last executing test programs:

5.705515947s ago: executing program 0 (id=2161):
syz_emit_ethernet(0x2213, &(0x7f0000000840)={@local, @local, @void, {@ipv4={0x800, @gre={{0x11, 0x4, 0x0, 0x6, 0x2205, 0x68, 0x0, 0x1, 0x2f, 0x0, @local, @local, {[@lsrr={0x83, 0x1f, 0x80, [@dev={0xac, 0x14, 0x14, 0x1d}, @private=0xa010101, @local, @dev={0xac, 0x14, 0x14, 0xb}, @multicast2, @empty, @multicast1]}, @lsrr={0x83, 0xf, 0x39, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @dev={0xac, 0x14, 0x14, 0x15}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x1000, 0x2, [0x7c], "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"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0x7], "d68765a8275868e598f4dc6f714fa1c3691afbb300eb2fb7a03a12c472b657bb6908cc7597c946eb8baf0737e6a386edc77f9310391a68c8a1dc3f41c9df03d5c650206a4459e50cc01ab3643d8d6210c5c5d67e74bda7d5366ceff3456506b50f7a5f745e379ab47baad93cfaa20da6882f88ee84dccd5308f332d7b1f5301abe589cb73cca15131708de2485d2e4972c836ef6b76c22f9314c3b42f07ad2055f9943127339"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [0x3, 0x8000], "4c7b061261726cdfd2186e2fe3f2b523496e81b8a89a1899d70cc80b72b99d70087362c92316648414272127fa8457af051e2a850511ad430330645b4125c6ec8c09b0703d535a96e5e558b8e19e8cae5f65d328487870117df3732ede5189ef0bafe323e9fc7a98c5628f4737b4166467663dccb791affcdcab7d0b7dc2d1924480824f05d2a364eb406a1dd372ad9230e69ae9cee745afacf4fe6d8b347d0939779816f6e5b2b65bbc5cc7881eff918cd6405c47dd9446e6e60ee6af97943eb0ac1de739b2277b764c349ec7986a"}, {0x8, 0x88be, 0x1, {{0x5, 0x1, 0x7, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x4, {{0x5, 0x2, 0x6, 0x2, 0x0, 0x3, 0x0, 0x2}, 0x2, {0x6e, 0x6, 0x2, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x800, "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"}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071103d00000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x84)

5.530734812s ago: executing program 0 (id=2163):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000001800), r0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xb, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @call={0x85, 0x0, 0x0, 0x15}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0x80}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0xfffffffe}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x9, [@decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x9}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x55}, 0x28)
r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
clock_gettime(0x6, &(0x7f0000000f40))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000140)={0x3c, r2, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x16c}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}]}, 0x3c}}, 0x10)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000f00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ba3a2abd3300ffdbdfffffff7f000c00000c000500000100000000009be475410005000a002b00000014000aebe623812470e0fa742e79240d000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x4000080)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@ipv6_delrule={0x30, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'caif0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000180)={@rand_addr=0x64010100, 0x0, 0x0, 0xa0, 0x0, [{@multicast2}, {@remote}, {@local}, {@private}, {}, {@loopback}, {@local}, {@remote}, {@loopback}, {@private}]}})
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x10001, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xffffffffffffff9a, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="6800000000090504000000000000000002000000090001007379003000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4080)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f00000002c0)="7762f508e2633330cc9d150ff2c669f387057b788f0090d9e504f7a56519e3ed2a14bc1e573fccf25a2b3f890369c80d8e685d11615a86274bd18e0e84e169fb2b65cfbc28f348569890e6d4adcbc3c911a5fbf1ea785af5802db18fdbec45fee86a4f2a17241e9b8ca32f84d1aef77747609b4b222fd4b657dede", &(0x7f0000000340)=""/192}, 0x20)

5.065381051s ago: executing program 0 (id=2169):
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff) (async)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) (async)
mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r2, 0xd1383000) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/ipc\x00') (async)
r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') (async)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', <r8=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x0) (async)
sendmsg$nl_xfrm(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newspdinfo={0x1c, 0x24, 0x1, 0x709d2a, 0x25dfdbfc, 0x9, [@XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0xc000)
ioctl$NS_GET_USERNS(r5, 0xb701, 0x0)
ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) (async)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0)
mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x9, 0x12, r0, 0xfffff000) (async)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) (async)
mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0)

4.599539952s ago: executing program 2 (id=2172):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=<r2=>r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000300000000000000feffff108500000007"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x48) (async)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') (async, rerun: 64)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (rerun: 64)
ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x5, r5, 0x0, 0xffffffff00000000}, 0x38) (async)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
sendmmsg$inet6(r6, &(0x7f0000002bc0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x1, @remote, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r3, @ANYRES32=0x0, @ANYBLOB="0000f29fc2e642d3a8789f67bc85337ec91a0000", @ANYRES8=r1], 0x28}}], 0x1, 0x40000054)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000838001180090001006c61737400000000280002800c00024000000000000000090800014000000ba308000140000010000800014000003f5e980000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000006c0003806800008008000340000000025c0002800c00028008000340000000024c0002800800034000000004080001"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) (async)
write$cgroup_int(0xffffffffffffffff, &(0x7f00000002c0)=0x678, 0x12)

4.575335032s ago: executing program 0 (id=2173):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}]}], {0x14}}, 0xa4}}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0x52}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xdd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004001}, 0x40)
r1 = socket(0x10, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)

4.252601456s ago: executing program 2 (id=2176):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9)
close(0x3)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'})
recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100)=@in={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/100, 0x64}, {&(0x7f0000000300)=""/92, 0x5c}, {&(0x7f0000000380)=""/42, 0x2a}, {&(0x7f00000003c0)=""/46, 0x2e}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/221, 0xdd}, {&(0x7f0000000680)=""/14, 0xe}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/157, 0x9d}], 0xa}, 0x70)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect(r3, &(0x7f0000000900)=@l2tp6={0xa, 0x0, 0x1, @private1, 0xeff, 0x2}, 0x80)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x8}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xa0}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x846}, 0x2000400c)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="9f0709dd00000000"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040004)

2.298970587s ago: executing program 3 (id=2178):
r0 = epoll_create1(0x80000)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={<r1=>r0, 0x3, 0x4, 0x4})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00', <r2=>0x0})
sendmsg$can_j1939(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x1d, r2, 0x7, {0x1, 0xf0, 0x1}, 0xff}, 0x18, &(0x7f00000002c0)={&(0x7f0000000280)="901762b6a375704d118012738df63b4c97ddac526a511cf50e3049165baee0a4ea2ecf2ce44de0f4b052336f3dea73974fc6527ee70dc7754c1e75bd", 0x3c}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x17a, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$bt_hci(r1, &(0x7f0000000340)={0x1, @le_set_ext_scan_params={{0x2041, 0x1f}, {0xa, 0xff, 0x40, "88e6d2c9eecda8c3ef1d9bd4884e804205599b294df8f2121d8e08d6"}}}, 0x23)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f0000000100)={0x20000014})
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.stat\x00', 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000140)=@o_path={&(0x7f0000000080)='./file0\x00', r5, 0x4000, r6}, 0x18)
epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="b40000000000000779116000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59)
pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0)

2.297858754s ago: executing program 0 (id=2179):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
clock_gettime(0x0, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0})
ppoll(&(0x7f0000000040)=[{r1, 0x200}, {r0, 0x121}, {r0, 0x1b5}, {r1, 0x457}, {0xffffffffffffffff, 0x4000}, {r0, 0x94}], 0x6, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000240)={[0xe]}, 0x8)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$WPAN_WANTACK(r1, 0x0, 0x0, &(0x7f0000000280)=0x1, 0x4)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ff"], 0x184}}, 0x0) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ff"], 0x184}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000001800010400000000000000000a400000fe0200010000000014000500fe80000000000000000000000000000208000400", @ANYRES32=0x2, @ANYBLOB="0600150008000000200016801c00010000020101"], 0x60}}, 0x0)

2.163234898s ago: executing program 2 (id=2180):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, 0x0, &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c5645", 0x0, 0x8000}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x40, 0x2, 0x6, 0x7, 0x7f, 0xf, 0x9, 0x8, 0xf, 0xc5, 0xf, 0x8, 0x8, 0x3}, 0xe)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) (async)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000087000000000000000600008018", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x4d}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1000, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x2, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x3f55ca97280b0a2a, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x95)
mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016800c0001"], 0x4c}}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150005000000280016800c0001"], 0x4c}}, 0x0)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000002, 0x28011, r0, 0x0)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x2000)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180000456d9dee5713be00020000008d261000040000009500000000000000d37fdedd955c81fcbe208cebace322c8d9c834e0455db87d6872de0d39d39d419965d76d83aea66bdfef4ef624f37900827e6c7815ecbd4356f650a0ae43b86962a812a33208dd2ed69584cf44706374479582758930bc60d410c871000000000000000000000016f75f698af74d37ef2826e8edd7874b128a2412688a9420df2e3a37d3861e321b4876150e1582942d31c9868428183b0bd6cf8656191e09b7bd4b0e8dbc44c21c2d1df01b35c4a888f42569e2e6f1673fc2a3616452e25699b5ffd2a506b0c8b4d66eb0bbba42e0456ce2631d9af2b7aafd9450e1d331ae24d0447672095b5db3a9fc5f013a4ec2b205ac2e1f901747429dc42e940b4222334a8560210254a53a44e4c3bc081b6af8"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
shutdown(r5, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
r6 = socket$kcm(0x10, 0x2, 0x0)
unshare(0x26020480)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xee, 0x4000004)
r7 = socket$phonet_pipe(0x23, 0x5, 0x2)
connect$phonet_pipe(r7, 0x0, 0x0) (async)
connect$phonet_pipe(r7, 0x0, 0x0)
ioctl$SIOCPNENABLEPIPE(r7, 0x89ed, 0x0)
sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d8000000100081044e81f782db44b96d001d006a0f000000050000002900150006000e2603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de643ec0dd6e4edef76874fbe0f32b1608621e9e0", 0xd8}], 0x1}, 0x20000080)
bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000070000000000000013d38000911171000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x2f, 0x9, 0x0, 0x0, 0x24, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x0, 0x3}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', <r8=>0x0, 0x2f, 0x9, 0x0, 0x0, 0x24, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x8000, 0x0, 0x3}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r8, 0x25, 0x0, @void}, 0x10) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r3, r8, 0x25, 0x0, @void}, 0x10)

2.160962449s ago: executing program 1 (id=2181):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000240)={@initdev, <r2=>0x0}, &(0x7f0000000280)=0x14)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x400001, 0x0, 0x0, 0x0, 0x1b}, [@call={0x85, 0x0, 0x0, 0x28}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x21600, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xe, 0x0, &(0x7f0000000000)="5bd6d2870c4038b4bc1996d87600", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r7=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x9, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
r11 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'gre0\x00', <r12=>0x0})
bind$packet(r10, &(0x7f0000000080)={0x11, 0xc, r12, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'syztnl1\x00', <r13=>0x0, 0x8000, 0x8, 0x4939, 0x7, {{0x12, 0x4, 0x2, 0x3d, 0x48, 0x66, 0x0, 0x40, 0x0, 0x0, @multicast2, @multicast1, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0xf, 0x8e, [@broadcast, @local, @empty]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @timestamp={0x44, 0x18, 0xab, 0x0, 0xb, [0x6, 0x6, 0x80000000, 0xa, 0x7]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xd4, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0xd4}}, 0x4)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000004)
listen(0xffffffffffffffff, 0x80010040)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032})
r15 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r15, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1})
socket$inet_udp(0x2, 0x2, 0x0)
writev(r14, &(0x7f0000000100)=[{&(0x7f0000000200)="010000000000220010000000000000010000000000020800450000740001400040063c817f0000017f000001", 0x2c}, {&(0x7f0000000140)="0000d9bbc59f2e0c48de5529fd878d269d79000000000000455f1a88c3bd094965", 0x21}], 0x2)

1.797601914s ago: executing program 4 (id=2183):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000740)={'bridge_slave_0\x00', &(0x7f00000004c0)=@ethtool_per_queue_op={0x4b, 0xf, [0x3, 0x2, 0x0, 0x80, 0x800, 0xd, 0x6, 0xfff, 0x10, 0xc, 0x100, 0x7, 0x1, 0x5, 0x9, 0x0, 0x7, 0x1, 0x9, 0x7, 0x0, 0x0, 0x598a, 0x1, 0x0, 0xffffffc0, 0x4, 0x8, 0xffff, 0x2, 0x4, 0x0, 0x6406, 0x4, 0x3, 0xff, 0x5, 0x8, 0xfffffffe, 0x0, 0x3, 0xb, 0x81, 0xd9, 0x8000, 0x2000, 0x51bb, 0x101, 0x3, 0x8, 0x2, 0x3, 0x3a59, 0x10001, 0x7, 0x8001, 0x4d, 0xf, 0x800, 0x6d49, 0x200, 0x9, 0xf, 0x80000000, 0xf, 0x1000, 0x3ff000, 0x2, 0x4, 0x6, 0x4, 0xfffffffa, 0x3, 0x98fa, 0x3, 0x5, 0x4, 0x8001, 0x6, 0x5, 0x1, 0xf39d, 0x9, 0x7f, 0x1, 0x80, 0x8, 0x9, 0x2, 0x2, 0xc, 0x3, 0x80, 0x6, 0x1b9, 0xfaa, 0x8dd4, 0x15761f95, 0x8625, 0x8, 0x0, 0x58011f25, 0x6, 0x10001, 0x2, 0xffffff80, 0x3, 0xbf1a, 0x3, 0xfffffff4, 0xd, 0x8, 0x0, 0x3, 0x5b6, 0x8, 0x9, 0x800, 0xffff, 0x6, 0x4, 0x4, 0x8, 0x5, 0x6, 0x1a65, 0x24e3, 0x8], "dfd7f723acf862cc5ef8fbfe1afdae6b3f046a87c344bea3dbc68b7139a0b650c676d07786d78a6d7c968e89c069024f09733ea63ed15493554ea02ac313d17e19b6ea4aafe580634dbefe3a"}})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$inet6(0xa, 0x5, 0x0)
listen(r2, 0x50) (async)
listen(r2, 0x0) (async)
socket$kcm(0x2, 0xa, 0x2) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r3, 0x8948, &(0x7f0000000480)="a6cc04e2d8f1c3adfbf10b29c56e3a") (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRES32], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) (async)
write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00008100ffffffffffff0600aaa8aaaa88a8110081002f000800450000204000e0"], 0x3a)

1.710651087s ago: executing program 1 (id=2184):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048855}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
r2 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003ac0)=@newtaction={0x74, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x60, 0x1, [@m_bpf={0x30, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, "3588"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x2c, 0xe, 0x0, 0x0, {{0x20}, {0x4}, {0x4}, {0xffffffffffffff30, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008081}, 0x4040)
syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@tcp}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001010000000000000800000071100a000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20048855}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) (async)
bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003ac0)=@newtaction={0x74, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x60, 0x1, [@m_bpf={0x30, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0x6, 0x6, "3588"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ife={0x2c, 0xe, 0x0, 0x0, {{0x20}, {0x4}, {0x4}, {0xffffffffffffff30, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4008081}, 0x4040) (async)
syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) (async)
bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="110000000400000004000000ff"], 0x17) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@tcp}, 0x20) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000001010000000000000800000071100a000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async)

1.534576445s ago: executing program 1 (id=2185):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x2a, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f00000000c0)={@multicast2, @broadcast}, 0x8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="30000000700008002bbd7000ff01c740b9ec19d6000000000000", @ANYRES32=r3, @ANYBLOB="0c00018005000600090000000c0001800600020008000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000844}, 0x0)

1.393956361s ago: executing program 1 (id=2186):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310700000000000000380000000e0001006e657464657673696d00000f0002006e657464657673696d30000008007300fcffffff0e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000000"], 0x64}, 0x1, 0x2, 0x0, 0x40}, 0x8000)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=r2, @ANYRES32=r2], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x402, 0x0) (async)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r5 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async)
sendmsg$inet(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)={r5, r4})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async)
r9 = socket$kcm(0x29, 0x5, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @sched_cls=0x36, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
sendfile(r9, r10, 0x0, 0xffffffff000)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES32=r6, @ANYRES8=r11], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000854)
sendmsg$NFT_BATCH(r8, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x658}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r11, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async)
socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})

1.317394436s ago: executing program 4 (id=2187):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000280)={'filter\x00', 0x4}, 0x68)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0, &(0x7f0000000000)="47cbf476c1da5c25d88e1f778e81e20b24db294f52d780ab891627bb1a51cbbe8900a720e19cb4acfd6504f724384582a2e4170c7319df7db0641674040148c23547a39b67c4560805065ea162de10f639ce22ee02c17b71a0dec3175062d18b90fbef3ddfd0ef3b439ded440f2d6e2936190f5d0fddd96421959e69d46db53bb05dbb33f1caed5840589e2ce1d3268d1ae7ef785e0f79cb62732f2558cc4508306e8364bc7d"}, 0x20)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)

1.314503147s ago: executing program 0 (id=2188):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x18, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0xf}]}, 0x18}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x301, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x5}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x17, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, &(0x7f0000000380))
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r5, 0x215eb000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r6)
sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x34, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810)
sendto$inet(0xffffffffffffffff, &(0x7f0000000200)="112233", 0x3, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10)
r8 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000040)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r9 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10)

1.191466824s ago: executing program 3 (id=2189):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in={0x2, 0x4e23, @broadcast}], 0x10)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8)
sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f00000002c0)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000240)={0x0, 0xb, 0x1, [0x2]}, 0xa)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2)
getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="bf09000010003904003e748e8a183f49e6e64200b064e9d8b2cd113769253d3b26092374a6244e87171ff7f18d4c78884715bd666557219b7056d34f7d2a7f2331c4fd7d4faa65f0a51868fc49681dac7751685fcca0a6599359208fb7e429a144f5b87ebb", @ANYRES32=r3, @ANYBLOB="01990000419a04001400140064766d72703000"/28], 0x34}, 0x1, 0x0, 0x0, 0x20060094}, 0x0)
sendto$packet(r1, &(0x7f0000000280)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x404c891, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1426ea301b8ef8c2d3000000ffdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r5=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r4}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r6, &(0x7f0000000340), 0x0}, 0x20)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r7 = socket$kcm(0x11, 0x200000000000002, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000f00)=[{0x0, 0x0, 0xc, 0x8}, {0x90010022, 0x4}], 0x10, 0x80}, 0x94)
close(r9)
recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x0)
setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce00030e00080ff008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x45, 0x0, &(0x7f0000000540)="55c4fee2dbbf564f826c7e1f7748267731c128391402e3216aa78029444b215ca03401071a21e916ecf579c34c8844c157bb0b9606b746442635167be88329ffadf9b3ba44"}, 0x50)
r12 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r12, 0x12, 0x3, &(0x7f0000000480)=0x17, 0x4)
getsockopt$bt_rfcomm_RFCOMM_LM(r12, 0x12, 0x3, &(0x7f0000000200), &(0x7f0000000240)=0x4)

1.10052955s ago: executing program 4 (id=2190):
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff)
mmap(&(0x7f0000dde000/0x3000)=nil, 0x3000, 0x5, 0x3032, 0xffffffffffffffff, 0xffffd000)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014"], 0x34}}, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)

948.805164ms ago: executing program 3 (id=2191):
r0 = socket$unix(0x1, 0x5, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000680)=""/246}, 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000000010000000000bd", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000d615000008009f000c000000080026000816"], 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "8fd6cc37ebcecda92d9497b12952c13c"}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000080)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'nr0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x51, 0x5, 0xfffffffd, 0x0, 0x0, '\x00', 0x8}})

