last executing test programs:

3m43.818589377s ago: executing program 3 (id=1503):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
sendto$inet6(r0, &(0x7f0000000040)='[', 0x1, 0xc0, 0x0, 0x0)
r3 = socket$nl_crypto(0x10, 0x3, 0x15)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, 0xd7a0, 0x1, 0x3, 0x4, 0x200, 0x10}, 0x20)
sendmsg$nl_crypto(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="e8000000100001000000000000030000647262675f70725f686d61635f7368613338340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000006e0f193000000000"], 0xe8}}, 0x0)
connect$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x3, 0x1}, 0xe)

3m43.591590095s ago: executing program 3 (id=1507):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=ANY=[@ANYRES64, @ANYRESOCT, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=r0, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESOCT=r1], 0x48) (async)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000340)=0x2, 0x4) (async)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x3, 0x0, @remote, 0x2}], 0x1c) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) (async)
accept4$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10, 0x800) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, &(0x7f0000000080), &(0x7f0000000000)=@tcp, 0x3}, 0x20) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0xd, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x42}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x2, 0x0, 0x4, 0x18, 0x10}, @ldst={0x2, 0x3, 0x3, 0xa, 0xa, 0xffffffffffffffc0, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0xc, 0x7, 0xa, 0x100}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
getsockopt$rose(r4, 0x104, 0x3, &(0x7f00000000c0), &(0x7f0000000280)=0x4)

3m43.469481416s ago: executing program 3 (id=1509):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000b0102000000000000000003000001080002400000000208000340000001000f0001007368"], 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x41840) (async)
sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000000b0102000000000000000003000001080002400000000208000340000001000f0001007368"], 0x34}, 0x1, 0x0, 0x0, 0x14001}, 0x41840)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc)
getsockopt$inet6_tcp_int(r5, 0x11c, 0x4, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0)
r8 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r8, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2)
shutdown(r4, 0x1) (async)
shutdown(r4, 0x1)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) (async)
bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000002c0)={'gretap0\x00', &(0x7f0000000240)={'tunl0\x00', <r11=>0x0, 0x40, 0x7, 0x80000001, 0x4d, {{0x17, 0x4, 0x0, 0x1b, 0x5c, 0x68, 0x0, 0x9, 0x4, 0x0, @loopback, @empty, {[@end, @ra={0x94, 0x4, 0x1}, @end, @noop, @ssrr={0x89, 0x13, 0xcd, [@broadcast, @multicast2, @local, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x62, 0x1, 0x8, [{@broadcast, 0xfffffff5}, {@private=0xa010102}, {@loopback, 0xb0}]}, @cipso={0x86, 0x11, 0x2, [{0x0, 0x6, "bd945860"}, {0x1, 0x5, 'N@@'}]}]}}}}})
setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000480)=0xa99, 0x4)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000000) (async)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r9, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x8c, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000041}, 0x4000000)
r12 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xa}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r12}]}, 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

3m43.269667107s ago: executing program 3 (id=1513):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000280)={0x800000, 0x3, 0x0, 0xfffffffe}, 0x14)
r1 = socket$alg(0x26, 0x5, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="000000000000000027020000140000f0b6030000000000008500000031000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000ebffff840000006c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r5, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r6, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40054}, 0x20004040)
bind$alg(r1, &(0x7f0000000140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x7, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="35c778ea56d318d444b93b1b18da7517d633aeb466a7983214330ba879bd8ff72245116c860a0c8600b35b100fc6280a72b93455bff97641da291ca55bc1fec41a37bf77c6a902de10b487a836ed5860fabc8afc606da13ed95e1d8d2710ca54b7c1122f20a9a668eb63093c420290542fca2189f62badfefea2f8a403b1ade39cd3b48d21c161d1962a9bf5e1f098d8619d722b22b66caafbfa1e08713906830b93d10fd3d58705120974d2dd57c85bdad79bad39128f0adcb994dc1bfc090cf9b71e790e974ce30b01457d793eaea58d7f251a05d62cad05849a95bfc3307caa71c6"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0x41041)

3m43.09746482s ago: executing program 3 (id=1517):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xffffffff, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0)
socket$kcm(0x29, 0x6, 0x0)

3m42.953124978s ago: executing program 3 (id=1521):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004)

3m27.893381557s ago: executing program 32 (id=1521):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cb8b4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e002c2a73ae028d1b34ff4f8cc430bb5a360db598262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d930000", 0xd8}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004)

2m39.353790137s ago: executing program 4 (id=2096):
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040))
r1 = socket$inet6(0xa, 0x80803, 0x87)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="660a0000000000006911750000000000850000001a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x547b31180522e14c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast}, 0x0, @in6=@private1}}, 0xe4)
connect$inet6(r1, &(0x7f00000000c0), 0x1c)
syz_emit_ethernet(0x12, &(0x7f00000002c0)={@broadcast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@generic={0x86dd}}}, 0x0)

2m39.257494558s ago: executing program 4 (id=2097):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) (async)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000300)=0x1)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0}, &(0x7f0000000140)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@ipv6_deladdrlabel={0xac, 0x49, 0x20, 0x70bd2c, 0x25dfdbfc, {0xa, 0x0, 0x38, 0x0, r1, 0x3}, [@IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffe, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000560000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000280012800b0001006272696467650000180002800c002e0003000000030000000500070008000000"], 0x48}}, 0x0)

2m39.257147974s ago: executing program 4 (id=2098):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f8, 0x2c8, 0x98, 0x168, 0x98, 0x98, 0x360, 0x360, 0x360, 0x360, 0x360, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x5c, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x81, 0x9}}}, {{@ip={@private=0xa010100, @local, 0xff000000, 0x0, 'vcan0\x00', 'pim6reg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x6, 0x3]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4, 0x4]}}}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x8, 0x3], 0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x3}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x58}}, 0x40000)

2m39.199337575s ago: executing program 4 (id=2100):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={<r1=>r0, 0x9, 0x7, 0x8001})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x107, 0x70bd27, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@generic="8b26ee52"]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000fc0), r2)
sendmsg$NFC_CMD_SE_IO(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x14, r5, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8, 0x9, 0x0, 0x400}, {0x6, 0x9, 0x2}]}) (async)
ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x8, 0x9, 0x0, 0x400}, {0x6, 0x9, 0x2}]})
r6 = socket$igmp(0x2, 0x3, 0x2)
syz_emit_ethernet(0x3e, &(0x7f0000000bc0)=ANY=[@ANYBLOB="31e02b0eaf4eaaaaaaaaaabb86dd600004000000000000000000000000000000000000000000ff0200000000000000000000000000018000907800000006"], 0x0)
setsockopt$inet_buf(r6, 0x0, 0x11, &(0x7f0000001ec0)="823a734c4f45e4d9720d9abbe9704398", 0x10)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000100)="4ed4c912164b60e7c2a0df0b46117e6a3b0f2807bb2c505fcf5da078f92043d4348987c5dc208758b23d3e99d070e384526494a245cb562c8e23ef6318089fea0e84a1ba0d15a18a9c009ab33ca42a3103172f36c1c8f7a7e56be2f2693fa4c3664459a642df094ee06e47fb93837c5e0bf0862c8508a1a264109122b3e9ad52aacd3ad784a4441ae2a8defbcce4e3788a6b4d52ec8e6bd9ce10ef748c5d8dbeb438d1cba89ae304ca69f51b31a1f80a275e13a778d9f3e2e5e677244c74ab70cda9718d8bc5547e848d7c639218e0148c7f259b15f52c14bb635cf7d5468a4875a6e71babc12e76"}, 0x20) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000200)={r1, &(0x7f0000000100)="4ed4c912164b60e7c2a0df0b46117e6a3b0f2807bb2c505fcf5da078f92043d4348987c5dc208758b23d3e99d070e384526494a245cb562c8e23ef6318089fea0e84a1ba0d15a18a9c009ab33ca42a3103172f36c1c8f7a7e56be2f2693fa4c3664459a642df094ee06e47fb93837c5e0bf0862c8508a1a264109122b3e9ad52aacd3ad784a4441ae2a8defbcce4e3788a6b4d52ec8e6bd9ce10ef748c5d8dbeb438d1cba89ae304ca69f51b31a1f80a275e13a778d9f3e2e5e677244c74ab70cda9718d8bc5547e848d7c639218e0148c7f259b15f52c14bb635cf7d5468a4875a6e71babc12e76"}, 0x20)

2m36.829396074s ago: executing program 4 (id=2107):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="1400000010000100000000000000000000000069c17bea660270b70400000000000000000200000018000480140001800a00010072616e6765000000040002800900010073797a30000000000900020073917a3200000000140000001100010000000000000000000000000a"], 0x6c}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="8faf00000000000000001600000004000180"], 0x18}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0xd, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000100000000000000000000007112dd000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m36.65790952s ago: executing program 4 (id=2111):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000002600010324bd7000fddbdf2501000000608bdf894ae1115e395c7788171957acb307f6bcb16b6646c174e9347f414e809c97bc8e0ae645a7ca8b3f2b8cd3d5eb2ce3442e6c891f9203000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) (async)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000002600010324bd7000fddbdf2501000000608bdf894ae1115e395c7788171957acb307f6bcb16b6646c174e9347f414e809c97bc8e0ae645a7ca8b3f2b8cd3d5eb2ce3442e6c891f9203000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) (async)

2m21.534423678s ago: executing program 33 (id=2111):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000002600010324bd7000fddbdf2501000000608bdf894ae1115e395c7788171957acb307f6bcb16b6646c174e9347f414e809c97bc8e0ae645a7ca8b3f2b8cd3d5eb2ce3442e6c891f9203000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000009c0)=ANY=[@ANYBLOB="340000006800010900000000000000000000000000000000060003000000000014000200ffffffffffff"], 0x34}}, 0x0) (async)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async)
openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) (async)
preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000002600010324bd7000fddbdf2501000000608bdf894ae1115e395c7788171957acb307f6bcb16b6646c174e9347f414e809c97bc8e0ae645a7ca8b3f2b8cd3d5eb2ce3442e6c891f9203000000"], 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x4000) (async)

1m51.371017475s ago: executing program 6 (id=2647):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="10002cbd7000ffdbdf270700000008000400ffffffff050001000000000006000b0011000000080004000200000006000b001f00000008000200030000000800080064010102080004000000000006000b00230000001400050000000000000000000000000000000001"], 0x70}}, 0x20048080)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x278, 0x20, 0x118, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x1ff], 0x3, 0x10, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xa067, 0x8, 0x80000001, 0x1ff, 0x0, 0x52, 0x0, 0x5]}}}, {{@uncond, 0x0, 0x118, 0x160, 0x0, {}, [@common=@icmp6={{0x28}, {0x11, "4dd4", 0x1}}, @common=@hbh={{0x48}, {0x6043, 0x2, 0x1, [0x2, 0x4, 0x4f, 0x0, 0x3, 0x5, 0x7ff, 0x1, 0x6, 0x401, 0x9, 0x7, 0x3ff, 0x3, 0x0, 0x800], 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x7, 'syz1\x00', {0xfffffffffffffffe}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x3, 0x4, 0x2}, {0x1, 0x4, 0x5}, 0x6f17, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000002000128008000100736974001400028008000200c00002000600080003"], 0x40}}, 0x0)

1m51.249672709s ago: executing program 6 (id=2649):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
write(r0, &(0x7f0000000080)="29000000140005b7ff000000040860eb01cb02fcb2e4e6589b3e0ed7283f14b912685e684c42b9eeb9", 0x29)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x3, 0xb, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xfffdfffd}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1886c301}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0x1, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}}, 0xc010)
socket(0x2a, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0)
r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
accept4(r7, 0x0, 0x0, 0x800)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x8, 0x7100000})
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xc, 0x4, 0x4, 0x9}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200))

1m49.240065955s ago: executing program 6 (id=2677):
r0 = socket$netlink(0x10, 0x3, 0x6)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long}, 0x8)
r4 = socket$inet6(0xa, 0x3, 0x1)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xce22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0xfffffffffffffffd, 0x2, 0x2, 0x5, 0x2, 0x5}, {0x0, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d4, 0x32}, 0x2, @in6=@private1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)
socket$netlink(0x10, 0x3, 0x6) (async)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000340)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long}, 0x8) (async)
socket$inet6(0xa, 0x3, 0x1) (async)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xce22, 0x0, 0x0, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffd, 0xfffffffffffffffd, 0x2, 0x2, 0x5, 0x2, 0x5}, {0x0, 0xffffffffffff90df, 0x0, 0x20000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x39}, 0x4d4, 0x32}, 0x2, @in6=@private1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) (async)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async)

1m49.064950227s ago: executing program 6 (id=2680):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x38, 0x21}, 0x20)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}]}, 0x58}}, 0x0)

1m48.878115752s ago: executing program 6 (id=2683):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4)
sendto$inet6(r1, 0x0, 0x0, 0x24040800, 0x0, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x18, {0x4e22, 0xffff}}]}, 0x24}}, 0x0)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, 0x3}, 0x1c)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r3, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029"], 0x18}}], 0x2, 0x4001)
sendto$inet6(r0, &(0x7f0000000040)='[', 0x1, 0xc0, 0x0, 0x0)

1m48.538092094s ago: executing program 6 (id=2687):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0) (async)

1m33.175852594s ago: executing program 34 (id=2687):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20006004) (async)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x6, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0) (async)

3.215126973s ago: executing program 7 (id=3667):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0)
r1 = gettid()
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x68}}, 0x8020)
syz_emit_ethernet(0x86, &(0x7f0000000680)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x7, 0x0, [@rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1, 0x1000}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
r4 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@RTM_GETNSID={0x3c, 0x5a, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NETNSA_PID={0x8, 0x2, r1}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_FD={0x8, 0x3, r4}, @NETNSA_NSID={0x8, 0x1, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44005}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map, r8, 0x36, 0x202c}, 0x20)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
read$nci(r5, &(0x7f0000000200)=""/246, 0xf6)

2.829164234s ago: executing program 7 (id=3671):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x63, 0x0}, 0x0)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r11=>0xffffffffffffffff]}}], 0x18}, 0x2000)
ioctl$TUNSETNOCSUM(r11, 0xc040ff0b, 0x2000000000)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
close(0x3)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r12, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4)

