last executing test programs:

2.600846366s ago: executing program 0 (id=755):
r0 = socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1200000013000500000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00a000000000000008001a80040007003cfccc7ec39d3a5025fb04b4191c8bc87efafff5fbfcfa7f164becb9324bba50800a396498a6e2a5c6c53e40f0bacde4fdedc9d5b6a804521d5016daf2e7a25006208079a3aa970de21a314b149803c6c2dc38243857bed104509056625191d082284c6266493b76748ce87b5b16abeedab4e6204383346687d7b7fbcc43c9fde2ed931b97c8f8762698c0018773c033e0c40b69cf10954671db0ae156109d1db2a6c07898ccc3d9ac2a24df1d73959da9ba7b886966b97bf2f78d0cf29ffa6c62444a43f07ddf638504e7632efe0674c258c23348be99431c61f15637"], 0x28}}, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e29, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0xf}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0xc081, 0x4)

2.551269305s ago: executing program 0 (id=757):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00'}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x58, &(0x7f0000000540)}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380050003"], 0x38}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.550177565s ago: executing program 0 (id=759):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@ipv6_newrule={0x54, 0x20, 0x1, 0x0, 0x0, {0xa, 0x20, 0x20}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8, 0x6, 0x7fffffff}, @FRA_SRC={0x14, 0x2, @private0}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_DST={0x14, 0x1, @remote}]}, 0x54}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r3}, 0x8)
close(r4)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3}, 0x50)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r5, r7, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r4}, 0x20)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000380)=0x4)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
vmsplice(r9, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={r1, <r10=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x1f, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@call={0x85, 0x0, 0x0, 0x82}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x54, &(0x7f0000000440)=""/84, 0x40f00, 0x57, '\x00', r8, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0xc, 0x5d7, 0xbafc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000800)=[r1, r1, r1, r10, r1, r1, r1, r1, r1], &(0x7f00000008c0)=[{0x0, 0x2, 0x6, 0xa}, {0x5, 0x5, 0x10, 0x7}, {0x3, 0x2, 0x6, 0x5}, {0x2, 0x3, 0xf, 0xb}], 0x10, 0x8}, 0x94)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000200))
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6)

2.320170005s ago: executing program 1 (id=765):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$llc_int(r3, 0x10c, 0x7, 0x0, 0x0)
connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r2, r2, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
shutdown(r2, 0x1)
r6 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={<r7=>0xffffffffffffffff})
ioctl$FIDEDUPERANGE(r7, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"])
ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}})
listen(r0, 0x2)

1.669202472s ago: executing program 0 (id=768):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'})
socketpair(0x1, 0x1, 0x0, 0x0)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x42, 0x0, 0x0)
close(r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
r6 = accept(r3, 0x0, &(0x7f0000000200))
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x100000}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00008d46b0a54cf571885aaa6fce24f600", @ANYRES16=r12, @ANYBLOB="01002cbd701004000000050000000600010004000000080009000200000008000b000000000008000c00a80a00000500140003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)
sendmsg$L2TP_CMD_TUNNEL_GET(r11, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x888000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r12, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4085)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x80, 0x8, 0x6, 0x6, {{0x18, 0x4, 0x3, 0x3a, 0x60, 0x67, 0x0, 0x5, 0x4, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x4c, 0xfd, 0x3, 0x2, [{@loopback, 0x9dde}, {@broadcast, 0x4}, {@multicast2, 0x6000}, {@multicast2, 0x1}, {@multicast2, 0x10000}, {@rand_addr=0x64010101, 0x81}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@rand_addr=0x64010102, 0x6}]}]}}}}})
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)

1.424093147s ago: executing program 1 (id=769):
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}}, 0x8000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000030a01080000000000000000010040000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000088000000060a010400000000000000000100000008000b40000000000900010073797a3000000000600004805c0001800b0001007470726f787900004c0002800800034000000016080001"], 0x110}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r2, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f)
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
r4 = socket(0x10, 0x3, 0x0)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_int(r5, 0x29, 0x3e, 0x0, &(0x7f0000000400))
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newnexthop={0x24, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0x4}, @NHA_BLACKHOLE={0x4}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @loopback}, 0x10)

1.4117819s ago: executing program 1 (id=771):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x26, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x12d}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_RATE={0x14, 0x6, {0x1, 0x80, 0x7, 0x7a7}}]}}}]}, 0x6c}}, 0x20000000)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0)

761.63966ms ago: executing program 0 (id=775):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000980)={0xa, 0x2, 0x400, @loopback, 0xfffffffd}, 0x71)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x28, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7238e060774925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0x132)
sendto$inet6(r0, &(0x7f0000000740)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c)
shutdown(r0, 0x2)

761.322721ms ago: executing program 0 (id=776):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000080)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}], 0x1, 0x40088d4)
shutdown(r2, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x2, @private0, 0x47}, 0x1c)
getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f00000001c0))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
r3 = socket$kcm(0x11, 0xa, 0x300)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000200)=<r5=>0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000280)=r5, 0x12)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x6, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6}}}}}}}}, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0)

501.475164ms ago: executing program 1 (id=777):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) (async)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async)
r1 = socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x18}}, 0x15) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x401c5820, 0x0) (async)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x30004000) (async, rerun: 32)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async)
sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)=ANY=[@ANYBLOB="97cc0100", @ANYRES16=r7, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async, rerun: 64)
sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@ipv6_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0xfd, 0x0, 0xc8, 0x7}}, 0x1c}}, 0x0) (rerun: 64)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_delroute={0x1c, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x10, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x800}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x0) (async)
connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @broadcast, 'veth0\x00'}}, 0x1e)
r9 = socket$pppoe(0x18, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x13, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000880000000400000000000000"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0xbb428eaf468c6595, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32)
connect$pppoe(r9, &(0x7f0000000080)={0x18, 0x0, {0xd, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'veth1\x00'}}, 0x1e) (rerun: 32)
r10 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40a40, 0x0)
ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000040)=0x2) (async, rerun: 64)
r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
sendmsg$nl_route(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x240088d4}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd4, 0xd4, 0x6, [@enum={0x4, 0x9, 0x0, 0x6, 0x4, [{0x9}, {0x5, 0x9}, {0x9, 0xc0}, {0x2, 0x1000}, {0xd, 0x2}, {0x3, 0x6}, {0xe, 0x5}, {0xe}, {0x9}]}, @ptr={0xc, 0x0, 0x0, 0x2, 0x5}, @var={0xa, 0x0, 0x0, 0xe, 0x3, 0x2}, @func={0x2, 0x0, 0x0, 0xc, 0x1}, @const={0xe}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x7e, 0x0, 0x32, 0x5}, @struct={0xa, 0x2, 0x0, 0x4, 0x1, 0x14df, [{0xf, 0x4, 0x2}, {0x9, 0x4, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x9}}]}, {0x0, [0x5f, 0x61, 0x0, 0x61]}}, &(0x7f0000000540)=""/179, 0xf2, 0xb3, 0x0, 0x7ff}, 0x28)
ioctl$PPPIOCATTCHAN(r10, 0x40047438, &(0x7f0000000380))