871.338956ms ago: executing program 4 (id=2192):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
recvmsg(r1, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000300)=0x8, 0x4)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
r6 = socket(0x14, 0x2, 0x4)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r7)
r9 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9)
getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r10, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0)
sendmsg$GTP_CMD_DELPDP(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030029bd70000e0000000100000008000100", @ANYRES32=r10, @ANYBLOB="08000200c3"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000840)={r4, &(0x7f00000006c0)="9931e1bb3e5b21601bc5707421c5885e8ef1f1cac9c5428ece12df832d2ea9a7b9acd3daefa9c4d708631d585af36fe10be4091cffefbb60f1c99cd4ebefdad11fd340278e07bdfc89aa3919dc1379374ec01fe8f60ffb5e8e785f901194b296690b7d278ebfa4168a433e2a844d91dece44dab9d7939fd9880fdb66655a977ccac8a7695aa14c0dea8dcf4b94c82e05c4392b0ffb19430e3a1647eac7e11b60c2eb718ef7b14574b500d4bbeb74a48f26545eddd1cf902975c45de10b0aa9e4", &(0x7f0000000780)=""/178}, 0x20)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)={0xc4, 0x0, 0x1, 0x201, 0x0, 0x0, {0xb, 0x0, 0x4}, [@CTA_FILTER={0x34, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x511}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x808}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xb87}, @CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x680}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x10}]}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @mcast1}}}]}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4}, 0x4004040)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x28, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403, 0x14112}, [@IFLA_NET_NS_FD={0x8, 0x1c, r12}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)

849.238935ms ago: executing program 2 (id=2193):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@getqdisc={0x2c, 0x26, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {0x6, 0x6}, {0x10}}, [{0x4}, {0x4}]}, 0x2c}}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
r6 = accept(r5, 0x0, 0x0)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000a80)={{r7, 0x0, 0x400, 0x0, 0x7, &(0x7f0000000380)={@_ha_fsid}, 0x0}, 0x0, &(0x7f0000000a00)})
recvfrom$llc(r6, &(0x7f0000000280)=""/218, 0xda, 0x100, &(0x7f0000000380)={0x1a, 0x1d, 0xc8, 0x0, 0xb9, 0xea, @random="9fd4fdbd87b2"}, 0x10)
ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f00000001c0)={'vxcan1\x00', {0x2, 0x0, @empty}})
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x40000)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
r9 = socket$inet(0x2, 0x801, 0x0)
accept$alg(r8, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
sendto$inet(r9, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmsg$nl_route(r6, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_newnexthop={0x4c, 0x68, 0x1, 0x70bd28, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x10}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_GATEWAY={0x14, 0x6, @in6_addr=@empty}, @NHA_GATEWAY={0x14, 0x6, @ip4=@remote}, @NHA_RES_GROUP={0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040044}, 0x40000)
shutdown(r9, 0x1)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x8}]}}}]}, 0x3c}}, 0x0)

626.343211ms ago: executing program 2 (id=2194):
socket$netlink(0x10, 0x3, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x298, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000340)="04", 0x1)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x237a, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0}}], 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a2a1}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x8, 0x80000001, 0x7}, 0x24}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x19, 0x4, 0x4, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r9}, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r9, 0x0, 0x0}, 0x10)
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0000000024c1020000ff88", 0x14}], 0x1}, 0x4005)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x24040004)

523.404204ms ago: executing program 3 (id=2195):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0xffffff1f}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2}}, [@alu={0x4, 0x1, 0x3, 0x8, 0x6, 0x1}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xae, '\x00', 0x0, @sched_cls}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r3 = openat$cgroup_devices(r2, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\t\n'], 0xa)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$cgroup_int(r5, &(0x7f0000000140)='blkio.throttle.write_bps_device\x00', 0x2, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r7, 0x4)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

427.032531ms ago: executing program 1 (id=2196):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xca, &(0x7f0000000080)=""/202, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

308.970971ms ago: executing program 3 (id=2197):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x38}}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x400c880}, 0x4008002)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060018"], 0x4c}}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)
r2 = socket(0x2000000000000021, 0x2, 0x10000000000002)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x80)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

251.428235ms ago: executing program 2 (id=2198):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100028000"], 0x40}, 0x1, 0x0, 0x0, 0x48890}, 0x0) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x64) (async)
r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async, rerun: 64)
shutdown(0xffffffffffffffff, 0x1) (rerun: 64)
write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[], 0x50) (async, rerun: 64)
socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) (async, rerun: 32)
write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) (rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r2, 0x5000943f, &(0x7f0000002780)={{r5}, r6, 0x4, @inherit={0x68, &(0x7f0000000880)=ANY=[@ANYBLOB="000000000000000004000000000000005b0a000000000000040000000000000009000000000000000100000000000000f9ffffffffffffff080000000000000005d312334416109bcf3db7bf1a0000000000000002000000000000000b00000000000000060000003682330cebadfd1cde12cd3509b37fe36c3a7bb88acb7322ccab7f9f83f75fc965f9f5696fe00fc0ee7689b3de11b0696b311ce64774a153592850bff252456772e18a8171bd3626b1d770741b4825ef07"]}, @name="b3d994e424f9c77f6473a4ae80377ec45e7444341b6f51eba3cc2ae0d6aae3b799a846545ccdce55bb3edfe041d8b447ada974c6e46861ba7baa9f8db27bf15b8c2c8404ebae1e394363f088701512684e4822e638ecf3b61d4bfda71c7049e98f3edc162056d5aaafc57a9982cc7318274d3c6fec5cef4274845d57cc3be5427414597f0bed64ae1fc73a4b5d4276aff2643b10ab8df380634c1d9e9a1ca58ff331a00c91bc901911f023687b370fcd4cf0ef45597da5dd13191cbb730f263c9c7991e4aedf0c8c1e35fd9cd32af3c61a6ad683ed84748a5a1450a292edc4d34602ff4834102054f81c7f9686d9ab3df829b0de2dbd4c616552b6439ceb539c328e14a2902568a710ed220db93925ceaee9455cc489883295b04e767ede571a88ee6ae52df85caf8dc7831d2449613937ea78649194fb28123999977442bf496a296ac04a43f76e9bb9952084ec472dc8d2ab160a4ac93c38011b43e96a83376cca2caca8c81d6a8ef1270bd1b6b8cec8cfea4be2907048964a3dc75f7a8d8c70b6845b665fffc173c4750ad164aec2576575822f700723c15063de6001315764df921805f7f16bf533438f022261e2c4be133e37dcd1c84bd0f0a71682535df4429d3db6645e8387ebbd67218de662a6bec07d599cd2076103c60de96cd5fd771aead7e420e7219cf2b9a1b3ec7bdcd35e79b858ecf68c9eac8a5e912ad1695e9e4108379fc3449a2e9979d14f3710ce9600495c4386476745bcd62c5d1056396be5839d9166c41448b69b58266d8cbd7dcd9497e8279c7c477202ad0b2554b67048598303107071fb8cbcd6d167056cc86edb83185aa8c7e93d0c3ff05dfb065cb6cf0fd2ca2eafddb09c7a682fe1acb0ff481bfab3c037b8d1feb5b46d51760f244719b1e52c87752b7fa014c13b35e57c68c3c7197b6c12512886c3bf3beedb6a61304daa4a86b1d9d3f373697f9f87c5ca05f9ae0eb6f3da5fff4c0bf121a1d533940c87808dc56a7373899a7baa30b18999a6a7d308e5428aa207cf5a76003dcb6abd4af1ce9b4e23505f1cc862b32a9564d8a14b6db99053bd597b6e0e736a0a75e906077cc1150696a0f71e5a4ee49a86dd7dd75db7ea0c88f78bd389607bae2869cfa47c64e2900020232bc110eed307111bc1d865eb49881dfab48fbdc502a5b83c20b8fbdef9db59481e7d674e7517d06476c2273f29a8296e9994806bff01ecc06b96eaf7f64565be0be44bb97a5898045fdffe532e7ad282b7cf17962c4078aa4088bad5f64716eda43cef73b5dc14d9f766210c9fc25f5d2c64a0a5c6acbb36b4340133d514cdf0870d99f275acfa8ae34ba1f4c23d77aad64acb336e9222643cffdefeab16b81ad4c00cecb7c305551dcacb8dcaed01160a312f8c18e999671a977eef14ee51c926c0ec836d3c71e00c42327aaf2481b680a7f4cc308d5644977eb04993751f3c402d21b1a2e746b251d86d692b88e9feeb61f88b9afee56104c31b1e0b996e5a32924addd44bfb7031a74272cbfdd61e9b46abe8d3f3ef32b8b391069e3604facd1208751eee9b44dacc435a6f23adc3a7bcbe708614db14ffa45ba01078e03a3d2f94cac742873427b053c0245356bbf877cacf560cbf5c19a8969aac54e85f40359dab2d1568142688fabc83026d6ba3158448f7b8ed844af3f2dee3712965c9f5d27c29de0764fe9e720d72c672c8f6e4c4680147762939c0fb3d6f2b6d58578649144f6846e29bf4d1ddb45f830991e3e4530569a931dd93f64a2ddeaf3d4bf0ad9850e00214d32de9a676d8ae8db7022a4db3bae7bc67bd1b056e228e0156076dbfd1293b65fb8a581048df81105de2025546af6ec6401742e0ddb52364a91c13812540a6b969ea06a5c11268c8d033d015479295ed3fcdf666c22b199e804e70414dac953b9f7244e5c4f8b27308407c13eb08f5a3c19ce249f1101acc1df5a159f66492b272b68e68280803b4c49dab43f331122cb08b93e3c14477817c09659dd6682781357e94df22ca4e9ceefdfb9f51e65188cd2266f398dc4a8ce90b63f960c71d634672321c870ddfc2f94a60d27d159e72fae9966853d7847ead429e3fc19a4cd60838142ab842ae25286e1c7654c713866b56c9c824cb4c2746805799301a42a197ffa0960c8c3bdca1ec9573450b16b749d560bebb43c8369a51f4a0f9ae45ca0809b2de43e5cd644b223bdb51f38e7864d989042600fa56d069cfba184c058c910ba40ccedfcb2e96d9a82b6abfa7c150e7da1b9413db8e89bdb63d52b972a12f7147a68a44e19946741aa1cfa3f02cb950bbd85ae334f2a029f21ffa31bb477c2e060ed1db0f062d15813b58dcc596768dd59a01976236460e7a7f8eeea243d4f3fe5ee0986213c728f13991c69ae035c785321527c41caff7731a8eed2a2c55107dd616469ff248a87bea0e3bdb1d07a213429467471cf28e1428140549c6234daababca9937df57811f44b81f6657f9ed2c07fa1a1ee5ac51a4a8bbddc390f65134cca9237f03dcac94e521d9e8d948add830735f205d27368be524c701456bbe2d3852d0cbf1a5ebaf6e770d77e8a04472209b03d25eb95368a4497d6296c36b63e63aa0a8c39b4bdd523c27de21f8855d1ea7d1c171e4371f90b6dd37bee398e50f342a09391b40a6af83975da5f4b77b5c9194537a1b334eccb0a08ebb7126103b7dbf392d5a37e39ce69f8fb5ebe0ee3c4f440b8234097a67cfe952e807c3396ac6a6032691724c11123dbe210ca59c189f936e26238693ee626013a5279ac492bc79acd5d2b0a5e228390ecc937596ee63112bde7e901724ea0ee4ed3960b3c4b981b0cb99dd107592731fa51b6316bfe342b0f865b15e85d73022ce4137df58acd3e90ec55646b31dd46a95b7559ab29151e20fca0c32a167080e5ffc7a66590e7f8ec503246e6d3f1be6afeec2436aa0aacba02b99d7b903446e0b79f2eff64b8d66593080c8b51581e417f36ffdb09b0d2500d914eedef666415e2bf1e625e265abd04b3b7b60421241d504ff84993bb783ae4855404193d037de31129bb9b977e9159dd8f85e059826dc541168804b232c3fba45e9785d3f58a0603cbddc28f22d691cc6b026523bfe6165a97c8a988f9e9ef2054767a84c50b535870e4056b937d577dda38e2d652bb8b0d51062c5fba3bf74f4a0590ddca0c1acf462b49f5383fd368255a4f133664dba8310cd3adce621a341c5ff6fc6a05ed501411036147f3377895a7aff75337f36a46931c4feaed875f6ff3595b0a9bb9d84b70f1c80867c9778bd265f28d8888120a3bccd803ea7a645b5beb1cb7e2b8a8a6e0e03d87a13214aee9fc879ac57f895fada106a6302bad5398482d912da79283ca6d41a00f1bd6e0a10b8df3f8a0bf432698502c2c316d72090374367bd833227e77a07a93999e7b3c74f0bc8e812a33326cd8bc6a268f67d41db682efa47c7f79320f3e6c78b979815a03b615125cd4b65bdfa7401903c5776f399fae20a5aa8a0a491b8a9dfa8a4daff05f2456cb0d39fe4ba235308b69a543ebc20acdec1109e220f18fdf7689196e88d829cb29b20a2089ae5b7f6a0fa158e442b7e00f3fdd7733e038793ef52e83d2de7bd047119e0b3a44aa2ca1b77bcdb132a5b19fb3715ab71c471992be9277e947d3d3134732a10485ef51cbead9725440611f934f55d3e8e4bd874c6cb5821c160998e914a5140c4d0efd48fc0b5cffb37ed8fd7eea7be0979386901984758fd7eda3003eacdf8c629db0de00f6118c72f3c04725d40d903d7c5f775345fbc2df3567fd6acd88235a7d4c371a0c70bad1732daf2a98ea423e4f73321ab82c3cf80226a357892a055f4bfdc7a769e7be1998d530be32dcb59cacf4d0b9ca999457f0fd19ee3e468384000ff2fea38bb26e42367f86a9d07dddfc12c01149ffc658884be37416bb14e3ed333d0d0eec6412df2c9606759a425f3f28eb6d75c518cb581278d7e866701dd058cdb470b348dd32d3402c16099fb79b2706da9952206cbdb303a6e0d114f3139664974e7042f662a2193e9028da435858762539eca9b81c0a50a02202a14afff1a4ab62b1ed210459adfb17065cff858692efac02af36a6e81e909b3965ce1ef3f68372e07f2b90c5ef703074e7f32b143bb166e99f14fb06ca82f1ad107ab7e1bbd23f62b3a498dd0edd4a0b0fc58d91fa2016930a8050fc8c5dcb9e91726afdc6ca63e6be6aa094a96dc5cacb147a22de68b2f6dbb7b9581856568309e1ce1966dabd3fd0103023209766dfc1171e9e8b2e73944741ef6c69b2f2818de7038c7a952f0082b6fc04ca5da725f9815ca7adbf6811a279243b014d615442837942ed62ddaf65c6ebfebd02e23282fabacae31b6461126d34fde17a2b62acd5e82790ac1e84152a3aa9c50c8900c3a4d289207d06d7496bc28c54245e1ad736c3c368177e1d2e60982b492e1755e3dac33de7d22e358f68f14c6b4b07524b072c273d0ebd5d3555e8469c90eb5356ace7b1b188fa5c2852fea40d221234fad744f7fe1423ba2900338e552056d991ce01034d70555b79bd3c81f1b3f256591ec3d58d067d164789594d7b77d8ac3525f9fa174b40f2bdab0da0d3564d522c68c45923d47a3f69ce77017ded63e7c08541456dacd67f1e05772d8eee1f893a3e6355b9989e2e66bb6e9f96029d34c0dd5a36a633c16bf884dc9f5c5387ad85457e234e16a7262a3b4e55fa342917f1ee784afcb8fc720655c404ecfc4966b7820aadc986a617cf54a3b4848a4ba83fa9e8a938daabe4dd9d761d1edbc89de4b0d810972e6a6aea28985992cabea17a175eaf30dedd96e88773110332948773b33291f257867712c23b32798155a70ae62e3301d760ddc9f209ebec7c61004669434c4900f93c538af518e39d4aec775230bb1c3701cc73450b842e7722f82491bfa5afb022427d7e17e97c09ba4f56dea455c53a092c4cee7278dd17b03d7a5418ef7d8a2bc01d4e70fd1103ca3545587cff0a89bd195364d441846e9a74617866fc18ac0f8a23b7e2860ad8f92f4fc7cf5e76cf2ca9aeb6b8fbfc62a02fa72ada21010a1980d69819850d221e52c100675c8c010d82dde49367ab51b733f9bf07df24b9f7cc823779e59c52db0a7dd52196db3d1bed58bfc10d67760cd8904335623e68da2d9ad9a2407bc600c21e405886d0ff400de40f6499a6f41e0025f3594c110d8d425dd4853014e56416822e7d15ac57b999e547bf1dada4e4027cf30ebfdf1f5c7508049ccef8757d24a419f363c94fd842a815174a3d42b822223b1598d39a552f2d0c7054b246cd05d2e7cea678dee5b2aa6fcb8235845c05568305e26383973e8235340e08c96b06e96206c97878e653121cf37d1f2437c50c8a4f7b142e44e71a87f32962da482c42637cb46d6d0889476038d43afd2f524d129d5d65f3e6733208033372d50ed654a025f26c41fcd72be339ecdb5a744aba865a8a310640775154e611550f3878b83a05748cfb3916d1f96407d3bbdc1549e12bda2e7a6b81a8c65f570f04abcdb5eb79dc9500d3d3b27779fe94037386079d64a79c77256b4833645fcdd00c0fee9e3d56040e7f949722d9722c5d4b1c998ddb479c526e88ee88fb43a8f94d24ab649d479a8b0439127e21baa9c11361d57c2a8a9233bac26b406ea914fbe4323981ea4676b0313eb7a01d73"})
recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="160000000000000061b100000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000000000000000000000000000000000cdd70316e0d4be1880a0b977fa924baa048552afb0f39bc807657431655f29d705ad566d91a089ce9edd07598951"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, <r8=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001200)={r8, 0x0, &(0x7f0000001780)=""/4096}, 0x20) (async)
setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4) (async, rerun: 64)
setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) (async, rerun: 64)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000001200), 0x0, 0x200000000000, 0x20000000000001bc}}, 0x40) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xffffffffffffffe0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="40000000180001000100000000000000370100000e0001006e657464657673696d0000000f0002006e657464657673696d3000000a00730064756d6d790000007131a38e60e251e4a5c5bb62b99eede5a1a5fa9f07116b96e9dad250bc3bc2410d6da3b2fbaef28a8976eb55aeaae2f0fe1b59de9f334146692693425ca7f9d383d55e696685f4d87f386752a73882f14513c92ed36c233cd25aa40fd186e06e8dbf721be22dfe929eb30b380736e35adb45dc7c965c6ec798b76b89"], 0x40}, 0x1, 0x0, 0x0, 0x4000005}, 0x801)

241.175701ms ago: executing program 4 (id=2199):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000002, 0x11, r0, 0xaef000)
mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)

214.43918ms ago: executing program 1 (id=2200):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_mptcp(0xa, 0x1, 0x106)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000080)
r3 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg$inet6(r3, &(0x7f0000000100)={&(0x7f00000022c0)={0xa, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="280000000000000029000000050000003c010200"], 0x28}, 0xc0)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008014)
r7 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r7, 0x0, 0x0)
getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000005bc0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="d26747a8f1e9c7a1abe36f42c0c6437ac898908cc1384459305d27e2", 0x1c}], 0x1}}], 0x1, 0x2c00cc44)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c0002400000000000000002040004801800048014000300"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd7000000000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4040014}, 0x20008848)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000700)=ANY=[@ANYBLOB="e0000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf25150000002000018014000200766c616e30000000000000000000000008000300020000002000018014000200776c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="2000018008000300000000001400020076657468305f6d6163767461700000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="5c0001801400020062617461647630000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="04000180"], 0xe0}, 0x1, 0x0, 0x0, 0x40805}, 0x44001)
sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="a40000ce7bc2eb3f6a14e0ffc1c332731c92f000", @ANYRES16=0x0, @ANYBLOB="100925bd7000fbdbdf25100000000800090000000000600001801400020069703665727370616e300000000000000800030000000000080003000200000008000100", @ANYRES32=r8], 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'lo\x00'})

