last executing test programs:

1m41.21928854s ago: executing program 0 (id=3183):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r0, &(0x7f0000000200)="b99d48f97178c9446095ca57cc2368dc433a52a46eb39b035a469ff58112309d", 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r1, &(0x7f0000000240), 0x0, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r3)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffea9, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000b2c00070103000000ffdbdf25027c00000800018004000600080002803dc170bc75a7ed2dcf8c49b81d062844d73a52f1e78b3bc8b62a6a92e26b7083082452ecf5209da83523c53d8d2e819bb6e6390942efb87b93b8e720663bd1009f2d97430fd8be53e9eccf5b59bdcb52a54a6ff92324ca8251b9c1c885164a739e2640389db16af41c94cff1879cec564acb516afbf4e24269086d6637ef7309ce"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x8894)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed", 0x6e}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x101, 0x200, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x400c090}, 0x4000815)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r7, 0x8b2a, &(0x7f0000000040))
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50)

1m40.318715976s ago: executing program 2 (id=3191):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}}, 0x1c) (async)
listen(r0, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) (async)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
recvmmsg(0xffffffffffffffff, &(0x7f0000001b80)=[{{&(0x7f00000006c0)=@alg, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000940)=""/75, 0x4b}], 0x1, &(0x7f0000000a00)=""/106, 0x6a}, 0x101}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000a80)=""/80, 0x50}, {&(0x7f0000000b00)=""/4096, 0x1000}], 0x2, &(0x7f0000001b40)=""/42, 0x2a}, 0x2}], 0x2, 0x21, 0x0) (async)
bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async)
write(r2, &(0x7f0000000040)="09000000010001", 0x7)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x9c}}, 0x404c010) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async)
syz_emit_ethernet(0x36, &(0x7f00000003c0)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)
setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, &(0x7f0000000080)=':$/\x00', 0x4) (async)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000540)={<r6=>0xffffffffffffffff})
getsockopt$MRT6(r6, 0x29, 0xce, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) (async)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
r8 = openat$cgroup_ro(r6, &(0x7f0000000740)='blkio.bfq.io_queued\x00', 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x53b1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100008}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0xfffff000, 0x59, 0x0, &(0x7f0000000480)="61df7100c804828cf539f57c082e3f40310cc6b53f20255615319fe8342408", 0x0, 0x2e67, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x168, 0x0, 0x0, 0x200, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x298}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4, 0x11000000]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async)
connect$inet(r7, &(0x7f0000000780)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x2000000) (async)
socket$inet_udp(0x2, 0x2, 0x0)

1m40.31215512s ago: executing program 2 (id=3192):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x7eb, @mcast1, 0x8}, 0x1c)

1m40.199857317s ago: executing program 2 (id=3193):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, 0xffffffffffffffff, 0xe6905000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000580)=""/155, 0x9b}, {&(0x7f0000000640)=""/155, 0x9b}], 0x2}, 0x2002)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)=0x2000000)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010002104000000000200000000000000", @ANYRES32=r5, @ANYBLOB="0000bfe4a687e14e00000000800b0000000000000015dfd3a338f8ae839412368001880009000000dcbd0007007f0000010a000100aa62b5ebb91dddbb76d44f39b90814d1d996741f38de1ea32433df8234"], 0x48}}, 0x40000)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r2, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2)
recvmmsg(r2, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)}, 0x1800000}], 0x2, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7})
ioctl$sock_netdev_private(r1, 0x8943, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1140000004000000040000f7ffffffffffffff00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = socket$kcm(0x10, 0x1, 0x0)
sendmsg$kcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a80000012", 0x2d}], 0x1}, 0x0)
socket$rds(0x15, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2a}, 0x0, 0x0, 0xffff, 0xfffd, 0xa}, {0x3, 0x200000, 0x64, 0x9, 0x0, 0x0, 0x80000000}, {0x0, 0x3, 0x42}, 0x0, 0x0, 0x1, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0xa, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0xfffffffc, 0x2}}, 0xe8)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)

1m40.198528863s ago: executing program 0 (id=3194):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010010000000000000000300000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c000480380001800e000100696d6d656469617465000000240002800800014000000000180002801400028008000180fffffffc88000340000000040900010073797a30"], 0xd8}}, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async)
r3 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0xffffffff, 0xfffffffd}}, 0x10) (async)
bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x43, 0x4}, 0x3}}, 0x10)
r4 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r4, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async)
bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (async)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x40, 0x1}, 0x10)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) (async)
bind$tipc(r4, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x6}}, 0x10)
bind$tipc(r3, 0x0, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3c, 0x1, 0x4, 0x6dd1, 0x4000212a, 0x40000004, 0x6, 0x2, 0x1}}) (async)
setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) (async)
listen(r2, 0x89c) (async)
connect$llc(r2, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) (async)
connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x5, @loopback}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000fcdbdf2501000000280007800c00018808000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00060000000000000000000c0002"], 0x54}, 0x1, 0x0, 0x0, 0x44884}, 0x400c000)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) (async)
writev(r1, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1)

1m40.082858532s ago: executing program 0 (id=3195):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write(r0, &(0x7f0000000200)="b99d48f97178c9446095ca57cc2368dc433a52a46eb39b035a469ff58112309d", 0x20)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0xa, 0x0, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r1, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(0x0, r3)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0xc4010)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
r4 = socket$kcm(0x10, 0x2, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0xfffffffffffffea9, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000b2c00070103000000ffdbdf25027c00000800018004000600080002803dc170bc75a7ed2dcf8c49b81d062844d73a52f1e78b3bc8b62a6a92e26b7083082452ecf5209da83523c53d8d2e819bb6e6390942efb87b93b8e720663bd1009f2d97430fd8be53e9eccf5b59bdcb52a54a6ff92324ca8251b9c1c885164a739e2640389db16af41c94cff1879cec564acb516afbf4e24269086d6637ef7309ce"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x8894)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed", 0x6e}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x7, 0x8000, 0x101, 0x200, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}})
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), r5)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000007c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x400c090}, 0x4000815)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r7, 0x8b2a, &(0x7f0000000040))
accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="11000000040000000400000008"], 0x50)

1m39.408780184s ago: executing program 1 (id=3197):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa8886004000024001280090001007866726d000000001400028008000100010000000800020011000000050021000000000008000a00", @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f0000000040)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000000480)="b21b824db48cb6a14779dcb79214c546b4f4728c976c59e106ff28ecffa91b2e68bd67bf9882d6939c7c4e4727f8d8979ce9bb883f9213faf51834517bed4d0bfc521236439a9e127fdb471c239215fcfc4dd80b3e53f4cb004d8328aaa6b41d237e66", 0x63}, {0x0}], 0x3, 0xa)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x27, 0x80000001, 0x8, 0x8400, r1, 0xd, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0x8, @value=r1}, 0x50)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', <r3=>0x0})
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0xfd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r5, 0xfffffffc)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="18080000ddf7ffff000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000598329e23043863f320614000000b7030000000000008500000005000000bca90000000000003509010000000000221b962100000000b702000000000000739af8ff00000000b509000001000000dbaaf8fff1000000bf8600000000000007080000fffdffffbfa400000000000007040000f0ffffffc70200000800000018220000feb385e6bbeb0813e4a6ceb363abe6de3137dab2179d2cdc238b6dfa16a31b8001e0", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000010000008500000007000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r12 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20)
r13 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="8fe517820d524cfd8b5dd9d3710202d2e4bc55c424865e5ff526d8f4e719dfbb02a1e85848249cba24df62f0199b2ad232ddc95aa3b396db619cb30788d4aeb76ab7891d0fc0144959de3761dc36a236461816e6c295c805e2d849d926452db4d44252ee4eb13bea14757cac656eb5571438786301e1e3aa8f663c87", @ANYRES16=r11, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r10)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r7, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

1m38.874678519s ago: executing program 0 (id=3198):
r0 = socket$kcm(0x2d, 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540))
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000003d80)=0x6, 0x4)
getsockopt$inet_tcp_int(r3, 0x6, 0x6, 0x0, &(0x7f00000044c0))
socket(0x9, 0x3, 0x2)
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000700)={0x2c, r2, 0x300, 0xffffffff, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000025}, 0x2000c804)
ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000580)={r0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x23, 0x4, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
socket$unix(0x1, 0x1, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
r10 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r11, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0)

1m38.237084022s ago: executing program 2 (id=3199):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2, 0x1, 0x0)
setsockopt(r1, 0x1, 0x9, &(0x7f0000000140)="3f14b0f1", 0x4)
setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000000)=0x7, 0x4)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, 0x3}, 0x6)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100))
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x20048811}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_user\x00', 0x0, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x8, <r3=>0x0}, 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYRES32], &(0x7f0000000580)='GPL\x00', 0x7f, 0x0, 0x0, 0x41000, 0x4e, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f00000006c0)="38000000010006", 0x7)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r8=>r7})
getsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@mcast1, @in=@local}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0)
write$tun(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)

1m38.202949459s ago: executing program 1 (id=3200):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8fa5}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94)
r1 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108)
r2 = socket(0x80000000000000a, 0x2, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x15, 0x0, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108)
close(r1)
r4 = socket(0x80000000000000a, 0x2, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x54, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}]}]}, 0x54}}, 0x0)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108)

1m37.726317191s ago: executing program 1 (id=3201):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000000)=0x6, 0x4)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @private1, 0x7}, 0x1c) (async)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newrule={0x2c, 0x1e, 0x1, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xe}, [@FRA_DST={0x8, 0x1, @rand_addr=0x64010102}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x4002810) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmmsg$unix(r5, &(0x7f00000053c0)=[{{&(0x7f0000000540)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20040085}}], 0x1, 0x2) (async)
write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r5, 0x4)
listen(r4, 0x6)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
bind(r7, &(0x7f0000000280)=@sco={0x1f, @none}, 0x80) (async)
r8 = accept(r2, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) (async)
sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0xfc, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_USERDATA={0x42, 0xc, "6f414075b51e382b788805bcabd9c93d26f26aad37618680edf064f9ab496ebc17646a1187b68b0e01bcdd89e9e79045b288e0f0e8333704f09be9dcb6ba"}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4fb3f450}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x520a8a64}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg0\x00'}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x58, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x17, 0x6, "83819d5f82234228321b8982f04afaca309bee"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0xbc, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x87, 0x6, "823aa611d6953a3cb3d7c07987416e3ffdced56d0973e9f1fd6d8ff68ef39478c5886fc7e822acc2c9b15923f090e3fc8a90598c956216359d9990db9b5cbc130cf92cae9a92eae2315a46542473a727849fffbb404c33e8906ef8f248501502ab80dfcf6ec21e38eb2ba688bc4fa3ee96d7ed68afb1dae83c3d23969d99ed0fb2ebb5"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x98, 0x5, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_batadv\x00'}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b383de2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5368e964}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9b8}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x2e4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

1m36.751123313s ago: executing program 1 (id=3202):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x40, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10}}}}}}, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000600)="9a", 0x1)

1m35.440755513s ago: executing program 1 (id=3203):
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x800)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x15, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008090}, 0x46005)
r2 = socket$key(0xf, 0x3, 0x2)
splice(r0, &(0x7f0000000200)=0x9f87, r2, &(0x7f0000000240)=0x5, 0x2, 0x1)
r3 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f0000000280)="35e8f0ccd5e321b597c14d5eeba264f826c5f56a8b2f17", 0x17)
sendmsg$sock(r1, &(0x7f00000008c0)={&(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000340)="8ebba422589c70c424ccb187a8da8037f3317fb442b217af4585ec752a0a7ea9519b36c0671d7d4157d49277eff4ef70a06b1a3862421b22becc3a72bbd5bb1d17a5fff0a6f9a7555ad8de6e8e1903115bfb969adf452a18ccc9afaff3e1b57ae00637a196f7e455e1f2801df8cc5fea71b79861e5da8f4ce3e022340b0c3586cf1cbf5e12d4f1b7da276bc776d5bb6a57c805", 0x93}, {&(0x7f0000000400)="cbfca1303acba9faa8cf5554a0a54d49fc1e13cc03b24a7225fd10ba0bab0406408db00a4f1f479251dbb1ee17d2d1e4662b2ae1ae4e21", 0x37}, {&(0x7f0000000440)="97", 0x1}, {&(0x7f0000000480)="3f430dd482a0ae17b6e1a3d8a2e889c47cf6eb595ab3b503a0e3ecb975bf2f4180bb7d162e8133be5ccc7aa707", 0x2d}, {&(0x7f00000004c0)="4f12733777dfb1a880590c1f62c300824390a6991f2d34c362a8ed9877c4b856e46e31bf91f29cf65381a449cbb27c203d78de6c222d530f0aaab1e8395630ebdcea054916da5e521d553daaaa4c146dcb3eab818b8fb4eb108ebe4b2d8df464359d3e5864f287e32d18903017824ccacf96803d2a121b112197987fc5cd6b57980b8ac11fbdadbe3a294a718235123ca231117f484d92c53d537af0841319fad1727fd22e6d2f61070e8198048b02c10670339f8d6b", 0xb6}, {&(0x7f0000000580)="d891f7a52578047da1baa80813c85e620216c68489b6874162d207222ffa668eb2a152669c6a3f2798bbd7e8863c12b5e9df24b47b79", 0x36}, {&(0x7f00000005c0)="cae7641a51122cc4c24291f73f315d1a984a0a2012331128411c7b62ab660172058036184d149cdbc323544ab3cd5826b25c", 0x32}, {&(0x7f0000000600)="92af040ce6be3dba23e11486265b50601a869c258708769b0f71ca141be76486d8ba7dc86ac3219ec8bf957061777483a21393e8cb654e6f6d0a3c03cf4e3c175cc691c5b17cad4237164c4d84de5067b2eeacc2e1cc4d42b4e74cd7d812bc890b06100839eae005ce9ab32d498d5a2f6894f64762178126b835", 0x7a}, {&(0x7f0000000680)="5826bb20de4164d6eb1badf93ffb8b4c9bdd1c2243bd89619e3b2d99b8ebc515920d88933496c203af3d875ede0ced9d882a48d46b9789e5e343e7c95b331aad2f8ef7703c491cf81b6b2f2276f2945c072351e50c5db934795521c6cd0b50ddb467cc9c8451c1d3fc9ca2", 0x6b}], 0x9, &(0x7f00000007c0)=[@mark={{0x14, 0x1, 0x24, 0x100}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x4f0000}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @mark={{0x14, 0x1, 0x24, 0xffff8e06}}, @timestamping={{0x14, 0x1, 0x25, 0x3fd47906}}, @mark={{0x14, 0x1, 0x24, 0xc8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xf0}, 0x801)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000000a00)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000c40)={{{@in=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0, <r6=>0x0}}, {{@in=@initdev}, 0x0, @in=@initdev}}, &(0x7f0000000d40)=0xe8)
setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000d80)={{{@in=@loopback, @in=@rand_addr=0x52b, 0x4e23, 0x4, 0x4e24, 0x0, 0xa, 0xa0, 0x20, 0x11, r4, r6}, {0x3, 0x0, 0x7fff, 0x4, 0x0, 0x33, 0x7fffffff, 0xffffffff}, {0xffffffffffffffff, 0xd12, 0x1000, 0x2}, 0x7ff, 0x6e6bbf, 0x1, 0x0, 0x0, 0x3}, {{@in6=@remote, 0x4d5, 0x33}, 0x0, @in=@multicast1, 0x3502, 0x3, 0x2, 0xfc, 0x209, 0x0, 0x5}}, 0xe8)
r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000e80)='syz0\x00', 0x200002, 0x0)
r8 = openat$cgroup_procs(r7, &(0x7f0000000ec0)='cgroup.threads\x00', 0x2, 0x0)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x64b79ad3a4f0e635}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, 0x1, 0x7, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000001}, 0x800)
r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000001040)=@o_path={&(0x7f0000001000)='./file0\x00', 0x0, 0x0, r8}, 0x18)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001380)={r9, 0x0, 0xb, 0xc7, &(0x7f0000001080)="d388f0e74c0f9a1bb9c269", &(0x7f00000010c0)=""/199, 0x7fff, 0x0, 0xa1, 0xd3, &(0x7f00000011c0)="b3deab8e44a20913960fd85d32665f0442ff1115e867fcedc8bb192be10d354490d4e40ae7fca789025cc06a307b6873b1aa0d477982d8923fadf56236bc4b22cf2a837fbb806fe4bb364d590e3b1bbebe4510429dd6ab8bdf94f22c6c12d096aa051cad9c4f8d6d8d87b2c43f43cdbede3cc478ac86620a42ec8c4a035da5ccb4020017a277466fdeb375951b35b7a3d1d0dcd64813d85c4e1b37c64c7d33a596", &(0x7f0000001280)="179c8290cf02bbf1053c9bc623501082836130959c041fd380feea43083deb3eec0a7b0ecfafc0e9153aa13de8fbdfeb04c328f0da42f1db024ced86e15b5cc560a48b913f78de55b113260c8456e3f17c8d66138d0190496bfd74459bc7970bb808cb3bbf1aee8e272355ae93fa8e07adfd4466eebf97541f4cdb3f22b2c07172345d1d3e29fe107ff9acc110cdb89f43d9aac1dd79eeebb2fd8bd158667c09729d029e54f59488e89fd181860815e62f09b37bca0dd67f3bc8157b9f714810d0db908a49219c876ea03caa46b70d2024b1fe", 0x7, 0x0, 0x1}, 0x50)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000001400)=0x49be, 0x4)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000001600)={{<r10=>r2, &(0x7f0000001440)='\x00', 0x82a00, &(0x7f0000001480)={@_ha_fsid={[0xd, 0x4]}, {0x7, 0x8543, 0x5, 0x6}}, 0x6, &(0x7f00000014c0), &(0x7f0000001500)=0x8}, {[0x7, 0xe, 0x7]}, 0x7, 0x9b, &(0x7f0000001540)=""/155})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001700)={{r10}, &(0x7f0000001680), &(0x7f00000016c0)=r9}, 0x20)
r11 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_mreqn(r11, 0x0, 0x24, &(0x7f0000001740)={@local, @rand_addr=0x64010100, r5}, 0xc)
socket(0x1d, 0x3, 0x7e7c)
r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup/syz1\x00', 0x200002, 0x0)
r13 = openat$cgroup_ro(r12, &(0x7f00000017c0)='cpuacct.stat\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001800))
write$tun(r12, &(0x7f0000001840)={@val={0x0, 0x8906}, @val={0x1, 0x1, 0x1, 0x4, 0x3ff, 0x5}, @ipv4=@gre={{0x18, 0x4, 0x0, 0x0, 0x2bf, 0x65, 0x0, 0x8, 0x2f, 0x0, @private=0xa010102, @remote, {[@noop, @timestamp={0x44, 0x8, 0xf1, 0x0, 0x2, [0x2]}, @timestamp_addr={0x44, 0x34, 0x6f, 0x1, 0x9, [{@local, 0x6}, {@multicast1, 0x39cf}, {@broadcast, 0x7e0}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@remote, 0x9}, {@multicast1, 0x469}]}, @timestamp_prespec={0x44, 0xc, 0x98, 0x3, 0xb, [{@multicast1, 0x3fe00000}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xd5, 0x3, [0x4], "80ee394458cc9f0b0923f78a55c1daee0a3b22f866d4eb07814473cd774066f59937ca05cec78e1879572b469d332e6440300206ba78c62889fae3a8c01f48041530774567938e8fc865bb9645295a5df0bceee6befbb3acd4eb7d872ec760c2d974dd1908307f6e2cd7e5d9e3666fc7fdab62ef712b44c9b2feb2171ca88ffa37d9aad5fd0e8d0410588f2ec920a6700f8b46ef772d09037bdfe69e9673b2f7df1c7f72fff7ded8c60f7156bfa9765102f68e7194f730ff443fbe4b3775550fed3ec4df99bf8feab0c35c822839250e25d4a58670"}, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x6, 0xe474, 0x2], "65a38f"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x9, 0x120, 0x1], "4aebbbd586b034164613dc5b4cea382271469027f1a9c4fe7e472facf87767a77d237fe22d620835dbb97e0fe7d440004cec123011a25b02a5a835ad8bff7e85dd1932326ea1311282d50e76ee66b48753f90f2169122b1393deed9b69fae54331e7aec0788d37ef4024c092c9d81846beab25711f00de9ab5aa"}, {0x8, 0x88be, 0x0, {{0x5, 0x1, 0x1, 0x1, 0x0, 0x3, 0x4, 0x2}, 0x1, {0xb}}}, {0x8, 0x22eb, 0x8000, {{0x6, 0x2, 0x0, 0x1, 0x1, 0x0, 0x7, 0x7}, 0x2, {0xe17, 0x5, 0x0, 0x3, 0x0, 0x1, 0x3, 0x1, 0x1}}}, {0x8, 0x6558, 0x3, "74760b2945a4365665b927a98f0d013e0a1f867f6f80b107c80a130d5a3b458add0e34492fb8000e0f684adba497a571b5063b018a004cb6bcd725976ef2e3cc1e91e63d2abcc3630c018c11316f543b9f8fd53e82efe05391092d16b7a037c1745caa3fda0616c166538054c3988451df6f47a6091ae01f279ecadb03939f1d77529081fb011ccd68e590d73c0b2daccc87b443771a9d39b4d56d8e92ed7be3645c271d76823e162c62572a2391989140c3fd43d2f91dd27a1e4d"}}}}, 0x2cd)
sendmsg$IPSET_CMD_SWAP(r13, &(0x7f0000001c00)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x28, 0x6, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x4008090)
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r14, &(0x7f0000002000)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d00)={0x2b8, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVKEY={0x154, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0xb0, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x200}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xd0}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x78, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7ff}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8001}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xa}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xebf}]}]}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x40}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0x34, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3f2d}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x90}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x9d122440f4b224bb}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555f}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffff8}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4}, 0x4000000)

1m35.323477333s ago: executing program 0 (id=3204):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180), 0x0)
listen(0xffffffffffffffff, 0x7)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180), 0x0)
listen(r1, 0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000), 0x4)
r2 = socket$inet(0x2, 0x2, 0x1)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r2, 0x0, 0x4004010)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x7, 0x1, 0x3, 0x100}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x7, 0x2, 0x9, 0x0, r3, 0x100}, 0x50)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r5}, &(0x7f0000000880), &(0x7f00000008c0)=r3}, 0x20)
socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x2040400)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
pread64(r6, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r7], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x20)
ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000005240)={'ip6gretap0\x00', 0x7f, 0x5})

1m34.385035985s ago: executing program 2 (id=3205):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x1, 0x6}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f00000008c0)=ANY=[@ANYRES8=r6, @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x8100, 0x67, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)=ANY=[@ANYBLOB="f00000001e0013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00000000000000000000000088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000ff010000000000ecffffff0000000001000000000000000000000044d3e14cb1ab0000000000040000000000000000000000000000000000000000000000040000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000a0002003c00000000000000efbfa735d64461b444eae6ed7c70abb2"], 0xf0}}, 0x0) (async)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r10, &(0x7f0000000100)={0xa, 0x2, 0x7, @remote, 0x1}, 0x1c) (async)
setsockopt$inet6_tcp_TCP_ULP(r10, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r10, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "bad8ce8b3a9bfee2", "83c0dd5a4283501b42565f08273939dd", "786262fa", "b54af18dd4ad9997"}, 0x28) (async)
close(0x3) (async)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r12, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0b160600000000002154137400000800b800000000000e0001"], 0x3c}}, 0x0) (async)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r12, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24048080}, 0x0) (async)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r12, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x3c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048885}, 0x400c810) (async)
sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="540000000206050000000000000000000700000004000400000000000900020073797a30000000000c0007800800060000000000050005000000000005000100060000000d000300686173683a6d616300000000aaaf19766f01421148264cd2db490354b52277296823e9539f01303b673fc20b99c2513e400718aa3195635acbd6fadc76ed8a961faefc2cc4a2689d8081e7d4ea039b6f79f8aacec23d2e9d10f47e9780f92c4b67ad655315d2aab5425c3b917a5e310fd9e175afe485ed90f0d06e800792324071c1529cd2ba4abf8463c7d861da3d1c396a588a11c6dc1f1d1ef9005c31928578546d884b8ff551"], 0x54}}, 0x0)

1m34.305871209s ago: executing program 2 (id=3206):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r3], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006})
close(0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=<r10=>r1, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYRES8=r10, @ANYRES32=r0, @ANYBLOB="0001000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703001908000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