402.005123ms ago: executing program 1 (id=778):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'erspan0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x2, [@enum64={0x7, 0x9, 0x0, 0x13, 0x1, 0x6, [{0xa, 0xfffffff9, 0x6ad}, {0x7, 0x23d, 0x4}, {0xc, 0x3760, 0x3}, {0xd, 0x4, 0x9}, {0xc, 0xd8, 0x8}, {0xe, 0x8, 0x1}, {0x10, 0x7, 0xffff}, {0x2, 0xfffff69b, 0x2}, {0xd, 0x5, 0x8}]}, @decl_tag={0x6, 0x0, 0x0, 0x11, 0x5}, @ptr={0x4, 0x0, 0x0, 0x2, 0x2}, @fwd={0x10}, @typedef={0xf}, @restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x3}, @func={0x7, 0x0, 0x0, 0xc, 0x2}]}}, 0x0, 0xea, 0x0, 0x0, 0x1}, 0x28)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[], 0x1dc}}, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCBRDELBR(r4, 0x89a2, &(0x7f0000000200)='bridge0\x00')
ioctl$sock_SIOCBRDELBR(r3, 0x89a3, &(0x7f0000000200)='bridge0\x00')
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b05, &(0x7f0000000000)={'wlan0\x00'})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r8, 0xc6e9f000)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r9, 0xd1383000)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x1000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0xffffc000)
vmsplice(r7, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x15)
socket$inet6(0xa, 0x3, 0x5)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0)
openat$cgroup_procs(r11, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private1, @in=@private=0xa010102, 0x8, 0x0, 0xfffc, 0x41, 0x2, 0x0, 0x0, 0x0, r1}, {0x5, 0x3, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x4, 0x0, 0x80000000000000}, {0x400, 0x3, 0x2, 0x800}, 0x8, 0xfffffffe, 0x0, 0x0, 0x2}, {{@in=@broadcast, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8)
ioctl$sock_bt_bnep_BNEPGETCONNLIST(0xffffffffffffffff, 0x800442d2, &(0x7f0000000080)={0x4, &(0x7f0000000380)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @dev}, {}, {0x0, 0x0, 0x0, @multicast}]})

316.997012ms ago: executing program 2 (id=779):
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000004c0)=@generic={&(0x7f0000000480)='./file0\x00'}, 0x18)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r0, 0x58, &(0x7f0000000540)}, 0x10)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd0900110000060015000200000014001680100008800c000380050003"], 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x1}]}}]}, 0x44}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

312.339698ms ago: executing program 1 (id=780):
r0 = socket$kcm(0xa, 0x3, 0x73)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000280)=@l2tp6={0xa, 0x0, 0x200101, @mcast2}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x116, 0x37, "e7f2d6"}, {0x108, 0x108, 0x2, "49e93bfb448c14df5b72be42f9c572327e123673e8e2713660105017b1c573ed802ab3a2dde2bab455ca7f008c26cd0cd643841de32b6f8498bef5ee330ef1e9c8ba79dccae3393f5ca220322128a18b6e7ee069d8735d66b69d4c2242e28d359dce9e47a81b8836055587f13e47d3f5b6963470ea7f70bc5c9434bb7800dfd14a915dc19d4382e2b8710bcfaef930f770b6ad7b7d6c445399a69cf6bfb6239b1b9c62c4d3bbc09b48fc8d83ab9ad97798d749eb6fec65f79de47e44d5e22dd07da01e099187e785be7b95f033407498bef3515afad355c729ef5241245fe1b101ece903abda256a44294255522f3a94681ec3b38e5e926a"}], 0x120}, 0x4004814)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000300), 0x4)
r2 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r2, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000180))
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c0000000300000000000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000b00000000000000ff7f000018110000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=@getae={0x40, 0x1f, 0x319, 0x0, 0x0, {{@in=@empty}, @in6=@mcast2}}, 0x40}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32=0x0, @ANYBLOB="0000000000000041bfff00000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xc8, &(0x7f0000000380)=""/200, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xecc}, 0x94)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6)
getsockname$qrtr(r2, &(0x7f0000000480), &(0x7f00000004c0)=0xc)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)
r5 = socket$pppl2tp(0x18, 0x1, 0x1)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x4, 0x0, 0x1, 0x4, {0xa, 0x8, 0x7fff, @mcast1, 0x7}}}, 0x32)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @empty}, 0x2, 0x2, 0x0, 0xfffffffc}}, 0x2e)
sendmsg$L2TP_CMD_TUNNEL_GET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r8, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0)
socket$rxrpc(0x21, 0x2, 0x2)
listen(r5, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000380))

261.554219ms ago: executing program 2 (id=781):
r0 = socket(0x10, 0x80003, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

261.141758ms ago: executing program 2 (id=782):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x7}, 0x1c)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a)
sendfile(r1, r2, 0x0, 0xffffffff000)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
shutdown(r1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0) (async)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@empty}, 0x0, @in=@loopback}}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x150, 0x10, 0x100, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2f, 0x0, r4}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa76902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080) (async)
sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newsa={0x150, 0x10, 0x100, 0x70bd29, 0x0, {{@in=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2f, 0x0, r4}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback={0x100000000000000}, {0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0x80000, 0x81}, {0x0, 0x5, 0x4, 0x4000006}, {0x0, 0xfffffff9, 0x80000}, 0x0, 0x0, 0x2, 0x1, 0x81, 0x68}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "25cac5216d3c8af0aa76902918bf448c5d9f5459"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x20000080)
sendto$inet6(r0, &(0x7f0000000340)='g', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0x5)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
recvmmsg(r5, &(0x7f0000001d40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000480)=[{&(0x7f0000000100)=""/110, 0x6e}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/155, 0x9b}, {&(0x7f0000000240)=""/42, 0x2a}, {&(0x7f0000000300)=""/63, 0x3f}], 0x6, &(0x7f0000000800)=""/62, 0x3e}, 0x200}, {{&(0x7f0000000840)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000001c00)=[{&(0x7f00000008c0)=""/93, 0x5d}, {&(0x7f0000000940)=""/68, 0x44}, {&(0x7f00000009c0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/162, 0xa2}, {&(0x7f0000001a80)=""/234, 0xea}, {&(0x7f0000001b80)=""/93, 0x5d}], 0x6, &(0x7f0000001c80)=""/172, 0xac}, 0x6}], 0x2, 0x10002, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
shutdown(r0, 0x1) (async)
shutdown(r0, 0x1)

