last executing test programs:

14.316143492s ago: executing program 4 (id=4893):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000000400)={0x10, 0x0, 0x25dfdbff, 0xfa83eb850bd66ef}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x6de, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtfilter={0x23, 0x2c, 0x1, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x5}, {0x10, 0xb}, {0x8, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x438, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a0, 0x3c8, 0x3c8, 0x3a0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {0x1d000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x498)
r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
accept4$llc(r3, 0x0, 0x0, 0x80800)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x48}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close(0x3)

12.163367622s ago: executing program 4 (id=4907):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r3 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2})
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802f00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000000c000280050001"], 0xac}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_SET_CONFIG(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x167a800}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000040}, 0x24004044)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0xa8, r8, 0x200, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@private=0xa010102}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x34}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xb26}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2a5c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x40010)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x4, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}]}, &(0x7f0000000380)='GPL\x00', 0x4, 0xf9, &(0x7f0000000a40)=""/249, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5d36}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_START_COMMIT(r5, 0x80585882, &(0x7f0000000300))
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x14, &(0x7f0000000400)=ANY=[@ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
ioctl$XFS_IOC_DIOINFO(r3, 0x800c581e, &(0x7f0000000140))

10.710530249s ago: executing program 4 (id=4921):
r0 = socket$packet(0x11, 0x2, 0x300) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r3, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000010340)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffffffc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044090}, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r6) (async)
close(r5) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000001c0), 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x374, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x348, 0x3, 0x0, 0x1, [{0x344, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x340, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x330, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8}, @NFTA_RANGE_FROM_DATA={0x34, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_RANGE_FROM_DATA={0x148, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb0, 0x1, "803cccfd2cc2153bdee57364a01da53ac8b8cdf0f7bf725585a548674ded753de36e6e85a0d297c457848fc0607c7d78ad17000e50430325f184fcfcf143e4ef4b532013a6e546894f663432ca3e225362e5ad7a2464dbf8d43d3151352daa38db52bce4688f26ee18bfd97cda2ab55561b91d2a679d494eb7660627c15320ab12e40d355d63476c99c3909097a7a748865de72bb3232f9d5c47689dd09bdd9e90232b227e9b86c0f4a35a58"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_RANGE_TO_DATA={0x188, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe7, 0x1, "99c91155a34f9791b9aefc72d8ec1dd6400217442a35a43545bf4678199be5e54d61398131172f8d1512dae2ce1749e1f5732de252a8ff9b817620e262bf9590188759b8d88963ee674c32c88b709ec9c63b0de89e2fe13609ade3c6496dea254dfa740b88275d9c2b23370c105b9bfd9b4ec1c5c1f89c9e7af21580676483d6345724aa0f99ef2ef57d4c8443b208d66e7ee6147d0f85a12ccdd15158c217e6581fea30e8e3e1284e0b418136201f88ca9e01b3c88dbf6e2c989f733759688297d4eac52b734510bf79236cf55cd1d1669e04fff4c5ad4233ea17b1bb3986479aed77"}, @NFTA_DATA_VALUE={0x2f, 0x1, "e5b0b7f1caff11f85d2328e6291578b4a5ef5e56eb603848a747ead55f0d613a01fbe992b13533b5318e68"}, @NFTA_DATA_VALUE={0x3a, 0x1, "27aa8ad8fb6e19442708c8263296792aaf92cc39af8bcb93ea88e7654afacb37663dc77c916e46d16b021f83f935c92baffc351ea3fe"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}}}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x39c}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x20000000) (async)
sendto$packet(r0, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r3, 0x1, 0x2, 0x6, @broadcast}, 0x14)

4.989778505s ago: executing program 4 (id=4959):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1000}, 0x80)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4400, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffe, 0x0, 0x80000, 0x100000000, 0xca8}, {0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x4}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x6c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x80}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x400003, 0x0, 0x0, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffe, 0x6c}, 0x0, @in=@multicast1, 0x3501, 0x4, 0x0, 0x3}]}]}, 0x1fc}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000780)={&(0x7f0000000240), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, 0x1403, 0x8, 0x70bd27, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'caif0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4081}, 0x4000)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0xbc, 0x30, 0x871a15abc695fb3f, 0x70bd25, 0x1, {}, [{0xa8, 0x1, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x10000000, 0x8000007, 0xfff}, 0x200}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf27}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0xfffffffa, 0xffffffffeffffff7, 0x0, 0x8}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x18000000000002a0, 0x10e, 0x0, &(0x7f0000000380)="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", 0x0, 0xfffbffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast})
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0x15)

3.980016153s ago: executing program 0 (id=4975):
r0 = socket$packet(0x11, 0x3, 0x300)
unshare(0x4060800)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800) (async)
r2 = accept4$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000080)=0x14, 0x800)
r3 = accept4$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14, 0x80000)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x4, &(0x7f0000000180)=[{0x1, 0xc, 0xff, 0x9}, {0x7, 0x1, 0x5, 0x4}, {0x8, 0x9, 0x2, 0xe315}, {0x1, 0x9, 0x4, 0x7}]}, 0x10)

3.781547275s ago: executing program 0 (id=4977):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000003feffff620af0fff8ffffff71a4f0ff00000000ae04020000000000be400300000000006504030001ed00007b130000000000004d44000000000000620a00fe000000007133000000000000b5030000000000009500000000000000023bc065b7a379d17cf9333379fc05000000912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50bec919bc461e91a7168c5181554d1b583c587e436fe275daf51efd601b6bf01c8e8b1b526375ec5dd6fcd82e4fee5bef7af9a0200000000000000e3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f645679c294392cf538b07ce2646cb7798b3e6440c2fbdb00a3e35208b0bb1d2cd871c5548930be3835f2554b4a28610643a98d9ec21ead2ed51b104d4d91af25b84550a7925c3109b151b8b9f75d80000000eda88c658d42ecbf28bf7076c15b463bebc72f526d8e4a9e231d512381e7a78afcb913466aae7f6df70252e79166d858fc152b659da074e1320060d0b11008e59a5923906f88b53987ad1714e72ba7a5b74f0c33d39000d06a59ff61622cfd9aa58fe8d485ae2c0cc65c2a36aaec2477584b6a89adaf17b0a6041bde4cc3ed54d27f777e92b87496e6649cf728d236619074d6ebdf098bc908c423d228a40f9411fe7226a40409d6e37c4f46756d31cb46761bade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18de0ae564162a27afea62d84f3a10746443d64364f56e24e6d21053d901204a1deeed41556175cbd4041b7d301bcb72652d950ad31928b0b093778b68e2e9853c02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f98928d5e9b94ff9ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cff538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595bcf50ab32d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063b59261b2e1aab1675b34a220488c126aeef5f510a8f1aded94a129e4aec6f8c3a13596c2ea3e2e04cfdce669e51731b2875353193f82ade69d0540059fe6c7fe7c00fb7502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abd47b64a1b304502dda787343ce3c95300000000010000003baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022af46667cf25c5d3038816106dec28eaeb88343261a48a18f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfeff59d54d1f92ecc4e95dd2d18383117c03987d198899b212c55318294270a1ad10d30fef7c24b78b29d83238273f4fc87afce829ba0f85da6d888f18ea40ab959f6074ab2a4009b9e5f07ab513cdc6c0e57fb1c1ca571380d7b4ead8eaf68b0c5dda0467d35a3807000000b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ea1e717d29135753208165b9cdbae037f315c7d951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d7012c1b45f6ada1ee7baa5b6a686b50f09b7f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac4d73a008364e0602a594817031fc2ff2c32a1989e00f52f8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323a3c3e6e4fd2e016820f78b796a825b3dad9ce7b37507e0b83c3ecd01549bca6a016b3e18a00c748894dc3bfe5efda8b0a477d6a6562fdee45eb16e276dee992094ba9830f6c164179e7d532d86060bea930118d3cae1b8f916b9671b7000000000040f4bee5ad2dea2d14e195265504c05bba38b095e1679f96ddef65ba5de9c8cfb6465ae4165c0689a314a6eb6b36aa705b957edef3035e14b879d4e7dc00624708042e00bf9a7f7ae5f308744770759558e4fcb99c0dc957521ef255362bf2f3966f3754e81fb9bdef22c19f5a49147b85343f9f36bcda9f64b7a5c5b2f5452f5b1de02e6f15c5640bf89d4a74d51dc233dee628c1dfbb5566b98478c174b34eb234481547e484c6af101396b6977dd668b401391c1dc54f2edccf1cabe6be9868d383eb937efdfd9ade018106f544f04fc07ad525497f65fbad3cf145396acf3b0d38e6b46e28d86880fd6f62c373000000000000000000005d194c27cd4d8f6727de79be80fb4493a0ee2e85f59c71dc84311c0f1fb6c87081c7be9355288610c32c2d8c18bf2027212182903687f48262aea54c5f8a315c9aa4a5af1aa2c4007d1baae38c270012b7eb9411ae451204dba30f8321b07a18db97c3e0cf6a15170e515b1cc463a67a5b2b23ec5662ccfa898b8d5075647bdfb390cde56efb8fd42df12c5c8f66bdc58449ec2b38bf12f5f0a49dcbcf4e6f11c47d23fa34793a0000a1cbb1e06e9a8d2449451d7a05ec0a0d3c9716f505ddeba488c60ebf44cac05c2739694359c925148137376dd3f1330ed0e9211f73ee279cc0b5c298422395ce438f48a39ff569375e609f9e904aacc3d8011326d5e4d654c74501cf16bbf72d3984f9b4ef000000003a8a3d49fc837001e4622e58e3a4ef6b55a8dd0680d951cdb6e54ed92a9a6a0e5e494b7b7b0ef4b4bafc5d964551b2a22bfd12b0761ef07a103e51e84917ee44f860b9785e264343f6a80e9318edecf73df6940856cd56c56eb3831445833c701044aaa49439a44a624267580b3c0980d7f87437bf498f6e1915450400000000000000564a02552c0a5fedbcf4da0db6ed03b9dbc224ee76d20aaf1ac74bcb7eb6f202209e64cc4d130dcf6ab3df8ae4911deb4bb5c7df97fc348d151e834be73915f854272f69d88123f666448b6a8e73322b04fffea9cc05e4129debf311c73b4d1a244b1e5b9943028745a0b6477686740ab877315e35624d791e6f71adb1acd3e22cf472ff7e048b16c11c84da9a3b16b92665912132a4dba680052919c20e191311d8092a09f3c609823fed1bd651ce1c34de105790ba2ca3afa26647f66efbf97b109e7226c74e32beb14ff3fd6918e255fc9b42f86b0188cf885afcc9bb77a7fc3ca7ec1015af494add960f8a11422ca005f24006867cd156e0350022943e301b2c07f4d37d07b05ac2fa1f1d5a0d6eb7e992b076bd77509c26034d2a740d578476410b413591884136259693effaf27e7bcfb58efa92625fb9bd68ecca42047f6e7d24b0446ea16a310073c163d1c6aa3ba1fe76b4e88d5f98cc05c6d033e2c28b4990892230d6b4e5c083a601a25145eb22f4f77313117f8147810d95c64fb78b0a000000000000000000000000e92ba8b066e4bd82bb6003d5da8791d838bcd6eefb13000000000000000000000000000000b652ff6fbad82da75114742bc6a27cba894ef490531be709a3a3c81b267dfafa55e6f855200b4e7518682c30f40808cd5bb8f00beb63b4989cc01d8e75a182337b9f9e08430ccec9bda0134d07a9f54b60033182f5d2bb61fd130d65e68bf148d26470060c707a8cf750ca954ee63c78cd975c7f565783383f02edcb7ce4a9ed0c511d18fe32352276d72eefe0d566f97ccae16b3492f60b96574aac4f1862fb6e4932c181dbf8c68ca16b765de9edba0bf5bfb9c4950d19c0bc31db02f374ce62141160436639d4b6cb0033a47ffdc54d55f1136743b1b26946f200000000000000007590ab8f29c7accd9d11786c4ca1271cd2293b572f14a3dfcaa3467f2783fc09e3eee3fa4b82b7b6ce904e05fa797a2f7ff63e4f874bd870821f6460904e05d7a3f8295a9a5fd21e3587b9d9e878c86ba9b66c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
unshare(0x2c020400) (async)
unshare(0x2c020400)
pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0)
pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x2, 0x2)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
accept4$phonet_pipe(r1, 0x0, 0x0, 0x80000) (async)
accept4$phonet_pipe(r1, 0x0, 0x0, 0x80000)
socket$inet_sctp(0x2, 0x5, 0x84)