1m34.184136613s ago: executing program 1 (id=3207):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r4, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r5, &(0x7f0000000180)="a0e28c8b62782432691fc6694de4f0793d5441b68fbf64b0cf68", 0x1a, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1c)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES8=r4, @ANYBLOB="72cc20bd280b7b3a496e27ccd82adadb23e0841c699f0cc2aeca87ff0313c8810efd8cd246d445322d46b71b5d0399e130979f779377dd9d5a2e782f9ecef5ae307799e3c0b053ffd214c9cf258a76af638075dd589100ad7cd5797867f3ccf347c9653c760a6b9fdf2a6b9fef5448dda30cfb1937d50f7a26a03ad83371b2c0e519ad9fa0326137466e6c9d0f6d8e232199503fb5d0e02694b89e200396d8dd2da7b718c54922189d2167af70d7ff", @ANYRESDEC=r0, @ANYRES16=r4], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

1m33.951896678s ago: executing program 0 (id=3208):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x14, 0x4, 0x8, 0xb, 0xc}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003b40)=@newtfilter={0x8a4, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x56, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x1, 0x100, 0x7ff, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x3, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x1, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0x1, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0x0, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x2, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0xfffffffc, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x4, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x8, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x4, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x7, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x4, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa5}}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

1m18.98643087s ago: executing program 32 (id=3208):
r0 = socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x14, 0x4, 0x8, 0xb, 0xc}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x8100, 0x0, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0x8000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000003b40)=@newtfilter={0x8a4, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x870, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x56, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_POLICE={0x848, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x1, 0x100, 0x7ff, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x3, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xfffffffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x7, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x1, 0x0, 0x5, 0xe, 0x0, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfb, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0x1, 0xfffffffc, 0x8, 0x9, 0x1c15, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0x0, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x2, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0xfffffffc, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x4, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0xe, 0x2, 0x4, 0x6, 0xfffffff9, 0x4, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x8, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x8, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x4, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x7, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x4, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x0, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x1, 0x7f, 0x4, 0x9, {0x3, 0x1, 0x4, 0x17f, 0x0, 0x1ff}, {0x6, 0x0, 0xff, 0x7, 0x5, 0xffffffff}, 0x9, 0xe90, 0x6db5cd0}}]}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xa5}}]}, 0x8a4}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

1m18.947571876s ago: executing program 33 (id=3207):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
connect(r4, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x80)
r5 = socket$inet6_icmp(0xa, 0x2, 0x3a)
sendto$inet6(r5, &(0x7f0000000180)="a0e28c8b62782432691fc6694de4f0793d5441b68fbf64b0cf68", 0x1a, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1c)
r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000006c0)=ANY=[@ANYRES8=r4, @ANYBLOB="72cc20bd280b7b3a496e27ccd82adadb23e0841c699f0cc2aeca87ff0313c8810efd8cd246d445322d46b71b5d0399e130979f779377dd9d5a2e782f9ecef5ae307799e3c0b053ffd214c9cf258a76af638075dd589100ad7cd5797867f3ccf347c9653c760a6b9fdf2a6b9fef5448dda30cfb1937d50f7a26a03ad83371b2c0e519ad9fa0326137466e6c9d0f6d8e232199503fb5d0e02694b89e200396d8dd2da7b718c54922189d2167af70d7ff", @ANYRESDEC=r0, @ANYRES16=r4], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

1m18.887636173s ago: executing program 34 (id=3206):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r3], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
r8 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006})
close(0x3)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=<r10=>r1, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYRES8=r10, @ANYRES32=r0, @ANYBLOB="0001000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703001908000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

55.946642724s ago: executing program 3 (id=3209):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000000e0a010200000000b4617f00000000020000030900010073797a31000000001400000011000100000000de5f94bae000000000"], 0x48}}, 0x40004)
socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0xfffffffffffffffa, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {0x0, 0xa}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0x38}}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_linger(r5, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'macvtap0\x00', <r7=>0x0})
sendmmsg$sock(r5, &(0x7f0000000140)=[{{&(0x7f0000000b40)=@ll={0x11, 0xd, r7, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}}, 0x80, 0x0, 0x0, &(0x7f0000000f80)=[@txtime={{0x18, 0x1, 0x3d, 0x10000000000006}}], 0x18}}], 0x1, 0x200088d0)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0)
pwritev(r10, 0x0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
sendmmsg$inet6(r6, &(0x7f0000000d40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)}, {&(0x7f0000000380)="03a10691df6c68fe9e6c2bb219f9c301e7af3b3931e61cca3e2fc82a4b6eb0bdbca1535b5e5079c66f12187ab087687e12451eb5e491c4224faeae5a9f46999e325186c43bb59729a542e53051f89e1a0df2c926428c06bdf4481b421b2a5fe3b93dad4c6fc50205a26bb70f1fba630e7a8e5290fe70c1dcb206c345d5dd0c87f4a6cc50a8b250e3ff76538b9005760b71585ecd4f3a5c22ce2b6879fc81641092bdf23f51dec692b8", 0xa9}, {0x0}], 0x3}}], 0x2, 0x1405c891)
close(r8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r8, 0x9)
r11 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)

55.504635836s ago: executing program 3 (id=3212):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="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", 0x15f}, {&(0x7f0000000fc0)="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", 0x187}], 0x2}}], 0x1, 0x2090)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x100, 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)

55.387458933s ago: executing program 4 (id=3210):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50)
mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x300000b, 0x11, r2, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x406}, 0x0)

55.369750176s ago: executing program 3 (id=3213):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001300)=@newtfilter={0x10d0, 0x2c, 0xd3f, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10a4, 0x2, [@TCA_BPF_POLICE={0x1098, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x0, 0x3, 0x3, 0xfffffffb, 0xfffff001, 0x10000, 0xe475, 0x4, 0x2, 0xfffffff7, 0x401, 0x1000, 0x8, 0x0, 0x7, 0x5, 0xffffffff, 0x1, 0x0, 0x3ff, 0x4, 0x45, 0x5, 0x9, 0xfffffff8, 0x6, 0x5, 0x7, 0x4, 0x7, 0xd, 0x3, 0x8, 0x6, 0x9, 0x0, 0x4, 0x81, 0xa4, 0x2, 0x4, 0x8000, 0x26, 0x1, 0x4, 0x9, 0x1000, 0x1, 0x2, 0x5, 0xda, 0x8, 0x2, 0x8000, 0x8, 0x80000000, 0xa, 0xfff, 0xd, 0x6, 0x5, 0x4, 0xf, 0x5, 0x6f4, 0x9a7b, 0x2, 0x1, 0x70, 0x8, 0xe2, 0x9ef0, 0xf, 0x2, 0x2, 0x5, 0x9, 0x5471, 0x6, 0xfffffffe, 0x3, 0x4, 0xc63, 0xd6, 0x40, 0xc, 0x8, 0x7, 0xfffffff8, 0x4, 0x3, 0x5, 0x2, 0xf1, 0x619f14a8, 0x2, 0x5, 0x101, 0x49, 0x3, 0x8, 0xfffeffff, 0x7f, 0x6, 0x3, 0x9, 0x9, 0xfffffffb, 0x6, 0x8, 0x5, 0x6, 0x2, 0xfffffffb, 0x5, 0x6, 0x1, 0xff, 0x8, 0x4, 0x0, 0x4b, 0x5585, 0x3, 0x3, 0x7ff, 0x80000001, 0xb, 0x8, 0x5, 0x16, 0x982, 0x5, 0x8, 0x7f, 0xa8eb, 0x80, 0x6, 0x1000, 0x1, 0x2, 0x21fe, 0x2, 0x4, 0x8, 0x401, 0x4, 0x8, 0x40000000, 0x9, 0x47, 0x885, 0x0, 0x2, 0x3ff, 0x7, 0x8001, 0x6, 0x0, 0x3, 0x5, 0x4d, 0x6, 0x76, 0x8, 0x4, 0x13, 0x800000, 0x0, 0x1000000, 0x4, 0x10, 0x2, 0x5, 0x8, 0x1, 0x68, 0x7, 0x3, 0x2, 0x5, 0xdc, 0x2ebc, 0xf, 0xfffffffc, 0x6, 0x2, 0x8, 0x3, 0x80000000, 0x6d1bb8d9, 0x9, 0x2, 0x2, 0x1, 0x4, 0x0, 0x3a60d93, 0x1, 0x5, 0x0, 0x3, 0xb9a, 0x5, 0x10001, 0x5, 0x8, 0x7fffffff, 0xac, 0x411d, 0x5, 0x12bf, 0xfffffffc, 0x0, 0x1, 0x6, 0x9, 0x7, 0x4, 0x1, 0x8, 0xffff, 0x10001, 0x0, 0x2, 0x4, 0xaaa, 0x5f, 0xfffffffa, 0xa69f, 0xc71b, 0x9, 0x7, 0x3, 0x8, 0x6, 0x6, 0xfffffffe, 0x0, 0x9, 0xd5e, 0x0, 0x8, 0x2, 0x8, 0x3, 0x7, 0x6, 0x100, 0x5, 0x8000, 0x3, 0x3523, 0x6, 0x7fff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xc0, 0x9, 0xfffff506, 0x7, 0xffffffff, 0xea84, 0x4, 0x9, 0xd9, 0x2, 0x9, 0x25e0, 0x4, 0x7, 0xd30, 0x48ad, 0xde, 0x1ff, 0x4d02952, 0x9, 0x101, 0x2, 0x3, 0x3, 0xa, 0xff, 0xba5f, 0x7, 0x4, 0x2, 0x5, 0x4, 0x9e5d, 0x8, 0xfffffffd, 0x7, 0xfffffffe, 0x80000001, 0x3, 0x8000, 0x1, 0x9, 0x0, 0xd461, 0x800, 0x2, 0x3, 0xaeb, 0x8000, 0x6, 0x800, 0x6, 0x4, 0x6ea4, 0xc, 0x7, 0x898, 0x2, 0xfffffff9, 0x5, 0xfffffff2, 0x69, 0x7, 0x1, 0x53dd, 0x2, 0x0, 0xa59, 0x6, 0x802000, 0x669fd4ef, 0x6, 0x7, 0x5, 0xfffffc00, 0x6b65, 0xffffffff, 0xf54f, 0x100, 0x4, 0x7fff, 0x5, 0x6, 0x3, 0x8, 0x10000, 0x177c6c5e, 0x1, 0x7ff, 0x2, 0x237, 0x1, 0x2, 0xe13e, 0x0, 0xfffffffc, 0xa5, 0x93b6, 0x10, 0xa, 0x608, 0x7, 0x2, 0xfffffffe, 0x1, 0xce, 0xc00, 0x3, 0x5, 0xe875, 0xe, 0x3, 0x5, 0xec, 0xff, 0x5, 0x0, 0x9, 0x3, 0x6, 0x7ff, 0x9, 0x8001, 0x200, 0x6, 0xf5, 0xc8, 0x3ff, 0x3, 0x650, 0xc88, 0x76dbc38, 0xb848, 0x1, 0xcf, 0x2, 0x2, 0x7ff, 0x80000001, 0xc, 0x0, 0xffffffff, 0x7, 0x80, 0xd2b0, 0x3, 0x7d, 0x3, 0x1000, 0x4, 0x7, 0x1, 0x2, 0xa7, 0x1, 0x400, 0xffffffff, 0x0, 0x80000001, 0x5, 0x88, 0x4, 0xe4, 0xffff59e3, 0x2, 0x0, 0x80000000, 0xb, 0x81, 0x7ff, 0x4, 0x6, 0x7fffffff, 0x4, 0x781aea6e, 0x10, 0x7, 0x9, 0xfff, 0x2, 0x4, 0x0, 0x5, 0x7, 0x0, 0x200, 0x5, 0x1, 0x9, 0x80, 0x7f, 0x4, 0x400000, 0x37, 0x400, 0x52449cc6, 0x8001, 0x800, 0xcd4, 0xf8c, 0xb4, 0x3, 0xd, 0x6eee, 0x7ff, 0x8, 0x1000, 0x2, 0x8, 0x9, 0x101, 0x3ff, 0xdf, 0x8, 0x0, 0x9, 0xb, 0x80000000, 0xb4c, 0x80, 0xb, 0x3, 0x8, 0x10000, 0x4, 0x8, 0x4, 0x7, 0x800, 0x0, 0x400, 0x8, 0x6, 0x80, 0x2, 0x1000, 0x1, 0x5, 0x1, 0x80, 0x7, 0x5, 0x7, 0x3b, 0x3, 0x5, 0x24b72e35, 0x1, 0x40, 0x0, 0x6, 0x8, 0x3, 0x6, 0x7, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xa0bb1e5e84f77534, 0x20, 0x8, 0x1d777196, {0x9, 0x1, 0xc, 0x3, 0x2, 0xa1}, {0x2, 0x0, 0xf, 0x8, 0x1ff, 0x952}, 0x7, 0x4, 0x5}}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x3, 0x0, 0x1, 0xe, 0x9, 0xb5dc, 0x7, 0x7, 0x78000, 0x4a20, 0x9, 0xf6, 0x2, 0x3, 0x10001, 0x8, 0x3, 0xcb, 0x7, 0x400, 0x5a, 0xb3, 0x8f, 0x40000000, 0x6d25, 0x8, 0x5, 0x3, 0x3, 0x9, 0xb487, 0xaf, 0x4d, 0x4, 0x2, 0x9, 0x8, 0x9, 0xffffff00, 0x1, 0x6, 0x3, 0xb, 0x9, 0x40000, 0x6, 0x0, 0x100, 0x75, 0x6, 0x0, 0x7, 0xffffffda, 0xffffffff, 0x7, 0x1f5, 0x81, 0x0, 0x4a19798e, 0x8, 0x1, 0x0, 0x5, 0x1, 0x81, 0x0, 0x6ec, 0xd9, 0x7, 0x58e1615d, 0x73713248, 0x1, 0x5c, 0xffffff81, 0x3, 0x0, 0x4, 0x33d5, 0x50b4, 0x7fffffff, 0xd, 0x800, 0x9, 0x5, 0x6, 0x4800, 0x1, 0x3, 0x408027f7, 0x8, 0x5, 0x3, 0x1, 0xcb0c, 0x2, 0x0, 0x6, 0x0, 0x5, 0xfffffffd, 0x9, 0x0, 0x80000000, 0x64f, 0x7, 0x7fff, 0x1, 0x0, 0x5, 0x7, 0xa696, 0x30a5, 0xb, 0x4, 0x5, 0x7, 0xffffffff, 0x101, 0x1, 0x10001, 0x2, 0x81, 0xfffffbff, 0x92d, 0x9718, 0x5, 0x3, 0xffffff6c, 0xd, 0x2, 0x2, 0x54f, 0x5, 0xff, 0x0, 0x9, 0xe000000, 0x10000, 0x0, 0x5, 0x6, 0x120, 0x843, 0x3, 0x955102f0, 0x0, 0x9b76, 0x57b, 0x3, 0x9, 0x3, 0xe6c9, 0xf, 0x58a, 0x38, 0x1, 0x5, 0x5, 0x7f, 0x800, 0x9, 0xc, 0x0, 0x7f, 0x5, 0x1, 0x800, 0x1, 0x5, 0x3, 0x0, 0xe0a4, 0x56f, 0x10001, 0xc0c, 0x4, 0x1ff, 0x401, 0x4, 0x4, 0x3, 0xe, 0x1, 0x6, 0x4, 0x1, 0x2, 0x1, 0xfffffffe, 0x7, 0x7cd, 0xd6, 0x3, 0xc96, 0xee7, 0x2, 0x8000, 0x1ab, 0xfff, 0x80, 0x1, 0x6, 0x2, 0x30, 0x1, 0x5, 0xffffffff, 0x4, 0x356, 0x8, 0x1a000, 0x1, 0x6, 0x3, 0x4, 0x3ff, 0x5, 0xb, 0x4, 0xff, 0x0, 0x1, 0x80000000, 0x21, 0x3, 0x1, 0x401, 0x9, 0x9, 0x5, 0x6, 0x1000, 0xfffffffe, 0x9, 0xc, 0x2, 0x5000, 0x80, 0x9, 0x0, 0x10000, 0x8, 0x1, 0xed8, 0x5, 0x0, 0x3, 0xb458, 0xc, 0x2, 0x8, 0x6, 0x36, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xe1c7, 0x0, 0x6, 0x7, 0x200, 0x49, 0x4, 0x9, 0x10001, 0xd4d, 0x84a, 0x0, 0x6, 0x9, 0xaf, 0x5, 0x5, 0x7f, 0x7, 0x5, 0x0, 0x6, 0xfffffff9, 0x101, 0x3, 0x64e5, 0xdf, 0x2, 0x4, 0x4, 0xa06, 0x2, 0x10, 0x2, 0x7, 0x10, 0x3, 0x2, 0xef7, 0x0, 0x0, 0x401, 0x2, 0x3, 0x4, 0x7, 0x4cd, 0xffff, 0x9, 0xd395, 0x1, 0x7, 0xffffff7f, 0x2b65, 0x3, 0x3ff, 0x800, 0xfffffff9, 0x0, 0xfffffffb, 0x4, 0x945, 0x10000, 0x0, 0x5, 0x800, 0x8, 0x0, 0x5, 0x3, 0x8, 0x29, 0xfffffffb, 0x5, 0x3, 0x7, 0x4, 0x8, 0x1, 0x4, 0x5, 0x9, 0x1, 0x57, 0x9, 0x75, 0x1, 0x8, 0xad1, 0x4, 0x860, 0xffffffff, 0x4, 0x300000, 0x5, 0x1, 0x8, 0x5412, 0x800, 0x8, 0x4, 0x9, 0x7, 0x9, 0x3, 0x300, 0xfffffffe, 0x80, 0x1, 0x35f4cd50, 0xf, 0x8, 0x8, 0xfffffffb, 0x3, 0x4, 0x249, 0x8, 0x7, 0x0, 0x8, 0xf, 0x7, 0x0, 0x6, 0x0, 0x9, 0x3ff, 0x5, 0xc5, 0x9, 0xfffeffff, 0x2, 0x18000000, 0x5, 0x6, 0x2, 0x80000000, 0x3, 0x8, 0x3, 0x9, 0x4, 0x9, 0x9a, 0x8, 0xfffffffe, 0x37d7, 0x101, 0x7fff, 0x1, 0x9, 0x4, 0x2, 0x7, 0x2, 0x4, 0x3, 0x0, 0x2, 0x800, 0x80000000, 0x4, 0x8, 0xce, 0x8, 0x6, 0x3, 0x10001, 0x100, 0x1, 0xfffffffc, 0x10, 0x6, 0x0, 0x7fff, 0x5d, 0x7, 0x5, 0x24, 0x9, 0xc, 0x2, 0x40f, 0x4, 0x4, 0x10000, 0x40, 0x10000, 0xfffff798, 0x7, 0x7, 0xdfef, 0x0, 0x6c2, 0xfffffffb, 0x1ff, 0xcc, 0xffffffff, 0x3f6, 0xf, 0x1, 0x1, 0x9, 0xd, 0x8a0c, 0xa7da, 0x3, 0x105, 0x3, 0x9, 0x2, 0x7, 0x0, 0x4, 0x2, 0x100, 0x4, 0x0, 0x9, 0x3a6, 0x9, 0x7d, 0x1, 0x844, 0x7fffffff, 0x5, 0x0, 0x8001, 0x10, 0x5f, 0xf4, 0x3, 0x8, 0x75, 0x4, 0xfd564b3d, 0x400, 0x7, 0x5, 0x80000001, 0x10, 0x9, 0x9, 0xfffffffe, 0x2, 0x9, 0x6, 0x66, 0x1, 0x1000, 0x10001, 0xe2, 0x4, 0x8]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x7fffffff, 0x6, {0x40, 0x0, 0x800, 0x7ff, 0x5, 0x4}, {0x7, 0x0, 0x7ff, 0x400, 0xa, 0xffffff5a}, 0xfffffff9, 0x1, 0x9}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x10d0}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000fcdbdf255900000008000300", @ANYRES32=0x0, @ANYBLOB="725b66c2936f74c60011136de4808629e62e91374549fbe6a24ebc326af81265ad7df30022149ef32382d650676234be4f39b57f50f60a75ff26d7f7e9c55a78bbf6f02381f624d9b966216eb0043e875b23dd6a96a7f1ab46d29ed1ee201e42c4a68024505c421e1bba34bf0499fd8503562969afd61358eb46f24a73f6f934552a8118f26ca3321db9051fbabb15369ad08fb73c375c84f17059fab4e8fd6a38cfd7be00000008a558c2b5cefe46df7c4df7f6"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000005600000091880600", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="01000000"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x8100, 0x67, 0x0, &(0x7f00000002c0)="c810e19e00399da26f0000000000", 0x0, 0xadf0, 0x21, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000700)=ANY=[@ANYBLOB="f00000001e0013070000000000000000ffffffff000000000000000000000000fe80000000000000bb00000000000000000000000088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3], 0xf0}}, 0x0)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r11, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r11, &(0x7f0000000100)={0xa, 0x2, 0x7, @remote, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r11, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r11, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "bad8ce8b3a9bfee2", "83c0dde5fe178a98d9f84508273939dd", "786262fa", "b54af18dd4ad9997"}, 0x28)
close(0x3)
r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r13, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=<r14=>r12, @ANYBLOB="0b160600000000002154137400000800b800000000000e0001"], 0x3c}}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r13, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB="39d96788000000", @ANYRES16=0x0, @ANYBLOB="000225bd7000fcdbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300030000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000080001007063690011000200303030303a30303a31302e30000000000800030000000000"], 0x88}, 0x1, 0x0, 0x0, 0x24048080}, 0x0)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r13, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3ced2d590fd9ad554cb1449500", @ANYRES16=0x0, @ANYBLOB="00002dbd7000fedbdf250a0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20048885}, 0x400c810)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES64=0x0, @ANYRES16=r14, @ANYRESOCT=r7, @ANYBLOB="02bc1a4bbf6d34191e93abab99ca1506d7965b9219dfe6616575c4a3b643f79dd53eb1a016cff9438daf28e0ae86aa10e19da089f4dcdc8caf8af96965ee39af198cdd143dd6632bf70baf8bfdd8af1c11bd6651358826c045f0c7d970ac7aadfa09e781b7a05ffc401bb8b194be4d6bfeaee8c2f9350c051af7db37d7800a7833470e356c3e01ffbe6d397334857a005016acd12b3b10ed872a3b4790ebc3e5b915f1b1936a93761f3a14d2f1682e49af05594b26346b58395070fa3fb03b5d8d4b68444622ffed43243db337caa86e4dd34444d4930b493b"], 0x54}, 0x1, 0x0, 0x0, 0x4804}, 0x20004000)

55.181928056s ago: executing program 4 (id=3214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) (async)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r3], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
r8 = socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006})
close(0x3) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000001cc0)=""/4094, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

45.934724923s ago: executing program 3 (id=3215):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x98ad45ccb5c69825}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="340000002c00070128bdf000ffdb0e0a1d3d4f1042ec177703df25017c0000100001800c0034800400d78004003680100002802c"], 0x34}, 0x1, 0x0, 0x0, 0x4881}, 0x2400c810)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="03000800010000000000140000004606006500680000050690780a010102ac14140b440424234e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5101000a907800082a5367d39f1c52efe0b973ff882d78c4383d50b0e6a2efaf5b714abd6578196f34df75e9bc29f501d010ad0eb0481b51d5d851c0318b2f1d6dd17d2f165fe64517c04d45d0593f70c72ab56222661b834b2c97b5395009198a98a8"], 0x73)

40.01990772s ago: executing program 35 (id=3214):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001811005abeef4ba0d598", 0xd}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}], 0x3) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c) (async)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
close(0x3) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYRES16=r3], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) (async)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (async)
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c)
r8 = socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006})
close(0x3) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000001cc0)=""/4094, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

31.579478865s ago: executing program 5 (id=3211):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@btf_id={0x18, 0xb, 0x3, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_rxfh={0x4e}})
sendmsg$nl_route(r2, 0x0, 0x1)
sendto$inet6(r6, &(0x7f0000000340)="bc381dfe2fa3e3b77fda2240db00e4918a254a9e7b62ab90c85ec9a79e14af7102d04744807321ad7b4ec23d1b72e7103f477a6ac878a55d9f061011d6bd7efb108f7929f70cccf3c0", 0x49, 0x0, &(0x7f0000000400)={0xa, 0x4e22, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4, @ANYBLOB="b759cdc0af94680674f451c513371f4927b49175dc9ee9db8eb8eb5fcaca9296def45a15b56382a7441ce4e79983c157442c23fe123fd4468ca55c510635f9c28dc8b0648bf29681"], 0x3c}}, 0x8000)
sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x5a, &(0x7f0000000c80)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180000000000000000000000000000000e080300ff00000018300000050000000000000000000000180100002020692500000000002020207b1af8ff0000", @ANYRES32=r1, @ANYBLOB="00000000000000f09700b70500000800000085000000a503000000000000000bd6ec0baddbab", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600"], &(0x7f0000000940)='GPL\x00', 0x6, 0x53, &(0x7f0000000980)=""/83, 0x41000, 0x6e, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x2, 0xd, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a80)=[r1, r1, r1, r1, r1, r1, r1], &(0x7f0000000240), 0x10, 0x5}, 0x94)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
r12 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r12, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r11, {0x2, 0x1, @remote}, 0xa}}, 0x26)
connect$pppl2tp(r9, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x0, 0x0, {0xa, 0xfffe, 0x0, @local}}}, 0x32)
r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0xac}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