72.202595ms ago: executing program 2 (id=783):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg(r1, &(0x7f0000009640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1073eedab59a32", 0x7}, {&(0x7f0000000240)="02a2f97a177137003d9b418698b97c81bf1bde7a9b76365fd7b1bbae5f5e09cb9b4432ed011564c718321c92affddb69470547b1baefcdb5445c31a7d34e0b20bddd0e2357b50d72", 0x48}, {&(0x7f00000038c0)="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", 0x231}], 0x3}}], 0x1, 0x8810)
recvmsg$unix(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060)
r2 = socket(0x10, 0x80003, 0x0)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040000"], 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff)
read$alg(r2, &(0x7f0000000100), 0x0)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="478800000000000000df0500000008000100fe"], 0x1c}}, 0x4090)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

630.553µs ago: executing program 2 (id=784):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)='\a/', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff0000}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7c}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x400e0}, 0x80)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) (async)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) (async)
sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000780)='\a/', 0x2}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x94, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x54, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xa}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffff0000}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x6}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x7c}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x400e0}, 0x80) (async)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, 0x0) (async)

0s ago: executing program 2 (id=785):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "c4d65ab71f5ef2fe", "9e8ecc7bb5352776725e104757e7dc25c6519a85efb17b5508000018bb00", "0900b43f"}, 0x38)
setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x6b5d8cb34fece1f9, &(0x7f0000000380)="3951bbd696267875f2db4dad12d9376e1b4e0b65057f1caa75d4f3a5f18fc1ea539c9ae58d1d8bdb3c74f218d20c147df5f1d80f5d20840e213d9d0d82088200e72bdee28ff3df72d6585ec06d16a56abab2fb3f9bd847e84bd896ce840d400def00c718985eb08ee5fecfbfd89ba058bf8d083cde3a34c3555bbb6a7488c231b2d8326c3018e155b230e1521731d5cd77a5843954690cff93fe", 0x9a)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x44080)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x9, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x5}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x3}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x98100000}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x1ff}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x356}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0xfffffff9, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, 0x3c}, 0x8, 0x3000000000002}, 0x0)
socket(0x40000000015, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30, 0x4040050}], 0x1, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r6, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10)
sendmmsg(r6, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:15441' (ED25519) to the list of known hosts.
syzkaller login: [   49.179307][ T5816] cgroup: Unknown subsys name 'net'
[   49.324634][ T5816] cgroup: Unknown subsys name 'cpuset'
[   49.328886][ T5816] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.776477][ T5816] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.081148][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.084473][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.087228][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.090760][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.094153][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.186471][ T5830] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.190087][ T5830] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.193216][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.196629][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.199528][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.229860][ T5835] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.236600][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.240264][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.243834][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.247038][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.288659][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   55.405747][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.409257][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.412476][ T5827] bridge_slave_0: entered allmulticast mode
[   55.415772][ T5827] bridge_slave_0: entered promiscuous mode
[   55.419633][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.422963][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.426132][ T5827] bridge_slave_1: entered allmulticast mode
[   55.428772][ T5827] bridge_slave_1: entered promiscuous mode
[   55.455405][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.460331][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.486475][ T5827] team0: Port device team_slave_0 added
[   55.492987][ T5827] team0: Port device team_slave_1 added
[   55.519134][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.521453][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.529895][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.536720][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.538955][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.547510][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.620112][ T5827] hsr_slave_0: entered promiscuous mode
[   55.622654][ T5827] hsr_slave_1: entered promiscuous mode
[   55.632132][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   55.693803][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   55.802610][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.805045][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.807391][ T5832] bridge_slave_0: entered allmulticast mode
[   55.810026][ T5832] bridge_slave_0: entered promiscuous mode
[   55.824629][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.826864][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.829299][ T5836] bridge_slave_0: entered allmulticast mode
[   55.833144][ T5836] bridge_slave_0: entered promiscuous mode
[   55.836443][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.839232][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.841968][ T5832] bridge_slave_1: entered allmulticast mode
[   55.845665][ T5832] bridge_slave_1: entered promiscuous mode
[   55.853974][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.856988][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.860044][ T5836] bridge_slave_1: entered allmulticast mode
[   55.864754][ T5836] bridge_slave_1: entered promiscuous mode
[   55.910630][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.915427][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.923961][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.944999][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.968785][ T5832] team0: Port device team_slave_0 added
[   55.994955][ T5832] team0: Port device team_slave_1 added
[   55.999561][ T5836] team0: Port device team_slave_0 added
[   56.004810][ T5836] team0: Port device team_slave_1 added
[   56.061445][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.065939][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.075998][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.080449][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.083654][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.092614][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.096582][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.103972][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.106177][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.114670][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.119082][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.121314][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.130149][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.145913][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.151286][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.172560][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.187802][ T5832] hsr_slave_0: entered promiscuous mode