3.298336516s ago: executing program 0 (id=4982):
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (rerun: 32)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = socket$kcm(0x11, 0x3, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) (async)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff}) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESHEX=r8, @ANYBLOB="0000000000000000b703000007050000850000001b000000b700000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) (async, rerun: 64)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff}) (rerun: 64)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r7}, 0x20)
socket$nl_crypto(0x10, 0x3, 0x15)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r11}, &(0x7f0000000100), &(0x7f00000001c0)=r7}, 0x20)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000240), &(0x7f0000000280)=r10}, 0x20)

2.692716706s ago: executing program 0 (id=4989):
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}, {0x85, 0x0, 0x0, 0x62}}]}, &(0x7f0000000000)='syzkaller\x00', 0x9, 0xfdd, &(0x7f0000001e00)=""/4061, 0x0, 0x0, '\x00', 0x0, 0x0, r0}, 0x94)
r1 = socket$alg(0x26, 0x5, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000))
ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f0000000280)={0x6, {0x1a, 0x7, 0x80, 0x9, 0x3}})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xffffffffffffff26, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000040)=0x60, 0x2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000001300)=@ethtool_flash={0x33, 0x5, './file0/file0/..\x00'}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e22}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x11}]}}}]}, 0x44}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_SERVICE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x14, r6, 0x711, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0)
syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r5)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x19, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
poll(0x0, 0x0, 0x3ff)
sendto$inet(r7, &(0x7f0000000540)='^', 0x1, 0x80088c1, &(0x7f0000004ff0)={0x2, 0xfffd, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(r7, 0xda90)
syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="7edad40e3435aaaaaaaaaabb000d000000e0030100003ac96bfe9c7d596c20df2303d99c6a0f0fc8d656196d2312667068b7b8d45e3016be75fa7d8db00df813a610ea53a78be35a72e7974627aa79665bb766adf80e"], &(0x7f00000003c0)={0x0, 0x3, [0x874, 0x439, 0x9df, 0x963]})
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000400)=@vsock={0x28, 0x0, 0x0, @my=0x0}, 0x80, &(0x7f0000000900)=[{&(0x7f00000006c0)="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", 0xfa}, {&(0x7f00000007c0)="b278a4705417f5029accab13248e081aa2aa4cb9c4101d80d6688fa21eb6db1bb7f99ff6898fcd7ca941be27ea53cfb1b11fed7c48a35e1a7c02f8ea76296a11faf46f1d36b84b2f8469e26b09cab3168fa27aebfd491db8403508e4419afb275effec0c0aaa1bcd9475ba8c98a4632bb1b679aede421c344ae699ccbe095f51efc3b628a363256ae446556b120e43ddbce83144d8940655090a8b5ef5302955e72422913a6b29d182c386e1632be02d6c2b2286a432ffede37a8712b1c15f0e7885c5f2ad74fabe77acf5e8e8fd73678f9cedea752b4aa9fb9cf7b6358f3c0805c0bce8ed97", 0xe6}, {&(0x7f00000008c0)="d5d133c257ee438fcdf8c9e2458bf71d1e055374b2b32a264796a94a006ec2", 0x1f}], 0x3, &(0x7f0000000940)=[{0x90, 0x29, 0x7fc, "01a6c0baef5363fda854bbedbe753059c1eaba55897fd752abc18a44e7576dd7645f423179b13ef0c9a20045e7a4737d6fc06a4088e07a260063159c0694cf9811fffbd0070cf38829ed895c40ae7242fc8b0b0531f642c57d0313681d47c30da92c9ffc7265f549240bf1eb48f2790ec3884363643827c19e9b"}, {0xf8, 0x104, 0x101, "27d5850baa07680f4dd9b061e838e6951a4bc384c068bc298a589d098c3cdcdf697e349b061b2f31c6007651fb6d76e828559c63cc8a61c0a77350c8d7a259248bf0f09937f72884ab55313080f6bdcf7bae8ad37d8d04fe58a9babf48649de3d905a36b98e37abcd7f127780e995cf609d1c70780afe3f88f11bf00da897a241aac5ecd8403cfba6ec556964fed58e555a78119be47d4ef28d181712639601ee7da0608bb531f994e36053258f8092d60d9790886f01d89d233ddaa0ef596150e2ad33a432150cbf218651aae24e7d15e7d76a308f1ad15000000000000a6520000000000"}, {0x108, 0x111, 0x59, "6d34eb51948bc5802ed98ea239bb930b7fbd8ff94ad47955e74bb69c3e6428869505b12d0519e669cc79819142a9c371cd73664457ec13c319d48042942feb14b5f9724efb4b5debc82b7f487a456019f52ec4e51157971d42b5686768add8ca7ccfbd8a005f3cbcdeebeef9d095aff60fc77028292b7e452ac8c8c30772ce8d1f87acbcc4d4a2ff214a1e5517494dcd735c58f34e886cf5c2717897813cfbba6e79fb0417c1f38e0522e8215dad42d6a6356b4f18f057425afbb80ceaa4744332498ad3c08c0d8f5ac1701f710d229db105548d5ba7847bf270ebcc5158cd2b958573988b79f3979a625893be63e5c0f9b951a98cdcd2ba"}, {0x90, 0xff, 0x0, "a0f91c637724b5fe49fb89e011a769c055f605090f53b4a39dd12f11148d270a49d0495df33e3ec62bee84c64377f32a9025ec9bc2bc470e45bd2b8f143774ee838b0f367ecac966a020d75ca7738111848ec14f005341e715a8e7f0a34914f585d3d8092cdc3ded7458df338c1d963b624874a2740539bd55"}], 0x320}, 0x20000000)
accept4(r7, 0x0, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000400012800c0001006d6163766c616e0030000280080003000300000008000100100000001c0005800a000400aaaaaaaaaa2d00000a0004003426f7b68ed1000008000500"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfc)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)

2.606403236s ago: executing program 3 (id=4990):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendfile(0xffffffffffffffff, r0, 0x0, 0x8000000000010000)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x10000004, r3})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'tunl0\x00', <r4=>0x0, 0x10, 0x20, 0x80, 0x4, {{0x43, 0x4, 0x3, 0x9, 0x10c, 0x64, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @end, @timestamp_addr={0x44, 0x4c, 0xeb, 0x1, 0x4, [{@loopback, 0x1}, {@multicast2, 0xfe}, {@private=0xa010101, 0x1}, {@multicast1, 0xffffffff}, {@rand_addr=0xffffffff, 0x9}, {@multicast1, 0x1}, {@multicast2, 0xa6a5}, {@private=0xa010101}, {@remote, 0x10d}]}, @cipso={0x86, 0x87, 0x3, [{0x5, 0x11, "0a9cb508f5aeac9c3656e42f0c76df"}, {0x1, 0x4, "408a"}, {0x5, 0x12, "5dcfd72bf5af864e95c209a03ca455a2"}, {0x0, 0xd, "e3aed5aa22b41050962144"}, {0x6, 0xa, "f1366df81fc5d7e0"}, {0x6, 0x8, "fc120061aa41"}, {0x5, 0xd, "b70af33b897b9683cc0d4e"}, {0x2, 0x12, "871a1c63191155f5a561545b00748419"}, {0x6, 0x11, "6572fb839752e090fd21f3ac53ad9f"}, {0x0, 0xb, "3e0b91a643082b1b52"}]}, @timestamp={0x44, 0x20, 0xe4, 0x0, 0x0, [0x6, 0x6, 0x7, 0x2676, 0x2, 0x7fffffff, 0x101]}]}}}}})
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r8=>0x0})
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r6}, &(0x7f0000000280), &(0x7f00000003c0)=r9}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r9, r8, 0x25, 0x0, @void}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000800)={'syztnl2\x00', &(0x7f00000006c0)={'syztnl2\x00', <r10=>r4, 0x40, 0x7800, 0x7, 0x7, {{0x3b, 0x4, 0x2, 0x38, 0xec, 0x65, 0x0, 0x7, 0x4, 0x0, @multicast1, @loopback, {[@timestamp_addr={0x44, 0x1c, 0x2f, 0x1, 0x4, [{@multicast2, 0x4}, {@private=0xa010101, 0x6c1}, {@empty, 0x9}]}, @rr={0x7, 0x1b, 0x6e, [@empty, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, @remote]}, @timestamp={0x44, 0x8, 0x3b, 0x0, 0x4, [0x10001]}, @cipso={0x86, 0x22, 0x3, [{0x5, 0xd, "8621707842bb32c678880b"}, {0x5, 0xb, "fcf24a2ec3d0b78db4"}, {0x5, 0x4, "43f8"}]}, @rr={0x7, 0x7, 0x1d, [@broadcast]}, @timestamp={0x44, 0x1c, 0x11, 0x0, 0xb, [0x995c4b94, 0x58800000, 0x3, 0x2, 0x7, 0x401]}, @timestamp_addr={0x44, 0x54, 0x3f, 0x1, 0xa, [{@rand_addr=0x64010100}, {@multicast2}, {@remote, 0x7}, {@local, 0xffffffdc}, {@private=0xa010101, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@local, 0x800}, {@remote, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x41f8}, {@loopback, 0x6}]}]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000900)={r9, r10, 0x25, 0x8, @val=@netfilter={0x1, 0x1, 0x7}}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', r4, 0x29, 0x2, 0x3, 0xfffffffd, 0x18, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x7, 0x20, 0xa, 0x5}})