1.980895939s ago: executing program 2 (id=3675):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f0000000280)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x6212633ef4a2b82, {{0x42, 0x3}}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x84, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfd4e}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xcf8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x2eb9f553}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1e600}]}]}, @NFT_MSG_NEWSETELEM={0x4c98, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4c44, 0x3, 0x0, 0x1, [{0x13e4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_KEY={0x294, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x53, 0x1, "0cf29bc6f69413cdc73bd272146338c3945f28ca4c9a7ce020d944efd2824b278eaa15a2363ac4410175f0f5793168629958e73469dd95969bc4bdf2381d87c3ba26db18422db75e6cfe8e28fab847"}, @NFTA_DATA_VALUE={0x56, 0x1, "25882dea114fd585db8c98eb237ee0d6a88fe0d11d4ca64a3e20847b9b0619da5a95764aa8344ad89a39647e5581895180a3948db91806e88ee15a3a1f7a19980af9c46f6ec9e937ab088ae61d0977931ab2"}, @NFTA_DATA_VALUE={0x78, 0x1, "e9ceb338cfc57993101770bba17133d58c8b12e17571ed24803b5e70db55dbfb11c95f6f9dea410563e1e368630f0505bbaa0dfbd9c18dad760125d8887a08486cbecc04e65fa96c35b5f7ec039c0e1b7d429188ad603dc103e34af5fd8521bea1898c4180fb1d7d0e102c375d2e8c9f79ac56aa"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xee, 0x1, "68d06f2703eab617a57f015ed15832a3f41d185aedd3e410db433bdc71cb7ef2ec26acb5efc6b91fb1aa3bea992941e27df7dea91b5abfc2229fe99816656bda13e1e69db850cd06e08737713abc877b885efd9fc8ee0ff7ee738949432c46f7058f66ac131029d2a42828cb41d654267fdb954046e7cf3becfa131a0fce0f4797fd825921d59a35c5d4a8a818a3a9765234af11f7b9677612efb9c3303b30eebc9cc856598a341864c70b49fea2b9aabbb8805e4e1ae3901d94119fd9738304441442e4edcb2b3846dddbb926e7d2b744e1770bda03e6e418387cf8969faddac2e85b5d6424b0921a68"}]}, @NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0xbc, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x80000000}]}}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x54, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xe8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x71}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x9}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xf9}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}]}, @NFTA_SET_ELEM_KEY_END={0x1074, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "7d3ea7040763c5d8a839fd97552bb29f8f3d5f0dd268ed9a9b59"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @limit={{0xa}, @void}}]}, {0x2d8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6a, 0x1, "35c9c472e8c81b7f39a27f5f7d81590f411c019d4584b547572746e454778b4619a935a3858001fcc35ae111c8ba11fc6425cbf7dd33a606c26371b94b8d169c0b0fd591f137f5cac257110e522e70caae35326cf8ebbbd5a63d966d413a6915e0c088c181a8"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x62, 0x1, "0ca328fdfacffafb61a1e66ae055e9fa4260a72771e01639ed9e5b911f5aa7fc0152d02705af076acd9223e205f8037dcb2e9e62a1c12133fd8e410a7a94f8ba128839577be26d0537f57115763f39792d6393ae33d176ded6bb9060a682"}, @NFTA_DATA_VALUE={0x78, 0x1, "6698700b86465154176d1e90689326b1d9ba55eacd15bcf3874be4d653b0c61a1b02e29cef07890b4f13028db4e035597c8ae9ddb59da2476d83701f92a649b9d2986d73326d3b2889c32e8db9ce61b1ed116cf9f264708c87cb2a0e885cfc610155f6018defbba470002ed094733810b225a973"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x226}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x2e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @ct={{0x7}, @void}}, @NFTA_SET_ELEM_USERDATA={0x52, 0x6, 0x1, 0x0, "2514239f3ac6bb5ff799dcf0b9b7ed8951d5ff09f0b53a2d8234eebbc57d1c59f6d1f83ccc45c06062b70d9d9717aa70279a7b41cc76ac5f2740b5a2acee19ca46353be17584d75382e2373065c4"}, @NFTA_SET_ELEM_EXPR={0x30, 0x7, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_CT_KEY={0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_DATA={0x168, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x41, 0x1, "58b535a0f9e88b75e93ea9dc963227a6365e30fca8f1fc5562c6da48e548a45408e451496d37db0d5653656e096a0a3d1dec04703c61ea421ee7646436"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x68, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1b, 0x1, "9c577920aeac5bf94d00139ebdf1bea771796ba3477b7e"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x47, 0x1, "6acb3427e9346c8df0a0fa01ef886b1beede78ea16bf7a9c8823fa44e1c084b3fc7640561f9725668010dd43d9a69e8018118ffbac80ade052bcd6c1430dda0c9bc595"}]}, @NFTA_SET_ELEM_USERDATA={0xe9, 0x6, 0x1, 0x0, "798b3b676f739f1a4866ba2c2554cf514214d90e84c7e8bc75174e2a67a0135802eba96f4b35b4b236924006d8c0fcf6e063587388e62b602af10a650c4f668c106aa9d15dc575451338faf5295570cb14ccff7683f0725cfc4917b9b86c32d3c150403f2ff87d2e810f9a322d8ea198105d6cb23fea23c18ca08fbbc84b14d009d8680117abb9140e643d959da42c00ddf898830f3f80bcec3942c479590a5d803567b19ca7fdbb7d36b97cb90c314adb01dd241d5a542e2706e5b12c09649da438860db0006f095fb844e072823231554c1b8918a1a476ca499980356c9c19f92ce28b17"}]}, {0x4}, {0x15fc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x340, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x4b, 0x1, "374a3879568b092e43264c4f6180abb9ed3c83cc421ddb6eb212647972047bdf71c7e9462aac18e54978250d98b389ec66646e2a84d14d712b71920c54b2a6800362cf6d85a5b0"}, @NFTA_DATA_VALUE={0xe9, 0x1, "4c9c0e7ce3448e18290ae7422eeb594cdf1c9676a8dd9b77559cb49bcd1c32705a2ea63a6d93a26dddbeb98eacfc72e2d2f9289b5d3de88e61e836a9a8988963009c1e5c61959b8ebbf9b8aa029e19cbf282651ae8ff4fb87ff2c11965bb8162976ced4104efe8cb3e8df6b585c044fc35e4d5b855d0d36b99aea7ec26d1632926f452bb61aae07645063d3e553a1a59a1fc54411d4a78f8dfbd8602c9ea7645e6936ecfb548e925c13df85f0ebe6b4c51e0033ac7d9838fc13d2bf1e2a22e77803ccd209deb1dfec6c1bd681df2c31b8222d9bd4bfbc538954d09e23112d333cb5613e5d0"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xdd, 0x1, "3d0f468d9453c7804edbbc65ad81ca02e235d1f1179d1fccd0af44639082ca8c04dbee344b1944ed2161d22082e076bdd6baa5b891ab39e1bacfeaa44fd8ef9da53ccfbf263e0e7c9c585e5ae2a6bf51f88c61fd0e2f60f95b380558da68f4d2ac82b2916ac8cf0e77dd4f62e213fea99bf84f54ff1390d064fdd43fceda28fe345e56ed7a97fd89be2561397d106e0cb1b6597067c3ceff40e9aa5a9c23745279a372721de8916047fc9705f9effd82634bad5e76edc1702ca07d2e57961e266d2416c8d0fd9e63e114d9b039bd9297355ef390c973e59758"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_DATA={0x138, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x86, 0x1, "113d1af38c8e080d4c1cf4933ce055943fb85f1521ccf7fbabb51b87cabf612b4d2d23557c8cf9f798a80725499136f15e37551cf413f12e11861659badb43bad33caadd461d84172b72f60b482a72b31a814b36e634461bae93b4b0a16f612a976943113d97a23934da50af530b171927d3ad487e288342ac7fcff282ffd349846b"}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x18, 0x1, "73ab8db0a2037a108933fa0e1aecb7f121c0050b"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1148, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "cd0ace8b73ef20440e620a343e8fc80c7352e202f918ad3ead57b1e3af2d5048210263ad829ce12bbdcf23ea43c03d74e6c75a7ebd5dd18418bc26f2c30a6c10374f46087bf91963c55a029f505db9bc9df15ad8b046d990feb75438692f6dc8bb1b4c78a270df9592076efe3c756b770d4132332e12843780f767eb42881a032d87a4d93232fa0b0d25975cdf93e745495323a08d42dbc89a14ee49d5232163b3e155a0cc33b2504abe77d69eea050d5a2891d1aeb567de22222ac64acd2c74b93ac40cb8eff310bb44dc0a66"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9c}]}, {0x178, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x138, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x18}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x18}]}}}, {0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xae}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xb7}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x6db}]}}}]}, @NFTA_SET_ELEM_USERDATA={0x2b, 0x6, 0x1, 0x0, "8a16f10a21ab4489e0756732e732a7bd99e108d260c96359a790e47fa76c15d0a9800ba2986e15"}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb, 0x1, "8574410b307f6f"}]}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x2f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY_END={0x2e0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x44, 0x1, "ce2d48ba5936deec8969a45871e901e267d8f92e150d757d14a564cdc30334af12e304304b0d8e457e50ae5437adc677bd08629a584744a1153becec912b585f"}, @NFTA_DATA_VALUE={0x88, 0x1, "3139a0715c44ca637b3c913e028a4619750b0e97b928c9775cf9525c31c0e51e9a08ac66c5ce82e276f414e8ada4412b4d63dc3b2d7ff9ec6bbbd18a2b5c07e6d65fcab1be50c7b501d109addd874bc92262f5833744399a95253736b4a6e725859d8c4972173d58472a7da5c2cecf7dbb30f428a82d6cc13ce2ba827bb9d8efe81ba3e0"}, @NFTA_DATA_VALUE={0xb, 0x1, "ef63a3f42759c9"}, @NFTA_DATA_VALUE={0xd3, 0x1, "93fe0ed0a59bf77aff55e3b31cdca411cca156a53bdc8e277cc454d8bd7408a3a9722e49c119533b9783e2c756ba91ea17d36899a66887db7d2f9d5f434ee10e984ed13d40f8b6c9596f3070d3157c472dd68dbb35b5b70b56ca165d10a6fe8fc482ccbe14518bfd79d044897c70d84d1f41612a5ddb4b23b73880cbdb2633ca803c1feeba6b88a42c5c6791993a415a5f9d650757bb0f381f7dd1e989646e37aa8f52cdaa83f41359c3ba0077c3517b6a522356660a6e07055b23114ba09d5bb85c643755706c35aca6e75471b906"}, @NFTA_DATA_VALUE={0xf2, 0x1, "93cd59297245012cb28ee1bf317de96344c2ce569dee1c26951934e9b4de4a7f5f48a4817ffd521d043c2f5f6acfe0ebe0e361b721d9da6026f0ab8c99c417d04fc84e041646eed5c8202df24208888c6e844cc15ecd273986d8624b3a56adf02d2f24e4188f845fc5d004fc7de63334196f0d4fbe3acddeb377770c3266dc927b4075f59c0040a9f504eb0582c08b9f009b82de634b6f6e881ffcd93d3de7eedd40cdd149eee1ceaa82c4325f0f8e7217358202a4c2e97034981ccc63a3f7e7e980951aaa710df566fd458f0fb0480b87071dc665fb2198de9c1cfd224d5a3045dc3c58fad9f5ed64547cd4c9b2"}, @NFTA_DATA_VALUE={0x3c, 0x1, "3ffb946e906b01d6f4eea33adfb786abb8b57e0d99837ea43e5c1790ae79ecf4321eabc6fa357057b34566970886ee1bb97a294aa68f059f"}]}]}, {0x1810, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6a38a365}, @NFTA_SET_ELEM_DATA={0x17c, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x61, 0x1, "11a4608a40b2d0fbcc7636eed4a2a39061ec0579751cc0ae4b5b3d0108f252f5cf66f2999e2ef4d928a9051e0c00bb6f8445d6b549046c49d62841c9d66d93c794a0820a751b030b778af640cad94f1c1c4e06d08c5b28fc682e281847"}, @NFTA_DATA_VALUE={0x30, 0x1, "c96e0786fe014219d751b310449c5f959a989af9b6f6faf2b2b19f0306375142306b9ea0e4f09db3da044b1b"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x88, 0x1, "5566c5b273be35f30f68d2d4502bb90bd7bba15aec3df5e2a90ec283e4e2124a4eb94ff4e21c0945b4d2a0e69969c51ca80f3531df00a981efea8b1be0b1d6baf2ed9b21f957c3fbec72e4e36d899ef3964fafc8844e9568c8ed2aa7d7546a6e881718eca494fb10bf8e9ad0606119a3cf42efcec4aaf30624f20d2a949ff60f798ae89b"}, @NFTA_DATA_VALUE={0x3c, 0x1, "714e879e0a53d874c074361f19e45729ba8af8ebaf47f4ed854c0fa33a33d35b40d9fb5610c724e43d7bf81395e3b56aec7bea76145b748f"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_KEY={0x2b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x96, 0x1, "177ecd2dcf66074170ec6de2b9aec84f63d17a33603113a876048bc53a275eb3aedca86be69a4572c0344c3195e893479ddbb1d03fec89139ffb7e5200e989e4d3cec366279d55d6f4eda27b0b53be274fe1ecca928f579d8e531f3fb5b69483f2cc52503cd9bdadfe65e7b487ab512f024d04b135c7c773db8acca7564118f6c30a50839c0bd71cac85326126bab19e793c"}, @NFTA_DATA_VALUE={0x56, 0x1, "9009e97b229a9691e3f112a06d0886c49380c46aca775f2578ef5a9d2c78fc454e1a20591f1aee3a81d5e5ee50a0a0c969e8b9644640b2a5679296a2ca54680d13020d59994d0f8cc17435004a922fad9df9"}, @NFTA_DATA_VALUE={0xf5, 0x1, "15d4432e10a8ed83dcc9092adb815578a6f89edd20324e74fdaa50bcb5e022ad9683c8a4561030ddaf04b302833cb93e6b66ddf2bd5671de82c621a71340f8eb0ed6d810990fb28ca6fc3d30a8c1b2014e24dab21258c4dbc7af3f1bb29583227fcc84b96019500676f8f3dacc4e8429c5efc6dc68466a5be9a99842b263e2b0a0bdb25113cf36a58ac171b04bf50ceff9e3afb06d771cd4105fe0326c08b5d72bb719b955715c03d5b85ced0281a7ee945ce647642b899265da58a2ca167cb39b28a5e44054a1ef8aaf29d4a0fc575fcff9df45294858ad1b080c0df5411346fd7cc158d3340e2a675c7e09140ec5013b"}, @NFTA_DATA_VALUE={0x30, 0x1, "bc78818b247185f2a488d233c49a1bf291c741c9e318dfaf60e41bf8363c3a3c8d7aeb429413765ea4f51f6d"}, @NFTA_DATA_VALUE={0x82, 0x1, "5083c47c2a1741c67bdbf15fe0091b8df6f9a087cf4b5d789e3a39339751c8ee49eb06e48f390b80f28b43fc15f929a10171cced813ab6c7039b06e27956b3bbfe1f498816289aa14cfa5420685bc0f2e4dbad89959ee7fb4022260e7befe060746ed2691116908d482898eb5941f7dad7f30698de3daacbabb3ef9df78b"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x10e4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x7d, 0x1, "d7bcc917e6841a0d595f9a6f7fed79e1befe019f557263b180f12c59add3ab140cf1bc3438e8b0634f0e37d7504eff5e63ab50baaf99bda5c4c5ad3e3d747203287cc4bcc662fdadbe0817d5969a72a1cc20df86118cac945a770527503fb925af39808aa79a4561ae02b1df79da0dbe78ef3723d538b5c905"}, @NFTA_DATA_VALUE={0x21, 0x1, "a546c7ee1c1d9a4f92ee975c0dd2ae9e84cb6345efc18f72fdf19b804e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_EXPR={0x34, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_DATA={0x1a4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xca, 0x1, "c262b3692f8519533abc04c7e4ce1c00d938ad67b31c37b728667b3f77e2d930676032fda3536bdc465a539998f015dde1f0ea792a00ab4ef82e6985d6412cbf8c0bb809735d8a88f6c54616d908a03e05d978efa15adbf9af4f30ee8ca58708c8d035d640db4ba222cfb35e0b1d878f08b403e4ca26a1fc904dd2ca58ed7e817dfca729c171ce16041b591ab4fe481f07271b5f62404d6232bbf34dac381118213ddf97834a0c2d9fb1de5cedf37e9675043e2a05b4ffd158601f2b5c24a27417ade44879d9"}, @NFTA_DATA_VALUE={0x6d, 0x1, "0b4f82f285cdae71e3ec2d74bdc6b07237e4d0c3cbfae9027e6e1027c562935a61b5282d4c12ea9accda8514e4d206f243e7f6f883399c3795558bff67e382c0043357213186b480ce7079d427ee1b2e9875eedfb2f21539904d059ac6f1d26cd65ebb48468d41ed63"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xf8, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x34, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz0\x00'}, @NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz0\x00'}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x54, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x1}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x13}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x8}]}}}]}]}]}]}, @NFT_MSG_NEWRULE={0x1dc, 0x6, 0xa, 0xb998a9e8484e5d81, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_RULE_USERDATA={0xba, 0x7, 0x1, 0x0, "5bb6429164d1694bc0812042a3d07256a1d4df4ac16e359f88afd1d7435ccb230d8387f27b79aa384a1e3d4f9a872fbc59bee4fa2b317d7d1b5e269cc4f58089e00efc471b91ef12aad0f76874317c11010dee3b57c2413db9d6a62a09fed84d7dcef2212bf468cf0c3786382caa56533044b1e67d9af2d1f9e0a580071a2fc2da0e2723b5d07f236389480293ab0e5a11d8554bfcf4be39b99b986945b3d4e455bb31106bdf0fd068af34226acec12bed4eebd39c57"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0x8f, 0x7, 0x1, 0x0, "d817ca18dfd09b3a5feba77703543931055cf265db965da659136b55697d2502ce4748e57611777b1f148e5d70635afe227332ee0d986d985be1891fdc3d0927267d9146271171f3572674943e508ad65eb9d296fb011b09328c6c891736f71d53cc018d8e0a51118037907fb3f5f6f5794fb630e4609d1e2bcf1b17b110958fcbb794661701c5ff8fde63"}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3a}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xecfa}]}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2d}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_RULE_USERDATA={0x5e, 0x7, 0x1, 0x0, "f65be0db50c53e9da0338388ae3b662b062cfd5e24c8c572098b62b1adaaee8b36a4a071869cb8032e0990243a0c86b1a8fc7ca7d6ef7ccc8d27b293501071bd4e0826a1b3e0a4dc2aa6ed14c42489b6088bedd8d29cbc96f4b7"}]}, @NFT_MSG_NEWFLOWTABLE={0x1f0, 0x16, 0xa, 0x302, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x198, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x5184}, 0x1, 0x0, 0x0, 0x60008000}, 0x80)

1.802573634s ago: executing program 5 (id=3677):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0xba9, 0x1, 0x1}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x1f)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, r4, 0x400, 0x70bd29, 0x25dfd9fd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8b}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000014008506000000000000000000000000c28a50e447ed12d87134109858dd0be8e4a3e25c268f09832e3b026dbc13a084f3b70aa0", @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000b40)=@newnexthop={0x5f8, 0x68, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x1}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ENCAP={0x588, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x584, 0x1, {{0x2, {0x62, 0x6, 0x4, 0x3, 0x8, 0x20, 0x8, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}, [@private0, @remote, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, @remote, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @private2, @remote, @private1, @mcast2, @mcast1, @private2, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @local, @mcast1, @empty, @local, @private1, @mcast1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @remote, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @rand_addr=' \x01\x00', @mcast2, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast1, @local, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}]}}}, @NHA_ID={0x8}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP={0x34, 0x2, [{0x1, 0x2}, {0x0, 0x8}, {0x2, 0xf}, {}, {0x2, 0x8}, {0x0, 0x5}]}, @NHA_ENCAP_TYPE={0x6}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x4000)
bind$can_raw(r2, &(0x7f0000000500)={0x1d, r3}, 0x10)
recvmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)=""/187, 0xbb}], 0x1, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x10041)
syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0)
accept4$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x800)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x2c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x44000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0)

1.78618536s ago: executing program 2 (id=3678):
r0 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x800000000001, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x1e}, 0x1, 0x3c}, 0xb, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8)
close(r0)

1.633520102s ago: executing program 2 (id=3679):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xc0}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r8, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000940)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0xdc, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x98, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_0\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x190}, 0x1, 0x0, 0x0, 0x40084}, 0x20008005)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x19df1dfab86214d3}, @IFLA_IPTUN_FLAGS={0x6}]}}}]}, 0x40}}, 0x0)

1.62064718s ago: executing program 5 (id=3680):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x20}, 0x10)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
bind$phonet(r1, &(0x7f0000000000)={0x23, 0x20}, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\b'], 0x28}}, 0x0)
close(r0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
pipe(&(0x7f0000000180))
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001a000100000000000000000081"], 0x1c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x110, r3, 0x0)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r4, 0x89e3, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080)
socket$kcm(0x29, 0x0, 0x0)

1.457560769s ago: executing program 0 (id=3682):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1a}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
close(r1)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x2, 0x6, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4aef6a06}, [@map_fd={0x18, 0x1, 0x1, 0x0, r3}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)

1.455963007s ago: executing program 7 (id=3683):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711105000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff07}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x81, 0xd, 0x9, 0x30000, 0x1, 0x9f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x7}, 0x50)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x4)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x806}, @TCA_FLOWER_KEY_ARP_SHA={0xa, 0x3f, @broadcast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000002c0)={<r5=>r0, &(0x7f00000001c0)='\x00', 0x400000, &(0x7f0000000200)={@align=0x80000001, {0x8, 0x3f61, 0x9555, 0x8}}, 0x4, &(0x7f0000000240), &(0x7f0000000280)=0x100})
pipe(&(0x7f0000000040)={<r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r6, 0x0, r7, 0x0, 0x25a5, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0x1, <r8=>0xffffffffffffffff}, 0x4)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x4)
r10 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000400)={0xffffffffffffffff, 0x100, 0x8}, 0xc)
pipe(&(0x7f00000004c0)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r12, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4)
setsockopt$inet_tcp_int(r12, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r12, &(0x7f0000000300)={0x2, 0x4e22, @remote}, 0x10)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r14=>0x0})
r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x38, r15, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x84d}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x337}]}]}, 0x38}}, 0x0)
sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r15, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004040)
shutdown(r12, 0x0)
sendto$inet(r12, &(0x7f0000000340)='\x00~', 0x2, 0x840, 0x0, 0x0)
splice(r12, 0x0, r11, 0x0, 0x8a, 0xa)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, <r16=>0xffffffffffffffff}, 0x4)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0xffffffffffffffff, <r17=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pi6   \x00'}, 0x20)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_tracing={0x1a, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @jmp={0x5, 0x0, 0x4, 0x8, 0x6, 0xfffffffffffffff8, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x10, 0x0, 0x0, 0x41100, 0xd, '\x00', r4, 0x1a, r5, 0x8, &(0x7f0000000300)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xc, 0xcb7, 0xff}, 0x10, 0x10e0e, r0, 0x5, &(0x7f0000000600)=[r6, r8, r9, r10, r11, r16, r17], &(0x7f0000000640)=[{0x5, 0x4, 0x9}, {0x2, 0x1, 0x3, 0xc}, {0x0, 0x3, 0x8, 0x9}, {0x0, 0x3, 0x0, 0x7}, {0x5, 0x2, 0x9, 0x3}], 0x10, 0x10}, 0x94)

1.447000996s ago: executing program 2 (id=3684):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003}, 0x18)
bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x2, {0x0, 0xff, 0x5}, 0xfd}, 0x18)
sendmsg$xdp(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2c, 0xd, r2, 0x4}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000240)="2f99c4cefeea2f0a3f3ddf87915acc235b7584eec5f0a7c909bb777073d3803e97e2e6045a4668a56883a58c00c3d6be7ffea5dbfcc18aa2af263db3cb6be7bba26f88370a3feacefeeb6ac6b97830bcc27312aa917d01ca6e262591a7a9190118dc352a2689c162aaec693c62196b541e33f121b6c6b41c11747f9c6772251da41caed8dca070e44dfb313f7d9bb682b775791e9f4da95a611e3371844cd70f0c6a23922e054ade4373f3206c0c20024fc748bcdab33a64e3148dda2a5183c2abc2", 0xc2}], 0x1, 0x0, 0x0, 0x10}, 0x20008004)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

1.166705426s ago: executing program 2 (id=3686):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000001c0)=0x1, 0x4)
sendmmsg$inet(r1, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x140}}], 0x2, 0x2400804c)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r3}, &(0x7f0000000380)=0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1ef8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.166131733s ago: executing program 5 (id=3687):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r1=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
r12 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r12, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (async)
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000010000130200"/50], &(0x7f0000000080)=""/233, 0x32, 0x31, 0x1}, 0x20) (async)
recvmsg(r13, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) (async)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004010}, 0x8000) (async)
r15 = socket$nl_rdma(0x10, 0x3, 0x14) (async)
r16 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6=@loopback, 0x4e23, 0x2, 0x4e20, 0x6, 0xa, 0xa0, 0x20, 0x3c}, {0x0, 0x9031, 0x9, 0x0, 0xfffffffffffffff4, 0x4, 0x7, 0x7}, {0x8001, 0x5, 0x71a, 0x9}, 0x9, 0x6e6bbe, 0x1, 0x7bbbbeaf0e80c2d7, 0x2}, {{@in=@private=0xa010100, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x34ff, 0x0, 0x3, 0xd, 0x1, 0x81d, 0xb}}, 0xe8) (async)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r15, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="38000000031401002abd7000ffdbdf00090002007379873100000000080041007278650014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="2000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010)

1.128633318s ago: executing program 1 (id=3688):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x1}]}, {0x0, [0x2e, 0x30]}}, 0x0, 0x28}, 0x20)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.052305241s ago: executing program 0 (id=3689):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x1, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x2}}, 0xb8}}, 0x10)
sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0xfffffffe, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x20}, {0x0, 0x1, 0x100, 0x0, 0x0, 0x9, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f00000000c0)=0x7ff, 0x4)
recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x3}], 0x1, 0x10002, 0x0)
r6 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000001200)={0x60000010})
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r2, &(0x7f0000000280)={0x1000})
ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f0000000100))
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x8168}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x80000001, 0x7}}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000044}, 0x0)
close(0x4)

998.039362ms ago: executing program 5 (id=3690):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0xba9, 0x1, 0x1}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x1f)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, r4, 0x400, 0x70bd29, 0x25dfd9fd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8b}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000014008506000000000000000000000000c28a50e447ed12d87134109858dd0be8e4a3e25c268f09832e3b026dbc13a084f3b70aa0", @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000b40)=@newnexthop={0x5f8, 0x68, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x1}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ENCAP={0x588, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x584, 0x1, {{0x2, {0x62, 0x6, 0x4, 0x3, 0x8, 0x20, 0x8, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}, [@private0, @remote, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, @remote, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @private2, @remote, @private1, @mcast2, @mcast1, @private2, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @local, @mcast1, @empty, @local, @private1, @mcast1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @remote, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @rand_addr=' \x01\x00', @mcast2, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast1, @local, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}]}}}, @NHA_ID={0x8}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP={0x34, 0x2, [{0x1, 0x2}, {0x0, 0x8}, {0x2, 0xf}, {}, {0x2, 0x8}, {0x0, 0x5}]}, @NHA_ENCAP_TYPE={0x6}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x4000)
bind$can_raw(r2, &(0x7f0000000500)={0x1d, r3}, 0x10)
recvmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)=""/187, 0xbb}], 0x1, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x10041)
syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0)
accept4$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x800)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x2c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x44000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0)

997.410806ms ago: executing program 2 (id=3691):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfd, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0xa}}}}]}, 0x44}}, 0x840b0)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001180)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {}, {0x0, 0xa}, {0x0, 0x10}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0xfffffc00}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x4000)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100), 0x3)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$cgroup_subtree(r5, &(0x7f0000000040), 0xfffffc3f)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0x5, 0x8, 0x8be3, 0x4000, 0x1, 0x7e47, '\x00', 0x0, r5, 0x3, 0x2, 0x5, 0x4}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x28011, r6, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r8, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r9 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r10=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000100)={0x6, 0x200, 0x3374, 0x6, r10}, &(0x7f0000000300)=0x10)
r11 = socket$kcm(0x2, 0xa, 0x2)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={&(0x7f00000002c0)="a9a57dfd0cdef03c523210311b06d3865128a140c0eecec07e354bf8a5f85a1609e11a7649428341899b447b09e411cf51df2e0088e99a0df32f7613195a74eb1351d67d643385eb1a03cb62bae7dfbbda38dcccbeefddd936db9a4a2b977413e4bbaeebf80ed974d01661cde6782be9651cfe8c221db7a09d1dc47472a87869e2917df666a365a827e9b91ce9b7263bbedee45627878b3d40bd5d", &(0x7f0000000380)=""/4, &(0x7f00000003c0)="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", &(0x7f00000004c0)="c667bb9728bf5f39c61ed3d09a5502521a3ad85ec968013f002e139a47afaa79774a6999b50cbdad40989c52266f5cff3c27f3060577eddede86d12f39af875f", 0x1ff, r4, 0x4}, 0x38)
r12 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$inet6_mreq(r12, 0x29, 0x46, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
recvmmsg(r5, &(0x7f0000002480)=[{{&(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000680)=""/228, 0xe4}, {&(0x7f00000007c0)=""/100, 0x64}, {&(0x7f0000000840)=""/188, 0xbc}, {&(0x7f0000000900)=""/232, 0xe8}, {&(0x7f0000000a00)=""/54, 0x36}], 0x6, &(0x7f00000011c0)=""/4096, 0x1000}, 0x1}, {{&(0x7f00000021c0)=@hci, 0x80, &(0x7f0000002340)=[{&(0x7f0000002240)=""/72, 0x48}, {&(0x7f00000022c0)=""/70, 0x46}], 0x2, &(0x7f0000002380)=""/205, 0xcd}, 0x7}], 0x2, 0x2, &(0x7f0000002500)={0x0, 0x989680})
write$tun(r0, &(0x7f0000000280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@timestamp={0x44, 0x4, 0xf4, 0x0, 0x1}]}}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3a)