[   56.190335][ T5832] hsr_slave_1: entered promiscuous mode
[   56.193194][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.195887][ T5832] Cannot create hsr debugfs directory
[   56.250132][ T5836] hsr_slave_0: entered promiscuous mode
[   56.253603][ T5836] hsr_slave_1: entered promiscuous mode
[   56.256512][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.259634][ T5836] Cannot create hsr debugfs directory
[   56.277520][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.280316][ T5827] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.283311][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.285823][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.310098][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.316539][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.525599][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.535658][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.540658][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.545471][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.593829][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.627041][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.634245][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.647992][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.660016][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   56.662770][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.677050][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.679777][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.703348][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.706339][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.744944][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.773533][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   56.814107][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.816751][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.837967][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.840494][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.853978][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.876872][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.888366][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   56.894010][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.896613][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.916683][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.919093][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.960089][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.002623][ T5827] veth0_vlan: entered promiscuous mode
[   57.008805][ T5827] veth1_vlan: entered promiscuous mode
[   57.026067][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.039780][ T5827] veth0_macvtap: entered promiscuous mode
[   57.054350][ T5827] veth1_macvtap: entered promiscuous mode
[   57.075571][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.085878][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.093455][ T5827] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.096422][ T5827] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.099313][ T5827] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.103149][ T5827] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.138002][ T5836] veth0_vlan: entered promiscuous mode
[   57.145132][ T5836] veth1_vlan: entered promiscuous mode
[   57.155132][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.164182][ T5835] Bluetooth: hci0: command tx timeout
[   57.196014][ T5836] veth0_macvtap: entered promiscuous mode
[   57.196055][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.202331][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.233220][ T5836] veth1_macvtap: entered promiscuous mode
[   57.240564][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.246174][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.246731][ T5832] veth0_vlan: entered promiscuous mode
[   57.251660][ T5835] Bluetooth: hci1: command tx timeout
[   57.269762][ T5832] veth1_vlan: entered promiscuous mode
[   57.278588][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.295971][ T5827] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.297362][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.315373][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.318722][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.322362][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.322937][ T5835] Bluetooth: hci2: command tx timeout
[   57.325600][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.367789][ T5891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'.
[   57.390800][ T5832] veth0_macvtap: entered promiscuous mode
[   57.404268][ T5832] veth1_macvtap: entered promiscuous mode
[   57.443158][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.449524][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.461386][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.471617][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.476314][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.479162][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.486182][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.489232][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.506384][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.509917][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.570068][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.574535][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.612860][   T28] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.622217][   T28] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.690396][ T5905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.708911][ T5905] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[   57.881150][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15'.
[   57.886656][ T5929] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[   57.889442][ T5929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   57.968401][ T5941] sctp: [Deprecated]: syz.0.16 (pid 5941) Use of int in max_burst socket option.
[   57.968401][ T5941] Use struct sctp_assoc_value instead
[   58.591397][ T6011] netlink: 'syz.0.28': attribute type 5 has an invalid length.
[   58.633717][ T6011] netlink: 'syz.0.28': attribute type 1 has an invalid length.
[   58.657453][ T6011] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.28'.
[   59.241833][ T5835] Bluetooth: hci0: command tx timeout
[   59.321824][ T5835] Bluetooth: hci1: command tx timeout
[   59.401926][ T5835] Bluetooth: hci2: command tx timeout
[   59.595092][ T6072] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.43'.
[   59.765477][ T6082] netlink: 'syz.0.47': attribute type 13 has an invalid length.
[   59.778139][ T6082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.47'.
[   59.781063][ T6082] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[   59.897942][ T6088] netlink: 24 bytes leftover after parsing attributes in process `syz.1.49'.
[   59.902644][ T6088] bond0: invalid ARP target 0.0.0.0 specified for addition
[   59.905082][ T6088] bond0: option arp_ip_target: invalid value (0)
[   60.165044][ T6109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.59'.
[   60.410337][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'.
[   60.728247][ T6147] team0 (unregistering): Port device team_slave_0 removed
[   60.738163][ T6147] team0 (unregistering): Port device team_slave_1 removed
[   60.838724][ T6166] sctp: [Deprecated]: syz.1.79 (pid 6166) Use of struct sctp_assoc_value in delayed_ack socket option.
[   60.838724][ T6166] Use struct sctp_sack_info instead
[   61.321665][ T5835] Bluetooth: hci0: command tx timeout
[   61.402441][ T5835] Bluetooth: hci1: command tx timeout
[   61.482113][ T5835] Bluetooth: hci2: command tx timeout