2.551906277s ago: executing program 2 (id=4992):
r0 = socket(0x8, 0x1, 0x1000)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r4=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) (async)
sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x20}}}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="0558faa1f4c3123f973a450c5484e8829b1cecc052be27ff97d61db2cbf74970b25343b096c59b1f1e5dabb46b86", 0x2e}, {&(0x7f0000000200)="ba345207cac19574ad42ab677313318b13c43eaaf950a7adbf450d4b4ec58aac7c0529425297255506eed2c573f1e4e387a90ab3dbbb13261ed81ebdb290c7cd70f34a697f0a50043183f5f2e0c76c4bf997d7c7d997c5da599af81fc16e03ab01fba9fd6e3c7b7bffae1585f9b93e50674adb9e40a009b4d9fcf356abd96240aa67227ccfeb821fe40bd60ab197018839e0b60ce3ed4a2b1db6e43353e1b7a740a9eed4e92f07b89a6ef576ef5097557a79fe97f360e1645ed475", 0xbb}], 0x2}}, {{&(0x7f00000003c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000440)="e7591ce30267de8758509b7ae577b58dd189cbd22f8fd03c4c1d9f0dbe36c30db378e9d2803183c3dae34f2b75727dd524c2688ffc07ac5588109f9567b3e4228964e668c221d5253f40ad6df3ef09256012a0109ec062513c3b9dde26ab87e7262783fe0b7adcb7745abb37ed553d8e01c450bf54e9df311d6e4ab53bb79494566b3efc57cec5b01d3efff645e6400102c704e044846e531b8fae20a3799ebf2a1b04ee7e41fd", 0xa7}, {&(0x7f0000000500)="f899b60b215b612e1675a6a29abadc910c8313840ab1dbbe1cc099189056eb3106d343bc44acebb5940bb3db4e8182f05e23a79da7210c2521779785e3b5a6626c0dfbdf606a58a2b1a7b2b11e14184c9f55ec5f6bf38eceef6fbd36a34eb9391e83233147bdb80e1947e606f6df9373bfbcdfe765509cbe", 0x78}, {&(0x7f0000000600)="3e9ff473fb6b08b2cbef16f6dcc221b15fac41ba4d331dbcd679741b89c83ead688967daa3a8b3a9649d9a21b0bfbd45f27fd4dd7ac5db734be9aa192324e0a7d9066fa6c02420794397473ae44f8396e1988f836ca42cea4098ee25c7606fdeb294939ca3aa1271f6ece79c212dd371041070189152308259aa7eacfc17ac8d03ca7b9f695438cd1f7ec8017cb22944852fcfabd46adc7c3eb4", 0x9a}, {&(0x7f00000006c0)="e92a9cc47bb9788e22d4508378541b5ac96cc5cb9b8549ccf9721e3c541b74c54d5ae50d7646a1435e61cfa999501f7b629df29634f93b9f1caa5e63", 0x3c}, {&(0x7f0000000700)="9843ba5b8bad116ac3", 0x9}], 0x5}}, {{&(0x7f00000007c0)=@nfc_llcp={0x27, r4, 0xffffffffffffffff, 0x1, 0x17, 0x40, "92c157b2f5874de6063faf0a8d8fd3eda72e04c120794569281431abb0cfa77cfe4f6c6cc953a4dbc4832c3902a85da2ae2be22a2df0614bfee921beb3638e", 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000840)="145c01c9ef1cf29ccc6c8cf808ae5da36753cda6d4bb06384b74e5c79841816025e23ebc029ba1faea17497fc4cce8d18f536371b03849e9c2fa12a26b808e0f19455f22ccca3e76ad472bee410a7e976f715c8e0915d893dc47abeec11cdaa78732d8fb5f83fba6016333c15c7b5b798100920eb231f596b7c6ed61563d05be363f3ce3ca03a75d52", 0x89}, {&(0x7f0000000900)="d47f65470c2a9597fb255b2ff0c2aa86f351770cf2952c484a3941a9ef7a8e98fd796bfc6a906cd5579fb4b91d5cef8d967f532fe99e1512475c0e959e40a11746a730227deafcf212236fa6d7d0187e2d01fdcea37f3b2565b28583b11d88ad59a707f0f1a507bff6502aca4cfd4dfa631c7dae479c226e6034459b50025f735bdf411060c9d7740d51739669d6d22d34fc63f8719d9d463aac91d3581b81930c327dbf8fec94576125a447c96a5d0bd4", 0xb1}, {&(0x7f00000009c0)="e21b7ac64501789a9cbc6ead3241337be700ccbd4422bfa859e5acb97adf5669ecab0dca095b9adcf84c0c8c8c8a257d5d4db7f33489e8e7a8156705bfc25f5ee36e563b64a72bf0bc26c6d2c4ea0123f4cb8538081f580ff6bd5ff41d51644111bac63bf2a5e690d00eb4f2d0017971d07deccbb32e2426c07c43a3682359152a26df6ceaebab7b5a9c2b639051ab8c490ea86c4884a42ddb96ff938899d2", 0x9f}, {&(0x7f0000000a80)="23c41302e5fa9d92c8354d6365ae9a2a2f91be8b75c442853e022716a6f563ec3c80e4b0ffd23ce6a12b7019c73979f450b530b7e73b229ee866b20ae9cf9f34b77ea211129410ae3ffa42", 0x4b}, {&(0x7f0000000b00)="c8191a9c96a6185a27fdf64616386c8067ec8e42", 0x14}, {&(0x7f0000000b40)="d1382ab65bf4f55a2c0271158064d2ae8cb9a3724649e4ca47d8e8c9bcda37bf8b14e6ddb467d882bdbdb952e2851093e551dd13a5ce0dea4b5f9b0aba8fd583d2fff1952cd2a893efb247df0674ae", 0x4f}], 0x6, &(0x7f0000000c40)=[{0x100, 0x88, 0x1, "51034696065621aba0fe9ce8d4b26d48cf50cb38c2d77cfd750faaa901a4a8784c4fafd4258af33da01fc39cdb15bc34929ee082624248fe82a19610e2cc86f17370efe1f7f2ff47d412eee0df2454e21ee96f31d6bc4818bb86c56f5844c67379cb0035653ed01e3c7c92121186d0c1932098691c2e2c7337abc449b1d88e0698113f4d857bc3b52e0ee22c66b99b27c9a112b8ea65282d6dfc40354b94033f7f4e1b2aca78b0ab4fed1e295d256eac8592ac0e9ccf86251a7772a4a1c924df76b4aa6eff8e1816cd258bf42b11af5dd60d4dce2862e61411b1cbd1f45b5b008c8e16e3ec00d2711fd74ccd7a37"}, {0x110, 0x10d, 0x5, "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"}, {0x48, 0x84, 0x200, "75b030045577f3b7f15f227849e720ac72f8b67802d11d9fc6df3dcea6c9e4f2eb6a334d03d6c8b742fe0113c48ed2a3bd62bfd0f90e"}, {0x98, 0x115, 0x401, "590a966fd01dcca5f66dd4c729716b48cbb8bb0e51396d1567be24589ba3c14129cf55fa60f1f2010d4be25fe1bae0a1fc92d67ee2e64a936702dbe84e7ce1d67d15b0e91f23934afcb1bdf96cf9db8b022e560cb7dd319a99381d18b1f46c3ffead5f27634f692da8c0004094fb49a9fd5dc99f95e9e54040ba3396e93c61fe40291e"}, {0x20, 0x29, 0x7fff, "299eaeae78f6a85d5a7df084ac9cb1"}, {0x88, 0x103, 0x3, "132f8691d012a1094708040fde97ada5739c4df645b15d71e9ba954607a582a1f2a2134bc822bfccd3db9d0d2f6403c4416ec796601c66b5061ae7ebc452d468df5626bbff39395cb0e9ead9690dcff66f1f8e5e31d346abd1cc7f4261236465b87a96c5f75ea0a647f26c39e518ec6d7801d54e79"}, {0x1010, 0x102, 0xfff, "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"}], 0x13a8}}], 0x3, 0x40001)
getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000370429bd7000fcdbdf2500000000", @ANYRES32=r5, @ANYBLOB="890c020008010500280012800a000100767863616e0000001800028014000100000000", @ANYRESHEX=r0], 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x20000000)

2.434483595s ago: executing program 2 (id=4993):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newneigh={0x34, 0x1c, 0x400, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x0, 0x0, 0x20, 0x8, 0x6}, [@NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_SRC_VNI={0x8, 0xb, 0x7e3}, @NDA_PROTOCOL={0x5, 0xc, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48800}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="a00001000000000008002000d8000000140012800a00010069706f696200000004000280"], 0x3c}}, 0x0)
sendmsg$netlink(r1, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x2c, 0x2e, 0x503, 0x40100, 0x0, "", [@nested={0x1c, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0xb, 0x0, 0x0, @fd=r0}]}]}, 0x2c}], 0x1}, 0x1)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r3 = socket(0x2d, 0x2, 0x0)
unshare(0x6020400)
bind$xdp(r3, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26)
r8 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r8, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0xffff, 0x2, 0x0, {0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x400}}}, 0x32)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e)
r10 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r10, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26)
r11 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
ioctl$PPPIOCATTCHAN(r11, 0x40047438, &(0x7f0000000500)=0x2)
ioctl$PPPIOCBRIDGECHAN(r11, 0x40047435, &(0x7f0000000200)=0x1)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
sendto$inet(r4, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)