29.023824082s ago: executing program 36 (id=3215):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x98ad45ccb5c69825}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="340000002c00070128bdf000ffdb0e0a1d3d4f1042ec177703df25017c0000100001800c0034800400d78004003680100002802c"], 0x34}, 0x1, 0x0, 0x0, 0x4881}, 0x2400c810)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="03000800010000000000140000004606006500680000050690780a010102ac14140b440424234e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5101000a907800082a5367d39f1c52efe0b973ff882d78c4383d50b0e6a2efaf5b714abd6578196f34df75e9bc29f501d010ad0eb0481b51d5d851c0318b2f1d6dd17d2f165fe64517c04d45d0593f70c72ab56222661b834b2c97b5395009198a98a8"], 0x73)

18.229081899s ago: executing program 5 (id=3218):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@rand_addr=0x64010101, @rand_addr=0x64010100}, 0xc)
r1 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=0x4)
sendmsg$xdp(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x2c, 0x2, r2, 0x32}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000100)="fabccb2317cf9a77e3f24e58811bcf061c236ee27c48728486662e681c7ae087e02bf06c61a41dd8077a3c9a9ff879453d023d79a6959acd2fd2314b9ca8ab282d8234bc2a2ed9125ae53929b5df813c615658666e0bed0794569649078ba6223178b59c503b74daf085bb9578188fa933413495f90e385bf9840282a1b4948b6854bc8518129d97b7728e84212d4cb71d759e3a0be988a2de091504aa", 0x9d}, {&(0x7f00000001c0)="605599c7dccf480305e2c75fab9881307ed722020132b204e2631ca160801aa4b238bf812262906d18c819c4f418ef68b4382a3213019348481ceede8f9a5769eb29e854de5913d868965ad52becaf638fbb8f3206f125ec81bf41e022051fe85d325d6679787b7ce441000c6e5b3ba7a5556cf8a13a9691721419c29b1f26d61dfa7c", 0x83}, {&(0x7f0000000280)="aa0335cbf29d0d38b2de832339a659ebd2ae899186d05e40495058180de312c6d15fa8c8fe80d4d49aa52c847b315753", 0x30}], 0x3, 0x0, 0x0, 0x2000c890}, 0x5)
ioctl$NILFS_IOCTL_RESIZE(0xffffffffffffffff, 0x40086e8b, &(0x7f0000000340)=0x1)
r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000003c0)=0x10, 0x80800)
sendto$llc(r4, &(0x7f0000000400)="2090a7b06c602999b3cd76629afb9de4334a8c85fd56df578e5752a93d8f7a0e85063655532e0dcce2ecd4a381def09f4b0042f3fd91873b9eccb1fbff6af3cc94de1beecb56823b6221ab60f52a008f66efca7f40dc3594fd50460bd05dcfb28a0f95057fd7371227a7267ee4f82599eff6c5c77a2333a7465cd9ff70d34a7949f9e66a84112b3b6f2d094aeaa0886ef49c8ddf4b8cfded99799e1d8c0601adf3d00baf05ca767e86df237072719461f7a79201f1cbb6035543c1e72bc89881e95f642e043a01d93238db6086ec06aa72", 0xd1, 0x1, &(0x7f0000000500)={0x1a, 0x321, 0x0, 0x9f, 0x4, 0x3, @multicast}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r5)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000005c0)={'wg2\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xb4, r6, 0x10, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x48085}, 0x4040810)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), 0xffffffffffffffff)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000800)={0x1, &(0x7f0000000780)="cd4246101f45e7ecd25fbefa49d6070d80610f923ac060d62f123633994e3fe15200534b03286624ad03b03eef7354", &(0x7f00000007c0)=@buf="264b60680f32792467407f09", 0x2}, 0x20)
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, &(0x7f0000000840), 0x4)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000880), 0x80800, 0x0)
write$tun(r9, &(0x7f00000008c0)={@val={0x0, 0x80f3}, @val={0x2, 0x80, 0x5, 0x9, 0x1ff, 0x6}, @llc={@llc={0xd4, 0xf0, 'z', "e5a9e4a60443dffad41a30b49bd364c672f8e55880e2c17cdf4c49c5d8924e2e1a94902507f7c85b7bb02e50dc5f4e9c28a51bfa4ff1e179b462a1efab31c8d40172e24b4a087d759ca42b766bdfde9b05432d44be20c6750c75f904daf209a762015faad39ea6d4dc0d1725b9f17adf5c25ed1885740ef094a9879691049d2cadcd0f926f2bc323d1426427"}}}, 0x9d)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl0\x00', <r10=>r2, 0x2f, 0x7, 0x9, 0x3, 0x10, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80, 0x8, 0xffffffff, 0x1}})
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000bc0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0xec, r6, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x82}, 0x20000004)
r11 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$BTRFS_IOC_RESIZE(r8, 0x50009403, &(0x7f0000000c00)={{r11}, {@void, @actul_num={@void, 0x8, 0x70}}})
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000c40)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, <r12=>0x0})
ioctl$BTRFS_IOC_WAIT_SYNC(r3, 0x40089416, &(0x7f0000000e40)=r12)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000f00)={'syztnl0\x00', &(0x7f0000000e80)={'ip6tnl0\x00', <r13=>r7, 0x2f, 0x6, 0x9, 0x1, 0x63, @ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x700, 0x40, 0x7fff, 0x1e}})
ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f0000000f40)={'bridge_slave_1\x00', {0x2, 0x4e24, @broadcast}})
setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000f80)={r13, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, 0xc)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=@base={0x5, 0x0, 0xffffffff, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r14, 0x58, &(0x7f0000001040)}, 0x10)

16.252874519s ago: executing program 5 (id=3219):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0xf8, 0x0, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x99, 0x6, "936a889c469e53803be9fb7a92910958865393662d5013cf605c27389928b88b1ca8d8c30204a06f59723c593fa0ccc66ff768fb9786cfbfae46cd51765ef0544a9436450b3d48a022678e80a41f41acade4db6ebde0d0fe7e636207092a0a0682b08628223f826c8ee58fb6d929f9a82e66819a54a147667ec80d6e2ad4e406ef846990c5409de5973deb7d4584b6667efa50adf7"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x1d0, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1a8, 0x3, 0x0, 0x1, [{0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x58, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x90ec9ef33c52bb9f}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x15, 0x1, "60165f3d32098e993a95d15c9a080f587d"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0x124, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11d, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xd7}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x304}, 0x1, 0x0, 0x0, 0x400c0}, 0x20004800)
sendto$inet6(r0, &(0x7f0000000840)="a6e0", 0x2, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x9000, @loopback, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000240)="ea90bf13599edadaa324a9219534ab6c34be32e12bc9cc7c7ef7b11fa7338c02047cff58847917bdcb26fefc5b064756c2279dc29b2970f51f4eabe66bf66144eaf69578c4e07071324ce07b4ee783f017e9503e9ff7a65152a9b4cb11bf534cad0984d42a6ac23bd010fbf3ea9ce3a47e65614477dc9b3979b80a61ef189606f11ca4c9fb5cb86f537b1fe03a88d365c050d045cf2570e53a7b69e4c9d3a78e8578da7ecd", 0xffffffffffffff36, 0x10000010, 0x0, 0x0)

15.251291006s ago: executing program 5 (id=3220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000280)="b700001811005abeef4ba0d5982c01e99d7bea084295f11b65b1885d3400b4130a821226073ccb4786046a6316b5937fa6283b0380d749c5ddfc812d9a3061ae6d", 0x41}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}, {&(0x7f0000000580)="ef12d848c64a255f8d4ed0bd8d2d432862d9826203810b471e9d1de5c0ba6f065a78885133542871f75549319c86c17b00e7cef8fff1383847adf8aebc6517f00d709d32972077670e1ec1dfa19cfc5f910d6285b919af14d747fc89d1149e0787e21df2968297a560f8b2c2b4252e8500b959b318c11830523b1c5d17b05b2393c028b6f0eb35843ca803bbb0968a944b", 0x91}], 0x4) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="fce1bd1a5bbfb965a3d3c54811024aa9208649b7481a851ff5b198587834533bb3023ecb4fe3eae672a3bd709cf95cc2103ed812dad65f39ec75c41d5473d76d8eb74c54680b975a1b6d442ce5ea6ac4b0ca59c86f44b38ddddac37b1fd5a5559dd36198e21d19af10081030021eb6915b6d73919eebb097df5176f92a4620cd3194bed0a943167e3652da92828951ae275c9a600a07e208683161adfc0b1e4c1f999b5b265a1813a97efdbb0117b6123cdf5fe671c2eeb1d6b01535444c1cadd5b787aa5f617c7e3b2b31c514aecef72b4f8e676288f5dd91c000499bcc54f5"], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) (async)
r8 = socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006}) (async)
close(0x3) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

0s ago: executing program 37 (id=3220):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async)
writev(r1, &(0x7f0000000640)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f0000000280)="b700001811005abeef4ba0d5982c01e99d7bea084295f11b65b1885d3400b4130a821226073ccb4786046a6316b5937fa6283b0380d749c5ddfc812d9a3061ae6d", 0x41}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f", 0x19}, {&(0x7f0000000580)="ef12d848c64a255f8d4ed0bd8d2d432862d9826203810b471e9d1de5c0ba6f065a78885133542871f75549319c86c17b00e7cef8fff1383847adf8aebc6517f00d709d32972077670e1ec1dfa19cfc5f910d6285b919af14d747fc89d1149e0787e21df2968297a560f8b2c2b4252e8500b959b318c11830523b1c5d17b05b2393c028b6f0eb35843ca803bbb0968a944b", 0x91}], 0x4) (async)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @empty}, 0x1c)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="fce1bd1a5bbfb965a3d3c54811024aa9208649b7481a851ff5b198587834533bb3023ecb4fe3eae672a3bd709cf95cc2103ed812dad65f39ec75c41d5473d76d8eb74c54680b975a1b6d442ce5ea6ac4b0ca59c86f44b38ddddac37b1fd5a5559dd36198e21d19af10081030021eb6915b6d73919eebb097df5176f92a4620cd3194bed0a943167e3652da92828951ae275c9a600a07e208683161adfc0b1e4c1f999b5b265a1813a97efdbb0117b6123cdf5fe671c2eeb1d6b01535444c1cadd5b787aa5f617c7e3b2b31c514aecef72b4f8e676288f5dd91c000499bcc54f5"], 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r4 = epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) (async)
r8 = socket$packet(0x11, 0x2, 0x300) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'gre0\x00', <r9=>0x0})
sendto$packet(r8, &(0x7f00000001c0)="05", 0x1, 0x240458d1, &(0x7f0000000200)={0x11, 0x88a8, r9, 0x1, 0x85, 0x6, @broadcast}, 0x14)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000800)={0xa0000006}) (async)
close(0x3) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRESHEX=r3, @ANYRES32=r1, @ANYRES32], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x18, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