803.022192ms ago: executing program 5 (id=3692):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x3, 0x78, 0xfff9, 0x100, 0xc, 0x444000fc})
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={<r1=>0x0, 0x2, 0x20}, &(0x7f0000000100)=0xc)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={<r2=>r1, 0x6}, &(0x7f0000000180)=0x8)
r3 = socket(0xa, 0x3, 0x9)
getsockopt$nfc_llcp(r3, 0x3a, 0x0, 0x0, 0x2000005d)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r2}, &(0x7f0000000380)=0x8)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e", 0x19}], 0x1}, 0x0)
r4 = socket$kcm(0x10, 0x400000002, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
close(0x4)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r7=>0x0})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x12, 0x3, 0x8, 0x2, 0x200}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x7, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33)

702.976525ms ago: executing program 1 (id=3693):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030000480", @ANYRESDEC, @ANYRESDEC=0x0], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
unshare(0x2c060000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4) (async)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00')
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250e5fa4dd7bc0fafaccdc82022c6968991cb1239285f166c88a7d5b3cc50e0ab9765d0b6927b9290608e84bfef04e93a5948c7047e6fce7b35cb2282f2033c7e4476c116cd4676db4ff24f0eaf5ab58d07c16602fbe5edc977db9db923dbad443a07aedc12025c59f39"], 0x20}, 0x1, 0x0, 0x0, 0x4008d}, 0x20000000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) (async)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'gre0\x00', 0x20}) (async)
r6 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r5, &(0x7f0000000400)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x7, 0x66, 0x68, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x6}, {"92de7b253fdcf89d15d599cb58511c3efe6eea31b11b67944960fec8de12b986ba3d8ae4c8330900000040da57842b55726a6aa269847c6a10c6"}}}}, 0x74) (async)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (async)
r8 = accept4(r7, 0x0, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f00000040c0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="816154c6e71d9c750363f342744911ca45e32f393e977df3b37b8f315e8271e2", 0x20}, {&(0x7f0000002780)="1412db33722627433eac166190a979b24a252d244af8b27292b4576fc3b3806e0347778024e08aeabd5095bcb6435b0784bc039c894fdbad65262479b27ec7824d174849499dfdd7339b8a7aa1af2aa9354c0987bfc33778c11962190161c89b", 0x60}], 0x2, &(0x7f0000000540)=[@op={0x18}], 0x18, 0x40088d5}], 0x1, 0x40) (async)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x60}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/122, 0x7a}, {&(0x7f0000000580)=""/126, 0x7e}], 0x2, 0x0, 0x52}, 0x6}, {{&(0x7f0000000480)=@phonet, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/200}], 0x0, 0xfffffffffffffffe}, 0xa}], 0x2, 0x10000, 0x0) (async)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=ANY=[@ANYBLOB="bed9a4f666a5f9cbb768aace85e8848f38f28cae3f60bcd00e2c44bb64e5cc4cffe8886ba994408ac17482944337114f35f21f9bbc9a82556fcda3a0828fe89c6018c1f248b2232f7308ef39c37eb67478380eb5f73cfe1144b2e62d0732658b1bb7b8104ab37285267505ab0010fa4dd6e8e2fee5a3e65316317fe1f4c0e12377a19102ff24c2153ac531dbfb9ba1435229719792b129e564fa5600"/176, @ANYRESDEC=r2, @ANYBLOB="4d7e29bd7000000000002a00000008000200", @ANYRES32=0x0, @ANYBLOB="0a0000007774616e310000008dc680572b81d9fc781f29ecc081459ca77fdd555726b3553403bf90a472acaa6bb1f5f0c370"], 0x28}, 0x4, 0x700000000000000}, 0x4000)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xffbffffe, @mcast1, 0x9}, 0x1c)

653.575793ms ago: executing program 0 (id=3694):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000090bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b70500000d0000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x62, 0xfe, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000440)=""/254, 0x2f00, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x10000}, 0x24) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000440)="1a425f3770b268af205c2096cf3a0b353c28019586fa75f943c682a9b3c128851c1c2fe1350a5b994766bce1e24b59d3262ec578e70cb8295b3cee57fb4c161429a2bff8fbf5647da75032c187832a049fea981c7b864465de6bce7661e604adc7fca93f6062578fb4719a710f8870b4586c893ae3d978e64922e14638584262c24a8af7b6ee9678504342", 0x3, r1, 0x4}, 0x38)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)="5d46542b3090ce5ceca970bf8abf170549531f3309044e8b5176033b03b6ffb6877fc1bf93944e8918f7671993d5b56494717c96f1a910bc20b312c4ac1319c04da6b26ab882b4086cb2ac1545cef2003c2f29885496d182cc00eb08067822dfbfa896a37248b990eeeec77445d6f8da", &(0x7f0000000100), 0x1003, r1}, 0x38)

652.000722ms ago: executing program 5 (id=3695):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0)
r3 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_int(r4, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
pread64(r5, &(0x7f0000000200)=""/108, 0x6c, 0xff)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0)
r6 = socket$igmp6(0xa, 0x3, 0x2)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r8, 0x0)
splice(r8, 0x0, r7, 0x0, 0x406f413, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000080)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x80800)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000050001a804c000a801400"], 0x78}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2a86dd6000000000283afffe8000000000000000000000000000bbfe8000000000000000000000000000aa89009078000000000000000000000000000000000000000000000000000000000000000000000001758157b3a7b736d6b3b172c20592ffa2a622486d50078beb99f40b56133c7339a4a667de10bb932a6f26eb19733f1da0129724e42154b47f0f9439119541327b24063a47e42c4d105bccc5fe"], 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r6, 0x80489439, &(0x7f0000000080))
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3)
sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000001340)='\'', 0x7ab8}], 0x1}}], 0x1, 0x0)

529.941677ms ago: executing program 7 (id=3696):
bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}, 0x4}}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x28, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b"}}}}}}}, 0x4e)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x44040)
r3 = socket(0x10, 0x2, 0x0)
sendto$inet6(r3, &(0x7f00000004c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006020a0000000d0085a168d0bf46d32345653600648d07000b000a00070849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160012000a0000000000e000e218d1dd3b6ed538f6523250", 0x78, 0xc090, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
syz_emit_ethernet(0x6e, &(0x7f0000000600)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @local, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x0, @dev, @empty, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @cipso={0x86, 0xd, 0x0, [{0x0, 0x7, "4289b015b1"}]}]}}}}}}}, 0x0)
write$tun(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d484"], 0x340a)

465.369523ms ago: executing program 0 (id=3697):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000d40)={0x10, 0x0, 0x25dfdbfd, 0x4000}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f00000001c0), 0x12)
r5 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @local, 0xfffc}, 0x1c)
sendto$inet6(r7, 0x0, 0x0, 0x20000005, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x100f1e}, 0x1c)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000001000390400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="019800000500020020001280080001006772650014000280080007000c"], 0x40}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039040200"/20, @ANYRES32=r2, @ANYBLOB="4010000000410400180012800c00028008000100", @ANYRES32=r2, @ANYBLOB], 0x38}}, 0x4040000)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r8, &(0x7f0000000180)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0x3ff, @rand_addr=' \x01\x00', 0x6}}, 0x24)
listen(r8, 0x0)
r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9547ed387dbe9abc86a457991", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_ext={0x1c, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000e0840a823b5bff41856b1624000e3ff", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018260000", @ANYRES32=r10, @ANYBLOB="00000000020000001861000003000000000000000e00000018220000", @ANYRES32, @ANYBLOB="00000000544c00009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000640)='GPL\x00', 0x8, 0x4f, &(0x7f0000000680)=""/79, 0x40f00, 0x4d, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x5, 0x10002}, 0x8, 0x10, &(0x7f0000000740)={0x2, 0x4, 0x38, 0xd238}, 0x10, 0x9f38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8bb9ab01}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r0, 0x8, 0x0, 0x4, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0], <r13=>0x0}, 0x40)
ioctl$F2FS_IOC_MOVE_RANGE(r9, 0xc020f509, &(0x7f00000009c0)={<r14=>r0, 0x200, 0x4, 0x6})
r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x12, 0x28, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000070000000000000009000000185600000600000000000000000000008500000056000000b7080000000000007b8af8ff00000000b7080000030000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000049b8869b0100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000018000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000085200000050000003d15f8ffffffffff18110000509f5d2c226949c085b7ff5dc03a30025c4a91e1ebca588f09ea0b1afb3bdeec26559cf22a875286f8c9b771b35f0a9c7ff1aac020a7b285691971daf82384022e03fbb617d6561eeb3ac69361ebb6a3c249b410967c04874fb47f16625eab482c95ec44f8e96fc50259a968ecc7ef84012225a45228ce057373d72b20fae59e", @ANYRES32=r10, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000b40)='GPL\x00', 0xfbe, 0x1d, &(0x7f0000000b80)=""/29, 0x40f00, 0x50, '\x00', 0x0, @cgroup_sock_addr=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000bc0)={0x4, 0x4, 0x5, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000c00)=[r10, r10, r10, r9, r10, r10, r10, r10], &(0x7f0000000c40)=[{0x3, 0x3, 0x5, 0x1}, {0x1, 0x4, 0x5, 0x8}], 0x10, 0x3}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d80)=ANY=[@ANYRES32=r14, @ANYRES32=r11, @ANYBLOB="2800000002000000", @ANYRES32=r12, @ANYBLOB, @ANYRES32=r15, @ANYBLOB="cfc647a7645b7473d8a8da3b89c26e063990f836bad982a3da858ffa3ae7c63ceaaf4f5e9c69b8", @ANYRES64=r13], 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r10}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20)

464.472833ms ago: executing program 1 (id=3698):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
listen(r1, 0xf15)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xc7, 0x4)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async)
socket$kcm(0xa, 0x1, 0x106) (async)
sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) (async)
listen(r1, 0xf15) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async)
setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xc7, 0x4) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) (async)

323.780938ms ago: executing program 1 (id=3699):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0}, 0x94)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0)
mmap(&(0x7f000000b000/0x4000)=nil, 0x4000, 0x1000005, 0x8012, 0xffffffffffffffff, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf25"], 0x2c}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', r2, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3100000000280004800800024000000000080001400000000514000300766505000000000000007461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000002000048014000300"], 0xe8}}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000080b703000000000000850000000c000000b70084d6f00f87bf5000000000000095"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x90)
getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0), 0x10)

264.052122ms ago: executing program 7 (id=3700):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0xf8, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0x0, 0x0, 0xff0000ff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xffffff], 'vlan0\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x20, 0x0, 0x64}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@ipv6={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], [0xff, 0xffffff00], 'batadv0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x0, 0xf9, 0x0, 0x8}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x20}, {0x2, 0x4, 0x0, [0x4, 0xff80, 0xeb81, 0x6, 0x0, 0x6858, 0x7, 0x4, 0xb3, 0x6, 0x0, 0x3, 0x8, 0xfbe, 0x6, 0xbe8], 0x9}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ipv6={@local, @private0, [0x0, 0xffffff00, 0xff000000, 0xffffffff], [0xff000000, 0xffffffff], 'ip6tnl0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x33, 0x50, 0x5, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4, 0x1ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
socket(0x2a, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1)

181.658995ms ago: executing program 1 (id=3701):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) (async)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x95}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x8, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x7}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}]}]}]}, 0x4c}}, 0x804) (async)
close(r1) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async)
r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
close(0x3)
close(0x4)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r6) (async)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xff, '\x00', 0x0, r6, 0x3}, 0x50)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000013c0)={0x7, <r9=>0x0}, 0x8) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001400)={r0, <r10=>0xffffffffffffffff}, 0x4)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001440)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, r6, 0x3, 0x1, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x11, 0x18, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x364e6000}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x1, 0x2, 0xb, 0x9, 0x42, 0x10}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000240)='syzkaller\x00', 0x4, 0xd5, &(0x7f0000001240)=""/213, 0x0, 0x6, '\x00', 0x0, @fallback=0x6, r6, 0x8, &(0x7f0000001340)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000001380)={0x0, 0x2, 0x8000, 0x8}, 0x10, r9, r5, 0x0, &(0x7f00000014c0)=[r1, r8, r8, r10, r11, r0], 0x0, 0x10, 0x9}, 0x94) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@generic={&(0x7f0000000000)='./file0\x00', r8}, 0x18) (async)
close(0x4)

89.297096ms ago: executing program 7 (id=3702):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0xba9, 0x1, 0x1}, 0x48)
r0 = socket$netlink(0x10, 0x3, 0x1f)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x98, r4, 0x400, 0x70bd29, 0x25dfd9fd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe0}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8b}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000014008506000000000000000000000000c28a50e447ed12d87134109858dd0be8e4a3e25c268f09832e3b026dbc13a084f3b70aa0", @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000001180)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f0000000b40)=@newnexthop={0x5f8, 0x68, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x1}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_ENCAP={0x588, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x584, 0x1, {{0x2, {0x62, 0x6, 0x4, 0x3, 0x8, 0x20, 0x8, [@private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}, [@private0, @remote, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @private0, @remote, @mcast2, @local, @ipv4={'\x00', '\xff\xff', @remote}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, @private2, @remote, @private1, @mcast2, @mcast1, @private2, @private2, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @mcast2, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @local, @mcast1, @empty, @local, @private1, @mcast1, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @remote, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @rand_addr=' \x01\x00', @mcast2, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast1, @local, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @ipv4={'\x00', '\xff\xff', @remote}]}}}, @NHA_ID={0x8}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6}]}, @NHA_GROUP={0x34, 0x2, [{0x1, 0x2}, {0x0, 0x8}, {0x2, 0xf}, {}, {0x2, 0x8}, {0x0, 0x5}]}, @NHA_ENCAP_TYPE={0x6}]}, 0x5f8}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x4000)
bind$can_raw(r2, &(0x7f0000000500)={0x1d, r3}, 0x10)
recvmsg$unix(r2, &(0x7f0000000800)={&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000680)=""/187, 0xbb}], 0x1, &(0x7f0000000780)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x10041)
syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0)
accept4$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14, 0x800)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x2c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc040}, 0x44000)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffc1e}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x400000, 0x0)

88.741069ms ago: executing program 0 (id=3703):
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x400, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, @in6={0xa, 0x4e23, 0x4088, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e20, @broadcast}], 0x58)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r0=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000140)=<r2=>0x0) (async)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000180)={0x16, 0x4, {0x2, @struct={0xd, 0x1ff}, 0x0, 0x3, 0x80000001, 0xb, 0x80000000, 0x4, 0x10, @struct={0x10000, 0x8}, 0x5, 0x10000, [0x9, 0x0, 0x3, 0x935, 0x101, 0x3]}, {0x5, @usage=0xa, 0x0, 0xc, 0x4, 0x54, 0x25, 0x5, 0x84, @usage=0x5, 0x2, 0x400, [0x8, 0x7f, 0x8, 0x80000000, 0x100, 0xed67]}, {0xeac1, @struct={0x3ff, 0x200}, <r3=>0x0, 0xee, 0x400, 0x1, 0x401, 0xfffffffffffffffa, 0xe2, @usage=0x6, 0x5, 0x0, [0x1, 0xfffffffffffffffb, 0x1ff, 0x9, 0x7, 0xc000000]}, {0xff, 0xd5, 0x2}})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000580)={{r1}, r2, 0x8, @unused=[0x1, 0x3, 0x80000001, 0xd], @devid=r3}) (async)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000001580)={0x8, 'dvmrp1\x00', {'bridge_slave_0\x00'}, 0x7})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001600)={'team0\x00', <r4=>0x0}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001680)={'syztnl2\x00', &(0x7f0000001640)={'erspan0\x00', <r5=>0x0, 0x0, 0x7, 0x7fffffff, 0x40, {{0x8, 0x4, 0x2, 0x7, 0x20, 0x65, 0x0, 0x1, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x2e}, {[@cipso={0x86, 0x9, 0x0, [{0x6, 0x3, "a2"}]}]}}}}}) (async)
getsockopt$inet6_mreq(r1, 0x29, 0x8, &(0x7f00000016c0)={@mcast1, <r6=>0x0}, &(0x7f0000001700)=0x14)
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001880)={&(0x7f0000001740)={0x10c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x68, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x2, 0x3, 0x3, 0x4}, {0x1, 0x7, 0x9}, {0x8bc2, 0x8, 0x0, 0x6}, {0x0, 0xe1, 0x2, 0xcc16}, {0xfff7, 0x2, 0x3f, 0x4}, {0x5, 0x2, 0x2, 0x3}]}}}]}}, {{0x8, 0x1, r5}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000001900)={<r8=>0x0, 0xe01, 0x0, 0x80000001, 0x6e, 0xd}, &(0x7f0000001940)=0x14)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000001980)={r8, 0xd}, 0x8) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)=@gettclass={0x24, 0x2a, 0x300, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x5, 0x10}, {0x2, 0xb}, {0x7, 0xfff2}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x40090) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001ac0)={r8, 0xfffd, 0xd7}, 0x8) (async)
r9 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$sock_qrtr_TIOCOUTQ(r9, 0x5411, &(0x7f0000001b00))
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001b40)={0x7, <r10=>0x0}, 0x8)
r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001b80)={r10}, 0x4)
getsockopt$IP_VS_SO_GET_TIMEOUT(r9, 0x0, 0x486, &(0x7f0000001bc0), &(0x7f0000001c00)=0xc) (async)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001d40)={@map=r0, 0x2, 0x1, 0x3ff, &(0x7f0000001c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001c80)=[0x0, 0x0], &(0x7f0000001cc0)=[0x0, 0x0], &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0, 0x0], <r12=>0x0}, 0x40) (async)
r13 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001dc0)='syz0\x00', 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001d80)={@cgroup=r13, r11, 0x2e, 0x4, 0x0, @void, @value=r11, @void, @void, r12}, 0x20) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000001e00)={<r14=>r8, 0x5, 0x0, 0x2, 0xe5}, &(0x7f0000001e40)=0x18)
ioctl$BTRFS_IOC_DEFRAG(r9, 0x50009402, 0x0) (async)
getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, &(0x7f0000001e80)=""/159, &(0x7f0000001f40)=0x9f) (async)
openat$cgroup_freezer_state(r13, &(0x7f0000001f80), 0x2, 0x0) (async)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000001fc0)={<r15=>r14, 0x4, 0x5}, &(0x7f0000002000)=0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r7, 0x84, 0x23, &(0x7f0000002040)={r15, 0x4}, 0x8)

58.52278ms ago: executing program 1 (id=3704):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r2 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
write$tun(r1, &(0x7f0000001440)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0xfc0, 0x68, 0x0, 0x60, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "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"}}, 0xfce) (async)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async)
listen(r3, 0x8) (async)
r4 = accept4(r3, 0x0, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r6=>0x0, 0x32, &(0x7f0000000740)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x6f, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x25, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000050000000000000006000000b566e0fff0ffffff18110000", @ANYRES32=0x1, @ANYBLOB="0000180000000001b7020000000000008500000086000000874806001000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000000ca8000001800000b7080000000000007b8af8ff00000000b7080000008000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018240000", @ANYRES32=0x1, @ANYBLOB="0000000001000000186400000a00000000000000ffffff7f18110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000476ae0ffffffffff9500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xc, 0x6, 0x9da}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xb532}, 0x94) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140000000000000880"], 0x14}], 0x1}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a00)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000020000f100", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES8=r6, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, r6, r7}, 0x94)

0s ago: executing program 0 (id=3705):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c)
r2 = socket(0x1000000010, 0x80002, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockname(r3, &(0x7f00000014c0)=@ll={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80)
sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@deltfilter={0x34, 0x2d, 0x1, 0x800000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x10}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000840}, 0x80)
r5 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000001340)=@phonet={0x23, 0x7f, 0x6, 0x9}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x1}, 0x20000001)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r6=>0x0}}, 0x10)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="58560da302880000001d00040025bd7000fbdbdf250a000000fa2b8408c1b9", @ANYRES32=r6, @ANYBLOB="0000110e08000b00ffffffff060005000300000008000f0000000000060005000200000014000100fc0000000000000000000000000000000800070004000000"], 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x40844)

kernel console output (not intermixed with test programs):