2.390085849s ago: executing program 1 (id=4994):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newqdisc={0x5c, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1, 0xfff2}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

2.115726061s ago: executing program 2 (id=4995):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'})
r1 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0xfffffffffffffe98, 0x1, {0xfff3, 0xffff}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400021d0000000000000000008bc970379fd4fd00ba40d45bf462fbfc788700000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES8=r1], 0x68}}, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r3, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/23, 0x17}, 0x400}], 0x1, 0x102, 0x0)
setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4)
setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x7, 0x98, [@empty]}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880)
r4 = socket(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1300}, [@printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x41}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x2}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) (async)
socket(0x10, 0x803, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0xfffffffffffffe98, 0x1, {0xfff3, 0xffff}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="0400021d0000000000000000008bc970379fd4fd00ba40d45bf462fbfc788700000000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES8=r1], 0x68}}, 0x0) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
recvmmsg(r3, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=""/23, 0x17}, 0x400}], 0x1, 0x102, 0x0) (async)
setsockopt$inet_int(r3, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) (async)
setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) (async)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async)
syz_emit_ethernet(0x36, &(0x7f0000000080)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x7, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x7, 0x98, [@empty]}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) (async)
socket(0x10, 0x3, 0x0) (async)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)

1.927360398s ago: executing program 3 (id=4996):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$XFS_IOC_GETBMAPX(r0, 0xc0205838, &(0x7f0000000040)={0x4, 0x10000, 0x80000000, 0x6, 0x8, 0x1, 0x3})
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x4}, 0x1c)
connect$inet6(r2, &(0x7f0000000380)={0xa, 0x4e23, 0x0, @mcast1, 0xfffffeff}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r3, &(0x7f0000001200)=[{&(0x7f0000000280)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac710aa7d0000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0x3, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001a0"], 0xfdef)

1.882025738s ago: executing program 1 (id=4997):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'veth1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xed)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f00000002c0)={<r2=>r0, &(0x7f00000000c0)='-\'\x00', 0x0, &(0x7f0000000100)={@align=0x6, {0x7, 0xc00, 0x1, 0x1}}, 0x80, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x9})
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000300)=0xfff, 0x4)

1.822641872s ago: executing program 2 (id=4998):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x24, 0x26, 0x29, 0x70bd2d, 0xfffffff9, {0x81}, [@typed={0xe, 0x15e, 0x0, 0x0, @binary="82662ac97a614e81d535"}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c811}, 0x48054)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c2040}, 0x0)

1.753450827s ago: executing program 0 (id=4999):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c)
recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0xa}], 0x1, 0x10122, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
preadv(r3, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000040)=""/248, 0xf8}], 0x2, 0xe9, 0x7)
r4 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$FIGETBSZ(r4, 0x2, &(0x7f0000000240))
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, 0x0)
setsockopt(r2, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8)
setsockopt(r2, 0x84, 0x80, &(0x7f00000002c0)="1a0000000200", 0x6)
shutdown(r1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628)
r8 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r8, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

1.633775881s ago: executing program 2 (id=5000):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e617400240002800800014000000000080005400000001708000640000000000800024000ddff010900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
r1 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x6, 0x5, 0x1)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x48, r4, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x65}}}}, [@NL80211_ATTR_IE={0x28, 0x2a, [@mic={0x8c, 0x18, {0x18f, "586ac36dc19c", @long="0230bf20d245a44aa066b220ac55f794"}}, @ibss={0x6, 0x2, 0x38}, @chsw_timing={0x68, 0x4, {0x2, 0x8}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x808}, 0x4000094)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="06001500070000000c00168008000100"], 0x38}}, 0x10)
r6 = socket$netlink(0x10, 0x3, 0x9)
bind$netlink(r6, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc)
sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x110)
bind$netlink(r6, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x2, @empty, 0x4e24, 0x0, 'none\x00', 0x14, 0x3, 0x33}, {@local, 0x4e23, 0x1, 0xe5, 0x400, 0x40}}, 0x44)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x52}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=ANY=[@ANYBLOB="380000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100804000100000008001b000000000008002900000001"], 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f00000002c0)={<r8=>r7, &(0x7f0000000100)='-/^\x00', 0x8200, &(0x7f0000000140)={@align=0xa, {0x3, 0x9, 0x8279, 0x6}}, 0x9, &(0x7f0000000780)={@_ha_fsid}, &(0x7f00000001c0)=0x9c82})
connect$inet6(r8, &(0x7f0000000300)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1c)

1.631239956s ago: executing program 3 (id=5001):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d8", 0x78, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfeac, 0x0, 0x0}, &(0x7f0000000000)=0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, 0x0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4050)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0xd6f739e98d10f7c2}, 0x24000000)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
syz_emit_ethernet(0x5e, &(0x7f00000001c0)={@multicast, @local, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f700", 0x24, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x3a}], @ndisc_ns={0x87, 0x0, 0x0, @loopback, [{0x22}, {0x4}, {0x2}, {0x18}]}}}}}}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xabe}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040800}, 0x0)
sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

1.599580222s ago: executing program 1 (id=5002):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="13df0000", @ANYRES16=r0, @ANYBLOB="09020000000000000000010000000500040002000000060001004e200000"], 0x24}, 0x1, 0x0, 0x0, 0x200000d1}, 0x80) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00'}) (async)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1) (async)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000a00)={0x100, r5, 0x2, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x401, 0x71}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5716c315c736e49f3d7d72b497551e3af9174dca785064fb"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d42ecfcb1e98df42e02338195fe3104477d9589fbee63dfe"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x100}, 0x1, 0x0, 0x0, 0x8084}, 0x800) (async)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r3, 0x712, 0x70bd25, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000640)="ad56b6c50129ff487c4828bbb5795f820fae9d6dcd3292ea54c7beef91355603000000c2727bbe8809b3af8766f19759125f70e1b891e0f4ccdc7035e267ecb7c20f3bc67745db169e5e60565a56bd4de19ef0dbd448470b2e3ad49dbb8161316eda11d2d29aa1f517ceb674fa7579fe0655bc9d", 0x74)
r7 = accept4(r6, 0x0, 0x0, 0x800)
sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e89296", 0x61}], 0x2}], 0x1, 0x40800) (async)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) (async)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}) (async)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) (async)
sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1}}, 0x840)