43.681999ms ago: executing program 3 (id=2201):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c)
sendto$inet6(r0, &(0x7f00000000c0)="a2928772ad3d0bbe669ff9590bed", 0xe, 0x24000045, &(0x7f0000000400)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="a0de59cec7d8", 0xffffffffffffffcf, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=2202):
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x200002, 0x0)
writev(r0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0})
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000240), 0x12)
sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000300)="00ad6f637a538b1d9e8ecf1ef3435e2478f8bc8ab9833feb8bc895583d", 0x1d}], 0x1}}], 0x1, 0x22008805)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x2711}, 0x10)
listen(r3, 0x0)
pselect6(0x40, &(0x7f0000000200)={0x7, 0x81, 0x1, 0x400, 0x100, 0x5}, &(0x7f0000000240)={0xa, 0x1, 0xfffffffffffffff7, 0xcd35, 0x5575, 0x6, 0x5, 0x10000}, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010025bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1019b39e7079d0205508040000000200"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0)
socket(0x10, 0x803, 0x0)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r6 = socket$nl_generic(0x11, 0x3, 0x10)
syz_emit_ethernet(0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="0180000000a538ae46463208004500001d0000000007029078ac1e0001e000000111009078e00000020000"], 0x0)
sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0)
bind$bt_hci(r5, 0x0, 0x0)
write$bt_hci(r5, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000400)={<r7=>0x0, 0x88, "3af1a75282457abacafc0827be116d4959ff4c253d65d92acfd640033673abec898f9168d93acc3464cea029bb9ff6c41db21a9ba0184f3bba8f5e0df166d23cf28dd8b7e2fbcf75324189fbcba7c3e6d58e25ecf14f8a18c113f515809db0369c06a6807d87014107626c4f03de4ba3d231f7dfcb88f1ebf584a6003d1ea8348d72ca77b577d39f"}, &(0x7f00000004c0)=0x90)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000500)={0xf, 0x48, 0x8001, 0x1, 0x9, 0x4, 0x80000001, 0x4, r7}, 0x20)

kernel console output (not intermixed with test programs):