[   61.544809][ T6204] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   62.211608][    C1] af_packet: tpacket_rcv: packet too big, clamped from 70 to 4294967286. macoff=82
[   62.232140][ T6240] nbd: socks must be embedded in a SOCK_ITEM attr
[   62.237624][ T6240] block nbd0: shutting down sockets
[   62.570964][ T6265] vlan0: entered promiscuous mode
[   62.928554][ T6292] syz.1.131 uses obsolete (PF_INET,SOCK_PACKET)
[   63.402215][ T5835] Bluetooth: hci0: command tx timeout
[   63.482553][ T5835] Bluetooth: hci1: command tx timeout
[   63.544741][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.142'.
[   63.572552][ T5835] Bluetooth: hci2: command tx timeout
[   63.963206][ T6346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.153'.
[   64.039027][ T6354] dvmrp8: entered allmulticast mode
[   64.042882][ T6353] dvmrp8: left allmulticast mode
[   64.100052][ T6360] netlink: 'syz.2.160': attribute type 1 has an invalid length.
[   64.237921][ T6369] netlink: 20 bytes leftover after parsing attributes in process `syz.1.164'.
[   64.239582][ T6371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'.
[   64.245948][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'.
[   64.473400][ T6394] netlink: 'syz.1.176': attribute type 1 has an invalid length.
[   64.478826][ T6394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   64.625072][ T6409] netlink: 'syz.1.183': attribute type 6 has an invalid length.
[   64.627746][ T6409] netlink: 32 bytes leftover after parsing attributes in process `syz.1.183'.
[   64.698643][ T6417] Bluetooth: MGMT ver 1.23
[   64.749972][ T6417] Zero length message leads to an empty skb
[   64.783060][ T6417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.821259][ T6422] netlink: 60 bytes leftover after parsing attributes in process `syz.0.187'.
[   64.826268][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.0.187'.
[   64.843947][ T6417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.914611][ T6417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   64.964235][ T6417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.025658][ T6417] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.035143][ T6417] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.044478][ T6417] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.054273][ T6417] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.267677][ T6435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.192'.
[   65.364428][ T6441] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.195'.
[   65.608653][ T6456] netlink: 'syz.2.201': attribute type 1 has an invalid length.
[   66.015155][ T6474] sctp: [Deprecated]: syz.0.208 (pid 6474) Use of int in max_burst socket option deprecated.
[   66.015155][ T6474] Use struct sctp_assoc_value instead
[   66.047499][ T6480] veth0_virt_wifi: entered allmulticast mode
[   66.227883][ T6493] vlan2: entered promiscuous mode
[   66.230200][ T6493] bridge0: entered promiscuous mode
[   66.245930][ T6493] vlan2: entered allmulticast mode
[   66.255240][ T6493] bridge0: entered allmulticast mode
[   66.276945][ T6493] bridge_slave_0: left allmulticast mode
[   66.278851][ T6493] bridge_slave_0: left promiscuous mode
[   66.281099][ T6493] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.286995][ T6493] bridge_slave_1: left allmulticast mode
[   66.289478][ T6493] bridge_slave_1: left promiscuous mode
[   66.294623][ T6493] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.303701][ T6493] bond0: (slave bond_slave_0): Releasing backup interface
[   66.315630][ T6493] bond0: (slave bond_slave_1): Releasing backup interface
[   66.322392][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.324839][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_0
[   66.328060][ T6493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.330575][ T6493] batman_adv: batadv0: Removing interface: batadv_slave_1
[   66.816255][ T6519] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.819438][ T6519] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.893586][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   66.905670][ T6519] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   66.978993][ T6519] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.983258][ T6519] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.986642][ T6519] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[   66.989948][ T6519] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[   67.842398][ T6547] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   68.495788][  T789] IPVS: starting estimator thread 0...
[   68.563554][ T6586] tipc: Enabling of bearer <5dp:s> rejected, media not registered
[   68.572610][ T6586] __nla_validate_parse: 11 callbacks suppressed
[   68.572619][ T6586] netlink: 116 bytes leftover after parsing attributes in process `syz.0.240'.
[   68.581819][ T6584] IPVS: using max 80 ests per chain, 192000 per kthread
[   68.711316][ T6598] netlink: 20 bytes leftover after parsing attributes in process `syz.2.243'.
[   68.810643][ T6602] warning: `syz.0.245' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   68.894440][ T6604] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[   68.908326][ T6604] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[   68.949322][ T6607] netlink: 24 bytes leftover after parsing attributes in process `syz.1.247'.
[   69.023799][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.247'.
[   69.693855][ T6619] 8021q: adding VLAN 0 to HW filter on device bond1
[   69.712604][ T6619] bond0: (slave bond1): Enslaving as an active interface with an up link
[   69.844013][ T6623] geneve2: entered promiscuous mode
[   70.020557][ T6631] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma?
[   70.026959][ T6633] sctp: [Deprecated]: syz.2.253 (pid 6633) Use of int in maxseg socket option.
[   70.026959][ T6633] Use struct sctp_assoc_value instead
[   70.268308][ T6632] veth0_virt_wifi: left allmulticast mode
[   70.287286][ T6632] vlan0: left promiscuous mode
[   70.330879][ T6632] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.335463][ T6632] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.339257][ T6632] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.343536][ T6632] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   70.406385][ T6632] vlan2: left promiscuous mode
[   70.409179][ T6632] bridge0: left promiscuous mode
[   70.411387][ T6632] vlan2: left allmulticast mode
[   70.414869][ T6632] bridge0: left allmulticast mode
[   70.459640][ T6640] bond0: Unable to set down delay as MII monitoring is disabled
[   70.775434][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0
[   70.779544][ T6653] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   71.007277][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   71.010024][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.107135][ T6660] syzkaller0: entered promiscuous mode
[   71.109756][ T6660] syzkaller0: entered allmulticast mode
[   71.130412][ T6660] bond0: (slave bond1): Error -95 calling ndo_bpf
[   71.137970][ T6660] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[   71.188289][ T6668] syzkaller1: entered promiscuous mode
[   71.190517][ T6668] syzkaller1: entered allmulticast mode
[   71.205183][ T6668] ieee802154 phy0 wpan0: encryption failed: -90
[   71.207614][ T6669] ieee802154 phy0 wpan0: encryption failed: -90
[   71.411391][ T6673] netlink: 'syz.1.265': attribute type 2 has an invalid length.
[   71.417498][   T33] audit: type=1107 audit(1752066637.620:2): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   71.663845][ T6690] bridge0: port 1(erspan0) entered blocking state
[   71.703966][ T6690] bridge0: port 1(erspan0) entered disabled state
[   71.706287][ T6690] erspan0: entered allmulticast mode
[   71.709638][ T6690] erspan0: entered promiscuous mode
[   71.715993][ T6690] bridge0: port 1(erspan0) entered blocking state
[   71.718898][ T6690] bridge0: port 1(erspan0) entered forwarding state
[   71.727062][ T6691] erspan0: left allmulticast mode
[   71.729303][ T6691] erspan0: left promiscuous mode
[   71.735468][ T6691] bridge0: port 1(erspan0) entered disabled state
[   71.746311][ T6690] netlink: 'syz.0.269': attribute type 1 has an invalid length.