14138] bond9: (slave bond10): Enslaving as an active interface with a down link
[  301.918411][T14153] 8021q: adding VLAN 0 to HW filter on device bond2
[  301.952044][T14154] bond2: (slave veth0_to_bond): making interface the new active one
[  301.978111][T14154] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  302.014147][T14155] bond2: entered promiscuous mode
[  302.036104][T14155] veth0_to_bond: entered promiscuous mode
[  302.048253][T14155] bond2: entered allmulticast mode
[  302.053552][T14155] veth0_to_bond: entered allmulticast mode
[  302.109248][T14170] __nla_validate_parse: 4 callbacks suppressed
[  302.109266][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'.
[  302.236822][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'.
[  302.325671][T14176] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.2281'.
[  302.473026][T14186] syzkaller0: entered promiscuous mode
[  302.484134][T14186] syzkaller0: entered allmulticast mode
[  302.522040][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.528671][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.534967][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.541281][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.547573][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.553835][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.560141][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.566436][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.572750][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.579064][T14186] tc action pedit 'at' offset 257 out of bounds
[  302.585362][T14186] 0: reclassify loop, rule prio 0, protocol 800
[  302.742954][T14190] netlink: 'syz.0.2286': attribute type 1 has an invalid length.
[  302.874728][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2287'.
[  302.890624][T14197] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2287'.
[  303.000303][T14197] IPVS: set_ctl: invalid protocol: 103 10.1.1.1:20001
[  303.038070][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'.
[  303.059089][T14205] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2290'.
[  303.075784][T14202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2289'.
[  303.119163][T14202] netlink: 'syz.0.2289': attribute type 3 has an invalid length.
[  303.144367][T14208] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2288'.
[  303.185870][T14208] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2288'.
[  303.229489][T14208] gretap1: entered promiscuous mode
[  303.234758][T14208] gretap1: entered allmulticast mode
[  303.531329][T14232] netlink: 'syz.2.2297': attribute type 12 has an invalid length.
[  303.757567][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  303.768669][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  303.779438][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  303.788209][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  303.795786][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  303.953341][T14245] lo speed is unknown, defaulting to 1000
[  304.048801][T14255] netlink: 'syz.5.2303': attribute type 2 has an invalid length.
[  304.222316][T14273] netlink: 'syz.5.2308': attribute type 1 has an invalid length.
[  304.231638][T14273] netlink: 'syz.5.2308': attribute type 1 has an invalid length.
[  304.245750][T14275] netlink: 'syz.5.2308': attribute type 1 has an invalid length.
[  304.254146][T14275] netlink: 'syz.5.2308': attribute type 1 has an invalid length.
[  304.557221][T14280] syzkaller1: entered promiscuous mode
[  304.562872][T14280] syzkaller1: entered allmulticast mode
[  304.638813][   T29] audit: type=1800 audit(1775925362.326:6): pid=14293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2314" name="memory.events" dev="tmpfs" ino=2540 res=0 errno=0
[  304.764964][T14300] x_tables: duplicate entry at hook 2
[  305.042494][T14245] chnl_net:caif_netlink_parms(): no params data found
[  305.185600][T14245] bridge0: port 1(bridge_slave_0) entered blocking state
[  305.193160][T14245] bridge0: port 1(bridge_slave_0) entered disabled state
[  305.200627][T14245] bridge_slave_0: entered allmulticast mode
[  305.209031][T14245] bridge_slave_0: entered promiscuous mode
[  305.218071][T14245] bridge0: port 2(bridge_slave_1) entered blocking state
[  305.225236][T14245] bridge0: port 2(bridge_slave_1) entered disabled state
[  305.232786][T14245] bridge_slave_1: entered allmulticast mode
[  305.240583][T14245] bridge_slave_1: entered promiscuous mode
[  305.255156][T14330] netlink: 'syz.2.2321': attribute type 11 has an invalid length.
[  305.301633][T14245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  305.315628][T14245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  305.353870][T14245] team0: Port device team_slave_0 added
[  305.362221][T14245] team0: Port device team_slave_1 added
[  305.392562][T14333] syzkaller0: entered promiscuous mode
[  305.400120][T14333] syzkaller0: entered allmulticast mode
[  305.411803][T14245] batman_adv: batadv0: Adding interface: batadv_slave_0
[  305.418950][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.445226][T14245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  305.464707][T14245] batman_adv: batadv0: Adding interface: batadv_slave_1
[  305.466371][    C0] hrtimer: interrupt took 196438 ns
[  305.471984][T14245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  305.503387][T14245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  305.519239][T14333] netlink: 'syz.2.2322': attribute type 7 has an invalid length.
[  305.528211][T14333] netlink: 'syz.2.2322': attribute type 8 has an invalid length.
[  305.587403][T14245] hsr_slave_0: entered promiscuous mode
[  305.593839][T14245] hsr_slave_1: entered promiscuous mode
[  305.607599][T14245] debugfs: 'hsr0' already exists in 'hsr'
[  305.613877][T14245] Cannot create hsr debugfs directory
[  305.886551][ T5837] Bluetooth: hci6: command tx timeout
[  306.009349][T14345] pim6reg1: entered promiscuous mode
[  306.024797][T14345] pim6reg1: entered allmulticast mode
[  306.209600][T14245] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  306.285463][T14245] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  306.319622][T14364] ¾x9ÿ: renamed from bridge_slave_0
[  306.337177][T14245] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  306.367799][T14245] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  306.384172][T14245] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  306.433980][T14245] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  306.493999][T14245] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  306.512574][T14245] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  306.531900][T14374] syzkaller0: entered promiscuous mode
[  306.548616][T14374] syzkaller0: entered allmulticast mode
[  306.578604][T14374] 0: reclassify loop, rule prio 0, protocol 800
[  306.682329][T14383] IPv6: NLM_F_CREATE should be specified when creating new route
[  306.705179][T14383] syzkaller0: entered promiscuous mode
[  306.711259][T14383] syzkaller0: entered allmulticast mode
[  306.855390][T14245] 8021q: adding VLAN 0 to HW filter on device bond0
[  306.909483][T14245] 8021q: adding VLAN 0 to HW filter on device team0
[  306.946054][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.953282][ T7051] bridge0: port 1(bridge_slave_0) entered forwarding state
[  307.020920][ T7051] bridge0: port 2(bridge_slave_1) entered blocking state
[  307.028180][ T7051] bridge0: port 2(bridge_slave_1) entered forwarding state
[  307.243956][T14414] __nla_validate_parse: 19 callbacks suppressed
[  307.243975][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'.
[  307.265882][T14414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2347'.
[  307.279855][T14414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'.
[  307.316977][T14414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2347'.
[  307.457142][T14417] syz.1.2348 (14417) used greatest stack depth: 17696 bytes left
[  307.588786][T14425] syz.1.2348 (14425) used greatest stack depth: 17472 bytes left
[  307.620438][T14440] vlan2: entered allmulticast mode
[  307.666603][T14440] bond0: entered allmulticast mode
[  307.675305][T14442] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2351'.
[  307.685465][T14445] x_tables: duplicate underflow at hook 1
[  307.735304][T14442] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  307.757605][T14442] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  307.770399][T14442] 
 (unregistering): (slave batadv0): Releasing backup interface
[  307.788988][T14442] 
 (unregistering): Released all slaves
[  307.834724][T14453] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2355'.
[  307.850240][T14453] vxcan1 speed is unknown, defaulting to 1000
[  307.858129][T14451] ip6_vti0: entered promiscuous mode
[  307.873677][T14451] ip6_vti0: entered allmulticast mode
[  307.890174][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2354'.
[  307.906020][T14453] vxcan1 speed is unknown, defaulting to 1000
[  307.924078][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2354'.
[  307.951579][T14245] 8021q: adding VLAN 0 to HW filter on device batadv0
[  307.967516][ T5837] Bluetooth: hci6: command tx timeout
[  307.979540][T14453] vxcan1 speed is unknown, defaulting to 1000
[  308.039857][T14451] macvtap2: entered promiscuous mode
[  308.058504][T14451] macvtap2: entered allmulticast mode
[  308.309192][T14479] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2359'.
[  308.318414][T14479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2359'.
[  308.393690][T14459] lo speed is unknown, defaulting to 1000
[  308.400866][ T5965] lo speed is unknown, defaulting to 1000
[  308.469688][T14469] sctp: [Deprecated]: syz.0.2359 (pid 14469) Use of struct sctp_assoc_value in delayed_ack socket option.
[  308.469688][T14469] Use struct sctp_sack_info instead
[  308.774054][T14484] syzkaller0: entered promiscuous mode
[  308.780749][T14484] syzkaller0: entered allmulticast mode
[  308.807985][T14453] infiniband syz2: set active
[  308.813303][T14453] infiniband syz2: added vxcan1
[  308.821972][T14453] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  308.827869][T14453] infiniband syz2: Couldn't open port 1
[  308.885731][T14453] RDS/IB: syz2: added
[  308.897877][T14453] smc: adding ib device syz2 with port count 1
[  308.908323][T14453] smc:    ib device syz2 port 1 has no pnetid
[  309.123971][T14490] Bluetooth: hci1: Opcode 0x0401 failed: -4
[  309.215609][T14508] netlink: 'syz.2.2362': attribute type 1 has an invalid length.
[  309.243208][T14509] netlink: 'syz.2.2362': attribute type 1 has an invalid length.
[  310.049844][ T5837] Bluetooth: hci6: command tx timeout
[  310.160551][T10696] vxcan1 speed is unknown, defaulting to 1000
[  310.194507][T14508] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  310.196289][T14509] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  310.205916][ T6015] vxcan1 speed is unknown, defaulting to 1000
[  310.232501][T14453] vxcan1 speed is unknown, defaulting to 1000
[  310.306281][T14245] veth0_vlan: entered promiscuous mode
[  310.320131][T14245] veth1_vlan: entered promiscuous mode
[  310.381283][T14516] block nbd0: reconnected socket
[  310.413681][ T5837] block nbd0: Receive control failed (result -32)
[  310.477962][T14245] veth0_macvtap: entered promiscuous mode
[  310.490456][T14521] netlink: 'syz.5.2365': attribute type 1 has an invalid length.
[  310.508952][T14245] veth1_macvtap: entered promiscuous mode
[  310.528416][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  310.678313][T14528] bond3: (slave bridge3): making interface the new active one
[  310.698218][T14528] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  310.762458][T14245] batman_adv: batadv0: Interface activated: batadv_slave_0
[  310.850627][T14245] batman_adv: batadv0: Interface activated: batadv_slave_1
[  310.869246][T14453] vxcan1 speed is unknown, defaulting to 1000
[  310.902997][T14539] macvtap1: entered promiscuous mode
[  310.908814][T14539] macvtap1: entered allmulticast mode
[  310.920653][T14539] veth1_vlan: entered allmulticast mode
[  310.948677][ T7053] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  310.963164][ T7053] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  311.007308][ T7053] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  311.037105][ T7053] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  311.155919][T14554] netlink: 'syz.5.2374': attribute type 2 has an invalid length.
[  311.346024][ T7053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.367718][ T7053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.432262][T14453] vxcan1 speed is unknown, defaulting to 1000
[  311.450267][ T7051] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  311.468399][ T7051] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  311.751566][T14580] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000
[  311.906079][T14584] netlink: 'syz.6.2383': attribute type 10 has an invalid length.
[  312.105595][T14453] vxcan1 speed is unknown, defaulting to 1000
[  312.126641][   T51] Bluetooth: hci6: command tx timeout
[  312.338210][T14453] vxcan1 speed is unknown, defaulting to 1000
[  312.545262][T14453] vxcan1 speed is unknown, defaulting to 1000
[  312.759315][T14453] vxcan1 speed is unknown, defaulting to 1000
[  312.971479][T14453] vxcan1 speed is unknown, defaulting to 1000
[  313.694225][T14644] __nla_validate_parse: 5 callbacks suppressed
[  313.694240][T14644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2397'.
[  313.715076][T14644] openvswitch: netlink: Flow actions attr not present in new flow.
[  313.821443][T14646] syzkaller0: entered promiscuous mode
[  313.827408][T14646] syzkaller0: entered allmulticast mode
[  313.838460][T14646] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2398'.
[  314.366573][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  314.863085][T14584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  314.872936][T14604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2388'.
[  315.054039][T14653] netlink: 'syz.0.2401': attribute type 24 has an invalid length.
[  315.105493][T14662] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2405'.
[  315.146932][T14661] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2404'.
[  315.403280][T14675] syzkaller0: entered promiscuous mode
[  315.413434][T14675] syzkaller0: entered allmulticast mode
[  315.454142][T14680] netlink: 'syz.1.2411': attribute type 2 has an invalid length.
[  315.625797][T14689] netlink: 'syz.6.2414': attribute type 1 has an invalid length.
[  315.674030][T14695] netlink: 'syz.1.2416': attribute type 1 has an invalid length.
[  316.447685][T14745] netlink: 'syz.2.2429': attribute type 33 has an invalid length.
[  316.537038][T14755] IPVS: length: 87 != 8
[  316.661716][T14763] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'.
[  316.709815][T14764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2431'.
[  316.865798][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2436'.
[  316.943438][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  317.153762][T14782] netlink: 'syz.5.2437': attribute type 3 has an invalid length.
[  317.259922][T14782] lo speed is unknown, defaulting to 1000
[  317.270076][T14782] vxcan1 speed is unknown, defaulting to 1000
[  317.409258][T14798] ieee802154 phy1 wpan1: encryption failed: -22
[  317.912987][T14818] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2444'.
[  318.149835][T14839] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2453'.
[  318.246407][T14837] netlink: 'syz.6.2451': attribute type 1 has an invalid length.
[  318.656189][T14867] syzkaller0: entered promiscuous mode
[  318.684902][T14867] syzkaller0: entered allmulticast mode
[  318.714969][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2455'.
[  318.824702][T14881] TC_ACT_REPEAT abuse ?
[  318.885211][T14883] bridge_slave_0: left allmulticast mode
[  318.906534][T14883] bridge_slave_0: left promiscuous mode
[  318.912332][T14883] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.980928][T14883] bridge_slave_1: left allmulticast mode
[  319.003913][T14883] bridge_slave_1: left promiscuous mode
[  319.017579][T14883] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.047879][T14883] bond2: (slave veth0_to_bond): Releasing active interface
[  319.055128][T14883] veth0_to_bond: left promiscuous mode
[  319.077092][T14883] veth0_to_bond: left allmulticast mode
[  319.091374][T14883] bond0: (slave bond_slave_0): Releasing backup interface
[  319.103743][T14883] bond0: (slave bond_slave_1): Releasing backup interface
[  319.123888][T14883] team0: Port device team_slave_0 removed
[  319.134142][T14883] team0: Port device team_slave_1 removed
[  319.140822][T14883] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  319.148446][T14883] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.157484][T14883] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.165761][T14883] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.175975][T14883] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  319.303691][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2463'.
[  319.318343][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2463'.
[  319.369144][T14909] netlink: 'syz.2.2465': attribute type 2 has an invalid length.
[  319.393704][T14909] vþ: entered promiscuous mode
[  319.562434][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2466'.
[  319.757204][T14933] netlink: 740 bytes leftover after parsing attributes in process `syz.1.2466'.
[  320.047309][T14947] netlink: 'syz.6.2473': attribute type 21 has an invalid length.
[  320.057881][T14947] IPv6: NLM_F_CREATE should be specified when creating new route
[  320.065715][T14947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  320.073000][T14947] IPv6: NLM_F_CREATE should be set when creating new route
[  320.080364][T14947] IPv6: NLM_F_CREATE should be set when creating new route
[  320.087634][T14947] IPv6: NLM_F_CREATE should be set when creating new route
[  320.345221][T14961] netlink: 'syz.2.2478': attribute type 4 has an invalid length.
[  320.362824][T14969] IPVS: set_ctl: invalid protocol: 114 224.0.0.2:20004
[  320.448299][T14971] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2483'.
[  320.461806][T14971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2483'.
[  320.476562][T14971] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2483'.
[  320.485479][T14971] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2483'.
[  320.532125][T14976] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2484'.
[  321.044085][T15014] netlink: 'syz.0.2496': attribute type 1 has an invalid length.
[  321.165137][T15014] 8021q: adding VLAN 0 to HW filter on device bond8
[  321.267468][T15022] gtp0: entered promiscuous mode
[  321.272482][T15022] gtp0: entered allmulticast mode
[  321.279404][T15026] lo speed is unknown, defaulting to 1000
[  321.308480][T15026] vxcan1 speed is unknown, defaulting to 1000
[  322.103840][T15055] x_tables: duplicate entry at hook 3
[  322.208109][T15059] netlink: 'syz.6.2507': attribute type 10 has an invalid length.
[  323.401435][T15137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  323.490481][T15143] netlink: 'syz.1.2532': attribute type 1 has an invalid length.
[  323.500284][T15143] netlink: 'syz.1.2532': attribute type 1 has an invalid length.
[  323.834291][T15151] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode
[  323.842860][T15151] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode
[  325.593895][T15088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  325.683302][T15153] __nla_validate_parse: 43 callbacks suppressed
[  325.683323][T15153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2535'.
[  325.839359][T15158] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.045804][T15171] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2541'.
[  326.257528][T15178] IPv6: sit2: Disabled Multicast RS
[  326.263743][T15178] sit2: entered allmulticast mode
[  326.270721][T15180] netlink: 'syz.1.2546': attribute type 1 has an invalid length.
[  326.279109][T15180] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2546'.
[  326.740782][T15215] netlink: 'syz.6.2553': attribute type 11 has an invalid length.
[  326.749022][T15215] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2553'.
[  327.348363][T15202] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  327.498243][T15222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2555'.
[  327.642994][T15230] netlink: 'syz.5.2554': attribute type 1 has an invalid length.
[  327.687552][T15232] dvmrp0: entered allmulticast mode
[  327.753434][T15230] 8021q: adding VLAN 0 to HW filter on device bond4
[  327.796848][T15237] bond4: entered allmulticast mode
[  327.832424][T15227] bond4: (slave ip6gretap2): making interface the new active one
[  327.853914][T15227] ip6gretap2: entered allmulticast mode
[  327.874534][T15227] bond4: (slave ip6gretap2): Enslaving as an active interface with an up link
[  327.906738][T15249] dvmrp0: left allmulticast mode
[  327.975682][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2562'.
[  328.059609][T15249] netlink: 'syz.0.2562': attribute type 1 has an invalid length.
[  328.189115][T15249] 8021q: adding VLAN 0 to HW filter on device bond10
[  328.227348][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.227348][T15273] Use struct sctp_sack_info instead
[  328.282006][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.282006][T15273] Use struct sctp_sack_info instead
[  328.340507][T15249] netlink: 'syz.0.2562': attribute type 1 has an invalid length.
[  328.355285][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.355285][T15273] Use struct sctp_sack_info instead
[  328.373514][T15249] netlink: 'syz.0.2562': attribute type 2 has an invalid length.
[  328.387966][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.387966][T15273] Use struct sctp_sack_info instead
[  328.405886][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.405886][T15273] Use struct sctp_sack_info instead
[  328.423919][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.423919][T15273] Use struct sctp_sack_info instead
[  328.443280][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.443280][T15273] Use struct sctp_sack_info instead
[  328.468004][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.468004][T15273] Use struct sctp_sack_info instead
[  328.505768][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.505768][T15273] Use struct sctp_sack_info instead
[  328.525279][T15273] sctp: [Deprecated]: syz.5.2569 (pid 15273) Use of struct sctp_assoc_value in delayed_ack socket option.
[  328.525279][T15273] Use struct sctp_sack_info instead
[  328.530928][T15256] bond7: (slave veth0_to_bond): Releasing active interface
[  328.577837][T15256] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  328.618512][T15287] netlink: 'syz.6.2571': attribute type 2 has an invalid length.
[  328.626549][T15285] netlink: 'syz.6.2571': attribute type 2 has an invalid length.
[  328.815747][T15296] bond0: (slave bond_slave_1): Enslaving as an active interface with a down link
[  329.040272][T15308] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2577'.
[  329.050103][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2577'.
[  329.337544][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2584'.
[  329.366556][T15328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2584'.
[  329.560979][T15340] netlink: 'syz.5.2588': attribute type 1 has an invalid length.
[  329.668887][T15340] bond5: entered promiscuous mode
[  329.674488][T15340] 8021q: adding VLAN 0 to HW filter on device bond5
[  329.683554][T15349] netlink: 'syz.0.2590': attribute type 21 has an invalid length.
[  329.712807][   T64] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  329.726274][   T64] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  329.746825][   T64] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  329.767244][   T64] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  329.815847][T15340] 8021q: adding VLAN 0 to HW filter on device bond5
[  329.823193][T15340] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address
[  329.834158][T15340] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[  329.849667][T15340] bond5: (slave ip6gre1): making interface the new active one
[  329.857752][T15340] ip6gre1: entered promiscuous mode
[  329.864854][T15340] bond5: (slave ip6gre1): Enslaving as an active interface with an up link
[  329.883730][T15356] veth1_macvtap: default FDB implementation only supports local addresses
[  330.095770][T15371] openvswitch: netlink: Flow key attr not present in new flow.
[  330.749738][T15420] __nla_validate_parse: 6 callbacks suppressed
[  330.749758][T15420] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2606'.
[  330.765642][T15418] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2607'.
[  330.853765][T15417] bond10: option packets_per_slave: invalid value (18446744073709551615)
[  330.907420][T15417] bond10: option packets_per_slave: allowed values 0 - 65535
[  330.930585][T15417] bond10 (unregistering): Released all slaves
[  330.949473][T15432] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.460531][T15458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'.
[  331.592180][T15472] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2617'.
[  331.673976][T15472] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2617'.
[  331.837150][T15478] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2619'.
[  332.782702][T15511] xt_hashlimit: size too large, truncated to 1048576