 rejected, already enabled
[  153.162531][ T8805] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.163258][ T8805] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.163685][ T8805] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  153.183749][ T8809] syzkaller0: entered promiscuous mode
[  153.183767][ T8809] syzkaller0: entered allmulticast mode
[  153.375980][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.646'.
[  153.713719][ T8828] ip6tnl2: entered allmulticast mode
[  153.789909][ T8804] tipc: Resetting bearer <eth:syzkaller0>
[  153.855355][ T8804] tipc: Disabling bearer <eth:syzkaller0>
[  154.290680][ T8850] 8021q: VLANs not supported on ip_vti0
[  154.967064][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.967803][ T8879] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.141630][ T8879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  155.153742][ T8879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  155.498212][ T8899] bond5: option mode: invalid value (7)
[  155.540117][ T8899] bond5 (unregistering): Released all slaves
[  155.619137][ T8900] syz_tun: left promiscuous mode
[  155.698415][ T8900] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  155.704430][ T8900] ip6gretap1: left allmulticast mode
[  155.735810][ T8908] __nla_validate_parse: 4 callbacks suppressed
[  155.737170][ T8908] netlink: 9 bytes leftover after parsing attributes in process `syz.1.668'.
[  155.879275][ T8908] gretap0: entered promiscuous mode
[  155.880309][ T8925] netlink: 5 bytes leftover after parsing attributes in process `syz.1.668'.
[  155.880465][ T8925] 0ªî{X¹¦: renamed from gretap0
[  155.894966][ T8925] 0ªî{X¹¦: left promiscuous mode
[  155.894984][ T8925] 0ªî{X¹¦: entered allmulticast mode
[  155.898578][ T8925] net_ratelimit: 65 callbacks suppressed
[  155.898593][ T8925] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  155.919425][  T108] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.919453][  T108] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.937495][ T1009] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.937522][ T1009] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  155.937600][ T1009] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  155.937622][ T1009] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  156.131158][ T8929] netlink: 16 bytes leftover after parsing attributes in process `syz.0.673'.
[  156.197124][ T8938] netlink: 'syz.3.676': attribute type 1 has an invalid length.
[  156.285146][ T8938] 8021q: adding VLAN 0 to HW filter on device bond4
[  157.004909][ T8982] syzkaller1: entered promiscuous mode
[  157.004939][ T8982] syzkaller1: entered allmulticast mode
[  157.021527][ T8982] syzkaller1: left promiscuous mode
[  157.021545][ T8982] syzkaller1: left allmulticast mode
[  157.035261][ T8980] syzkaller1: entered promiscuous mode
[  157.035278][ T8980] syzkaller1: entered allmulticast mode
[  157.037058][ T8988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.683'.
[  157.043659][ T8984] netlink: 'syz.3.685': attribute type 1 has an invalid length.
[  157.043673][ T8984] netlink: 224 bytes leftover after parsing attributes in process `syz.3.685'.
[  157.054713][ T8980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'.
[  157.151663][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.687'.
[  157.168653][ T8993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'.
[  157.175082][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.685'.
[  157.211334][ T8999] netlink: 'syz.2.683': attribute type 7 has an invalid length.
[  157.211352][ T8999] netlink: 'syz.2.683': attribute type 5 has an invalid length.
[  157.211364][ T8999] netlink: 17 bytes leftover after parsing attributes in process `syz.2.683'.
[  157.238867][ T9002] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  158.209250][ T9020] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  158.990478][ T9058] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  158.990505][ T9058] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  159.585418][ T9083] macvlan0: entered promiscuous mode
[  159.592151][ T9083] netlink: 'syz.3.713': attribute type 1 has an invalid length.
[  159.592168][ T9083] netlink: 'syz.3.713': attribute type 2 has an invalid length.
[  159.721342][ T9085] 8021q: adding VLAN 0 to HW filter on device bond5
[  159.806085][ T9085] 8021q: adding VLAN 0 to HW filter on device batadv1
[  159.818728][ T9085] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  159.860619][ T9092] xt_hashlimit: size too large, truncated to 1048576
[  159.870270][ T9090] bond5 (unregistering): (slave batadv1): Releasing backup interface
[  159.963940][ T9090] bond5 (unregistering): Released all slaves
[  160.012458][ T9092] xt_hashlimit: size too large, truncated to 1048576
[  160.143122][ T9099] 8021q: adding VLAN 0 to HW filter on device bond5
[  160.160746][ T9102] bond5 (unregistering): Released all slaves
[  160.263693][ T9092] xt_hashlimit: size too large, truncated to 1048576
[  160.478174][ T9116] bond2: entered promiscuous mode
[  160.478196][ T9116] bond2: entered allmulticast mode
[  161.238519][ T9155] __nla_validate_parse: 6 callbacks suppressed
[  161.238536][ T9155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'.
[  161.253459][ T9155] netlink: 228 bytes leftover after parsing attributes in process `syz.0.725'.
[  161.449106][ T9166] xt_TCPMSS: Only works on TCP SYN packets
[  161.458386][ T9166] ip6gretap1: entered allmulticast mode
[  161.460215][ T9166] batman_adv: batadv0: Adding interface: ip6gretap1
[  161.460228][ T9166] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  161.460254][ T9166] batman_adv: batadv0: Interface activated: ip6gretap1
[  161.530304][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.729'.
[  161.678719][ T9172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.731'.
[  162.102677][ T9198] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'.
[  162.164135][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'.
[  162.472135][ T9218] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma?
[  164.454223][ T9210] lo: entered promiscuous mode
[  164.454245][ T9210] lo: entered allmulticast mode
[  164.464026][ T9210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.739'.
[  164.464045][ T9210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.632070][ T9221] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  164.888246][ T9228] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  164.890231][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.745'.
[  164.990727][ T9247] netlink: 'syz.3.748': attribute type 3 has an invalid length.
[  164.992068][ T9244] netlink: 32 bytes leftover after parsing attributes in process `syz.0.747'.
[  165.450032][ T9267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.753'.
[  165.748849][ T9284] block nbd0: NBD_DISCONNECT
[  165.748877][ T9284] block nbd0: Send disconnect failed -32
[  165.748894][ T9284] block nbd0: shutting down sockets
[  166.439602][ T9302] netlink: 'syz.3.763': attribute type 1 has an invalid length.
[  166.439623][ T9302] netlink: 224 bytes leftover after parsing attributes in process `syz.3.763'.
[  166.569566][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'.
[  166.569587][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'.
[  166.640136][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.765'.
[  166.640156][ T9311] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'.
[  166.659582][ T5947] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.659686][ T5947] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.666679][   T50] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.725164][ T9314] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  166.838617][  T189] IPVS: starting estimator thread 0...
[  166.926551][ T9329] IPVS: using max 26 ests per chain, 62400 per kthread
[  167.113901][ T9334] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.114587][ T9334] syzkaller0: entered promiscuous mode
[  167.114605][ T9334] syzkaller0: entered allmulticast mode
[  167.184331][ T9334] tipc: Resetting bearer <eth:syzkaller0>
[  167.201276][ T9333] tipc: Resetting bearer <eth:syzkaller0>
[  167.268354][ T9333] tipc: Disabling bearer <eth:syzkaller0>
[  167.622754][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.780'.
[  167.693199][ T9371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.781'.
[  167.830938][ T9376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.782'.
[  168.161060][ T9388] netlink: 'syz.3.786': attribute type 1 has an invalid length.
[  168.161079][ T9388] netlink: 'syz.3.786': attribute type 12 has an invalid length.
[  168.161089][ T9388] netlink: 224 bytes leftover after parsing attributes in process `syz.3.786'.
[  168.425631][ T1009] tipc: Subscription rejected, illegal request
[  168.484793][ T9418] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  168.484827][ T9418] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  168.542625][ T9420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'.
[  168.784241][ T9429] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  169.173256][ T9447] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  169.173401][ T9447] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  169.554083][ T9461] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  170.567591][ T9490] netlink: 'syz.2.813': attribute type 7 has an invalid length.
[  171.520621][ T9550] __nla_validate_parse: 5 callbacks suppressed
[  171.520639][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'.
[  171.522328][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.829'.
[  171.544296][ T9550] netlink: 64 bytes leftover after parsing attributes in process `syz.1.829'.
[  171.955710][ T9578] netlink: 20 bytes leftover after parsing attributes in process `syz.2.836'.
[  172.462156][ T9594] netlink: 20 bytes leftover after parsing attributes in process `syz.3.841'.
[  172.597197][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.845'.
[  172.761252][ T4934] block nbd0: Receive control failed (result -32)
[  172.761940][ T5619] block nbd0: Receive control failed (result -32)
[  172.791075][ T9619] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  172.825414][ T9617] tipc: Disabling bearer <eth:syzkaller0>
[  172.944746][ T9631] x_tables: duplicate entry at hook 2
[  172.945731][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.851'.
[  172.945747][ T9629] netlink: 5 bytes leftover after parsing attributes in process `syz.0.851'.
[  173.104217][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.854'.
[  173.104239][ T9638] openvswitch: netlink: Flow actions attr not present in new flow.
[  173.327615][ T9646] netlink: 36 bytes leftover after parsing attributes in process `syz.3.858'.
[  173.332013][ T9649] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 !
[  173.613372][ T9663] pim6reg1: entered allmulticast mode
[  174.147236][ T9692] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  174.147732][ T9692] team0: Device macvlan2 is up. Set it down before adding it as a team port
[  174.212728][ T9690] 0·: renamed from hsr0 (while UP)
[  174.244416][ T9690] 0·: entered allmulticast mode
[  174.244436][ T9690] hsr_slave_0: entered allmulticast mode
[  174.244450][ T9690] hsr_slave_1: entered allmulticast mode
[  174.244851][ T9690] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  174.641549][ T9702] hsr0: entered promiscuous mode
[  175.634423][ T9757] veth0: entered promiscuous mode
[  175.635781][ T9754] veth0: left promiscuous mode
[  175.662822][ T9695] hsr0: left promiscuous mode
[  176.179264][   T30] audit: type=1804 audit(1790705027.765:5): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.893" name="/newroot/175/cgroup.controllers" dev="tmpfs" ino=917 res=1 errno=0
[  176.181223][   T30] audit: type=1800 audit(1790705027.765:6): pid=9789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.893" name="cgroup.controllers" dev="tmpfs" ino=917 res=0 errno=0
[  176.241458][ T9793] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32)
[  176.399779][ T9799] syzkaller1: entered promiscuous mode
[  176.399799][ T9799] syzkaller1: entered allmulticast mode
[  176.428975][ T9800] batman_adv: batadv0: Adding interface: dummy0
[  176.428994][ T9800] batman_adv: batadv0: Interface activated: dummy0
[  176.449584][ T9800] batadv0: mtu less than device minimum
[  176.452062][ T9800] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.453454][ T9800] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.454847][ T9800] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.456273][ T9800] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.457687][ T9800] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.459070][ T9800] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.460456][ T9800] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  176.683798][ T9809] netlink: 'syz.0.897': attribute type 1 has an invalid length.
[  176.683817][ T9809] __nla_validate_parse: 9 callbacks suppressed
[  176.683827][ T9809] netlink: 224 bytes leftover after parsing attributes in process `syz.0.897'.
[  176.953052][ T9826] netlink: 8 bytes leftover after parsing attributes in process `syz.0.901'.
[  176.953075][ T9826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.901'.
[  176.953088][ T9826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.901'.
[  176.987236][ T9827] netlink: 44 bytes leftover after parsing attributes in process `syz.0.901'.
[  178.052323][ T9870] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  178.061419][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.910'.
[  178.064723][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'.
[  178.064814][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.911'.
[  178.066103][ T9874] netlink: 100 bytes leftover after parsing attributes in process `syz.0.911'.
[  178.066125][ T9874] netlink: 239 bytes leftover after parsing attributes in process `syz.0.911'.
[  178.420653][ T9887] bridge0: port 3(bond0) entered blocking state
[  178.420789][ T9887] bridge0: port 3(bond0) entered disabled state
[  178.421674][ T9887] bond0: entered allmulticast mode
[  178.421692][ T9887] bond_slave_0: entered allmulticast mode
[  178.421707][ T9887] 
@0Ù: entered allmulticast mode
[  178.475022][ T9887] bond0: entered promiscuous mode
[  178.475041][ T9887] bond_slave_0: entered promiscuous mode
[  178.475197][ T9887] 
@0Ù: entered promiscuous mode
[  179.036423][ T7146] tipc: Node number set to 1305823789
[  179.859952][ T9940] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma?
[  179.902665][ T9941] bond3 (unregistering): Released all slaves
[  180.258732][ T9963] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001
[  180.311321][ T9956] xt_CT: No such helper "snmp"
[  180.342965][ T9959] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  180.456975][ T9972] netlink: 'syz.3.935': attribute type 16 has an invalid length.
[  180.936598][ T9999] xt_l2tp: invalid flags combination: 8
[  180.951917][ T9999] Bluetooth: hci0: unsupported parameter 5135
[  180.951935][ T9999] Bluetooth: hci0: unsupported parameter 65
[  180.951964][ T9999] Bluetooth: hci0: unsupported parameter 5135
[  180.951975][ T9999] Bluetooth: hci0: unsupported parameter 65
[  181.231762][T10014] xt_hashlimit: size too large, truncated to 1048576
[  181.244021][T10006] IPVS: Scheduler module ip_vs_sip not found
[  181.342081][T10018] netlink: 'syz.3.948': attribute type 1 has an invalid length.
[  181.401524][T10020] Bluetooth: MGMT ver 1.23
[  181.408502][T10017] Bluetooth: MGMT ver 1.23
[  181.610397][T10024] netlink: 'syz.1.949': attribute type 12 has an invalid length.
[  181.674488][T10033] net_ratelimit: 13 callbacks suppressed
[  181.674505][T10033] ip_tables: iptables: counters copy to user failed while replacing table
[  181.882974][T10054] pimreg: entered allmulticast mode
[  181.891457][T10054] pimreg: left allmulticast mode
[  182.606706][T10081] can: request_module (can-proto-0) failed.
[  183.193650][T10117] block nbd0: Unsupported socket: should be TCP or UNIX.
[  183.384009][T10125] __nla_validate_parse: 10 callbacks suppressed
[  183.384027][T10125] netlink: 20 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.384219][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.384420][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.384629][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.400613][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.400801][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.400985][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.401173][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.401367][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.401563][T10131] netlink: 44 bytes leftover after parsing attributes in process `syz.4.973'.
[  183.785282][T10145] sch_tbf: burst 255 is lower than device wg0 mtu (1420) !
[  183.860578][T10156] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  184.040870][T10167] tap0: tun_chr_ioctl cmd 1074025672
[  184.040891][T10167] tap0: ignored: set checksum disabled
[  184.051696][T10170] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[  184.200388][T10174] netlink: 'syz.0.983': attribute type 1 has an invalid length.
[  184.229176][T10174] netlink: 'syz.0.983': attribute type 1 has an invalid length.
[  184.540122][T10177] 8021q: adding VLAN 0 to HW filter on device bond5
[  184.610908][T10177] 8021q: adding VLAN 0 to HW filter on device bond6
[  184.841732][T10177] 8021q: adding VLAN 0 to HW filter on device bond7
[  184.965385][T10177] 8021q: adding VLAN 0 to HW filter on device bond8
[  185.027330][T10177] 8021q: adding VLAN 0 to HW filter on device bond9
[  185.102124][T10177] 8021q: adding VLAN 0 to HW filter on device bond10
[  185.462656][T10239] xt_connbytes: Forcing CT accounting to be enabled
[  186.005114][T10266] team0: Port device bond_slave_0 removed
[  186.285725][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  186.385285][T10287] bond0: (slave gretap0): Opening slave failed
[  186.396433][T10287] bond0: (slave gretap0): Opening slave failed
[  186.399470][T10287] bond0: (slave gretap0): Opening slave failed
[  186.404763][T10287] bond0: (slave gretap0): Opening slave failed
[  186.409923][T10287] bond0: (slave gretap0): Opening slave failed
[  186.414482][T10287] bond0: (slave gretap0): Opening slave failed
[  186.424322][T10287] bond0: (slave gretap0): Opening slave failed
[  186.431846][T10287] bond0: (slave gretap0): Opening slave failed
[  186.438769][T10287] bond0: (slave gretap0): Opening slave failed
[  186.444003][T10287] bond0: (slave gretap0): Opening slave failed
[  186.449207][T10287] bond0: (slave gretap0): Opening slave failed
[  186.453122][T10287] bond0: (slave gretap0): Opening slave failed
[  186.455666][T10287] bond0: (slave gretap0): Opening slave failed
[  186.462297][T10287] bond0: (slave gretap0): Opening slave failed
[  186.475603][T10287] bond0: (slave gretap0): Opening slave failed
[  186.483399][T10287] bond0: (slave gretap0): Opening slave failed
[  186.490790][T10287] bond0: (slave gretap0): Opening slave failed
[  186.498369][T10287] bond0: (slave gretap0): Opening slave failed
[  186.505115][T10287] bond0: (slave gretap0): Opening slave failed
[  186.529892][T10287] bond0: (slave gretap0): Opening slave failed
[  186.539710][T10287] bond0: (slave gretap0): Opening slave failed
[  186.545150][T10287] bond0: (slave gretap0): Opening slave failed
[  186.554091][T10287] bond0: (slave gretap0): Opening slave failed
[  186.561777][T10287] bond0: (slave gretap0): Opening slave failed
[  186.570589][T10287] bond0: (slave gretap0): Opening slave failed
[  186.578947][T10287] bond0: (slave gretap0): Opening slave failed
[  186.587945][T10287] bond0: (slave gretap0): Opening slave failed
[  186.596847][T10287] bond0: (slave gretap0): Opening slave failed
[  186.613690][T10287] bond0: (slave gretap0): Opening slave failed
[  186.621924][T10287] bond0: (slave gretap0): Opening slave failed
[  186.633458][T10287] bond0: (slave gretap0): Opening slave failed
[  186.653202][T10287] bond0: (slave gretap0): Opening slave failed
[  186.665640][T10287] bond0: (slave gretap0): Opening slave failed
[  186.680530][T10287] bond0: (slave gretap0): Opening slave failed
[  186.698957][T10287] bond0: (slave gretap0): Opening slave failed
[  186.708067][T10287] bond0: (slave gretap0): Opening slave failed
[  186.732701][T10287] bond0: (slave gretap0): Opening slave failed
[  186.740613][T10287] bond0: (slave gretap0): Opening slave failed
[  186.749898][T10287] bond0: (slave gretap0): Opening slave failed
[  186.778364][T10287] bond0: (slave gretap0): Opening slave failed
[  186.781368][T10298] netlink: 'syz.2.1011': attribute type 5 has an invalid length.
[  186.781522][T10298] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.796368][T10287] bond0: (slave gretap0): Opening slave failed
[  186.815300][T10287] bond0: (slave gretap0): Opening slave failed
[  186.831081][T10287] bond0: (slave gretap0): Opening slave failed
[  186.838741][T10287] bond0: (slave gretap0): Opening slave failed
[  186.854223][T10287] bond0: (slave gretap0): Opening slave failed
[  186.855548][T10287] bond0: (slave gretap0): Opening slave failed
[  186.874405][T10287] bond0: (slave gretap0): Opening slave failed
[  186.875623][T10287] bond0: (slave gretap0): Opening slave failed
[  186.893319][T10287] bond0: (slave gretap0): Opening slave failed
[  186.911940][T10287] bond0: (slave gretap0): Opening slave failed
[  186.914153][T10287] bond0: (slave gretap0): Opening slave failed
[  186.938336][T10287] bond0: (slave gretap0): Opening slave failed
[  186.950496][T10287] bond0: (slave gretap0): Opening slave failed
[  186.960414][T10287] bond0: (slave gretap0): Opening slave failed
[  186.975090][T10287] bond0: (slave gretap0): Opening slave failed
[  186.985127][T10287] bond0: (slave gretap0): Opening slave failed
[  186.995478][T10287] bond0: (slave gretap0): Opening slave failed
[  187.001014][T10287] bond0: (slave gretap0): Opening slave failed
[  187.006967][T10287] bond0: (slave gretap0): Opening slave failed
[  187.011506][T10287] bond0: (slave gretap0): Opening slave failed
[  187.015295][T10287] bond0: (slave gretap0): Opening slave failed
[  187.019782][T10287] bond0: (slave gretap0): Opening slave failed
[  187.022057][T10287] bond0: (slave gretap0): Opening slave failed
[  187.024068][T10287] bond0: (slave gretap0): Opening slave failed
[  187.026117][T10287] bond0: (slave gretap0): Opening slave failed
[  187.344567][T10307] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  187.468884][T10329] dummy0: entered promiscuous mode
[  187.600931][T10339] netlink: 'syz.4.1024': attribute type 5 has an invalid length.
[  187.602810][T10340] netlink: 'syz.4.1024': attribute type 5 has an invalid length.
[  187.984882][T10352] syzkaller1: entered promiscuous mode
[  187.984904][T10352] syzkaller1: entered allmulticast mode
[  188.018505][T10352] netlink: 'syz.4.1026': attribute type 9 has an invalid length.
[  188.102283][T10318] dummy0: left promiscuous mode
[  188.141480][T10357] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004
[  188.148557][T10360] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20004
[  188.645232][T10379] __nla_validate_parse: 48 callbacks suppressed
[  188.645251][T10379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'.
[  188.655537][T10374] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  188.700867][T10385] syzkaller1: entered promiscuous mode
[  188.700889][T10385] syzkaller1: entered allmulticast mode
[  188.708141][T10385] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324
[  189.329533][T10407] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  189.329554][T10407] bond0: (slave lo): Error: Device can not be enslaved while up
[  189.337983][T10407] netlink: 'syz.3.1041': attribute type 1 has an invalid length.
[  189.796564][T10435] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1045'.
[  189.796752][T10435] unsupported nlmsg_type 40
[  189.817355][T10435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1045'.
[  189.932221][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1045'.
[  189.944974][T10435] gretap0: entered promiscuous mode
[  189.987053][T10435] 8021q: adding VLAN 0 to HW filter on device bond0
[  189.988504][T10435] 8021q: adding VLAN 0 to HW filter on device team0
[  189.994539][T10435] 8021q: adding VLAN 0 to HW filter on device batadv0
[  190.037676][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'.
[  190.130462][T10435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  190.130483][T10435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  190.134024][T10435] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  190.180671][   T30] audit: type=1804 audit(1790705041.765:7): pid=10449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1048" name="/newroot/197/cgroup.controllers" dev="tmpfs" ino=1038 res=1 errno=0
[  190.180912][   T30] audit: type=1800 audit(1790705041.765:8): pid=10449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1048" name="cgroup.controllers" dev="tmpfs" ino=1038 res=0 errno=0
[  190.468223][T10462] IPv6: addrconf: prefix option has invalid lifetime
[  190.771528][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880580a0000: rx timeout, send abort
[  190.771753][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880580a0000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  190.990528][T10479] bridge0: the hash_elasticity option has been deprecated and is always 16
[  190.990555][T10479] bridge0: entered promiscuous mode
[  191.063796][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'.
[  191.108270][T10493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1058'.
