}}, 0x9e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)

1.572102084s ago: executing program 0 (id=646):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r4, 0x0, 0x0)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000700)={@map, 0xffffffffffffffff, 0x11, 0x18}, 0x20)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r7=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$sock_inet_SIOCADDRT(r7, 0xff08, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r8, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r8, 0x604a6000)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40)
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084)
setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000180)=[@mss={0x2, 0x6}], 0x1)

1.493524367s ago: executing program 3 (id=647):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x2, 0x3, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r0, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x20)

1.457992617s ago: executing program 2 (id=648):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="010000000000000000509a0000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000010000000000000000000000a5976ac6acd41fd8"], 0x48}}, 0x4008004)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0)
recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x49}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7f6}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r5)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x8)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r7}, 0x38)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newsa={0x140, 0x10, 0x413, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', 0xfffd, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee00}, {@in=@rand_addr=0x64010100, 0x20, 0x32}, @in6=@private1, {0x0, 0x7, 0x800000000000, 0x4, 0xb5f7, 0x4, 0x20000000008}, {0x100000001, 0x8, 0xcc, 0x8}, {0xf8, 0x0, 0x3}, 0x0, 0x4, 0x2, 0x0, 0x1}, [@algo_aead={0x4f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x18, 0x40, "06ec87"}}]}, 0x140}}, 0x844)
connect$inet6(r6, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c)
sendto$inet6(r6, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f)

1.333497833s ago: executing program 0 (id=649):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2000)

1.325397793s ago: executing program 1 (id=650):
setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140)=0x1, 0x4)
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080)

1.314254623s ago: executing program 3 (id=651):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0)
recvmmsg(r4, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f000000c300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
close(0xffffffffffffffff)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x800, r6}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r6}, 0x38)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x844)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c)
sendto$inet6(r5, 0x0, 0x0, 0x40010, &(0x7f00000002c0)={0xa, 0x4e21, 0x2, @local, 0x8}, 0x1c)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

1.264075895s ago: executing program 4 (id=652):
socket$inet6_sctp(0xa, 0x4, 0x84)
socket$inet6_sctp(0xa, 0x4, 0x84)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r2, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x4, 0x0, &(0x7f00000005c0))
socket$igmp(0x2, 0x3, 0x2)
syz_emit_ethernet(0x55, &(0x7f0000000300)=ANY=[@ANYBLOB="05006652e150aaaaaaaaaa108848000f0f00000003000000000000000000972744ca550b864686bd38c9800791aaffdb87e5ed82ac94f939e007efc86bdcaee92fcf358f3d478db9cdfbe2a407d8530528ab1ef4e6b711e6c01d729f4ed2bd72d4336598"], 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x18, r4, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r5)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001840)={0x3c, r6, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x2000040)
r7 = socket$key(0xf, 0x3, 0x2)
r8 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@del={0xe0, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {{'lrw-camellia-asm\x00'}, '\x00', '\x00', 0x2000, 0x200}}, 0xe0}, 0x1, 0x0, 0x0, 0x20040810}, 0x850)
r9 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r9, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x3, 0x100000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000680)=[{0x10, 0x84, 0x8}], 0x10}, 0x41)
sendmsg$key(r7, 0x0, 0x0)

1.169394375s ago: executing program 0 (id=653):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
pipe(&(0x7f00000001c0))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESDEC], 0x2c}, 0x1, 0x0, 0x0, 0x4402}, 0x0)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x4})
r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/30, 0x1e}], 0x1, 0xe8, 0x8)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x38)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_REMOVE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r8, 0x403, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}}, 0x8054)
sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8000)
sendto$inet6(r6, &(0x7f0000000080)='\x00\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2, 0x4}, 0x1c)
ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000040))

852.214051ms ago: executing program 1 (id=654):
unshare(0x8000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xffffffffffffff01, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0xfffffffe, {0x7, r2}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x1, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x38}}, 0x800)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @random="d976f308c05c"})
r4 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x2000c041)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x32, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6, <r7=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r5}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r7, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
write$tun(r3, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x30, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x20, 0x5, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}]}}}}}, 0x3e)

448.440397ms ago: executing program 2 (id=655):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$kcm(0xa, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300), 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00')
unshare(0x6a040000)
r3 = socket(0x848000000015, 0x805, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4, 0xfffffffd, @rand_addr=' \x01\x00', 0x208d7}, 0x4e)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004", @ANYRES8=0x0], 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r5, 0xc040583f, &(0x7f0000000680)={{@_ha_fsid={[0x4, 0x7]}, {0xa30f, 0x1, 0x9, 0x8}}, {{[0x100, 0x4, 0x1, 0x2]}, 0x0, 0x2, 0xfffff222, 0x0, &(0x7f0000000840)=[{{@_ha_fsid={[0x0, 0x8]}, {0x4, 0x6, 0x6, 0x2}}, 0x8001, 0x0, '\x00'}, {{@_ha_fsid={[0x1633, 0x10000]}, {0x7, 0xfff7, 0x1, 0x1}}, 0xc, 0x0, 'Z\x00'}, {{@_ha_fsid={[0x5, 0x5]}, {0x3, 0x80, 0x70, 0x2}}, 0xffff0000, 0x0, '}\x00'}, {{@align=0x9, {0x7, 0x3, 0x917, 0x100}}, 0x66d2, 0x0, '/dev/net/tun\x00'}, {{@_ha_fsid={[0x1, 0x7]}, {0x2, 0x1000, 0x0, 0x4}}, 0xcd0, 0x0, 'ns/uts\x00'}, {{@align=0x9, {0x9, 0x3, 0x6, 0xfffffffffffffff0}}, 0x6, 0x0, '(\'!(/%(\x00'}, {{@align=0x3, {0x8, 0xaa7, 0x3ff, 0x4}}, 0x3, 0x0, '}]:[\\$/@&\x00'}, {{@align=0x5, {0x7, 0x0, 0x7fff, 0x5}}, 0x3, 0x0, 'ns/uts\x00'}, {{@_ha_fsid={[0xca, 0x1]}, {0x101, 0x4, 0x9, 0x4}}, 0x1, 0x0, 'r.\xf3\x8e\x7f\t\x00q\x1d\x9f\x96h[\xe3\xc3/\x90\xde\xe2\xbcLd\x9e\xb4c@w\x055\xf1\xb7\xa9\x18\xdbp\xa6\xe0\xe5\x17\x18Ps\xcei3\x12\t\x83?\xcb\xcax\xe1 \xd3\x1b^]\xb4\x9e\x05\xd3t\xed\'\x82w\xc4]m\xeb\xef\xc9\xbc\xc7\xf66P)!\xde\xa4+\x1e9\xee\xaa\x9cF\a\x00\x00\x00\x00\x00\x00\x00~Ym\xff7\x86\x99(\xc05\x8dz\x965VJ\xfa\xab\x8b]\xaaQ\x9a\x8d\x12\xba\xedVx\xde\x18\x00+\x1d\x1e@+E\x97\aW\xee3\x00\x00'}]}})
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r6, &(0x7f00000004c0)='syz1\x00', 0x1ff)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000040)=0x6, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c)

345.982113ms ago: executing program 1 (id=656):
close(0x3)
socket(0x2, 0x80805, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000c80)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x101, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWTABLE={0x1c, 0x0, 0xa, 0x400, 0x0, 0x0, {0x8, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xb4}, 0x1, 0x0, 0x0, 0x20020001}, 0x0)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14)
setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r2, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24)
close(r2)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$kcm(0x2, 0x200000000000001, 0x106)
ioctl$int_in(r3, 0x5452, 0x0)
sendmsg$kcm(r3, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
sendmsg$nl_xfrm(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0xa03, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", ""]}, 0xe}, 0x1, 0x0, 0x0, 0x4004800}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x82, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r7 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPCONNADD(r7, 0x400442c8, &(0x7f00000000c0)={r6, 0x1, 0x4})

342.864102ms ago: executing program 3 (id=657):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, 0x0, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x6, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x7, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x80007ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x403, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x6, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x7200, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x80000000, 0x6, 0x80000001, 0x3, 0x1, 0x9bc, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0x40000b, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0x4bf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x8600, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0x408, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x0, 0x6, 0xd, 0x3, 0xa, 0x8, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x0, 0x807, 0x1fd, 0x3, 0x400, 0xffffffff, 0x1040, 0x3, 0xfffffffa, 0x9a6, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x6, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x0, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'ip6tnl0\x00', 0xa5})
r4 = socket$inet6(0xa, 0x2, 0x0)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={<r6=>r5})
ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r5})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x40040)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r5, r7})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004)

224.887178ms ago: executing program 4 (id=658):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
close(0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000801}, 0x40810)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8932, &(0x7f0000000900)={'batadv_slave_1\x00'})
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000400)=@req3={0xfffffffe, 0x2, 0x6, 0x20000000, 0x8, 0x1, 0x8000}, 0x1c)
socket(0x840000000002, 0x3, 0x100)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='lp', 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x5084)
sendto$inet(r1, &(0x7f0000000300)="8995b3c271ba", 0x6, 0x4044880, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/62, 0x1338000, 0x800}, 0x20)

1.091534ms ago: executing program 1 (id=659):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db565"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40054}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300d67a8527f76ec1d39e537c4c3060c60100106c720a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
unshare(0x66000080)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
shutdown(0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={<r3=>0x0, 0x0, &(0x7f00000001c0)}, &(0x7f00000001c0)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
accept4$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @local}, 0x10, 0x80800)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
sendfile(r1, r2, 0x0, 0xffffffff004)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000000)=0x3, 0x4)