1817][T13867] netlink: 'syz.2.2223': attribute type 4 has an invalid length.
[  298.653272][T13891] netlink: 'syz.0.2231': attribute type 1 has an invalid length.
[  298.669413][T13891] 8021q: adding VLAN 0 to HW filter on device bond12
[  298.688940][T13891] bond12: (slave geneve4): making interface the new active one
[  298.694755][T13891] bond12: (slave geneve4): Enslaving as an active interface with an up link
[  299.042995][T13908] openvswitch: netlink: Flow actions attr not present in new flow.
[  299.346126][T13910] __nla_validate_parse: 10 callbacks suppressed
[  299.346144][T13910] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2237'.
[  299.788128][T13922] ieee802154 phy0 wpan0: encryption failed: -22
[  299.844212][T13924] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2243'.
[  300.047637][T13927] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.055440][T13927] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.125683][T13927] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.129353][T13927] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.217362][T13931] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  300.393537][T13927] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.410624][T13927] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.502934][T13927] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  300.514092][T13927] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  300.582725][T11614] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  300.585886][T11614] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  300.602421][T11614] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  300.605788][T11614] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  300.618437][T11614] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  300.621964][T11614] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  300.631394][T11614] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  300.635778][T11614] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.450048][T13967] netlink: 'syz.1.2253': attribute type 3 has an invalid length.
[  301.455094][T13967] netlink: 'syz.1.2253': attribute type 1 has an invalid length.
[  301.457884][T13967] netlink: 232 bytes leftover after parsing attributes in process `syz.1.2253'.
[  301.556943][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2255'.
[  301.602793][T13980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2258'.
[  301.639213][T13980] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2258'.
[  301.679204][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2258'.
[  301.706939][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2259'.
[  301.812924][T13993] ieee802154 phy0 wpan0: encryption failed: -22
[  302.098169][T14012] netlink: 'syz.0.2267': attribute type 3 has an invalid length.
[  302.110101][T14012] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  302.235922][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'.
[  302.238917][T14014] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2268'.
[  306.472679][T14026] syzkaller0: entered promiscuous mode
[  306.474967][T14026] syzkaller0: entered allmulticast mode
[  306.479222][T14038] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  306.483192][T14040] netlink: 'syz.0.2273': attribute type 12 has an invalid length.
[  306.485860][T14040] netlink: 'syz.0.2273': attribute type 29 has an invalid length.
[  306.488608][T14040] __nla_validate_parse: 2 callbacks suppressed
[  306.488629][T14040] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2273'.
[  306.493537][T14040] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2273'.
[  306.593090][T14050] syzkaller1: entered promiscuous mode
[  306.595109][T14050] syzkaller1: entered allmulticast mode
[  306.718961][T14053] netlink: 'syz.1.2278': attribute type 12 has an invalid length.
[  306.722955][T14053] netlink: 'syz.1.2278': attribute type 29 has an invalid length.
[  306.726312][T14053] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2278'.
[  306.730052][T14053] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2278'.
[  306.748914][T14055] netlink: 'syz.0.2279': attribute type 4 has an invalid length.
[  306.752715][T14055] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2279'.
[  306.878495][T14066] ieee802154 phy0 wpan0: encryption failed: -22
[  306.878557][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2284'.
[  306.925841][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'.
[  306.929773][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2286'.
[  306.939120][T14070] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2285'.
[  306.983970][T14074] netlink: 'syz.1.2288': attribute type 3 has an invalid length.
[  307.080658][T14081] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  307.286437][T14093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2294'.
[  307.498916][T14097] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  307.574606][T14101] tipc: Started in network mode
[  307.576637][T14101] tipc: Node identity aaaaaaaaaa3b, cluster identity 4711
[  307.579023][T14101] tipc: Enabled bearer <eth:macsec0>, priority 10
[  307.766944][T14108] netlink: 'syz.2.2301': attribute type 4 has an invalid length.
[  308.571387][ T7444] tipc: Node number set to 9546410
[  308.694882][T14146] netlink: 'syz.2.2311': attribute type 6 has an invalid length.
[  309.101427][T14160] netlink: 'syz.0.2314': attribute type 2 has an invalid length.
[  309.110307][T14160] netlink: 'syz.0.2314': attribute type 2 has an invalid length.
[  310.283312][T14180] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  310.313379][T14180] syzkaller0: entered promiscuous mode
[  310.315178][T14180] syzkaller0: entered allmulticast mode
[  310.317596][T14180] tipc: Resetting bearer <eth:syzkaller0>
[  310.335536][T14179] tipc: Resetting bearer <eth:syzkaller0>
[  313.123847][T14179] tipc: Disabling bearer <eth:syzkaller0>
[  313.129084][  T874] tipc: Node number set to 2196276395
[  313.170577][T14200] __nla_validate_parse: 10 callbacks suppressed
[  313.170590][T14200] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2326'.
[  313.176964][T14200] 0: renamed from hsr0 (while UP)
[  313.185630][T14200] 0: entered allmulticast mode
[  313.187398][T14200] hsr_slave_0: entered allmulticast mode
[  313.202135][T14200] hsr_slave_1: entered allmulticast mode
[  313.211586][T14200] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  313.226472][T14200] bond6: entered allmulticast mode
[  313.228585][T14200] ipip0: entered allmulticast mode
[  313.233434][T14204] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  313.278521][T14209] tipc: Resetting bearer <eth:gre0>
[  313.306208][T14208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2327'.
[  314.055429][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'.
[  314.124400][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'.
[  314.127931][T14251] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2335'.
[  314.280940][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2337'.
[  314.310205][T14266] netlink: 'syz.1.2339': attribute type 58 has an invalid length.
[  314.321131][T14266] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2339'.
[  314.484501][T14277] netlink: 'syz.1.2343': attribute type 12 has an invalid length.
[  314.487727][T14277] netlink: 'syz.1.2343': attribute type 29 has an invalid length.
[  314.490870][T14277] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2343'.
[  314.499377][T14277] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2343'.
[  315.013621][T14303] ieee802154 phy0 wpan0: encryption failed: -22
[  315.079978][T14307] netlink: 'syz.1.2353': attribute type 13 has an invalid length.
[  315.082973][T14307] netlink: 'syz.1.2353': attribute type 17 has an invalid length.
[  315.085583][T14307] lo: left allmulticast mode
[  315.087787][T14307] tipc: Resetting bearer <eth:gre0>
[  315.100893][T14307] 0: left allmulticast mode
[  315.103554][T14307] hsr_slave_0: left allmulticast mode
[  315.105532][T14307] hsr_slave_1: left allmulticast mode
[  315.116972][T14307] syzkaller0: left promiscuous mode
[  315.118818][T14307] syzkaller0: left allmulticast mode
[  315.416121][T14316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2355'.
[  315.667616][T14329] bond7: (slave vcan1): refused to change device type
[  315.713055][T14329] netlink: 'syz.2.2359': attribute type 1 has an invalid length.
[  315.728691][T14329] bond7: (slave geneve5): Enslaving as an active interface with an up link
[  315.733027][   T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  315.738082][   T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  315.748420][   T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  315.752136][   T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  315.820135][T14337] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20001
[  316.214070][T14359] syzkaller1: entered promiscuous mode
[  316.216844][T14359] syzkaller1: entered allmulticast mode
[  316.717802][T14393] netlink: 'syz.0.2378': attribute type 2 has an invalid length.
[  316.731317][T14393] openvswitch: netlink: Key type 142 is out of range max 32
[  316.787172][T14396] bridge0: left promiscuous mode
[  316.792629][T14396] batadv0: left promiscuous mode
[  316.796131][T14396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  316.826942][T14396] batman_adv: batadv0: Interface activated: batadv_slave_0
[  316.832051][T14396] batman_adv: batadv0: Interface activated: batadv_slave_1
[  316.838805][T14396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  316.843086][T14396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  316.850453][T14396] veth1_vlan: left promiscuous mode
[  316.854539][T14396] veth0_vlan: left promiscuous mode
[  316.857142][T14396] veth0_vlan: entered promiscuous mode
[  316.862491][T14396] veth1_vlan: entered promiscuous mode
[  316.866951][T14396] veth1_macvtap: left promiscuous mode
[  316.869755][T14396] veth0_macvtap: left promiscuous mode
[  316.873244][T14396] veth0_macvtap: entered promiscuous mode
[  316.877034][T14396] veth1_macvtap: entered promiscuous mode
[  316.880067][T14396] tipc: Resetting bearer <eth:macsec0>
[  316.885225][T14396] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  316.892928][T14396] 8021q: adding VLAN 0 to HW filter on device bond1
[  316.899565][T14396] 8021q: adding VLAN 0 to HW filter on device bond2
[  316.905667][T14396] 8021q: adding VLAN 0 to HW filter on device bond3
[  316.909938][T14396] 8021q: adding VLAN 0 to HW filter on device bond4
[  316.913683][T14396] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  316.920167][T14396] batadv0: entered promiscuous mode
[  316.922249][T14396] 8021q: adding VLAN 0 to HW filter on device macsec2
[  316.927397][T14396] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.936902][T14396] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  316.940523][T14396] 8021q: adding VLAN 0 to HW filter on device bond5
[  316.947597][T14396] 8021q: adding VLAN 0 to HW filter on device bond6
[  316.954930][T14396] 8021q: adding VLAN 0 to HW filter on device eth0
[  316.960841][T14396] 8021q: adding VLAN 0 to HW filter on device eth1
[  316.966311][T14396] 8021q: adding VLAN 0 to HW filter on device eth2
[  316.970760][T14396] 8021q: adding VLAN 0 to HW filter on device eth3
[  316.976973][T14396] 8021q: adding VLAN 0 to HW filter on device bond7
[  316.984424][T14396] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  316.987929][T14398] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  316.993891][ T7437] bridge0: entered promiscuous mode
[  316.996148][ T7437] ip6gretap0: entered promiscuous mode
[  317.008816][ T6026] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.011178][ T6026] bridge0: port 1(bridge_slave_0) entered forwarding state
[  317.035702][ T6026] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.038545][ T6026] bridge0: port 2(bridge_slave_1) entered forwarding state
[  317.088390][ T6499] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  317.091769][ T6499] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 49089 - 0
[  317.094366][ T6499] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  317.096929][ T6499] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 49089 - 0
[  317.131512][ T6499] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  317.135155][ T6499] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 49089 - 0
[  317.140755][ T6499] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  317.144540][ T6499] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 49089 - 0
[  317.359185][T14423] netlink: 'syz.1.2387': attribute type 58 has an invalid length.
[  317.548393][T14430] veth0_to_bond: mtu less than device minimum
[  319.020895][T14489] ieee802154 phy0 wpan0: encryption failed: -22
[  319.273158][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  319.382051][T14473] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  319.780113][T14515] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  319.987116][T14523] netlink: 'syz.1.2412': attribute type 58 has an invalid length.
[  319.989639][T14523] __nla_validate_parse: 10 callbacks suppressed
[  319.989648][T14523] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2412'.
[  320.280925][T14537] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  320.380937][T14545] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2419'.
[  320.400157][T14547] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2420'.
[  320.432124][T14548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2417'.
[  321.279072][T14594] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.281642][T14594] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.395836][T14594] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.407287][T14594] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.477686][T14594] tipc: Resetting bearer <eth:macsec0>
[  321.546301][T14594] ip6gretap0: left promiscuous mode
[  321.606982][T14601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2433'.
[  321.620672][T14601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2433'.
[  321.627307][T14601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2433'.
[  321.634066][T14601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2433'.
[  321.640133][T14601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2433'.
[  321.643799][T14601] tipc: Resetting bearer <eth:gre0>
[  321.647034][T14601] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2433'.
[  321.667250][T14601] bridge0: port 2(bridge_slave_1) entered disabled state
[  321.669799][T14601] bridge0: port 1(bridge_slave_0) entered disabled state
[  321.681103][T14601] batman_adv: batadv0: Interface deactivated: dummy0
[  321.736074][T14601] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  321.752878][T14601] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  321.783125][ T5669] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.786706][ T5669] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.790077][ T5669] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 49089 - 0
[  321.809577][   T24] syz1: Port: 1 Link DOWN
[  321.817786][ T5669] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.821593][ T5669] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.828900][ T5669] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 49089 - 0
[  321.833419][ T5669] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.837277][ T5669] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.843561][ T5669] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 49089 - 0
[  321.847222][ T5669] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  321.850440][ T5669] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  321.856369][ T5669] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 49089 - 0
[  322.112675][T14634] netlink: 'syz.1.2441': attribute type 58 has an invalid length.
[  322.149475][T14637] tipc: Enabled bearer <eth:vcan0>, priority 10
[  322.220823][T14644] netlink: 'syz.2.2444': attribute type 27 has an invalid length.
[  322.285854][T14647] netlink: 'syz.0.2445': attribute type 1 has an invalid length.
[  322.343030][T14647] bond13: entered promiscuous mode
[  322.345107][T14647] 8021q: adding VLAN 0 to HW filter on device bond13
[  322.377780][T14655] ieee802154 phy0 wpan0: encryption failed: -22
[  322.384580][T14653] bond13: (slave bridge4): making interface the new active one
[  322.386932][T14653] bridge4: entered promiscuous mode
[  322.389221][T14653] bond13: (slave bridge4): Enslaving as an active interface with an up link
[  322.479510][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  322.554875][T14664] syzkaller0: entered promiscuous mode
[  322.556882][T14664] syzkaller0: entered allmulticast mode
[  322.754099][T14673] bond7: option ad_user_port_key: invalid value (65535)
[  322.758007][T14673] bond7: option ad_user_port_key: allowed values 0 - 1023
[  322.763518][T14673] bond7 (unregistering): Released all slaves
[  323.343905][T14696] 8021q: adding VLAN 0 to HW filter on device bond11
[  323.356251][T14696] 8021q: adding VLAN 0 to HW filter on device eth0
[  323.362899][T14696] 8021q: adding VLAN 0 to HW filter on device eth1
[  323.369184][T14696] 8021q: adding VLAN 0 to HW filter on device eth2
[  323.379764][T14696] 8021q: adding VLAN 0 to HW filter on device eth3
[  323.447613][T14701] netlink: 'syz.0.2461': attribute type 12 has an invalid length.
[  323.450773][T14701] netlink: 'syz.0.2461': attribute type 29 has an invalid length.
[  323.578517][T14703] xt_hashlimit: size too large, truncated to 1048576
[  323.749013][T14710] bond14: entered promiscuous mode
[  323.753161][T14710] 8021q: adding VLAN 0 to HW filter on device bond14
[  323.959972][T14718] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  324.119955][T14725] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.123386][T14725] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.220632][T14725] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  324.235720][T14725] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  324.487400][ T5486] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.495309][ T5486] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.503865][ T5486] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.510354][ T5486] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.518987][ T5486] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.526759][ T5486] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.536191][ T5486] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  324.543223][ T5486] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  324.646621][T14748] netlink: 'syz.1.2473': attribute type 12 has an invalid length.
[  324.649239][T14748] netlink: 'syz.1.2473': attribute type 29 has an invalid length.
[  324.748894][T14757] xt_l2tp: missing protocol rule (udp|l2tpip)
[  325.501226][T14750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  325.893523][T14782] __nla_validate_parse: 99 callbacks suppressed
[  325.893541][T14782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2481'.
[  326.158729][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'.
[  326.413584][T14813] tipc: Enabling of bearer <eth:vcan0> rejected, already enabled
[  326.683759][T14837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2496'.
[  326.696803][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2496'.
[  327.004766][ T7442] IPVS: starting estimator thread 0...
[  327.010073][T14849] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'.
[  327.112725][T14858] IPVS: using max 67 ests per chain, 160800 per kthread
[  327.115346][T14867] netlink: 'syz.1.2503': attribute type 3 has an invalid length.
[  327.156312][T14869] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2504'.
[  327.160557][T14869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2504'.
[  327.242312][T14872] netlink: 'syz.2.2505': attribute type 13 has an invalid length.
[  327.249611][T14872] netlink: 'syz.2.2505': attribute type 17 has an invalid length.
[  327.283095][T14872] bridge0: left promiscuous mode
[  327.286596][T14872] batadv0: left promiscuous mode
[  327.288911][T14872] 8021q: adding VLAN 0 to HW filter on device batadv0
[  327.316739][T14872] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.322259][T14872] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.329487][T14872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  327.333517][T14872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  327.340177][T14872] veth1_vlan: left promiscuous mode
[  327.344760][T14872] veth0_vlan: left promiscuous mode
[  327.348356][T14872] veth0_vlan: entered promiscuous mode
[  327.355358][T14872] veth1_vlan: entered promiscuous mode
[  327.360851][T14872] veth1_macvtap: left promiscuous mode
[  327.367686][T14872] veth0_macvtap: left promiscuous mode
[  327.373594][T14872] veth0_macvtap: entered promiscuous mode
[  327.384258][T14872] veth1_macvtap: entered promiscuous mode
[  327.387271][T14872] tipc: Resetting bearer <eth:macsec0>
[  327.389544][T14872] tipc: Resetting bearer <eth:macsec0>
[  327.396991][T14872] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  327.413385][T14872] 8021q: adding VLAN 0 to HW filter on device bond1
[  327.423569][T14872] 8021q: adding VLAN 0 to HW filter on device bond2
[  327.431618][T14872] 8021q: adding VLAN 0 to HW filter on device bond3
[  327.437448][T14872] 8021q: adding VLAN 0 to HW filter on device bond4
[  327.443466][T14872] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  327.453838][T14872] batadv0: entered promiscuous mode
[  327.456013][T14872] 8021q: adding VLAN 0 to HW filter on device macsec2
[  327.459324][T14872] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  327.465253][T14872] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.468775][T14872] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  327.477156][T14872] 8021q: adding VLAN 0 to HW filter on device bond5
[  327.480598][T14872] 8021q: adding VLAN 0 to HW filter on device bond6
[  327.485626][T14872] 8021q: adding VLAN 0 to HW filter on device eth0
[  327.492183][T14872] 8021q: adding VLAN 0 to HW filter on device eth1
[  327.498083][T14872] 8021q: adding VLAN 0 to HW filter on device eth2
[  327.504580][T14872] 8021q: adding VLAN 0 to HW filter on device eth3
[  327.514013][T14872] 8021q: adding VLAN 0 to HW filter on device bond7
[  327.517710][T14872] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  327.524454][ T7442] bridge0: entered promiscuous mode
[  327.526181][ T7442] ip6gretap0: entered promiscuous mode
[  327.529858][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.532166][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.539108][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.541340][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.607097][ T6499] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  327.610207][ T6499] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.613381][ T6499] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 54177 - 0
[  327.616142][ T6499] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  327.619276][ T6499] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.624363][ T6499] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 54177 - 0
[  327.634965][ T5486] IPVS: stop unused estimator thread 0...
[  327.645194][ T6499] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  327.649689][ T6499] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.656455][ T6499] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 54177 - 0
[  327.666321][ T6499] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  327.669971][ T6499] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.674833][ T6499] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 54177 - 0
[  327.971793][T14899] ieee802154 phy0 wpan0: encryption failed: -22
[  330.219894][T14877] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  330.293828][T14907] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2512'.
[  330.332235][T14910] netlink: 'syz.1.2515': attribute type 3 has an invalid length.
[  330.353438][T14910] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  330.392508][T14910] gre0: MTU too low for tipc bearer
[  330.395260][T14910] tipc: Disabling bearer <eth:gre0>
[  330.557774][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'.
[  330.725016][T14922] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'.
[  331.425998][T14932] netlink: 'syz.1.2522': attribute type 1 has an invalid length.
[  331.438835][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  331.444638][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  331.509990][T14933] block nbd1: not configured, cannot reconfigure
[  332.024052][T14943] bond11: left promiscuous mode
[  332.026821][T14943] bond11: left allmulticast mode
[  332.029177][T14943] bond13: left promiscuous mode
[  332.031664][T14943] bridge4: left promiscuous mode
[  332.034282][T14943] bond14: left promiscuous mode
[  332.099654][T14948] netlink: 'syz.0.2526': attribute type 12 has an invalid length.
[  332.103593][T14948] netlink: 'syz.0.2526': attribute type 29 has an invalid length.
[  332.106695][T14948] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2526'.
[  332.110225][T14948] netlink: 43 bytes leftover after parsing attributes in process `syz.0.2526'.
[  332.201716][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2527'.
[  332.207368][T14950] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2527'.
[  332.338084][T14964] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2532'.
[  333.579451][T15004] netlink: 'syz.0.2543': attribute type 3 has an invalid length.
[  333.599342][T15004] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  333.643793][T15006] netlink: 'syz.1.2544': attribute type 12 has an invalid length.
[  333.646983][T15006] netlink: 'syz.1.2544': attribute type 29 has an invalid length.
[  333.650064][T15006] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2544'.
[  333.656840][T15006] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2544'.
[  333.716011][T15010] netlink: 'syz.1.2546': attribute type 58 has an invalid length.
[  333.719294][T15010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2546'.
[  333.985196][T15019] netlink: 'syz.2.2549': attribute type 58 has an invalid length.
[  333.988409][T15019] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2549'.
[  334.073838][   T84] wlan1: Trigger new scan to find an IBSS to join
[  334.614568][T15024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2551'.
[  334.638383][T15026] netlink: 'syz.1.2552': attribute type 12 has an invalid length.
[  334.641045][T15026] netlink: 'syz.1.2552': attribute type 29 has an invalid length.
[  334.846721][T15037] netlink: 'syz.1.2557': attribute type 6 has an invalid length.
[  334.901691][T15043] netlink: 'syz.1.2559': attribute type 1 has an invalid length.
[  334.926173][T15043] bond7: entered promiscuous mode
[  334.928104][T15043] 8021q: adding VLAN 0 to HW filter on device bond7
[  335.022549][T15049] bond7: entered allmulticast mode
[  335.038525][T15049] bond7: (slave bridge4): making interface the new active one
[  335.042265][T15049] bridge4: entered promiscuous mode
[  335.045938][T15049] bridge4: entered allmulticast mode
[  335.048704][T15049] bond7: (slave bridge4): Enslaving as an active interface with an up link
[  335.327932][T15065] netlink: 'syz.1.2565': attribute type 6 has an invalid length.
[  335.425546][T15068] bond0: entered promiscuous mode
[  335.427237][T15068] bond_slave_0: entered promiscuous mode
[  335.429524][T15068] bond_slave_1: entered promiscuous mode
[  336.295875][T15102] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  336.677511][ T5619] Bluetooth: hci2: link tx timeout
[  336.682735][ T5619] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  336.741435][T15123] xt_hashlimit: size too large, truncated to 1048576
[  337.111581][ T6037] wlan1: Trigger new scan to find an IBSS to join
[  337.520422][T15138] syzkaller1: entered promiscuous mode
[  337.524472][T15138] syzkaller1: entered allmulticast mode
[  338.711537][   T55] Bluetooth: hci2: command 0x0406 tx timeout
[  339.635027][T15118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  339.640232][T15130] __nla_validate_parse: 11 callbacks suppressed
[  339.640250][T15130] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2582'.
[  339.967030][T15174] validate_nla: 2 callbacks suppressed
[  339.967043][T15174] netlink: 'syz.1.2593': attribute type 12 has an invalid length.
[  340.071767][   T26] wlan1: Trigger new scan to find an IBSS to join
[  340.099271][T15181] ieee802154 phy0 wpan0: encryption failed: -22
[  340.318908][T15194] netlink: 'syz.1.2599': attribute type 6 has an invalid length.
[  340.322316][T15194] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2599'.
[  340.667055][T15211] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_rx_wq": -EINTR
[  340.696405][T15230] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2602'.
[  340.710265][T15229] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2602'.
[  340.744359][T15229] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2602'.
[  340.816249][T15237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2603'.
[  340.829380][T15237] netlink: 'syz.2.2603': attribute type 30 has an invalid length.
[  340.926209][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'.
[  340.928861][T15245] netlink: 'syz.0.2605': attribute type 5 has an invalid length.
[  340.931348][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2605'.
[  340.937714][T15245] geneve5: entered promiscuous mode
[  340.939317][T15245] geneve5: entered allmulticast mode
[  340.944982][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  340.948701][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  340.960905][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  340.968742][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  341.053045][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.130554][T15258] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.133046][T15258] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.146322][T15261] netlink: 'syz.2.2610': attribute type 13 has an invalid length.
[  341.147039][T15258] tipc: Resetting bearer <eth:vcan0>
[  341.149061][T15261] netlink: 'syz.2.2610': attribute type 17 has an invalid length.
[  341.205885][T15258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.214289][T15258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.262398][T15258] tipc: Resetting bearer <eth:macsec0>
[  341.312508][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2610'.
[  341.402251][T15258] ip6gretap0: left promiscuous mode
[  341.459521][T15261] bridge0: left promiscuous mode
[  341.465423][T15261] batadv0: left promiscuous mode
[  341.469447][T15261] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.493452][T15261] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.496397][T15261] bridge0: port 1(bridge_slave_0) entered forwarding state
[  341.503505][T15261] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.505752][T15261] bridge0: port 2(bridge_slave_1) entered forwarding state
[  341.517927][T15261] batman_adv: batadv0: Interface activated: batadv_slave_0
[  341.523103][T15261] batman_adv: batadv0: Interface activated: batadv_slave_1
[  341.533940][T15261] veth1_vlan: left promiscuous mode
[  341.536655][T15261] veth0_vlan: left promiscuous mode
[  341.539810][T15261] veth0_vlan: entered promiscuous mode
[  341.545601][T15261] veth1_vlan: entered promiscuous mode