[   71.749560][ T6690] netlink: 172 bytes leftover after parsing attributes in process `syz.0.269'.
[   71.753899][ T6690] netlink: 'syz.0.269': attribute type 1 has an invalid length.
[   71.804680][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.270'.
[   71.859581][ T6695] x_tables: duplicate underflow at hook 2
[   71.862654][ T6696] x_tables: duplicate underflow at hook 2
[   72.348465][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   72.352347][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.272'.
[   72.583063][ T6696] netlink: 'syz.0.271': attribute type 3 has an invalid length.
[   72.585896][ T6695] netlink: 'syz.0.271': attribute type 3 has an invalid length.
[   73.087414][ T6725] netlink: 14 bytes leftover after parsing attributes in process `syz.0.278'.
[   73.164964][ T6725] bond0 (unregistering): Released all slaves
[   73.253108][ T6732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.280'.
[   73.338329][ T6742] netlink: 'syz.0.282': attribute type 4 has an invalid length.
[   73.649054][ T6748] __nla_validate_parse: 3 callbacks suppressed
[   73.649065][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.284'.
[   74.086483][ T6756] xt_hashlimit: size too large, truncated to 1048576
[   74.143611][ T6756] netlink: 14 bytes leftover after parsing attributes in process `syz.1.287'.
[   74.186859][ T6756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   74.191865][ T6756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   74.197116][ T6756] bond0 (unregistering): Released all slaves
[   74.391886][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.0.288'.
[   74.637782][ T6780] netlink: 56 bytes leftover after parsing attributes in process `syz.2.294'.
[   74.799153][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.801864][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state
[   74.855474][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.861092][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.935012][ T6794] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.937815][ T6794] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.940662][ T6794] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.944066][ T6794] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   74.947708][ T6794] geneve2: left promiscuous mode
[   75.126454][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   75.129571][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.299'.
[   75.159387][ T6804] netlink: 'syz.0.300': attribute type 6 has an invalid length.
[   75.467335][ T6827] ipt_rpfilter: unknown options
[   75.553182][ T6834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.309'.
[   75.799274][ T6863] veth0: entered promiscuous mode
[   75.807105][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'.
[   75.842134][ T6863] veth0 (unregistering): left promiscuous mode
[   76.198528][ T6883] netlink: 'syz.2.316': attribute type 39 has an invalid length.
[   76.615696][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.318'.
[   76.936307][ T6940] netlink: 16 bytes leftover after parsing attributes in process `syz.1.320'.
[   77.032406][ T6942] IPv6: sit1: Disabled Multicast RS
[   77.453511][ T6969] netlink: 'syz.2.325': attribute type 2 has an invalid length.
[   78.014604][ T7002] veth0: entered promiscuous mode
[   78.140690][ T7002] veth0 (unregistering): left promiscuous mode
[   78.170145][ T7018] netlink: 'syz.1.334': attribute type 1 has an invalid length.
[   78.307776][ T7026] netlink: 'syz.2.335': attribute type 2 has an invalid length.
[   78.858625][ T7057] : entered promiscuous mode
[   78.915090][ T7057] __nla_validate_parse: 10 callbacks suppressed
[   78.915102][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'.
[   78.920576][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'.
[   78.926179][ T7058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.345'.
[   78.929615][ T7058] netlink: 16 bytes leftover after parsing attributes in process `syz.0.345'.
[   78.932981][ T7058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.345'.
[   78.936341][ T7058] netlink: 36 bytes leftover after parsing attributes in process `syz.0.345'.
[   79.025582][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.347'.
[   79.313753][ T7088] dvmrp0: entered allmulticast mode
[   79.317852][ T7088] netlink: 19 bytes leftover after parsing attributes in process `syz.0.354'.
[   79.749106][ T7106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.359'.
[   79.900086][ T7110] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[   79.904555][ T7110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'.
[   80.901627][ T7137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   81.242919][ T3143] cfg80211: failed to load regulatory.db
[   81.747197][ T7154] netlink: 'syz.0.376': attribute type 1 has an invalid length.
[   81.750292][ T7154] netlink: 'syz.0.376': attribute type 1 has an invalid length.
[   82.047140][ T7172] 8021q: adding VLAN 0 to HW filter on device team0
[   82.052356][ T7172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   82.300416][ T7174] netlink: 'syz.2.382': attribute type 1 has an invalid length.
[   84.508532][ T7276] veth0: entered promiscuous mode
[   84.538574][ T7276] __nla_validate_parse: 37 callbacks suppressed
[   84.538591][ T7276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.400'.
[   84.683903][ T7276] veth0 (unregistering): left promiscuous mode
[   84.730024][ T7288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.402'.
[   84.741563][ T7288] netlink: 16 bytes leftover after parsing attributes in process `syz.1.402'.
[   84.745315][ T7288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.402'.
[   84.748575][ T7288] netlink: 36 bytes leftover after parsing attributes in process `syz.1.402'.
[   85.158475][ T7300] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'.
[   85.328261][ T7317] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   85.331984][ T7317] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   86.121323][ T7338] netlink: 'syz.0.416': attribute type 5 has an invalid length.
[   86.132929][ T7338] ip6erspan0: entered allmulticast mode
[   86.143622][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.416'.
[   86.293385][ T7350] netlink: 260 bytes leftover after parsing attributes in process `syz.2.419'.
[   86.296664][ T7350] netlink: 260 bytes leftover after parsing attributes in process `syz.2.419'.
[   86.539537][ T7356] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   86.690854][ T7358] bridge3: entered allmulticast mode
[   86.928468][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'.
[   87.192371][ T7372] netlink: 'syz.2.426': attribute type 1 has an invalid length.
[   87.451241][ T7394] pim6reg: entered allmulticast mode
[   87.454215][ T7392] pim6reg: left allmulticast mode
[   87.508048][ T7392] netlink: 'syz.0.433': attribute type 1 has an invalid length.
[   87.604896][ T7408] netlink: 'syz.0.438': attribute type 5 has an invalid length.
[   87.846585][ T7426] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   87.859855][ T7426] netlink: 'syz.2.441': attribute type 1 has an invalid length.
[   88.383025][ T7444] sock: sock_timestamping_bind_phc: sock not bind to device
[   89.606645][ T7494] x_tables: duplicate underflow at hook 2
[   89.613739][ T7496] x_tables: duplicate underflow at hook 2
[   89.767121][ T7504] batadv_slave_1: entered promiscuous mode
[   90.533799][ T7517] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002
[   90.640670][ T7521] syzkaller1: entered promiscuous mode
[   90.645868][ T7521] syzkaller1: entered allmulticast mode
[   90.762912][ T7526] __nla_validate_parse: 20 callbacks suppressed
[   90.762926][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.472'.
[   90.782452][ T7526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.472'.
[   90.877770][ T7536] netlink: 'syz.1.475': attribute type 1 has an invalid length.
[   90.880909][ T7536] netlink: 224 bytes leftover after parsing attributes in process `syz.1.475'.
[   90.887827][ T7536] netlink: 'syz.1.475': attribute type 1 has an invalid length.