0s ago: executing program 3 (id=660):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@local, @loopback, 0x1}, 0x10)
r3 = socket$kcm(0x29, 0x5, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000840)={r1, r4})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}, {&(0x7f0000000040)="7542473782798be019", 0x9}], 0x2}}], 0x2, 0x2090)
socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4)
sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
shutdown(r5, 0x0)
close(0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts.
[   63.668545][ T5614] cgroup: Unknown subsys name 'net'
[   63.775979][ T5614] cgroup: Unknown subsys name 'cpuset'
[   63.784764][ T5614] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   65.086191][ T5614] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   67.180592][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   67.189139][ T5631] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   67.202811][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   67.213019][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   67.221648][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   67.222942][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   67.229597][ T5639] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   67.237487][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   67.251350][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   67.252125][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   67.258906][ T5644] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   67.273550][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   67.283644][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   67.284173][ T5646] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   67.294044][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   67.298366][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   67.313167][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   67.313485][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   67.321500][ T5646] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   67.330335][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   67.334964][ T5646] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   67.345608][   T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   67.356390][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   67.356985][   T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   67.388400][ T5646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.983711][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.991417][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.998683][ T5629] bridge_slave_0: entered allmulticast mode
[   69.005662][ T5629] bridge_slave_0: entered promiscuous mode
[   69.019207][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.026431][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.033624][ T5627] bridge_slave_0: entered allmulticast mode
[   69.040551][ T5627] bridge_slave_0: entered promiscuous mode
[   69.068308][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.075565][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.082680][ T5629] bridge_slave_1: entered allmulticast mode
[   69.090116][ T5629] bridge_slave_1: entered promiscuous mode
[   69.104779][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.111904][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.119165][ T5627] bridge_slave_1: entered allmulticast mode
[   69.126121][ T5627] bridge_slave_1: entered promiscuous mode
[   69.192668][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.199880][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.207073][ T5626] bridge_slave_0: entered allmulticast mode
[   69.214334][ T5626] bridge_slave_0: entered promiscuous mode
[   69.249711][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.259170][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.266850][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.274277][ T5626] bridge_slave_1: entered allmulticast mode
[   69.281152][ T5626] bridge_slave_1: entered promiscuous mode
[   69.291812][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.301063][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.308367][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.315552][ T5628] bridge_slave_0: entered allmulticast mode
[   69.322414][ T5628] bridge_slave_0: entered promiscuous mode
[   69.339474][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.368093][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.377350][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.385741][ T4948] Bluetooth: hci1: command tx timeout
[   69.391620][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.391708][   T50] Bluetooth: hci3: command tx timeout
[   69.399359][ T5628] bridge_slave_1: entered allmulticast mode
[   69.405137][ T4948] Bluetooth: hci0: command tx timeout
[   69.413362][ T5628] bridge_slave_1: entered promiscuous mode
[   69.423402][ T5640] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.430478][ T5640] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.437680][ T5640] bridge_slave_0: entered allmulticast mode
[   69.444657][ T5640] bridge_slave_0: entered promiscuous mode
[   69.463359][ T4948] Bluetooth: hci4: command tx timeout
[   69.469473][   T50] Bluetooth: hci2: command tx timeout
[   69.498461][ T5640] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.505674][ T5640] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.512779][ T5640] bridge_slave_1: entered allmulticast mode
[   69.520042][ T5640] bridge_slave_1: entered promiscuous mode
[   69.528511][ T5629] team0: Port device team_slave_0 added
[   69.536536][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.575205][ T5629] team0: Port device team_slave_1 added
[   69.583655][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.594389][ T5627] team0: Port device team_slave_0 added
[   69.603517][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.647771][ T5627] team0: Port device team_slave_1 added
[   69.655690][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.667243][ T5640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.714022][ T5640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.731542][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.738754][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.764908][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.778348][ T5626] team0: Port device team_slave_0 added
[   69.809883][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.816993][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.842994][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.855812][ T5626] team0: Port device team_slave_1 added
[   69.861974][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.869227][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.899229][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.912225][ T5628] team0: Port device team_slave_0 added
[   69.919726][ T5640] team0: Port device team_slave_0 added
[   69.940186][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.948047][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   69.974937][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.987773][ T5628] team0: Port device team_slave_1 added
[   70.005753][ T5640] team0: Port device team_slave_1 added
[   70.067316][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.074572][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.100540][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.112850][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.119850][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.145789][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.158415][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.165385][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.191669][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.210933][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.217995][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.243966][ T5640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.256164][ T5640] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.263237][ T5640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.289155][ T5640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.307228][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.314202][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   70.340109][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.356257][ T5629] hsr_slave_0: entered promiscuous mode
[   70.363437][ T5629] hsr_slave_1: entered promiscuous mode
[   70.436004][ T5627] hsr_slave_0: entered promiscuous mode
[   70.442199][ T5627] hsr_slave_1: entered promiscuous mode
[   70.448451][ T5627] debugfs: 'hsr0' already exists in 'hsr'
[   70.454303][ T5627] Cannot create hsr debugfs directory
[   70.474985][ T5640] hsr_slave_0: entered promiscuous mode
[   70.481343][ T5640] hsr_slave_1: entered promiscuous mode
[   70.487528][ T5640] debugfs: 'hsr0' already exists in 'hsr'
[   70.493281][ T5640] Cannot create hsr debugfs directory
[   70.543612][ T5626] hsr_slave_0: entered promiscuous mode
[   70.549831][ T5626] hsr_slave_1: entered promiscuous mode
[   70.556109][ T5626] debugfs: 'hsr0' already exists in 'hsr'
[   70.561832][ T5626] Cannot create hsr debugfs directory
[   70.597271][ T5628] hsr_slave_0: entered promiscuous mode
[   70.603602][ T5628] hsr_slave_1: entered promiscuous mode
[   70.609539][ T5628] debugfs: 'hsr0' already exists in 'hsr'
[   70.615509][ T5628] Cannot create hsr debugfs directory
[   71.084625][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.098444][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.107672][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.119472][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.135198][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.145194][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.159879][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.169289][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.215398][ T5640] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   71.226453][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[   71.228644][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.233829][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[   71.240832][ T5640] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   71.256180][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.264889][ T5640] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   71.274578][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.286652][ T5640] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   71.297885][ T5640] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.389064][ T5627] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.399471][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.408953][ T5627] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.419004][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.429227][ T5627] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.438436][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.447110][ T5627] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.458024][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.465408][ T4948] Bluetooth: hci0: command tx timeout
[   71.465471][   T50] Bluetooth: hci3: command tx timeout
[   71.470811][ T5646] Bluetooth: hci1: command tx timeout
[   71.543470][ T5646] Bluetooth: hci4: command tx timeout
[   71.549311][ T4948] Bluetooth: hci2: command tx timeout
[   71.551633][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   71.566641][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.584868][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   71.594854][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.609724][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   71.619435][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.628529][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   71.638835][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.731046][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   71.742127][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   71.751560][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   71.760901][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   71.770354][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.787278][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   71.797058][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   71.805317][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.814093][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   71.862546][ T5640] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.886611][ T5629] 8021q: adding VLAN 0 to HW filter on device team0
[   71.909164][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.916651][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.942859][ T5640] 8021q: adding VLAN 0 to HW filter on device team0
[   71.969104][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.976305][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.985942][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.993004][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.002200][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.009307][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.056559][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.112051][ T5627] 8021q: adding VLAN 0 to HW filter on device team0
[   72.138942][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.146042][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.161249][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.199576][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.206757][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.240053][ T5626] 8021q: adding VLAN 0 to HW filter on device team0
[   72.267487][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.274649][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.326945][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.352636][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.359814][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.450533][ T5628] 8021q: adding VLAN 0 to HW filter on device team0
[   72.481021][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.488199][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.516897][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.524068][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.565766][ T5626] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.094855][ T5640] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.301621][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.452885][ T5629] veth0_vlan: entered promiscuous mode
[   73.497585][ T5629] veth1_vlan: entered promiscuous mode
[   73.543409][ T5646] Bluetooth: hci1: command tx timeout
[   73.543895][ T4948] Bluetooth: hci0: command tx timeout
[   73.548833][ T5646] Bluetooth: hci3: command tx timeout
[   73.610162][ T5629] veth0_macvtap: entered promiscuous mode
[   73.625469][ T5646] Bluetooth: hci4: command tx timeout
[   73.628684][ T4948] Bluetooth: hci2: command tx timeout
[   73.674966][ T5629] veth1_macvtap: entered promiscuous mode
[   73.721548][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.758310][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.773463][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.821176][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.865182][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.886750][ T5640] veth0_vlan: entered promiscuous mode
[   73.906390][   T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.916465][   T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.937061][   T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.948767][   T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.968628][ T5640] veth1_vlan: entered promiscuous mode
[   73.974953][ T5628] veth0_vlan: entered promiscuous mode
[   74.000916][ T5626] veth0_vlan: entered promiscuous mode
[   74.027630][ T5628] veth1_vlan: entered promiscuous mode
[   74.046625][ T5627] veth0_vlan: entered promiscuous mode