[  341.553131][T15261] veth1_macvtap: left promiscuous mode
[  341.555683][T15261] veth0_macvtap: left promiscuous mode
[  341.558879][T15261] veth0_macvtap: entered promiscuous mode
[  341.562624][T15261] veth1_macvtap: entered promiscuous mode
[  341.573611][T15261] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  341.579919][T15261] 8021q: adding VLAN 0 to HW filter on device bond1
[  341.586794][T15261] 8021q: adding VLAN 0 to HW filter on device bond2
[  341.594847][T15261] 8021q: adding VLAN 0 to HW filter on device bond3
[  341.599240][T15261] 8021q: adding VLAN 0 to HW filter on device bond4
[  341.602308][T15261] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  341.610921][T15261] batadv0: entered promiscuous mode
[  341.613995][T15261] 8021q: adding VLAN 0 to HW filter on device macsec2
[  341.618765][T15261] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.622104][T15261] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  341.626042][T15261] 8021q: adding VLAN 0 to HW filter on device bond5
[  341.629060][T15261] 8021q: adding VLAN 0 to HW filter on device bond6
[  341.636735][T15261] 8021q: adding VLAN 0 to HW filter on device eth0
[  341.640221][T15261] 8021q: adding VLAN 0 to HW filter on device eth1
[  341.644687][T15261] 8021q: adding VLAN 0 to HW filter on device eth2
[  341.647449][T15261] 8021q: adding VLAN 0 to HW filter on device eth3
[  341.652478][T15261] 8021q: adding VLAN 0 to HW filter on device bond7
[  341.655514][T15261] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  341.660273][ T5693] bridge0: entered promiscuous mode
[  341.663205][ T5693] ip6gretap0: entered promiscuous mode
[  341.668429][T14881] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 54177 - 0
[  341.679100][T14881] netdevsim netdevsim2 eth0: set [1, 2] type 2 family 0 port 48645 - 0
[  341.698404][T14881] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 54177 - 0
[  341.701486][T14881] netdevsim netdevsim2 eth1: set [1, 2] type 2 family 0 port 48645 - 0
[  341.704536][T14881] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 54177 - 0
[  341.707211][T14881] netdevsim netdevsim2 eth2: set [1, 2] type 2 family 0 port 48645 - 0
[  341.717128][T14881] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 54177 - 0
[  341.719741][T14881] netdevsim netdevsim2 eth3: set [1, 2] type 2 family 0 port 48645 - 0
[  341.949216][T15269] sctp: [Deprecated]: syz.0.2612 (pid 15269) Use of int in maxseg socket option.
[  341.949216][T15269] Use struct sctp_assoc_value instead
[  342.097419][T15288] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2617'.
[  342.565707][T15325] xt_l2tp: missing protocol rule (udp|l2tpip)
[  343.247366][T15351] bridge0: entered allmulticast mode
[  343.249535][T15351] bridge0: left allmulticast mode
[  344.038451][T15364] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  344.044603][T15364] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  344.048540][T15364] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  344.055950][T15364] tipc: Resetting bearer <eth:syzkaller0>
[  344.174096][T15369] vlan2: entered promiscuous mode
[  344.176254][T15369] bond_slave_1: entered promiscuous mode
[  344.205946][T15380] xt_l2tp: missing protocol rule (udp|l2tpip)
[  344.333086][T15388] ieee802154 phy0 wpan0: encryption failed: -22
[  344.426056][T15392] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  345.107008][T15410] syzkaller0: entered promiscuous mode
[  345.109056][T15410] syzkaller0: entered allmulticast mode
[  348.209287][T15419] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  348.378061][T15429] bond8: option lp_interval: invalid value (0)
[  348.380093][T15429] bond8: option lp_interval: allowed values 1 - 2147483647
[  348.386962][T15429] bond8 (unregistering): Released all slaves
[  348.545380][T15456] lo speed is unknown, defaulting to 1000
[  348.547435][T15456] lo speed is unknown, defaulting to 1000
[  348.549476][T15456] lo speed is unknown, defaulting to 1000
[  348.552153][T15456] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  348.556658][T15456] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  348.565544][T15458] ieee802154 phy0 wpan0: encryption failed: -22
[  348.570227][T15456] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  348.630658][T15461] netlink: 'syz.1.2657': attribute type 12 has an invalid length.
[  348.637316][T15461] netlink: 'syz.1.2657': attribute type 29 has an invalid length.
[  348.637559][T15456] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  348.639802][T15461] __nla_validate_parse: 7 callbacks suppressed
[  348.639812][T15461] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2657'.
[  348.648410][T15461] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2657'.
[  348.679018][T15456] lo speed is unknown, defaulting to 1000
[  348.682166][T15456] lo speed is unknown, defaulting to 1000
[  348.690281][T15456] lo speed is unknown, defaulting to 1000
[  348.789779][T15482] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2663'.
[  348.824881][T15485] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2664'.
[  348.827965][T15486] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2664'.
[  348.832301][T15484] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2664'.
[  348.958401][T15493] 8021q: adding VLAN 0 to HW filter on device bond0
[  348.962290][T15493] batman_adv: batadv0: Interface activated: dummy0
[  348.965893][T15493] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.992933][T15493] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.997680][T15493] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.003282][T15493] 0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  349.010409][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.013397][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  349.021028][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.023421][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  349.044269][ T5486] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  349.054406][ T7438] syz1: Port: 1 Link ACTIVE
[  349.110943][T15506] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  349.140316][ T5693] lo speed is unknown, defaulting to 1000
[  349.151192][ T5693] syz2: Port: 1 Link DOWN
[  349.154325][T15509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2670'.
[  349.228193][ T5486] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  349.234420][ T5486] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  349.238009][ T5486] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  349.242649][ T5486] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  349.267395][T15516] netlink: 'syz.2.2672': attribute type 3 has an invalid length.
[  349.278505][T15518] netlink: zone id is out of range
[  349.280865][T15518] netlink: zone id is out of range
[  349.283268][T15518] netlink: zone id is out of range
[  349.286216][T15518] netlink: set zone limit has 4 unknown bytes
[  350.182934][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2685'.
[  350.414721][T15557] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2686'.
[  350.720862][T15562] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2688'.
[  351.113372][T15593] netlink: 'syz.1.2695': attribute type 6 has an invalid length.
[  351.257951][T15605] bond8 (unregistering): Released all slaves
[  352.519987][T15633] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  353.193158][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.650498][T15667] __nla_validate_parse: 12 callbacks suppressed
[  353.650514][T15667] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2715'.
[  353.707653][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2716'.
[  353.717677][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2716'.
[  353.721931][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2716'.
[  353.725729][T15671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2716'.
[  353.890576][T15678] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  353.949792][T15686] netlink: 'syz.0.2720': attribute type 58 has an invalid length.
[  353.971610][T15686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2720'.
[  354.586216][T15693] sctp: [Deprecated]: syz.1.2721 (pid 15693) Use of int in max_burst socket option.
[  354.586216][T15693] Use struct sctp_assoc_value instead
[  354.594315][T15693] sctp: [Deprecated]: syz.1.2721 (pid 15693) Use of int in max_burst socket option.
[  354.594315][T15693] Use struct sctp_assoc_value instead
[  354.604781][T15693] 8021q: VLANs not supported on ip6tnl0
[  354.781899][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2724'.
[  354.792169][T15706] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2724'.
[  354.903803][T15711] sctp: [Deprecated]: syz.0.2726 (pid 15711) Use of int in max_burst socket option deprecated.
[  354.903803][T15711] Use struct sctp_assoc_value instead
[  354.954113][T15722] lo speed is unknown, defaulting to 1000
[  355.220130][T15738] netlink: 'syz.0.2732': attribute type 6 has an invalid length.
[  355.223362][T15738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2732'.
[  355.286168][T15742] tipc: Enabling of bearer <eth:vcan0> rejected, already enabled
[  355.348707][T15744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  355.413224][T15754] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2738'.
[  355.898909][T15766] lo speed is unknown, defaulting to 1000
[  355.929290][T15769] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  356.178004][T15778] xt_hl: Unknown TTL match mode: 237
[  356.728496][T15793] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  356.997283][T15807] siw: device registration error -23
[  357.056770][T15815] tap0: tun_chr_ioctl cmd 1074025681
[  357.245707][T15830] netlink: 'syz.1.2759': attribute type 1 has an invalid length.
[  357.363174][T15845] netlink: 'syz.2.2762': attribute type 13 has an invalid length.
[  357.366257][T15845] netlink: 'syz.2.2762': attribute type 17 has an invalid length.
[  357.405150][T15845] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  357.407963][T15845] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  357.412332][T15845] tipc: Resetting bearer <eth:syzkaller0>
[  357.414783][T15845] tipc: Resetting bearer <eth:syzkaller0>
[  357.422755][T15845] vlan2: left promiscuous mode
[  357.424444][T15845] bond_slave_1: left promiscuous mode
[  357.428314][ T7453] lo speed is unknown, defaulting to 1000
[  357.431625][ T7453] syz2: Port: 1 Link ACTIVE
[  358.351815][T15899] ieee802154 phy0 wpan0: encryption failed: -22
[  358.522066][T15911] hmac(sha2: entered promiscuous mode
[  358.688856][T15919] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[  358.979900][T15930] lo speed is unknown, defaulting to 1000
[  359.142592][T15935] netlink: 'syz.1.2785': attribute type 58 has an invalid length.
[  359.145152][T15935] __nla_validate_parse: 9 callbacks suppressed
[  359.145161][T15935] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2785'.
[  359.389278][T15944] netlink: 'syz.1.2789': attribute type 58 has an invalid length.
[  359.392629][T15944] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2789'.
[  359.551913][T15947] tipc: Enabling of bearer <eth:vcan0> rejected, already enabled
[  359.681561][T15951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2792'.
[  359.696587][T15951] netlink: 'syz.2.2792': attribute type 4 has an invalid length.
[  359.725006][T15962] netlink: 'syz.0.2794': attribute type 3 has an invalid length.
[  359.793890][T15965] wg2: entered allmulticast mode
[  362.151890][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.768793][T15965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  363.324323][T16005] netlink: 'syz.2.2804': attribute type 2 has an invalid length.
[  363.803682][T16012] tipc: Enabling of bearer <eth:vcan0> rejected, already enabled
[  363.872495][T16020] netlink: 'syz.0.2809': attribute type 58 has an invalid length.
[  363.875533][T16020] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2809'.
[  363.897811][T16024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2811'.
[  363.904270][T16024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2811'.
[  363.949135][T16028] ieee802154 phy0 wpan0: encryption failed: -22
[  364.075364][T16032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2814'.
[  364.078823][T16032] netlink: 'syz.2.2814': attribute type 5 has an invalid length.
[  364.084336][T16032] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2814'.
[  364.227474][T16037] lo speed is unknown, defaulting to 1000
[  364.983353][T16055] netlink: 'syz.2.2820': attribute type 3 has an invalid length.
[  365.002618][T16055] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  365.186519][T16065] netlink: 'syz.0.2826': attribute type 3 has an invalid length.
[  365.202179][T16065] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  365.352986][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2829'.
[  366.328655][T16095] netlink: 'syz.2.2833': attribute type 13 has an invalid length.
[  366.331479][T16095] netlink: 'syz.2.2833': attribute type 17 has an invalid length.
[  366.363751][T16094] bridge0: port 2(bridge_slave_1) entered disabled state
[  366.366207][T16094] bridge0: port 1(bridge_slave_0) entered disabled state
[  366.381351][T16094] tipc: Resetting bearer <eth:vcan0>
[  366.590319][T16094] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  366.612228][T16094] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  366.785752][T16094] tipc: Resetting bearer <eth:macsec0>
[  366.810748][T16094] tipc: Resetting bearer <eth:syzkaller0>
[  367.014392][T16094] ip6gretap0: left promiscuous mode
[  367.024769][T16106] netlink: 'syz.1.2836': attribute type 58 has an invalid length.
[  367.038788][T16106] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2836'.
[  367.179995][ T5693] lo speed is unknown, defaulting to 1000
[  367.194955][T16095] bridge0: left promiscuous mode
[  367.204408][T16095] batadv0: left promiscuous mode
[  367.211577][T16095] 8021q: adding VLAN 0 to HW filter on device batadv0
[  367.234478][T16095] wg2: left allmulticast mode
[  367.240076][T16095] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.242439][T16095] bridge0: port 1(bridge_slave_0) entered forwarding state
[  367.247252][T16095] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.249710][T16095] bridge0: port 2(bridge_slave_1) entered forwarding state
[  367.260082][T16095] batman_adv: batadv0: Interface activated: batadv_slave_0
[  367.264424][T16095] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.274455][T16095] veth1_vlan: left promiscuous mode
[  367.276922][T16095] veth0_vlan: left promiscuous mode
[  367.279709][T16095] veth0_vlan: entered promiscuous mode
[  367.284800][T16095] veth1_vlan: entered promiscuous mode
[  367.289670][T16095] veth1_macvtap: left promiscuous mode
[  367.293029][T16095] veth0_macvtap: left promiscuous mode
[  367.296040][T16095] veth0_macvtap: entered promiscuous mode
[  367.299366][T16095] veth1_macvtap: entered promiscuous mode
[  367.305409][T16095] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  367.313836][T16095] 8021q: adding VLAN 0 to HW filter on device bond1
[  367.321324][T16095] 8021q: adding VLAN 0 to HW filter on device bond2
[  367.326870][T16095] 8021q: adding VLAN 0 to HW filter on device bond3
[  367.330860][T16095] 8021q: adding VLAN 0 to HW filter on device bond4
[  367.334396][T16095] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  367.342173][T16095] batadv0: entered promiscuous mode
[  367.344523][T16095] 8021q: adding VLAN 0 to HW filter on device macsec2
[  367.347905][T16095] tipc: Resetting bearer <eth:syzkaller0>
[  367.353143][T16095] 8021q: adding VLAN 0 to HW filter on device bond0
[  367.357400][T16095] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  367.362757][T16095] 8021q: adding VLAN 0 to HW filter on device bond5
[  367.365936][T16095] 8021q: adding VLAN 0 to HW filter on device bond6
[  367.371446][T16095] 8021q: adding VLAN 0 to HW filter on device eth0
[  367.374357][T16095] 8021q: adding VLAN 0 to HW filter on device eth1
[  367.377041][T16095] 8021q: adding VLAN 0 to HW filter on device eth2
[  367.380261][T16095] 8021q: adding VLAN 0 to HW filter on device eth3
[  367.384687][T16095] 8021q: adding VLAN 0 to HW filter on device bond7
[  367.387877][T16095] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  367.429929][ T7438] bridge0: entered promiscuous mode
[  367.431748][ T7438] ip6gretap0: entered promiscuous mode
[  367.433825][T14881] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 45183 - 0
[  367.436429][T14881] netdevsim netdevsim2 eth0: unset [1, 2] type 2 family 0 port 48645 - 0
[  367.440803][T14881] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 45183 - 0
[  367.444799][T14881] netdevsim netdevsim2 eth1: unset [1, 2] type 2 family 0 port 48645 - 0
[  367.478115][ T7445] lo speed is unknown, defaulting to 1000
[  367.479289][T14881] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 45183 - 0
[  367.485692][T14881] netdevsim netdevsim2 eth2: unset [1, 2] type 2 family 0 port 48645 - 0
[  367.491665][T14881] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 45183 - 0
[  367.495687][T16115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  367.499556][T14881] netdevsim netdevsim2 eth3: unset [1, 2] type 2 family 0 port 48645 - 0
[  367.527696][T16117] netlink: 'syz.0.2839': attribute type 11 has an invalid length.
[  367.536865][T16117] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2839'.
[  367.607759][T16125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2841'.
[  367.843584][T16150] netlink: 'syz.1.2850': attribute type 58 has an invalid length.
[  367.846467][T16150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2850'.
[  368.882389][T16194] netlink: 'syz.1.2859': attribute type 13 has an invalid length.
[  368.883909][T16191] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.885736][T16194] netlink: 'syz.1.2859': attribute type 17 has an invalid length.
[  368.887908][T16191] bridge0: port 1(bridge_slave_0) entered disabled state
[  368.918741][T16191] batman_adv: batadv0: Interface deactivated: dummy0
[  369.052032][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2859'.
[  369.061639][T16191] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.077473][T16191] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.611615][T16194] bridge0: left promiscuous mode
[  369.613613][T16194] bond0: left promiscuous mode
[  369.615436][T16194] bond_slave_0: left promiscuous mode
[  369.617780][T16194] bond_slave_1: left promiscuous mode
[  369.620474][T16194] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.624611][T16194] batman_adv: batadv0: Interface activated: dummy0
[  369.627558][T16194] batadv0: left promiscuous mode
[  369.629764][T16194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  369.649796][T16194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  369.654322][T16194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  369.659774][T16194] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  369.663287][T16194] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  369.669913][T16194] veth1_vlan: left promiscuous mode
[  369.672853][T16194] veth0_vlan: left promiscuous mode
[  369.675334][T16194] veth0_vlan: entered promiscuous mode
[  369.679027][T16194] veth1_vlan: entered promiscuous mode
[  369.683476][T16194] veth1_macvtap: left promiscuous mode
[  369.685937][T16194] veth0_macvtap: left promiscuous mode
[  369.688624][T16194] veth0_macvtap: entered promiscuous mode
[  369.691727][T16194] veth1_macvtap: entered promiscuous mode
[  369.698810][T16194] 8021q: adding VLAN 0 to HW filter on device bond1
[  369.701870][T16194] 8021q: adding VLAN 0 to HW filter on device bond2
[  369.705167][T16194] 8021q: adding VLAN 0 to HW filter on device batadv1
[  369.709484][T16194] 8021q: adding VLAN 0 to HW filter on device bond3
[  369.720473][T16194] 8021q: adding VLAN 0 to HW filter on device eth0
[  369.723560][T16194] 8021q: adding VLAN 0 to HW filter on device eth1
[  369.726551][T16194] 8021q: adding VLAN 0 to HW filter on device eth2
[  369.729328][T16194] 8021q: adding VLAN 0 to HW filter on device eth3
[  369.732891][T16194] batadv0: entered promiscuous mode
[  369.734878][T16194] 8021q: adding VLAN 0 to HW filter on device macsec2
[  369.738334][T16194] 8021q: adding VLAN 0 to HW filter on device bond4
[  369.741993][T16194] 8021q: adding VLAN 0 to HW filter on device bond5
[  369.745553][T16194] 8021q: adding VLAN 0 to HW filter on device bond6
[  369.751557][T16194] bond7: left promiscuous mode
[  369.753162][T16194] bridge4: left promiscuous mode
[  369.754780][T16194] bond7: left allmulticast mode
[  369.756390][T16194] bridge4: left allmulticast mode
[  369.758667][T16194] 8021q: adding VLAN 0 to HW filter on device bond7
[  369.828351][T10419] bridge0: entered promiscuous mode
[  369.833293][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.835449][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.843626][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.846368][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.871155][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.105291][T16228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2868'.
[  370.108516][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2868'.
[  370.114979][T16228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2868'.
[  370.196324][T16230] ieee802154 phy0 wpan0: encryption failed: -22
[  370.751554][T16239] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2871'.
[  371.117417][T16245] netlink: 'syz.1.2874': attribute type 3 has an invalid length.
[  371.154647][T16249] rdma_rxe: rxe_newlink: failed to add bond0
[  371.169983][T16245] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  371.359552][T16265] bridge0: port 2(bridge_slave_1) entered disabled state
[  371.362102][T16265] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.394713][T16265] batman_adv: batadv0: Interface deactivated: dummy0
[  371.542986][T16265] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  371.550399][T16273] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  371.559348][T16265] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.184503][ T7451] syz1: Port: 1 Link DOWN
[  372.199627][T14881] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.202929][T14881] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.206178][T14881] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.208938][T14881] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.246100][T14881] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.249309][T14881] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.253183][T14881] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  372.256500][T14881] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  372.260084][T16283] syzkaller1: entered promiscuous mode
[  372.263762][T16283] syzkaller1: entered allmulticast mode
[  372.303909][T16288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2884'.
[  372.323050][T16291] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2885'.
[  372.324632][T16288] bond8: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  372.337843][T16288] bond8: (slave lo): Enslaving as an active interface with an up link
[  372.343176][T16288] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  372.499821][T16312] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2886'.
[  372.508693][T16312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2886'.
[  372.512439][T16312] netlink: 'syz.2.2886': attribute type 1 has an invalid length.
[  372.515582][T16312] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2886'.
[  372.519453][T16312] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2886'.
[  372.523588][T16312] netlink: 'syz.2.2886': attribute type 1 has an invalid length.
[  373.176340][T16341] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  373.259581][T16342] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2896'.
[  373.360406][T16346] netlink: 'syz.0.2897': attribute type 58 has an invalid length.
[  373.364170][T16346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2897'.
[  373.595851][T16349] lo speed is unknown, defaulting to 1000
[  373.813640][T16353] netlink: 'syz.0.2899': attribute type 1 has an invalid length.
[  373.816395][T16353] netlink: 2704 bytes leftover after parsing attributes in process `syz.0.2899'.
[  373.819645][T16353] block nbd0: not configured, cannot reconfigure
[  373.837159][   T34] audit: type=1107 audit(1779046702.691:2): pid=16352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  373.975502][T16355] netlink: 'syz.2.2900': attribute type 58 has an invalid length.
[  374.170414][T16376] netlink: 'syz.0.2902': attribute type 3 has an invalid length.
[  374.217432][T16379] netlink: 'syz.1.2904': attribute type 6 has an invalid length.
[  374.355521][T16387] netlink: 'syz.0.2902': attribute type 1 has an invalid length.
[  374.368186][T16398] tun0: tun_chr_ioctl cmd 1074025675
[  374.370024][T16398] tun0: persist enabled
[  374.372682][T16398] tun0: tun_chr_ioctl cmd 1074025675
[  374.374993][T16398] tun0: persist enabled
[  374.377054][T16398] tun0: tun_chr_ioctl cmd 1074025673
[  374.806240][T16427] netlink: 'syz.2.2911': attribute type 58 has an invalid length.
[  375.768272][T16483] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  375.819820][T16487] __nla_validate_parse: 12 callbacks suppressed
[  375.819839][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2923'.
[  376.535389][T16509] validate_nla: 2 callbacks suppressed
[  376.535401][T16509] netlink: 'syz.1.2934': attribute type 4 has an invalid length.
[  376.539553][T16509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2934'.
[  377.178752][T16535] bond0: entered allmulticast mode
[  377.181585][T16535] bond_slave_0: entered allmulticast mode
[  377.183718][T16535] bond_slave_1: entered allmulticast mode
[  377.612244][T16546] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  377.652219][T16548] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  377.655346][T16548] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  377.657677][T16548] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  377.660335][T16548] tipc: Resetting bearer <eth:syzkaller0>
[  377.967144][T16561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2949'.
[  378.143742][T16569] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.147606][T16570] syzkaller0: entered promiscuous mode
[  378.154382][T16570] syzkaller0: entered allmulticast mode
[  378.160115][T16570] tipc: Resetting bearer <eth:syzkaller0>
[  378.167190][T16569] tipc: Resetting bearer <eth:syzkaller0>
[  378.268331][T16580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2953'.
[  378.407445][T16586] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2954'.
[  378.429368][T16588] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  378.456662][T16588] syzkaller0: entered promiscuous mode
[  378.458517][T16588] syzkaller0: entered allmulticast mode
[  378.460665][T16588] tipc: Resetting bearer <eth:syzkaller0>
[  378.470099][T16587] tipc: Resetting bearer <eth:syzkaller0>
[  378.783015][T16603] netlink: 'syz.2.2958': attribute type 1 has an invalid length.
[  378.785696][T16603] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2958'.
[  378.908867][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'.
[  381.024804][T16587] tipc: Disabling bearer <eth:syzkaller0>
[  381.086831][T16609] netlink: 'syz.2.2959': attribute type 1 has an invalid length.
[  381.089800][T16609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2959'.
[  381.412665][T16633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2965'.
[  381.554228][T16640] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  381.602925][T16642] netlink: 'syz.2.2967': attribute type 3 has an invalid length.
[  381.609919][T16642] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  381.650899][T16644] netlink: 'syz.2.2968': attribute type 3 has an invalid length.
[  382.061767][T16648] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.068978][T16648] batadv0: left promiscuous mode
[  382.072360][T16648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  382.120473][T16648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  382.124602][T16648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  382.130726][T16648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  382.134460][T16648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  382.140460][T16648] veth1_vlan: left promiscuous mode
[  382.143711][T16648] veth0_vlan: left promiscuous mode
[  382.145821][T16648] veth0_vlan: entered promiscuous mode
[  382.149539][T16648] veth1_vlan: entered promiscuous mode
[  382.155429][T16648] veth1_macvtap: left promiscuous mode
[  382.158031][T16648] veth0_macvtap: left promiscuous mode
[  382.168714][T16648] veth0_macvtap: entered promiscuous mode
[  382.182103][T16648] veth1_macvtap: entered promiscuous mode
[  382.193881][T16648] 8021q: adding VLAN 0 to HW filter on device bond1
[  382.197223][T16648] 8021q: adding VLAN 0 to HW filter on device bond2
[  382.239936][T16648] 8021q: adding VLAN 0 to HW filter on device bond3
[  382.246838][T16656] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2971'.
[  382.253660][T16648] 8021q: adding VLAN 0 to HW filter on device bond4
[  382.257463][T16648] 8021q: adding VLAN 0 to HW filter on device bond5
[  382.275454][T16648] 8021q: adding VLAN 0 to HW filter on device bond6
[  382.279075][T16648] 8021q: adding VLAN 0 to HW filter on device bond7
[  382.282690][T16648] 8021q: adding VLAN 0 to HW filter on device bond8
[  382.285483][T16648] 8021q: adding VLAN 0 to HW filter on device bond9
[  382.288340][T16648] 8021q: adding VLAN 0 to HW filter on device bond10
[  382.293435][T16648] batadv0: entered promiscuous mode
[  382.295993][T16648] 8021q: adding VLAN 0 to HW filter on device macsec1
[  382.304093][T16648] 8021q: adding VLAN 0 to HW filter on device bond11
[  382.308336][T16648] 8021q: adding VLAN 0 to HW filter on device bond12
[  382.315545][T16648] 8021q: adding VLAN 0 to HW filter on device bond13
[  382.318065][T16659] netlink: 'syz.1.2971': attribute type 49 has an invalid length.
[  382.319458][T16648] 8021q: adding VLAN 0 to HW filter on device bond14
[  382.329974][T16648] 8021q: adding VLAN 0 to HW filter on device eth0
[  382.342298][T16648] 8021q: adding VLAN 0 to HW filter on device eth1
[  382.349348][T16648] 8021q: adding VLAN 0 to HW filter on device eth2
[  382.368493][T16648] 8021q: adding VLAN 0 to HW filter on device eth3
[  382.376687][T16648] geneve5: left promiscuous mode
[  382.380259][T16648] erspan0: entered promiscuous mode
[  382.407708][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.410838][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state
[  382.419882][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.422890][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state
[  382.482244][ T6499] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  382.484828][ T6499] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  382.487284][ T6499] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 256 - 0
[  382.494811][ T6499] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  382.497330][ T6499] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  382.499770][ T6499] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 256 - 0
[  382.506770][ T6499] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  382.510723][ T6499] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  382.514562][ T6499] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 256 - 0