[  333.014878][T15524] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2634'.
[  333.207635][T15538] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2638'.
[  333.252902][T15538] veth0_macvtap: left promiscuous mode
[  333.477792][T15559] validate_nla: 2 callbacks suppressed
[  333.477812][T15559] netlink: 'syz.0.2643': attribute type 39 has an invalid length.
[  333.504708][T15561] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2646'.
[  333.515194][T15559] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication
[  333.637499][T15567] IPv6: sit1: Disabled Multicast RS
[  333.703845][T15571] netlink: 'syz.6.2649': attribute type 1 has an invalid length.
[  333.713375][T15571] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2649'.
[  333.722670][T15571] netlink: 'syz.6.2649': attribute type 7 has an invalid length.
[  333.735154][T15571] syz_tun: entered promiscuous mode
[  333.742497][T15571] syz_tun: left promiscuous mode
[  334.618231][T15597] netlink: 'syz.1.2658': attribute type 1 has an invalid length.
[  334.646594][T15597] netlink: 'syz.1.2658': attribute type 2 has an invalid length.
[  334.679082][T15597] netlink: 'syz.1.2658': attribute type 1 has an invalid length.
[  335.147320][T15624] openvswitch: netlink: Flow actions attr not present in new flow.
[  335.173968][T15623] netlink: 'syz.2.2666': attribute type 16 has an invalid length.
[  335.465785][T15641] openvswitch: netlink: nsh attr 255 is out of range max 3
[  336.113256][   T51] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  336.124358][   T51] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  336.134343][   T51] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  336.166598][   T51] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  336.174322][   T51] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  336.298376][T15677] lo speed is unknown, defaulting to 1000
[  336.305848][T15677] vxcan1 speed is unknown, defaulting to 1000
[  336.615635][ T1103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.648122][ T1103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  336.812669][ T1103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.844284][ T1103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  336.970609][T15725] __nla_validate_parse: 5 callbacks suppressed
[  336.970627][T15725] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2693'.
[  337.041001][ T1103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.072088][ T1103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  337.144339][T15734] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2694'.
[  337.224708][T15737] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  337.237206][T15737] Cannot find set identified by id 1 to match
[  337.261920][ T1103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.289905][ T1103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[  337.321894][T15743] netlink: 'syz.5.2697': attribute type 3 has an invalid length.
[  337.332899][T15743] netlink: 'syz.5.2697': attribute type 3 has an invalid length.
[  337.404483][T15749] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2700'.
[  337.470343][T15750] netlink: 'syz.2.2699': attribute type 1 has an invalid length.
[  337.495434][T15750] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2699'.
[  337.522011][T15750] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2699'.
[  337.531345][T15750] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2699'.
[  337.567431][T15757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2699'.
[  337.580898][T15760] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2702'.
[  337.637656][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2702'.
[  337.713473][   T64] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 43174 - 0
[  337.736681][   T64] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 43174 - 0
[  337.768518][T15677] chnl_net:caif_netlink_parms(): no params data found
[  337.769902][T15766] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  337.879683][ T7060] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 43174 - 0
[  337.932684][ T7072] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 43174 - 0
[  338.009539][T15780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2707'.
[  338.023376][T15677] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.030882][T15677] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.040538][T15677] bridge_slave_0: entered allmulticast mode
[  338.049895][T15677] bridge_slave_0: entered promiscuous mode
[  338.131742][T15780] bond6: option xmit_hash_policy: invalid value (64)
[  338.150086][T15780] bond6 (unregistering): Released all slaves
[  338.200119][T15677] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.208117][ T5837] Bluetooth: hci7: command tx timeout
[  338.215428][T15677] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.252828][T15677] bridge_slave_1: entered allmulticast mode
[  338.263367][T15677] bridge_slave_1: entered promiscuous mode
[  338.271438][ T1103] batadv2: left allmulticast mode
[  338.283075][ T1103] batadv2: left promiscuous mode
[  338.295584][ T1103] bridge0: port 3(batadv2) entered disabled state
[  338.341225][ T1103] bridge_slave_0: left allmulticast mode
[  338.363623][ T1103] bridge_slave_0: left promiscuous mode
[  338.385438][ T1103] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.787121][ T1103] bond6 (unregistering): (slave gretap1): Releasing active interface
[  339.162393][ T1103] bond5 (unregistering): (slave bridge7): Releasing backup interface
[  339.171894][ T1103] bridge7 (unregistering): left promiscuous mode
[  339.460787][ T1103] bond1 (unregistering): Released all slaves
[  339.474853][ T1103] bond0 (unregistering): Released all slaves
[  339.490707][ T1103] bond2 (unregistering): Released all slaves
[  339.507472][ T1103] bond3 (unregistering): Released all slaves
[  339.521718][ T1103] bond4 (unregistering): Released all slaves
[  339.552555][ T1103] bond5 (unregistering): Released all slaves
[  339.566939][ T1103] bond6 (unregistering): Released all slaves
[  339.586063][ T1103] bond7 (unregistering): Released all slaves
[  339.603934][ T1103] bond8 (unregistering): (slave veth7): Releasing active interface
[  339.617836][ T1103] bond8 (unregistering): Released all slaves
[  339.634777][ T1103] bond9 (unregistering): Released all slaves
[  339.666980][T15801] validate_nla: 1 callbacks suppressed
[  339.666999][T15801] netlink: 'syz.5.2710': attribute type 1 has an invalid length.
[  339.682036][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1
[  339.694788][T15816] tap0: tun_chr_ioctl cmd 1074025678
[  339.714987][T15816] tap0: group set to 0
[  339.816365][ T1103] tipc: Left network mode
[  339.833328][T15677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.869626][T15677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.961757][ T1103] IPVS: stopping master sync thread 13021 ...
[  339.990640][T15677] team0: Port device team_slave_0 added
[  340.009943][T15677] team0: Port device team_slave_1 added
[  340.048473][T15820] syzkaller0: entered promiscuous mode
[  340.054004][T15820] syzkaller0: entered allmulticast mode
[  340.257234][T15677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  340.288295][ T5837] Bluetooth: hci7: command tx timeout
[  340.295067][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.336494][T15677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  340.372006][T15677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  340.402512][T15677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  340.469145][T15677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  340.494950][T15830] lo speed is unknown, defaulting to 1000
[  340.554279][T15830] vxcan1 speed is unknown, defaulting to 1000
[  340.637405][T15820] TC_ACT_REPEAT abuse ?
[  340.810863][T15677] hsr_slave_0: entered promiscuous mode
[  340.817985][T15677] hsr_slave_1: entered promiscuous mode
[  340.824545][T15677] debugfs: 'hsr0' already exists in 'hsr'
[  340.830505][T15677] Cannot create hsr debugfs directory
[  341.337207][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2
[  341.454615][T15868] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  341.570870][ T1103] hsr_slave_0: left promiscuous mode
[  341.591767][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  341.599399][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_0
[  341.618238][ T1103] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  341.625660][ T1103] batman_adv: batadv0: Removing interface: batadv_slave_1
[  341.676536][ T1103] veth1_macvtap: left promiscuous mode
[  341.682345][ T1103] veth0_macvtap: left promiscuous mode
[  341.704756][ T1103] veth1_vlan: left promiscuous mode
[  341.723644][ T1103] veth0_vlan: left promiscuous mode
[  341.817208][ T1103] pim6reg527 (unregistering): left allmulticast mode
[  342.152935][ T7051] smc: removing ib device syz2
[  342.324821][ T8920] vxcan1 speed is unknown, defaulting to 1000
[  342.331343][ T5965] lo speed is unknown, defaulting to 1000
[  342.337209][ T5965] infiniband syz0: ib_query_port failed (-19)
[  342.344476][ T8920] syz2: Port: 1 Link DOWN
[  342.366869][ T5837] Bluetooth: hci7: command tx timeout
[  342.622674][T15677] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 43174 - 0
[  343.365748][T15677] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 43174 - 0
[  343.399354][T15925] __nla_validate_parse: 4 callbacks suppressed
[  343.399483][T15925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2735'.
[  343.583527][T15677] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 43174 - 0
[  343.898703][T15677] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 43174 - 0
[  344.298712][T15950] No such timeout policy "syz0"
[  344.338721][T15952] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2741'.
[  344.464563][ T5837] Bluetooth: hci7: command tx timeout
[  344.483617][T15677] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  344.510314][T15677] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  344.540321][T15677] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  344.593282][T15677] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  344.635982][T15677] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  344.682893][T15677] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  344.700039][T15677] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  344.732986][T15677] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  344.759981][T15959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2743'.
[  344.782135][T15959] netlink: 'syz.2.2743': attribute type 3 has an invalid length.
[  345.052695][T15981] netlink: 'syz.0.2746': attribute type 6 has an invalid length.
[  345.155144][T15978] tipc: Resetting bearer <eth:xfrm0>
[  345.313899][T15978] vlan0: left allmulticast mode
[  345.326635][T15978] veth0_vlan: left allmulticast mode
[  345.337887][T15978] vlan0: left promiscuous mode
[  345.398768][ T7051] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.408234][ T7051] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.446791][ T7051] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0
[  345.455924][ T7051] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.509071][ T7051] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.530975][ T7051] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  345.559915][ T7051] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.579827][ T7051] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.596864][ T7051] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  345.605888][ T7051] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  345.641448][ T7051] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  345.676534][ T7051] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  345.710836][ T1103] IPVS: stop unused estimator thread 0...
[  345.762205][T15677] 8021q: adding VLAN 0 to HW filter on device bond0
[  345.834121][T15677] 8021q: adding VLAN 0 to HW filter on device team0
[  345.861293][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state
[  345.868586][ T7062] bridge0: port 1(bridge_slave_0) entered forwarding state
[  345.951723][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state
[  345.959021][ T7053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  345.990279][T16009] netlink: 'syz.2.2752': attribute type 10 has an invalid length.
[  346.010110][T16009] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2752'.
[  346.030696][T16009] dummy0: entered promiscuous mode
[  346.038433][T16009] bridge0: port 1(dummy0) entered blocking state
[  346.045087][T16009] bridge0: port 1(dummy0) entered disabled state
[  346.059837][T16009] dummy0: entered allmulticast mode
[  346.140421][T15677] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  346.166906][T15677] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  346.411636][T16031] netlink: 'syz.0.2757': attribute type 2 has an invalid length.
[  346.458798][T16031] netlink: 'syz.0.2757': attribute type 1 has an invalid length.
[  346.481003][T16030] netlink: 'syz.0.2757': attribute type 2 has an invalid length.
[  346.490593][T16030] netlink: 'syz.0.2757': attribute type 1 has an invalid length.
[  346.611873][T15677] 8021q: adding VLAN 0 to HW filter on device batadv0
[  346.723050][T15677] veth0_vlan: entered promiscuous mode
[  346.748446][T15677] veth1_vlan: entered promiscuous mode
[  346.818372][T15677] veth0_macvtap: entered promiscuous mode
[  346.860435][T15677] veth1_macvtap: entered promiscuous mode
[  347.012114][T16058] xt_hashlimit: size too large, truncated to 1048576
[  347.039091][T15677] batman_adv: batadv0: Interface activated: batadv_slave_0
[  347.122649][T15677] batman_adv: batadv0: Interface activated: batadv_slave_1
[  347.161589][ T7053] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  347.195555][ T7053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  347.230644][T16064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2763'.
[  347.254090][ T7053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  347.287131][ T7053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  347.444584][ T7077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.469363][ T7077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.623879][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  347.658146][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  347.721376][T16081] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.2768'.
[  347.747002][T16081] bridge_slave_1: default FDB implementation only supports local addresses
[  347.769860][T16078] openvswitch: netlink: IP tunnel dst address not specified
[  347.793505][T16078] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2767'.
[  347.880535][T16085] bond1: option resend_igmp: invalid value (32767)
[  347.905940][T16085] bond1: option resend_igmp: allowed values 0 - 255
[  347.918706][T16085] bond1 (unregistering): Released all slaves
[  348.041595][T16094] netlink: 'syz.5.2770': attribute type 1 has an invalid length.
[  348.098838][T16096] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2770'.
[  348.142842][T16094] bond6: entered promiscuous mode
[  348.213006][T16094] 8021q: adding VLAN 0 to HW filter on device bond6
[  348.264116][T16096] bond6: entered allmulticast mode
[  348.305556][T16108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2773'.
[  348.320946][T16094] bond6: (slave bridge4): making interface the new active one
[  348.328923][T16094] bridge4: entered promiscuous mode
[  348.334280][T16094] bridge4: entered allmulticast mode
[  348.341256][T16094] bond6: (slave bridge4): Enslaving as an active interface with an up link
[  348.471166][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  348.487648][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  348.506668][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  348.518462][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  348.540964][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  348.618440][T16118] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2775'.
[  348.657655][T16118] netlink: 'syz.0.2775': attribute type 2 has an invalid length.
[  348.874348][T16135] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2779'.
[  348.933010][T16129] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2779'.
[  348.987644][T16140] netem: change failed
[  349.099978][T16115] chnl_net:caif_netlink_parms(): no params data found
[  349.328182][T16115] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.335411][T16115] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.344947][T16115] bridge_slave_0: entered allmulticast mode
[  349.370200][T16115] bridge_slave_0: entered promiscuous mode
[  349.384013][T16115] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.388164][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'.
[  349.392499][T16115] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.407096][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2787'.
[  349.417689][T16115] bridge_slave_1: entered allmulticast mode
[  349.425390][T16115] bridge_slave_1: entered promiscuous mode
[  349.429560][T16164] openvswitch: netlink: IP tunnel attribute has 30 unknown bytes.
[  349.465785][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'.
[  349.485930][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2787'.
[  349.497763][T16115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.510602][T16115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.551898][T16169] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2791'.
[  349.584522][T16115] team0: Port device team_slave_0 added
[  349.593951][T16115] team0: Port device team_slave_1 added
[  349.680872][T16115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  349.697792][T16179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'.
[  349.707249][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.733667][   T51] Bluetooth: hci4: command 0x0405 tx timeout
[  349.741539][T16115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  349.755295][T16115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  349.762960][T16180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2792'.
[  349.773322][T16115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  349.799426][T16115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.877857][T16115] hsr_slave_0: entered promiscuous mode
[  349.885006][T16115] hsr_slave_1: entered promiscuous mode
[  349.891827][T16115] debugfs: 'hsr0' already exists in 'hsr'
[  349.897757][T16115] Cannot create hsr debugfs directory
[  349.937357][ T5838] syz_tun (unregistering): left allmulticast mode
[  349.992652][T16185] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  350.207027][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  350.356075][T16195] ip6tnl4: entered allmulticast mode
[  350.606548][ T5837] Bluetooth: hci1: command tx timeout
[  350.629006][T16115] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  350.867372][T16115] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  350.882579][T16115] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  350.905226][T16115] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  350.928037][T16211] syzkaller0: entered promiscuous mode
[  350.933543][T16211] syzkaller0: entered allmulticast mode
[  350.949823][T16115] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  350.967970][T16115] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  350.998745][T16115] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  351.018498][T16115] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  351.144981][T16228] sctp: [Deprecated]: syz.1.2807 (pid 16228) Use of int in maxseg socket option.
[  351.144981][T16228] Use struct sctp_assoc_value instead
[  351.280544][T16115] 8021q: adding VLAN 0 to HW filter on device bond0
[  351.343190][T16115] 8021q: adding VLAN 0 to HW filter on device team0
[  351.379775][ T7051] bridge0: port 1(bridge_slave_0) entered blocking state
[  351.386985][ T7051] bridge0: port 1(bridge_slave_0) entered forwarding state
[  351.451845][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state
[  351.459074][ T7062] bridge0: port 2(bridge_slave_1) entered forwarding state
[  351.821558][T16252] IPv6: NLM_F_REPLACE set, but no existing node found!
[  351.993654][T16115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  352.142501][T16273] syzkaller0: entered promiscuous mode
[  352.196999][T16273] syzkaller0: entered allmulticast mode
[  352.377767][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  352.393926][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  352.401740][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  352.426863][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  352.432998][T16115] veth0_vlan: entered promiscuous mode
[  352.449079][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  352.488570][T16115] veth1_vlan: entered promiscuous mode
[  352.690052][ T5837] Bluetooth: hci1: command tx timeout
[  352.746944][T16298] gretap0: left allmulticast mode
[  352.752070][T16298] gretap0: left promiscuous mode
[  352.759605][T16298] bridge0: port 3(gretap0) entered disabled state
[  352.809142][T16298] bridge_slave_1: left allmulticast mode
[  352.814869][T16298] bridge_slave_1: left promiscuous mode
[  352.831176][T16298] bridge0: port 2(bridge_slave_1) entered disabled state
[  352.842700][T16298] ¾x9ÿ: left allmulticast mode
[  352.848285][T16298] ¾x9ÿ: left promiscuous mode
[  352.853228][T16298] bridge0: port 1(
1¾x9ÿ) entered disabled state
[  352.973580][T16115] veth0_macvtap: entered promiscuous mode
[  353.005238][T16115] veth1_macvtap: entered promiscuous mode
[  353.109877][T16115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  353.181801][T16115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  353.221016][   T64] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.233227][   T64] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  353.256858][   T64] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.265793][   T64] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.278923][T16285] chnl_net:caif_netlink_parms(): no params data found
[  353.507936][T16285] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.515687][T16285] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.533366][T16285] bridge_slave_0: entered allmulticast mode
[  353.543913][T16285] bridge_slave_0: entered promiscuous mode
[  353.553678][T16285] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.561978][T16285] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.570073][T16285] bridge_slave_1: entered allmulticast mode
[  353.578101][T16285] bridge_slave_1: entered promiscuous mode
[  353.629165][T16343] __nla_validate_parse: 3 callbacks suppressed
[  353.629191][T16343] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2828'.
[  353.678436][T16285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  353.710583][T16345] sctp: [Deprecated]: syz.5.2829 (pid 16345) Use of struct sctp_assoc_value in delayed_ack socket option.
[  353.710583][T16345] Use struct sctp_sack_info instead
[  353.712726][T16285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  353.801545][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.836724][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.851148][T16285] team0: Port device team_slave_0 added
[  353.866267][T16285] team0: Port device team_slave_1 added
[  353.971853][T16285] batman_adv: batadv0: Adding interface: batadv_slave_0
[  353.979501][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.007978][T16285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  354.021176][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  354.024992][T16285] batman_adv: batadv0: Adding interface: batadv_slave_1
[  354.037686][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  354.060181][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  354.074646][T16285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  354.115723][T16357] bridge0: entered allmulticast mode
[  354.300200][T16285] hsr_slave_0: entered promiscuous mode
[  354.317734][T16285] hsr_slave_1: entered promiscuous mode
[  354.334336][T16285] debugfs: 'hsr0' already exists in 'hsr'
[  354.354002][T16285] Cannot create hsr debugfs directory
[  354.420063][T16370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2837'.
[  354.429897][T16370] team0: Caught tx_queue_len zero misconfig
[  354.500312][T16374] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2836'.
[  354.526867][ T5837] Bluetooth: hci4: command tx timeout
[  354.622945][T16379] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2838'.
[  354.769192][ T5837] Bluetooth: hci1: command tx timeout
[  354.992287][ T5965] IPVS: starting estimator thread 0...
[  355.038112][T16396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2844'.
[  355.116786][T16394] IPVS: using max 30 ests per chain, 72000 per kthread
[  355.161615][T16398] netlink: 'syz.1.2842': attribute type 1 has an invalid length.
[  355.295157][T16398] bond1 (unregistering): Released all slaves
[  355.323670][T16409] mac80211_hwsim hwsim11 syzkaller0: Caught tx_queue_len zero misconfig
[  355.345729][T16413] netlink: 'syz.2.2848': attribute type 8 has an invalid length.
[  355.373094][T16413] netlink: 81 bytes leftover after parsing attributes in process `syz.2.2848'.