1.403490805s ago: executing program 4 (id=5003):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="170002000000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c000280050011007f000000"], 0x3c}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0xa, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e24, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x10}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x33}]}, 0x24}}, 0x48850)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$net_dm(&(0x7f0000001140), r3)
sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x8800)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000780))
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000480))
sendmsg$nl_route_sched(r2, &(0x7f0000002b00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001880)=@deltfilter={0x1214, 0x2d, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xfff1, 0x2}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x3e}}, @TCA_RATE={0x6, 0x5, {0x81, 0x6}}, @filter_kind_options=@f_fw={{0x7}, {0x87c, 0x2, [@TCA_FW_POLICE={0x840, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7f}, @TCA_POLICE_RATE={0x404, 0x2, [0xe, 0xffff, 0x2, 0x4, 0xffff, 0x866, 0x2, 0x3, 0x4, 0xac7d, 0x1, 0x6, 0x3, 0xee, 0x7f, 0x7, 0x1, 0x2, 0x1ff, 0x7, 0x6, 0x0, 0x6, 0xb, 0x1, 0x3ff, 0xc4, 0xfffffffb, 0x8, 0x5, 0x9, 0x6bc40000, 0x8, 0x4, 0x3, 0x8, 0x6, 0x100, 0x6, 0xc, 0x6, 0x9, 0x9, 0x2, 0x7, 0x8000, 0xffff, 0x7, 0x7fff, 0x3, 0x64b, 0x6, 0x1, 0x101, 0xbf, 0x2, 0x7, 0x2, 0xff, 0x2, 0x3, 0x4, 0x0, 0x6, 0x6, 0x7, 0x4, 0x400, 0xff, 0x5, 0x67fd, 0x8, 0x5, 0x8, 0x3, 0x0, 0x2, 0x256ecc82, 0x73c, 0x3, 0x8, 0x0, 0x8, 0xff, 0x9, 0x9, 0x7fff, 0x2, 0x8, 0x0, 0x10, 0xfffffff7, 0xfffffff8, 0x8fd, 0x2, 0x3060, 0x0, 0x5, 0x10, 0x9, 0x81, 0x200, 0x9, 0x6, 0x7, 0x9, 0x8a, 0x0, 0x7, 0x7, 0x82a, 0x88e, 0x9, 0x400, 0x9, 0x9, 0xbd3, 0x3, 0x8, 0xf, 0x4, 0x4, 0xb3d, 0x9, 0x6, 0x0, 0x80000001, 0x7, 0x7ff, 0x10001, 0x8, 0x7fffffff, 0x80000001, 0x2d2, 0x8, 0x9, 0x3, 0x3, 0x0, 0x7, 0x3, 0x103, 0x40, 0x7f, 0x0, 0x0, 0x9, 0x0, 0x2, 0x1, 0xffffffff, 0x1, 0x4, 0x9, 0x2, 0x6, 0xfffffffb, 0x5, 0x0, 0x9f, 0x200, 0xf, 0xb, 0x94, 0x4, 0x509, 0x10000, 0x80, 0xe, 0x9, 0x2, 0xffffffff, 0x63a7, 0x0, 0x1, 0x3, 0xc367, 0x11, 0xfffffffe, 0x9, 0x1, 0x7fff, 0x4ec5, 0x9, 0xd, 0x5, 0x8, 0x6, 0x2, 0x9, 0x7, 0x81, 0x9, 0x0, 0x6, 0x7, 0x8, 0x0, 0xd1, 0x3f7f, 0xc60, 0xfa, 0x9, 0x6000, 0xff, 0x6bf, 0x5, 0xdd, 0x3c7, 0x2, 0x7, 0x3, 0x2b84, 0xdcb6, 0x5, 0x100, 0x7, 0x81, 0x7, 0xff, 0x5, 0x6, 0xe, 0x6, 0x2, 0xc0, 0x6, 0xfffffffc, 0x9, 0x3e57, 0x466, 0x4, 0xf9, 0x8, 0x4, 0x9, 0x3, 0x5, 0x1000, 0x5, 0x9, 0x7, 0x4, 0x9, 0x558, 0x6, 0xfffffff8, 0x5, 0x8, 0x5, 0x5, 0x7f, 0x7, 0x2, 0xfff, 0x5]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x7, 0x6, 0x4, 0xffffff00, 0x80000000, 0x400, 0x1, 0x6, 0x5, 0x4, 0x0, 0xffffffff, 0x7, 0x100, 0xfff, 0xda, 0x7fff, 0x9, 0x6, 0xf, 0x7f, 0x4, 0xfffffff8, 0x7, 0xdff, 0x0, 0x1, 0xd, 0x6, 0xfff, 0x800, 0x80000000, 0x5, 0x9a5, 0x80, 0x0, 0x4, 0x5f5, 0x10001, 0x3, 0x5, 0x100, 0x0, 0x7, 0x4f, 0x1, 0x3, 0x7, 0x14, 0x143, 0x7, 0x4, 0x8, 0x7b55, 0x9, 0x2, 0x8, 0x7ff, 0x2, 0x8, 0x7, 0x1, 0xfff, 0x7, 0x1000, 0x3, 0x7f, 0x3498, 0x2, 0x8, 0x6, 0xd43, 0x4, 0x8, 0x3, 0x3, 0x7, 0x8fdb, 0x61, 0x1000, 0x80000000, 0x100, 0x0, 0x40, 0x8, 0x5, 0x4, 0x10001, 0x9, 0x400, 0x800, 0xffff86f4, 0x465a60c8, 0x3, 0xa9c, 0xd39e, 0x7, 0x8, 0x9, 0x9, 0x4, 0x5, 0x81, 0xe214, 0x3, 0x6619, 0x0, 0x8, 0x4, 0x401, 0x9, 0x6, 0x3, 0x9, 0x958, 0x8, 0xd1, 0x5, 0xfffffff7, 0x4, 0x3, 0x7, 0x6, 0x3ff, 0x4a, 0x10000000, 0x5, 0xe, 0x3, 0xda1, 0xffff, 0xc00, 0x9, 0x4, 0x6, 0xe3, 0x0, 0x1, 0xfffffff9, 0x948b, 0x1, 0x3, 0xfff, 0x3, 0x8, 0x0, 0x4, 0xdcd0, 0x1, 0xe, 0x8, 0x478459f, 0xff, 0x0, 0xb4d, 0xffffff7f, 0x2, 0x3, 0x3, 0x5, 0x7, 0x2, 0x5, 0x1, 0x7, 0x4, 0x80000000, 0x166, 0x0, 0x3339, 0x0, 0xa, 0x8, 0x0, 0x401, 0xffffff86, 0x7fff, 0x8, 0x0, 0x3, 0x5, 0x0, 0x9, 0xfffffff3, 0x634, 0x0, 0x4, 0x4, 0x6, 0x8, 0x6, 0xff, 0x4, 0xf8, 0x6, 0x1dd, 0x5, 0x2, 0xffff, 0x6, 0xffffac71, 0x6, 0x5, 0xb7, 0x800, 0xe, 0x9, 0xb1e, 0x3, 0x6, 0x0, 0x9, 0x100, 0x5, 0x6d71, 0x20000, 0x2, 0x200, 0x5, 0x9, 0xca6, 0x0, 0xd, 0x71, 0xd, 0x8, 0x6, 0x6, 0x0, 0xb644, 0xfff, 0xa00, 0x9, 0x3, 0x5, 0xad31, 0x100, 0x1ff, 0x94, 0x0, 0x5, 0x7, 0x1000, 0x552, 0x9, 0x8, 0x9, 0x7fff, 0x5, 0x3ff, 0x1, 0x7, 0xb, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE64={0xc, 0x8, 0xff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x1, 0xfff1}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x5}}, @TCA_FW_POLICE={0x14, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}]}, @TCA_FW_INDEV={0x14, 0x3, 'syzkaller1\x00'}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x16}]}}, @filter_kind_options=@f_route={{0xa}, {0x8d0, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x45}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf1}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xc, 0x2}}, @TCA_ROUTE4_POLICE={0x8ac, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3ff, 0x20000000, 0x70, 0x2, 0x4, {0x7, 0x1, 0x400, 0x7ff, 0x1ff, 0x8}, {0x9, 0x3, 0x2, 0x200, 0x8ee, 0x600000}, 0x8, 0x7, 0x10}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4e2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x200000}, @TCA_POLICE_RATE={0x404, 0x2, [0xe6, 0x1, 0x4, 0xff, 0x6, 0x101, 0x6, 0x8, 0x1, 0x91, 0x3, 0x5, 0x3, 0x1, 0x2, 0x3, 0x1a8a, 0x5, 0xfffffffc, 0x6, 0xe825, 0x7, 0x1, 0x8, 0x8, 0x3, 0x7, 0x2, 0x401, 0x7, 0x2, 0x3, 0x0, 0x2, 0xfffffff8, 0x80, 0x3, 0x0, 0xfffffffd, 0xe4, 0x4, 0x8b59, 0xee, 0x9, 0x7fffffff, 0x8, 0xffffffff, 0x6, 0x80000000, 0x80000000, 0xe0fb, 0x1, 0x80, 0x0, 0x5, 0xb0b, 0xfffffffa, 0x3, 0x7d, 0xfffffffc, 0x80000001, 0x1, 0xde, 0xce6, 0xff, 0x3ff, 0x2, 0x8, 0xfffffff8, 0x9, 0x5, 0xb40, 0xffffff80, 0x80000001, 0x100, 0x7f0, 0x9, 0x1, 0x6, 0x2, 0x6, 0x100, 0x3, 0x1ff, 0x4fb0, 0x0, 0x9, 0x2, 0xfffffff5, 0x5, 0x8001, 0x3ff, 0x100, 0x9, 0x6, 0x3, 0x6, 0x0, 0x67, 0x1ff, 0x51, 0x182, 0x7, 0x3, 0x7500000, 0x0, 0x7fffffff, 0x5, 0x1, 0x7fff, 0x2, 0x10001, 0xf9, 0xfb1, 0x200, 0xfae3, 0x8, 0x3, 0x101, 0x400, 0x9, 0x7ff, 0x1, 0x6, 0x3c31a4bf, 0x8, 0x974, 0x1, 0xc7, 0x8001, 0x3, 0xf, 0x92, 0x9, 0x5d6e2bc0, 0x0, 0x2, 0x6, 0x2, 0x80000000, 0x3, 0x1, 0x2, 0x91, 0x8, 0x6, 0x8, 0x1, 0x4, 0x200, 0x6, 0x2, 0x0, 0x1, 0x9, 0x1000, 0x7, 0x736b, 0x4a94, 0x2, 0x3, 0x63, 0x7, 0x2b, 0x7f, 0x4e44, 0xd03, 0x200, 0x2, 0x6, 0x5, 0x9, 0xa, 0xc4, 0x365, 0xcd, 0x7, 0xffffff0b, 0x9, 0x10000, 0x0, 0x7fffffff, 0x3, 0x1, 0x9, 0xfffffff9, 0x2, 0x80000001, 0xfb, 0x5c01, 0x101, 0x4, 0x80000001, 0x5, 0x40, 0x9, 0xffff4df0, 0x3, 0x400, 0xcc, 0x5, 0xd58, 0x44, 0x3, 0x9, 0x3, 0x5, 0x9, 0x3, 0xa4, 0x2, 0x4, 0x9, 0xa, 0xf00000, 0x1, 0x10001, 0x7f, 0x7fff, 0xfffffffe, 0x9, 0x3ff, 0xfffffbff, 0xffffffab, 0x1000, 0x10001, 0x10000, 0x9, 0x3, 0x1, 0x8, 0xf9db, 0xfa0, 0xfffffff9, 0x9, 0x2, 0x8, 0x5, 0x80000, 0xfffffffb, 0x4, 0x3, 0x8, 0x7, 0x100, 0x49, 0x3, 0x6, 0x3, 0x2, 0x3, 0x7, 0xd, 0x1, 0x1, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x9, 0x2, 0xa063, 0x7, 0x3, 0x8, 0x6, 0x40, 0x4, 0xf, 0x1, 0x1, 0x7, 0x0, 0x8, 0x1, 0xffffffff, 0x61, 0x9d7, 0x8, 0x0, 0x7, 0x350, 0x2, 0x7, 0xe, 0x2, 0x790ba9d7, 0x5, 0x50, 0x7, 0x0, 0x4, 0x7, 0x5, 0x100, 0xa6e, 0x69, 0x6, 0x1, 0x7fff, 0x0, 0x5, 0x60000000, 0x4, 0x51, 0x3, 0x4, 0x7, 0xfff, 0xc82c, 0x3, 0x101, 0x6ef7, 0x6, 0x8, 0x2, 0xff, 0x4, 0x7, 0xe, 0x5, 0x6, 0x8, 0x4, 0x0, 0x7, 0xffffff81, 0x0, 0x0, 0x4, 0x7, 0x2, 0xfffffffc, 0xffffffff, 0x2, 0x3, 0xfffffff8, 0xe05a, 0x6, 0xf20, 0xffffffef, 0x1ff, 0x2, 0xffff, 0xc9, 0x80000001, 0x3, 0x200, 0x3, 0x0, 0x1, 0xdaeb, 0x7, 0xe89, 0x10, 0x4, 0x5, 0x49, 0x80, 0x4, 0x80000001, 0xb01, 0x1, 0x9, 0xb, 0x7, 0xfc, 0x5a, 0x6, 0x8, 0x3, 0x0, 0x6, 0x0, 0x1, 0xedd4, 0x800, 0x739, 0x6, 0xfffffffe, 0x3, 0x4, 0x8, 0x1, 0xd, 0xee9, 0x9, 0xccd, 0xf, 0x9, 0x80, 0x4ec, 0x9, 0x7, 0x8000, 0x9, 0x7, 0x4, 0x9, 0x8000, 0xfffffff5, 0xffff, 0x8, 0x81, 0x7f, 0x2, 0x1dd5, 0x9, 0x1, 0x101, 0xffffff00, 0x401, 0x101, 0x80000001, 0x0, 0x9853, 0x9, 0x1, 0x3, 0x7, 0x3, 0xd, 0x4642992d, 0x8, 0x2, 0xc, 0x3, 0xa2a1, 0x2, 0x2, 0x940, 0x13, 0xf12, 0x0, 0x0, 0x3, 0x4, 0x3906, 0x400, 0x2, 0x3, 0xffffffff, 0x80000, 0x9, 0x81, 0x9, 0x8, 0x0, 0xfffffc00, 0x1, 0x7, 0x1, 0x0, 0x1, 0x64, 0x3, 0x0, 0x400, 0x9ac, 0xffff, 0xad9, 0x2, 0x0, 0x0, 0x2b, 0x800, 0x9, 0x8, 0x0, 0xb, 0xfffff000, 0x4, 0x7, 0x4, 0x15d2, 0x8, 0x0, 0x2, 0x6, 0x435, 0x38d, 0x0, 0x2, 0x2, 0x800, 0x0, 0x0, 0x98d0, 0x0, 0xa, 0x9, 0xfffffffe, 0x77, 0xe, 0x1, 0x8, 0xfff, 0xffffffff, 0x0, 0x7, 0x7, 0x7, 0x6, 0x398d, 0xa, 0x8001, 0x2, 0x2, 0x1, 0x7a4d, 0x161, 0x7f, 0x80000000, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc55, 0xffffffffffffffff, 0x8, 0xf, 0x2, {0x9, 0x0, 0x6, 0xa, 0xb, 0xfffffff8}, {0x9, 0x1, 0x1, 0x2, 0x8a5, 0x4}, 0xcb, 0x3, 0x8000}}]}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xb9}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_RATE={0x6, 0x5, {0x8, 0x1}}, @filter_kind_options=@f_flower={{0xb}, {0x44, 0x2, [@TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0xffffff00, 0x0, 0xff000000, 0xffffffff]}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x88a8}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5, 0x44, 0xca}]}}]}, 0x1214}, 0x1, 0x0, 0x0, 0x20000001}, 0x10040000)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xc}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0x2, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffff190, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@multicast1, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8)
listen(r4, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x100}}}}}}, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x11, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x300}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x17}}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x56401, 0xfffffbfc, 0x8, 0x3, 0x3}, 0x1c)
r7 = socket$kcm(0x2, 0x3, 0x84)
sendmsg$inet(r7, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000007000000890704ac14140f0011000000000000000000000001000000fc000000000000001400000000000000010000000c"], 0x68}, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_queued\x00', 0x0, 0x0)