[  382.517292][ T6499] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  382.519787][ T6499] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  382.523104][ T6499] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 256 - 0
[  382.544935][T16665] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  382.550317][T16665] tipc: Resetting bearer <eth:syzkaller0>
[  382.628879][T16678] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2976'.
[  382.672748][T16678] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2976'.
[  382.687575][T16681] ieee802154 phy0 wpan0: encryption failed: -22
[  382.890258][T16693] macsec3: entered promiscuous mode
[  382.973452][T16694] netlink: 41 bytes leftover after parsing attributes in process `syz.2.2980'.
[  382.977213][T16694] netlink: 120 bytes leftover after parsing attributes in process `syz.2.2980'.
[  383.311842][T16713] tipc: Resetting bearer <eth:syzkaller0>
[  383.404502][T16714] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2986'.
[  383.611816][T16719] netlink: 'syz.0.2988': attribute type 3 has an invalid length.
[  383.628352][T16719] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  383.679007][T16721] netlink: 'syz.2.2989': attribute type 3 has an invalid length.
[  383.915836][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  384.232575][T16755] netlink: 'syz.0.2996': attribute type 3 has an invalid length.
[  384.262917][T16757] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  384.271080][T16757] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  384.273244][T16757] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  384.326511][T16762] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2999'.
[  384.336173][T16762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2999'.
[  384.353576][ T6499] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  384.357545][ T6499] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  384.362736][ T6499] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  384.371245][ T6499] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  384.859441][T16809] netlink: 'syz.0.3011': attribute type 3 has an invalid length.
[  385.588825][T16834] netlink: 'syz.1.3018': attribute type 12 has an invalid length.
[  385.594019][T16834] netlink: 'syz.1.3018': attribute type 29 has an invalid length.
[  385.684211][T16837] lo speed is unknown, defaulting to 1000
[  385.799460][T16848] netlink: 'syz.2.3021': attribute type 3 has an invalid length.
[  385.887097][T16848] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  386.128069][T16871] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  386.156763][T16869] "syz.0.3026" (16869) uses obsolete ecb(arc4) skcipher
[  386.477585][T16882] ieee802154 phy0 wpan0: encryption failed: -22
[  386.553770][T16886] __nla_validate_parse: 5 callbacks suppressed
[  386.553937][T16886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3032'.
[  387.414779][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3036'.
[  387.419459][T16898] validate_nla: 3 callbacks suppressed
[  387.419476][T16898] netlink: 'syz.1.3036': attribute type 13 has an invalid length.
[  387.429911][T16898] netlink: 'syz.1.3036': attribute type 17 has an invalid length.
[  387.449980][T16898] bridge0: left promiscuous mode
[  387.452490][T16898] bond0: left allmulticast mode
[  387.454518][T16898] bond_slave_0: left allmulticast mode
[  387.456611][T16898] bond_slave_1: left allmulticast mode
[  387.459471][T16898] 8021q: adding VLAN 0 to HW filter on device bond0
[  387.463933][T16898] batman_adv: batadv0: Interface activated: dummy0
[  387.467412][T16898] batadv0: left promiscuous mode
[  387.469932][T16898] 8021q: adding VLAN 0 to HW filter on device batadv0
[  387.499688][T16898] batman_adv: batadv0: Interface activated: batadv_slave_0
[  387.506152][T16898] batman_adv: batadv0: Interface activated: batadv_slave_1
[  387.516308][T16898] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  387.520136][T16898] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  387.530162][T16898] veth1_vlan: left promiscuous mode
[  387.534462][T16898] veth0_vlan: left promiscuous mode
[  387.537883][T16898] veth0_vlan: entered promiscuous mode
[  387.543423][T16898] veth1_vlan: entered promiscuous mode
[  387.548342][T16898] veth1_macvtap: left promiscuous mode
[  387.551657][T16898] veth0_macvtap: left promiscuous mode
[  387.553953][T16898] veth0_macvtap: entered promiscuous mode
[  387.556209][T16898] veth1_macvtap: entered promiscuous mode
[  387.561528][T16898] 8021q: adding VLAN 0 to HW filter on device bond1
[  387.564184][T16898] 8021q: adding VLAN 0 to HW filter on device bond2
[  387.567227][T16898] 8021q: adding VLAN 0 to HW filter on device batadv1
[  387.572621][T16898] 8021q: adding VLAN 0 to HW filter on device bond3
[  387.575275][T16898] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  387.581572][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  387.584343][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  387.588423][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  387.591271][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  387.609711][T14881] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  387.618926][ T7450] syz1: Port: 1 Link ACTIVE
[  387.621819][T14881] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  387.625239][T14881] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  387.629119][ T6499] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  387.634568][T14881] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  388.288170][T16909] TCP: TCP_TX_DELAY enabled
[  388.687903][T16921] netlink: 'syz.1.3042': attribute type 3 has an invalid length.
[  388.698806][T16921] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  388.852223][T16930] netlink: 'syz.1.3046': attribute type 4 has an invalid length.
[  388.882285][T16932] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  388.930915][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'.
[  388.934645][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3043'.
[  389.068475][T16936] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3047'.
[  389.091529][T16936] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3047'.
[  389.094939][T16936] netlink: 'syz.2.3047': attribute type 4 has an invalid length.
[  389.134193][T16939] netlink: 'syz.2.3048': attribute type 12 has an invalid length.
[  389.137323][T16939] netlink: 'syz.2.3048': attribute type 29 has an invalid length.
[  389.140545][T16939] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3048'.
[  389.145283][T16939] netlink: 43 bytes leftover after parsing attributes in process `syz.2.3048'.
[  389.247257][T16943] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3050'.
[  389.377245][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3053'.
[  389.633842][T16952] netlink: 'syz.0.3054': attribute type 3 has an invalid length.
[  389.978935][T16967] xt_hashlimit: max too large, truncated to 1048576
[  389.983523][T16967] xt_ecn: cannot match TCP bits for non-tcp packets
[  389.988766][T16967] xt_hashlimit: size too large, truncated to 1048576
[  390.304911][T16978] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  390.307961][T16978] tipc: Resetting bearer <eth:syzkaller0>
[  391.070298][T16989] netlink: 'syz.0.3064': attribute type 3 has an invalid length.
[  391.593741][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  392.135214][T17032] __nla_validate_parse: 8 callbacks suppressed
[  392.135238][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3075'.
[  392.261305][T17043] netlink: 'syz.0.3079': attribute type 58 has an invalid length.
[  392.272765][T17043] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3079'.
[  392.297286][T17050] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3078'.
[  392.305247][T17040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  392.309963][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3078'.
[  393.941579][T17097] netlink: 276 bytes leftover after parsing attributes in process `syz.0.3096'.
[  393.945147][T17097] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3096'.
[  393.948746][T17097] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3096'.
[  394.092805][T17104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3097'.
[  394.097445][T17102] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3097'.
[  395.104864][T17152] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check.
[  395.217167][T17160] syzkaller0: left promiscuous mode
[  395.219482][T17160] syzkaller0: left allmulticast mode
[  395.223605][T17160] tipc: Resetting bearer <eth:syzkaller0>
[  395.593232][T17165] netlink: 'syz.2.3114': attribute type 3 has an invalid length.
[  395.601974][T17165] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  395.955426][T17175] netlink: 'syz.0.3118': attribute type 1 has an invalid length.
[  395.984207][T17175] macvlan2: entered promiscuous mode
[  395.986363][T17175] macvlan2: entered allmulticast mode
[  395.989213][T17175] bond15: entered promiscuous mode
[  395.995837][T17175] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  395.999891][T17175] bond15: left promiscuous mode
[  396.002354][T17178] ieee802154 phy0 wpan0: encryption failed: -22
[  396.051780][T17183] netlink: 'syz.1.3121': attribute type 3 has an invalid length.
[  396.115570][T17187] syzkaller0: entered promiscuous mode
[  396.117419][T17187] syzkaller0: entered allmulticast mode
[  396.274714][T17196] netlink: 'syz.0.3125': attribute type 6 has an invalid length.
[  396.440135][T17198] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.443305][T17198] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.464703][T17198] tipc: Resetting bearer <eth:vcan0>
[  396.688942][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  396.704978][T17198] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  396.894409][T17198] tipc: Resetting bearer <eth:macsec0>
[  396.934470][T17198] tipc: Resetting bearer <eth:syzkaller0>
[  397.114679][T17198] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  397.120773][T17198] ip6gretap0: left promiscuous mode
[  397.303651][ T7445] lo speed is unknown, defaulting to 1000
[  397.306202][ T7445] syz2: Port: 1 Link DOWN
[  397.308070][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  397.313312][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.315903][   T13] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 45183 - 0
[  397.318682][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  397.321535][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.324906][   T13] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 45183 - 0
[  397.328818][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  397.331981][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.335152][   T13] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 45183 - 0
[  397.338402][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  397.341911][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  397.344827][   T13] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 45183 - 0
[  397.373511][T17224] netlink: 'syz.0.3133': attribute type 6 has an invalid length.
[  397.377133][T17224] __nla_validate_parse: 6 callbacks suppressed
[  397.377143][T17224] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3133'.
[  397.710532][T17238] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3136'.
[  397.916116][T17250] netlink: 'syz.1.3141': attribute type 12 has an invalid length.
[  397.918582][T17250] netlink: 'syz.1.3141': attribute type 29 has an invalid length.
[  397.920925][T17250] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3141'.
[  397.925079][T17250] netlink: 43 bytes leftover after parsing attributes in process `syz.1.3141'.
[  398.623826][T17272] ip6t_srh: unknown srh match flags  4000
[  398.690132][T17277] netlink: 'syz.2.3149': attribute type 27 has an invalid length.
[  398.878495][T17290] netlink: 'syz.1.3153': attribute type 6 has an invalid length.
[  398.885455][T17290] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3153'.
[  399.275926][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.283464][T17305] netlink: 'syz.2.3157': attribute type 58 has an invalid length.
[  399.289399][T17305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3157'.
[  399.493907][T17316] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3161'.
[  399.669348][T17327] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3164'.
[  399.673111][T17327] netlink: 35 bytes leftover after parsing attributes in process `syz.2.3164'.
[  399.795428][T17329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3165'.
[  400.277457][T17343] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  400.593181][T17361] bridge0: left promiscuous mode
[  400.596644][T17361] batadv0: left promiscuous mode
[  400.599850][T17361] 8021q: adding VLAN 0 to HW filter on device batadv0
[  400.629432][T17361] batman_adv: batadv0: Interface activated: batadv_slave_0
[  400.633780][T17361] batman_adv: batadv0: Interface activated: batadv_slave_1
[  400.639769][T17361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  400.643935][T17361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  400.649810][T17361] veth1_vlan: left promiscuous mode
[  400.652411][T17361] veth0_vlan: left promiscuous mode
[  400.654821][T17361] veth0_vlan: entered promiscuous mode
[  400.658284][T17361] veth1_vlan: entered promiscuous mode
[  400.663980][T17361] veth1_macvtap: left promiscuous mode
[  400.666326][T17361] veth0_macvtap: left promiscuous mode
[  400.668639][T17361] veth0_macvtap: entered promiscuous mode
[  400.672896][T17361] veth1_macvtap: entered promiscuous mode
[  400.675254][T17361] tipc: Resetting bearer <eth:macsec0>
[  400.679733][T17361] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  400.686360][T17361] 8021q: adding VLAN 0 to HW filter on device bond1
[  400.692313][T17361] 8021q: adding VLAN 0 to HW filter on device bond2
[  400.697025][T17361] 8021q: adding VLAN 0 to HW filter on device bond3
[  400.700557][T17361] 8021q: adding VLAN 0 to HW filter on device bond4
[  400.703837][T17361] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  400.711431][T17361] batadv0: entered promiscuous mode
[  400.713575][T17361] 8021q: adding VLAN 0 to HW filter on device macsec2
[  400.716380][T17361] tipc: Resetting bearer <eth:syzkaller0>
[  400.719980][T17361] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.724662][T17361] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  400.728152][T17361] 8021q: adding VLAN 0 to HW filter on device bond5
[  400.732031][T17361] 8021q: adding VLAN 0 to HW filter on device bond6
[  400.736122][T17361] 8021q: adding VLAN 0 to HW filter on device eth0
[  400.738751][T17361] 8021q: adding VLAN 0 to HW filter on device eth1
[  400.742022][T17361] 8021q: adding VLAN 0 to HW filter on device eth2
[  400.744792][T17361] 8021q: adding VLAN 0 to HW filter on device eth3
[  400.749077][T17361] 8021q: adding VLAN 0 to HW filter on device bond7
[  400.755066][T17361] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  400.786737][ T7450] lo speed is unknown, defaulting to 1000
[  400.788607][ T7450] syz2: Port: 1 Link ACTIVE
[  400.790496][ T7451] bridge0: entered promiscuous mode
[  400.794372][ T7451] ip6gretap0: entered promiscuous mode
[  400.803025][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.805328][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.808738][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.810975][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  400.838486][   T13] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  400.841535][   T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  400.844468][   T13] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 55479 - 0
[  400.847749][   T13] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  400.850407][   T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  400.854482][   T13] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 55479 - 0
[  400.867573][   T13] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  400.870133][   T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  400.873613][   T13] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 55479 - 0
[  400.879794][   T13] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  400.882737][   T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  400.885347][   T13] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 55479 - 0
[  401.203222][T17375] validate_nla: 3 callbacks suppressed
[  401.203238][T17375] netlink: 'syz.1.3179': attribute type 3 has an invalid length.
[  401.219007][T17375] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  401.338399][T17381] netlink: 'syz.1.3181': attribute type 58 has an invalid length.
[  401.695563][T17387] ieee802154 phy0 wpan0: encryption failed: -22
[  402.227280][T17403] ieee802154 phy0 wpan0: encryption failed: -22
[  402.753917][T17419] __nla_validate_parse: 9 callbacks suppressed
[  402.753933][T17419] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3193'.
[  402.786995][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3194'.
[  402.920471][T17427] ieee802154 phy0 wpan0: encryption failed: -22
[  403.500520][T17434] netlink: 'syz.1.3197': attribute type 58 has an invalid length.
[  403.505560][T17434] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3197'.
[  408.523796][T17465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3205'.
[  408.527842][T17466] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3205'.
[  415.328752][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.157859][T16780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  424.167126][T16780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  424.170885][T16780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  424.185227][T16780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  424.187872][T16780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  424.235515][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  424.245549][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  424.252788][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  424.260658][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  424.266597][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  424.330230][T16780] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  424.337075][T16780] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  424.345849][T16780] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  424.353919][T16780] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  424.356854][T16780] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  426.231294][ T5619] Bluetooth: hci3: command tx timeout
[  426.311291][ T5619] Bluetooth: hci4: command tx timeout
[  426.391437][ T5619] Bluetooth: hci5: command tx timeout
[  428.311309][ T5619] Bluetooth: hci3: command tx timeout
[  428.391284][ T5619] Bluetooth: hci4: command tx timeout
[  428.471353][ T5619] Bluetooth: hci5: command tx timeout
[  430.391228][ T5619] Bluetooth: hci3: command tx timeout
[  430.471219][ T5619] Bluetooth: hci4: command tx timeout
[  430.551539][ T5619] Bluetooth: hci5: command tx timeout
[  432.471206][ T5619] Bluetooth: hci3: command tx timeout
[  432.552736][ T5619] Bluetooth: hci4: command tx timeout
[  432.631267][ T5619] Bluetooth: hci5: command tx timeout
[  438.808233][T17476] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  438.814832][T17477] syzkaller0: entered promiscuous mode
[  438.819302][T17477] syzkaller0: entered allmulticast mode
[  438.823685][T17477] tipc: Resetting bearer <eth:syzkaller0>
[  438.830012][T17481] netlink: 'syz.0.3208': attribute type 12 has an invalid length.
[  438.841523][T17481] netlink: 'syz.0.3208': attribute type 29 has an invalid length.
[  438.844744][T17481] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3208'.
[  438.851312][T17481] netlink: 43 bytes leftover after parsing attributes in process `syz.0.3208'.
[  439.385972][T17492] lo speed is unknown, defaulting to 1000
[  439.463778][T17488] lo speed is unknown, defaulting to 1000
[  439.479145][T17496] lo speed is unknown, defaulting to 1000
[  439.970632][T17492] bridge0: port 1(bridge_slave_0) entered blocking state
[  439.973304][T17492] bridge0: port 1(bridge_slave_0) entered disabled state
[  439.975569][T17492] bridge_slave_0: entered allmulticast mode
[  439.978176][T17492] bridge_slave_0: entered promiscuous mode
[  439.999881][T17492] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.002483][T17492] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.004740][T17492] bridge_slave_1: entered allmulticast mode
[  440.007441][T17492] bridge_slave_1: entered promiscuous mode
[  440.055634][T17492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.074407][T17488] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.077322][T17488] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.079747][T17488] bridge_slave_0: entered allmulticast mode
[  440.083014][T17488] bridge_slave_0: entered promiscuous mode
[  440.086683][T17488] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.089024][T17488] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.091867][T17488] bridge_slave_1: entered allmulticast mode
[  440.094762][T17488] bridge_slave_1: entered promiscuous mode
[  440.099103][T17492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.102625][T17496] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.104872][T17496] bridge0: port 1(bridge_slave_0) entered disabled state
[  440.107395][T17496] bridge_slave_0: entered allmulticast mode
[  440.110366][T17496] bridge_slave_0: entered promiscuous mode
[  440.129907][T17496] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.133311][T17496] bridge0: port 2(bridge_slave_1) entered disabled state
[  440.135559][T17496] bridge_slave_1: entered allmulticast mode
[  440.138230][T17496] bridge_slave_1: entered promiscuous mode
[  440.170176][T17488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.175416][T17492] team0: Port device team_slave_0 added
[  440.202856][T17496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  440.206804][T17488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.211891][T17492] team0: Port device team_slave_1 added
[  440.215289][T17496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  440.265035][T17488] team0: Port device team_slave_0 added
[  440.268158][T17492] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.270356][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.278888][T17492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.283976][T17496] team0: Port device team_slave_0 added
[  440.289371][T17496] team0: Port device team_slave_1 added
[  440.293411][T17488] team0: Port device team_slave_1 added
[  440.302677][T17492] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.305051][T17492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.313564][T17492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.344816][T17488] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.346996][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.355479][T17488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.368448][T17496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  440.370729][T17496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.379067][T17496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  440.384904][T17488] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.387696][T17488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.396786][T17488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.408349][T17496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  440.411341][T17496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  440.419235][T17496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  440.439570][T17492] hsr_slave_0: entered promiscuous mode
[  440.442075][T17492] hsr_slave_1: entered promiscuous mode
[  440.497326][T17496] hsr_slave_0: entered promiscuous mode
[  440.499937][T17496] hsr_slave_1: entered promiscuous mode
[  440.503583][T17496] debugfs: 'hsr0' already exists in 'hsr'
[  440.505408][T17496] Cannot create hsr debugfs directory
[  440.511639][T17488] hsr_slave_0: entered promiscuous mode
[  440.514309][T17488] hsr_slave_1: entered promiscuous mode
[  440.516490][T17488] debugfs: 'hsr0' already exists in 'hsr'
[  440.518258][T17488] Cannot create hsr debugfs directory
[  440.815251][T17492] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  440.850303][T17492] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  440.853709][T17492] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  440.923904][T17492] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  440.930644][T17492] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  441.075786][T17492] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  443.200036][T17492] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  443.298985][T17492] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  443.440357][T17496] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  443.594865][T17496] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  443.598427][T17496] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  443.688461][T17496] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  443.705623][T17496] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  443.773863][T17496] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  443.782146][T17496] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  443.830657][T17496] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  443.929257][T17492] 8021q: adding VLAN 0 to HW filter on device bond0
[  443.954066][T17488] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  444.040790][T17488] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  444.053717][T17488] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  444.164556][T17488] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  444.177298][T17488] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  444.214310][T17488] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  444.218784][T17492] 8021q: adding VLAN 0 to HW filter on device team0
[  444.224696][T17488] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  444.264014][T17488] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  444.278141][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.280696][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.294432][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.296790][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.395827][T17496] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.454747][T17496] 8021q: adding VLAN 0 to HW filter on device team0
[  444.470049][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.472802][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.498363][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.500936][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  444.576147][T17488] 8021q: adding VLAN 0 to HW filter on device bond0
[  444.622494][T17488] 8021q: adding VLAN 0 to HW filter on device team0
[  444.639804][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  444.642277][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  444.668285][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  444.670541][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  445.080102][T17492] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.188914][T17496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.289193][T17488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  445.354214][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  445.403080][T17488] veth0_vlan: entered promiscuous mode
[  445.444505][T17488] veth1_vlan: entered promiscuous mode
[  445.522059][T17488] veth0_macvtap: entered promiscuous mode
[  445.535225][T17492] veth0_vlan: entered promiscuous mode
[  445.543818][T17488] veth1_macvtap: entered promiscuous mode
[  445.557659][T17492] veth1_vlan: entered promiscuous mode
[  445.578488][T17488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  445.597345][T17488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  445.613567][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  445.629325][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  445.634637][T17492] veth0_macvtap: entered promiscuous mode
[  445.645086][T11614] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  445.680237][T17492] veth1_macvtap: entered promiscuous mode
[  445.683935][T17496] veth0_vlan: entered promiscuous mode
[  445.689420][T11614] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  445.868498][T17496] veth1_vlan: entered promiscuous mode
[  445.999389][T17492] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.045469][T17492] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.082817][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.090667][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.096141][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.105104][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.109562][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.138098][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  446.179349][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.187565][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.238678][T17496] veth0_macvtap: entered promiscuous mode
[  446.443360][T17496] veth1_macvtap: entered promiscuous mode
[  446.693414][T17496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  446.718684][T17496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  446.741968][T14881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  446.745286][T14881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  446.757204][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  446.767845][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  446.777774][T14881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  446.964657][T14881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  447.014974][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3209'.
[  447.080867][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.088705][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.485968][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.508013][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.703554][T17613] netlink: 176 bytes leftover after parsing attributes in process `syz.3.3213'.
[  447.768590][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  447.784467][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  447.839618][T17613] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3213'.
[  447.953270][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.013835][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3215'.
[  457.017449][T17627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3215'.
[  457.020223][T17627] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3215'.
[  463.067445][T16780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  463.076610][T16780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  463.084250][T16780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  463.088607][T16780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  463.092255][T16780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  465.111886][ T5619] Bluetooth: hci6: command tx timeout
[  468.087522][ T5619] Bluetooth: hci6: command tx timeout
[  470.175036][T16780] Bluetooth: hci6: command tx timeout
[  471.107526][    C0] sched: DL replenish lagged too much
[  472.232315][T16780] Bluetooth: hci6: command tx timeout