[   74.067890][ T5626] veth1_vlan: entered promiscuous mode
[   74.106109][ T5627] veth1_vlan: entered promiscuous mode
[   74.116282][   T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.130848][   T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.174818][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.193557][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.212241][ T5626] veth0_macvtap: entered promiscuous mode
[   74.227362][ T5640] veth0_macvtap: entered promiscuous mode
[   74.244742][ T5626] veth1_macvtap: entered promiscuous mode
[   74.263465][ T5640] veth1_macvtap: entered promiscuous mode
[   74.271288][ T5628] veth0_macvtap: entered promiscuous mode
[   74.274877][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   74.289902][ T5628] veth1_macvtap: entered promiscuous mode
[   74.355073][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.402580][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.416729][ T5824] bridge_slave_0 (unregistering): left allmulticast mode
[   74.424381][ T5824] bridge_slave_0 (unregistering): left promiscuous mode
[   74.431383][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.463162][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.470802][ T5627] veth0_macvtap: entered promiscuous mode
[   74.482191][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.497671][ T5627] veth1_macvtap: entered promiscuous mode
[   74.509264][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.534730][ T5640] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.552712][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.577993][   T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.601246][   T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.613793][   T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.655825][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.715816][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.726792][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.799889][   T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.809651][   T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.820955][   T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.832254][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.856085][   T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.866488][   T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.890862][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.914316][   T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.935362][   T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.962046][   T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.015887][   T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.065717][   T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.129700][   T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.142006][   T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.157075][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.165562][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.175699][   T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   75.182154][ T5830] Illegal XDP return value 4294967294 on prog  (id 5) dev N/A, expect packet loss!
[   75.194199][   T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.219006][   T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.228556][   T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.245110][   T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.262060][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.270929][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.356851][  T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.367312][  T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.391973][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.404264][   T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.406096][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.427534][   T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.455195][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.470722][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.533360][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.554909][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.599914][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.622913][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.631101][ T4948] Bluetooth: hci3: command tx timeout
[   75.631137][   T50] Bluetooth: hci1: command tx timeout
[   75.642344][ T5646] Bluetooth: hci0: command tx timeout
[   75.703448][   T50] Bluetooth: hci4: command tx timeout
[   75.704897][ T4948] Bluetooth: hci2: command tx timeout
[   76.025904][ T5847] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   76.053784][ T5851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'.
[   76.058541][ T5847] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   76.098098][ T5847] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   76.152156][ T5847] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   76.170411][ T5847] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   76.374460][ T5852] smbdirect: ib_dev[syz1] removed
[   76.847956][ T5863] netlink: 277 bytes leftover after parsing attributes in process `syz.3.12'.
[   77.032471][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11'.
[   77.110985][ T5866] IPVS: Scheduler module ip_vs_sip not found
[   77.864000][ T5646] Bluetooth: hci4: command 0x0405 tx timeout
[   78.785538][ T5914] syzkaller0: entered promiscuous mode
[   78.807893][ T5914] syzkaller0: entered allmulticast mode
[   78.937500][ T5914] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19'.
[   79.210631][ T5292] veth0_vlan: left promiscuous mode
[   79.246805][ T5897] infiniband syz0: set active
[   79.250439][ T5292] veth0_vlan: entered promiscuous mode
[   79.266903][ T5897] infiniband syz0: added bridge_slave_1
[   79.347221][ T5897] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   79.362614][ T5897] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   79.392015][ T5926] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.22'.
[   79.414015][ T5897] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   79.459004][ T5926] Bluetooth: MGMT ver 1.23
[   79.518291][ T5897] RDS/IB: syz0: added
[   79.528717][ T5897] smc: adding ib device syz0 with port count 1
[   79.535554][ T5897] smc:    ib device syz0 port 1 has no pnetid
[   79.763656][ T5938] netlink: 'syz.1.24': attribute type 10 has an invalid length.
[   79.795418][ T5938] veth0_vlan: left promiscuous mode
[   79.823435][ T5938] veth0_vlan: entered promiscuous mode
[   79.889310][ T5938] team0: Device veth0_vlan failed to register rx_handler
[   80.819713][ T5972] Zero length message leads to an empty skb
[   81.469592][   T10] cfg80211: failed to load regulatory.db
[   81.633810][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'.
[   81.900294][ T5740] IPVS: starting estimator thread 0...
[   82.003846][ T5985] IPVS: using max 32 ests per chain, 76800 per kthread
[   82.048658][ T5989] Bluetooth: MGMT ver 1.23
[   82.192124][ T5990] hsr0: entered promiscuous mode
[   82.228918][ T5931] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   82.246864][ T5931] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   82.256059][ T5990] netlink: 44 bytes leftover after parsing attributes in process `syz.4.36'.
[   82.270803][ T5931] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   82.317362][ T5931] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   82.528258][ T5995] netlink: 'syz.3.37': attribute type 13 has an invalid length.
[   82.792878][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.800435][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.954894][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.972772][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.092017][ T1239] syz0: Port: 1 Link DOWN
[   83.121576][   T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.138084][   T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.159212][   T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.196091][   T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   83.261346][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.40'.
[   83.298823][ T6009] netlink: 14 bytes leftover after parsing attributes in process `syz.4.40'.
[   83.299517][ T6011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'.
[   83.321057][ T6011] vlan2: entered promiscuous mode
[   83.329290][ T6011] veth0: entered promiscuous mode
[   83.639866][ T6025] netlink: 'syz.2.45': attribute type 3 has an invalid length.
[   83.663763][ T6023] bridge_slave_0: left allmulticast mode
[   83.672670][ T6023] bridge_slave_0: left promiscuous mode
[   83.687573][ T6023] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.719548][ T6023] bridge_slave_1: left allmulticast mode
[   83.725464][ T6023] bridge_slave_1: left promiscuous mode
[   83.731725][ T6023] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.754609][ T6023] bond0: (slave bond_slave_0): Releasing backup interface
[   83.769090][ T6023] bond0: (slave bond_slave_1): Releasing backup interface
[   83.792976][ T6023] team0: Port device team_slave_0 removed
[   83.808716][ T6023] team0: Port device team_slave_1 removed
[   83.816017][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.824600][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_0
[   83.837662][ T6023] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   83.849553][ T6023] batman_adv: batadv0: Removing interface: batadv_slave_1
[   83.859817][ T6023] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[   83.896126][ T1239] syz1: Port: 1 Link DOWN
[   84.072307][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.46'.
[   86.059259][ T6083] Bluetooth: MGMT ver 1.23
[   86.097410][ T6077] netlink: 32 bytes leftover after parsing attributes in process `syz.1.54'.
[   86.184344][ T1239] IPVS: starting estimator thread 0...
[   86.194162][ T6085] IPVS: sh: FWM 3 0x00000003 - no destination available
[   86.212777][ T6073] syzkaller1: entered promiscuous mode
[   86.224147][ T6073] syzkaller1: entered allmulticast mode
[   86.258254][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'.
[   86.303179][ T6087] IPVS: using max 34 ests per chain, 81600 per kthread
[   86.761993][ T6095] syz.0.56 uses obsolete (PF_INET,SOCK_PACKET)
[   86.831535][ T6098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.57'.
[   86.876906][ T6098] veth1_to_batadv: entered allmulticast mode
[   87.156094][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'.
[   87.459226][ T6111] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   87.780983][ T6120] 8021q: adding VLAN 0 to HW filter on device macvlan3
[   88.087502][ T6136] netlink: 84 bytes leftover after parsing attributes in process `syz.3.61'.
[   88.103115][ T5646] Bluetooth: hci2: command 0x0401 tx timeout
[   88.103701][ T4948] Bluetooth: hci2: Opcode 0x0401 failed: -110
[   88.210807][ T6139] sctp: [Deprecated]: syz.3.61 (pid 6139) Use of struct sctp_assoc_value in delayed_ack socket option.
[   88.210807][ T6139] Use struct sctp_sack_info instead
[   88.290880][ T6146] Bluetooth: MGMT ver 1.23
[   88.358129][ T6143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.62'.
[   88.372458][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'.
[   89.087494][ T6159] veth0_vlan: left promiscuous mode
[   89.259756][   T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.282998][   T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.445810][   T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.484952][   T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   89.529290][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'.
[   89.601659][ T6181] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'.
[   89.611646][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'.
[   89.649661][ T6175] 8021q: adding VLAN 0 to HW filter on device bond1
[   89.693522][ T6181] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.739936][ T6181] bond1: (slave bond0): making interface the new active one
[   89.763735][ T6181] bond1: (slave bond0): Enslaving as an active interface with an up link
[   90.576316][ T6199] smc: removing ib device syz0
[   90.775010][ T6202] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[   90.841823][ T6199] smbdirect: ib_dev[syz0] removed
[   92.300066][ T6230] netlink: 32 bytes leftover after parsing attributes in process `syz.1.72'.
[   92.660165][ T6252] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   93.010994][ T6261] netlink: 'syz.0.77': attribute type 27 has an invalid length.
[   93.502857][ T1239] IPVS: starting estimator thread 0...
[   93.569617][ T6270] 8021q: adding VLAN 0 to HW filter on device bond0
[   93.603112][ T6274] IPVS: using max 32 ests per chain, 76800 per kthread
[   93.613484][ T6270] 8021q: adding VLAN 0 to HW filter on device team0
[   93.687478][ T6270] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.002509][ T6270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   94.032434][ T6270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   94.064634][ T6270] veth1_vlan: left promiscuous mode
[   94.087218][ T6270] veth0_vlan: entered promiscuous mode
[   94.113850][ T6270] veth1_vlan: entered promiscuous mode
[   94.144431][ T5740] IPVS: starting estimator thread 0...
[   94.160663][ T6270] veth1_macvtap: left promiscuous mode
[   94.199532][ T6270] veth0_macvtap: left promiscuous mode
[   94.229151][ T6270] veth0_macvtap: entered promiscuous mode
[   94.253174][ T6287] IPVS: using max 30 ests per chain, 72000 per kthread
[   94.275333][ T6270] veth1_macvtap: entered promiscuous mode
[   94.366886][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   94.429640][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   94.496840][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   94.535563][ T6270] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   94.570225][ T6270] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   94.782278][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   94.804555][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   94.825711][ T6291] xt_hashlimit: size too large, truncated to 1048576
[   94.847266][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   94.875661][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   94.948225][ T6294] netlink: 'syz.0.81': attribute type 1 has an invalid length.
[   95.038400][ T6294] netlink: 224 bytes leftover after parsing attributes in process `syz.0.81'.
[   95.521771][ T6311] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[   96.409732][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'.
[   96.982772][ T6364] smbdirect: ib_dev[syz1] renamed to [syz2]
[   97.236846][ T6378] smc: net device wlan0 applied user defined pnetid SYZ0
[   97.324837][ T6370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.90'.
[   97.508881][ T6389] warning: `syz.0.92' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   97.576179][ T6389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.92'.
[   97.618231][ T6374] syz.1.90 (6374) used greatest stack depth: 17944 bytes left
[   98.594914][ T6416] netlink: 'syz.3.101': attribute type 1 has an invalid length.
[   98.762218][ T6420] netlink: 28 bytes leftover after parsing attributes in process `syz.3.101'.
[   98.814931][ T6420] 8021q: adding VLAN 0 to HW filter on device bond1
[   99.736769][ T6418] bond1: (slave geneve2): making interface the new active one
[   99.756281][ T6418] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  100.089279][ T6439] netlink: 'syz.4.105': attribute type 1 has an invalid length.
[  100.125204][   T37] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  100.148541][   T37] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  100.401360][ T6449] netlink: 72 bytes leftover after parsing attributes in process `syz.3.106'.
[  100.429531][ T6449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'.
[  100.463347][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.106'.