1.350489357s ago: executing program 3 (id=5004):
r0 = socket$inet6(0xa, 0x2, 0x0)
read(r0, &(0x7f0000000240)=""/155, 0x9b)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94)
recvmmsg(r0, &(0x7f0000007280)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f00000070c0)=""/148, 0x94}], 0x1}, 0x6}], 0x1, 0x101, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.34911201s ago: executing program 1 (id=5005):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c4000000190001000000000010000000070000000000000000000000000000016401010200000000000000000000000000000500000000000a00008006000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000a7c9043d000000000000000000000000000000000000000008000000000000000000000000000000fbffffffffffffff000000000000000002000000000000000000000000000000040000000000000000000000b86b6e0000010001000000000c001500", @ANYRESDEC=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4008006}, 0x40014)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000300000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0)

1.233079159s ago: executing program 1 (id=5006):
syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
r4 = socket(0x23, 0x80805, 0x0)
listen(r4, 0x0)
connect$phonet_pipe(r4, &(0x7f0000000080)={0x23, 0xed, 0x80, 0x3}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r5 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14)

642.822478ms ago: executing program 3 (id=5007):
r0 = socket$alg(0x26, 0x5, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000030426bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="b57dad88000000001400b85f3126010067656e6576650000040002800a000100aaaaaaaaaa3d00000800040044000000"], 0x48}}, 0x0) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="763894147583ddd056fea56a8800", 0x0, 0xe00, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 64)
r5 = accept4(r0, 0x0, 0x0, 0x800)
setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async)
sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000840)="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", 0x10d}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0", 0xfffffda3}], 0x3, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x4044840}], 0x2, 0x4040800) (async)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

285.763164ms ago: executing program 4 (id=5008):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket(0x25, 0xa, 0x2)
setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) (async)
bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10)
r2 = socket$kcm(0xa, 0x3, 0x87)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x5, @loopback, 0x1}, 0x80, &(0x7f0000000140)=[{0x0}, {&(0x7f0000002b40)="1b", 0x1}], 0x2, 0x0, 0x0, 0x900}, 0x20040004) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000001080)={&(0x7f0000000200), 0xc, &(0x7f0000001040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}]}]}, @NFT_MSG_NEWCHAIN={0x84, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_CHAIN_HOOK={0x54, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1d73b40d}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x830e8a4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}]}, @NFT_MSG_DELSET={0x80, 0xb, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1a}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe12235124d9d0fe7}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWTABLE={0xec, 0x0, 0xa, 0x801, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0xb5, 0x6, "795f758a99993610aa98bf9805531c27148395c1f7b4026b4423d25aa31aaeb9c4a4a0b386d9dc9d241a3a41ce765b495316971541935d168974562e50509a3090358a4400046214197ab7c90dd610221331062c23b951c71b30e37d62f64646670da0f6961c7c6faf156639a11c7c0865f65539e0da32550038008e0b9e88a5d21b668f6c19f66ac6ec8394507243a5e76452c8fd0666c1e5938c95e1145c5b55836092723ade86475e6c9221ba047615"}]}, @NFT_MSG_NEWOBJ={0x12c, 0x12, 0xa, 0x204, 0x0, 0x0, {0xa, 0x0, 0x6}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_DATA={0x118, 0x4, 0x0, 0x1, [@NFTA_SECMARK_CTX={0x27, 0x1, 'system_u:object_r:passwd_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x21, 0x1, 'system_u:object_r:sysfs_t:s0\x00'}, @NFTA_SECMARK_CTX={0x29, 0x1, 'system_u:object_r:groupadd_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x1b, 0x1, '/usr/sbin/cups-browsed\x00'}, @NFTA_SECMARK_CTX={0x29, 0x1, 'system_u:object_r:hald_acl_exec_t:s0\x00'}, @NFTA_SECMARK_CTX={0x26, 0x1, 'system_u:object_r:kvm_device_t:s0\x00'}, @NFTA_SECMARK_CTX={0x29, 0x1, 'system_u:object_r:usbmon_device_t:s0\x00'}]}}, @NFT_MSG_DELFLOWTABLE={0x300, 0x18, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x230, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'macvlan1\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'vcan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'batadv0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK={0x70, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'batadv_slave_1\x00'}, {0x14, 0x1, 'vxcan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELTABLE={0x14c, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x64, 0x6, "046d17d50bf35032e4b30149a878ee218f74cbb244128eae796a9110b71197703a44c882ff53d61672c8b445b83bc73f08d2e3aaf01540ed191ef4d297aa30c3c671d42df11c363b0bb3394767bd805d59185e984d6603f3c3d4a3ce415c796e"}, @NFTA_TABLE_USERDATA={0xab, 0x6, "e8cc8d463d60b33ce7d1366cf0e4ace9cef816bc0a4972d28173ae00bee567c36483126632c0cad68310fc2e8b0138901fb38b59b33c60b8df62f349e42f172a869e83134e2c7ca0b2727e7977635945fa23694f2baf5c310ddd491cb2a7dcfe6cea3acc866819a4c3a125409a55ad6f78f37504d4fad807b5f388af719836a6d31b88213b1c606a5147a90d4620e044ae7379a9b7139b0f68ab475fcca78384599e2935d1e6ac"}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x854}, 0x1, 0x0, 0x0, 0x8000}, 0x810)
sendmsg$inet_sctp(r1, &(0x7f0000000780)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000a7b7ed6f0000008400000007000000ffffffff"], 0x18, 0x4040010}, 0x4000000)
accept4$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x0, @fixed}, &(0x7f0000000180)=0xe, 0x80800) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000100001002cbd7000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="a82100e1626e52301baac9f6b1c946a2f6330080030000320003006261746164765f736c6176655f310000140006000011190ff39ec72e1c846529f04f0a0001800c000700ad0000000c00004024891305693c947b4544fae2ab05dc91ffc71f76015cde75c7cec8f3a2b0bdb5462b68cbcdb9b4aa9a401bcd2bc3e7a8e32a95436cad3945212ae07d4cb85497de742841473dbbce4bd0f5e95b0de9df126b217b5359bf8f31858a9d3cb2496393d04c76dd910f93f7af4890934ad1945a593028285fee7bba362cbfb789bcef23e98fe95e9184f2167d18e6808861d0d2f81f99f58f83b4f5d6afff971b2479fea300b9f2"], 0x48}}, 0x20008044)

266.342063ms ago: executing program 2 (id=5009):
socket$inet6_udp(0xa, 0x2, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair(0x1, 0xa, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0xa, 0x0, &(0x7f0000000000))
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0xfffffffd}, 0x1c, 0x0}, 0x0)
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x550, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) (async)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x550, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f00000001c0)=""/24, 0x7, 0x0, 0x6, 0x0, &(0x7f00000002c0)="b89be705c8bc"}, 0x50)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$tipc(0x1e, 0x2, 0x0)
r5 = socket(0x2, 0x5, 0x0)
connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) (async)
connect$inet(r5, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$alg(r5, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)
r6 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
writev(r6, &(0x7f00000005c0)=[{&(0x7f00000000c0)="052f", 0x2}], 0x1)
mmap(&(0x7f00004dd000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040))