[  474.248534][T17650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3211'.
[  474.353056][T17648] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3211'.
[  478.114915][ T5619] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  480.280961][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  480.642665][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  480.665201][ T5619] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  480.673905][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  482.801761][ T5619] Bluetooth: hci0: command tx timeout
[  484.528020][ T5486] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  484.873013][ T5619] Bluetooth: hci0: command tx timeout
[  486.086739][T17633] lo speed is unknown, defaulting to 1000
[  486.971339][ T5619] Bluetooth: hci0: command tx timeout
[  489.031371][ T5619] Bluetooth: hci0: command tx timeout
[  503.105028][T16780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  503.120843][T16780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  503.124949][T16780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  503.131373][T16780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  503.135572][T16780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  505.191642][ T5619] Bluetooth: hci1: command tx timeout
[  506.804239][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  507.271761][ T5619] Bluetooth: hci1: command tx timeout
[  509.353156][ T5619] Bluetooth: hci1: command tx timeout
[  511.432322][ T5619] Bluetooth: hci1: command tx timeout
[  517.048939][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.444182][ T5486] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.566065][T17653] lo speed is unknown, defaulting to 1000
[  520.004631][T17633] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.007462][T17633] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.010531][T17633] bridge_slave_0: entered allmulticast mode
[  520.025170][T17633] bridge_slave_0: entered promiscuous mode
[  520.028558][T17633] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.031483][T17633] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.033866][T17633] bridge_slave_1: entered allmulticast mode
[  520.036737][T17633] bridge_slave_1: entered promiscuous mode
[  520.084599][T17689] lo speed is unknown, defaulting to 1000
[  520.107293][T17633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.124052][T17633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.195260][T17633] team0: Port device team_slave_0 added
[  520.210959][T17633] team0: Port device team_slave_1 added
[  520.252204][T17633] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.254568][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  520.262872][T17633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.268343][T17633] batman_adv: batadv0: Adding interface: batadv_slave_1
[  520.271451][T17633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  520.280266][T17633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  520.326584][T17653] bridge0: port 1(bridge_slave_0) entered blocking state
[  520.329759][T17653] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.333016][T17653] bridge_slave_0: entered allmulticast mode
[  520.335923][T17653] bridge_slave_0: entered promiscuous mode
[  520.350772][T17653] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.355616][T17653] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.358736][T17653] bridge_slave_1: entered allmulticast mode
[  520.362769][T17653] bridge_slave_1: entered promiscuous mode
[  520.370018][T17633] hsr_slave_0: entered promiscuous mode
[  520.377273][T17633] hsr_slave_1: entered promiscuous mode
[  520.379894][T17633] debugfs: 'hsr0' already exists in 'hsr'
[  520.382296][T17633] Cannot create hsr debugfs directory
[  520.430804][T17653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.457076][T17653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.519733][T17653] team0: Port device team_slave_0 added
[  520.533135][T17653] team0: Port device team_slave_1 added
[  521.652672][T17653] batman_adv: batadv0: Adding interface: batadv_slave_0
[  521.655031][T17653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.664568][T17653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  521.669873][T17653] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.674360][T17653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  521.682649][T17653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.769529][T17653] hsr_slave_0: entered promiscuous mode
[  521.772288][T17653] hsr_slave_1: entered promiscuous mode
[  521.774858][T17653] debugfs: 'hsr0' already exists in 'hsr'
[  521.776760][T17653] Cannot create hsr debugfs directory
[  521.850433][T17689] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.853319][T17689] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.855648][T17689] bridge_slave_0: entered allmulticast mode
[  521.858466][T17689] bridge_slave_0: entered promiscuous mode
[  521.875826][T17689] bridge0: port 2(bridge_slave_1) entered blocking state
[  521.878412][T17689] bridge0: port 2(bridge_slave_1) entered disabled state
[  521.880786][T17689] bridge_slave_1: entered allmulticast mode
[  521.884291][T17689] bridge_slave_1: entered promiscuous mode
[  521.935749][T17689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  521.940691][T17689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.014580][T17689] team0: Port device team_slave_0 added
[  522.031893][T17689] team0: Port device team_slave_1 added
[  522.051739][T17633] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  522.164829][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  522.179854][T17633] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  522.233676][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  522.238084][T17689] batman_adv: batadv0: Adding interface: batadv_slave_0
[  522.243314][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.253893][T17689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  522.263324][T17689] batman_adv: batadv0: Adding interface: batadv_slave_1
[  522.267189][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  522.276220][T17689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  522.291223][T17633] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  522.384578][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  522.401783][T17633] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  522.453323][T17633] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  522.473506][T17689] hsr_slave_0: entered promiscuous mode
[  522.476842][T17689] hsr_slave_1: entered promiscuous mode
[  522.479769][T17689] debugfs: 'hsr0' already exists in 'hsr'
[  522.482578][T17689] Cannot create hsr debugfs directory
[  522.643206][T17653] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  522.660365][T17653] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  522.672987][T17653] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  522.712307][T17653] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  523.103744][T16780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  523.113312][T16780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  523.116522][T16780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  523.119899][T16780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  523.127311][T16780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  523.834696][T17653] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  523.918024][T17653] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  523.924609][T17653] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  523.984237][T17653] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  524.536151][T17653] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.557773][T17653] 8021q: adding VLAN 0 to HW filter on device team0
[  524.580120][T17599] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.583055][T17599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.610428][T17599] bridge0: port 2(bridge_slave_1) entered blocking state
[  524.613406][T17599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  524.626738][T17689] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  524.695251][T17689] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  524.718768][T17689] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  524.759986][T17689] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  524.763180][T17689] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  524.826549][T17689] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  524.834737][T17728] lo speed is unknown, defaulting to 1000
[  524.869390][T17689] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  525.005927][T17689] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  525.192904][ T5619] Bluetooth: hci2: command tx timeout
[  525.296386][T17689] 8021q: adding VLAN 0 to HW filter on device bond0
[  525.343200][T17689] 8021q: adding VLAN 0 to HW filter on device team0
[  525.388556][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.391074][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state
[  525.445734][T17599] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.448671][T17599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.510615][T17653] 8021q: adding VLAN 0 to HW filter on device batadv0
[  525.535804][T17728] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.538660][T17728] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.550848][T17728] bridge_slave_0: entered allmulticast mode
[  525.557685][T17728] bridge_slave_0: entered promiscuous mode
[  525.577829][T17728] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.580685][T17728] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.591524][T17728] bridge_slave_1: entered allmulticast mode
[  525.596768][T17728] bridge_slave_1: entered promiscuous mode
[  525.670737][T17728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  525.785579][T17728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  525.853262][T17728] team0: Port device team_slave_0 added
[  525.860205][T17728] team0: Port device team_slave_1 added
[  526.163643][T17728] batman_adv: batadv0: Adding interface: batadv_slave_0
[  526.172102][T17728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.192909][T17728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  526.199967][T17728] batman_adv: batadv0: Adding interface: batadv_slave_1
[  526.207723][T17728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  526.217930][T17728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  526.334110][T17728] hsr_slave_0: entered promiscuous mode
[  526.340568][T17728] hsr_slave_1: entered promiscuous mode
[  526.344864][T17728] debugfs: 'hsr0' already exists in 'hsr'
[  526.347175][T17728] Cannot create hsr debugfs directory
[  526.354345][T17653] veth0_vlan: entered promiscuous mode
[  526.757128][T17653] veth1_vlan: entered promiscuous mode
[  526.954126][T17653] veth0_macvtap: entered promiscuous mode
[  527.005195][T17653] veth1_macvtap: entered promiscuous mode
[  527.034903][T17689] 8021q: adding VLAN 0 to HW filter on device batadv0
[  527.072701][T17653] batman_adv: batadv0: Interface activated: batadv_slave_0
[  527.086732][T17653] batman_adv: batadv0: Interface activated: batadv_slave_1
[  527.101575][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  527.104869][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  527.118718][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  527.129252][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  527.316548][ T5619] Bluetooth: hci2: command tx timeout
[  529.351606][ T5619] Bluetooth: hci2: command tx timeout
[  531.431389][ T5619] Bluetooth: hci2: command tx timeout
[  535.058678][T16780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  535.066348][T16780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  535.073615][T16780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  535.077740][T16780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  535.080275][T16780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  537.111436][ T5619] Bluetooth: hci3: command tx timeout
[  539.191782][ T5619] Bluetooth: hci3: command tx timeout
[  541.271367][ T5619] Bluetooth: hci3: command tx timeout
[  543.351422][ T5619] Bluetooth: hci3: command tx timeout
[  564.093744][T16780] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  564.107058][T16780] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  564.110921][T16780] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  564.119371][T16780] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  564.126990][T16780] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  566.153883][ T5619] Bluetooth: hci4: command tx timeout
[  568.239186][ T5619] Bluetooth: hci4: command tx timeout
[  568.245871][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  570.311379][ T5619] Bluetooth: hci4: command tx timeout
[  572.391349][ T5619] Bluetooth: hci4: command tx timeout
[  584.058639][T16780] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  584.074588][T16780] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  584.081348][T16780] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  584.087377][T16780] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  584.097712][T16780] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  586.152662][ T5619] Bluetooth: hci7: command tx timeout
[  588.231726][ T5619] Bluetooth: hci7: command tx timeout
[  590.311384][ T5619] Bluetooth: hci7: command tx timeout
[  592.391302][ T5619] Bluetooth: hci7: command tx timeout
[  595.119928][T16780] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  595.135701][T16780] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  595.143427][T16780] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  595.156661][T16780] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  595.163210][T16780] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  597.191342][ T5619] Bluetooth: hci8: command tx timeout
[  599.271288][ T5619] Bluetooth: hci8: command tx timeout
[  601.351508][ T5619] Bluetooth: hci8: command tx timeout
[  603.431560][ T5619] Bluetooth: hci8: command tx timeout
[  606.235279][ T5619] Bluetooth: hci0: command 0x0406 tx timeout
[  622.084650][ T5486] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.165039][ T5619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  624.180659][ T5619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  624.185674][ T5619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  624.193108][ T5619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  624.198871][ T5619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  626.231471][ T5619] Bluetooth: hci5: command tx timeout
[  628.311553][ T5619] Bluetooth: hci5: command tx timeout
[  629.677032][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  630.391402][ T5619] Bluetooth: hci5: command tx timeout
[  632.471462][ T5619] Bluetooth: hci5: command tx timeout
[  644.105072][T16780] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  644.114562][T16780] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  644.118994][T16780] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  644.126080][T16780] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  644.129929][T16780] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  646.151902][ T5619] Bluetooth: hci6: command tx timeout
[  647.115000][ T5619] Bluetooth: hci2: command 0x0406 tx timeout
[  648.231414][T16780] Bluetooth: hci6: command tx timeout
[  650.245678][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  650.311573][T16780] Bluetooth: hci6: command tx timeout
[  652.391251][T16780] Bluetooth: hci6: command tx timeout
[  655.089613][ T5619] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  655.097193][ T5619] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  655.106265][ T5619] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  655.110284][ T5619] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  655.114864][ T5619] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  657.191622][ T5619] Bluetooth: hci9: command tx timeout
[  659.271440][ T5619] Bluetooth: hci9: command tx timeout
[  661.352396][ T5619] Bluetooth: hci9: command tx timeout
[  663.431544][ T5619] Bluetooth: hci9: command tx timeout
[  684.103408][T16780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  684.113116][T16780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  684.116641][T16780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  684.124879][T16780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  684.129307][T16780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  686.151890][ T5619] Bluetooth: hci0: command tx timeout
[  688.076021][ T5619] Bluetooth: hci4: command 0x0406 tx timeout
[  688.231809][T16780] Bluetooth: hci0: command tx timeout
[  690.311729][T16780] Bluetooth: hci0: command tx timeout
[  691.123494][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  692.393166][T16780] Bluetooth: hci0: command tx timeout
[  705.566885][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  705.579288][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  705.584283][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  705.588160][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  705.590905][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  707.671562][ T5619] Bluetooth: hci1: command tx timeout
[  708.554485][ T5619] Bluetooth: hci7: command 0x0406 tx timeout
[  709.751562][T16780] Bluetooth: hci1: command tx timeout
[  711.831300][T16780] Bluetooth: hci1: command tx timeout
[  713.911405][T16780] Bluetooth: hci1: command tx timeout
[  715.517148][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  715.528863][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  715.536959][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  715.543029][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  715.549080][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  717.591984][T16780] Bluetooth: hci3: command tx timeout
[  718.795293][T16780] Bluetooth: hci8: command 0x0406 tx timeout
[  719.671739][ T5619] Bluetooth: hci3: command tx timeout
[  721.751678][ T5619] Bluetooth: hci3: command tx timeout
[  723.831812][ T5619] Bluetooth: hci3: command tx timeout
[  744.544116][T16780] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  744.554878][T16780] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  744.558367][T16780] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  744.567562][T16780] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  744.575858][T16780] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  746.631670][ T5619] Bluetooth: hci10: command tx timeout
[  748.711714][ T5619] Bluetooth: hci10: command tx timeout
[  749.516003][ T5619] Bluetooth: hci5: command 0x0406 tx timeout
[  750.793175][T16780] Bluetooth: hci10: command tx timeout
[  752.561726][ T1379] ieee802154 phy0 wpan0: encryption failed: -22
[  752.871544][T16780] Bluetooth: hci10: command tx timeout
[  766.605000][ T5619] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  766.617184][ T5619] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  766.621237][ T5619] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  766.625727][ T5619] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  766.628396][ T5619] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  768.711820][T16780] Bluetooth: hci11: command tx timeout
[  769.995310][T16780] Bluetooth: hci6: command 0x0406 tx timeout
[  770.791349][ T5619] Bluetooth: hci11: command tx timeout
[  772.872578][ T5619] Bluetooth: hci11: command tx timeout
[  774.951691][   T36] INFO: task kworker/u8:2:5486 blocked for more than 143 seconds.
[  774.954742][ T5619] Bluetooth: hci11: command tx timeout
[  774.960666][   T36]       Not tainted syzkaller #0
[  774.967905][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  774.973616][   T36] task:kworker/u8:2    state:D stack:23104 pid:5486  tgid:5486  ppid:2      task_flags:0x4208060 flags:0x00080000
[  774.978254][   T36] Workqueue: netns cleanup_net
[  774.980192][   T36] Call Trace:
[  774.982460][   T36]  <TASK>
[  774.983778][   T36]  __schedule+0x1821/0x5740
[  774.985703][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  774.987694][   T36]  ? __pfx___schedule+0x10/0x10
[  774.989630][   T36]  ? schedule+0x90/0x360
[  774.992988][   T36]  schedule+0x164/0x360
[  774.994769][   T36]  schedule_preempt_disabled+0x13/0x30
[  774.996911][   T36]  __mutex_lock+0x7f7/0x1550
[  774.998770][   T36]  ? __mutex_lock+0x608/0x1550
[  775.000677][   T36]  ? rtnl_net_dev_lock+0x257/0x2f0
[  775.003266][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  775.005771][   T36]  ? rtnl_net_dev_lock+0x36/0x2f0
[  775.007848][   T36]  ? rtnl_net_dev_lock+0x36/0x2f0
[  775.009876][   T36]  ? rtnl_net_dev_lock+0x36/0x2f0
[  775.012968][   T36]  rtnl_net_dev_lock+0x257/0x2f0
[  775.015032][   T36]  unregister_netdevice_notifier_dev_net+0x96/0x440
[  775.017615][   T36]  ? nsim_destroy+0xb4/0x7f0
[  775.019437][   T36]  ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10
[  775.023200][   T36]  ? __pfx_mntput_no_expire_slowpath+0x10/0x10
[  775.025713][   T36]  ? do_raw_spin_unlock+0x4d/0x210
[  775.027827][   T36]  ? rcu_is_watching+0x15/0xb0
[  775.029774][   T36]  ? mntput_no_expire+0x1c/0x1c0
[  775.037654][   T36]  nsim_destroy+0xfd/0x7f0
[  775.040039][   T36]  __nsim_dev_port_del+0x14f/0x200
[  775.042611][   T36]  nsim_dev_reload_destroy+0x288/0x490
[  775.044844][   T36]  nsim_dev_reload_down+0x8a/0xc0
[  775.046819][   T36]  devlink_reload+0x1eb/0x8c0
[  775.048677][   T36]  ? __pfx_devlink_reload+0x10/0x10
[  775.051779][   T36]  ? xa_get_mark+0x6fc/0x7b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  775.057057][   T36]  devlink_pernet_pre_exit+0x1ff/0x420
[  775.061583][   T36]  ? __pfx_devlink_pernet_pre_exit+0x10/0x10
[  775.073539][   T36]  ops_undo_list+0x187/0x940
[  775.075792][   T36]  ? __pfx_ops_undo_list+0x10/0x10
[  775.079403][   T36]  ? idr_destroy+0x218/0x290
[  775.085655][   T36]  ? do_raw_spin_unlock+0x4d/0x210
[  775.091427][   T36]  cleanup_net+0x56b/0x800
[  775.094703][   T36]  ? __pfx_cleanup_net+0x10/0x10
[  775.098315][   T36]  ? process_scheduled_works+0xa70/0x1860
[  775.104962][   T36]  ? process_scheduled_works+0xa70/0x1860
[  775.108766][   T36]  process_scheduled_works+0xb5d/0x1860
[  775.114541][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  775.118488][   T36]  ? assign_work+0x3d5/0x5e0
[  775.124273][   T36]  worker_thread+0xa53/0xfc0
[  775.127743][   T36]  kthread+0x389/0x470
[  775.130951][   T36]  ? __pfx_worker_thread+0x10/0x10
[  775.136660][   T36]  ? __pfx_kthread+0x10/0x10
[  775.140094][   T36]  ret_from_fork+0x514/0xb70
[  775.144946][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  775.151160][   T36]  ? __switch_to+0xc79/0x1410
[  775.153629][   T36]  ? __pfx_kthread+0x10/0x10
[  775.161156][   T36]  ret_from_fork_asm+0x1a/0x30
[  775.163620][   T36]  </TASK>
[  775.164982][   T36] INFO: task kworker/u9:15:6041 blocked for more than 143 seconds.
[  775.181426][   T36]       Not tainted syzkaller #0
[  775.184887][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  775.188468][   T36] task:kworker/u9:15   state:D stack:24488 pid:6041  tgid:6041  ppid:2      task_flags:0x4208060 flags:0x00080000
[  775.203318][   T36] Workqueue: events_unbound linkwatch_event
[  775.207312][   T36] Call Trace:
[  775.208671][   T36]  <TASK>
[  775.214195][   T36]  __schedule+0x1821/0x5740
[  775.217634][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.223173][   T36]  ? __pfx___schedule+0x10/0x10
[  775.226231][   T36]  ? schedule+0x90/0x360
[  775.227625][   T36]  schedule+0x164/0x360
[  775.231666][   T36]  schedule_preempt_disabled+0x13/0x30
[  775.235947][   T36]  __mutex_lock+0x7f7/0x1550
[  775.238944][   T36]  ? __mutex_lock+0x608/0x1550
[  775.241147][   T36]  ? linkwatch_event+0xe/0x60
[  775.245360][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  775.248360][   T36]  ? lock_acquire+0x221/0x350
[  775.251823][   T36]  ? process_scheduled_works+0xa70/0x1860
[  775.261144][   T36]  ? process_scheduled_works+0xa70/0x1860
[  775.263000][   T36]  linkwatch_event+0xe/0x60
[  775.264910][   T36]  process_scheduled_works+0xb5d/0x1860
[  775.267112][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  775.280382][   T36]  ? assign_work+0x3d5/0x5e0
[  775.284266][   T36]  worker_thread+0xa53/0xfc0
[  775.288022][   T36]  kthread+0x389/0x470
[  775.293678][   T36]  ? __pfx_worker_thread+0x10/0x10
[  775.301593][   T36]  ? __pfx_kthread+0x10/0x10
[  775.305478][   T36]  ret_from_fork+0x514/0xb70
[  775.307336][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  775.309279][   T36]  ? __switch_to+0xc79/0x1410
[  775.316242][   T36]  ? __pfx_kthread+0x10/0x10
[  775.319703][   T36]  ret_from_fork_asm+0x1a/0x30
[  775.325777][   T36]  </TASK>
[  775.328680][   T36] INFO: task kworker/u8:6:14881 blocked for more than 143 seconds.
[  775.335427][   T36]       Not tainted syzkaller #0
[  775.338976][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  775.351198][   T36] task:kworker/u8:6    state:D stack:23432 pid:14881 tgid:14881 ppid:2      task_flags:0x4208060 flags:0x00080000
[  775.355917][   T36] Workqueue: ipv6_addrconf addrconf_dad_work
[  775.362982][   T36] Call Trace:
[  775.364374][   T36]  <TASK>
[  775.371228][   T36]  __schedule+0x1821/0x5740
[  775.375339][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.379454][   T36]  ? lockdep_hardirqs_on+0x7a/0x110
[  775.388414][   T36]  ? irqentry_exit+0x218/0x760
[  775.398388][   T36]  ? __pfx___schedule+0x10/0x10
[  775.408812][   T36]  ? schedule+0x90/0x360
[  775.419319][   T36]  schedule+0x164/0x360
[  775.427518][   T36]  schedule_preempt_disabled+0x13/0x30
[  775.443273][   T36]  __mutex_lock+0x7f7/0x1550
[  775.446941][   T36]  ? __mutex_lock+0x608/0x1550
[  775.451955][   T36]  ? addrconf_dad_work+0x11e/0x14c0
[  775.461134][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  775.463252][   T36]  addrconf_dad_work+0x11e/0x14c0
[  775.465657][   T36]  ? lock_acquire+0x106/0x350
[  775.469021][   T36]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  775.475920][   T36]  ? __pfx_addrconf_dad_work+0x10/0x10
[  775.479642][   T36]  ? process_scheduled_works+0xa70/0x1860
[  775.485511][   T36]  ? process_scheduled_works+0xa70/0x1860
[  775.489268][   T36]  ? process_scheduled_works+0xa70/0x1860
[  775.495568][   T36]  process_scheduled_works+0xb5d/0x1860
[  775.497992][   T36]  ? __pfx_process_scheduled_works+0x10/0x10
[  775.500342][   T36]  ? assign_work+0x3d5/0x5e0
[  775.502955][   T36]  worker_thread+0xa53/0xfc0
[  775.504850][   T36]  kthread+0x389/0x470
[  775.506407][   T36]  ? __pfx_worker_thread+0x10/0x10
[  775.508297][   T36]  ? __pfx_kthread+0x10/0x10
[  775.510110][   T36]  ret_from_fork+0x514/0xb70
[  775.514848][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  775.517364][   T36]  ? __switch_to+0xc79/0x1410
[  775.519303][   T36]  ? __pfx_kthread+0x10/0x10
[  775.523719][   T36]  ret_from_fork_asm+0x1a/0x30
[  775.525685][   T36]  </TASK>
[  775.526954][   T36] INFO: task syz-executor:17728 blocked for more than 143 seconds.
[  775.529962][   T36]       Not tainted syzkaller #0
[  775.532878][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  775.536354][   T36] task:syz-executor    state:D stack:22488 pid:17728 tgid:17728 ppid:1      task_flags:0x480140 flags:0x00080002
[  775.540944][   T36] Call Trace:
[  775.543723][   T36]  <TASK>
[  775.544973][   T36]  __schedule+0x1821/0x5740
[  775.547210][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.549271][   T36]  ? __pfx___schedule+0x10/0x10
[  775.551713][   T36]  ? schedule+0x90/0x360
[  775.553529][   T36]  schedule+0x164/0x360
[  775.555180][   T36]  schedule_preempt_disabled+0x13/0x30
[  775.557321][   T36]  __mutex_lock+0x7f7/0x1550
[  775.559146][   T36]  ? __mutex_lock+0x608/0x1550
[  775.562013][   T36]  ? rtnl_net_dev_lock+0x257/0x2f0
[  775.564419][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  775.566497][   T36]  ? rtnl_net_dev_lock+0x36/0x2f0
[  775.568404][   T36]  ? rtnl_net_dev_lock+0x36/0x2f0
[  775.570308][   T36]  ? rtnl_net_dev_lock+0x36/0x2f0
[  775.573068][   T36]  rtnl_net_dev_lock+0x257/0x2f0
[  775.575108][   T36]  unregister_netdevice_notifier_dev_net+0x96/0x440
[  775.579703][   T36]  ? nsim_destroy+0xb4/0x7f0
[  775.582968][   T36]  ? __pfx_unregister_netdevice_notifier_dev_net+0x10/0x10
[  775.585767][   T36]  ? __pfx_mntput_no_expire_slowpath+0x10/0x10
[  775.588026][   T36]  ? do_raw_spin_unlock+0x4d/0x210
[  775.589972][   T36]  ? rcu_is_watching+0x15/0xb0
[  775.598097][   T36]  ? mntput_no_expire+0x1c/0x1c0
[  775.600205][   T36]  nsim_destroy+0xfd/0x7f0
[  775.602612][   T36]  __nsim_dev_port_del+0x14f/0x200
[  775.604719][   T36]  nsim_dev_reload_destroy+0x288/0x490
[  775.606943][   T36]  nsim_drv_remove+0x58/0x170
[  775.608832][   T36]  ? __pfx_nsim_bus_remove+0x10/0x10
[  775.610864][   T36]  device_release_driver_internal+0x46f/0x870
[  775.614001][   T36]  bus_remove_device+0x455/0x570
[  775.616541][   T36]  ? __pfx_bus_remove_device+0x10/0x10
[  775.618787][   T36]  ? kernfs_remove_by_name_ns+0x101/0x140
[  775.624370][   T36]  device_del+0x527/0x8f0
[  775.626408][   T36]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  775.628855][   T36]  ? __pfx_device_del+0x10/0x10
[  775.630860][   T36]  ? sysfs_file_kobj+0x1a/0x230
[  775.635749][   T36]  device_unregister+0x21/0xf0
[  775.637846][   T36]  del_device_store+0x2b0/0x370
[  775.639883][   T36]  ? __pfx_del_device_store+0x10/0x10
[  775.642401][   T36]  ? sysfs_file_kobj+0x1e4/0x230
[  775.644429][   T36]  ? sysfs_kf_write+0x166/0x260
[  775.646227][   T36]  ? __pfx_sysfs_kf_write+0x10/0x10
[  775.648144][   T36]  kernfs_fop_write_iter+0x3af/0x540
[  775.650111][   T36]  vfs_write+0x61d/0xb90
[  775.653011][   T36]  ? __pfx_vfs_write+0x10/0x10
[  775.655440][   T36]  ? do_sys_openat2+0x14c/0x200
[  775.657382][   T36]  ? kmem_cache_free+0x182/0x650
[  775.659246][   T36]  ? fd_install+0x94/0x3d0
[  775.660938][   T36]  ksys_write+0x150/0x270
[  775.663244][   T36]  ? __pfx_ksys_write+0x10/0x10
[  775.665213][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.667501][   T36]  do_syscall_64+0x15f/0xf80
[  775.669287][   T36]  ? trace_irq_disable+0x3b/0x140
[  775.676631][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.681415][   T36] RIP: 0033:0x7f511ab5d68e
[  775.683298][   T36] RSP: 002b:00007fffec5f92a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  775.686487][   T36] RAX: ffffffffffffffda RBX: 0000555562ff5500 RCX: 00007f511ab5d68e
[  775.689557][   T36] RDX: 0000000000000001 RSI: 00007fffec5f9330 RDI: 0000000000000005
[  775.694054][   T36] RBP: 00007f511ac335f2 R08: 0000000000000000 R09: 0000000000000000
[  775.697170][   T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  775.700095][   T36] R13: 00007fffec5f9330 R14: 00007f511b944620 R15: 0000000000000003
[  775.703649][   T36]  </TASK>
[  775.704962][   T36] INFO: task syz-executor:17799 blocked for more than 144 seconds.
[  775.708437][   T36]       Not tainted syzkaller #0
[  775.710456][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  775.714144][   T36] task:syz-executor    state:D stack:26704 pid:17799 tgid:17799 ppid:1      task_flags:0x400140 flags:0x00080002
[  775.718689][   T36] Call Trace:
[  775.719989][   T36]  <TASK>
[  775.721883][   T36]  __schedule+0x1821/0x5740
[  775.723785][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.725721][   T36]  ? __pfx_stack_trace_save+0x10/0x10