[  100.708741][   T37] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  100.736357][   T37] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  100.975069][ T6458] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  101.036995][ T6458] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  102.001069][ T6468] syz_tun: entered allmulticast mode
[  102.020430][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.111'.
[  102.281167][ T6468] syz_tun (unregistering): left allmulticast mode
[  102.678609][ T6482] netlink: 'syz.1.113': attribute type 13 has an invalid length.
[  103.207928][ T6488] 8021q: adding VLAN 0 to HW filter on device macvlan4
[  103.371287][ T6490] batman_adv: batadv0: Adding interface: macvlan2
[  103.377940][ T6490] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  103.438694][ T6490] batman_adv: batadv0: Interface activated: macvlan2
[  103.617305][ T6501] netlink: 'syz.0.118': attribute type 4 has an invalid length.
[  103.670343][ T6508] netlink: 'syz.0.118': attribute type 4 has an invalid length.
[  103.968969][ T6512] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.976711][ T6512] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.171558][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.201050][ T6512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.381271][   T37] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.505337][   T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.538710][   T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.586860][   T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.708847][ T6547] netlink: 16 bytes leftover after parsing attributes in process `syz.2.127'.
[  105.072676][ T6559] syzkaller0: entered promiscuous mode
[  105.095637][ T6559] syzkaller0: entered allmulticast mode
[  105.255417][ T6568] tipc: Can't bind to reserved service type 2
[  105.305189][ T5646] Bluetooth: hci2: command 0x0401 tx timeout
[  105.308848][ T4948] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  105.529352][ T6577] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  105.544675][  T807] team_slave_0: entered promiscuous mode
[  105.551648][  T807] team_slave_1: entered promiscuous mode
[  105.625035][ T6583] batman_adv: batadv0: Interface deactivated: macvlan2
[  106.031474][ T6592] netlink: 'syz.3.140': attribute type 1 has an invalid length.
[  106.092083][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.3.140'.
[  106.104110][ T6592] bond2: entered promiscuous mode
[  106.120890][ T6592] 8021q: adding VLAN 0 to HW filter on device bond2
[  106.146953][ T6597] bond2: entered allmulticast mode
[  106.212196][ T6592] bond2: (slave bridge1): making interface the new active one
[  106.220072][ T6592] bridge1: entered promiscuous mode
[  106.228084][ T6592] bridge1: entered allmulticast mode
[  106.241868][ T6592] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  106.580777][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.589904][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.649010][ T6605] team_slave_0: left promiscuous mode
[  106.686007][ T6605] team_slave_1: left promiscuous mode
[  106.854635][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  106.881347][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  107.120661][ T6333] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.158982][ T6333] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0
[  107.271243][ T6333] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.307373][ T6333] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0
[  107.343375][ T6333] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.371349][ T6333] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0
[  107.465420][ T6333] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  107.495918][ T6333] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0
[  107.647680][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.148'.
[  107.933728][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.3.151'.
[  108.215222][ T6655] netlink: 36 bytes leftover after parsing attributes in process `syz.4.154'.
[  108.257388][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.153'.
[  108.720089][ T6660] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  109.456459][ T6693] vlan2: entered promiscuous mode
[  109.654164][ T6699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'.
[  110.522977][ T6726] netlink: 'syz.1.169': attribute type 16 has an invalid length.
[  110.531171][ T6726] netlink: 'syz.1.169': attribute type 17 has an invalid length.
[  110.644893][ T6726] 8021q: adding VLAN 0 to HW filter on device bond0
[  110.675825][ T6726] 8021q: adding VLAN 0 to HW filter on device team0
[  110.726105][ T6726] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.878354][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.902155][ T6726] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.921417][ T6726] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  110.932452][ T6726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  110.955290][ T6726] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  111.009285][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.016520][ T6333] bridge0: port 2(bridge_slave_1) entered forwarding state
[  111.833681][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.180'.
[  112.025211][ T6757] veth0_vlan: left promiscuous mode
[  112.136040][ T1345] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.157466][ T1345] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.174420][ T1345] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.187740][ T1345] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  112.640575][ T6791] IPVS: set_ctl: invalid protocol: 136 172.30.0.1:20005
[  112.722612][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.4.185'.
[  112.735860][ T6798] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  112.856846][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'.
[  112.871168][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'.
[  112.928806][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.186'.
[  112.939576][ T6333] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  112.949592][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.186'.
[  112.958603][ T6333] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  112.993838][ T6333] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  113.017050][ T6333] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  113.046835][ T6810] syzkaller0: entered promiscuous mode
[  113.057431][ T6810] syzkaller0: entered allmulticast mode
[  113.519859][ T6836] netlink: 'syz.1.193': attribute type 1 has an invalid length.
[  113.570881][ T6836] bond1: entered promiscuous mode
[  113.576272][ T6836] bond1: entered allmulticast mode
[  113.581927][ T6836] 8021q: adding VLAN 0 to HW filter on device bond1
[  113.661037][ T6842] erspan1: entered allmulticast mode
[  113.675446][ T6842] bond1: (slave erspan1): making interface the new active one
[  113.684112][ T6842] erspan1: entered promiscuous mode
[  113.691233][ T6842] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  113.743574][ T6842] syz.1.193 (6842) used obsolete PPPIOCDETACH ioctl
[  114.484576][ T6881] syzkaller0: entered promiscuous mode
[  114.489999][ T6871] netlink: 'syz.2.198': attribute type 10 has an invalid length.
[  114.497948][ T6881] syzkaller0: entered allmulticast mode
[  114.600105][ T6871] veth0_vlan: left promiscuous mode
[  114.626163][ T6871] veth0_vlan: entered promiscuous mode
[  114.656423][ T6871] team0: Device veth0_vlan failed to register rx_handler
[  114.988233][ T6904] xt_bpf: check failed: parse error
[  115.388009][ T6916] netlink: 'syz.1.207': attribute type 7 has an invalid length.
[  117.103573][ T6916] xfrm0: entered promiscuous mode
[  117.116802][ T6916] xfrm0: entered allmulticast mode
[  117.145411][ T6333] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  117.174451][ T6333] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  117.211166][ T6333] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  117.226279][ T6333] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  117.488240][ T6941] x_tables: duplicate underflow at hook 2
[  117.768311][ T6966] netlink: 'syz.3.220': attribute type 10 has an invalid length.
[  117.800942][ T6966] veth0_vlan: left promiscuous mode
[  117.813881][ T6966] veth0_vlan: entered promiscuous mode
[  117.828172][ T6966] team0: Device veth0_vlan failed to register rx_handler
[  117.991793][ T6972] netlink: 32 bytes leftover after parsing attributes in process `syz.4.224'.
[  118.085305][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.224'.
[  118.695148][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.229'.
[  118.919960][ T7005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.229'.
[  118.931010][ T7005] netlink: 14 bytes leftover after parsing attributes in process `syz.0.229'.
[  120.304563][ T6944] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  120.517139][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'.
[  120.579298][ T7013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.233'.
[  120.588829][ T6337] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  120.620730][ T6337] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  120.645515][ T6337] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  120.677370][ T6337] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  120.808259][ T7030] netlink: 277 bytes leftover after parsing attributes in process `syz.4.237'.
[  120.846129][ T7033] xt_bpf: check failed: parse error
[  121.092987][ T7031] infiniband syz0: set down
[  121.097822][ T7031] infiniband syz0: added bridge_slave_1
[  121.136565][ T7031] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  121.152007][ T7031] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  121.169526][ T7031] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  121.222679][ T7031] RDS/IB: syz0: added
[  121.237549][ T7031] smc: adding ib device syz0 with port count 1
[  121.244905][ T7031] smc:    ib device syz0 port 1 has no pnetid
[  122.582406][ T7056] netlink: 108 bytes leftover after parsing attributes in process `syz.1.240'.
[  122.679150][ T7060] netlink: 'syz.0.243': attribute type 13 has an invalid length.
[  122.710474][ T7060] netlink: 'syz.0.243': attribute type 17 has an invalid length.
[  122.902254][ T7064] can: request_module (can-proto-0) failed.
[  123.030864][ T7060] 8021q: adding VLAN 0 to HW filter on device bond0
[  123.077815][ T7060] 8021q: adding VLAN 0 to HW filter on device team0
[  123.142377][ T7060] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.232182][ T7060] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  123.243207][ T7060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.265766][ T7060] veth1_vlan: left promiscuous mode
[  123.279420][ T7060] veth0_vlan: entered promiscuous mode
[  123.311567][ T7060] veth1_vlan: entered promiscuous mode
[  123.321927][ T7060] veth1_macvtap: left promiscuous mode
[  123.329300][ T7060] veth0_macvtap: left promiscuous mode
[  123.335768][ T7060] veth0_macvtap: entered promiscuous mode
[  123.350356][ T7060] veth1_macvtap: entered promiscuous mode
[  123.363570][ T7060] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  123.374732][ T7060] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  123.386245][ T7060] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  123.397409][ T7060] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  123.408875][ T7060] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  123.515047][ T1119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  123.530065][ T1119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  123.560713][ T1119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  123.587098][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'.
[  123.604062][ T1119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  123.631106][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'.
[  123.642564][ T7088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'.
[  123.652020][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.248'.
[  123.910554][ T7102] ieee802154 phy0 wpan0: encryption failed: -22
[  123.939281][ T7092] veth0_vlan: left promiscuous mode
[  123.978826][ T1345] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.997284][ T1345] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.015936][ T1345] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  124.028635][ T1345] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  126.828780][ T7097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  127.066755][ T7143] xt_bpf: check failed: parse error
[  127.250264][ T7152] netlink: 'syz.3.260': attribute type 1 has an invalid length.
[  127.266934][ T7147] pim6reg99999991: entered allmulticast mode
[  127.409754][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[  127.434423][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'.
[  127.449536][ T7159] bond3: (slave dummy0): making interface the new active one
[  127.494315][ T7159] bond3: (slave dummy0): Enslaving as an active interface with an up link
[  127.505831][ T7152] bond3: entered promiscuous mode
[  127.512105][ T7152] dummy0: entered promiscuous mode
[  127.553418][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'.
[  127.565545][ T7166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'.
[  127.626064][ T7171] bond3: (slave dummy0): Releasing active interface
[  127.633412][ T7171] dummy0: left promiscuous mode
[  127.640877][ T7171] bridge_slave_0: left allmulticast mode
[  127.647138][ T7171] bridge_slave_0: left promiscuous mode
[  127.654244][ T7171] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.665170][ T7171] bridge_slave_1: left allmulticast mode
[  127.671381][ T7171] bridge_slave_1: left promiscuous mode
[  127.678033][ T7171] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.694067][ T7171] bond0: (slave bond_slave_0): Releasing backup interface
[  127.715082][ T7171] bond0: (slave bond_slave_1): Releasing backup interface
[  127.734409][ T7171] team0: Port device team_slave_0 removed
[  127.742013][ T7171] team0: Port device team_slave_1 removed
[  127.749050][ T7171] batman_adv: batadv0: Removing interface: batadv_slave_0
[  127.757262][ T7171] batman_adv: batadv0: Removing interface: batadv_slave_1
[  127.765457][ T7171] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  127.782007][ T6333] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.792250][ T6333] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.804936][ T7152] tunl0: Caught tx_queue_len zero misconfig
[  127.843438][ T6333] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.868159][ T6333] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.920145][ T7151] bond3: left promiscuous mode
[  128.417579][ T7196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  129.234694][ T4948] Bluetooth: hci4: command 0x0405 tx timeout
[  129.253240][ T7212] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  129.840361][   T30] audit: type=1804 audit(1778878835.005:2): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.276" name="/newroot/61/memory.events" dev="tmpfs" ino=330 res=1 errno=0
[  129.939218][   T30] audit: type=1800 audit(1778878835.005:3): pid=7219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.276" name="memory.events" dev="tmpfs" ino=330 res=0 errno=0
[  130.045787][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'.
[  130.071741][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'.
[  130.109218][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.278'.
[  130.145675][ T7227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'.
[  131.442134][ T4948] Bluetooth: hci4: link tx timeout
[  131.448722][ T4948] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  131.464910][ T5646] Bluetooth: hci4: link tx timeout
[  131.470650][ T5646] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  132.666356][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[  132.679486][ T7287] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'.
[  132.720241][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'.
[  132.737354][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'.
[  132.942692][ T7291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'.