[  355.390037][T16285] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  355.423102][T16285] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  355.451545][T16285] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  355.464704][T16285] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  355.485282][T16285] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  355.502102][T16285] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  355.510533][T16285] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  355.531114][T16285] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  355.887611][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.607467][ T5837] Bluetooth: hci4: command tx timeout
[  356.846985][ T5837] Bluetooth: hci1: command tx timeout
[  356.928337][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.808605][ T8920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.898577][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.969084][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.484541][T16421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  358.538113][ T8920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.686761][ T5837] Bluetooth: hci4: command tx timeout
[  358.720954][T16285] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.775447][T16285] 8021q: adding VLAN 0 to HW filter on device team0
[  358.804648][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.811845][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.864062][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.871301][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  359.017429][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.128913][T16479] FAULT_INJECTION: forcing a failure.
[  359.128913][T16479] name failslab, interval 1, probability 0, space 0, times 1
[  359.152218][T16479] CPU: 0 UID: 0 PID: 16479 Comm: syz.0.2863 Not tainted syzkaller #0 PREEMPT(full) 
[  359.152262][T16479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  359.152282][T16479] Call Trace:
[  359.152290][T16479]  <TASK>
[  359.152299][T16479]  dump_stack_lvl+0xe8/0x150
[  359.152331][T16479]  should_fail_ex+0x412/0x560
[  359.152369][T16479]  should_failslab+0xa8/0x100
[  359.152398][T16479]  __kmalloc_node_track_caller_noprof+0xeb/0x7b0
[  359.152425][T16479]  ? kasprintf+0xe2/0x140
[  359.152454][T16479]  kvasprintf+0xeb/0x1a0
[  359.152477][T16479]  ? nf_tables_newset+0x1393/0x2580
[  359.152503][T16479]  ? nfnetlink_rcv+0x1240/0x27b0
[  359.152521][T16479]  ? netlink_unicast+0x80f/0x9b0
[  359.152542][T16479]  ? __pfx_kvasprintf+0x10/0x10
[  359.152563][T16479]  ? do_syscall_64+0x14d/0xf80
[  359.152605][T16479]  kasprintf+0xe2/0x140
[  359.152643][T16479]  ? __pfx_kasprintf+0x10/0x10
[  359.152681][T16479]  nf_tables_set_alloc_name+0x109/0x710
[  359.152705][T16479]  ? trace_kmalloc+0x2a/0x110
[  359.152730][T16479]  ? __kmalloc_noprof+0x37d/0x760
[  359.152752][T16479]  ? __pfx_nf_tables_set_alloc_name+0x10/0x10
[  359.152773][T16479]  ? nla_strdup+0xb8/0x140
[  359.152805][T16479]  nf_tables_newset+0x13b4/0x2580
[  359.152846][T16479]  ? __pfx_nf_tables_newset+0x10/0x10
[  359.152896][T16479]  ? __nla_parse+0x40/0x60
[  359.152923][T16479]  nfnetlink_rcv+0x1240/0x27b0
[  359.152941][T16479]  ? is_bpf_text_address+0x26/0x2b0
[  359.152997][T16479]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  359.153028][T16479]  ? __lock_acquire+0x6b5/0x2cf0
[  359.153091][T16479]  ? netlink_deliver_tap+0x2e/0x1b0
[  359.153131][T16479]  netlink_unicast+0x80f/0x9b0
[  359.153160][T16479]  ? __pfx_netlink_unicast+0x10/0x10
[  359.153183][T16479]  ? netlink_sendmsg+0x650/0xb40
[  359.153203][T16479]  ? skb_put+0x11b/0x210
[  359.153232][T16479]  netlink_sendmsg+0x813/0xb40
[  359.153272][T16479]  ? __pfx_netlink_sendmsg+0x10/0x10
[  359.153298][T16479]  ? aa_sock_msg_perm+0xf1/0x1b0
[  359.153330][T16479]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  359.153370][T16479]  ____sys_sendmsg+0x972/0x9f0
[  359.153410][T16479]  ? __pfx_____sys_sendmsg+0x10/0x10
[  359.153447][T16479]  ? import_iovec+0x73/0xa0
[  359.153475][T16479]  ___sys_sendmsg+0x2a5/0x360
[  359.153508][T16479]  ? __pfx____sys_sendmsg+0x10/0x10
[  359.153595][T16479]  ? __fget_files+0x2a/0x420
[  359.153641][T16479]  ? __fget_files+0x3a0/0x420
[  359.153671][T16479]  __x64_sys_sendmsg+0x1bd/0x2a0
[  359.153702][T16479]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  359.153740][T16479]  ? __pfx_ksys_write+0x10/0x10
[  359.153771][T16479]  do_syscall_64+0x14d/0xf80
[  359.153793][T16479]  ? trace_irq_disable+0x3b/0x150
[  359.153807][T16479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.153824][T16479]  ? clear_bhb_loop+0x40/0x90
[  359.153845][T16479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.153861][T16479] RIP: 0033:0x7fa7ba39c819
[  359.153877][T16479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  359.153891][T16479] RSP: 002b:00007fa7bb1b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  359.153909][T16479] RAX: ffffffffffffffda RBX: 00007fa7ba615fa0 RCX: 00007fa7ba39c819
[  359.153921][T16479] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  359.153931][T16479] RBP: 00007fa7bb1b5090 R08: 0000000000000000 R09: 0000000000000000
[  359.153940][T16479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  359.153950][T16479] R13: 00007fa7ba616038 R14: 00007fa7ba615fa0 R15: 00007ffd0a580018
[  359.153976][T16479]  </TASK>
[  359.275381][T16489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2864'.
[  359.518507][T16489] openvswitch: netlink: Flow key attr not present in new flow.
[  359.687962][T16501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2868'.
[  359.761564][T16506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2868'.
[  359.812754][ T8920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  359.988449][ T5837] Bluetooth: hci5: command 0x0406 tx timeout
[  360.047819][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  360.090702][T16285] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.680420][T16285] veth0_vlan: entered promiscuous mode
[  360.724663][T16285] veth1_vlan: entered promiscuous mode
[  360.764217][T16285] veth0_macvtap: entered promiscuous mode
[  360.771001][   T51] Bluetooth: hci4: command tx timeout
[  360.782006][T16285] veth1_macvtap: entered promiscuous mode
[  360.840079][T16285] batman_adv: batadv0: Interface activated: batadv_slave_0
[  360.879113][T16285] batman_adv: batadv0: Interface activated: batadv_slave_1
[  360.909014][  T138] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  360.930574][T16569] netlink: 'syz.1.2883': attribute type 1 has an invalid length.
[  360.950478][  T138] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  360.969905][  T138] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  360.979277][  T138] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  361.017943][ T8920] net_ratelimit: 3 callbacks suppressed
[  361.017961][ T8920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.043473][T16575] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2883'.
[  361.088259][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.097649][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  361.224910][T16572] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address
[  361.257138][T16572] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[  361.339305][T16572] bond1: (slave ip6gre2): making interface the new active one
[  361.367255][T16572] bond1: (slave ip6gre2): Enslaving as an active interface with an up link
[  361.453889][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.512679][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.607764][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  361.621502][T16605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2889'.
[  361.631566][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  361.727619][T16613] xt_hashlimit: size too large, truncated to 1048576
[  361.807857][T16617] syz_tun: entered allmulticast mode
[  362.066062][T16632] FAULT_INJECTION: forcing a failure.
[  362.066062][T16632] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  362.126746][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  362.190093][T16632] CPU: 1 UID: 0 PID: 16632 Comm: syz.2.2893 Not tainted syzkaller #0 PREEMPT(full) 
[  362.190120][T16632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  362.190139][T16632] Call Trace:
[  362.190146][T16632]  <TASK>
[  362.190154][T16632]  dump_stack_lvl+0xe8/0x150
[  362.190186][T16632]  should_fail_ex+0x412/0x560
[  362.190220][T16632]  _copy_from_user+0x2d/0xb0
[  362.190245][T16632]  ___sys_recvmsg+0x175/0x590
[  362.190278][T16632]  ? __pfx____sys_recvmsg+0x10/0x10
[  362.190333][T16632]  ? __fget_files+0x3a0/0x420
[  362.190361][T16632]  do_recvmmsg+0x334/0x800
[  362.190395][T16632]  ? __pfx_do_recvmmsg+0x10/0x10
[  362.190432][T16632]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  362.190477][T16632]  __x64_sys_recvmmsg+0x198/0x250
[  362.190504][T16632]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  362.190541][T16632]  do_syscall_64+0x14d/0xf80
[  362.190567][T16632]  ? trace_irq_disable+0x3b/0x150
[  362.190584][T16632]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.190602][T16632]  ? clear_bhb_loop+0x40/0x90
[  362.190625][T16632]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  362.190649][T16632] RIP: 0033:0x7f4acad9c819
[  362.190666][T16632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  362.190682][T16632] RSP: 002b:00007f4acbcb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  362.190702][T16632] RAX: ffffffffffffffda RBX: 00007f4acb016090 RCX: 00007f4acad9c819
[  362.190716][T16632] RDX: 0000000000000001 RSI: 0000200000003280 RDI: 0000000000000003
[  362.190727][T16632] RBP: 00007f4acbcb8090 R08: 0000000000000000 R09: 0000000000000000
[  362.190738][T16632] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  362.190749][T16632] R13: 00007f4acb016128 R14: 00007f4acb016090 R15: 00007fff96837bf8
[  362.190777][T16632]  </TASK>
[  362.506026][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  362.517457][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  362.548840][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  362.557723][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  362.565342][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  363.065816][T16652] netlink: 'syz.1.2900': attribute type 1 has an invalid length.
[  363.128178][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2900'.
[  363.166692][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.225628][T16652] 8021q: adding VLAN 0 to HW filter on device bond2
[  363.235043][T16660] bond2: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  363.270436][T16660] bond2: entered allmulticast mode
[  363.321598][T16662] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  363.377569][T16669] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2903'.
[  363.509781][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.618764][T16675] macvtap1: entered promiscuous mode
[  363.630020][T16675] macvtap1: entered allmulticast mode
[  363.635631][T16675] veth1_vlan: entered allmulticast mode
[  363.647291][T16683] netlink: 'syz.5.2904': attribute type 32 has an invalid length.
[  363.661200][T16674] macvtap2: entered promiscuous mode
[  363.666772][T16674] macvtap2: entered allmulticast mode
[  363.903260][T16693] FAULT_INJECTION: forcing a failure.
[  363.903260][T16693] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  363.917094][T16693] CPU: 0 UID: 0 PID: 16693 Comm: syz.2.2908 Not tainted syzkaller #0 PREEMPT(full) 
[  363.917123][T16693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  363.917136][T16693] Call Trace:
[  363.917145][T16693]  <TASK>
[  363.917154][T16693]  dump_stack_lvl+0xe8/0x150
[  363.917191][T16693]  should_fail_ex+0x412/0x560
[  363.917231][T16693]  _copy_to_iter+0x1e4/0x17d0
[  363.917262][T16693]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  363.917294][T16693]  ? __pfx__copy_to_iter+0x10/0x10
[  363.917346][T16693]  udp_recvmsg+0x741/0x10b0
[  363.917392][T16693]  ? __pfx_udp_recvmsg+0x10/0x10
[  363.917435][T16693]  ? process_measurement+0x195e/0x1c80
[  363.917462][T16693]  ? process_measurement+0x371/0x1c80
[  363.917486][T16693]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  363.917520][T16693]  udp_bpf_recvmsg+0x8eb/0xad0
[  363.917573][T16693]  ? __pfx_udp_bpf_recvmsg+0x10/0x10
[  363.917605][T16693]  ? aa_sk_perm+0x6d5/0x900
[  363.917632][T16693]  ? __lock_acquire+0x6b5/0x2cf0
[  363.917661][T16693]  ? sock_rps_record_flow+0x19/0x400
[  363.917690][T16693]  ? __pfx_udp_bpf_recvmsg+0x10/0x10
[  363.917716][T16693]  inet_recvmsg+0x260/0x270
[  363.917747][T16693]  ? __pfx_inet_recvmsg+0x10/0x10
[  363.917776][T16693]  ? aa_sock_msg_perm+0xf1/0x1b0
[  363.917809][T16693]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  363.917836][T16693]  ? security_socket_recvmsg+0x7e/0x2c0
[  363.917860][T16693]  ? __pfx_inet_recvmsg+0x10/0x10
[  363.917889][T16693]  sock_recvmsg+0x155/0x1b0
[  363.917913][T16693]  ____sys_recvmsg+0x1e6/0x4a0
[  363.917957][T16693]  ? __pfx_____sys_recvmsg+0x10/0x10
[  363.918001][T16693]  ? import_iovec+0x73/0xa0
[  363.918028][T16693]  ___sys_recvmsg+0x215/0x590
[  363.918062][T16693]  ? __pfx____sys_recvmsg+0x10/0x10
[  363.918115][T16693]  ? __fget_files+0x3a0/0x420
[  363.918144][T16693]  do_recvmmsg+0x334/0x800
[  363.918181][T16693]  ? __pfx_do_recvmmsg+0x10/0x10
[  363.918222][T16693]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  363.918269][T16693]  __x64_sys_recvmmsg+0x198/0x250
[  363.918301][T16693]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  363.918342][T16693]  do_syscall_64+0x14d/0xf80
[  363.918369][T16693]  ? trace_irq_disable+0x3b/0x150
[  363.918386][T16693]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.918406][T16693]  ? clear_bhb_loop+0x40/0x90
[  363.918431][T16693]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.918462][T16693] RIP: 0033:0x7f4acad9c819
[  363.918479][T16693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  363.918495][T16693] RSP: 002b:00007f4acbcb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  363.918515][T16693] RAX: ffffffffffffffda RBX: 00007f4acb016090 RCX: 00007f4acad9c819
[  363.918528][T16693] RDX: 0000000000000001 RSI: 0000200000003280 RDI: 0000000000000003
[  363.918539][T16693] RBP: 00007f4acbcb8090 R08: 0000000000000000 R09: 0000000000000000
[  363.918551][T16693] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001
[  363.918561][T16693] R13: 00007f4acb016128 R14: 00007f4acb016090 R15: 00007fff96837bf8
[  363.918591][T16693]  </TASK>
[  364.238806][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  364.543210][T16638] chnl_net:caif_netlink_parms(): no params data found
[  364.595663][T16700] netlink: 'syz.2.2913': attribute type 1 has an invalid length.
[  364.615979][   T51] Bluetooth: hci8: command tx timeout
[  364.643102][T16700] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2913'.
[  364.752693][T16638] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.760844][T16638] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.769510][T16638] bridge_slave_0: entered allmulticast mode
[  364.785371][T16638] bridge_slave_0: entered promiscuous mode
[  364.797525][T16638] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.807183][T16638] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.814405][T16638] bridge_slave_1: entered allmulticast mode
[  364.822485][T16638] bridge_slave_1: entered promiscuous mode
[  364.858814][T16638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  364.871049][T16638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  364.909821][T16638] team0: Port device team_slave_0 added
[  364.918526][T16638] team0: Port device team_slave_1 added
[  364.962738][T16638] batman_adv: batadv0: Adding interface: batadv_slave_0
[  364.970298][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.017185][T16638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  365.064119][T16638] batman_adv: batadv0: Adding interface: batadv_slave_1
[  365.076524][T16638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  365.153447][T16638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  365.249211][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  365.370198][T16638] hsr_slave_0: entered promiscuous mode
[  365.381516][T16638] hsr_slave_1: entered promiscuous mode
[  365.390004][T16638] debugfs: 'hsr0' already exists in 'hsr'
[  365.395777][T16638] Cannot create hsr debugfs directory
[  365.453744][T16726] bridge0: port 2(bridge_slave_1) entered disabled state
[  365.697133][T16742] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2920'.
[  365.858812][T16730] FAULT_INJECTION: forcing a failure.
[  365.858812][T16730] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.872525][T16730] CPU: 0 UID: 0 PID: 16730 Comm: syz.2.2922 Not tainted syzkaller #0 PREEMPT(full) 
[  365.872548][T16730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  365.872559][T16730] Call Trace:
[  365.872567][T16730]  <TASK>
[  365.872574][T16730]  dump_stack_lvl+0xe8/0x150
[  365.872606][T16730]  should_fail_ex+0x412/0x560
[  365.872648][T16730]  _copy_to_user+0x31/0xb0
[  365.872675][T16730]  simple_read_from_buffer+0xe1/0x170
[  365.872708][T16730]  proc_fail_nth_read+0x1bb/0x230
[  365.872739][T16730]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  365.872771][T16730]  ? rw_verify_area+0x2a6/0x4d0
[  365.872792][T16730]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  365.872822][T16730]  vfs_read+0x20c/0xa70
[  365.872841][T16730]  ? fdget_pos+0x246/0x320
[  365.872857][T16730]  ? __pfx_do_recvmmsg+0x10/0x10
[  365.872887][T16730]  ? __pfx___mutex_lock+0x10/0x10
[  365.872915][T16730]  ? __pfx_vfs_read+0x10/0x10
[  365.872938][T16730]  ? __fget_files+0x2a/0x420
[  365.872959][T16730]  ? __fget_files+0x3a0/0x420
[  365.872975][T16730]  ? __fget_files+0x2a/0x420
[  365.873001][T16730]  ksys_read+0x150/0x270
[  365.873025][T16730]  ? __pfx_ksys_read+0x10/0x10
[  365.873057][T16730]  do_syscall_64+0x14d/0xf80
[  365.873083][T16730]  ? trace_irq_disable+0x3b/0x150
[  365.873099][T16730]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.873119][T16730]  ? clear_bhb_loop+0x40/0x90
[  365.873142][T16730]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.873161][T16730] RIP: 0033:0x7f4acad5d04e
[  365.873179][T16730] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  365.873194][T16730] RSP: 002b:00007f4acbcb7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  365.873213][T16730] RAX: ffffffffffffffda RBX: 00007f4acbcb86c0 RCX: 00007f4acad5d04e
[  365.873227][T16730] RDX: 000000000000000f RSI: 00007f4acbcb80a0 RDI: 0000000000000007
[  365.873238][T16730] RBP: 00007f4acbcb8090 R08: 0000000000000000 R09: 0000000000000000
[  365.873249][T16730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.873259][T16730] R13: 00007f4acb016128 R14: 00007f4acb016090 R15: 00007fff96837bf8
[  365.873290][T16730]  </TASK>
[  366.255682][T16750] netlink: 'syz.5.2926': attribute type 1 has an invalid length.
[  366.278972][T16752] x_tables: duplicate underflow at hook 1
[  366.288109][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.308059][T16753] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2926'.
[  366.529980][ T5965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.699345][   T51] Bluetooth: hci8: command tx timeout
[  367.330677][T10696] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  367.559180][T16750] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  367.765598][T16766] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2930'.
[  367.800816][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2930'.
[  367.830300][T16638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  367.849953][T16766] netdevsim netdevsim7 netdevsim0: entered promiscuous mode
[  367.861620][T16768] netlink: 'syz.1.2931': attribute type 3 has an invalid length.
[  367.898657][T16768] bond0: entered promiscuous mode
[  367.913986][T16768] bond_slave_0: entered promiscuous mode
[  367.946696][T16768] bond_slave_1: entered promiscuous mode
[  367.971358][T16768] batadv0: entered promiscuous mode
[  368.017682][T16768] 8021q: adding VLAN 0 to HW filter on device hsr1
[  368.056740][T16783] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2932'.
[  368.069066][T16768] bond0: left promiscuous mode
[  368.079808][T16768] bond_slave_0: left promiscuous mode
[  368.111159][T16768] bond_slave_1: left promiscuous mode
[  368.151226][T16768] batadv0: left promiscuous mode
[  368.182251][T16638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  368.309525][T16638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  368.367856][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  368.438711][T16638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  368.502820][T16804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  368.543375][T16805] bond3: option resend_igmp: invalid value (32767)
[  368.550274][T16805] bond3: option resend_igmp: allowed values 0 - 255
[  368.560180][T16805] bond3 (unregistering): Released all slaves
[  368.586047][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2941'.
[  368.742111][T16638] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  368.750830][T16815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2943'.
[  368.767845][   T51] Bluetooth: hci8: command tx timeout
[  368.797717][T16638] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  368.837630][T16638] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  368.864928][T16638] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  368.887258][T16638] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  368.934065][T16638] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  368.950524][T16638] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  368.969995][T16825] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2947'.
[  368.971196][T16638] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  369.001887][   T64] tipc: Subscription rejected, illegal request
[  369.172301][T16844] netlink: 'syz.5.2951': attribute type 2 has an invalid length.
[  369.189780][T16844] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2951'.
[  369.315160][T16638] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.335460][T16638] 8021q: adding VLAN 0 to HW filter on device team0
[  369.349014][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.356117][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.398553][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.405714][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.414734][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.422898][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.568141][ T8912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.688821][T16868] netlink: 'syz.2.2959': attribute type 9 has an invalid length.
[  369.716416][T16868] netlink: 'syz.2.2959': attribute type 6 has an invalid length.
[  370.051072][ T8912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.096174][T16638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.178151][T16906] __nla_validate_parse: 1 callbacks suppressed
[  370.178170][T16906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2968'.
[  370.306004][T16638] veth0_vlan: entered promiscuous mode
[  370.334451][T16910] syzkaller0: entered promiscuous mode
[  370.355822][T16910] syzkaller0: entered allmulticast mode
[  370.384840][T16910] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2970'.
[  370.398306][T16638] veth1_vlan: entered promiscuous mode
[  370.449723][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.544586][T16922] syzkaller0: entered promiscuous mode
[  370.558948][T16926] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2976'.
[  370.561735][T16922] syzkaller0: entered allmulticast mode
[  370.576926][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2976'.
[  370.603629][T16638] veth0_macvtap: entered promiscuous mode
[  370.617310][T16926] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2976'.
[  370.650885][T16638] veth1_macvtap: entered promiscuous mode
[  370.753567][T16638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  370.781153][T16638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  370.847323][   T51] Bluetooth: hci8: command tx timeout
[  370.870703][   T64] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  370.898476][   T64] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  370.978211][   T64] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  370.999462][   T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  371.103488][T16940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2982'.
[  371.206508][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.230646][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.306945][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  371.314803][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  371.487815][ T6015] net_ratelimit: 3 callbacks suppressed
[  371.487833][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  371.591923][T16965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  371.931173][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2988'.
[  371.954859][T16991] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2988'.
[  372.394466][T17011] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2994'.
[  372.427374][T16998] syzkaller0: entered promiscuous mode
[  372.432971][T16998] syzkaller0: entered allmulticast mode
[  372.444034][T17012] netlink: 'syz.5.2993': attribute type 1 has an invalid length.
[  372.452607][T17011] netlink: 35 bytes leftover after parsing attributes in process `syz.7.2994'.
[  372.462181][T17011] netlink: 'syz.7.2994': attribute type 5 has an invalid length.
[  372.472792][T17011] netlink: 'syz.7.2994': attribute type 6 has an invalid length.