[  191.150652][T10493] netlink: 'syz.4.1058': attribute type 1 has an invalid length.
[  191.150671][T10493] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1058'.
[  191.285603][T10493] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication
[  191.588100][T10514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'.
[  191.588121][T10514] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1060'.
[  191.889577][T10534] IPv6: NLM_F_CREATE should be specified when creating new route
[  192.122595][T10544] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  192.122619][T10544] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  192.385764][T10550] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  193.006016][T10583] netlink: 'syz.1.1079': attribute type 1 has an invalid length.
[  193.062242][T10583] gretap0: entered allmulticast mode
[  193.221223][T10594] netlink: 'syz.1.1083': attribute type 1 has an invalid length.
[  193.221261][T10594] netlink: 'syz.1.1083': attribute type 1 has an invalid length.
[  193.649249][T10615] batadv0: entered promiscuous mode
[  193.649373][T10615] macsec1: entered promiscuous mode
[  193.649536][T10615] macsec1: entered allmulticast mode
[  193.649549][T10615] batadv0: entered allmulticast mode
[  193.651092][T10615] 8021q: adding VLAN 0 to HW filter on device macsec1
[  193.652396][T10615] batadv0: left allmulticast mode
[  193.652609][T10615] batadv0: left promiscuous mode
[  193.808823][T10617] netlink: 'syz.1.1087': attribute type 16 has an invalid length.
[  193.808846][T10617] netlink: 'syz.1.1087': attribute type 17 has an invalid length.
[  193.847538][T10617] 0ªî{X¹¦: left allmulticast mode
[  193.951984][T10617] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.953546][T10617] bridge0: port 3(bond0) entered blocking state
[  193.953673][T10617] bridge0: port 3(bond0) entered forwarding state
[  193.982719][T10617] 8021q: adding VLAN 0 to HW filter on device batadv0
[  194.172389][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  194.236945][    C1] vcan0: j1939_tp_rxtimer: 0xffff8880256fc800: rx timeout, send abort
[  194.237157][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880256fc800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  194.486647][T10617] batman_adv: batadv0: Interface activated: batadv_slave_0
[  194.494500][T10617] batman_adv: batadv0: Interface activated: batadv_slave_1
[  194.519870][T10617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  194.532910][T10617] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  194.601941][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.602011][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.608682][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.608790][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state
[  195.059770][T10664] netlink: 'syz.0.1101': attribute type 32 has an invalid length.
[  195.198460][T10671] netlink: 'syz.0.1104': attribute type 30 has an invalid length.
[  195.203933][T10673] netlink: 'syz.0.1104': attribute type 30 has an invalid length.
[  195.234352][T10670] netlink: 'syz.4.1103': attribute type 1 has an invalid length.
[  195.351822][T10678] bond5: Unable to set up delay as MII monitoring is disabled
[  195.354512][T10678] bond5 (unregistering): Released all slaves
[  195.555639][T10688] IPVS: nq: FWM 3 0x00000003 - no destination available
[  195.714458][T10693] netlink: 'syz.4.1109': attribute type 16 has an invalid length.
[  195.714478][T10693] netlink: 'syz.4.1109': attribute type 17 has an invalid length.
[  195.757114][T10693] 0·: left allmulticast mode
[  195.757134][T10693] hsr_slave_0: left allmulticast mode
[  195.757147][T10693] hsr_slave_1: left allmulticast mode
[  195.758210][T10693] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  195.804595][T10693] __nla_validate_parse: 12 callbacks suppressed
[  195.804612][T10693] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1109'.
[  196.289987][T10719] veth3: entered allmulticast mode
[  196.333591][T10730] netlink: 'syz.3.1116': attribute type 2 has an invalid length.
[  196.446478][  T108] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  196.454776][T10717] netlink: 'syz.4.1115': attribute type 15 has an invalid length.
[  196.454794][T10717] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1115'.
[  196.468965][    C1] vcan0: j1939_tp_rxtimer: 0xffff888048b9b800: rx timeout, send abort
[  196.469214][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888048b9b800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session.
[  196.547110][T10726] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  196.547377][T10726] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  196.547409][T10726] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  196.921067][T10753] x_tables: duplicate underflow at hook 1
[  197.009230][T10753] syzkaller0: left promiscuous mode
[  197.009251][T10753] syzkaller0: left allmulticast mode
[  197.160154][T10768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1129'.
[  197.175102][T10759] veth0_macvtap: left promiscuous mode
[  197.320764][T10773] netlink: 'syz.4.1130': attribute type 11 has an invalid length.
[  197.553285][T10789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1134'.
[  197.580006][T10789] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  197.580028][T10789] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  197.679320][T10788] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1136'.
[  197.753283][T10791] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1135'.
[  197.781459][T10791] ip_tables: iptables: counters copy to user failed while replacing table
[  198.078915][T10818] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1143'.
[  198.299815][T10822] ieee802154 phy0 wpan0: encryption failed: -22
[  198.524949][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'.
[  198.664487][T10832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1146'.
[  198.682078][T10834] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1148'.
[  199.387250][T10858] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  199.522855][T10836] syzkaller0: entered promiscuous mode
[  199.522877][T10836] syzkaller0: entered allmulticast mode
[  199.639432][T10871] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  200.288279][T10877] lo: entered promiscuous mode
[  200.320493][T10877] tunl0: entered promiscuous mode
[  200.524690][T10877] gre0: entered promiscuous mode
[  200.624244][T10877] gretap0: entered promiscuous mode
[  200.634559][T10877] erspan0: entered promiscuous mode
[  200.639900][T10877] ip_vti0: entered promiscuous mode
[  200.643029][T10877] ip6_vti0: entered promiscuous mode
[  200.660894][T10877] sit0: entered promiscuous mode
[  200.679780][T10877] ip6tnl0: entered promiscuous mode
[  200.685315][T10877] ip6gre0: entered promiscuous mode
[  200.709563][T10877] syz_tun: entered promiscuous mode
[  200.775644][T10877] ip6gretap0: entered promiscuous mode
[  201.071344][T10923] netlink: 'syz.4.1159': attribute type 1 has an invalid length.
[  201.089123][T10923] __nla_validate_parse: 1 callbacks suppressed
[  201.089139][T10923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1159'.
[  201.092189][T10923] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1159'.
[  201.300164][T10928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1161'.
[  201.371772][T10936] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1164'.
[  201.759331][T10949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1168'.
[  202.216645][ T7144] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  202.259675][T10725] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  202.338811][T10973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  202.496638][ T7144] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  202.510546][T10979] veth0_to_bridge: entered promiscuous mode
[  202.510747][T10979] macvtap1: entered allmulticast mode
[  202.510761][T10979] veth0_to_bridge: entered allmulticast mode
[  202.565523][T10979] veth0_to_bridge: left allmulticast mode
[  202.565548][T10979] veth0_to_bridge: left promiscuous mode
[  203.141774][T11007] netlink: 'syz.2.1184': attribute type 7 has an invalid length.
[  203.287536][T10725] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  203.287778][T10725] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  203.426516][   T10] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  203.432823][T11025] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  203.613553][T11033] block nbd0: reconnected socket
[  203.615240][T11033] block nbd0: reconnected socket
[  203.627749][T11033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1192'.
[  203.724836][T11034] pimreg: tun_chr_ioctl cmd 1074812118
[  203.739780][ T5619] block nbd0: Receive control failed (result -32)
[  203.742535][ T4934] block nbd0: Receive control failed (result -32)
[  203.789711][T11040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1191'.
[  203.823081][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1194'.
[  204.119883][T11059] ip_tables: iptables: counters copy to user failed while replacing table
[  204.219154][T11036] ip6tnl3: entered allmulticast mode
[  204.318869][  T984] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  204.319101][  T984] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  204.346773][   T48] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  204.766788][ T7144] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  205.045405][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1204'.
[  206.043475][T11151] netlink: 'syz.4.1217': attribute type 1 has an invalid length.
[  206.733949][T11139] __nla_validate_parse: 2 callbacks suppressed
[  206.733967][T11139] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1216'.
[  206.957756][T11161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1219'.
[  207.074239][T11170] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1223'.
[  207.094012][T11170] x_tables: ip_tables: icmp match: only valid for protocol 1
[  207.286066][    C0] ip6_tnl_xmit_ctl: 1 callbacks suppressed
[  207.286085][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  207.384731][T11186] IPVS: length: 203 != 8
[  207.443734][T11188] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  207.445265][T11188] netlink: 'syz.2.1228': attribute type 1 has an invalid length.
[  207.989640][T11214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.096157][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  208.384283][T11226] xt_l2tp: invalid flags combination: 8
[  208.535284][T11231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1240'.
[  208.553167][T11231] netlink: 'syz.2.1240': attribute type 4 has an invalid length.
[  208.553187][T11231] netlink: 'syz.2.1240': attribute type 8 has an invalid length.
[  208.553198][T11231] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1240'.
[  208.654714][T11230] vlan2: entered promiscuous mode
[  208.700687][T11235] netlink: 'syz.2.1241': attribute type 7 has an invalid length.
[  208.700707][T11235] netlink: 'syz.2.1241': attribute type 5 has an invalid length.
[  208.700717][T11235] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1241'.
[  208.747014][T11234] netlink: 'syz.2.1241': attribute type 361 has an invalid length.
[  208.769533][T11238] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1242'.
[  209.038650][T11251] netlink: 'syz.4.1243': attribute type 10 has an invalid length.
[  209.080937][T11251] netlink: 'syz.4.1243': attribute type 10 has an invalid length.
[  209.099121][T11253] x_tables: duplicate entry at hook 1
[  209.105653][T11251] team0: Port device dummy0 removed
[  209.132702][T11254] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1243'.
[  209.265270][T11253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'.
[  209.953457][T11273] ovs-s!: entered promiscuous mode
[  210.095164][T11290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1255'.
[  210.480295][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  210.875071][T11325] batman_adv: batadv0: Interface deactivated: dummy0
[  210.893556][T11325] batman_adv: batadv0: Removing interface: dummy0
[  211.046714][T11327] gtp1: entered promiscuous mode
[  211.046735][T11327] gtp1: entered allmulticast mode
[  211.174706][T11327] ipvlan2: entered promiscuous mode
[  211.941596][T11354] netlink: 'syz.0.1272': attribute type 1 has an invalid length.
[  212.113952][T11363] block nbd0: reconnected socket
[  212.114057][T11363] block nbd0: reconnected socket
[  212.123922][T11363] netlink: 'syz.3.1274': attribute type 9 has an invalid length.
[  212.342961][ T5619] block nbd0: Receive control failed (result -32)
[  212.344264][ T4934] block nbd0: Receive control failed (result -32)
[  212.424123][T11367] pimreg: tun_chr_ioctl cmd 1074025681
[  212.704506][T11388] __nla_validate_parse: 5 callbacks suppressed
[  212.704524][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1283'.
[  212.901414][T11395] netlink: 'syz.2.1286': attribute type 1 has an invalid length.
[  212.993127][T11395] 8021q: adding VLAN 0 to HW filter on device bond11
[  213.019369][T11403] bond11: (slave veth3): Enslaving as an active interface with a down link
[  213.029797][T11395] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.035986][T11395] bond11: (slave batadv0): making interface the new active one
[  213.037317][T11395] batadv0: entered promiscuous mode
[  213.050368][T11395] bond11: (slave batadv0): Enslaving as an active interface with an up link
[  213.057869][T11395] netlink: 'syz.2.1286': attribute type 1 has an invalid length.
[  213.120232][T11403] bond11: (slave veth5): Enslaving as an active interface with a down link
[  213.139311][T11415] 8021q: adding VLAN 0 to HW filter on device batadv2
[  213.142625][T11415] bond11: (slave batadv2): Enslaving as an active interface with an up link
[  213.200413][T11417] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1290'.
[  213.292359][T11424] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1292'.
[  213.293797][T11420] syzkaller0: entered promiscuous mode
[  213.293817][T11420] syzkaller0: entered allmulticast mode
[  213.541528][T11436] ip_tables: iptables: counters copy to user failed while replacing table
[  213.685305][T11443] trusted_key: syz.3.1298 sent an empty control message without MSG_MORE.
[  213.764149][T11446] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.1299'.
[  213.915528][T11449] x_tables: duplicate underflow at hook 2
[  214.302133][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'.
[  214.637708][T11489] netlink: 'syz.2.1309': attribute type 10 has an invalid length.
[  214.668658][T11489] 8021q: adding VLAN 0 to HW filter on device team0
[  214.694162][T11489] bond0: (slave team0): Enslaving as an active interface with an up link
[  215.037804][T11495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1313'.
[  215.042025][T11496] syzkaller0: entered promiscuous mode
[  215.042066][T11496] syzkaller0: entered allmulticast mode
[  215.052945][T11507] netlink: 'syz.1.1316': attribute type 1 has an invalid length.
[  215.091900][T11506] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  215.572847][T11521] netlink: 'syz.1.1320': attribute type 1 has an invalid length.
[  215.578630][T11523] ip6gretap0: entered promiscuous mode
[  215.578821][T11523] macsec2: entered allmulticast mode
[  215.578833][T11523] ip6gretap0: entered allmulticast mode
[  215.680304][T11521] bond4: option mode: invalid value (8)
[  215.697946][T11532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1319'.
[  215.697986][T11532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1319'.
[  215.728512][T11521] bond4 (unregistering): Released all slaves
[  215.810144][T11533] netlink: 'syz.0.1319': attribute type 1 has an invalid length.
[  215.810165][T11533] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1319'.
[  215.810196][T11530] 
: renamed from dummy0 (while UP)
[  215.902236][T11537] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1324'.
[  215.926082][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  215.926124][    C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured!
[  216.065495][T11550] netlink: 'syz.1.1325': attribute type 2 has an invalid length.
[  216.246137][T11558] syzkaller1: entered promiscuous mode
[  216.246158][T11558] syzkaller1: entered allmulticast mode
[  216.465307][T11579] sctp: [Deprecated]: syz.0.1331 (pid 11579) Use of struct sctp_assoc_value in delayed_ack socket option.
[  216.465307][T11579] Use struct sctp_sack_info instead
[  216.519831][T11579] ip_tables: iptables: counters copy to user failed while replacing table
[  216.877261][ T7138] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  217.026137][ T7138] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  218.005712][T11651] __nla_validate_parse: 3 callbacks suppressed
[  218.005732][T11651] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1348'.
[  218.005747][T11651] netlink: 'syz.1.1348': attribute type 1 has an invalid length.
[  218.023887][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1351'.
[  218.023918][T11653] netlink: 'syz.3.1351': attribute type 10 has an invalid length.
[  218.023932][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1351'.
[  218.037434][T11653] geneve4: entered promiscuous mode
[  218.037455][T11653] geneve4: entered allmulticast mode
[  218.105585][T11657] FAULT_INJECTION: forcing a failure.
[  218.105585][T11657] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  218.105629][T11657] CPU: 0 UID: 0 PID: 11657 Comm: syz.4.1353 Not tainted syzkaller #0 PREEMPT(full) 
[  218.105650][T11657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  218.105667][T11657] Call Trace:
[  218.105678][T11657]  <TASK>
[  218.105685][T11657]  dump_stack_lvl+0xe8/0x150
[  218.105716][T11657]  should_fail_ex+0x410/0x560
[  218.105741][T11657]  _copy_from_user+0x2d/0xb0
[  218.105765][T11657]  __sys_bpf+0x2e7/0xd90
[  218.105794][T11657]  ? __pfx___sys_bpf+0x10/0x10
[  218.105826][T11657]  ? __fget_files+0x2a/0x420
[  218.105869][T11657]  ? ksys_write+0x242/0x270
[  218.105898][T11657]  ? __pfx_ksys_write+0x10/0x10
[  218.105930][T11657]  __x64_sys_bpf+0xba/0xd0
[  218.105950][T11657]  do_syscall_64+0x166/0x520
[  218.105972][T11657]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.105989][T11657]  ? clear_bhb_loop+0x70/0xc0
[  218.106008][T11657]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.106024][T11657] RIP: 0033:0x7fd5e259e159
[  218.106045][T11657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.106064][T11657] RSP: 002b:00007fd5e34e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  218.106083][T11657] RAX: ffffffffffffffda RBX: 00007fd5e2825fa0 RCX: 00007fd5e259e159
[  218.106097][T11657] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  218.106108][T11657] RBP: 00007fd5e34e5090 R08: 0000000000000000 R09: 0000000000000000
[  218.106119][T11657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  218.106130][T11657] R13: 00007fd5e2826038 R14: 00007fd5e2825fa0 R15: 00007ffcbcf93db8
[  218.106158][T11657]  </TASK>
[  218.714126][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1356'.
[  218.886299][T11677] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  218.891473][T11677] netlink: 'syz.4.1356': attribute type 1 has an invalid length.
[  219.008476][T11672] IPVS: Scheduler module ip_vs_sip not found
[  219.030417][T11677] 8021q: adding VLAN 0 to HW filter on device bond5
[  219.188787][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1358'.
[  219.353540][T11696] tc_dump_action: action bad kind
[  219.551784][T11691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1361'.
[  220.004473][T11716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1368'.
[  220.199739][   T30] audit: type=1804 audit(1790705071.785:9): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1370" name="/newroot/287/cgroup.controllers" dev="tmpfs" ino=1496 res=1 errno=0
[  220.199790][   T30] audit: type=1800 audit(1790705071.785:10): pid=11732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1370" name="cgroup.controllers" dev="tmpfs" ino=1496 res=0 errno=0
[  220.613411][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1376'.
[  220.700025][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1377'.
[  220.702080][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1377'.
[  220.767319][T11756] Bluetooth: hci0: invalid length 0, exp 2 for type 4
[  220.787446][T11757] Bluetooth: hci0: invalid length 0, exp 2 for type 4
[  220.790860][T11756] netlink: 'syz.2.1378': attribute type 1 has an invalid length.
[  220.793193][T11757] netlink: 'syz.2.1378': attribute type 1 has an invalid length.
[  221.124403][T11776] FAULT_INJECTION: forcing a failure.
[  221.124403][T11776] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  221.124433][T11776] CPU: 1 UID: 0 PID: 11776 Comm: syz.1.1385 Not tainted syzkaller #0 PREEMPT(full) 
[  221.124454][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  221.124472][T11776] Call Trace:
[  221.124479][T11776]  <TASK>
[  221.124487][T11776]  dump_stack_lvl+0xe8/0x150
[  221.124517][T11776]  should_fail_ex+0x410/0x560
[  221.124544][T11776]  _copy_from_user+0x2d/0xb0
[  221.124569][T11776]  bpf_test_init+0xd8/0x150
[  221.124592][T11776]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[  221.124627][T11776]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  221.124652][T11776]  ? __fget_files+0x2a/0x420
[  221.124682][T11776]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  221.124702][T11776]  bpf_prog_test_run+0x2c5/0x340
[  221.124729][T11776]  __sys_bpf+0xa22/0xd90
[  221.124758][T11776]  ? __pfx___sys_bpf+0x10/0x10
[  221.124790][T11776]  ? __fget_files+0x2a/0x420
[  221.124832][T11776]  ? ksys_write+0x242/0x270
[  221.124861][T11776]  ? __pfx_ksys_write+0x10/0x10
[  221.124893][T11776]  __x64_sys_bpf+0xba/0xd0
[  221.124915][T11776]  do_syscall_64+0x166/0x520
[  221.124939][T11776]  ? trace_irq_disable+0x3b/0x140
[  221.124960][T11776]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.124977][T11776]  ? clear_bhb_loop+0x70/0xc0
[  221.124998][T11776]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.125016][T11776] RIP: 0033:0x7f34a299e159
[  221.125032][T11776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  221.125046][T11776] RSP: 002b:00007f34a3913028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  221.125065][T11776] RAX: ffffffffffffffda RBX: 00007f34a2c25fa0 RCX: 00007f34a299e159
[  221.125078][T11776] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  221.125089][T11776] RBP: 00007f34a3913090 R08: 0000000000000000 R09: 0000000000000000
[  221.125101][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.125111][T11776] R13: 00007f34a2c26038 R14: 00007f34a2c25fa0 R15: 00007ffee5e3c758
[  221.125139][T11776]  </TASK>
[  222.372522][T11823] FAULT_INJECTION: forcing a failure.
[  222.372522][T11823] name failslab, interval 1, probability 0, space 0, times 1
[  222.372554][T11823] CPU: 0 UID: 0 PID: 11823 Comm: syz.2.1397 Not tainted syzkaller #0 PREEMPT(full) 
[  222.372575][T11823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  222.372585][T11823] Call Trace:
[  222.372592][T11823]  <TASK>
[  222.372600][T11823]  dump_stack_lvl+0xe8/0x150
[  222.372630][T11823]  should_fail_ex+0x410/0x560
[  222.372658][T11823]  should_failslab+0xa8/0x100
[  222.372683][T11823]  __kvmalloc_node_noprof+0x176/0x820
[  222.372708][T11823]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  222.372726][T11823]  ? bpf_test_run_xdp_live+0x1ef/0x1c20
[  222.372752][T11823]  bpf_test_run_xdp_live+0x1ef/0x1c20
[  222.372775][T11823]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  222.372800][T11823]  ? __mutex_unlock_slowpath+0x731/0x900
[  222.372831][T11823]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  222.372856][T11823]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  222.372876][T11823]  ? bpf_dispatcher_xdp+0x800/0x1000
[  222.372935][T11823]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  222.372963][T11823]  ? _copy_from_user+0x94/0xb0
[  222.372988][T11823]  ? bpf_test_init+0x113/0x150
[  222.373003][T11823]  ? xdp_convert_md_to_buff+0x5b/0x330
[  222.373024][T11823]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  222.373056][T11823]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  222.373077][T11823]  ? __fget_files+0x2a/0x420
[  222.373105][T11823]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  222.373125][T11823]  bpf_prog_test_run+0x2c5/0x340
[  222.373150][T11823]  __sys_bpf+0xa22/0xd90
[  222.373177][T11823]  ? __pfx___sys_bpf+0x10/0x10
[  222.373207][T11823]  ? __fget_files+0x2a/0x420
[  222.373247][T11823]  ? ksys_write+0x242/0x270
[  222.373276][T11823]  ? __pfx_ksys_write+0x10/0x10
[  222.373308][T11823]  __x64_sys_bpf+0xba/0xd0
[  222.373329][T11823]  do_syscall_64+0x166/0x520
[  222.373353][T11823]  ? trace_irq_disable+0x3b/0x140
[  222.373389][T11823]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.373408][T11823]  ? clear_bhb_loop+0x70/0xc0
[  222.373431][T11823]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.373449][T11823] RIP: 0033:0x7fb38ef9e159
[  222.373466][T11823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  222.373481][T11823] RSP: 002b:00007fb38fde0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  222.373501][T11823] RAX: ffffffffffffffda RBX: 00007fb38f225fa0 RCX: 00007fb38ef9e159
[  222.373514][T11823] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  222.373526][T11823] RBP: 00007fb38fde0090 R08: 0000000000000000 R09: 0000000000000000
[  222.373537][T11823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  222.373547][T11823] R13: 00007fb38f226038 R14: 00007fb38f225fa0 R15: 00007fff8a8ae2e8