[   90.975731][ T7546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.035607][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.041980][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.045529][ T7547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.049221][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.055937][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.059450][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   91.558515][ T7581] xt_socket: unknown flags 0xd0
[   91.616408][ T7585] IPVS: Error connecting to the multicast addr
[   93.050084][ T7664] sock: sock_timestamping_bind_phc: sock not bind to device
[   93.102028][ T7666] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[   93.251774][ T5835] Bluetooth: hci2: command tx timeout
[   93.267063][ T7689] sock: sock_timestamping_bind_phc: sock not bind to device
[   93.429886][ T7698] bridge0: port 1(syz_tun) entered blocking state
[   93.433457][ T7698] bridge0: port 1(syz_tun) entered disabled state
[   93.436597][ T7698] syz_tun: entered allmulticast mode
[   93.441347][ T7698] syz_tun: entered promiscuous mode
[   94.711763][ T7758] netlink: 'syz.0.537': attribute type 21 has an invalid length.
[   94.819171][ T7762] SET target dimension over the limit!
[   95.371939][ T7786] xt_hashlimit: size too large, truncated to 1048576
[   95.650946][ T7798] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   95.661300][ T7796] 8021q: adding VLAN 0 to HW filter on device team0
[   95.671093][ T7796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.860849][ T7803] __nla_validate_parse: 11 callbacks suppressed
[   95.860859][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.547'.
[   95.866501][ T7803] netlink: 16 bytes leftover after parsing attributes in process `syz.2.547'.
[   95.869394][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.547'.
[   95.872834][ T7803] netlink: 36 bytes leftover after parsing attributes in process `syz.2.547'.
[   96.067200][ T7805] netlink: 'syz.0.548': attribute type 3 has an invalid length.
[   96.069698][ T7805] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.548'.
[   96.108457][ T7808] syzkaller1: tun_chr_ioctl cmd 1074025672
[   96.110623][ T7808] syzkaller1: ignored: set checksum enabled
[   96.313062][ T7812] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.550'.
[   96.494456][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'.
[   96.501432][ T7819] netlink: 'syz.0.552': attribute type 12 has an invalid length.
[   96.506298][ T7819] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.552'.
[   96.538785][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.557'.
[   96.867439][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.566'.
[   97.166214][ T7889] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   97.406012][ T7898] netlink: 'syz.1.573': attribute type 10 has an invalid length.
[   97.535964][   T33] audit: type=1800 audit(1752066663.740:3): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.576" name=14 dev="tmpfs" ino=760 res=0 errno=0
[   97.599685][ T7912] set match dimension is over the limit!
[   97.752738][   T10] IPVS: starting estimator thread 0...
[   97.841797][ T7926] IPVS: using max 79 ests per chain, 189600 per kthread
[   97.909875][ T7934] sock: sock_timestamping_bind_phc: sock not bind to device
[   98.006352][ T7941] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   98.015164][ T7939] xt_hashlimit: size too large, truncated to 1048576
[   99.235504][ T7996] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   99.244312][ T7996] sock: sock_timestamping_bind_phc: sock not bind to device
[   99.274712][ T7997] netlink: 'syz.0.599': attribute type 12 has an invalid length.
[   99.359315][ T8004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   99.465727][ T8011] netlink: 'syz.1.603': attribute type 3 has an invalid length.
[   99.539915][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.545014][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.829166][ T8028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  100.022525][ T8031] netlink: 'syz.2.612': attribute type 2 has an invalid length.
[  100.166215][ T8048] nbd: must specify a size in bytes for the device
[  100.176018][ T8049] xt_hashlimit: size too large, truncated to 1048576
[  100.345410][ T8055] xt_l2tp: missing protocol rule (udp|l2tpip)
[  100.456075][ T8062] netlink: 'syz.0.620': attribute type 3 has an invalid length.
[  100.681455][ T8073] ipt_rpfilter: unknown options
[  100.681768][ T8074] ipt_rpfilter: unknown options
[  100.966702][ T8087] sock: sock_timestamping_bind_phc: sock not bind to device
[  101.266561][ T8118] __nla_validate_parse: 10 callbacks suppressed
[  101.266573][ T8118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'.
[  101.543178][ T8140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.647'.
[  101.574838][ T8140] sock: sock_timestamping_bind_phc: sock not bind to device
[  101.609135][ T8147] netlink: 'syz.0.651': attribute type 1 has an invalid length.
[  101.615207][ T8147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.651'.
[  101.686865][ T8152] netlink: 'syz.1.653': attribute type 3 has an invalid length.
[  101.689291][ T8152] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.653'.
[  101.825227][ T8163] sock: sock_timestamping_bind_phc: sock not bind to device
[  101.955240][ T8173] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.455754][ T8175] netlink: 'syz.2.660': attribute type 3 has an invalid length.
[  102.458953][ T8175] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.660'.
[  102.505603][ T8178] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  102.663405][ T8191] netlink: 'syz.0.667': attribute type 3 has an invalid length.
[  102.666618][ T8191] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.667'.
[  102.807831][ T8206] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.970048][ T8213] netlink: 'syz.0.674': attribute type 2 has an invalid length.
[  102.973587][ T8213] netlink: 224 bytes leftover after parsing attributes in process `syz.0.674'.
[  103.036518][ T8215] netlink: 'syz.0.675': attribute type 3 has an invalid length.
[  103.040015][ T8215] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.675'.
[  103.677396][   T10] IPVS: starting estimator thread 0...
[  103.768886][ T8244] netlink: 'syz.2.683': attribute type 13 has an invalid length.
[  103.781921][ T8234] IPVS: using max 48 ests per chain, 115200 per kthread
[  103.843531][ T8249] dvmrp0: entered allmulticast mode
[  103.849028][ T8249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.685'.
[  104.040675][ T8256] can: request_module (can-proto-3) failed.
[  104.434144][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.694'.
[  104.711450][ T8295] pim6reg1: entered allmulticast mode
[  104.971068][ T8316] SET target dimension over the limit!
[  106.862603][ T8374] netlink: 'syz.1.718': attribute type 13 has an invalid length.
[  106.905689][ T8382] __nla_validate_parse: 2 callbacks suppressed
[  106.905701][ T8382] netlink: 830 bytes leftover after parsing attributes in process `syz.2.720'.
[  107.230647][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'.
[  107.345863][ T8435] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.735'.
[  107.378531][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.1.735'.
[  107.417476][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.737'.
[  107.426692][ T8439] sock: sock_timestamping_bind_phc: sock not bind to device
[  107.440024][ T8441] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  107.547677][ T8448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.741'.
[  107.629558][ T8456] netlink: 16 bytes leftover after parsing attributes in process `syz.1.744'.
[  107.635020][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'.
[  107.815296][ T8466] sock: sock_timestamping_bind_phc: sock not bind to device
[  107.897221][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'.
[  108.795718][ T8526] sock: sock_timestamping_bind_phc: sock not bind to device
[  109.092956][ T8559] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  109.870104][ T8570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.768'.
[  110.122491][ T8584] netlink: 'syz.2.773': attribute type 21 has an invalid length.