[  132.978227][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'.
[  133.101159][ T7318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'.
[  133.454545][ T7324] nbd0: detected capacity change from 0 to 63
[  133.543749][ T5631] Bluetooth: hci4: command 0x0405 tx timeout
[  133.898656][ T5646] block nbd0: Receive control failed (result -104)
[  133.908684][   T50] block nbd0: Receive control failed (result -32)
[  134.949921][ T7320] syzkaller0: entered promiscuous mode
[  134.961640][ T7320] syzkaller0: entered allmulticast mode
[  135.423644][ T7345] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.537759][ T7345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.561880][ T7345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.652513][ T6331] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.664108][ T6331] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.720747][ T7350] syzkaller0: entered promiscuous mode
[  135.735442][ T7350] syzkaller0: entered allmulticast mode
[  135.749037][ T6331] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.768587][ T6331] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  135.833166][ T7358] xt_hashlimit: size too large, truncated to 1048576
[  136.309344][ T7377] __nla_validate_parse: 3 callbacks suppressed
[  136.309363][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'.
[  136.354317][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[  136.453620][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[  136.462743][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'.
[  136.794175][ T7380] nbd1: detected capacity change from 0 to 63
[  137.265145][ T5646] block nbd1: Receive control failed (result -104)
[  137.272987][   T50] block nbd1: Receive control failed (result -32)
[  137.701904][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.309'.
[  137.702631][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'.
[  137.710942][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'.
[  137.720984][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.310'.
[  137.753734][ T1345] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  137.776914][ T1345] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  137.803951][ T1345] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  137.831151][ T1345] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  137.997111][ T7401] xt_bpf: check failed: parse error
[  138.512323][ T7430] netlink: 'syz.2.322': attribute type 10 has an invalid length.
[  138.540404][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.320'.
[  138.567058][ T7430] 8021q: adding VLAN 0 to HW filter on device team0
[  138.569624][ T7433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.324'.
[  138.589310][ T7430] bond0: (slave team0): Enslaving as an active interface with an up link
[  138.642528][ T7425] : entered promiscuous mode
[  138.934786][ T7435] nbd2: detected capacity change from 0 to 63
[  138.954171][   T50] block nbd2: Receive control failed (result -104)
[  138.961850][ T5646] block nbd2: Receive control failed (result -32)
[  139.032388][ T7448] xt_bpf: check failed: parse error
[  139.229766][ T7441] nbd3: detected capacity change from 0 to 63
[  139.248444][ T5645] block nbd3: Send control failed (result -32)
[  139.250831][ T5646] block nbd3: Receive control failed (result -32)
[  139.262416][   T50] block nbd3: Receive control failed (result -32)
[  139.268860][ T5645] block nbd3: Request send failed, requeueing
[  139.334233][ T2672] block nbd3: Dead connection, failed to find a fallback
[  139.343213][ T2672] block nbd3: shutting down sockets
[  139.350375][ T2672] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.361301][ T2672] Buffer I/O error on dev nbd3, logical block 0, async page read
[  139.370546][ T5645] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.380781][ T5645] Buffer I/O error on dev nbd3, logical block 1, async page read
[  139.389361][ T5645] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.398500][ T5645] Buffer I/O error on dev nbd3, logical block 2, async page read
[  139.406571][ T5645] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.420089][ T5645] Buffer I/O error on dev nbd3, logical block 3, async page read
[  139.428177][ T5645] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.437398][ T5645] Buffer I/O error on dev nbd3, logical block 0, async page read
[  139.445395][ T5645] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.454480][ T5645] Buffer I/O error on dev nbd3, logical block 1, async page read
[  139.462350][ T5645] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.471727][ T5645] Buffer I/O error on dev nbd3, logical block 2, async page read
[  139.479770][ T5645] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.494711][ T5645] Buffer I/O error on dev nbd3, logical block 3, async page read
[  139.511371][ T5645] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.533068][ T5645] Buffer I/O error on dev nbd3, logical block 0, async page read
[  139.555963][ T5645] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  139.574738][ T5645] Buffer I/O error on dev nbd3, logical block 1, async page read
[  139.609330][ T5645] ldm_validate_partition_table(): Disk read failed.
[  139.660400][ T5645] Dev nbd3: unable to read RDB block 0
[  139.708687][ T5645]  nbd3: unable to read partition table
[  139.711585][ T7479] lo: Caught tx_queue_len zero misconfig
[  139.730606][ T5645] ldm_validate_partition_table(): Disk read failed.
[  139.741362][ T5645] Dev nbd3: unable to read RDB block 0
[  139.756960][ T5645]  nbd3: unable to read partition table
[  139.938953][   T37] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  139.972969][   T37] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  139.997390][   T37] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  140.054758][ T7491] xt_bpf: check failed: parse error
[  140.085792][ T7480] nbd4: detected capacity change from 0 to 63
[  140.109991][   T50] block nbd4: Receive control failed (result -32)
[  140.116895][ T5646] block nbd4: Receive control failed (result -32)
[  140.128748][   T37] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  140.142095][ T5645] block nbd4: Dead connection, failed to find a fallback
[  140.173228][ T5645] block nbd4: shutting down sockets
[  140.222104][ T5645] ldm_validate_partition_table(): Disk read failed.
[  140.257569][ T5645] Dev nbd4: unable to read RDB block 0
[  140.288251][ T5645]  nbd4: unable to read partition table
[  140.351599][ T5645] ldm_validate_partition_table(): Disk read failed.
[  140.371972][ T5645] Dev nbd4: unable to read RDB block 0
[  140.384763][ T7502] netlink: 'syz.4.347': attribute type 13 has an invalid length.
[  140.390987][ T5645]  nbd4: unable to read partition table
[  140.518295][ T1599] IPVS: starting estimator thread 0...
[  140.624155][ T7507] IPVS: using max 37 ests per chain, 88800 per kthread
[  140.637992][   T37] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.655155][   T37] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.666549][ T7509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  140.683147][   T37] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  140.707586][   T37] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.237117][ T7538] netlink: 'syz.3.354': attribute type 1 has an invalid length.
[  141.599156][ T7558] __nla_validate_parse: 15 callbacks suppressed
[  141.599174][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[  141.614765][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'.
[  141.878577][ T7544] bond4: (slave gretap1): making interface the new active one
[  141.906981][ T7544] bond4: (slave gretap1): Enslaving as an active interface with an up link
[  141.975342][ T7560] nbd5: detected capacity change from 0 to 63
[  142.008422][ T7550] bond4: (slave bridge2): Enslaving as an active interface with a down link
[  142.048620][ T7553] macvlan3: entered promiscuous mode
[  142.054265][ T7553] macvlan3: entered allmulticast mode
[  142.060500][ T7553] bond4: entered promiscuous mode
[  142.066566][ T7553] gretap1: entered promiscuous mode
[  142.072828][ T7553] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  142.093778][ T7553] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  142.112046][ T7553] bond4: left promiscuous mode
[  142.117655][ T7553] gretap1: left promiscuous mode
[  142.140064][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'.
[  142.150792][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'.
[  142.260710][   T50] block nbd5: Receive control failed (result -104)
[  142.261252][ T5646] block nbd5: Receive control failed (result -32)
[  142.578089][ T7596] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  143.659939][ T5292] veth1_macvtap: left promiscuous mode
[  144.020318][ T1119] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.064251][ T1119] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.107665][ T1119] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.142092][ T1119] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.210225][ T7619] ieee802154 phy0 wpan0: encryption failed: -22
[  144.249258][ T7619] netlink: 3 bytes leftover after parsing attributes in process `syz.1.366'.
[  144.268728][ T7619] 0ªX¹¦À: renamed from batadv0
[  144.335248][ T7619] 0ªX¹¦À: entered allmulticast mode
[  144.355240][ T7619] 8021q: adding VLAN 0 to HW filter on device 
60ªX¹¦À
[  144.385234][ T7619] A link change request failed with some changes committed already. Interface 
60ªX¹¦À may have been left with an inconsistent configuration, please check.
[  144.913422][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'.
[  144.922539][ T7639] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'.
[  145.047524][ T7641] netlink: 80 bytes leftover after parsing attributes in process `syz.4.370'.
[  145.532166][ T7664] netlink: 'syz.2.375': attribute type 1 has an invalid length.
[  145.722490][ T7667] gretap1: entered allmulticast mode
[  145.738949][ T7667] bond1: (slave gretap1): making interface the new active one
[  145.759339][ T7667] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  145.882256][ T7673] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'.
[  146.005477][ T7678] xt_bpf: check failed: parse error
[  146.136173][ T7685] netlink: 'syz.1.382': attribute type 3 has an invalid length.
[  146.163944][ T7685] netlink: 'syz.1.382': attribute type 3 has an invalid length.
[  146.172938][ T6337] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.202009][ T6337] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.211212][ T6337] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.225989][ T1345] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  146.490237][ T7694] netlink: 9 bytes leftover after parsing attributes in process `syz.3.384'.
[  146.512196][ T7694] 0·: renamed from hsr0
[  146.522111][ T7694] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  146.532852][ T7694] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  146.536356][ T7698] netlink: 'syz.0.385': attribute type 13 has an invalid length.
[  146.551325][ T7694] 0·: entered allmulticast mode
[  146.556351][ T7694] hsr_slave_0: entered allmulticast mode
[  146.562297][ T7694] hsr_slave_1: entered allmulticast mode
[  146.569181][ T7694] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  146.714679][ T7704] __nla_validate_parse: 4 callbacks suppressed
[  146.714696][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'.
[  146.765409][ T7706] netlink: 'syz.3.387': attribute type 12 has an invalid length.
[  146.826372][ T7700] nbd6: detected capacity change from 0 to 63
[  146.834013][ T7707] blkio.reset_stats is deprecated
[  146.840753][ T5631] block nbd6: Receive control failed (result -104)
[  146.848320][   T50] block nbd6: Receive control failed (result -32)
[  146.955487][ T7711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[  146.965424][ T7685] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -512 0
[  147.011470][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.388'.
[  147.075072][ T7719] xt_bpf: check failed: parse error
[  147.103321][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.388'.
[  147.151848][ T7711] 8021q: adding VLAN 0 to HW filter on device bond2
[  147.167312][ T7714] 8021q: adding VLAN 0 to HW filter on device bond0
[  147.186328][ T7714] bond2: (slave bond0): making interface the new active one
[  147.214207][ T7714] bond2: (slave bond0): Enslaving as an active interface with an up link
[  147.431599][ T7730] bond0: Caught tx_queue_len zero misconfig
[  147.719579][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'.
[  147.735838][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[  147.747432][ T7744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.399'.
[  147.756671][ T7744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'.
[  147.987323][ T7744] nbd7: detected capacity change from 0 to 63
[  147.989782][ T7753] syzkaller1: entered allmulticast mode
[  148.002630][ T4948] block nbd7: Receive control failed (result -104)
[  148.009800][   T50] block nbd7: Receive control failed (result -32)
[  148.103228][ T4948] Bluetooth: hci4: command 0x0405 tx timeout
[  148.188819][ T7757] xt_bpf: check failed: parse error
[  149.165263][ T7803] xt_bpf: check failed: parse error
[  149.303418][ T5631] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  149.307302][ T4948] Bluetooth: hci2: command 0x0401 tx timeout
[  149.350277][ T7809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'.
[  149.464202][ T7809] gretap0: entered promiscuous mode
[  149.521138][ T7809] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.536122][ T7809] 8021q: adding VLAN 0 to HW filter on device team0
[  149.555159][ T7809] 8021q: adding VLAN 0 to HW filter on device batadv0
[  149.582028][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.590860][ T6337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.599004][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.611064][ T1599] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.620767][ T6527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.630373][  T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.639175][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.648261][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.662595][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.671495][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  149.705412][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_0
[  149.718190][ T7809] batman_adv: batadv0: Interface activated: batadv_slave_1
[  149.736534][ T7809] veth1_vlan: left promiscuous mode
[  149.743721][ T7809] veth0_vlan: left promiscuous mode
[  149.750092][ T7809] veth0_vlan: entered promiscuous mode
[  149.778434][ T7809] veth1_vlan: entered promiscuous mode
[  149.920273][ T7809] veth1_macvtap: left promiscuous mode
[  149.956860][ T7809] veth0_macvtap: left promiscuous mode
[  149.964595][ T7809] veth0_macvtap: entered promiscuous mode
[  149.971985][ T7809] veth1_macvtap: entered promiscuous mode
[  149.985178][ T7809] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  149.993764][ T7809] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  150.001738][ T7809] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  150.010705][ T7809] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  150.072238][ T7822] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.091794][ T7822] 8021q: adding VLAN 0 to HW filter on device team0
[  150.120665][ T7822] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.162608][ T7822] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  150.179505][ T6331] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.186772][ T6331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.198899][ T6331] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.206112][ T6331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.254678][ T6333] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  150.266428][ T6333] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  150.347445][ T6333] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  150.371827][ T6333] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  150.442883][ T7847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'.