184.239724ms ago: executing program 0 (id=5010):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd01000100000008"], 0x18}}, 0x20004018)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5)
sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000ffdbdf250100000004000180100002800c0001800800010003000000e0a2333d8b7ecf514a7d5ef2e4d813601e10ec372f91afb04a8ec42d0eacfe3db358476baf3bef0e0f26839fb510a924ba60204e05f6098be2e46a3f05072b84334287b7fa10fd3de5650b778bd1d1581dbe01a8b52d469fd73e679f06350a44cb7dffa509f1039e54adae835156b4ad642699c9836fe2fec226ce7bac1e56694a565e533d74e2e66d5d3b2ac3ba46c274f814"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r7)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x50, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31008cac5e4baea3402cf400000014000380100000800c00018006000100000000001400000011000100000000"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000ffff2bbd7000fbdbdf2500000000c71f3f05e8b660526b9f775562c404b1ef9438b4d221488eb496a0b4f485fafc0539f381a3fb65749ea199fe1e9da9ffa246bdb5af394cedf3d49c54f6022ea74315b3c5986005ea", @ANYRES32=0x0, @ANYBLOB="040a0500a32000001c0012800b00010062726964676500000c0002800500170010000000"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000440)={'batadv0\x00', <r11=>0x0})
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000104000004020000000000000000", @ANYRES32=0x0, @ANYBLOB="0300060000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11, @ANYRESDEC=r3, @ANYRES32], 0x44}, 0x1, 0x300}, 0x10)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0)
getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000001c0)=0x4)
unshare(0x20000400)
r12 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_DAEMON(r12, 0x0, 0x487, 0x0, &(0x7f0000000040))

21.878558ms ago: executing program 3 (id=5011):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000240))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@private, @multicast1, <r3=>0x0}, &(0x7f0000000180)=0xc)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@private0, r3}, 0x14)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x307, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4050}, 0x40000)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x40c2040}, 0x0)

0s ago: executing program 1 (id=5012):
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xa0}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async)
readv(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000000500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000003c0)={{<r1=>r0, &(0x7f0000000040)='\x00', 0x440080, &(0x7f00000000c0)={@_ha_fsid={[0x8, 0x61]}, {0x8, 0x1, 0x3, 0xf}}, 0xee5a, &(0x7f0000000100), &(0x7f0000000140)=0x200}, {[0x7, 0x80008, 0x7, 0x8]}, 0xfff, 0x80, &(0x7f0000000340)=""/128})
sendmsg$sock(r1, &(0x7f0000000b40)={&(0x7f0000000640)=@vsock={0x28, 0x0, 0x2710, @host}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000840)="4d2f5b13350cc3e385c816ba2e83c21a2da45b7e89eaf1a35f23acf98fd505d55c0cf7e975a97eb8a4c8760605c00eb9afd3c9187f77314a36d68412e94a31ae684ab718976526a2797ee8bfdf4bef181e839b31591566570e46f447223105010e992a75cc14341d72c698df367b140ebc7a9ca5d7a746613029ffb1894679299a8a237c72cbdd6aab94270a927ebaa5c9f6de9013fb2555af71f96a2b", 0x9d}, {&(0x7f0000000900)="e7702afb61696d4000638d8e59316c3830cac7469ba0c64e73515ad1c5ce175aadff89adf3e087f2eb24395871f95ec6448c3bb8683c02366250b51aeb94ced78bc4ebabd2ee55a57dbeca94b208df9fd8bc2aa4ef218cee916a8e704671952e5914878b734c2cfe03fb9e9bce6471657711665fe451a58a49f25c014283eeedbdb01966fdd1a2778319e1e413401709569bf039fcb7ea89a1fe3bf7425c2f66a959da428ae3437826a90e5333406b050e01b36c60ecd138af8b93f62e64d3a5a26ebd4d22fc06eb910ef7ab0b47f5bc125b0700e4dda185fdb7915fe6fa1a120dc4a608fc91c8cb7e9724d8c7", 0xed}, {&(0x7f0000000a00)="0bfa7ac66e2f00eb09bf4ee2c0b4", 0xe}], 0x3, &(0x7f0000000a80)=[@txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x400}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0xef7}}, @mark={{0x14, 0x1, 0x24, 0x1}}], 0xc0}, 0x8000) (async)
write$cgroup_int(r1, &(0x7f0000000440)=0xfffffffffffffff9, 0x12) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45)
accept4(r2, 0x0, 0x0, 0x0) (async)
pipe(&(0x7f0000000080))
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x7, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r4}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS    \x00', 0x2}, 0x20) (async)
pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'gretap0\x00', <r5=>0x0, 0x10, 0x80, 0x9, 0xccab, {{0x18, 0x4, 0x1, 0x0, 0x60, 0x65, 0x0, 0x9, 0x2f, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010102, {[@generic={0x94, 0xf, "79e6eddbb8e9fbc6c76665f153"}, @generic={0x12, 0xb, "600fd67fcea5388a27"}, @end, @cipso={0x86, 0xd, 0x3, [{0x0, 0x7, "4dfcfa391a"}]}, @ra={0x94, 0x4, 0x1}, @generic={0x7, 0x4, '?R'}, @timestamp={0x44, 0x18, 0xba, 0x0, 0x8, [0x0, 0x101, 0x1, 0x2, 0x5]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000580)={@dev={0xfe, 0x80, '\x00', 0x1e}, 0xe, r5})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="dc188619b95d02ff4284860188a86a4e0800", 0x0, 0x8001ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000))

kernel console output (not intermixed with test programs):