[  775.727810][   T36]  ? stack_depot_save_flags+0x33/0x810
[  775.729931][   T36]  ? __pfx___schedule+0x10/0x10
[  775.734780][   T36]  ? schedule+0x90/0x360
[  775.736577][   T36]  schedule+0x164/0x360
[  775.738198][   T36]  schedule_preempt_disabled+0x13/0x30
[  775.740313][   T36]  __mutex_lock+0x7f7/0x1550
[  775.745020][   T36]  ? __pfx___nla_validate_parse+0x10/0x10
[  775.747304][   T36]  ? __mutex_lock+0x608/0x1550
[  775.749397][   T36]  ? rtnl_newlink+0x883/0x1bb0
[  775.754896][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  775.756976][   T36]  ? ns_capable+0x89/0xe0
[  775.758655][   T36]  rtnl_newlink+0x883/0x1bb0
[  775.760534][   T36]  ? __pfx_rtnl_newlink+0x10/0x10
[  775.763969][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.766036][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.767935][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.769823][   T36]  ? unwind_next_frame+0xa6/0x2550
[  775.772787][   T36]  ? unwind_next_frame+0xa6/0x2550
[  775.775243][   T36]  ? is_bpf_text_address+0x26/0x2b0
[  775.777393][   T36]  ? is_bpf_text_address+0x26/0x2b0
[  775.779323][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.792935][   T36]  ? kernel_text_address+0xa5/0xe0
[  775.794632][   T36]  ? __kernel_text_address+0xd/0x30
[  775.796591][   T36]  ? unwind_get_return_address+0x4d/0x90
[  775.798784][   T36]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  775.802527][   T36]  ? arch_stack_walk+0xfb/0x150
[  775.804530][   T36]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  775.806527][   T36]  ? __pfx_rtnl_newlink+0x10/0x10
[  775.808488][   T36]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  775.810415][   T36]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  775.813810][   T36]  ? netlink_sendmsg+0x5d4/0xb40
[  775.815807][   T36]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  775.817719][   T36]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  775.819610][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.821604][   T36]  netlink_rcv_skb+0x232/0x4b0
[  775.823193][   T36]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  775.824895][   T36]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  775.826588][   T36]  ? netlink_deliver_tap+0x2e/0x1b0
[  775.828151][   T36]  ? netlink_deliver_tap+0x2e/0x1b0
[  775.829820][   T36]  netlink_unicast+0x75c/0x8e0
[  775.834250][   T36]  netlink_sendmsg+0x813/0xb40
[  775.836227][   T36]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.838298][   T36]  ? aa_sock_msg_perm+0xf1/0x1b0
[  775.840195][   T36]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  775.844122][   T36]  ? __pfx_netlink_sendmsg+0x10/0x10
[  775.846717][   T36]  __sys_sendto+0x672/0x710
[  775.848591][   T36]  ? __pfx___sys_sendto+0x10/0x10
[  775.850512][   T36]  ? fput_close_sync+0x11f/0x240
[  775.855090][   T36]  ? __pfx_fput_close_sync+0x10/0x10
[  775.857010][   T36]  __x64_sys_sendto+0xde/0x100
[  775.858935][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.861793][   T36]  do_syscall_64+0x15f/0xf80
[  775.863770][   T36]  ? trace_irq_disable+0x3b/0x140
[  775.865794][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  775.867947][   T36] RIP: 0033:0x7f563ef5d68e
[  775.869657][   T36] RSP: 002b:00007ffc67e1a4b8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  775.874363][   T36] RAX: ffffffffffffffda RBX: 0000555580e4c500 RCX: 00007f563ef5d68e
[  775.877500][   T36] RDX: 000000000000002c RSI: 00007f563fd44670 RDI: 0000000000000003
[  775.880480][   T36] RBP: 0000000000000001 R08: 00007ffc67e1a534 R09: 000000000000000c
[  775.884955][   T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  775.888123][   T36] R13: 0000000000000000 R14: 00007f563fd44670 R15: 0000000000000000
[  775.891730][   T36]  </TASK>
[  775.893016][   T36] INFO: task syz-executor:17807 blocked for more than 144 seconds.
[  775.896078][   T36]       Not tainted syzkaller #0
[  775.897960][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  775.902195][   T36] task:syz-executor    state:D stack:26760 pid:17807 tgid:17807 ppid:1      task_flags:0x400140 flags:0x00080002
[  775.907233][   T36] Call Trace:
[  775.908639][   T36]  <TASK>
[  775.909795][   T36]  __schedule+0x1821/0x5740
[  775.913080][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.915113][   T36]  ? __pfx_stack_trace_save+0x10/0x10
[  775.917177][   T36]  ? stack_depot_save_flags+0x33/0x810
[  775.919268][   T36]  ? __pfx___schedule+0x10/0x10
[  775.921686][   T36]  ? schedule+0x90/0x360
[  775.923471][   T36]  schedule+0x164/0x360
[  775.925092][   T36]  schedule_preempt_disabled+0x13/0x30
[  775.927196][   T36]  __mutex_lock+0x7f7/0x1550
[  775.928978][   T36]  ? __pfx___nla_validate_parse+0x10/0x10
[  775.932163][   T36]  ? __mutex_lock+0x608/0x1550
[  775.934244][   T36]  ? rtnl_newlink+0x883/0x1bb0
[  775.936197][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  775.938093][   T36]  ? ns_capable+0x89/0xe0
[  775.939715][   T36]  rtnl_newlink+0x883/0x1bb0
[  775.942186][   T36]  ? __pfx_rtnl_newlink+0x10/0x10
[  775.944190][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.946074][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.947963][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.949871][   T36]  ? unwind_next_frame+0xa6/0x2550
[  775.954808][   T36]  ? unwind_next_frame+0xa6/0x2550
[  775.957062][   T36]  ? is_bpf_text_address+0x26/0x2b0
[  775.959144][   T36]  ? is_bpf_text_address+0x26/0x2b0
[  775.963919][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.965937][   T36]  ? kernel_text_address+0xa5/0xe0
[  775.967910][   T36]  ? __kernel_text_address+0xd/0x30
[  775.969896][   T36]  ? unwind_get_return_address+0x4d/0x90
[  775.972603][   T36]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  775.975506][   T36]  ? arch_stack_walk+0xfb/0x150
[  775.977476][   T36]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  775.979491][   T36]  ? __pfx_rtnl_newlink+0x10/0x10
[  775.981991][   T36]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  775.983583][   T36]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  775.985376][   T36]  ? netlink_sendmsg+0x5d4/0xb40
[  775.988154][   T36]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  775.989778][   T36]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  775.992125][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  775.993962][   T36]  netlink_rcv_skb+0x232/0x4b0
[  775.995524][   T36]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  775.997383][   T36]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  775.999528][   T36]  ? netlink_deliver_tap+0x2e/0x1b0
[  776.002650][   T36]  ? netlink_deliver_tap+0x2e/0x1b0
[  776.004781][   T36]  netlink_unicast+0x75c/0x8e0
[  776.006759][   T36]  netlink_sendmsg+0x813/0xb40
[  776.008369][   T36]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.010183][   T36]  ? aa_sock_msg_perm+0xf1/0x1b0
[  776.012564][   T36]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  776.014514][   T36]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.016160][   T36]  __sys_sendto+0x672/0x710
[  776.017554][   T36]  ? __pfx___sys_sendto+0x10/0x10
[  776.019069][   T36]  ? fput_close_sync+0x11f/0x240
[  776.020768][   T36]  ? __pfx_fput_close_sync+0x10/0x10
[  776.023364][   T36]  __x64_sys_sendto+0xde/0x100
[  776.024927][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.026750][   T36]  do_syscall_64+0x15f/0xf80
[  776.028143][   T36]  ? trace_irq_disable+0x3b/0x140
[  776.029662][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.032054][   T36] RIP: 0033:0x7f037ef5d68e
[  776.033882][   T36] RSP: 002b:00007ffe07d89388 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  776.037088][   T36] RAX: ffffffffffffffda RBX: 000055555deb3500 RCX: 00007f037ef5d68e
[  776.039831][   T36] RDX: 000000000000002c RSI: 00007f037fd44670 RDI: 0000000000000003
[  776.043597][   T36] RBP: 0000000000000001 R08: 00007ffe07d89404 R09: 000000000000000c
[  776.046730][   T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  776.049765][   T36] R13: 0000000000000000 R14: 00007f037fd44670 R15: 0000000000000000
[  776.053345][   T36]  </TASK>
[  776.054369][   T36] INFO: task syz-executor:17815 blocked for more than 144 seconds.
[  776.057147][   T36]       Not tainted syzkaller #0
[  776.059087][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  776.063590][   T36] task:syz-executor    state:D stack:26760 pid:17815 tgid:17815 ppid:1      task_flags:0x400140 flags:0x00080002
[  776.067419][   T36] Call Trace:
[  776.068547][   T36]  <TASK>
[  776.069664][   T36]  __schedule+0x1821/0x5740
[  776.075472][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  776.077161][   T36]  ? __pfx_stack_trace_save+0x10/0x10
[  776.078813][   T36]  ? stack_depot_save_flags+0x33/0x810
[  776.080473][   T36]  ? __pfx___schedule+0x10/0x10
[  776.082392][   T36]  ? schedule+0x90/0x360
[  776.083811][   T36]  schedule+0x164/0x360
[  776.085098][   T36]  schedule_preempt_disabled+0x13/0x30
[  776.087089][   T36]  __mutex_lock+0x7f7/0x1550
[  776.090248][   T36]  ? __pfx___nla_validate_parse+0x10/0x10
[  776.093621][   T36]  ? __mutex_lock+0x608/0x1550
[  776.095229][   T36]  ? rtnl_newlink+0x883/0x1bb0
[  776.096694][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  776.098220][   T36]  ? ns_capable+0x89/0xe0
[  776.099547][   T36]  rtnl_newlink+0x883/0x1bb0
[  776.100950][   T36]  ? __pfx_rtnl_newlink+0x10/0x10
[  776.103183][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  776.105035][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  776.106940][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  776.108874][   T36]  ? unwind_next_frame+0xa6/0x2550
[  776.110678][   T36]  ? unwind_next_frame+0xa6/0x2550
[  776.112941][   T36]  ? is_bpf_text_address+0x26/0x2b0
[  776.114720][   T36]  ? is_bpf_text_address+0x26/0x2b0
[  776.116431][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  776.118087][   T36]  ? kernel_text_address+0xa5/0xe0
[  776.119782][   T36]  ? __kernel_text_address+0xd/0x30
[  776.122379][   T36]  ? unwind_get_return_address+0x4d/0x90
[  776.124564][   T36]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  776.126963][   T36]  ? arch_stack_walk+0xfb/0x150
[  776.128879][   T36]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  776.130840][   T36]  ? __pfx_rtnl_newlink+0x10/0x10
[  776.134196][   T36]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  776.136589][   T36]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  776.139031][   T36]  ? netlink_sendmsg+0x5d4/0xb40
[  776.140948][   T36]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  776.143661][   T36]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  776.145859][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  776.147803][   T36]  netlink_rcv_skb+0x232/0x4b0
[  776.149672][   T36]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  776.152529][   T36]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  776.154700][   T36]  ? netlink_deliver_tap+0x2e/0x1b0
[  776.156738][   T36]  ? netlink_deliver_tap+0x2e/0x1b0
[  776.158814][   T36]  netlink_unicast+0x75c/0x8e0
[  776.160716][   T36]  netlink_sendmsg+0x813/0xb40
[  776.163338][   T36]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.165775][   T36]  ? aa_sock_msg_perm+0xf1/0x1b0
[  776.167807][   T36]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  776.169871][   T36]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.175106][   T36]  __sys_sendto+0x672/0x710
[  776.177019][   T36]  ? __pfx___sys_sendto+0x10/0x10
[  776.179008][   T36]  ? kvm_clock_get_cycles+0x47/0x60
[  776.185098][   T36]  ? __pfx_clockevents_program_event+0x10/0x10
[  776.188382][   T36]  __x64_sys_sendto+0xde/0x100
[  776.190468][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.194030][   T36]  do_syscall_64+0x15f/0xf80
[  776.195571][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.197343][   T36] RIP: 0033:0x7f1417d5d68e
[  776.198696][   T36] RSP: 002b:00007ffe2a0adde8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  776.202046][   T36] RAX: ffffffffffffffda RBX: 000055558e1b9500 RCX: 00007f1417d5d68e
[  776.204513][   T36] RDX: 000000000000002c RSI: 00007f1418b44670 RDI: 0000000000000003
[  776.206844][   T36] RBP: 0000000000000001 R08: 00007ffe2a0ade64 R09: 000000000000000c
[  776.209187][   T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  776.212101][   T36] R13: 0000000000000000 R14: 00007f1418b44670 R15: 0000000000000000
[  776.214577][   T36]  </TASK>
[  776.215529][   T36] INFO: task syz-executor:17842 blocked for more than 144 seconds.
[  776.217834][   T36]       Not tainted syzkaller #0
[  776.219461][   T36] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  776.223019][   T36] task:syz-executor    state:D stack:25400 pid:17842 tgid:17842 ppid:1      task_flags:0x400140 flags:0x00080002
[  776.227191][   T36] Call Trace:
[  776.228370][   T36]  <TASK>
[  776.229358][   T36]  __schedule+0x1821/0x5740
[  776.230945][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  776.238415][   T36]  ? __pfx_stack_trace_save+0x10/0x10
[  776.240379][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  776.242786][   T36]  ? __pfx___schedule+0x10/0x10
[  776.244397][   T36]  ? schedule+0x90/0x360
[  776.245756][   T36]  schedule+0x164/0x360
[  776.247066][   T36]  schedule_preempt_disabled+0x13/0x30
[  776.248834][   T36]  __mutex_lock+0x7f7/0x1550
[  776.250291][   T36]  ? __pfx___nla_validate_parse+0x10/0x10
[  776.252815][   T36]  ? __mutex_lock+0x608/0x1550
[  776.254483][   T36]  ? inet_rtm_newaddr+0x404/0x1ad0
[  776.256076][   T36]  ? __pfx___mutex_lock+0x10/0x10
[  776.257613][   T36]  ? __nla_parse+0x40/0x60
[  776.259058][   T36]  inet_rtm_newaddr+0x404/0x1ad0
[  776.260690][   T36]  ? unwind_get_return_address+0x4d/0x90
[  776.263048][   T36]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  776.265119][   T36]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  776.266812][   T36]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  776.268593][   T36]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  776.270163][   T36]  ? kmem_cache_alloc_node_noprof+0x384/0x690
[  776.272954][   T36]  ? netlink_sendmsg+0x5d4/0xb40
[  776.274636][   T36]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  776.276171][   T36]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  776.277844][   T36]  ? __lock_acquire+0x6b5/0x2cf0
[  776.279479][   T36]  netlink_rcv_skb+0x232/0x4b0
[  776.283391][   T36]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  776.285584][   T36]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  776.287334][   T36]  ? netlink_deliver_tap+0x2e/0x1b0
[  776.289205][   T36]  ? netlink_deliver_tap+0x2e/0x1b0
[  776.295530][   T36]  netlink_unicast+0x75c/0x8e0
[  776.297802][   T36]  netlink_sendmsg+0x813/0xb40
[  776.299413][   T36]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.301481][   T36]  ? aa_sock_msg_perm+0xf1/0x1b0
[  776.303057][   T36]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  776.304643][   T36]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.306219][   T36]  __sys_sendto+0x672/0x710
[  776.307585][   T36]  ? __pfx___sys_sendto+0x10/0x10
[  776.309091][   T36]  ? exc_page_fault+0x6a/0xc0
[  776.310510][   T36]  ? do_user_addr_fault+0xc6f/0x1340
[  776.314522][   T36]  __x64_sys_sendto+0xde/0x100
[  776.316054][   T36]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.317863][   T36]  do_syscall_64+0x15f/0xf80
[  776.319284][   T36]  ? trace_irq_disable+0x3b/0x140
[  776.320816][   T36]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.323050][   T36] RIP: 0033:0x7fd70915d68e
[  776.324499][   T36] RSP: 002b:00007ffdd1d34008 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  776.326984][   T36] RAX: ffffffffffffffda RBX: 000055555d803500 RCX: 00007fd70915d68e
[  776.329373][   T36] RDX: 0000000000000028 RSI: 00007fd709f44670 RDI: 0000000000000003
[  776.332136][   T36] RBP: 0000000000000001 R08: 00007ffdd1d34084 R09: 000000000000000c
[  776.334752][   T36] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  776.337599][   T36] R13: 0000000000000000 R14: 00007fd709f44670 R15: 0000000000000000
[  776.340573][   T36]  </TASK>
[  776.342318][   T36] 
[  776.342318][   T36] Showing all locks held in the system:
[  776.345139][   T36] 1 lock held by khungtaskd/36:
[  776.346630][   T36]  #0: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  776.350193][   T36] 2 locks held by getty/5438:
[  776.353031][   T36]  #0: ffff88810d6d80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  776.356733][   T36]  #1: ffffc900034732e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  776.360080][   T36] 6 locks held by kworker/u8:2/5486:
[  776.362174][   T36]  #0: ffff8881012b5940 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  776.365736][   T36]  #1: ffffc900040cfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  776.369016][   T36]  #2: ffffffff8fdc2568 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800
[  776.372275][   T36]  #3: ffff88811f0e8128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420
[  776.375523][   T36]  #4: ffff88811f0ed258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420
[  776.378836][   T36]  #5: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[  776.382397][   T36] 3 locks held by kworker/u9:15/6041:
[  776.384211][   T36]  #0: ffff8881000ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  776.387877][   T36]  #1: ffffc90007987c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  776.392963][   T36]  #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  776.398770][   T36] 3 locks held by kworker/0:11/7441:
[  776.400933][   T36]  #0: ffff88810006b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  776.407334][   T36]  #1: ffffc90008f5fc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  776.410572][   T36]  #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20
[  776.414446][   T36] 2 locks held by kworker/0:13/7463:
[  776.416153][   T36] 7 locks held by kworker/0:18/11167:
[  776.417871][   T36] 3 locks held by kworker/u8:6/14881:
[  776.419666][   T36]  #0: ffff88810d449940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860
[  776.425191][   T36]  #1: ffffc900037afc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860
[  776.430212][   T36]  #2: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[  776.434564][   T36] 1 lock held by syz-executor/17653:
[  776.436745][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  776.440192][   T36] 2 locks held by syz.5.3220/17677:
[  776.442689][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  776.446646][   T36]  #1: ffffffff8fe74aa0 (flowtable_lock){+.+.}-{4:4}, at: nf_flow_table_cleanup+0x21/0xb0
[  776.450726][   T36] 1 lock held by syz-executor/17689:
[  776.453686][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  776.457241][   T36] 7 locks held by syz-executor/17728:
[  776.459290][   T36]  #0: ffff88810f608410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90
[  776.463905][   T36]  #1: ffff88816bdf8080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540
[  776.467707][   T36]  #2: ffff88816f4be0f8 (kn->active#48){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540
[  776.472222][   T36]  #3: ffffffff8f650640 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370
[  776.476313][   T36]  #4: ffff8881685a0128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870
[  776.480436][   T36]  #5: ffff8881a8f68258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170
[  776.484942][   T36]  #6: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0
[  776.488703][   T36] 1 lock held by syz-executor/17799:
[  776.490747][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  776.495131][   T36] 1 lock held by syz-executor/17807:
[  776.497286][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  776.505335][   T36] 1 lock held by syz-executor/17815:
[  776.507506][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  776.510969][   T36] 1 lock held by syz-executor/17842:
[  776.516060][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  776.519805][   T36] 1 lock held by syz-executor/17849:
[  776.521921][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  776.524985][   T36] 1 lock held by syz-executor/17858:
[  776.526578][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  776.529440][   T36] 1 lock held by syz-executor/17869:
[  776.532088][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  776.535375][   T36] 1 lock held by syz-executor/17878:
[  776.537090][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  776.540073][   T36] 1 lock held by syz-executor/17888:
[  776.542077][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  776.545336][   T36] 1 lock held by syz-executor/17897:
[  776.547432][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  776.552062][   T36] 1 lock held by syz-executor/17912:
[  776.554231][   T36]  #0: ffffffff8fdd1280 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  776.557606][   T36] 
[  776.558364][   T36] =============================================
[  776.558364][   T36] 
[  776.560937][   T36] NMI backtrace for cpu 1
[  776.560960][   T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  776.560969][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  776.560974][   T36] Call Trace:
[  776.560992][   T36]  <TASK>
[  776.560998][   T36]  dump_stack_lvl+0xe8/0x150
[  776.561010][   T36]  nmi_cpu_backtrace+0x274/0x2d0
[  776.561020][   T36]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  776.561030][   T36]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  776.561042][   T36]  sys_info+0x135/0x170
[  776.561050][   T36]  watchdog+0xfd3/0x1030
[  776.561064][   T36]  ? watchdog+0x1c9/0x1030
[  776.561077][   T36]  kthread+0x389/0x470
[  776.561087][   T36]  ? __pfx_watchdog+0x10/0x10
[  776.561096][   T36]  ? __pfx_kthread+0x10/0x10
[  776.561105][   T36]  ret_from_fork+0x514/0xb70
[  776.561115][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  776.561123][   T36]  ? __switch_to+0xc79/0x1410
[  776.561135][   T36]  ? __pfx_kthread+0x10/0x10
[  776.561145][   T36]  ret_from_fork_asm+0x1a/0x30
[  776.561160][   T36]  </TASK>
[  776.594554][   T36] Sending NMI from CPU 1 to CPUs 0:
[  776.596306][    C0] NMI backtrace for cpu 0
[  776.596320][    C0] CPU: 0 UID: 0 PID: 11167 Comm: kworker/0:18 Not tainted syzkaller #0 PREEMPT(full) 
[  776.596336][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  776.596345][    C0] Workqueue: events rht_deferred_worker
[  776.596367][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[  776.596386][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 e9 c0 d7 37 0a cc 89 f6 31 d2 e9 66 66 7a 03 66 0f 1f 44 00
[  776.596394][    C0] RSP: 0018:ffffc90000006ff0 EFLAGS: 00000046
[  776.596432][    C0] RAX: 000000000000000f RBX: ffff888121023e40 RCX: 0000000000000838
[  776.596441][    C0] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000838
[  776.596449][    C0] RBP: ffffc900000070a8 R08: ffffffff81b2e675 R09: ffffffff9a4a0588
[  776.596458][    C0] R10: 0000000000000003 R11: ffffffff817446c0 R12: ffffffff817446c0
[  776.596465][    C0] R13: 1ffff110242047d1 R14: 0000000000000000 R15: ffff888121023e8c
[  776.596473][    C0] FS:  0000000000000000(0000) GS:ffff88818dc7a000(0000) knlGS:0000000000000000
[  776.596483][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  776.596492][    C0] CR2: 00007f4003d3d0d0 CR3: 000000000e74a000 CR4: 00000000000006f0
[  776.596525][    C0] Call Trace:
[  776.596531][    C0]  <IRQ>
[  776.596535][    C0]  lapic_next_event+0x11/0x20
[  776.596548][    C0]  clockevents_program_event+0x44e/0x630
[  776.596566][    C0]  ? __pfx_clockevents_program_event+0x10/0x10
[  776.596582][    C0]  ? tick_program_event+0x8f/0x120
[  776.596594][    C0]  __hrtimer_rearm_deferred+0x270/0x450
[  776.596612][    C0]  irqentry_exit+0x6d5/0x760
[  776.596634][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  776.596647][    C0] RIP: 0010:napi_skb_cache_get+0x1c4/0x780
[  776.596659][    C0] Code: 89 1c 24 74 07 e8 ec 94 50 f8 eb 29 4d 8d 7e 28 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 b0 d2 bb f8 49 83 3f 00 <0f> 85 e2 02 00 00 e8 c1 94 50 f8 65 48 8b 1d 61 30 c5 09 49 83 c6
[  776.596670][    C0] RSP: 0018:ffffc90000007208 EFLAGS: 00000246
[  776.596680][    C0] RAX: 1ffff11024207179 RBX: ffffffff89752f21 RCX: 0000000000000100
[  776.596689][    C0] RDX: ffff888115098000 RSI: 0000000000000000 RDI: 0000000000000000
[  776.596697][    C0] RBP: ffff888121038ba0 R08: ffffffff89752f21 R09: ffff888121038ba0
[  776.596706][    C0] R10: dffffc0000000000 R11: fffff52000000e84 R12: 0000000000000168
[  776.596714][    C0] R13: dffffc0000000000 R14: ffff888121038ba0 R15: ffff888121038bc8
[  776.596724][    C0]  ? napi_skb_cache_get+0x151/0x780
[  776.596741][    C0]  ? napi_skb_cache_get+0x151/0x780
[  776.596762][    C0]  ? napi_skb_cache_get+0x196/0x780
[  776.596778][    C0]  ? napi_skb_cache_get+0x151/0x780
[  776.596792][    C0]  ? __alloc_skb+0x186/0x7d0
[  776.596806][    C0]  __alloc_skb+0x19a/0x7d0
[  776.596825][    C0]  synproxy_send_client_synack+0x172/0xe30
[  776.596846][    C0]  ? __pfx_synproxy_send_client_synack+0x10/0x10
[  776.596861][    C0]  ? nft_tunnel_obj_init+0xc20/0x1960
[  776.596869][    C0]  ? synproxy_pernet+0x45/0x270
[  776.596879][    C0]  nft_synproxy_eval_v4+0x34a/0x4e0
[  776.596888][    C0]  ? __pfx_nft_synproxy_eval_v4+0x10/0x10
[  776.596898][    C0]  ? nf_ip_checksum+0x13c/0x510
[  776.596908][    C0]  nft_synproxy_do_eval+0x305/0x580
[  776.596916][    C0]  ? __ip_vs_conn_in_get+0xa6/0x10f0
[  776.596927][    C0]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  776.596937][    C0]  ? __pfx___ip_vs_conn_in_get+0x10/0x10
[  776.596947][    C0]  nft_do_chain+0x48d/0x1ae0
[  776.596957][    C0]  ? ip_vs_service_find+0x152/0x3c0
[  776.596966][    C0]  ? __pfx_nft_do_chain+0x10/0x10
[  776.596980][    C0]  ? nf_nat_inet_fn+0x95b/0xbf0
[  776.596993][    C0]  nft_do_chain_inet+0x360/0x4b0
[  776.597003][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  776.597013][    C0]  ? nf_nat_ipv4_local_in+0x223/0x720
[  776.597020][    C0]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  776.597034][    C0]  nf_hook_slow+0xc5/0x220
[  776.597043][    C0]  NF_HOOK+0x21f/0x3c0
[  776.597050][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  776.597058][    C0]  ? NF_HOOK+0x9e/0x3c0
[  776.597064][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  776.597070][    C0]  ? ip_rcv_finish_core+0xda3/0x1c00
[  776.597077][    C0]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  776.597086][    C0]  ? ip_local_deliver+0x12a/0x1b0
[  776.597093][    C0]  NF_HOOK+0x336/0x3c0
[  776.597100][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  776.597107][    C0]  ? NF_HOOK+0x9e/0x3c0
[  776.597113][    C0]  ? __pfx_NF_HOOK+0x10/0x10
[  776.597120][    C0]  ? __pfx_ip_rcv_finish+0x10/0x10
[  776.597128][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  776.597135][    C0]  ? __pfx_ip_rcv+0x10/0x10
[  776.597141][    C0]  ? process_backlog+0x3eb/0x1950
[  776.597150][    C0]  process_backlog+0xaa3/0x1950
[  776.597163][    C0]  __napi_poll+0xae/0x340
[  776.597170][    C0]  ? skb_defer_free_flush+0x233/0x260
[  776.597179][    C0]  net_rx_action+0x627/0xf70
[  776.597191][    C0]  ? __pfx_net_rx_action+0x10/0x10
[  776.597199][    C0]  ? xfrm_dev_backlog+0x24b/0x3c0
[  776.597211][    C0]  ? net_tx_action+0x5b6/0xc30
[  776.597220][    C0]  ? net_tx_action+0xbfb/0xc30
[  776.597229][    C0]  handle_softirqs+0x22a/0x840
[  776.597238][    C0]  ? __irq_exit_rcu+0xca/0x220
[  776.597246][    C0]  __irq_exit_rcu+0xca/0x220
[  776.597253][    C0]  irq_exit_rcu+0x9/0x30
[  776.597259][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  776.597269][    C0]  </IRQ>
[  776.597271][    C0]  <TASK>
[  776.597274][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  776.597281][    C0] RIP: 0010:__slab_free+0xb3/0x2c0
[  776.597291][    C0] Code: 09 c1 89 4c 24 38 4d 85 ed 89 44 24 04 74 45 85 c0 74 41 45 31 e4 41 f6 46 0a 20 74 66 48 89 de 48 8b 5c 24 30 48 8b 4c 24 38 <48> 8b 44 24 40 48 8b 54 24 48 f0 48 0f c7 4e 20 48 89 f3 0f 84 e8
[  776.597298][    C0] RSP: 0018:ffffc9000351f7a0 EFLAGS: 00000202
[  776.597304][    C0] RAX: 0000000000000012 RBX: ffff88816c430780 RCX: 0000000800150012
[  776.597309][    C0] RDX: ffff88816c430780 RSI: ffffea0005b10c00 RDI: ffff888160418b40
[  776.597314][    C0] RBP: ffffc9000351f830 R08: 0000000000000000 R09: ffffffff8231143e
[  776.597319][    C0] R10: dffffc0000000000 R11: fffffbfff206239f R12: 0000000000000000
[  776.597324][    C0] R13: ffff88816c430600 R14: ffff888160418b40 R15: 0000000000000000
[  776.597330][    C0]  ? qlist_free_all+0x8e/0x100
[  776.597344][    C0]  ? qlist_free_all+0x8e/0x100
[  776.597352][    C0]  qlist_free_all+0x99/0x100
[  776.597361][    C0]  kasan_quarantine_reduce+0x148/0x160
[  776.597374][    C0]  __kasan_slab_alloc+0x22/0x80
[  776.597388][    C0]  __kvmalloc_node_noprof+0x4d7/0x8a0
[  776.597442][    C0]  ? bucket_table_alloc+0x63/0x370
[  776.597460][    C0]  ? __kvmalloc_node_noprof+0x393/0x8a0
[  776.597480][    C0]  bucket_table_alloc+0x63/0x370
[  776.597496][    C0]  rhashtable_rehash_alloc+0x8b/0x120
[  776.597512][    C0]  rht_deferred_worker+0x511/0x2180
[  776.597528][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  776.597546][    C0]  ? irqentry_exit+0x218/0x760
[  776.597559][    C0]  ? process_scheduled_works+0xa70/0x1860
[  776.597570][    C0]  ? process_scheduled_works+0xa70/0x1860
[  776.597576][    C0]  ? process_scheduled_works+0xa70/0x1860
[  776.597583][    C0]  process_scheduled_works+0xb5d/0x1860
[  776.597597][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  776.597605][    C0]  ? assign_work+0x3d5/0x5e0
[  776.597613][    C0]  worker_thread+0xa53/0xfc0
[  776.597626][    C0]  kthread+0x389/0x470
[  776.597634][    C0]  ? __pfx_worker_thread+0x10/0x10
[  776.597641][    C0]  ? __pfx_kthread+0x10/0x10
[  776.597649][    C0]  ret_from_fork+0x514/0xb70
[  776.597658][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  776.597665][    C0]  ? __switch_to+0xc79/0x1410
[  776.597675][    C0]  ? __pfx_kthread+0x10/0x10
[  776.597684][    C0]  ret_from_fork_asm+0x1a/0x30
[  776.597697][    C0]  </TASK>
[  776.866077][   T36] Kernel panic - not syncing: hung_task: blocked tasks
[  776.868697][   T36] CPU: 1 UID: 0 PID: 36 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  776.872101][   T36] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  776.875880][   T36] Call Trace:
[  776.877177][   T36]  <TASK>
[  776.878340][   T36]  vpanic+0x56c/0xa60
[  776.879933][   T36]  ? __pfx___schedule+0x10/0x10
[  776.881827][   T36]  ? __pfx_vpanic+0x10/0x10
[  776.883590][   T36]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  776.885919][   T36]  panic+0xc5/0xd0
[  776.887356][   T36]  ? __pfx_panic+0x10/0x10
[  776.889111][   T36]  ? preempt_schedule_thunk+0x16/0x30
[  776.891140][   T36]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  776.893233][   T36]  watchdog+0x102c/0x1030
[  776.894570][   T36]  ? watchdog+0x1c9/0x1030
[  776.895917][   T36]  kthread+0x389/0x470
[  776.897130][   T36]  ? __pfx_watchdog+0x10/0x10
[  776.898570][   T36]  ? __pfx_kthread+0x10/0x10
[  776.899958][   T36]  ret_from_fork+0x514/0xb70
[  776.901350][   T36]  ? __pfx_ret_from_fork+0x10/0x10
[  776.902880][   T36]  ? __switch_to+0xc79/0x1410
[  776.904284][   T36]  ? __pfx_kthread+0x10/0x10
[  776.905626][   T36]  ret_from_fork_asm+0x1a/0x30
[  776.907054][   T36]  </TASK>
[  776.908608][   T36] Kernel Offset: disabled
[  776.909966][   T36] Rebooting in 86400 seconds..