[  150.737563][ T7863] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  150.756881][ T7863] CPU: 0 UID: 0 PID: 7863 Comm: syz.2.434 Not tainted syzkaller #0 PREEMPT(full) 
[  150.756904][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  150.756921][ T7863] Call Trace:
[  150.756931][ T7863]  <TASK>
[  150.756939][ T7863]  dump_stack_lvl+0xe8/0x150
[  150.756971][ T7863]  sysfs_warn_dup+0x8e/0xa0
[  150.756993][ T7863]  sysfs_do_create_link_sd+0xc0/0x110
[  150.757016][ T7863]  device_add_class_symlinks+0x1cf/0x240
[  150.757040][ T7863]  device_add+0x475/0xbb0
[  150.757064][ T7863]  wiphy_register+0x1fb1/0x2fe0
[  150.757104][ T7863]  ? __pfx_wiphy_register+0x10/0x10
[  150.757127][ T7863]  ? __pfx_netdev_run_todo+0x10/0x10
[  150.757145][ T7863]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  150.757171][ T7863]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  150.757199][ T7863]  ieee80211_register_hw+0x3c53/0x4910
[  150.757237][ T7863]  ? ieee80211_register_hw+0x18c1/0x4910
[  150.757287][ T7863]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  150.757314][ T7863]  ? __asan_memset+0x22/0x50
[  150.757335][ T7863]  ? __hrtimer_setup+0x1b7/0x260
[  150.757354][ T7863]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  150.757380][ T7863]  mac80211_hwsim_new_radio+0x3327/0x57f0
[  150.757427][ T7863]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  150.757442][ T7863]  ? kstrndup+0xbf/0x160
[  150.757463][ T7863]  hwsim_new_radio_nl+0xe20/0x26e0
[  150.757481][ T7863]  ? unwind_next_frame+0xa6/0x2550
[  150.757515][ T7863]  ? is_bpf_text_address+0x26/0x2b0
[  150.757541][ T7863]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  150.757561][ T7863]  ? __kernel_text_address+0xd/0x30
[  150.757579][ T7863]  ? unwind_get_return_address+0x4d/0x90
[  150.757623][ T7863]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  150.757645][ T7863]  ? arch_stack_walk+0xfb/0x150
[  150.757676][ T7863]  ? stack_trace_save+0xa9/0x100
[  150.757698][ T7863]  ? __pfx_stack_trace_save+0x10/0x10
[  150.757724][ T7863]  ? stack_depot_save_flags+0x33/0x810
[  150.757743][ T7863]  ? unwind_next_frame+0xa6/0x2550
[  150.757778][ T7863]  ? __nla_validate_parse+0x2480/0x2dc0
[  150.757798][ T7863]  ? ____sys_sendmsg+0x972/0x9f0
[  150.757810][ T7863]  ? ___sys_sendmsg+0x2a5/0x360
[  150.757843][ T7863]  ? __pfx___nla_validate_parse+0x10/0x10
[  150.757883][ T7863]  ? rcu_is_watching+0x15/0xb0
[  150.757901][ T7863]  ? trace_kmalloc+0x2a/0xf0
[  150.757927][ T7863]  ? __nla_parse+0x40/0x60
[  150.757955][ T7863]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  150.757977][ T7863]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  150.758005][ T7863]  genl_family_rcv_msg_doit+0x22a/0x330
[  150.758042][ T7863]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  150.758078][ T7863]  ? bpf_lsm_capable+0x9/0x20
[  150.758093][ T7863]  ? security_capable+0x7e/0x2c0
[  150.758122][ T7863]  genl_rcv_msg+0x61c/0x7a0
[  150.758149][ T7863]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.758168][ T7863]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  150.758200][ T7863]  netlink_rcv_skb+0x232/0x4b0
[  150.758217][ T7863]  ? __pfx_genl_rcv_msg+0x10/0x10
[  150.758238][ T7863]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  150.758268][ T7863]  ? down_read+0x270/0x2e0
[  150.758287][ T7863]  ? genl_rcv+0xd/0x40
[  150.758308][ T7863]  genl_rcv+0x28/0x40
[  150.758325][ T7863]  netlink_unicast+0x75c/0x8e0
[  150.758358][ T7863]  netlink_sendmsg+0x813/0xb40
[  150.758381][ T7863]  ? __pfx_netlink_sendmsg+0x10/0x10
[  150.758400][ T7863]  ? aa_sock_msg_perm+0xf1/0x1b0
[  150.758423][ T7863]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  150.758444][ T7863]  ____sys_sendmsg+0x972/0x9f0
[  150.758459][ T7863]  ? __might_fault+0xaf/0x130
[  150.758485][ T7863]  ? __pfx_____sys_sendmsg+0x10/0x10
[  150.758511][ T7863]  ? import_iovec+0x73/0xa0
[  150.758536][ T7863]  ___sys_sendmsg+0x2a5/0x360
[  150.758548][ T7863]  ? __lock_acquire+0x6b5/0x2cf0
[  150.758570][ T7863]  ? __pfx____sys_sendmsg+0x10/0x10
[  150.758592][ T7863]  ? futex_wait+0x2a2/0x390
[  150.758640][ T7863]  ? __fget_files+0x2a/0x420
[  150.758658][ T7863]  ? __fget_files+0x3a0/0x420
[  150.758685][ T7863]  __x64_sys_sendmsg+0x1bd/0x2a0
[  150.758703][ T7863]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  150.758728][ T7863]  ? rcu_is_watching+0x15/0xb0
[  150.758756][ T7863]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.758783][ T7863]  do_syscall_64+0x15f/0xf80
[  150.758805][ T7863]  ? trace_irq_disable+0x3b/0x140
[  150.758829][ T7863]  ? clear_bhb_loop+0x40/0x90
[  150.758849][ T7863]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.758864][ T7863] RIP: 0033:0x7fbb0179ce59
[  150.758897][ T7863] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  150.758910][ T7863] RSP: 002b:00007fbb02593028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  150.758928][ T7863] RAX: ffffffffffffffda RBX: 00007fbb01a15fa0 RCX: 00007fbb0179ce59
[  150.758940][ T7863] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  150.758950][ T7863] RBP: 00007fbb01832d6f R08: 0000000000000000 R09: 0000000000000000
[  150.758959][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  150.758969][ T7863] R13: 00007fbb01a16038 R14: 00007fbb01a15fa0 R15: 00007ffe1be19bb8
[  150.758998][ T7863]  </TASK>
[  151.598866][ T7883] netlink: 'syz.4.438': attribute type 1 has an invalid length.
[  151.829968][ T7890] bond2: entered promiscuous mode
[  152.037718][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.045322][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.098744][   T30] audit: type=1804 audit(1778878857.265:4): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.441" name="/newroot/79/memory.events" dev="tmpfs" ino=423 res=1 errno=0
[  152.141126][ T7900] bond1: (slave bond0): Releasing active interface
[  152.191668][   T30] audit: type=1800 audit(1778878857.295:5): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.441" name="memory.events" dev="tmpfs" ino=423 res=0 errno=0
[  152.290229][ T7900] bridge_slave_0: left allmulticast mode
[  152.306232][ T7900] bridge_slave_0: left promiscuous mode
[  152.312073][ T7929] __nla_validate_parse: 1 callbacks suppressed
[  152.312087][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'.
[  152.334973][ T7900] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.390845][ T7900] bridge_slave_1: left allmulticast mode
[  152.425165][ T7900] bridge_slave_1: left promiscuous mode
[  152.445184][ T7900] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.482736][ T7900] bond0: (slave bond_slave_0): Releasing backup interface
[  152.508795][ T7900] bond0: (slave bond_slave_1): Releasing backup interface
[  152.532404][ T7900] team0: Port device team_slave_0 removed
[  152.545089][ T7900] team0: Port device team_slave_1 removed
[  152.552443][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.561485][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.570869][ T7900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.580240][ T7900] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.629753][ T7929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.443'.
[  152.747762][ T7882] bond2: left promiscuous mode
[  152.754651][ T6333] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  152.896811][ T7950] xt_bpf: check failed: parse error
[  152.913681][ T7948] netlink: 32 bytes leftover after parsing attributes in process `syz.2.446'.
[  154.204920][ T6333] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.214318][ T6333] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.273967][ T6333] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  154.419878][ T7966] batadv_slave_0: Caught tx_queue_len zero misconfig
[  154.564423][ T7966] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  154.593239][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: syz.0.448 Not tainted syzkaller #0 PREEMPT(full) 
[  154.593262][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  154.593272][ T7966] Call Trace:
[  154.593279][ T7966]  <TASK>
[  154.593286][ T7966]  dump_stack_lvl+0xe8/0x150
[  154.593312][ T7966]  sysfs_warn_dup+0x8e/0xa0
[  154.593334][ T7966]  sysfs_do_create_link_sd+0xc0/0x110
[  154.593356][ T7966]  device_add_class_symlinks+0x1cf/0x240
[  154.593380][ T7966]  device_add+0x475/0xbb0
[  154.593402][ T7966]  wiphy_register+0x1fb1/0x2fe0
[  154.593449][ T7966]  ? __pfx_wiphy_register+0x10/0x10
[  154.593473][ T7966]  ? __pfx_netdev_run_todo+0x10/0x10
[  154.593491][ T7966]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  154.593515][ T7966]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  154.593541][ T7966]  ieee80211_register_hw+0x3c53/0x4910
[  154.593574][ T7966]  ? ieee80211_register_hw+0x18c1/0x4910
[  154.593626][ T7966]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  154.593653][ T7966]  ? __asan_memset+0x22/0x50
[  154.593674][ T7966]  ? __hrtimer_setup+0x1b7/0x260
[  154.593693][ T7966]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  154.593719][ T7966]  mac80211_hwsim_new_radio+0x3327/0x57f0
[  154.593772][ T7966]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  154.593792][ T7966]  ? kstrndup+0xbf/0x160
[  154.593819][ T7966]  hwsim_new_radio_nl+0xe20/0x26e0
[  154.593838][ T7966]  ? unwind_next_frame+0xa6/0x2550
[  154.593876][ T7966]  ? is_bpf_text_address+0x26/0x2b0
[  154.593906][ T7966]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  154.593927][ T7966]  ? __kernel_text_address+0xd/0x30
[  154.593948][ T7966]  ? unwind_get_return_address+0x4d/0x90
[  154.593968][ T7966]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  154.593991][ T7966]  ? arch_stack_walk+0xfb/0x150
[  154.594027][ T7966]  ? stack_trace_save+0xa9/0x100
[  154.594049][ T7966]  ? __pfx_stack_trace_save+0x10/0x10
[  154.594076][ T7966]  ? stack_depot_save_flags+0x33/0x810
[  154.594113][ T7966]  ? __nla_validate_parse+0x2480/0x2dc0
[  154.594135][ T7966]  ? ____sys_sendmsg+0x972/0x9f0
[  154.594149][ T7966]  ? ___sys_sendmsg+0x2a5/0x360
[  154.594183][ T7966]  ? __pfx___nla_validate_parse+0x10/0x10
[  154.594226][ T7966]  ? rcu_is_watching+0x15/0xb0
[  154.594246][ T7966]  ? trace_kmalloc+0x2a/0xf0
[  154.594274][ T7966]  ? __nla_parse+0x40/0x60
[  154.594301][ T7966]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  154.594322][ T7966]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  154.594351][ T7966]  genl_family_rcv_msg_doit+0x22a/0x330
[  154.594380][ T7966]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  154.594415][ T7966]  ? bpf_lsm_capable+0x9/0x20
[  154.594439][ T7966]  ? security_capable+0x7e/0x2c0
[  154.594467][ T7966]  genl_rcv_msg+0x61c/0x7a0
[  154.594495][ T7966]  ? __pfx_genl_rcv_msg+0x10/0x10
[  154.594516][ T7966]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  154.594551][ T7966]  netlink_rcv_skb+0x232/0x4b0
[  154.594568][ T7966]  ? __pfx_genl_rcv_msg+0x10/0x10
[  154.594588][ T7966]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  154.594618][ T7966]  ? down_read+0x270/0x2e0
[  154.594632][ T7966]  ? genl_rcv+0xd/0x40
[  154.594653][ T7966]  genl_rcv+0x28/0x40
[  154.594671][ T7966]  netlink_unicast+0x75c/0x8e0
[  154.594705][ T7966]  netlink_sendmsg+0x813/0xb40
[  154.594733][ T7966]  ? __pfx_netlink_sendmsg+0x10/0x10
[  154.594753][ T7966]  ? aa_sock_msg_perm+0xf1/0x1b0
[  154.594776][ T7966]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  154.594800][ T7966]  ____sys_sendmsg+0x972/0x9f0
[  154.594816][ T7966]  ? __might_fault+0xaf/0x130
[  154.594843][ T7966]  ? __pfx_____sys_sendmsg+0x10/0x10
[  154.594868][ T7966]  ? import_iovec+0x73/0xa0
[  154.594895][ T7966]  ___sys_sendmsg+0x2a5/0x360
[  154.594910][ T7966]  ? __lock_acquire+0x6b5/0x2cf0
[  154.594931][ T7966]  ? __pfx____sys_sendmsg+0x10/0x10
[  154.594953][ T7966]  ? futex_wake+0x4ac/0x580
[  154.594995][ T7966]  ? __fget_files+0x2a/0x420
[  154.595012][ T7966]  ? __fget_files+0x3a0/0x420
[  154.595037][ T7966]  __x64_sys_sendmsg+0x1bd/0x2a0
[  154.595056][ T7966]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  154.595079][ T7966]  ? rcu_is_watching+0x15/0xb0
[  154.595107][ T7966]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.595124][ T7966]  do_syscall_64+0x15f/0xf80
[  154.595145][ T7966]  ? trace_irq_disable+0x3b/0x140
[  154.595168][ T7966]  ? clear_bhb_loop+0x40/0x90
[  154.595187][ T7966]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.595203][ T7966] RIP: 0033:0x7fb72d19ce59
[  154.595218][ T7966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  154.595230][ T7966] RSP: 002b:00007fb72e0e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  154.595247][ T7966] RAX: ffffffffffffffda RBX: 00007fb72d415fa0 RCX: 00007fb72d19ce59
[  154.595294][ T7966] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000004
[  154.595303][ T7966] RBP: 00007fb72d232d6f R08: 0000000000000000 R09: 0000000000000000
[  154.595313][ T7966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  154.595322][ T7966] R13: 00007fb72d416038 R14: 00007fb72d415fa0 R15: 00007ffda95607c8
[  154.595352][ T7966]  </TASK>
[  155.666768][ T7999] netlink: 28 bytes leftover after parsing attributes in process `syz.3.457'.
[  155.748901][ T7999] netlink: 'syz.3.457': attribute type 8 has an invalid length.
[  155.784779][ T7999] netlink: 'syz.3.457': attribute type 9 has an invalid length.
[  155.821220][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  155.842163][ T7999] netlink: 14 bytes leftover after parsing attributes in process `syz.3.457'.
[  155.860176][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'.
[  155.914137][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'.
[  155.942325][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'.
[  156.242367][ T8016] netlink: 'syz.3.464': attribute type 10 has an invalid length.
[  156.346615][ T8016] team0: Port device dummy0 added
[  156.367362][ T8019] netlink: 'syz.3.464': attribute type 10 has an invalid length.
[  156.429752][ T8019] team0: Port device dummy0 removed
[  156.444906][ T8019] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  156.549689][ T8018] nbd8: detected capacity change from 0 to 63
[  156.605566][ T4948] block nbd8: Receive control failed (result -104)
[  156.613390][ T5631] block nbd8: Receive control failed (result -32)
[  156.681629][ T8027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'.
[  156.793545][ T8035] xt_bpf: check failed: parse error
[  156.967265][ T6335] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  156.990607][ T6335] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.020953][ T6335] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.047737][ T6335] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  157.487872][ T8053] nbd9: detected capacity change from 0 to 63
[  157.508587][ T4948] block nbd9: Receive control failed (result -32)
[  157.509577][ T5631] block nbd9: Receive control failed (result -32)
[  157.518223][ T7887] block nbd9: Send control failed (result -32)
[  157.564605][ T7887] block nbd9: Request send failed, requeueing
[  157.602900][ T2672] block nbd9: Dead connection, failed to find a fallback
[  157.616508][ T2672] block nbd9: shutting down sockets
[  157.622205][ T2672] blk_print_req_error: 286 callbacks suppressed
[  157.622218][ T2672] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.641992][ T2672] buffer_io_error: 286 callbacks suppressed
[  157.642005][ T2672] Buffer I/O error on dev nbd9, logical block 0, async page read
[  157.656484][ T7887] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.670690][ T7887] Buffer I/O error on dev nbd9, logical block 1, async page read
[  157.679338][ T7887] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.688835][ T7887] Buffer I/O error on dev nbd9, logical block 2, async page read
[  157.698983][ T7887] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.709785][ T7887] Buffer I/O error on dev nbd9, logical block 3, async page read
[  157.725019][ T7887] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.744626][ T7887] Buffer I/O error on dev nbd9, logical block 0, async page read