[  110.978430][ T8598] bridge0: port 3(erspan0) entered blocking state
[  110.980750][ T8598] bridge0: port 3(erspan0) entered disabled state
[  110.983187][ T8598] erspan0: entered allmulticast mode
[  110.987657][ T8598] erspan0: entered promiscuous mode
[  111.009781][ T8598] erspan0: left allmulticast mode
[  111.012280][ T8598] erspan0: left promiscuous mode
[  111.015719][ T8598] bridge0: port 3(erspan0) entered disabled state
[  111.536354][ T8621] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI
[  111.540694][ T8621] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027]
[  111.544361][ T8621] CPU: 0 UID: 0 PID: 8621 Comm: syz.2.785 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  111.549146][ T8621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  111.553479][ T8621] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  111.556243][ T8621] Code: 89 ef e8 80 60 ab f8 4d 89 ef 85 db 74 0d e8 b4 dc 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 49 60 ab f8 48 8b
[  111.564406][ T8621] RSP: 0018:ffffc90002a2efe8 EFLAGS: 00010202
[  111.567015][ T8621] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  111.570141][ T8621] RDX: ffff888030f03980 RSI: 0000000000000000 RDI: 0000000000000000
[  111.572884][ T8621] RBP: 0000000000000000 R08: ffff888030f03980 R09: 0000000000000002
[  111.575529][ T8621] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000a0009
[  111.578061][ T8621] R13: ffff8881103cc000 R14: dffffc0000000000 R15: ffff8881103cc000
[  111.580682][ T8621] FS:  00007faa9e5816c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  111.584352][ T8621] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  111.587076][ T8621] CR2: 00007fc8d882bfc8 CR3: 000000002e008000 CR4: 00000000000006f0
[  111.590284][ T8621] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  111.593750][ T8621] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  111.597112][ T8621] Call Trace:
[  111.598551][ T8621]  <TASK>
[  111.599809][ T8621]  ? qdisc_tree_reduce_backlog+0x3c/0x480
[  111.602164][ T8621]  fq_change+0x1519/0x1f50
[  111.603830][ T8621]  ? __pfx_fq_change+0x10/0x10
[  111.605551][ T8621]  ? __hrtimer_setup+0x187/0x210
[  111.607464][ T8621]  fq_init+0x699/0x960
[  111.608967][ T8621]  ? __pfx_fq_init+0x10/0x10
[  111.610485][ T8621]  ? lockdep_rtnl_is_held+0x26/0x40
[  111.612200][ T8621]  ? qdisc_lookup+0x36d/0x6d0
[  111.613748][ T8621]  ? __pfx_fq_init+0x10/0x10
[  111.615315][ T8621]  qdisc_create+0x7ac/0xea0
[  111.616825][ T8621]  tc_modify_qdisc+0x1426/0x2010
[  111.618422][ T8621]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  111.620170][ T8621]  ? __pfx_tc_modify_qdisc+0x10/0x10
[  111.621898][ T8621]  rtnetlink_rcv_msg+0x77c/0xb70
[  111.623540][ T8621]  ? rtnetlink_rcv_msg+0x1ab/0xb70
[  111.625322][ T8621]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.627156][ T8621]  netlink_rcv_skb+0x208/0x470
[  111.628883][ T8621]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  111.631078][ T8621]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  111.633227][ T8621]  ? netlink_deliver_tap+0x2e/0x1b0
[  111.635499][ T8621]  ? netlink_deliver_tap+0x2e/0x1b0
[  111.637695][ T8621]  netlink_unicast+0x75b/0x8d0
[  111.639712][ T8621]  netlink_sendmsg+0x805/0xb30
[  111.641812][ T8621]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.644094][ T8621]  ? aa_sock_msg_perm+0x94/0x160
[  111.646122][ T8621]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  111.648401][ T8621]  ? __pfx_netlink_sendmsg+0x10/0x10
[  111.650498][ T8621]  __sock_sendmsg+0x21c/0x270
[  111.652165][ T8621]  ____sys_sendmsg+0x505/0x830
[  111.653721][ T8621]  ? __pfx_____sys_sendmsg+0x10/0x10
[  111.655523][ T8621]  ? import_iovec+0x74/0xa0
[  111.657058][ T8621]  ___sys_sendmsg+0x21f/0x2a0
[  111.658650][ T8621]  ? __pfx____sys_sendmsg+0x10/0x10
[  111.660425][ T8621]  ? __fget_files+0x2a/0x420
[  111.662076][ T8621]  ? __fget_files+0x3a0/0x420
[  111.663677][ T8621]  __x64_sys_sendmsg+0x19b/0x260
[  111.665310][ T8621]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  111.667108][ T8621]  ? rcu_is_watching+0x15/0xb0
[  111.668702][ T8621]  ? do_syscall_64+0xbe/0x3b0
[  111.670249][ T8621]  do_syscall_64+0xfa/0x3b0
[  111.671773][ T8621]  ? lockdep_hardirqs_on+0x9c/0x150
[  111.673495][ T8621]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.675498][ T8621]  ? exc_page_fault+0x9f/0xf0
[  111.677044][ T8621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  111.678983][ T8621] RIP: 0033:0x7faa9d78e929
[  111.680476][ T8621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  111.686722][ T8621] RSP: 002b:00007faa9e581038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  111.689447][ T8621] RAX: ffffffffffffffda RBX: 00007faa9d9b5fa0 RCX: 00007faa9d78e929
[  111.691979][ T8621] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000004
[  111.694502][ T8621] RBP: 00007faa9d810b39 R08: 0000000000000000 R09: 0000000000000000
[  111.697080][ T8621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  111.699656][ T8621] R13: 0000000000000000 R14: 00007faa9d9b5fa0 R15: 00007ffd221c9e98
[  111.702224][ T8621]  </TASK>
[  111.703254][ T8621] Modules linked in:
[  111.704725][ T8621] ---[ end trace 0000000000000000 ]---
[  111.706521][ T8621] RIP: 0010:qdisc_tree_reduce_backlog+0x223/0x480
[  111.708617][ T8621] Code: 89 ef e8 80 60 ab f8 4d 89 ef 85 db 74 0d e8 b4 dc 47 f8 4c 89 f5 e9 88 00 00 00 48 8b 6d 00 48 8d 45 20 48 89 c3 48 c1 eb 03 <42> 80 3c 33 00 48 89 04 24 74 0d 48 8b 3c 24 e8 49 60 ab f8 48 8b
[  111.715131][ T8621] RSP: 0018:ffffc90002a2efe8 EFLAGS: 00010202
[  111.717309][ T8621] RAX: 0000000000000020 RBX: 0000000000000004 RCX: 0000000000000002
[  111.720292][ T8621] RDX: ffff888030f03980 RSI: 0000000000000000 RDI: 0000000000000000
[  111.723627][ T8621] RBP: 0000000000000000 R08: ffff888030f03980 R09: 0000000000000002
[  111.726882][ T8621] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000a0009
[  111.729852][ T8621] R13: ffff8881103cc000 R14: dffffc0000000000 R15: ffff8881103cc000
[  111.732782][ T8621] FS:  00007faa9e5816c0(0000) GS:ffff8880b861d000(0000) knlGS:0000000000000000
[  111.735708][ T8621] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  111.737895][ T8621] CR2: 00007fc8d882bfc8 CR3: 000000002e008000 CR4: 00000000000006f0
[  111.740682][ T8621] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  111.744134][ T8621] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  111.747523][ T8621] Kernel panic - not syncing: Fatal exception in interrupt
[  111.751324][ T8621] Kernel Offset: disabled
[  111.753224][ T8621] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:11:17  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000017fc RDI=00000000000017fd RBP=00000000000003f8 RSP=ffffc90002a2e810
R8 =ffff888108980237 R9 =1ffff11021130046 R10=dffffc0000000000 R11=ffffffff85475610
R12=dffffc0000000000 R13=ffffffff99af7903 R14=ffffffff99dfc760 R15=0000000000000000
RIP=ffffffff8547568c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007faa9e5816c0 ffffffff 00c00000
GS =0000 ffff8880b861d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc8d882bfc8 CR3=000000002e008000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007faa9d985478 00007faa9d985450 XMM03=00007faa9d985488 00007faa9d985480
XMM04=00007faa9e4ed100 00007faa9d985440 XMM05=00007faa9d985458 00007faa9d9854a0
XMM06=00007faa9d985498 00007faa9d985490 XMM07=00007faa9d985488 00007faa9d985480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007faa9d811c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=85e25d1baeae0b00 RBX=ffffffff81975d58 RCX=85e25d1baeae0b00 RDX=0000000000000001
RSI=ffffffff8be28fa0 RDI=ffffffff81975d58 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f5b R9 =1ffff11026cc65eb R10=dffffc0000000000 R11=ffffed1026cc65ec
R12=ffffffff8fa1def0 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001d000
RIP=ffffffff8b6ee4a3 RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f2fba2fe440 CR3=0000000107b72000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 000000524f525245 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc8d7a11c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