[  372.531198][ T5911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.260931][ T8920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.567125][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  373.727682][ T8920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.611822][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  375.649401][  T797] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.386947][T17028] IPv6: NLM_F_CREATE should be specified when creating new route
[  376.398328][T17028] __nla_validate_parse: 3 callbacks suppressed
[  376.398347][T17028] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2999'.
[  376.454392][ T8920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.495260][T17036] x_tables: ip6_tables: mh match: only valid for protocol 135
[  376.508561][T17037] x_tables: ip6_tables: mh match: only valid for protocol 135
[  376.605732][T17041] xt_TCPMSS: Only works on TCP SYN packets
[  376.687272][ T6015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.734922][T17051] netlink: 'syz.2.3008': attribute type 29 has an invalid length.
[  376.744693][T17050] netlink: 'syz.1.3007': attribute type 1 has an invalid length.
[  376.755119][T17050] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  376.767290][ T8920] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  376.787224][T17059] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  376.956749][T17071] netlink: 'syz.1.3011': attribute type 4 has an invalid length.
[  377.019505][T17080] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3011'.
[  377.447510][T17102] netlink: 'syz.0.3020': attribute type 11 has an invalid length.
[  377.455404][T17102] netlink: 'syz.0.3020': attribute type 11 has an invalid length.
[  377.463463][T17102] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3020'.
[  378.199941][T17131] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  378.281153][T17133] netlink: 'syz.7.3030': attribute type 3 has an invalid length.
[  378.390602][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  378.592324][T17152] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3035'.
[  378.872816][T17178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3040'.
[  379.342660][T17214] nftables ruleset with unbound chain
[  379.351562][T17212] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3051'.
[  379.491038][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'.
[  379.500793][T17226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3055'.
[  379.511803][T17226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'.
[  379.540766][T17226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3055'.
[  379.878841][T17249] netlink: 'syz.7.3061': attribute type 4 has an invalid length.
[  379.928469][T17249] netlink: 'syz.7.3061': attribute type 4 has an invalid length.
[  380.251701][T17277] netlink: 'syz.2.3067': attribute type 3 has an invalid length.
[  380.343492][T17267] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  380.375981][T17276] nbd: socks must be embedded in a SOCK_ITEM attr
[  380.505979][T17293] netlink: 'syz.2.3070': attribute type 1 has an invalid length.
[  380.658062][T17293] bond1: entered promiscuous mode
[  380.683388][T17293] 8021q: adding VLAN 0 to HW filter on device bond1
[  380.758840][T17302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.782342][T17302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.793736][T17302] bond0 (unregistering): Released all slaves
[  380.824271][T17308] bond1: (slave bridge1): making interface the new active one
[  380.832401][T17308] bridge1: entered promiscuous mode
[  380.839648][T17308] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  380.865327][T17311] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  380.880553][T17311] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  380.930144][T17320] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  381.528146][T17357] netlink: 'syz.2.3090': attribute type 30 has an invalid length.
[  381.539276][T17357] __nla_validate_parse: 7 callbacks suppressed
[  381.539292][T17357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3090'.
[  381.585292][T17359] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  381.587566][T17364] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3092'.
[  381.635249][T17364] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[  382.012155][T17389] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3101'.
[  382.083263][T17396] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3104'.
[  382.418786][T17422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3110'.
[  382.483036][T17422] openvswitch: netlink: Missing key (keys=c0, expected=200000)
[  382.491257][T17427] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3110'.
[  382.516814][T17432] netlink: 'syz.1.3112': attribute type 21 has an invalid length.
[  382.523679][T17431] netlink: 'syz.7.3113': attribute type 1 has an invalid length.
[  382.524670][T17432] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3112'.
[  382.543502][T17427] openvswitch: netlink: Flow actions attr not present in new flow.
[  382.575782][T17431] bond0: entered promiscuous mode
[  382.581825][T17431] 8021q: adding VLAN 0 to HW filter on device bond0
[  382.607519][T17434] ipvlan2: entered allmulticast mode
[  382.612841][T17434] bond0: entered allmulticast mode
[  382.637304][T17431] ipvlan3: entered allmulticast mode
[  382.694938][T17431] bond0: (slave bridge1): making interface the new active one
[  382.740892][T17431] bridge1: entered promiscuous mode
[  382.759418][T17431] bridge1: entered allmulticast mode
[  382.771049][T17431] bond0: (slave bridge1): Enslaving as an active interface with an up link
[  383.174114][T17470] syzkaller0: entered promiscuous mode
[  383.185001][T17470] syzkaller0: entered allmulticast mode
[  383.241737][T17481] IPVS: length: 171 != 24
[  383.250316][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3127'.
[  383.315653][T17486] netlink: 10 bytes leftover after parsing attributes in process `syz.7.3129'.
[  384.522885][T17484] 8021q: VLANs not supported on ip6tnl0
[  384.530189][T17481] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  384.670237][T17500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3132'.
[  384.770703][T17502] nbd: device at index 64 is going down
[  385.167599][T17026] udevd[17026]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  385.187064][T17305] udevd[17305]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  385.481041][T17551] openvswitch: netlink: Multiple metadata blocks provided
[  385.692625][T17575] netlink: 'syz.2.3152': attribute type 2 has an invalid length.
[  385.820074][T17584] netlink: 'syz.0.3155': attribute type 21 has an invalid length.
[  385.882848][T17589] netlink: 'syz.0.3155': attribute type 1 has an invalid length.
[  385.898158][T17591] nbd: must specify at least one socket
[  385.907531][   T29] audit: type=1804 audit(1775925443.586:7): pid=17586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3157" name="/newroot/78/cgroup.controllers" dev="tmpfs" ino=411 res=1 errno=0
[  385.953243][   T29] audit: type=1800 audit(1775925443.596:8): pid=17586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3157" name="cgroup.controllers" dev="tmpfs" ino=411 res=0 errno=0
[  386.017453][T17594] netem: invalid attributes len -24
[  386.022855][T17594] netem: change failed
[  386.091318][T17596] netlink: 'syz.2.3159': attribute type 10 has an invalid length.
[  386.112028][T17600] nbd: must specify at least one socket
[  386.122675][T17596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  386.146236][T17596] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  386.243348][T17607] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  386.431854][T17622] netlink: 'syz.5.3168': attribute type 11 has an invalid length.
[  386.450461][T17622] netlink: 'syz.5.3168': attribute type 4 has an invalid length.
[  386.547521][T17631] __nla_validate_parse: 19 callbacks suppressed
[  386.547538][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3171'.
[  386.739859][ T7062] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  386.762488][ T7062] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  386.792187][ T7062] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  386.832005][ T7062] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  386.984569][T17660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3179'.
[  387.071635][T17660] team1: entered promiscuous mode
[  387.095615][T17660] team1: entered allmulticast mode
[  387.229604][T17673] syzkaller1: entered promiscuous mode
[  387.244260][T17673] syzkaller1: entered allmulticast mode
[  387.275172][T17672] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3181'.
[  387.488227][T17690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  387.500809][T17689] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3186'.
[  387.709330][T17703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3190'.
[  387.763640][T17708] Unsupported ieee802154 address type: 0
[  388.229148][T17727] netlink: 'syz.7.3197': attribute type 1 has an invalid length.
[  388.270723][T17733] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3199'.
[  388.291517][T17734] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3199'.
[  388.308213][T17733] F: renamed from ip6_vti0 (while UP)
[  388.365660][T17733] F: entered allmulticast mode
[  388.471915][T17749] lo: entered promiscuous mode
[  388.490606][T17749] tunl0: entered promiscuous mode
[  388.517175][T17749] gre0: entered promiscuous mode
[  388.576143][T17749] gretap0: entered promiscuous mode
[  388.599265][T17758] netlink: 'syz.5.3205': attribute type 1 has an invalid length.
[  388.619692][T17749] erspan0: entered promiscuous mode
[  388.629538][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3205'.
[  388.654230][T17749] ip_vti0: entered promiscuous mode
[  389.494174][T17823] netlink: 'syz.0.3226': attribute type 21 has an invalid length.
[  389.504035][T17823] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3226'.
[  390.119278][T17849] netlink: 'syz.5.3236': attribute type 1 has an invalid length.
[  390.169548][T17849] 8021q: adding VLAN 0 to HW filter on device bond7
[  390.300391][T17861] xt_cgroup: path and classid specified
[  390.370567][T17865] IPv6: NLM_F_REPLACE set, but no existing node found!
[  390.475392][T17870] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3242'.
[  390.518320][T17870] xt_bpf: check failed: parse error
[  390.924217][T17892] bond1: option lp_interval: invalid value (0)
[  390.931856][T17892] bond1: option lp_interval: allowed values 1 - 2147483647
[  390.962731][T17892] bond1 (unregistering): Released all slaves
[  391.098105][T17905] wireguard: wg2: Could not create IPv4 socket
[  391.159924][T17913] tipc: Started in network mode
[  391.178379][T17913] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  391.205733][T17913] tipc: Enabled bearer <eth:ipvlan0>, priority 10
[  391.325115][T17918] sctp_setsockopt_delayed_ack: 23 callbacks suppressed
[  391.325134][T17918] sctp: [Deprecated]: syz.7.3254 (pid 17918) Use of struct sctp_assoc_value in delayed_ack socket option.
[  391.325134][T17918] Use struct sctp_sack_info instead
[  391.374491][T17922] syzkaller0: entered promiscuous mode
[  391.401320][T17922] syzkaller0: entered allmulticast mode
[  391.547400][T17938] netlink: 'syz.0.3259': attribute type 51 has an invalid length.
[  391.575755][T17938] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.583635][T17938] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.631578][T17938] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.669972][T17938] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.830023][T17954] __nla_validate_parse: 2 callbacks suppressed
[  391.830041][T17954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3262'.
[  391.923775][T17954] bond0: entered promiscuous mode
[  391.939862][T17954] bond_slave_0: entered promiscuous mode
[  391.945786][T17954] bond_slave_1: entered promiscuous mode
[  391.997619][T17954] batadv0: entered promiscuous mode
[  392.021166][T17954] gretap0: entered promiscuous mode
[  392.035992][T17954] hsr1: entered promiscuous mode
[  392.199579][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3268'.
[  392.269375][T17976] hsr0: entered promiscuous mode
[  392.286835][T17976] macvlan2: entered allmulticast mode
[  392.302576][T17976] hsr0: entered allmulticast mode
[  392.316812][T17976] hsr_slave_0: entered allmulticast mode
[  392.325213][T17976] hsr_slave_1: entered allmulticast mode
[  392.351555][T17992] veth0: entered promiscuous mode
[  392.357177][ T5965] tipc: Node number set to 10136234
[  392.373905][T17991] veth0: left promiscuous mode
[  392.523236][T17998] syzkaller0: entered promiscuous mode
[  392.529042][T17998] syzkaller0: entered allmulticast mode
[  392.679207][T18017] bond2: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  392.699237][T18017] bond2 (unregistering): Released all slaves
[  392.713217][T18022] netlink: 'syz.1.3284': attribute type 8 has an invalid length.
[  392.726003][T18025] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3283'.
[  392.830275][T18033] netlink: 'syz.1.3286': attribute type 25 has an invalid length.
[  392.838474][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'.
[  392.865639][T18030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3285'.
[  392.914701][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3286'.
[  392.931754][ T1103] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  392.933300][T18035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'.
[  392.951646][T18033] netlink: 'syz.1.3286': attribute type 25 has an invalid length.
[  392.961787][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3286'.
[  392.973136][ T1103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  392.987379][T18037] netlink: 'syz.7.3287': attribute type 25 has an invalid length.
[  393.026059][ T1103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  393.035338][ T1103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  393.088044][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3289'.
[  393.157287][T18044] 8021q: adding VLAN 0 to HW filter on device bond1
[  393.226312][T18054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3292'.
[  393.279118][T18054] netlink: 'syz.1.3292': attribute type 1 has an invalid length.
[  393.317864][T18054] netlink: 'syz.1.3292': attribute type 1 has an invalid length.
[  394.057805][T18098] bond3: entered allmulticast mode
[  394.111322][T18098] bridge3: entered promiscuous mode
[  394.118908][T18098] bridge3: entered allmulticast mode
[  394.146060][T18098] bond3: (slave bridge3): Enslaving as an active interface with an up link
[  415.107137][T18118] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  415.137311][T18117] syzkaller1: entered promiscuous mode
[  415.141821][T18118] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  415.142850][T18117] syzkaller1: entered allmulticast mode
[  415.364498][T18134] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  415.381758][T18131] syzkaller0: entered promiscuous mode
[  415.401494][T18131] syzkaller0: entered allmulticast mode
[  415.426596][T18131] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[  416.019520][T18163] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  416.213167][T18176] sctp: [Deprecated]: syz.1.3328 (pid 18176) Use of int in max_burst socket option.
[  416.213167][T18176] Use struct sctp_assoc_value instead
[  416.369266][T18186] x_tables: ip_tables: icmp match: only valid for protocol 1
[  416.430055][T18190] xt_cgroup: invalid path, errno=-2
[  416.578886][T18184] wireguard0: entered promiscuous mode
[  416.602456][T18192] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  416.705913][T18189] wireguard1: entered promiscuous mode
[  417.304966][T18248] netlink: 'syz.7.3340': attribute type 1 has an invalid length.
[  417.312851][T18248] __nla_validate_parse: 4 callbacks suppressed
[  417.312868][T18248] netlink: 476 bytes leftover after parsing attributes in process `syz.7.3340'.
[  417.344415][T18248] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.3340'.
[  417.684964][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'.
[  417.696935][T18264] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'.
[  417.730419][T18264] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3349'.
[  418.256900][T18302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3355'.
[  418.452391][T18312] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3357'.
[  419.872589][T18387] netlink: 'syz.2.3372': attribute type 4 has an invalid length.
[  420.058769][T18396] netlink: 'syz.5.3378': attribute type 4 has an invalid length.
[  420.369315][T18421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3385'.
[  420.411739][T18422] bond1: Removing last arp target with arp_interval on
[  420.500545][T18427] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3386'.
[  420.831337][T18451] netlink: 'syz.2.3395': attribute type 4 has an invalid length.
[  420.842121][T18453] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING
[  420.984425][T18465] netlink: 'syz.5.3398': attribute type 1 has an invalid length.
[  421.158546][T18480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3404'.
[  421.207733][T18485] batman_adv: batadv0: Adding interface: dummy0
[  421.244512][T18485] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  421.297712][T18485] batman_adv: batadv0: Interface activated: dummy0
[  421.511076][T18493] syzkaller0: entered promiscuous mode
[  421.517306][T18493] syzkaller0: entered allmulticast mode
[  421.872909][T18515] xt_nfacct: accounting object `syz1' does not exist
[  423.417165][T18534] __nla_validate_parse: 1 callbacks suppressed
[  423.417186][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3421'.
[  423.776570][T18553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3424'.
[  423.857964][T18553] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3424'.
[  423.901790][T18545] Bluetooth: MGMT ver 1.23
[  424.047980][T18558] netlink: 'syz.7.3428': attribute type 12 has an invalid length.
[  424.055932][T18558] netlink: 'syz.7.3428': attribute type 29 has an invalid length.
[  424.064852][T18558] netlink: 148 bytes leftover after parsing attributes in process `syz.7.3428'.
[  424.086637][T18558] netlink: 59 bytes leftover after parsing attributes in process `syz.7.3428'.
[  424.199033][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3429'.
[  424.221574][T18565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3429'.
[  424.457404][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  424.712984][T18595] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3439'.
[  424.760748][T18598] netlink: 348 bytes leftover after parsing attributes in process `syz.0.3442'.
[  425.418289][T18619] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3447'.
[  425.658477][T18639] netlink: 'syz.2.3453': attribute type 1 has an invalid length.
[  425.666263][T18639] netlink: 'syz.2.3453': attribute type 1 has an invalid length.
[  425.688215][T18639] netlink: 'syz.2.3453': attribute type 8 has an invalid length.
[  425.745969][T18633] 8021q: adding VLAN 0 to HW filter on device bond2
[  425.782970][T18645] batadv_slave_1: entered promiscuous mode
[  425.799657][T18643] batadv_slave_1: left promiscuous mode
[  426.121911][T18661] netlink: 'syz.1.3460': attribute type 1 has an invalid length.
[  426.525278][T18680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  426.529086][ T5837] Bluetooth: hci6: command 0x0406 tx timeout
[  426.550305][T18680] netlink: 'syz.1.3465': attribute type 10 has an invalid length.
[  426.582517][T18682] IPv6: NLM_F_CREATE should be specified when creating new route
[  426.668062][T18680] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  427.101965][T18712] syzkaller1: entered promiscuous mode
[  427.107799][T18712] syzkaller1: entered allmulticast mode
[  427.302474][T18717] xt_limit: Overflow, try lower: 271964/0
[  427.416020][T18735] syzkaller1: entered promiscuous mode
[  427.427554][T18735] syzkaller1: entered allmulticast mode
[  428.129594][T18784] geneve2: entered promiscuous mode
[  428.345372][T18800] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  428.573170][T18814] __nla_validate_parse: 17 callbacks suppressed
[  428.573191][T18814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3504'.
[  428.708140][T18824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3506'.
[  428.736055][T18824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3506'.
[  428.775861][   T64] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  428.799955][T18828] netlink: 'syz.1.3508': attribute type 16 has an invalid length.
[  428.816759][T18828] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3508'.
[  428.826288][T18830] netlink: 'syz.7.3507': attribute type 1 has an invalid length.
[  428.941519][T18826] bond2: option resend_igmp: invalid value (32767)
[  428.948459][T18826] bond2: option resend_igmp: allowed values 0 - 255
[  428.977104][T18826] bond2 (unregistering): Released all slaves
[  428.990068][T18848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3509'.
[  429.020698][T18850] netlink: 'syz.0.3512': attribute type 10 has an invalid length.
[  429.073528][   T64] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  429.074020][T18854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3512'.
[  429.093389][T18854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3512'.
[  429.120117][   T64] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  429.145998][T18836] syzkaller0: entered promiscuous mode
[  429.157404][T18836] syzkaller0: entered allmulticast mode
[  429.195885][   T64] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  429.431718][T18867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3515'.
[  429.858752][T18909] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3524'.
[  429.911278][T18911] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3526'.
[  429.954546][T18898] bond8: entered promiscuous mode
[  429.969807][T18898] bond8: entered allmulticast mode
[  429.975496][T18915] x_tables: duplicate entry at hook 1
[  430.150405][T18930] netlink: 'syz.5.3532': attribute type 1 has an invalid length.
[  432.435303][T18975] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  432.646497][T18900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  432.676624][T18964] netlink: 'syz.7.3543': attribute type 1 has an invalid length.
[  432.740582][T18977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  432.969415][T18985] F: left allmulticast mode
[  433.109837][T18996] netlink: 'syz.7.3554': attribute type 4 has an invalid length.
[  433.372679][T19010] team0 (unregistering): Port device team_slave_0 removed
[  433.530909][T19010] team0 (unregistering): Port device team_slave_1 removed
[  433.571874][T19024] netlink: 'syz.7.3564': attribute type 25 has an invalid length.
[  433.571874][T19025] netlink: 'syz.7.3564': attribute type 25 has an invalid length.
[  433.591423][T19024] __nla_validate_parse: 6 callbacks suppressed
[  433.591439][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3564'.
[  433.636660][T19025] netlink: 'syz.7.3564': attribute type 25 has an invalid length.
[  433.637658][T19024] netlink: 'syz.7.3564': attribute type 25 has an invalid length.
[  433.656175][T19018] syzkaller0: entered promiscuous mode
[  433.662775][T19018] syzkaller0: entered allmulticast mode
[  433.679280][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3564'.
[  433.688291][   T64] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  433.691702][T19024] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3564'.
[  433.725057][T19018] team0: Device gtp0 is up. Set it down before adding it as a team port
[  433.813362][   T64] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  433.853557][   T64] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  434.016979][T19046] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  434.181122][   T64] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  434.478817][T19067] veth1_macvtap: left promiscuous mode
[  434.509803][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3576'.
[  435.030811][T19097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3581'.
[  435.283542][T19116] netlink: 16215 bytes leftover after parsing attributes in process `syz.7.3584'.
[  435.547273][T19128] netlink: 'syz.1.3588': attribute type 1 has an invalid length.
[  435.611743][T19128] bond6: entered promiscuous mode
[  435.617249][T19128] 8021q: adding VLAN 0 to HW filter on device bond6
[  435.674556][T19128] bond6: (slave bridge6): making interface the new active one
[  435.682361][T19128] bridge6: entered promiscuous mode
[  435.689581][T19128] bond6: (slave bridge6): Enslaving as an active interface with an up link
[  435.921539][T19155] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3593'.
[  435.970166][T19157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'.
[  435.985748][T19157] bond0: entered promiscuous mode
[  435.995041][T19157] bond_slave_0: entered promiscuous mode
[  436.003998][T19157] bond_slave_1: entered promiscuous mode
[  436.044667][T19157] bond0: left promiscuous mode
[  436.053877][T19157] bond_slave_0: left promiscuous mode
[  436.072031][T19157] bond_slave_1: left promiscuous mode
[  436.120172][T19161] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  436.311448][T19173] netlink: 248 bytes leftover after parsing attributes in process `syz.5.3600'.
[  436.321151][T19173] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3600'.
[  436.567801][T19178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  436.885271][T19196] netlink: 'syz.0.3606': attribute type 6 has an invalid length.