[  157.763414][ T7887] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.780893][ T7887] Buffer I/O error on dev nbd9, logical block 1, async page read
[  157.797612][ T7887] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.811752][ T8069] netlink: 'syz.0.481': attribute type 13 has an invalid length.
[  157.817239][ T7887] Buffer I/O error on dev nbd9, logical block 2, async page read
[  157.847597][ T7887] I/O error, dev nbd9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.869414][ T7887] Buffer I/O error on dev nbd9, logical block 3, async page read
[  157.891432][ T7887] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  157.930397][ T7887] Buffer I/O error on dev nbd9, logical block 0, async page read
[  157.939969][ T8081] __nla_validate_parse: 6 callbacks suppressed
[  157.939984][ T8081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.481'.
[  157.992187][ T7887] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  158.062059][ T7887] Buffer I/O error on dev nbd9, logical block 1, async page read
[  158.109967][ T7887] ldm_validate_partition_table(): Disk read failed.
[  158.136100][ T7887] Dev nbd9: unable to read RDB block 0
[  158.144316][ T8087] xt_bpf: check failed: parse error
[  158.152553][ T7887]  nbd9: unable to read partition table
[  158.210656][ T7887] ldm_validate_partition_table(): Disk read failed.
[  158.247604][ T7887] Dev nbd9: unable to read RDB block 0
[  158.276912][ T7887]  nbd9: unable to read partition table
[  158.698282][ T8106] netlink: 'syz.3.488': attribute type 10 has an invalid length.
[  159.097385][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'.
[  159.099150][ T8117] netlink: 16 bytes leftover after parsing attributes in process `syz.4.491'.
[  159.107606][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'.
[  159.482376][ T8121] nbd10: detected capacity change from 0 to 63
[  159.515551][ T5631] block nbd10: Receive control failed (result -32)
[  159.515551][ T4948] block nbd10: Receive control failed (result -32)
[  159.526817][ T5648] block nbd10: Send control failed (result -32)
[  159.555525][ T5648] block nbd10: Request send failed, requeueing
[  159.562793][ T2672] block nbd10: Dead connection, failed to find a fallback
[  159.570446][ T2672] block nbd10: shutting down sockets
[  159.579813][ T5648] ldm_validate_partition_table(): Disk read failed.
[  159.588584][ T5648] Dev nbd10: unable to read RDB block 0
[  159.596719][ T5648]  nbd10: unable to read partition table
[  159.618034][ T5648] ldm_validate_partition_table(): Disk read failed.
[  159.651498][ T5648] Dev nbd10: unable to read RDB block 0
[  159.692023][ T5648]  nbd10: unable to read partition table
[  160.680061][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'.
[  160.701903][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'.
[  160.739610][ T8179] tap0: tun_chr_ioctl cmd 1074025677
[  160.751341][ T8179] tap0: linktype set to 778
[  160.923452][ T8183] nbd11: detected capacity change from 0 to 63
[  160.948709][ T5631] block nbd11: Receive control failed (result -32)
[  160.955637][ T5646] block nbd11: Receive control failed (result -32)
[  160.956739][ T7887] block nbd11: Send control failed (result -32)
[  161.005582][ T7887] block nbd11: Request send failed, requeueing
[  161.029496][ T7887] block nbd11: Dead connection, failed to find a fallback
[  161.057858][ T2672] block nbd11: Dead connection, failed to find a fallback
[  161.067980][ T2672] block nbd11: shutting down sockets
[  161.085050][ T8197] netlink: 56 bytes leftover after parsing attributes in process `syz.1.514'.
[  161.085293][ T7887] ldm_validate_partition_table(): Disk read failed.
[  161.107343][ T7887] Dev nbd11: unable to read RDB block 0
[  161.117193][ T7887]  nbd11: unable to read partition table
[  161.130735][ T7887] ldm_validate_partition_table(): Disk read failed.
[  161.139935][ T7887] Dev nbd11: unable to read RDB block 0
[  161.148170][ T7887]  nbd11: unable to read partition table
[  161.247292][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'.
[  161.272923][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'.
[  161.289227][ T8206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'.
[  161.381040][ T8206] vlan0: entered promiscuous mode
[  161.386646][ T8206] geneve1: entered promiscuous mode
[  161.392164][ T8206] vlan0: entered allmulticast mode
[  161.398046][ T8206] geneve1: entered allmulticast mode
[  161.494364][ T8203] nbd12: detected capacity change from 0 to 63
[  161.510394][ T7887] block nbd12: Send control failed (result -32)
[  161.510729][ T5646] block nbd12: Receive control failed (result -104)
[  161.525030][ T5631] block nbd12: Receive control failed (result -32)
[  161.527064][ T7887] block nbd12: Request send failed, requeueing
[  161.556906][ T2672] block nbd12: Dead connection, failed to find a fallback
[  161.565488][ T2672] block nbd12: shutting down sockets
[  161.745743][ T8217] xt_CT: You must specify a L4 protocol and not use inversions on it
[  161.753754][ T8217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  162.183132][ T5631] Bluetooth: hci4: command 0x0405 tx timeout
[  162.321231][ T8238] xt_bpf: check failed: parse error
[  162.931557][ T8245] net_ratelimit: 15 callbacks suppressed
[  162.931576][ T8245] netlink: set zone limit has 4 unknown bytes
[  163.017232][ T8246] netlink: set zone limit has 4 unknown bytes
[  163.146391][ T8249] __nla_validate_parse: 2 callbacks suppressed
[  163.146402][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'.
[  163.176912][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'.
[  163.186882][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.528'.
[  163.196429][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'.
[  163.279482][ T8251] netlink: 'syz.0.529': attribute type 1 has an invalid length.
[  163.373589][ T8255] netlink: 'syz.4.530': attribute type 13 has an invalid length.
[  163.413198][ T8255] netlink: 'syz.4.530': attribute type 17 has an invalid length.
[  163.595222][ T8255] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.604026][ T8255] 8021q: adding VLAN 0 to HW filter on device team0
[  163.614950][ T8255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.629231][ T6333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.637793][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.648218][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.657458][ T6335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.665613][ T6526] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.674522][ T6521] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.683366][ T1345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.696565][ T6333] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.756637][ T8255] veth1_vlan: left promiscuous mode
[  163.764158][ T8255] veth0_vlan: left promiscuous mode
[  163.770758][ T8255] veth0_vlan: entered promiscuous mode
[  163.780155][ T8255] veth1_vlan: entered promiscuous mode
[  163.796415][ T8255] veth1_macvtap: left promiscuous mode
[  163.804144][ T8255] veth0_macvtap: left promiscuous mode
[  163.811281][ T8255] veth0_macvtap: entered promiscuous mode
[  163.826503][ T8255] veth1_macvtap: entered promiscuous mode
[  163.843795][ T8255] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  163.856411][ T8255] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  163.870963][ T8255] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  163.886209][ T8255] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  164.026188][ T2672] block nbd0: Connection timed out, retrying (0/2 alive)
[  164.037330][ T2672] block nbd0: Connection timed out, retrying (0/2 alive)
[  164.044684][ T2672] block nbd0: Connection timed out, retrying (0/2 alive)
[  164.052899][   T11] block nbd0: Dead connection, failed to find a fallback
[  164.060648][   T11] block nbd0: shutting down sockets
[  164.067101][   T11] blk_print_req_error: 437 callbacks suppressed
[  164.067115][   T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.083825][ T2672] block nbd0: Connection timed out, retrying (0/2 alive)
[  164.091441][   T11] buffer_io_error: 437 callbacks suppressed
[  164.091454][   T11] Buffer I/O error on dev nbd0, logical block 1, async page read
[  164.106655][   T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.115859][   T11] Buffer I/O error on dev nbd0, logical block 0, async page read
[  164.123786][   T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.134919][   T11] Buffer I/O error on dev nbd0, logical block 3, async page read
[  164.142713][   T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.151958][   T11] Buffer I/O error on dev nbd0, logical block 2, async page read
[  164.161037][ T6053] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.170220][ T6053] Buffer I/O error on dev nbd0, logical block 0, async page read
[  164.178313][ T6053] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.187714][ T6053] Buffer I/O error on dev nbd0, logical block 1, async page read
[  164.195779][ T6053] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.204959][ T6053] Buffer I/O error on dev nbd0, logical block 2, async page read
[  164.212858][ T6053] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.233129][ T6053] Buffer I/O error on dev nbd0, logical block 3, async page read
[  164.253278][ T6053] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.270035][ T6053] Buffer I/O error on dev nbd0, logical block 0, async page read
[  164.283159][ T6335] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  164.292346][ T6053] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  164.301664][ T6335] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  164.310668][ T6053] Buffer I/O error on dev nbd0, logical block 1, async page read
[  164.321245][ T6053] ldm_validate_partition_table(): Disk read failed.
[  164.329861][ T6053] Dev nbd0: unable to read RDB block 0
[  164.340109][ T6335] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  164.351411][ T6053]  nbd0: unable to read partition table
[  164.357856][ T6335] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  164.408563][ T6053] ldm_validate_partition_table(): Disk read failed.
[  164.438898][ T6053] Dev nbd0: unable to read RDB block 0
[  164.456218][ T8273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'.
[  164.469494][ T6053]  nbd0: unable to read partition table
[  164.601554][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'.
[  164.633550][ T8280] netlink: 'syz.3.537': attribute type 10 has an invalid length.
[  164.742135][ T8285] netlink: 'syz.0.539': attribute type 12 has an invalid length.
[  164.774911][ T8285] netlink: 132 bytes leftover after parsing attributes in process `syz.0.539'.
[  164.823176][ T8285] netlink: 'syz.0.539': attribute type 39 has an invalid length.
[  165.117265][ T8294] tipc: Started in network mode
[  165.126796][ T8294] tipc: Node identity , cluster identity 4711
[  165.143374][ T8294] tipc: Failed to obtain node identity
[  165.161350][ T8294] tipc: Enabling of bearer <eth:gre0> rejected, failed to enable media
[  165.312893][ T8299] netlink: 'syz.3.544': attribute type 1 has an invalid length.
[  165.329500][ T8299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.544'.
[  165.350193][ T8299] netlink: 'syz.3.544': attribute type 1 has an invalid length.
[  165.405045][ T8299] syzkaller1: entered promiscuous mode
[  165.419660][ T8299] syzkaller1: entered allmulticast mode
[  165.690247][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'.
[  165.996929][ T8308] netlink: 20 bytes leftover after parsing attributes in process `syz.3.546'.
[  166.023189][ T8308] nbd: nbd64 already in use
[  166.307644][ T8331] IPVS: persistence engine module ip_vs_pe_‘‚ not found
[  166.362260][ T6053] udevd[6053]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  166.415825][ T1119] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.416465][ T8346] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0
[  166.438807][ T1119] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.447948][ T1119] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.458095][   T37] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  166.626809][ T8353] ipt_rpfilter: unknown options
[  167.225501][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  167.232667][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  167.240803][ T8270] block nbd1: Dead connection, failed to find a fallback
[  167.247918][ T8270] block nbd1: shutting down sockets
[  167.253316][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  167.262301][   T11] block nbd1: Connection timed out, retrying (0/2 alive)
[  167.275799][ T5633] ldm_validate_partition_table(): Disk read failed.
[  167.286085][ T5633] Dev nbd1: unable to read RDB block 0
[  167.293932][ T5633]  nbd1: unable to read partition table
[  167.308833][ T5633] ldm_validate_partition_table(): Disk read failed.
[  167.341669][ T5633] Dev nbd1: unable to read RDB block 0
[  167.363971][ T5633]  nbd1: unable to read partition table
[  167.646088][ T8377] bridge_slave_1: left allmulticast mode
[  167.669700][ T8377] bridge_slave_1: left promiscuous mode
[  167.691240][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.726158][ T8377] bridge_slave_0: left allmulticast mode
[  167.732065][ T8377] bridge_slave_0: left promiscuous mode
[  167.738148][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.019434][ T8389] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  168.151043][ T8393] netlink: 'syz.3.569': attribute type 3 has an invalid length.
[  168.171488][ T8395] net_ratelimit: 54 callbacks suppressed
[  168.171504][ T8395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.213392][ T8393] nbd: nbd3 already in use
[  168.226791][ T8393] block nbd3: NBD_DISCONNECT
[  168.229815][ T8395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  168.238173][ T8393] block nbd3: Send disconnect failed -32
[  168.247412][ T8393] block nbd3: Send disconnect failed -32
[  168.439449][ T8406] xt_bpf: check failed: parse error
[  168.774752][ T8422] __nla_validate_parse: 6 callbacks suppressed
[  168.774769][ T8422] netlink: 32 bytes leftover after parsing attributes in process `syz.1.572'.
[  168.803669][ T8416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.573'.
[  168.849422][ T8416] openvswitch: netlink: Invalid VLAN frame
[  168.857028][ T8408] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.880490][ T8408] 8021q: adding VLAN 0 to HW filter on device team0
[  168.919213][ T8408] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.980265][ T8408] veth1_to_batadv: left allmulticast mode
[  169.028784][ T8408] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  169.063945][ T8408] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  169.092947][ T8408] 0·: left allmulticast mode
[  169.102607][ T8408] hsr_slave_0: left allmulticast mode
[  169.116893][ T8408] hsr_slave_1: left allmulticast mode
[  169.139573][ T8408] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  169.143443][   T11] block nbd2: Connection timed out, retrying (0/2 alive)
[  169.162736][ T8270] block nbd2: Dead connection, failed to find a fallback
[  169.170317][ T8270] block nbd2: shutting down sockets
[  169.175863][   T11] block nbd2: Connection timed out, retrying (0/2 alive)
[  169.182936][ T8270] blk_print_req_error: 286 callbacks suppressed
[  169.182949][ T8270] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.199692][   T11] block nbd2: Connection timed out, retrying (0/2 alive)
[  169.207030][   T11] block nbd2: Connection timed out, retrying (0/2 alive)
[  169.214348][ T8270] buffer_io_error: 286 callbacks suppressed
[  169.214361][ T8270] Buffer I/O error on dev nbd2, logical block 0, async page read
[  169.229619][ T8270] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.238900][ T8270] Buffer I/O error on dev nbd2, logical block 3, async page read
[  169.246886][ T8270] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.256093][ T8270] Buffer I/O error on dev nbd2, logical block 2, async page read
[  169.264054][ T8270] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.273546][ T8270] Buffer I/O error on dev nbd2, logical block 1, async page read