[  222.373580][T11823]  </TASK>
[  222.807305][T11832] xt_l2tp: invalid flags combination: 8
[  223.007449][T11848] __nla_validate_parse: 11 callbacks suppressed
[  223.007468][T11848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1403'.
[  223.183149][T11852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1405'.
[  223.230646][T11857] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0
[  223.234346][T11856] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1406'.
[  223.234365][T11856] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1406'.
[  223.462566][T11861] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1407'.
[  223.642841][T11871] FAULT_INJECTION: forcing a failure.
[  223.642841][T11871] name failslab, interval 1, probability 0, space 0, times 0
[  223.642873][T11871] CPU: 1 UID: 0 PID: 11871 Comm: syz.2.1409 Not tainted syzkaller #0 PREEMPT(full) 
[  223.642894][T11871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  223.642905][T11871] Call Trace:
[  223.642912][T11871]  <TASK>
[  223.642920][T11871]  dump_stack_lvl+0xe8/0x150
[  223.642951][T11871]  should_fail_ex+0x410/0x560
[  223.642979][T11871]  should_failslab+0xa8/0x100
[  223.643004][T11871]  __kvmalloc_node_noprof+0x176/0x820
[  223.643027][T11871]  ? __kvmalloc_node_noprof+0x345/0x820
[  223.643047][T11871]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  223.643065][T11871]  ? bpf_test_run_xdp_live+0x220/0x1c20
[  223.643090][T11871]  bpf_test_run_xdp_live+0x220/0x1c20
[  223.643113][T11871]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  223.643138][T11871]  ? __mutex_unlock_slowpath+0x731/0x900
[  223.643171][T11871]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  223.643201][T11871]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  223.643221][T11871]  ? 0xffffffffa0404540
[  223.643285][T11871]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  223.643312][T11871]  ? _copy_from_user+0x94/0xb0
[  223.643337][T11871]  ? bpf_test_init+0x113/0x150
[  223.643353][T11871]  ? xdp_convert_md_to_buff+0x5b/0x330
[  223.643375][T11871]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  223.643410][T11871]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  223.643435][T11871]  ? __fget_files+0x2a/0x420
[  223.643465][T11871]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  223.643485][T11871]  bpf_prog_test_run+0x2c5/0x340
[  223.643512][T11871]  __sys_bpf+0xa22/0xd90
[  223.643541][T11871]  ? __pfx___sys_bpf+0x10/0x10
[  223.643573][T11871]  ? __fget_files+0x2a/0x420
[  223.643614][T11871]  ? ksys_write+0x242/0x270
[  223.643643][T11871]  ? __pfx_ksys_write+0x10/0x10
[  223.643675][T11871]  __x64_sys_bpf+0xba/0xd0
[  223.643697][T11871]  do_syscall_64+0x166/0x520
[  223.643720][T11871]  ? trace_irq_disable+0x3b/0x140
[  223.643748][T11871]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.643767][T11871]  ? clear_bhb_loop+0x70/0xc0
[  223.643790][T11871]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.643808][T11871] RIP: 0033:0x7fb38ef9e159
[  223.643822][T11871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.643837][T11871] RSP: 002b:00007fb38fde0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  223.643857][T11871] RAX: ffffffffffffffda RBX: 00007fb38f225fa0 RCX: 00007fb38ef9e159
[  223.643871][T11871] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  223.643883][T11871] RBP: 00007fb38fde0090 R08: 0000000000000000 R09: 0000000000000000
[  223.643894][T11871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  223.643905][T11871] R13: 00007fb38f226038 R14: 00007fb38f225fa0 R15: 00007fff8a8ae2e8
[  223.643936][T11871]  </TASK>
[  223.944181][T11873] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1410'.
[  223.978942][T11873] syzkaller1: entered promiscuous mode
[  223.978960][T11873] syzkaller1: entered allmulticast mode
[  223.979897][T11879] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1413'.
[  223.979914][T11879] IPv6: NLM_F_CREATE should be specified when creating new route
[  223.994942][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1413'.
[  224.013933][T11873] netlink: 'syz.3.1410': attribute type 4 has an invalid length.
[  224.035189][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1410'.
[  224.035350][T11873] veth0: Caught tx_queue_len zero misconfig
[  224.161098][T11883] Bluetooth: hci0: unsupported parameter 5135
[  224.161119][T11883] Bluetooth: hci0: unsupported parameter 8192
[  224.161130][T11883] Bluetooth: hci0: unsupported parameter 5135
[  224.161141][T11883] Bluetooth: hci0: unsupported parameter 8192
[  224.389376][T11893] netlink: 'syz.3.1418': attribute type 21 has an invalid length.
[  224.389456][T11893] netlink: 'syz.3.1418': attribute type 3 has an invalid length.
[  224.389470][T11893] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1418'.
[  224.418213][T11891] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  224.475074][T11895] netlink: 'syz.2.1419': attribute type 1 has an invalid length.
[  224.475093][T11895] netlink: 'syz.2.1419': attribute type 2 has an invalid length.
[  224.510704][T11895] netlink: 'syz.2.1419': attribute type 1 has an invalid length.
[  224.510723][T11895] netlink: 'syz.2.1419': attribute type 2 has an invalid length.
[  224.515320][T11895] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  224.576202][  T984] batadv0: left promiscuous mode
[  224.757472][T11910] vlan3: entered allmulticast mode
[  224.757492][T11910] syz_tun: entered allmulticast mode
[  224.793903][T11911] syzkaller1: entered allmulticast mode
[  225.011496][T11920] netlink: 'syz.1.1426': attribute type 1 has an invalid length.
[  225.311901][T11936] netlink: 'syz.0.1430': attribute type 4 has an invalid length.
[  225.346171][T11933] netlink: 'syz.0.1430': attribute type 2 has an invalid length.
[  225.515406][T11945] ip_tables: iptables: counters copy to user failed while replacing table
[  225.543298][T11945] ip_tables: iptables: counters copy to user failed while replacing table
[  225.922684][T11973] 8021q: adding VLAN 0 to HW filter on device bond7
[  225.924670][T11973] bond6: (slave bond7): making interface the new active one
[  225.933843][T11973] bond6: (slave bond7): Enslaving as an active interface with an up link
[  225.965795][T11970] 8021q: adding VLAN 0 to HW filter on device bond8
[  225.973999][T11970] bond6: (slave bond8): Enslaving as a backup interface with an up link
[  225.999115][T11969] 8021q: adding VLAN 0 to HW filter on device bond6
[  226.284414][T11998] xt_hashlimit: size too large, truncated to 1048576
[  227.973845][T12077] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  227.978465][T12077] bond10 (unregistering): Released all slaves
[  228.142941][T12083] bridge5: entered promiscuous mode
[  228.165784][T12083] bond9: (slave bridge5): making interface the new active one
[  228.183112][T12083] bond9: (slave bridge5): Enslaving as an active interface with an up link
[  228.399469][T12085] bridge6: entered promiscuous mode
[  228.423947][T12085] bond9: (slave bridge6): Enslaving as a backup interface with an up link
[  228.553846][T12104] __nla_validate_parse: 7 callbacks suppressed
[  228.553864][T12104] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1464'.
[  228.641674][T12114] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1467'.
[  228.945073][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'.
[  229.313491][T12143] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  229.318547][T12143] bond6 (unregistering): Released all slaves
[  229.412893][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'.
[  229.487952][T12154] FAULT_INJECTION: forcing a failure.
[  229.487952][T12154] name failslab, interval 1, probability 0, space 0, times 0
[  229.487985][T12154] CPU: 1 UID: 0 PID: 12154 Comm: syz.1.1475 Not tainted syzkaller #0 PREEMPT(full) 
[  229.488028][T12154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  229.488052][T12154] Call Trace:
[  229.488067][T12154]  <TASK>
[  229.488084][T12154]  dump_stack_lvl+0xe8/0x150
[  229.488143][T12154]  should_fail_ex+0x410/0x560
[  229.488201][T12154]  should_failslab+0xa8/0x100
[  229.488254][T12154]  __kmalloc_cache_noprof+0xa3/0x600
[  229.488286][T12154]  ? __mutex_unlock_slowpath+0x731/0x900
[  229.488313][T12154]  ? __xdp_reg_mem_model+0x1e9/0x5a0
[  229.488338][T12154]  ? __xdp_reg_mem_model+0x1e9/0x5a0
[  229.488372][T12154]  __xdp_reg_mem_model+0x1e9/0x5a0
[  229.488404][T12154]  ? __pfx___xdp_reg_mem_model+0x10/0x10
[  229.488441][T12154]  xdp_reg_mem_model+0x22/0x40
[  229.488468][T12154]  bpf_test_run_xdp_live+0x292/0x1c20
[  229.488491][T12154]  ? bpf_dispatcher_change_prog+0xc4c/0xf20
[  229.488516][T12154]  ? __mutex_unlock_slowpath+0x731/0x900
[  229.488547][T12154]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  229.488576][T12154]  ? __pfx_bpf_test_run_xdp_live+0x10/0x10
[  229.488597][T12154]  ? 0xffffffffa0404540
[  229.488661][T12154]  ? __pfx_xdp_test_run_init_page+0x10/0x10
[  229.488688][T12154]  ? _copy_from_user+0x94/0xb0
[  229.488714][T12154]  ? bpf_test_init+0x113/0x150
[  229.488729][T12154]  ? xdp_convert_md_to_buff+0x5b/0x330
[  229.488752][T12154]  bpf_prog_test_run_xdp+0x7d8/0x11d0
[  229.488793][T12154]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  229.488818][T12154]  ? __fget_files+0x2a/0x420
[  229.488848][T12154]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  229.488868][T12154]  bpf_prog_test_run+0x2c5/0x340
[  229.488895][T12154]  __sys_bpf+0xa22/0xd90
[  229.488924][T12154]  ? __pfx___sys_bpf+0x10/0x10
[  229.488953][T12154]  ? __fget_files+0x2a/0x420
[  229.488992][T12154]  ? ksys_write+0x242/0x270
[  229.489022][T12154]  ? __pfx_ksys_write+0x10/0x10
[  229.489054][T12154]  __x64_sys_bpf+0xba/0xd0
[  229.489075][T12154]  do_syscall_64+0x166/0x520
[  229.489102][T12154]  ? trace_irq_disable+0x3b/0x140
[  229.489120][T12154]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.489139][T12154]  ? clear_bhb_loop+0x70/0xc0
[  229.489162][T12154]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.489180][T12154] RIP: 0033:0x7f34a299e159
[  229.489197][T12154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.489212][T12154] RSP: 002b:00007f34a3913028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  229.489231][T12154] RAX: ffffffffffffffda RBX: 00007f34a2c25fa0 RCX: 00007f34a299e159
[  229.489245][T12154] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a
[  229.489257][T12154] RBP: 00007f34a3913090 R08: 0000000000000000 R09: 0000000000000000
[  229.489267][T12154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.489277][T12154] R13: 00007f34a2c26038 R14: 00007f34a2c25fa0 R15: 00007ffee5e3c758
[  229.489307][T12154]  </TASK>
[  229.764809][T12158] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  229.863694][T12164] openvswitch: netlink: Message has 8 unknown bytes.
[  230.044624][T12174] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  230.082381][T12175] ip_tables: iptables: counters copy to user failed while replacing table
[  230.218649][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1482'.
[  230.297899][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1486'.
[  230.297933][T12185] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1486'.
[  230.344676][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1485'.
[  230.359973][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1487'.
[  230.364749][T12190] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1486'.
[  230.538811][T12193] lo: left promiscuous mode
[  230.538989][T12193] tunl0: left promiscuous mode
[  230.539142][T12193] gre0: left promiscuous mode
[  230.539256][T12193] gretap0: left promiscuous mode
[  230.539371][T12193] erspan0: left promiscuous mode
[  230.540448][T12193] ip_vti0: left promiscuous mode
[  230.540690][T12193] ip6_vti0: left promiscuous mode
[  230.540818][T12193] sit0: left promiscuous mode
[  230.540934][T12193] ip6tnl0: left promiscuous mode
[  230.541045][T12193] ip6gre0: left promiscuous mode
[  230.541164][T12193] syz_tun: left promiscuous mode
[  230.542179][T12193] ip6gretap0: left promiscuous mode
[  230.657912][T12205] validate_nla: 5 callbacks suppressed
[  230.657931][T12205] netlink: 'syz.0.1490': attribute type 4 has an invalid length.
[  231.164375][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  231.219852][T12193] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  231.286084][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  231.838250][T12193] geneve1: left allmulticast mode
[  231.838516][T12193] macvlan2: left promiscuous mode
[  231.838533][T12193] macvlan2: left allmulticast mode
[  231.848604][T12193] tipc: Resetting bearer <eth:syzkaller0>
[  231.988868][ T5947] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.988903][ T5947] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  231.989446][ T5947] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  231.989479][ T5947] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.036080][  T984] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  232.036112][  T984] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  232.279190][T12243] xt_hashlimit: size too large, truncated to 1048576
[  232.521508][T12258] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.521531][T12258] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.547833][T12258] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.547854][T12258] batman_adv: batadv0: Removing interface: batadv_slave_1
[  233.030428][T12284] IPVS: Error connecting to the multicast addr
[  233.192822][T12289] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  233.193047][T12289] Cannot find map_set index 2 as target
[  233.617033][T12312] __nla_validate_parse: 7 callbacks suppressed
[  233.617067][T12312] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1505'.
[  233.620864][T12312] syzkaller0: entered promiscuous mode
[  233.620883][T12312] syzkaller0: entered allmulticast mode
[  234.008414][T12321] geneve3: entered promiscuous mode
[  234.008436][T12321] geneve3: entered allmulticast mode
[  234.151850][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'.
[  234.576476][T12344] ip6tnl0: Caught tx_queue_len zero misconfig
[  234.576502][T12344] netlink: 300 bytes leftover after parsing attributes in process `syz.3.1514'.
[  234.621092][T12348] tap0: tun_chr_ioctl cmd 1074025677
[  234.621191][T12348] tap0: linktype set to 774
[  235.212497][T12373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1521'.
[  235.367464][T12378] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  235.501601][T12389] netlink: 'syz.4.1529': attribute type 1 has an invalid length.
[  235.548404][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1525'.
[  235.565755][T12387] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1525'.
[  235.602183][T12383] pim6reg1: entered promiscuous mode
[  235.602204][T12383] pim6reg1: entered allmulticast mode
[  235.737919][T12395] gretap1: entered allmulticast mode
[  235.773027][T12395] bond6: (slave gretap1): making interface the new active one
[  235.809333][T12395] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  236.263083][T12425] pim6reg1: entered promiscuous mode
[  236.263104][T12425] pim6reg1: entered allmulticast mode
[  236.368259][T12436] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1536'.
[  237.000289][   T30] audit: type=1800 audit(1790705088.585:11): pid=12468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1542" name="memory.events" dev="tmpfs" ino=1618 res=0 errno=0
[  237.037874][   T30] audit: type=1804 audit(1790705088.625:12): pid=12468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1542" name="/newroot/311/memory.events" dev="tmpfs" ino=1618 res=1 errno=0
[  237.759557][T12487] geneve1: entered allmulticast mode
[  237.791082][T12489] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1546'.
[  238.089164][T12494] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  238.296093][T12501] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1551'.
[  238.329121][T12501] syzkaller1: entered promiscuous mode
[  238.329140][T12501] syzkaller1: entered allmulticast mode
[  238.478716][T12506] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1553'.
[  238.608606][T12508] netlink: 'syz.0.1554': attribute type 12 has an invalid length.
[  238.889082][T12531] __nla_validate_parse: 2 callbacks suppressed
[  238.889100][T12531] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1561'.
[  238.919289][T12533] ip_tables: iptables: counters copy to user failed while replacing table
[  238.970038][T12538] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1561'.
[  239.014167][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1563'.
[  239.015363][T12542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1563'.
[  239.488031][T12566] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  239.950638][T12595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1573'.
[  241.065808][T12637] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1584'.
[  241.277678][T12646] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  241.568723][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1589'.
[  241.644786][T12663] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1592'.
[  241.657249][T12665] netlink: 'syz.1.1591': attribute type 5 has an invalid length.
[  241.794957][T12669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1593'.
[  241.944853][T12679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'.
[  242.478010][T12698] bond7 (unregistering): Released all slaves
[  242.618190][T12708] macsec1: entered promiscuous mode
[  242.786490][T12704] Cannot find set identified by id 2 to match
[  242.800860][T12716] gre0: entered promiscuous mode
[  242.800879][T12716] gre0: entered allmulticast mode
[  242.821914][T12704] xt_CT: You must specify a L4 protocol and not use inversions on it
[  243.505615][T12764] openvswitch: netlink: IPv4 tun info is not correct
[  243.704405][T12784] netlink: 'syz.4.1619': attribute type 1 has an invalid length.
[  243.704443][T12784] netlink: 'syz.4.1619': attribute type 1 has an invalid length.
[  243.753642][T12786] xt_l2tp: v2 doesn't support IP mode
[  243.897650][T12790] __nla_validate_parse: 10 callbacks suppressed
[  243.897673][T12790] netlink: 67 bytes leftover after parsing attributes in process `syz.4.1622'.
[  243.982645][T12796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1624'.
[  244.150851][T12796] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.151381][T12796] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.591949][T12830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1623'.
[  244.751911][T12800] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1623'.
[  244.765495][ T5956] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.765576][ T5956] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.765613][ T5956] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.765646][ T5956] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  244.888328][T12823] syzkaller0: entered promiscuous mode
[  244.888350][T12823] syzkaller0: entered allmulticast mode
[  245.052005][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1629'.
[  245.053721][T12839] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1629'.
[  245.370242][T12846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'.
[  245.400662][T12846] vlan2: entered allmulticast mode
[  245.400688][T12846] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  245.637441][T12860] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1637'.
[  245.672640][T12864] netlink: 'syz.1.1636': attribute type 1 has an invalid length.
[  245.767985][T12866] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'.
[  246.408004][T12894] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1645'.
[  246.458279][T12901] netlink: Failed to add  helper -22
[  246.458332][T12901] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  246.660568][T12908] netlink: 'syz.1.1653': attribute type 1 has an invalid length.
[  246.811037][T12917] gretap0: entered allmulticast mode
[  246.945181][T12920] tc_dump_action: action bad kind
[  246.949026][T12920] netlink: NAT attribute has 8 unknown bytes
[  246.949055][T12920] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  247.611596][T12935] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.678989][T12940] netlink: 'syz.4.1662': attribute type 2 has an invalid length.
[  247.679742][T12940] x_tables: duplicate underflow at hook 1
[  248.107206][T12965] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  248.289613][T12972] bridge5: the hash_elasticity option has been deprecated and is always 16
[  248.289638][T12972] bridge5: entered allmulticast mode
[  248.402256][T12980] xt_hashlimit: size too large, truncated to 1048576
[  248.433795][T12974] ovs-s!!: entered promiscuous mode
[  248.672288][T12978] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  248.795772][T12978] bond13 (unregistering): Released all slaves
[  249.225047][T13016] ip_tables: iptables: counters copy to user failed while replacing table
[  249.237575][T13014] __nla_validate_parse: 71 callbacks suppressed
[  249.237593][T13014] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1674'.
[  249.681615][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1679'.
[  249.849305][T13038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1680'.
[  249.993132][T13052] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) !
[  249.994054][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1684'.
[  249.994071][T13052] sch_tbf: peakrate 64 is lower than or equals to rate 3850 !
[  250.451950][ T5613] udevd[5613]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  250.763948][T13079] xt_CT: No such helper "netbios-ns"
[  250.804691][T13092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1690'.
[  250.852542][T13092] bond7: option lacp_active: invalid value (5)
[  250.872546][T13092] bond7 (unregistering): Released all slaves
[  250.995504][T13101] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1690'.
[  251.275129][T13116] IPVS: set_ctl: invalid protocol: 1 255.255.255.255:20001
[  251.494074][T13125] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1695'.
[  251.607961][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1696'.
[  251.919488][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1698'.
[  251.923158][T13150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1698'.
[  252.440857][T13171] netlink: 'syz.3.1700': attribute type 3 has an invalid length.
[  252.441329][T13171] 0ªî{X¹¦: renamed from gretap0 (while UP)
[  252.475337][T13171] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  252.590514][T13176] lo: left promiscuous mode
[  252.590535][T13176] lo: left allmulticast mode
[  252.627106][T13176] gre0: left promiscuous mode
[  252.627126][T13176] gre0: left allmulticast mode
[  252.678837][T13177] netlink: zone id is out of range
[  252.678852][T13177] netlink: zone id is out of range
[  252.678859][T13177] netlink: zone id is out of range
[  252.678867][T13177] netlink: zone id is out of range
[  252.678874][T13177] netlink: zone id is out of range
[  252.678881][T13177] netlink: zone id is out of range
[  252.678893][T13177] netlink: zone id is out of range
[  252.678900][T13177] netlink: zone id is out of range
[  252.678907][T13177] netlink: zone id is out of range
[  252.787241][T13179] netlink: 'syz.4.1706': attribute type 39 has an invalid length.
[  253.057788][T13176] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.117524][T13176] dummy0: left promiscuous mode
[  253.181971][T13185] netlink: 'syz.3.1708': attribute type 1 has an invalid length.
[  253.482616][T13176] v: left promiscuous mode
[  253.500314][T13176] macvlan1: left allmulticast mode
[  253.531626][T13176] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  253.590319][T13176] bond2: left promiscuous mode
[  253.609058][T13176] ip6tnl2: left allmulticast mode
[  253.721546][T13176] ip6tnl3: left allmulticast mode
[  253.766933][T13176] ip6gretap0: left allmulticast mode
[  253.766964][T13176] macsec2: left allmulticast mode
[  253.770142][T13176] vlan3: left allmulticast mode
[  253.770160][T13176] syz_tun: left allmulticast mode
[  253.829359][ T5956] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.829407][ T5956] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.829449][ T5956] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.829483][ T5956] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  253.896960][T13186] bridge4: entered promiscuous mode
[  254.281621][T13205] __nla_validate_parse: 6 callbacks suppressed
[  254.281640][T13205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1712'.
[  254.342884][T13200] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1710'.
[  254.725012][T13227] netlink: 'syz.2.1715': attribute type 39 has an invalid length.
[  255.072208][T13239] macsec1: entered promiscuous mode
[  255.072232][T13239] bridge0: entered promiscuous mode
[  255.396468][T13258] netlink: 'syz.1.1721': attribute type 1 has an invalid length.
[  255.404352][T13258] erspan0: entered promiscuous mode
[  255.833939][T13266] netlink: 'syz.0.1724': attribute type 1 has an invalid length.
[  255.833959][T13266] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1724'.
[  255.833974][T13266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1724'.
[  256.110144][T13277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1726'.
[  256.319502][T13281] 8021q: adding VLAN 0 to HW filter on device bond8
[  256.321480][T13281] bond7: (slave bond8): Enslaving as an active interface with an up link
[  256.349592][T13290] IPVS: set_ctl: invalid protocol: 92 172.20.20.170:20002
[  256.468224][T13293] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1730'.