[  436.930682][T19200] netlink: 'syz.1.3608': attribute type 1 has an invalid length.
[  437.000511][T19200] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  437.013452][T19200] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  437.055242][T19212] netlink: 'syz.2.3611': attribute type 1 has an invalid length.
[  437.120916][T19200] bond7: (slave bridge7): Enslaving as an active interface with a down link
[  437.515144][T19237] netlink: 'syz.0.3617': attribute type 1 has an invalid length.
[  437.599179][T19242] xt_TPROXY: Can be used only with -p tcp or -p udp
[  437.633734][T19242] nbd: must specify a size in bytes for the device
[  438.374602][T19292] netlink: 'syz.0.3629': attribute type 1 has an invalid length.
[  438.599454][T19321] __nla_validate_parse: 14 callbacks suppressed
[  438.599473][T19321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3633'.
[  438.638956][T19319] Dead loop on virtual device ip6_vti0, fix it urgently!
[  438.641262][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3633'.
[  438.666012][T19319] Dead loop on virtual device ip6_vti0, fix it urgently!
[  438.678841][T19319] Dead loop on virtual device ip6_vti0, fix it urgently!
[  438.696926][T19319] Dead loop on virtual device ip6_vti0, fix it urgently!
[  438.942075][T19342] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6
[  439.153403][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3642'.
[  439.185430][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3642'.
[  439.204761][T19353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3642'.
[  439.219194][T19351] tipc: Started in network mode
[  439.224349][T19351] tipc: Node identity ac14140f, cluster identity 4711
[  439.232425][T19351] tipc: New replicast peer: 255.255.255.255
[  439.242740][T19351] tipc: Enabled bearer <udp:syz2>, priority 10
[  439.309492][T19358] netlink: 'syz.1.3643': attribute type 2 has an invalid length.
[  439.395483][T19362] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3643'.
[  439.566713][T19227] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  439.569754][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  439.583418][T19227] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  439.812472][T19393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3646'.
[  439.820597][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  439.862913][T19393] 8021q: adding VLAN 0 to HW filter on device bond8
[  440.028262][T19405] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3649'.
[  440.293466][T19227] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  440.301241][T19227] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  440.356618][T10708] tipc: Node number set to 2886997007
[  440.407436][T19227] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  440.429155][T19439] netlink: 'syz.5.3659': attribute type 1 has an invalid length.
[  440.435046][T19227] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  440.440211][T19439] netlink: 'syz.5.3659': attribute type 1 has an invalid length.
[  440.486813][T19227] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[  440.498782][T19227] Bluetooth: hci7: Error when powering off device on rfkill (-4)
[  440.593701][T19227] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  440.613516][T19227] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  440.640219][T19227] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  440.649002][T19227] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  440.731798][T19227] Bluetooth: hci8: Opcode 0x0c1a failed: -4
[  440.738369][T19227] Bluetooth: hci8: Error when powering off device on rfkill (-4)
[  440.949597][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3662'.
[  441.596572][T19413] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  441.925502][T19479] syz.0.3665: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  442.135726][T19493] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3670'.
[  442.155655][T19479] CPU: 1 UID: 0 PID: 19479 Comm: syz.0.3665 Not tainted syzkaller #0 PREEMPT(full) 
[  442.155684][T19479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  442.155696][T19479] Call Trace:
[  442.155704][T19479]  <TASK>
[  442.155712][T19479]  dump_stack_lvl+0xe8/0x150
[  442.155747][T19479]  warn_alloc+0x249/0x340
[  442.155773][T19479]  ? stack_trace_save+0xa9/0x100
[  442.155797][T19479]  ? __pfx_warn_alloc+0x10/0x10
[  442.155827][T19479]  ? kasan_save_track+0x4f/0x80
[  442.155847][T19479]  ? kasan_save_track+0x3e/0x80
[  442.155866][T19479]  ? __kasan_kmalloc+0x93/0xb0
[  442.155887][T19479]  ? __kmalloc_cache_noprof+0x31c/0x660
[  442.155908][T19479]  ? xskq_create+0x56/0x170
[  442.155931][T19479]  ? xsk_setsockopt+0x54c/0x990
[  442.155951][T19479]  ? do_sock_setsockopt+0x17c/0x1b0
[  442.155976][T19479]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  442.155999][T19479]  ? do_syscall_64+0x14d/0xf80
[  442.156030][T19479]  __vmalloc_node_range_noprof+0x132/0x1730
[  442.156082][T19479]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  442.156110][T19479]  ? __kasan_kmalloc+0x93/0xb0
[  442.156145][T19479]  vmalloc_user_noprof+0xad/0xe0
[  442.156168][T19479]  ? xskq_create+0xbf/0x170
[  442.156193][T19479]  xskq_create+0xbf/0x170
[  442.156239][T19479]  xsk_init_queue+0x8a/0xe0
[  442.156270][T19479]  xsk_setsockopt+0x54c/0x990
[  442.156300][T19479]  ? __pfx_xsk_setsockopt+0x10/0x10
[  442.156330][T19479]  ? __pfx_aa_sk_perm+0x10/0x10
[  442.156367][T19479]  ? aa_sock_opt_perm+0xff/0x1a0
[  442.156394][T19479]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  442.156418][T19479]  ? __pfx_xsk_setsockopt+0x10/0x10
[  442.156446][T19479]  do_sock_setsockopt+0x17c/0x1b0
[  442.156481][T19479]  __x64_sys_setsockopt+0x13d/0x1b0
[  442.156515][T19479]  do_syscall_64+0x14d/0xf80
[  442.156545][T19479]  ? trace_irq_disable+0x3b/0x150
[  442.156564][T19479]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.156588][T19479]  ? clear_bhb_loop+0x40/0x90
[  442.156616][T19479]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  442.156648][T19479] RIP: 0033:0x7f4eefb9c819
[  442.156669][T19479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  442.156689][T19479] RSP: 002b:00007f4ef0a66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  442.156714][T19479] RAX: ffffffffffffffda RBX: 00007f4eefe15fa0 RCX: 00007f4eefb9c819
[  442.156731][T19479] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  442.156744][T19479] RBP: 00007f4eefc32c91 R08: 0000000000000004 R09: 0000000000000000
[  442.156757][T19479] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  442.156770][T19479] R13: 00007f4eefe16038 R14: 00007f4eefe15fa0 R15: 00007fff766707f8
[  442.156806][T19479]  </TASK>
[  442.329745][T19491] ipvlan2: entered allmulticast mode
[  442.429677][T19479] Mem-Info:
[  442.435690][T19479] active_anon:6960 inactive_anon:0 isolated_anon:0
[  442.435690][T19479]  active_file:2951 inactive_file:40236 isolated_file:0
[  442.435690][T19479]  unevictable:768 dirty:86 writeback:0
[  442.435690][T19479]  slab_reclaimable:13061 slab_unreclaimable:125575
[  442.435690][T19479]  mapped:44796 shmem:1371 pagetables:1895
[  442.435690][T19479]  sec_pagetables:0 bounce:0
[  442.435690][T19479]  kernel_misc_reclaimable:0
[  442.435690][T19479]  free:1243971 free_pcp:21281 free_cma:0
[  442.495239][T19479] Node 0 active_anon:27840kB inactive_anon:0kB active_file:11804kB inactive_file:160736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130032kB dirty:344kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17684kB pagetables:7436kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  442.578321][T19479] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:49152kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  442.610598][T19479] Node 0 DMA free:11248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB
[  442.682637][T19479] lowmem_reserve[]: 0 2492 2493 2493 2493
[  442.709136][T19479] Node 0 DMA32 free:1173612kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27968kB inactive_anon:0kB active_file:11804kB inactive_file:160736kB unevictable:1536kB writepending:344kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:33728kB local_pcp:14192kB free_cma:0kB
[  442.800056][T19479] lowmem_reserve[]: 0 0 0 0 0
[  442.804845][T19479] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  442.907084][T19479] lowmem_reserve[]: 0 0 0 0 0
[  442.913212][T19479] Node 1 Normal free:3790984kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:51156kB local_pcp:26448kB free_cma:0kB
[  442.964599][T19479] lowmem_reserve[]: 0 0 0 0 0
[  442.970447][T19479] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11248kB
[  442.986022][T19479] Node 0 DMA32: 5929*4kB (UM) 4940*8kB (UME) 2541*16kB (UME) 1389*32kB (UME) 457*64kB (UME) 324*128kB (UME) 748*256kB (UME) 484*512kB (UM) 305*1024kB (UME) 99*2048kB (UM) 0*4096kB = 1173428kB
[  443.037622][T19479] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  443.078571][T19479] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 21*16kB (UM) 8*32kB (UM) 12*64kB (UM) 8*128kB (UM) 7*256kB (UM) 6*512kB (UM) 5*1024kB (UM) 5*2048kB (U) 920*4096kB (UM) = 3790984kB
[  443.098126][T19479] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  443.108128][T19479] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  443.118228][T19479] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  443.130511][T19479] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  443.207842][T19479] 44555 total pagecache pages
[  443.222250][T19479] 0 pages in swap cache
[  443.242271][T19479] Free swap  = 124996kB
[  443.262185][T19479] Total swap = 124996kB
[  443.281603][T19479] 2097051 pages RAM
[  443.302538][T19479] 0 pages HighMem/MovableOnly
[  443.325465][T19479] 427072 pages reserved
[  443.349746][T19479] 0 pages cma reserved
[  443.677596][T19556] sch_fq: defrate 0 ignored.
[  443.944212][T19576] netlink: 'syz.1.3688': attribute type 19 has an invalid length.
[  444.003921][T19576] __nla_validate_parse: 1 callbacks suppressed
[  444.003942][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3688'.
[  444.060513][T19583] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3689'.
[  444.115104][T19576] netlink: 'syz.1.3688': attribute type 19 has an invalid length.
[  444.125563][T19583] bridge0: port 1(bridge_slave_0) entered disabled state
[  444.156949][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3688'.
[  444.350350][T19597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3695'.
[  444.619045][T19615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'.
[  444.661038][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3699'.
[  444.671298][T19621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'.
[  444.936010][   T30] INFO: task syz.4.2111:13567 blocked for more than 143 seconds.
[  444.945955][   T30]       Not tainted syzkaller #0
[  444.953530][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  444.976485][   T30] task:syz.4.2111      state:D stack:26120 pid:13567 tgid:13566 ppid:5829   task_flags:0x400140 flags:0x00080002
[  445.003125][   T30] Call Trace:
[  445.018628][   T30]  <TASK>
[  445.021889][   T30]  __schedule+0x15dd/0x52d0
[  445.032187][   T30]  ? __pfx___schedule+0x10/0x10
[  445.052357][   T30]  ? schedule+0x90/0x360
[  445.062663][   T30]  schedule+0x164/0x360
[  445.076813][   T30]  schedule_preempt_disabled+0x13/0x30
[  445.082341][   T30]  __mutex_lock+0x7fe/0x1300
[  445.115257][   T30]  ? __mutex_lock+0x5ac/0x1300
[  445.136808][   T30]  ? nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410
[  445.151475][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  445.162736][   T30]  ? stack_trace_save+0xa9/0x100
[  445.169914][   T30]  ? __pfx_stack_trace_save+0x10/0x10
[  445.175330][   T30]  nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410
[  445.181574][   T30]  ? stack_depot_save_flags+0x33/0x810
[  445.187125][   T30]  ? kasan_save_track+0x4f/0x80
[  445.192095][   T30]  ? kasan_save_track+0x3e/0x80
[  445.212306][   T30]  ? __kasan_kmalloc+0x93/0xb0
[  445.222420][   T30]  ? __alloc_skb+0x2c1/0x7d0
[  445.228656][   T30]  ? netlink_dump+0x1ef/0xe80
[  445.233435][   T30]  ? __netlink_dump_start+0x5cb/0x7e0
[  445.239004][   T30]  ? genl_family_rcv_msg_dumpit+0x213/0x310
[  445.244985][   T30]  ? genl_rcv_msg+0x5e8/0x7a0
[  445.249977][   T30]  ? netlink_rcv_skb+0x232/0x4b0
[  445.255649][   T30]  ? genl_rcv+0x28/0x40
[  445.260323][   T30]  ? netlink_unicast+0x80f/0x9b0
[  445.265362][   T30]  ? netlink_sendmsg+0x813/0xb40
[  445.277806][   T30]  ? ____sys_sendmsg+0x972/0x9f0
[  445.282993][   T30]  ? ___sys_sendmsg+0x2a5/0x360
[  445.288171][   T30]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  445.293643][   T30]  ? do_syscall_64+0x14d/0xf80
[  445.298636][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.304818][   T30]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  445.311454][   T30]  ? rcu_is_watching+0x15/0xb0
[  445.316329][   T30]  ? trace_kmalloc+0x2a/0x110
[  445.321052][   T30]  ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0
[  445.328300][   T30]  genl_dumpit+0x10b/0x1b0
[  445.333220][   T30]  netlink_dump+0x722/0xe80
[  445.338022][   T30]  ? __pfx_netlink_dump+0x10/0x10
[  445.343070][   T30]  ? genl_start+0x499/0x6c0
[  445.347755][   T30]  __netlink_dump_start+0x5cb/0x7e0
[  445.352983][   T30]  genl_family_rcv_msg_dumpit+0x213/0x310
[  445.359071][   T30]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  445.365348][   T30]  ? genl_get_cmd+0x4a8/0x930
[  445.370185][   T30]  ? __pfx_genl_start+0x10/0x10
[  445.375062][   T30]  ? __pfx_genl_dumpit+0x10/0x10
[  445.380102][   T30]  ? __pfx_genl_done+0x10/0x10
[  445.384916][   T30]  genl_rcv_msg+0x5e8/0x7a0
[  445.389835][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  445.394903][   T30]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  445.401485][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  445.406831][   T30]  netlink_rcv_skb+0x232/0x4b0
[  445.411721][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  445.417307][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  445.422637][   T30]  ? down_read+0x272/0x2e0
[  445.427229][   T30]  ? genl_rcv+0xd/0x40
[  445.431496][   T30]  genl_rcv+0x28/0x40
[  445.435541][   T30]  netlink_unicast+0x80f/0x9b0
[  445.440418][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  445.445752][   T30]  ? netlink_sendmsg+0x650/0xb40
[  445.451293][   T30]  ? skb_put+0x11b/0x210
[  445.455569][   T30]  netlink_sendmsg+0x813/0xb40
[  445.460426][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  445.465745][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  445.471421][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  445.477219][   T30]  ____sys_sendmsg+0x972/0x9f0
[  445.482062][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  445.487864][   T30]  ? import_iovec+0x73/0xa0
[  445.492412][   T30]  ___sys_sendmsg+0x2a5/0x360
[  445.497189][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  445.502448][   T30]  ? futex_wake+0x4ac/0x580
[  445.507556][   T30]  ? __fget_files+0x2a/0x420
[  445.512197][   T30]  ? __fget_files+0x3a0/0x420
[  445.517059][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  445.522059][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  445.527724][   T30]  ? rcu_is_watching+0x15/0xb0
[  445.532560][   T30]  do_syscall_64+0x14d/0xf80
[  445.537666][   T30]  ? trace_irq_disable+0x3b/0x150
[  445.542762][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.549060][   T30]  ? clear_bhb_loop+0x40/0x90
[  445.553788][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.559985][   T30] RIP: 0033:0x7f11e7b9c819
[  445.564550][   T30] RSP: 002b:00007f11e896f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  445.574258][   T30] RAX: ffffffffffffffda RBX: 00007f11e7e15fa0 RCX: 00007f11e7b9c819
[  445.582840][   T30] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000006
[  445.591573][   T30] RBP: 00007f11e7c32c91 R08: 0000000000000000 R09: 0000000000000000
[  445.600062][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  445.608461][   T30] R13: 00007f11e7e16038 R14: 00007f11e7e15fa0 R15: 00007fff07d4ce68
[  445.616999][   T30]  </TASK>
[  445.620921][   T30] 
[  445.620921][   T30] Showing all locks held in the system:
[  445.654590][   T30] 1 lock held by khungtaskd/30:
[  445.676376][   T30]  #0: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  445.689889][   T30] 2 locks held by getty/5583:
[  445.694619][   T30]  #0: ffff8880327080a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  445.704851][   T30]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  445.715221][   T30] 2 locks held by syz.3.1521/11564:
[  445.720662][   T30]  #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  445.729216][   T30]  #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  445.739640][   T30] 3 locks held by syz.4.2111/13567:
[  445.744865][   T30]  #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  445.753334][   T30]  #1: ffff8880796de6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  445.764270][   T30]  #2: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1410
[  445.774898][   T30] 2 locks held by syz.6.2687/15702:
[  445.780332][   T30]  #0: ffffffff8fc3ec70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  445.788920][   T30]  #1: ffffffff8ea86b48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  445.799285][   T30] 3 locks held by kworker/u8:26/19363:
[  445.804775][   T30]  #0: ffff88813fe54148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0
[  445.816875][   T30]  #1: ffffc9000c72fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0
[  445.828272][   T30]  #2: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  445.837396][   T30] 2 locks held by syz.2.3691/19582:
[  445.842670][   T30]  #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  445.851972][   T30]  #1: ffffffff8e7648b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  445.862951][   T30] 1 lock held by syz.1.3704/19644:
[  445.868139][   T30]  #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  445.877701][   T30] 1 lock held by syz.1.3704/19646:
[  445.882803][   T30]  #0: ffffffff8fbd0ec8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30
[  445.894492][   T30] 
[  445.906721][   T30] =============================================
[  445.906721][   T30] 
[  445.928236][   T30] NMI backtrace for cpu 1
[  445.928265][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  445.928285][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  445.928296][   T30] Call Trace:
[  445.928304][   T30]  <TASK>
[  445.928311][   T30]  dump_stack_lvl+0xe8/0x150
[  445.928341][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  445.928380][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  445.928408][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  445.928434][   T30]  sys_info+0x135/0x170
[  445.928452][   T30]  watchdog+0xfd9/0x1030
[  445.928483][   T30]  ? watchdog+0x21a/0x1030
[  445.928509][   T30]  kthread+0x388/0x470
[  445.928529][   T30]  ? __pfx_watchdog+0x10/0x10
[  445.928546][   T30]  ? __pfx_kthread+0x10/0x10
[  445.928567][   T30]  ret_from_fork+0x51e/0xb90
[  445.928595][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  445.928620][   T30]  ? __switch_to+0xc7d/0x1450
[  445.928647][   T30]  ? __pfx_kthread+0x10/0x10
[  445.928668][   T30]  ret_from_fork_asm+0x1a/0x30
[  445.928713][   T30]  </TASK>
[  445.928720][   T30] Sending NMI from CPU 1 to CPUs 0:
[  445.937841][T19646] syzkaller1: entered promiscuous mode
[  445.943121][    C0] NMI backtrace for cpu 0
[  445.943136][    C0] CPU: 0 UID: 0 PID: 19646 Comm: syz.1.3704 Not tainted syzkaller #0 PREEMPT(full) 
[  445.943153][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  445.943163][    C0] RIP: 0010:io_serial_in+0x77/0xc0
[  445.943187][    C0] Code: e8 0e 59 84 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 3f ab ee fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 61 71 06 cc 44 89 f9 80 e1 07
[  445.943201][    C0] RSP: 0018:ffffc900034f7130 EFLAGS: 00000002
[  445.943215][    C0] RAX: 1ffffffff34bb500 RBX: 00000000000003fd RCX: 0000000000000000
[  445.943226][    C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  445.943235][    C0] RBP: ffffffff9a5db150 R08: ffff888025a90237 R09: 1ffff11004b52046
[  445.943246][    C0] R10: dffffc0000000000 R11: ffffffff85416690 R12: dffffc0000000000
[  445.943257][    C0] R13: 0000000000000000 R14: ffffffff9a5daec0 R15: 0000000000000000
[  445.943267][    C0] FS:  00007f00a5b916c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000
[  445.943280][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  445.943290][    C0] CR2: 00007f92e5866e9c CR3: 00000000546dc000 CR4: 00000000003526f0
[  445.943304][    C0] Call Trace:
[  445.943311][    C0]  <TASK>
[  445.943319][    C0]  wait_for_lsr+0x1a1/0x2f0
[  445.943341][    C0]  serial8250_console_write+0x1348/0x1ba0
[  445.943368][    C0]  ? __pfx_serial8250_console_write+0x10/0x10
[  445.943387][    C0]  ? lock_acquire+0xf0/0x2e0
[  445.943410][    C0]  ? do_raw_spin_unlock+0xf5/0x210
[  445.943427][    C0]  ? console_flush_all+0x123/0xb20
[  445.943442][    C0]  console_flush_all+0x718/0xb20
[  445.943478][    C0]  ? console_flush_all+0x123/0xb20
[  445.943496][    C0]  ? __pfx_console_flush_all+0x10/0x10
[  445.943514][    C0]  ? is_printk_cpu_sync_owner+0x32/0x40
[  445.943534][    C0]  console_unlock+0xd1/0x1c0
[  445.943559][    C0]  ? __pfx_console_unlock+0x10/0x10
[  445.943583][    C0]  ? vprintk_emit+0x455/0x560
[  445.943606][    C0]  ? vprintk_emit+0x2cf/0x560
[  445.943627][    C0]  ? vprintk_emit+0x2cf/0x560
[  445.943651][    C0]  vprintk_emit+0x485/0x560
[  445.943673][    C0]  ? __lock_acquire+0x6b5/0x2cf0
[  445.943694][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  445.943722][    C0]  _printk+0xdd/0x130
[  445.943739][    C0]  ? __pfx__printk+0x10/0x10
[  445.943773][    C0]  ? __netdev_printk+0x36f/0x480
[  445.943791][    C0]  netdev_info+0x11e/0x180
[  445.943808][    C0]  ? add_device_randomness+0xc5/0x110
[  445.943832][    C0]  ? __pfx_netdev_info+0x10/0x10
[  445.943851][    C0]  ? __dev_open+0x6be/0x830
[  445.943872][    C0]  __dev_set_promiscuity+0x2e7/0x710
[  445.943894][    C0]  ? __local_bh_enable_ip+0xd0/0x130
[  445.943919][    C0]  __dev_change_flags+0x41a/0x690
[  445.943939][    C0]  ? __mutex_lock+0x5ac/0x1300
[  445.943966][    C0]  ? __pfx___dev_change_flags+0x10/0x10
[  445.943989][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  445.944015][    C0]  netif_change_flags+0x88/0x1a0
[  445.944039][    C0]  dev_change_flags+0x130/0x260
[  445.944062][    C0]  devinet_ioctl+0x9f2/0x1b30
[  445.944087][    C0]  ? __pfx_devinet_ioctl+0x10/0x10
[  445.944108][    C0]  ? get_user_ifreq+0x12b/0x180
[  445.944133][    C0]  inet_ioctl+0x42a/0x560
[  445.944158][    C0]  ? __pfx_inet_ioctl+0x10/0x10
[  445.944192][    C0]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  445.944228][    C0]  sock_do_ioctl+0x101/0x320
[  445.944244][    C0]  ? __pfx_sock_do_ioctl+0x10/0x10
[  445.944274][    C0]  ? do_futex+0x333/0x420
[  445.944302][    C0]  sock_ioctl+0x5c6/0x7f0
[  445.944328][    C0]  ? __pfx_sock_ioctl+0x10/0x10
[  445.944353][    C0]  ? __fget_files+0x2a/0x420
[  445.944368][    C0]  ? __fget_files+0x3a0/0x420
[  445.944381][    C0]  ? __fget_files+0x2a/0x420
[  445.944397][    C0]  ? bpf_lsm_file_ioctl+0x9/0x20
[  445.944419][    C0]  ? __pfx_sock_ioctl+0x10/0x10
[  445.944444][    C0]  __se_sys_ioctl+0xfc/0x170
[  445.944470][    C0]  do_syscall_64+0x14d/0xf80
[  445.944492][    C0]  ? trace_irq_disable+0x3b/0x150
[  445.944507][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.944523][    C0]  ? clear_bhb_loop+0x40/0x90
[  445.944542][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  445.944558][    C0] RIP: 0033:0x7f00a4d9c819
[  445.944573][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  445.944587][    C0] RSP: 002b:00007f00a5b91028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  445.944603][    C0] RAX: ffffffffffffffda RBX: 00007f00a5016090 RCX: 00007f00a4d9c819
[  445.944615][    C0] RDX: 0000200000000040 RSI: 0000000000008914 RDI: 0000000000000005
[  445.944625][    C0] RBP: 00007f00a4e32c91 R08: 0000000000000000 R09: 0000000000000000
[  445.944635][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  445.944644][    C0] R13: 00007f00a5016128 R14: 00007f00a5016090 R15: 00007ffdc8987148
[  445.944665][    C0]  </TASK>
[  445.945184][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  445.945239][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  445.945296][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  445.945326][   T30] Call Trace:
[  445.945353][   T30]  <TASK>
[  445.945373][   T30]  vpanic+0x56c/0xa60
[  445.945449][   T30]  ? __pfx___schedule+0x10/0x10
[  445.945512][   T30]  ? __pfx_vpanic+0x10/0x10
[  445.945605][   T30]  panic+0xc5/0xd0
[  445.945667][   T30]  ? __pfx_panic+0x10/0x10
[  445.945740][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  445.945810][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  445.945881][   T30]  watchdog+0x1023/0x1030
[  445.945940][   T30]  ? watchdog+0x21a/0x1030
[  445.946007][   T30]  kthread+0x388/0x470
[  445.946064][   T30]  ? __pfx_watchdog+0x10/0x10
[  445.946155][   T30]  ? __pfx_kthread+0x10/0x10
[  445.946294][   T30]  ret_from_fork+0x51e/0xb90
[  445.946401][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  445.946474][   T30]  ? __switch_to+0xc7d/0x1450
[  445.946557][   T30]  ? __pfx_kthread+0x10/0x10
[  445.946632][   T30]  ret_from_fork_asm+0x1a/0x30
[  445.946768][   T30]  </TASK>
[  445.953884][   T30] Kernel Offset: disabled