[  169.293303][ T5641] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.315974][ T6335] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.319467][ T5641] Buffer I/O error on dev nbd2, logical block 0, async page read
[  169.350642][ T8429] team0: entered promiscuous mode
[  169.366275][ T8429] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  169.390677][ T5641] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.413938][ T5641] Buffer I/O error on dev nbd2, logical block 1, async page read
[  169.421729][ T6335] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.431140][ T5641] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.440576][ T6333] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.440645][ T5641] Buffer I/O error on dev nbd2, logical block 2, async page read
[  169.457930][ T5641] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.468756][ T5641] Buffer I/O error on dev nbd2, logical block 3, async page read
[  169.478373][ T6333] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.494638][ T5641] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.524182][ T5641] Buffer I/O error on dev nbd2, logical block 0, async page read
[  169.570798][ T5641] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  169.608694][ T5641] Buffer I/O error on dev nbd2, logical block 1, async page read
[  169.661706][ T5641] ldm_validate_partition_table(): Disk read failed.
[  169.705108][ T5641] Dev nbd2: unable to read RDB block 0
[  169.739715][ T5641]  nbd2: unable to read partition table
[  169.798261][ T5641] ldm_validate_partition_table(): Disk read failed.
[  169.825574][ T5641] Dev nbd2: unable to read RDB block 0
[  169.851037][ T5641]  nbd2: unable to read partition table
[  170.135965][ T8459] xt_bpf: check failed: parse error
[  170.484086][ T8470] xt_bpf: check failed: parse error
[  170.584731][ T8473] netlink: 'syz.2.582': attribute type 1 has an invalid length.
[  170.646795][ T8471] netlink: 3 bytes leftover after parsing attributes in process `syz.3.581'.
[  170.673275][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'.
[  170.682938][ T8479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.584'.
[  170.710018][ T8471] netlink: 3 bytes leftover after parsing attributes in process `syz.3.581'.
[  170.719267][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'.
[  170.752335][ T8471] netlink: 3 bytes leftover after parsing attributes in process `syz.3.581'.
[  170.798071][ T8456] lo: Caught tx_queue_len zero misconfig
[  170.820998][ T8456] netlink: 28 bytes leftover after parsing attributes in process `syz.0.578'.
[  170.830639][ T8482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.585'.
[  171.104487][ T8494] netlink: 'syz.3.588': attribute type 3 has an invalid length.
[  171.187298][ T8494] siw: device registration error -23
[  172.001251][ T8531] xt_bpf: check failed: parse error
[  172.349475][ T8270] block nbd5: Connection timed out, retrying (0/2 alive)
[  172.356817][ T8270] block nbd5: Connection timed out, retrying (0/2 alive)
[  172.364140][   T11] block nbd5: Dead connection, failed to find a fallback
[  172.372930][   T11] block nbd5: shutting down sockets
[  172.379574][ T8270] block nbd5: Connection timed out, retrying (0/2 alive)
[  172.390070][ T8270] block nbd5: Connection timed out, retrying (0/2 alive)
[  172.402833][ T7496] ldm_validate_partition_table(): Disk read failed.
[  172.418527][ T7496] Dev nbd5: unable to read RDB block 0
[  172.426003][ T7496]  nbd5: unable to read partition table
[  172.458528][ T7496] ldm_validate_partition_table(): Disk read failed.
[  172.467777][ T7496] Dev nbd5: unable to read RDB block 0
[  172.475938][ T7496]  nbd5: unable to read partition table
[  173.097082][ T8557] netlink: 'syz.0.599': attribute type 13 has an invalid length.
[  173.153135][ T8557] netlink: 'syz.0.599': attribute type 17 has an invalid length.
[  173.740380][ T8557] 8021q: adding VLAN 0 to HW filter on device bond0
[  173.762853][ T8557] 8021q: adding VLAN 0 to HW filter on device team0
[  173.804918][ T8557] 8021q: adding VLAN 0 to HW filter on device batadv0
[  173.969858][ T8557] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  173.991653][ T8557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  174.004375][ T8557] veth1_vlan: left promiscuous mode
[  174.010467][ T8557] veth0_vlan: entered promiscuous mode
[  174.018622][ T8557] veth1_vlan: entered promiscuous mode
[  174.027958][ T8557] veth1_macvtap: left promiscuous mode
[  174.039112][ T8557] veth0_macvtap: left promiscuous mode
[  174.045953][ T8557] veth0_macvtap: entered promiscuous mode
[  174.060346][ T8557] veth1_macvtap: entered promiscuous mode
[  174.071407][ T8557] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  174.083967][ T8557] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  174.096223][ T8557] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  174.108719][ T8557] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  174.121940][ T8557] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  174.203397][ T6331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  174.241107][ T6331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  174.279998][ T6331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  174.318657][ T6331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  174.390849][ T8599] __nla_validate_parse: 2 callbacks suppressed
[  174.390865][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'.
[  174.418587][ T8599] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'.
[  174.565125][ T8613] netlink: 'syz.0.606': attribute type 1 has an invalid length.
[  174.576293][ T8612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.620'.
[  175.250141][ T8643] xt_bpf: check failed: parse error
[  175.442161][ T8649] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.450600][ T8649] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.457486][ T8649] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.464376][ T8649] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.471145][ T8649] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.478007][ T8649] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.484869][ T8649] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.491711][ T8649] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.498580][ T8649] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  175.518831][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[  175.540227][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[  175.559385][ T8651] netlink: 348 bytes leftover after parsing attributes in process `syz.0.615'.
[  175.579305][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[  175.600414][ T8651] netlink: 348 bytes leftover after parsing attributes in process `syz.0.615'.
[  175.633270][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.615'.
[  176.615831][ T8670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.621'.
[  177.026478][ T8684] xt_bpf: check failed: parse error
[  177.463424][   T11] block nbd6: Connection timed out, retrying (0/2 alive)
[  177.470656][   T11] block nbd6: Connection timed out, retrying (0/2 alive)
[  177.478379][ T8270] block nbd6: Dead connection, failed to find a fallback
[  177.486037][   T11] block nbd6: Connection timed out, retrying (0/2 alive)
[  177.493275][ T8270] block nbd6: shutting down sockets
[  177.498646][   T11] block nbd6: Connection timed out, retrying (0/2 alive)
[  177.506741][ T8270] blk_print_req_error: 286 callbacks suppressed
[  177.506755][ T8270] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.522405][ T8270] buffer_io_error: 286 callbacks suppressed
[  177.522419][ T8270] Buffer I/O error on dev nbd6, logical block 0, async page read
[  177.536443][ T8270] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.545968][ T8270] Buffer I/O error on dev nbd6, logical block 3, async page read
[  177.553955][ T8270] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.563118][ T8270] Buffer I/O error on dev nbd6, logical block 2, async page read
[  177.570995][ T8270] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.580603][ T8270] Buffer I/O error on dev nbd6, logical block 1, async page read
[  177.589042][ T5645] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.598277][ T5645] Buffer I/O error on dev nbd6, logical block 0, async page read
[  177.606469][ T5645] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.615776][ T5645] Buffer I/O error on dev nbd6, logical block 1, async page read
[  177.624040][ T5645] I/O error, dev nbd6, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.633211][ T5645] Buffer I/O error on dev nbd6, logical block 2, async page read
[  177.641168][ T5645] I/O error, dev nbd6, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.650243][ T5645] Buffer I/O error on dev nbd6, logical block 3, async page read
[  177.658312][ T5645] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.667532][ T5645] Buffer I/O error on dev nbd6, logical block 0, async page read
[  177.675595][ T5645] I/O error, dev nbd6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  177.693394][ T5645] Buffer I/O error on dev nbd6, logical block 1, async page read
[  177.710510][ T5645] ldm_validate_partition_table(): Disk read failed.
[  177.730904][ T5645] Dev nbd6: unable to read RDB block 0
[  177.746480][ T5645]  nbd6: unable to read partition table
[  177.785517][ T5645] ldm_validate_partition_table(): Disk read failed.
[  177.816597][ T5645] Dev nbd6: unable to read RDB block 0
[  177.829495][ T5645]  nbd6: unable to read partition table
[  178.103413][ T8270] block nbd7: Connection timed out, retrying (0/2 alive)
[  178.110623][ T8270] block nbd7: Connection timed out, retrying (0/2 alive)
[  178.118587][ T8269] block nbd7: Dead connection, failed to find a fallback
[  178.126128][ T8269] block nbd7: shutting down sockets
[  178.131632][ T8270] block nbd7: Connection timed out, retrying (0/2 alive)
[  178.140502][ T8270] block nbd7: Connection timed out, retrying (0/2 alive)
[  178.151186][ T7731] ldm_validate_partition_table(): Disk read failed.
[  178.159618][ T7731] Dev nbd7: unable to read RDB block 0
[  178.167343][ T7731]  nbd7: unable to read partition table
[  178.180777][ T7731] ldm_validate_partition_table(): Disk read failed.
[  178.192316][ T7731] Dev nbd7: unable to read RDB block 0
[  178.199838][ T7731]  nbd7: unable to read partition table
[  178.652042][ T8718] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  178.858060][ T8720] batadv_slave_1: entered promiscuous mode
[  178.914649][ T8720] batadv_slave_1: left promiscuous mode
[  180.125486][ T8740] netlink: 'syz.4.641': attribute type 39 has an invalid length.
[  181.126455][ T8752] __nla_validate_parse: 5 callbacks suppressed
[  181.126472][ T8752] netlink: 24 bytes leftover after parsing attributes in process `syz.2.644'.
[  181.180639][ T4948] Bluetooth: hci4: link tx timeout
[  181.186177][ T4948] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  181.232765][ T8753] bond3: option ad_user_port_key: invalid value (65535)
[  181.241002][ T8753] bond3: option ad_user_port_key: allowed values 0 - 1023
[  181.250032][ T8753] bond3 (unregistering): Released all slaves
[  181.332739][ T8759] xt_hashlimit: size too large, truncated to 1048576
[  181.409401][ T8764] netlink: 112 bytes leftover after parsing attributes in process `syz.4.643'.
[  181.547291][ T8757] netlink: 76 bytes leftover after parsing attributes in process `syz.4.643'.
[  181.549288][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.644'.
[  181.584406][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.642'.
[  181.644878][ T8752] batman_adv: batadv0: Removing interface: batadv_slave_1
[  181.759649][ T8771] net_ratelimit: 3256 callbacks suppressed
[  181.759667][ T8771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  181.907635][ T8771] team0: Mode changed to "activebackup"
[  183.100847][ T8807] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma?
[  183.223478][ T5631] Bluetooth: hci4: command 0x0405 tx timeout
[  183.275547][ T8817] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  183.287466][ T8817] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  183.295886][ T8817] CPU: 1 UID: 0 PID: 8817 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) 
[  183.305348][ T8817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  183.315409][ T8817] RIP: 0010:klist_del+0x49/0x110
[  183.320364][ T8817] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 58 90 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 58 90 f6 4d 8b 7e 58 4c 89 f7 e8 ef 43
[  183.339967][ T8817] RSP: 0018:ffffc9001baff828 EFLAGS: 00010202
[  183.346024][ T8817] RAX: 000000000000000b RBX: ffff888077ab3060 RCX: ffff8880338e8000
[  183.353978][ T8817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  183.361930][ T8817] RBP: ffffc9001baff950 R08: ffff88807d8a61e3 R09: 1ffff1100fb14c3c
[  183.369879][ T8817] R10: dffffc0000000000 R11: ffffed100fb14c3d R12: dffffc0000000000
[  183.377836][ T8817] R13: 1ffff1100ef5660c R14: 0000000000000000 R15: ffff88804f8fc7e0
[  183.385801][ T8817] FS:  0000000000000000(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000
[  183.394717][ T8817] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.401283][ T8817] CR2: 00002000001b7000 CR3: 00000000585fc000 CR4: 00000000003526f0
[  183.409241][ T8817] Call Trace:
[  183.412505][ T8817]  <TASK>
[  183.415422][ T8817]  device_del+0x27f/0x8f0
[  183.419740][ T8817]  ? pm_runtime_set_memalloc_noio+0x1f4/0x260
[  183.425786][ T8817]  ? __pfx_device_del+0x10/0x10
[  183.430619][ T8817]  ? netdev_unregister_kobject+0x344/0x450
[  183.436410][ T8817]  unregister_netdevice_many_notify+0x1d5f/0x22c0
[  183.442810][ T8817]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  183.449554][ T8817]  ? rtnl_net_dev_lock+0x36/0x2f0
[  183.454566][ T8817]  ? rtnl_net_dev_lock+0x36/0x2f0
[  183.459580][ T8817]  unregister_netdev+0x15f/0x200
[  183.464499][ T8817]  ? __pfx_unregister_netdev+0x10/0x10
[  183.469942][ T8817]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  183.475733][ T8817]  bnep_session+0x2a2a/0x2c50
[  183.480395][ T8817]  ? __lock_acquire+0x6b5/0x2cf0
[  183.485314][ T8817]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  183.490935][ T8817]  ? __pfx_bnep_session+0x10/0x10
[  183.495944][ T8817]  ? __pfx_woken_wake_function+0x10/0x10
[  183.501556][ T8817]  ? __kthread_parkme+0x7a/0x1f0
[  183.506474][ T8817]  ? __kthread_parkme+0x19c/0x1f0
[  183.511484][ T8817]  kthread+0x389/0x470
[  183.515542][ T8817]  ? __pfx_bnep_session+0x10/0x10
[  183.520548][ T8817]  ? __pfx_kthread+0x10/0x10
[  183.525162][ T8817]  ret_from_fork+0x514/0xb70
[  183.529734][ T8817]  ? __pfx_ret_from_fork+0x10/0x10
[  183.534826][ T8817]  ? __switch_to+0xc79/0x1410
[  183.539486][ T8817]  ? __pfx_kthread+0x10/0x10
[  183.544074][ T8817]  ret_from_fork_asm+0x1a/0x30
[  183.548829][ T8817]  </TASK>
[  183.551828][ T8817] Modules linked in:
[  183.556138][ T8817] ---[ end trace 0000000000000000 ]---
[  183.563778][ T8817] RIP: 0010:klist_del+0x49/0x110
[  183.568810][ T8817] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 69 58 90 f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 4b 58 90 f6 4d 8b 7e 58 4c 89 f7 e8 ef 43
[  183.592650][ T8817] RSP: 0018:ffffc9001baff828 EFLAGS: 00010202
[  183.598813][ T8817] RAX: 000000000000000b RBX: ffff888077ab3060 RCX: ffff8880338e8000
[  183.607376][ T8817] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058
[  183.615450][ T8817] RBP: ffffc9001baff950 R08: ffff88807d8a61e3 R09: 1ffff1100fb14c3c
[  183.623571][ T8817] R10: dffffc0000000000 R11: ffffed100fb14c3d R12: dffffc0000000000
[  183.631615][ T8817] R13: 1ffff1100ef5660c R14: 0000000000000000 R15: ffff88804f8fc7e0
[  183.640032][ T8817] FS:  0000000000000000(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000
[  183.649030][ T8817] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  183.655717][ T8817] CR2: 000055556d1ae9f8 CR3: 0000000076842000 CR4: 00000000003526f0
[  183.663897][ T8817] Kernel panic - not syncing: Fatal exception
[  183.670218][ T8817] Kernel Offset: disabled
[  183.674526][ T8817] Rebooting in 86400 seconds..