[  256.604505][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1731'.
[  256.657145][T13298] batman_adv: batadv0: Removing interface: ip6gretap1
[  256.732117][T13306] syzkaller0: entered promiscuous mode
[  256.732140][T13306] syzkaller0: entered allmulticast mode
[  257.095049][T13320] veth0: entered promiscuous mode
[  257.095070][T13320] veth0: entered allmulticast mode
[  257.385705][T13335] xt_hashlimit: size too large, truncated to 1048576
[  257.823383][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'.
[  257.880486][T13360] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1744'.
[  258.435102][T13385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1753'.
[  258.435563][T13383] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  258.438229][T13383] syzkaller0: entered promiscuous mode
[  258.438248][T13383] syzkaller0: entered allmulticast mode
[  258.500332][T13383] tipc: Resetting bearer <eth:syzkaller0>
[  258.522068][T13381] tipc: Resetting bearer <eth:syzkaller0>
[  258.584814][T13381] tipc: Disabling bearer <eth:syzkaller0>
[  258.606283][T13389] netlink: 'syz.1.1754': attribute type 30 has an invalid length.
[  258.683430][T13389] bond6: option arp_missed_max: invalid value (0)
[  258.683450][T13389] bond6: option arp_missed_max: allowed values 1 - 255
[  258.738298][T13389] bond6 (unregistering): Released all slaves
[  259.084734][T13408] bond13: option ad_actor_sys_prio: invalid value (0)
[  259.084758][T13408] bond13: option ad_actor_sys_prio: allowed values 1 - 65535
[  259.109844][T13408] bond13 (unregistering): Released all slaves
[  259.749686][T13462] net_ratelimit: 499 callbacks suppressed
[  259.749705][T13462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  259.887996][T13473] __nla_validate_parse: 3 callbacks suppressed
[  259.888016][T13473] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1771'.
[  259.985542][T13473] vlan2: entered allmulticast mode
[  259.985563][T13473] gretap0: entered allmulticast mode
[  260.204918][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1776'.
[  260.532492][T13488] geneve5: entered promiscuous mode
[  260.546891][T10726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 36422 - 0
[  260.546931][T10726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 36422 - 0
[  260.546961][T10726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 36422 - 0
[  260.546991][T10726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 36422 - 0
[  260.697536][T13504] netlink: 'syz.0.1779': attribute type 10 has an invalid length.
[  260.697922][T13505] netlink: 'syz.0.1779': attribute type 10 has an invalid length.
[  260.698194][T13504] netlink: 'syz.0.1779': attribute type 10 has an invalid length.
[  260.700355][T13504] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  260.742833][T13504] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  260.759404][T13504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1779'.
[  260.788622][T13503] syzkaller1: entered promiscuous mode
[  260.788644][T13503] syzkaller1: entered allmulticast mode
[  260.801156][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1779'.
[  260.958736][T13507] veth1_to_bond: entered allmulticast mode
[  260.959508][T13507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1780'.
[  261.007938][T13507] veth1_to_bond (unregistering): left allmulticast mode
[  261.039186][T13507] bond0: (slave bond_slave_1): Releasing backup interface
[  261.523738][T13538] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  261.549950][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1790'.
[  261.588946][T13542] netlink: 'syz.1.1792': attribute type 1 has an invalid length.
[  261.588967][T13542] netlink: 'syz.1.1792': attribute type 1 has an invalid length.
[  261.610711][T13538] 8021q: adding VLAN 0 to HW filter on device bond10
[  261.649785][T13543] xt_l2tp: invalid flags combination: 8
[  261.868649][T13557] rdma_op ffff88802ce05a38 conn xmit_rdma 0000000000000000
[  261.887882][T13557] bond7: entered allmulticast mode
[  262.014449][T13567] netlink: 'syz.4.1799': attribute type 1 has an invalid length.
[  262.052769][T13567] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1799'.
[  262.199526][T13574] netlink: 'syz.4.1801': attribute type 23 has an invalid length.
[  262.248178][ T5629] cgroup: fork rejected by pids controller in /syz3
[  262.633973][ T5619] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  262.644190][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  262.655749][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  262.665117][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  262.681126][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  262.706856][T13583] syzkaller1: entered promiscuous mode
[  262.706874][T13583] syzkaller1: entered allmulticast mode
[  262.747885][ T4934] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  262.748959][ T4934] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  262.750832][ T4934] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  262.751726][ T4934] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  262.752318][ T4934] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  262.783727][T13581] pim6reg: entered allmulticast mode
[  262.920102][T13581] pim6reg: left allmulticast mode
[  263.433276][T13611] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1810'.
[  263.454378][T13611] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1810'.
[  263.454399][T13611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1810'.
[  263.746768][T13600] netlink: 'syz.0.1808': attribute type 4 has an invalid length.
[  264.637843][T13578] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.638016][T13578] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.638137][T13578] bridge_slave_0: entered allmulticast mode
[  264.639682][T13578] bridge_slave_0: entered promiscuous mode
[  264.648771][T13578] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.648936][T13578] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.649320][T13578] bridge_slave_1: entered allmulticast mode
[  264.651025][T13578] bridge_slave_1: entered promiscuous mode
[  264.705809][T13578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  264.718314][T13578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  264.760689][T13657] batadv_slave_1: entered promiscuous mode
[  264.762040][T13655] batadv_slave_1: left promiscuous mode
[  264.807106][ T4934] Bluetooth: hci4: command tx timeout
[  264.823000][T13578] team0: Port device team_slave_0 added
[  264.833382][T13578] team0: Port device team_slave_1 added
[  264.894032][T13664] openvswitch: netlink: Key type 55 is out of range max 32
[  264.950168][T13662] __nla_validate_parse: 3 callbacks suppressed
[  264.950186][T13662] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1824'.
[  264.950202][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1824'.
[  264.953472][T13667] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  264.954617][T13578] batman_adv: batadv0: Adding interface: batadv_slave_0
[  264.954630][T13578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.954652][T13578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  264.965161][T13578] batman_adv: batadv0: Adding interface: batadv_slave_1
[  264.965175][T13578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  264.965197][T13578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  265.188927][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'.
[  265.237177][T13673] gretap0: entered promiscuous mode
[  265.238770][T13673] macvlan3: entered promiscuous mode
[  265.249884][T13673] gretap0: left promiscuous mode
[  265.283962][T13684] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'.
[  265.322214][T13578] hsr_slave_0: entered promiscuous mode
[  265.325088][T13578] hsr_slave_1: entered promiscuous mode
[  265.327910][T13578] debugfs: 'hsr0' already exists in 'hsr'
[  265.327928][T13578] Cannot create hsr debugfs directory
[  265.335049][T13684] gretap0: entered promiscuous mode
[  265.335328][T13684] macvlan3: entered promiscuous mode
[  265.340871][T13684] gretap0: left promiscuous mode
[  265.388341][T13679] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  265.547406][T13679] tipc: Resetting bearer <eth:syzkaller0>
[  265.584137][T13695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1833'.
[  266.050286][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'.
[  266.050319][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1836'.
[  266.213242][T13712] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1837'.
[  266.886624][ T4934] Bluetooth: hci4: command tx timeout
[  268.971404][ T4934] Bluetooth: hci4: command tx timeout
[  269.109200][T13716] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  269.152847][T13722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'.
[  269.152866][T13722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1840'.
[  269.155391][T13721] 8021q: adding VLAN 0 to HW filter on device bond11
[  269.156749][T13718] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  269.156769][T13718] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  269.217290][T13716] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  269.218727][T13719] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  269.221402][T13721] netlink: 'syz.0.1840': attribute type 2 has an invalid length.
[  269.241233][T13725] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  269.266744][T13722] 8021q: adding VLAN 0 to HW filter on device bond0
[  269.278306][T13722] bond11: (slave bond0): making interface the new active one
[  269.279557][T13722] bond11: (slave bond0): Enslaving as an active interface with an up link
[  269.307003][T13721] : entered promiscuous mode
[  269.311318][T13718] tipc: Resetting bearer <eth:syzkaller0>
[  269.522357][T13738] openvswitch: netlink: ufid size 65519 bytes exceeds the range (1, 16)
[  269.522378][T13738] openvswitch: netlink: Message has 4 unknown bytes.
[  269.633975][T13749] syz.4.1847 (13749) used obsolete PPPIOCDETACH ioctl
[  270.025682][T13762] ipvlan3: entered promiscuous mode
[  270.075212][T13578] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  270.100433][T13578] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  270.101469][T13578] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  270.105089][T13773] ip_tables: iptables: counters copy to user failed while replacing table
[  270.108609][T13578] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  270.140672][T13578] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  270.160695][T13578] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  270.161485][T13773] __nla_validate_parse: 3 callbacks suppressed
[  270.161499][T13773] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1852'.
[  270.161560][T13578] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  270.203290][T13578] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  270.288818][T13773] bond0 (unregistering): Released all slaves
[  270.449480][T13789] xt_time: invalid argument - start or stop time greater than 23:59:59
[  270.489743][T13578] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.619209][T13578] 8021q: adding VLAN 0 to HW filter on device team0
[  270.658729][  T108] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.658832][  T108] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.735311][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.735429][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state
[  271.046933][ T4934] Bluetooth: hci4: command tx timeout
[  271.696790][T13825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'.
[  271.757599][T13834] ipt_REJECT: ECHOREPLY no longer supported.
[  271.841625][T13842] netlink: 'syz.2.1867': attribute type 15 has an invalid length.
[  272.082571][T13854] netlink: 'syz.4.1871': attribute type 1 has an invalid length.
[  272.212337][T13859] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1871'.
[  272.234160][T13854] bond0: entered promiscuous mode
[  272.234671][T13854] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.245308][T13578] 8021q: adding VLAN 0 to HW filter on device batadv0
[  272.339195][T13856] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.339586][T13856] bond0: (slave gre3): The slave device specified does not support setting the MAC address
[  272.339603][T13856] bond0: (slave gre3): Setting fail_over_mac to active for active-backup mode
[  272.372577][T13870] openvswitch: netlink: IP tunnel dst address not specified
[  272.372607][T13870] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.373718][T13856] bond0: (slave gre3): making interface the new active one
[  272.373737][T13856] gre3: entered promiscuous mode
[  272.384107][T13856] bond0: (slave gre3): Enslaving as an active interface with an up link
[  272.428147][T13870] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1875'.
[  272.472491][T13859] bond0 (unregistering): (slave gre3): Releasing backup interface
[  272.472518][T13859] gre3: left promiscuous mode
[  272.474563][T13859] bond0 (unregistering): Released all slaves
[  272.723297][T13578] veth0_vlan: entered promiscuous mode
[  272.744884][T13578] veth1_vlan: entered promiscuous mode
[  272.795784][T13578] veth0_macvtap: entered promiscuous mode
[  272.810482][T13578] veth1_macvtap: entered promiscuous mode
[  272.844360][T13578] batman_adv: batadv0: Interface activated: batadv_slave_0
[  272.871343][T13578] batman_adv: batadv0: Interface activated: batadv_slave_1
[  272.957061][T10722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  272.957400][T10722] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  272.957434][T10722] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  272.957465][T10722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  273.097349][T13894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1882'.
[  273.241916][ T5956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.241938][ T5956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.388933][ T5956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.388952][ T5956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.494102][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'.
[  273.512644][T13913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'.
[  273.526978][T13913] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[  273.674137][T13925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'.
[  273.758468][T13927] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  273.758547][T13927] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  273.887155][T13937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'.
[  273.935458][T13939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1890'.
[  273.990897][T13937] 8021q: adding VLAN 0 to HW filter on device bond1
[  274.808988][T13957] ipvlan2: entered promiscuous mode
[  274.828216][T13957] team0: Device ipvlan2 failed to register rx_handler
[  275.684808][T14016] netlink: 'syz.0.1908': attribute type 2 has an invalid length.
[  275.956818][T14039] netlink: 'syz.4.1909': attribute type 10 has an invalid length.
[  275.956839][T14039] __nla_validate_parse: 8 callbacks suppressed
[  275.956851][T14039] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1909'.
[  276.503348][T14060] ip6gre1: entered promiscuous mode
[  276.503372][T14060] ip6gre1: entered allmulticast mode
[  276.867065][T14084] xt_TCPMSS: Only works on TCP SYN packets
[  277.053965][T14084] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode
[  277.053990][T14084] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode
[  277.205615][T14095] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1504) !
[  277.360602][T14098] syzkaller1: tun_chr_ioctl cmd 1074025677
[  277.360698][T14098] syzkaller1: linktype set to 769
[  277.407045][T14100] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1924'.
[  277.551475][T14103] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  277.551501][T14103] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  277.563485][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'.
[  277.563505][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'.
[  277.658910][T14103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1925'.
[  277.658932][T14103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'.
[  278.002760][T14118] tipc: Resetting bearer <eth:syzkaller0>
[  278.491584][T14131] x_tables: duplicate underflow at hook 2
[  278.581017][T14134] sctp: [Deprecated]: syz.2.1934 (pid 14134) Use of int in max_burst socket option.
[  278.581017][T14134] Use struct sctp_assoc_value instead
[  278.583157][T14134] ip_tables: iptables: counters copy to user failed while replacing table
[  278.656966][T14134] netlink: 'syz.2.1934': attribute type 16 has an invalid length.
[  278.656987][T14134] netlink: 'syz.2.1934': attribute type 17 has an invalid length.
[  278.730072][T14134] ip6gretap0: left promiscuous mode
[  278.735590][T14134] 8021q: adding VLAN 0 to HW filter on device bond0
[  278.779177][T14134] 8021q: adding VLAN 0 to HW filter on device team0
[  279.223042][T14149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'.
[  279.225790][T14155] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1933'.
[  279.330538][T14134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  279.330561][T14134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  279.339169][T14134] veth1_vlan: left promiscuous mode
[  279.340568][T14134] v: entered promiscuous mode
[  279.343316][T14134] veth1_vlan: entered promiscuous mode
[  279.349068][T14134] veth1_macvtap: left promiscuous mode
[  279.350302][T14134] veth0_macvtap: left promiscuous mode
[  279.351534][T14134] veth0_macvtap: entered promiscuous mode
[  279.353458][T14134] veth1_macvtap: entered promiscuous mode
[  279.363278][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  279.364002][T14134] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  279.364565][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  279.371367][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  279.372624][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  279.438268][T14134] 8021q: adding VLAN 0 to HW filter on device bond1
[  279.440386][T14134] 8021q: adding VLAN 0 to HW filter on device batadv1
[  279.441699][T14134] 8021q: adding VLAN 0 to HW filter on device bond2
[  279.444628][T14134] 8021q: adding VLAN 0 to HW filter on device bond3
[  279.475216][T14134] 8021q: adding VLAN 0 to HW filter on device bond4
[  279.488151][T14134] 8021q: adding VLAN 0 to HW filter on device macsec1
[  279.493760][T14134] veth0_to_bridge: entered promiscuous mode
[  279.529324][T14134] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode
[  279.605033][T14158] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'.
[  279.640624][T14134] 8021q: adding VLAN 0 to HW filter on device bond5
[  279.644948][T14134] 8021q: adding VLAN 0 to HW filter on device bond6
[  279.648616][T14134] 8021q: adding VLAN 0 to HW filter on device bond7
[  279.650969][T14134] 8021q: adding VLAN 0 to HW filter on device bond8
[  279.653512][T14134] 8021q: adding VLAN 0 to HW filter on device bond9
[  279.657177][T14134] 8021q: adding VLAN 0 to HW filter on device bond10
[  279.802288][T14134] 8021q: adding VLAN 0 to HW filter on device bond11
[  279.807633][T14134] 8021q: adding VLAN 0 to HW filter on device batadv0
[  279.810661][T14134] 8021q: adding VLAN 0 to HW filter on device batadv2
[  279.811974][T14134] ip6gretap0: entered promiscuous mode
[  279.818069][T14134] 8021q: adding VLAN 0 to HW filter on device bond12
[  279.824328][T14134] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  279.826124][ T5956] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.826165][ T5956] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.826198][ T5956] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.826231][ T5956] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.838762][ T5956] bond11: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  279.839906][ T5956] bond11: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  279.898994][ T5724] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  279.943763][T10726] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.943868][T10726] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.964690][T10726] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.964786][T10726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  280.073775][  T108] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  280.074040][  T108] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  280.081157][  T108] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  280.081354][  T108] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  280.087167][T12235] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  280.114021][T12238] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  280.296800][T12235] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  280.430717][T14173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1941'.
[  280.686420][T12235] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  281.085665][T12235] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  281.162827][T14169] netlink: 'syz.0.1940': attribute type 10 has an invalid length.
[  281.167208][T12235] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  281.477347][T14204] syzkaller1: entered promiscuous mode
[  281.477367][T14204] syzkaller1: entered allmulticast mode
[  281.507954][T14204] ip6tnl6: entered allmulticast mode
[  281.523983][T14204] __nla_validate_parse: 4 callbacks suppressed
[  281.524000][T14204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1949'.
[  282.162620][T14224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1956'.
[  282.318307][T14230] x_tables: duplicate underflow at hook 3
[  282.464252][T14237] IPVS: Error connecting to the multicast addr
[  282.603726][T14056] Set syz1 is full, maxelem 65536 reached
[  282.710591][T14242] xt_hashlimit: size too large, truncated to 1048576
[  282.778685][T14254] xt_hashlimit: size too large, truncated to 1048576
[  282.784416][T14252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1962'.
[  282.819958][T14245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1961'.
[  282.868164][T14255] syzkaller0: entered promiscuous mode
[  282.868187][T14255] syzkaller0: entered allmulticast mode
[  282.874646][T14252] netlink: 'syz.0.1962': attribute type 5 has an invalid length.
[  282.874680][T14252] netlink: 'syz.0.1962': attribute type 9 has an invalid length.
[  282.874692][T14252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1962'.
[  283.107503][T14263] netlink: 'syz.0.1964': attribute type 83 has an invalid length.
[  283.418780][T14278] sctp: [Deprecated]: syz.1.1969 (pid 14278) Use of int in max_burst socket option deprecated.
[  283.418780][T14278] Use struct sctp_assoc_value instead
[  283.475624][T14278] tipc: Resetting bearer <eth:syzkaller0>
[  283.552189][T14282] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1970'.
[  283.593275][T14288] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1971'.
[  283.600231][T14293] netlink: 'syz.3.1972': attribute type 4 has an invalid length.
[  283.600249][T14293] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1972'.
[  284.104866][T14307] bond2: Removing last ns target with arp_interval on
[  284.333749][T14328] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1980'.
[  284.572706][T14335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1982'.
[  285.257318][T14348] tipc: Can't bind to reserved service type 0
[  285.272582][T14348] set match dimension is over the limit!
[  285.811438][T14357] x_tables: duplicate entry at hook 1
[  287.337674][T14404] __nla_validate_parse: 3 callbacks suppressed
[  287.337694][T14404] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1995'.
[  287.401412][T14402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1993'.
[  287.401432][T14402] netlink: 192 bytes leftover after parsing attributes in process `syz.1.1993'.
[  287.401481][T14402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1993'.
[  287.667631][T14427] netlink: 'syz.1.1999': attribute type 1 has an invalid length.
[  287.718648][T14427] 8021q: adding VLAN 0 to HW filter on device bond6
[  288.103486][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'.
[  288.103507][T14451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2001'.
[  288.103530][T14451] netlink: 'syz.4.2001': attribute type 13 has an invalid length.
[  288.135644][T14451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2001'.
[  288.265062][T14411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  288.413902][T14450] netlink: 'syz.1.2002': attribute type 12 has an invalid length.
[  288.413922][T14450] netlink: 'syz.1.2002': attribute type 29 has an invalid length.
[  288.413933][T14450] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2002'.
[  288.413966][T14450] netlink: 'syz.1.2002': attribute type 2 has an invalid length.
[  288.573747][T14458] nbd: must specify a size in bytes for the device
[  289.009786][T14488] IPv6: addrconf: prefix option has invalid lifetime
[  289.076641][T14493] netlink: 'syz.1.2012': attribute type 10 has an invalid length.
[  289.095352][T14489] syzkaller0: entered promiscuous mode
[  289.095380][T14489] syzkaller0: entered allmulticast mode
[  289.142034][T14485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2014'.
[  289.227202][T14496] GUP no longer grows the stack in syz.2.2017 (14496): 200000003000-20000000a000 (200000001000)
[  289.227234][T14496] CPU: 0 UID: 0 PID: 14496 Comm: syz.2.2017 Not tainted syzkaller #0 PREEMPT(full) 
[  289.227256][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  289.227268][T14496] Call Trace:
[  289.227275][T14496]  <TASK>
[  289.227283][T14496]  dump_stack_lvl+0xe8/0x150
[  289.227316][T14496]  __get_user_pages+0x23b6/0x2750
[  289.227347][T14496]  ? lock_acquire+0x115/0x350
[  289.227382][T14496]  ? __gup_longterm_locked+0xc3b/0x15c0
[  289.227420][T14496]  __gup_longterm_locked+0xd52/0x15c0
[  289.227449][T14496]  ? lock_acquire+0x115/0x350
[  289.227485][T14496]  gup_fast_fallback+0x1d92/0x20e0
[  289.227542][T14496]  ? __pfx_gup_fast_fallback+0x10/0x10
[  289.227568][T14496]  ? futex_unqueue+0x22/0x240
[  289.227591][T14496]  ? is_valid_gup_args+0x11f/0x200
[  289.227618][T14496]  ? get_user_pages_fast+0x4d/0xb0
[  289.227647][T14496]  __iov_iter_get_pages_alloc+0x378/0xa40
[  289.227679][T14496]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  289.227704][T14496]  iov_iter_get_pages2+0x5e/0xa0
[  289.227731][T14496]  __se_sys_vmsplice+0x7b5/0x1660
[  289.227780][T14496]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  289.227810][T14496]  ? __pfx_futex_wait+0x10/0x10
[  289.227877][T14496]  ? 0xffffffffff600000
[  289.227934][T14496]  do_syscall_64+0x166/0x520
[  289.227961][T14496]  ? trace_irq_disable+0x3b/0x140
[  289.227980][T14496]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.227999][T14496]  ? clear_bhb_loop+0x70/0xc0
[  289.228022][T14496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.228040][T14496] RIP: 0033:0x7fb38ef9e159
[  289.228058][T14496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  289.228074][T14496] RSP: 002b:00007fb38fde0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  289.228094][T14496] RAX: ffffffffffffffda RBX: 00007fb38f225fa0 RCX: 00007fb38ef9e159
[  289.228107][T14496] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008
[  289.228118][T14496] RBP: 00007fb38f03506b R08: 0000000000000000 R09: 0000000000000000
[  289.228130][T14496] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  289.228142][T14496] R13: 00007fb38f226038 R14: 00007fb38f225fa0 R15: 00007fff8a8ae2e8
[  289.228174][T14496]  </TASK>
[  289.327025][T14498] ip6t_ah: unknown flags 4
[  289.479975][T14501] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  289.482861][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2018'.
[  289.484416][T14501] openvswitch: netlink: Multiple metadata blocks provided
[  289.632541][T14508] xt_l2tp: invalid flags combination: 8
[  289.698597][ T7144] hid-generic 0005:0008:0009.0001: item fetching failed at offset 2/3
[  289.699665][ T7144] hid-generic 0005:0008:0009.0001: probe with driver hid-generic failed with error -22
[  290.213402][T14522] netlink: 'syz.4.2025': attribute type 3 has an invalid length.
[  290.258356][T14534] xt_hashlimit: size too large, truncated to 1048576
[  290.300870][T14540] bond0: (slave syz_tun): Releasing backup interface
[  290.333966][T14540] bond11: (slave bond0): Releasing active interface
[  290.360812][T14540] veth0: left allmulticast mode
[  290.360836][T14540] veth0: left promiscuous mode
[  290.361739][T14540] bridge0: port 1(veth0) entered disabled state
[  290.401270][T14540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  290.405735][T14543] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add()
[  290.867490][T14560] hsr_slave_0 (unregistering): left promiscuous mode
[  291.237744][T14583] IPv6: NLM_F_CREATE should be specified when creating new route
[  291.274181][T14566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  291.579501][T14581] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  291.729820][T14581] bond0 (unregistering): Released all slaves
[  291.863906][T14610] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[  291.882750][T14610] hsr_slave_1 (unregistering): left promiscuous mode
[  292.070750][T14618] veth7: entered allmulticast mode
[  292.212645][T14627] xt_hashlimit: size too large, truncated to 1048576
[  292.579881][T14646] netlink: 'syz.1.2051': attribute type 1 has an invalid length.
[  292.647400][T14646] bond7: entered promiscuous mode
[  292.647774][T14646] 8021q: adding VLAN 0 to HW filter on device bond7
[  292.684915][T14646] __nla_validate_parse: 11 callbacks suppressed
[  292.684933][T14646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2051'.
[  292.686803][T14646] bond7: entered allmulticast mode
[  292.726705][    C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  292.726724][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  293.023719][T14663] x_tables: duplicate underflow at hook 1
[  293.144121][T14671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2053'.
[  293.161108][T14671] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2053'.
[  293.368630][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  293.589480][T14691] netlink: 'syz.0.2058': attribute type 20 has an invalid length.
[  293.589500][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'.
[  293.639136][T14691] netlink: 'syz.0.2058': attribute type 20 has an invalid length.
[  293.639149][T14691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2058'.
[  293.979867][T14700] RDS: rds_bind could not find a transport for 0:0:80::, load rds_tcp or rds_rdma?
[  294.209483][T14708] gre0: entered promiscuous mode
[  294.209499][T14708] gre0: entered allmulticast mode
[  294.211181][T14708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2062'.
[  294.552661][T14603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  294.822072][T14723] C: renamed from veth1_to_team (while UP)
[  294.835190][T14723] netlink: 'syz.2.2064': attribute type 1 has an invalid length.
[  294.835209][T14723] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2064'.
[  294.858643][T14723] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  294.992493][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2066'.
[  295.233817][T14737] ip_tables: iptables: counters copy to user failed while replacing table
[  295.360595][T14730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  295.640798][T14745] netlink: 'syz.1.2071': attribute type 21 has an invalid length.
[  295.640819][T14745] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2071'.
[  295.654022][T14745] netlink: 'syz.1.2071': attribute type 4 has an invalid length.
[  295.654041][T14745] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2071'.
[  295.898794][T14754] netlink: 'syz.2.2073': attribute type 2 has an invalid length.
[  295.943510][T14754] : entered promiscuous mode
[  296.134380][T14758] bond12 (unregistering): Released all slaves
[  296.223494][T14764] tipc: Resetting bearer <eth:syzkaller0>
[  296.230898][T14771] netlink: 'syz.2.2077': attribute type 1 has an invalid length.
[  296.284398][T14771] 8021q: adding VLAN 0 to HW filter on device bond13
[  296.362054][T14774] 8021q: adding VLAN 0 to HW filter on device bond13
[  296.363508][T14774] bond13: (slave gre5): The slave device specified does not support setting the MAC address
[  296.365180][T14774] bond13: (slave gre5): Error -95 calling set_mac_address
[  296.425100][T14771] 8021q: adding VLAN 0 to HW filter on device bond14
[  296.433661][T14771] bond13: (slave bond14): Enslaving as an active interface with a down link
[  296.460393][T14771] bond13 (unregistering): (slave bond14): Releasing active interface
[  296.463965][T14771] bond13 (unregistering): Released all slaves
[  296.998554][ T5619] block nbd1: Receive control failed (result -32)
[  297.000973][ T4934] block nbd1: Receive control failed (result -32)
[  297.801779][T14836] syzkaller0: entered promiscuous mode
[  297.801802][T14836] syzkaller0: entered allmulticast mode
[  298.684567][T14862] netlink: 'syz.1.2102': attribute type 1 has an invalid length.
[  298.721102][T14862] 8021q: adding VLAN 0 to HW filter on device bond8
[  299.027820][T14862] bond8: (slave veth9): Enslaving as an active interface with a down link
[  299.071766][T14863] 8021q: adding VLAN 0 to HW filter on device batadv1
[  299.072026][T14863] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  308.726808][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  311.927265][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  339.446336][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  348.406475][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  380.511375][T14881] __nla_validate_parse: 5 callbacks suppressed
[  380.511396][T14881] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2103'.
[  380.569222][T14887] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2107'.
[  381.108812][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2113'.
[  381.108842][T14914] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2113'.
[  381.285629][T14932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'.
[  381.324769][T14932] xt_TCPMSS: Only works on TCP SYN packets
[  381.365215][T14933] netlink: Unknown conntrack attr (0)
[  381.520097][T14941] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2119'.
[  381.540404][T14941] netlink: 'syz.4.2119': attribute type 1 has an invalid length.
[  381.540424][T14941] netlink: 756 bytes leftover after parsing attributes in process `syz.4.2119'.
[  381.869674][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2123'.
[  382.099933][T14979] syzkaller1: entered promiscuous mode
[  382.099953][T14979] syzkaller1: entered allmulticast mode
[  382.540960][ T5619] Bluetooth: hci4: connection err: -111
[  382.616829][T15006] ip_tables: iptables: counters copy to user failed while replacing table
[  382.616991][T15009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2140'.
[  382.617955][T15010] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2140'.
[  382.915290][T15032] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  383.164678][T15037] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  383.898317][T15062] bridge0: port 3(vlan2) entered blocking state
[  383.900145][T15062] bridge0: port 3(vlan2) entered disabled state
[  383.900331][T15062] vlan2: entered allmulticast mode
[  383.900345][T15062] geneve0: entered allmulticast mode
[  383.932860][T15062] vlan2: entered promiscuous mode
[  383.932879][T15062] geneve0: entered promiscuous mode
[  384.172898][T15078] tipc: Resetting bearer <eth:syzkaller0>
[  384.301294][ T5957] tipc: Resetting bearer <eth:syzkaller0>
[  384.494975][T15084] xt_TCPMSS: Only works on TCP SYN packets
[  384.849346][T15084] bridge_slave_1: left allmulticast mode
[  384.849372][T15084] bridge_slave_1: left promiscuous mode
[  384.849625][T15084] bridge0: port 2(bridge_slave_1) entered disabled state
[  384.876822][T15084] bridge_slave_0: left allmulticast mode
[  384.876846][T15084] bridge_slave_0: left promiscuous mode
[  384.889447][T15084] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.984517][T15103] nbd2: detected capacity change from 0 to 63
[  385.223340][ T5619] block nbd2: Receive control failed (result -104)
[  385.395802][T15105] team0: entered promiscuous mode
[  385.399644][T15105] team0: entered allmulticast mode
[  385.401384][T15105] 8021q: adding VLAN 0 to HW filter on device team0
[  385.703355][T15118] syzkaller0: entered promiscuous mode
[  385.703377][T15118] syzkaller0: entered allmulticast mode
[  385.923009][T15143] netlink: 'syz.0.2173': attribute type 2 has an invalid length.
[  385.923028][T15143] __nla_validate_parse: 45 callbacks suppressed
[  385.923039][T15143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2173'.
[  385.970112][T15141] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2172'.
[  386.378369][T15164] netlink: 'syz.1.2177': attribute type 1 has an invalid length.
[  387.025601][T15159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  388.087963][T15157] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2176'.
[  388.122506][T15155] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  388.362252][T15185] batman_adv: batadv0: Adding interface: syzkaller0
[  388.362268][T15185] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  388.362297][T15185] batman_adv: batadv0: Interface activated: syzkaller0
[  388.385281][T15184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2180'.
[  388.386258][T15187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2180'.
[  388.435345][T15184] netlink: 'syz.2.2180': attribute type 4 has an invalid length.
[  388.435364][T15184] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2180'.
[  388.722728][T15200] netlink: 'syz.1.2184': attribute type 7 has an invalid length.
[  388.722747][T15200] netlink: 'syz.1.2184': attribute type 8 has an invalid length.
[  388.763337][T15201] netlink: 'syz.1.2184': attribute type 7 has an invalid length.
[  388.763357][T15201] netlink: 'syz.1.2184': attribute type 8 has an invalid length.
[  389.771772][T15223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2192'.
[  389.801257][T15227] netlink: 'syz.0.2188': attribute type 10 has an invalid length.
[  389.882511][T15237] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode
[  389.882909][T15237] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode
[  389.884671][T15237] tipc: Resetting bearer <eth:syzkaller0>
[  389.978632][T15239] Cannot find add_set index 2 as target
[  390.427364][T15249] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2200'.
[  390.435210][T15249] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2200'.
[  390.463891][T15262] 
[  390.466250][T15262] ======================================================
[  390.473268][T15262] WARNING: possible circular locking dependency detected
[  390.480298][T15262] syzkaller #0 Not tainted
[  390.484712][T15262] ------------------------------------------------------
[  390.491724][T15262] syz.4.2202/15262 is trying to acquire lock:
[  390.497784][T15262] ffff88801c2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[  390.508328][T15262] 
[  390.508328][T15262] but task is already holding lock:
[  390.515685][T15262] ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  390.525787][T15262] 
[  390.525787][T15262] which lock already depends on the new lock.
[  390.525787][T15262] 
[  390.536184][T15262] 
[  390.536184][T15262] the existing dependency chain (in reverse order) is:
[  390.545188][T15262] 
[  390.545188][T15262] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  390.552897][T15262]        cpus_read_lock+0x42/0x160
[  390.557997][T15262]        static_key_slow_inc+0x12/0x30
[  390.563437][T15262]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[  390.569661][T15262]        nbd_genl_foreach_sock+0x265/0x450
[  390.575532][T15262]        nbd_genl_reconfigure+0xbbb/0x1040
[  390.581321][T15262]        genl_family_rcv_msg_doit+0x233/0x340
[  390.587382][T15262]        genl_rcv_msg+0x614/0x7a0
[  390.592384][T15262]        netlink_rcv_skb+0x226/0x4a0
[  390.597644][T15262]        genl_rcv+0x28/0x40
[  390.602124][T15262]        netlink_unicast+0x7bd/0x940
[  390.607403][T15262]        netlink_sendmsg+0x813/0xb40
[  390.612688][T15262]        sock_sendmsg_nosec+0x13a/0x180
[  390.618232][T15262]        ____sys_sendmsg+0x54e/0x850
[  390.623509][T15262]        ___sys_sendmsg+0x2a5/0x360
[  390.628704][T15262]        __x64_sys_sendmsg+0x1b1/0x290
[  390.634145][T15262]        do_syscall_64+0x166/0x520
[  390.639241][T15262]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.645630][T15262] 
[  390.645630][T15262] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  390.653356][T15262]        __mutex_lock+0x19d/0x1550
[  390.658465][T15262]        nbd_queue_rq+0x373/0xff0
[  390.663498][T15262]        blk_mq_dispatch_rq_list+0x499/0x1990
[  390.669575][T15262]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  390.676501][T15262]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  390.682988][T15262]        blk_mq_run_work_fn+0x16c/0x300
[  390.688547][T15262]        process_scheduled_works+0xc3d/0x1630
[  390.694604][T15262]        worker_thread+0xa47/0xfb0
[  390.699708][T15262]        kthread+0x38b/0x480
[  390.704278][T15262]        ret_from_fork+0x514/0xb70
[  390.709375][T15262]        ret_from_fork_asm+0x1a/0x30
[  390.714648][T15262] 
[  390.714648][T15262] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  390.721842][T15262]        __mutex_lock+0x19d/0x1550
[  390.726941][T15262]        nbd_queue_rq+0xc1/0xff0
[  390.731861][T15262]        blk_mq_dispatch_rq_list+0x499/0x1990
[  390.737909][T15262]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  390.744752][T15262]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  390.751240][T15262]        blk_mq_run_work_fn+0x16c/0x300
[  390.756784][T15262]        process_scheduled_works+0xc3d/0x1630
[  390.762860][T15262]        worker_thread+0xa47/0xfb0
[  390.767969][T15262]        kthread+0x38b/0x480
[  390.772544][T15262]        ret_from_fork+0x514/0xb70
[  390.777645][T15262]        ret_from_fork_asm+0x1a/0x30
[  390.782929][T15262] 
[  390.782929][T15262] -> #4 (set->srcu){.+.+}-{0:0}:
[  390.790039][T15262]        __synchronize_srcu+0xc9/0x2f0
[  390.795485][T15262]        elevator_switch+0x1e8/0x7b0
[  390.800761][T15262]        elevator_change+0x2fa/0x480
[  390.806041][T15262]        elevator_set_default+0x375/0x440
[  390.811761][T15262]        blk_register_queue+0x3f3/0x4e0
[  390.817303][T15262]        __add_disk+0x6b8/0xdb0
[  390.822149][T15262]        add_disk_fwnode+0x100/0x3a0
[  390.827427][T15262]        nbd_dev_add+0x733/0xb60
[  390.832350][T15262]        nbd_init+0x168/0x1f0
[  390.837020][T15262]        do_one_initcall+0x250/0x870
[  390.842301][T15262]        do_initcall_level+0x10a/0x1a0
[  390.847749][T15262]        do_initcalls+0x59/0xa0
[  390.852586][T15262]        kernel_init_freeable+0x29d/0x3e0
[  390.858299][T15262]        kernel_init+0x22/0x1d0
[  390.863140][T15262]        ret_from_fork+0x514/0xb70
[  390.868239][T15262]        ret_from_fork_asm+0x1a/0x30
[  390.873516][T15262] 
[  390.873516][T15262] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  390.881317][T15262]        __mutex_lock+0x19d/0x1550
[  390.886419][T15262]        elevator_change+0x1af/0x480
[  390.891688][T15262]        elevator_set_none+0xb5/0x140
[  390.897047][T15262]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  390.903362][T15262]        nbd_start_device+0x189/0xb30
[  390.908722][T15262]        nbd_genl_connect+0x167d/0x1cd0
[  390.914258][T15262]        genl_family_rcv_msg_doit+0x233/0x340
[  390.920316][T15262]        genl_rcv_msg+0x614/0x7a0
[  390.925329][T15262]        netlink_rcv_skb+0x226/0x4a0
[  390.930597][T15262]        genl_rcv+0x28/0x40
[  390.935089][T15262]        netlink_unicast+0x7bd/0x940
[  390.940364][T15262]        netlink_sendmsg+0x813/0xb40
[  390.945633][T15262]        sock_sendmsg_nosec+0x13a/0x180
[  390.951166][T15262]        ____sys_sendmsg+0x54e/0x850
[  390.956460][T15262]        ___sys_sendmsg+0x2a5/0x360
[  390.961656][T15262]        __x64_sys_sendmsg+0x1b1/0x290
[  390.967124][T15262]        do_syscall_64+0x166/0x520
[  390.972227][T15262]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  390.978625][T15262] 
[  390.978625][T15262] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  390.987217][T15262]        blk_alloc_queue+0x544/0x690
[  390.992489][T15262]        __blk_mq_alloc_disk+0x194/0x390
[  390.998109][T15262]        nbd_dev_add+0x494/0xb60
[  391.003029][T15262]        nbd_init+0x168/0x1f0
[  391.007697][T15262]        do_one_initcall+0x250/0x870
[  391.012977][T15262]        do_initcall_level+0x10a/0x1a0
[  391.018425][T15262]        do_initcalls+0x59/0xa0
[  391.023259][T15262]        kernel_init_freeable+0x29d/0x3e0
[  391.028965][T15262]        kernel_init+0x22/0x1d0
[  391.033799][T15262]        ret_from_fork+0x514/0xb70
[  391.038893][T15262]        ret_from_fork_asm+0x1a/0x30
[  391.044169][T15262] 
[  391.044169][T15262] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  391.051371][T15262]        fs_reclaim_acquire+0x71/0x100
[  391.056830][T15262]        kmem_cache_alloc_noprof+0x5f/0x600
[  391.062729][T15262]        __kernfs_iattrs+0xdd/0x380
[  391.067928][T15262]        kernfs_iop_setattr+0xe6/0x3f0
[  391.073380][T15262]        notify_change+0xbba/0xea0
[  391.078476][T15262]        do_truncate+0x1c2/0x250
[  391.083406][T15262]        path_openat+0x15b5/0x1d60
[  391.088504][T15262]        do_file_open+0x23e/0x4a0
[  391.093514][T15262]        do_sys_openat2+0x115/0x200
[  391.098702][T15262]        __x64_sys_openat+0x138/0x170
[  391.104060][T15262]        do_syscall_64+0x166/0x520
[  391.109162][T15262]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.115570][T15262] 
[  391.115570][T15262] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  391.124106][T15262]        __lock_acquire+0x164c/0x2de0
[  391.129462][T15262]        lock_acquire+0x115/0x350
[  391.134471][T15262]        down_read+0x4a/0x330
[  391.139134][T15262]        kernfs_iop_permission+0x7f/0x430
[  391.144841][T15262]        inode_permission+0x3de/0x5f0
[  391.150199][T15262]        cgroup_attach_permissions+0x28e/0x9f0
[  391.156337][T15262]        __cgroup_procs_write+0x24b/0x320
[  391.162046][T15262]        cgroup_threads_write+0x24/0x50
[  391.167585][T15262]        cgroup_file_write+0x331/0x8f0
[  391.173029][T15262]        kernfs_fop_write_iter+0x3a4/0x540
[  391.178818][T15262]        vfs_write+0x612/0xba0
[  391.183573][T15262]        ksys_write+0x150/0x270
[  391.188414][T15262]        do_syscall_64+0x166/0x520
[  391.193511][T15262]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.199908][T15262] 
[  391.199908][T15262] other info that might help us debug this:
[  391.199908][T15262] 
[  391.210119][T15262] Chain exists of:
[  391.210119][T15262]   &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock
[  391.210119][T15262] 
[  391.224098][T15262]  Possible unsafe locking scenario:
[  391.224098][T15262] 
[  391.231527][T15262]        CPU0                    CPU1
[  391.236871][T15262]        ----                    ----
[  391.242212][T15262]   rlock(cpu_hotplug_lock);
[  391.246787][T15262]                                lock(&nsock->tx_lock);
[  391.253703][T15262]                                lock(cpu_hotplug_lock);
[  391.260708][T15262]   rlock(&root->kernfs_iattr_rwsem);
[  391.266064][T15262] 
[  391.266064][T15262]  *** DEADLOCK ***
[  391.266064][T15262] 
[  391.274191][T15262] locks held by syz.4.2202/15262: 5, last CPU#0:
[  391.280496][T15262]  #0: ffff888047fbfcf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  391.289536][T15262]  #1: ffff888034db8460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  391.298401][T15262]  #2: ffff888056482080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  391.308128][T15262]  #3: ffffffff8ed9c820 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  391.317876][T15262]  #4: ffffffff8ebe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  391.328387][T15262] 
[  391.328387][T15262] stack backtrace:
[  391.334276][T15262] CPU: 0 UID: 0 PID: 15262 Comm: syz.4.2202 Not tainted syzkaller #0 PREEMPT(full) 
[  391.343633][T15262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  391.353677][T15262] Call Trace:
[  391.356950][T15262]  <TASK>
[  391.359866][T15262]  dump_stack_lvl+0xe8/0x150
[  391.364447][T15262]  print_circular_bug+0x2e2/0x300
[  391.369463][T15262]  check_noncircular+0x12f/0x150
[  391.374389][T15262]  __lock_acquire+0x164c/0x2de0
[  391.379245][T15262]  ? __lock_acquire+0x747/0x2de0
[  391.384167][T15262]  ? __bfs+0x153/0x290
[  391.388217][T15262]  ? __pfx_hlock_conflict+0x10/0x10
[  391.393404][T15262]  lock_acquire+0x115/0x350
[  391.397890][T15262]  ? kernfs_iop_permission+0x7f/0x430
[  391.403257][T15262]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  391.409052][T15262]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  391.414851][T15262]  down_read+0x4a/0x330
[  391.418999][T15262]  ? kernfs_iop_permission+0x7f/0x430
[  391.424359][T15262]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  391.430155][T15262]  kernfs_iop_permission+0x7f/0x430
[  391.435350][T15262]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  391.441145][T15262]  inode_permission+0x3de/0x5f0
[  391.445990][T15262]  cgroup_attach_permissions+0x28e/0x9f0
[  391.451611][T15262]  __cgroup_procs_write+0x24b/0x320
[  391.456794][T15262]  cgroup_threads_write+0x24/0x50
[  391.461813][T15262]  ? __pfx_cgroup_threads_write+0x10/0x10
[  391.467523][T15262]  cgroup_file_write+0x331/0x8f0
[  391.472460][T15262]  ? __pfx_cgroup_file_write+0x10/0x10
[  391.477906][T15262]  ? __kmalloc_noprof+0x38c/0x720
[  391.482916][T15262]  ? __pfx_cgroup_file_write+0x10/0x10
[  391.488361][T15262]  kernfs_fop_write_iter+0x3a4/0x540
[  391.493634][T15262]  vfs_write+0x612/0xba0
[  391.497957][T15262]  ? __pfx_vfs_write+0x10/0x10
[  391.502713][T15262]  ? __fget_files+0x2a/0x420
[  391.507295][T15262]  ksys_write+0x150/0x270
[  391.511622][T15262]  ? __pfx_ksys_write+0x10/0x10
[  391.516465][T15262]  do_syscall_64+0x166/0x520
[  391.521046][T15262]  ? trace_irq_disable+0x3b/0x140
[  391.526050][T15262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.532099][T15262]  ? clear_bhb_loop+0x70/0xc0
[  391.536760][T15262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.542638][T15262] RIP: 0033:0x7fd5e259e159
[  391.547038][T15262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.566636][T15262] RSP: 002b:00007fd5e34e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  391.575045][T15262] RAX: ffffffffffffffda RBX: 00007fd5e2825fa0 RCX: 00007fd5e259e159
[  391.583021][T15262] RDX: 0000000000000012 RSI: 0000200000000240 RDI: 0000000000000006
[  391.590987][T15262] RBP: 00007fd5e263506b R08: 0000000000000000 R09: 0000000000000000
[  391.598947][T15262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  391.606905][T15262] R13: 00007fd5e2826038 R14: 00007fd5e2825fa0 R15: 00007ffcbcf93db8
[  391.614877][T15262]  </TASK>
[  391.689789][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2202'.