te type 3 has an invalid length.
[  582.040981][T19938] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  582.192253][T19940] netlink: 'syz.1.3399': attribute type 5 has an invalid length.
[  582.443167][T19944] netlink: 'syz.1.3402': attribute type 11 has an invalid length.
[  582.470701][T19947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3400'.
[  582.699967][T19959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3403'.
[  583.072345][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3406'.
[  583.136704][T19979] netlink: 'syz.2.3407': attribute type 1 has an invalid length.
[  583.148740][T19975] 8021q: adding VLAN 0 to HW filter on device bond2
[  583.158132][T19979] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3407'.
[  583.198278][T19979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3407'.
[  583.259645][T19982] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3407'.
[  583.429937][T19987] netlink: 'syz.1.3408': attribute type 1 has an invalid length.
[  583.562037][T19987] bond9: entered promiscuous mode
[  583.606244][T19987] 8021q: adding VLAN 0 to HW filter on device bond9
[  583.649342][T19996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3410'.
[  583.669295][T19990] vlan6: entered allmulticast mode
[  583.676970][T19995] netlink: 'syz.2.3412': attribute type 1 has an invalid length.
[  583.691297][T19990] bond9: entered allmulticast mode
[  583.772589][T19991] bond9: (slave bridge2): making interface the new active one
[  583.815043][T19991] bridge2: entered promiscuous mode
[  583.829555][T19991] bridge2: entered allmulticast mode
[  583.835887][T20006] netlink: 1316 bytes leftover after parsing attributes in process `syz.0.3414'.
[  583.868400][T19991] bond9: (slave bridge2): Enslaving as an active interface with an up link
[  583.938648][T20011] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3412'.
[  584.043431][T19995] bond3: entered promiscuous mode
[  584.049990][T19995] bond3: entered allmulticast mode
[  584.057124][T19995] 8021q: adding VLAN 0 to HW filter on device bond3
[  584.084274][T19998] erspan1: entered allmulticast mode
[  584.095565][T19998] bond3: (slave erspan1): making interface the new active one
[  584.103286][T19998] erspan1: entered promiscuous mode
[  584.112999][T19998] bond3: (slave erspan1): Enslaving as an active interface with an up link
[  584.650077][T20032] RDS: rds_bind could not find a transport for ::8000:0:20:0, load rds_tcp or rds_rdma?
[  584.790370][T20036] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  585.227335][T20046] nftables ruleset with unbound set
[  585.488257][T20066] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  585.508989][T20065] netlink: 'syz.2.3431': attribute type 1 has an invalid length.
[  585.665378][T20065] 8021q: adding VLAN 0 to HW filter on device bond4
[  585.919777][T20070] bond4: (slave veth5): Enslaving as an active interface with a down link
[  586.853752][T20125] netlink: 'syz.1.3442': attribute type 1 has an invalid length.
[  586.878579][T20124] netlink: 'syz.0.3441': attribute type 83 has an invalid length.
[  586.907107][T20134] __nla_validate_parse: 6 callbacks suppressed
[  586.907127][T20134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3442'.
[  587.150703][T20137] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  587.169589][T20125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3442'.
[  587.190989][T20137] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  587.195167][T20128] syzkaller0: entered promiscuous mode
[  587.212826][T20128] syzkaller0: entered allmulticast mode
[  587.219031][T20137] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  587.309892][T20138] syzkaller0: entered promiscuous mode
[  587.321711][T20138] syzkaller0: entered allmulticast mode
[  587.435440][T20149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3446'.
[  587.493178][T20149] macvtap1: entered promiscuous mode
[  587.510526][T20149] vlan0: entered promiscuous mode
[  587.827062][T20149] vlan0: left promiscuous mode
[  587.885284][T20153] tipc: Enabled bearer <eth:ipvlan1>, priority 30
[  588.415397][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  590.634185][T20197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'.
[  590.702263][T20198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'.
[  592.594935][T20180] ip6_vti0: Master is either lo or non-ether device
[  592.604178][T18081] tipc: Node number set to 3244877765
[  592.628918][T20197] hsr0: entered allmulticast mode
[  592.655768][T20197] hsr_slave_0: entered allmulticast mode
[  592.672606][T20197] hsr_slave_1: entered allmulticast mode
[  592.688528][T20197] hsr0: left allmulticast mode
[  592.701213][T20197] hsr_slave_0: left allmulticast mode
[  592.714781][T20197] hsr_slave_1: left allmulticast mode
[  592.758506][T20198] hsr_slave_0: left promiscuous mode
[  592.779336][T20198] hsr_slave_1: left promiscuous mode
[  593.043318][T20216] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3453'.
[  593.142977][T20220] netlink: 27 bytes leftover after parsing attributes in process `syz.1.3458'.
[  593.189026][T20218] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3457'.
[  593.518336][T20244] SET target dimension over the limit!
[  593.551418][T20249] IPv6: addrconf: prefix option has invalid lifetime
[  593.589794][T20240] bond11 (unregistering): Released all slaves
[  594.013721][T20269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3468'.
[  594.119024][T20268] vlan3: entered promiscuous mode
[  594.134775][T20268] bridge0: entered promiscuous mode
[  594.413185][T20270] bridge0: port 2(bridge_slave_1) entered disabled state
[  594.421030][T20270] bridge0: port 1(bridge_slave_0) entered disabled state
[  594.552636][T20270] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  594.725897][T20288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3473'.
[  594.795619][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'.
[  594.827036][T20295] netlink: 'syz.4.3474': attribute type 2 has an invalid length.
[  594.860368][T20270] vlan2: left allmulticast mode
[  594.878240][T20270] bond0: left allmulticast mode
[  594.883249][T20270] bond_slave_0: left allmulticast mode
[  594.894847][T20270] bond_slave_1: left allmulticast mode
[  594.904164][T20270] vlan3: left promiscuous mode
[  594.909506][T20270] bridge0: left promiscuous mode
[  594.923041][ T7137] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  594.941697][ T7137] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  594.964439][ T7137] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.002497][ T7137] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  595.201527][T20304] bond3 (unregistering): Released all slaves
[  595.677339][T20318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3483'.
[  595.723283][T20318] openvswitch: netlink: Missing key (keys=40, expected=100)
[  595.771305][T20320] netlink: 19 bytes leftover after parsing attributes in process `syz.1.3484'.
[  596.060534][T20329] netlink: 272 bytes leftover after parsing attributes in process `syz.2.3487'.
[  596.090525][T20329] 8021q: VLANs not supported on wg1
[  596.124952][T20326] x_tables: duplicate underflow at hook 1
[  596.139866][T20327] x_tables: duplicate underflow at hook 1
[  596.160741][T20331] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3489'.
[  598.710622][T20382] bond5: Removing last arp target with arp_interval on
[  599.443528][T20341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  599.887539][T20403] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  600.134813][T20413] __nla_validate_parse: 2 callbacks suppressed
[  600.134832][T20413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3512'.
[  600.176414][T20413] 8021q: adding VLAN 0 to HW filter on device bond6
[  600.766094][T20445] macvtap1: entered promiscuous mode
[  600.771498][T20445] vlan0: entered promiscuous mode
[  600.779720][T20445] vlan0: left promiscuous mode
[  601.349801][T20469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3524'.
[  601.450536][T20476] netlink: 'syz.0.3525': attribute type 16 has an invalid length.
[  601.473440][T20468] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.488783][T20476] netlink: 'syz.0.3525': attribute type 17 has an invalid length.
[  601.498162][T20468] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.561063][T20481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3529'.
[  601.612482][T20480] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3529'.
[  601.636631][T20476] ip6_vti0: left promiscuous mode
[  601.641716][T20476] ip6_vti0: left allmulticast mode
[  601.721485][T20476] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.728807][T20476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  601.748977][T20476] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.756261][T20476] bridge0: port 2(bridge_slave_1) entered forwarding state
[  601.839278][T20476] macsec1: left promiscuous mode
[  601.941807][T20469] lo speed is unknown, defaulting to 1000
[  602.149785][T20500] netlink: 'syz.2.3533': attribute type 1 has an invalid length.
[  602.189556][T20504] netlink: 'syz.4.3530': attribute type 25 has an invalid length.
[  602.231541][T20500] 8021q: adding VLAN 0 to HW filter on device bond7
[  602.262679][T20500] macvlan2: entered promiscuous mode
[  602.268353][T20500] macvlan2: entered allmulticast mode
[  602.278364][T20500] bond7: entered promiscuous mode
[  602.284502][T20500] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  602.299908][T20500] bond7: left promiscuous mode
[  602.397873][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  602.414469][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  602.427765][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  602.448081][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  602.474260][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  602.483984][T20505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3534'.
[  602.606922][T20469] xfrm0 speed is unknown, defaulting to 1000
[  602.614539][T20516] Bluetooth: hci3: Opcode 0x0401 failed: -22
[  602.631425][T20515] bridge2: entered promiscuous mode
[  603.262442][T20541] bridge0: port 3(vlan2) entered blocking state
[  603.273369][T20541] bridge0: port 3(vlan2) entered disabled state
[  603.280265][T20541] vlan2: entered allmulticast mode
[  603.287381][T20541] bridge0: entered allmulticast mode
[  603.317790][T20541] vlan2: left allmulticast mode
[  603.329826][T20541] bridge0: left allmulticast mode
[  603.571307][T20547] xt_socket: unknown flags 0x8
[  603.589743][T20549] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  603.608314][T20550] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  604.300631][T20557] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  604.407387][T20575] lo speed is unknown, defaulting to 1000
[  605.203762][ T7137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  605.231098][ T7137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  605.265996][T20597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  605.366635][T20585] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  605.422264][T20575] xfrm0 speed is unknown, defaulting to 1000
[  605.540777][T20601] syzkaller0: entered promiscuous mode
[  605.554658][T20601] syzkaller0: entered allmulticast mode
[  605.592507][T20601] syzkaller1: tun_chr_ioctl cmd 1074025677
[  605.604896][T20601] syzkaller1: linktype set to 825
[  605.716914][T20606] __nla_validate_parse: 69 callbacks suppressed
[  605.716933][T20606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3562'.
[  605.822680][T20608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3563'.
[  605.910880][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3564'.
[  605.935914][T20611] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  605.936329][T20612] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3563'.
[  606.006359][T20611] ipt_ECN: cannot use operation on non-tcp rule
[  606.071312][ T8856] xfrm0 speed is unknown, defaulting to 1000
[  606.121710][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3565'.
[  606.759999][T20642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3570'.
[  607.097870][T20653] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3574'.
[  607.221233][T20640] 8021q: adding VLAN 0 to HW filter on device bond0
[  607.230609][T20640] 8021q: adding VLAN 0 to HW filter on device team0
[  607.238522][T20640] tipc: Resetting bearer <eth:team0>
[  607.248108][T20640] 8021q: adding VLAN 0 to HW filter on device batadv0
[  607.367162][T20640] veth1_vlan: left promiscuous mode
[  607.373581][T20640] veth0_vlan: left promiscuous mode
[  607.381253][T20640] veth0_vlan: entered promiscuous mode
[  607.388700][T20640] veth1_vlan: entered promiscuous mode
[  607.398867][T20640] veth1_macvtap: left promiscuous mode
[  607.405845][T20640] veth0_macvtap: left promiscuous mode
[  607.412251][T20640] veth0_macvtap: entered promiscuous mode
[  607.419230][T20640] veth1_macvtap: entered promiscuous mode
[  607.438028][T20640] 8021q: adding VLAN 0 to HW filter on device eth0
[  607.448128][T20640] 8021q: adding VLAN 0 to HW filter on device eth1
[  607.457839][T20640] 8021q: adding VLAN 0 to HW filter on device eth2
[  607.468483][T20640] 8021q: adding VLAN 0 to HW filter on device eth3
[  607.476176][T20640] 8021q: adding VLAN 0 to HW filter on device bond1
[  607.488785][T20640] 8021q: adding VLAN 0 to HW filter on device batadv1
[  607.501438][T20640] 8021q: adding VLAN 0 to HW filter on device bond2
[  607.530548][ T7141] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  607.552856][ T7141] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  607.562521][T18083] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  607.654855][T18081] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  607.686058][T18083] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  607.696992][ T7137] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.734181][ T7137] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.779914][ T7137] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.792486][ T7137] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.931282][T20672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3578'.
[  608.006378][T20676] netlink: 'syz.3.3578': attribute type 1 has an invalid length.
[  608.024531][T20679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3580'.
[  608.223169][T20676] 8021q: adding VLAN 0 to HW filter on device bond3
[  608.307974][T20672] vlan4: entered allmulticast mode
[  608.318265][T20672] veth0_to_bond: entered allmulticast mode
[  608.663260][T20703] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  608.695605][T20703] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  608.721579][T20703] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  608.778616][T20696] syzkaller0: entered promiscuous mode
[  608.802123][T20696] syzkaller0: entered allmulticast mode
[  608.867047][ T7161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.880284][ T7161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.886494][T20699] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  608.931057][T20699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  609.229678][T20718] FAULT_INJECTION: forcing a failure.
[  609.229678][T20718] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  609.243836][T20718] CPU: 0 UID: 0 PID: 20718 Comm: syz.3.3588 Not tainted syzkaller #0 PREEMPT(full) 
[  609.243873][T20718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  609.243887][T20718] Call Trace:
[  609.243896][T20718]  <TASK>
[  609.243905][T20718]  dump_stack_lvl+0xe8/0x150
[  609.243946][T20718]  should_fail_ex+0x40c/0x560
[  609.243978][T20718]  _copy_from_user+0x2d/0xb0
[  609.244011][T20718]  ___sys_sendmsg+0x1c6/0x360
[  609.244045][T20718]  ? __lock_acquire+0x683/0x2cf0
[  609.244079][T20718]  ? __pfx____sys_sendmsg+0x10/0x10
[  609.244147][T20718]  ? __fget_files+0x2a/0x420
[  609.244176][T20718]  ? __fget_files+0x3a2/0x420
[  609.244216][T20718]  __x64_sys_sendmsg+0x1b1/0x290
[  609.244253][T20718]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  609.244349][T20718]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.244373][T20718]  do_syscall_64+0x174/0x580
[  609.244406][T20718]  ? trace_irq_disable+0x3b/0x140
[  609.244433][T20718]  ? clear_bhb_loop+0x40/0x90
[  609.244461][T20718]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  609.244484][T20718] RIP: 0033:0x7f604339de59
[  609.244506][T20718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  609.244525][T20718] RSP: 002b:00007f60442c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  609.244548][T20718] RAX: ffffffffffffffda RBX: 00007f6043625fa0 RCX: 00007f604339de59
[  609.244563][T20718] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000005
[  609.244576][T20718] RBP: 00007f60442c7090 R08: 0000000000000000 R09: 0000000000000000
[  609.244588][T20718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  609.244611][T20718] R13: 00007f6043626038 R14: 00007f6043625fa0 R15: 00007ffc6bf73468
[  609.244644][T20718]  </TASK>
[  610.182465][T20747] xt_l2tp: unknown flags: 51
[  611.932784][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  612.377935][T20766] syzkaller0: entered promiscuous mode
[  612.383606][T20766] syzkaller0: entered allmulticast mode
[  612.552951][T20771] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3602'.
[  612.766989][T20770] syzkaller0: entered promiscuous mode
[  612.772873][T20770] syzkaller0: entered allmulticast mode
[  613.018114][T20793] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3
[  613.127110][T20787] bond8: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  613.156317][T20787] bond8: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  613.166720][T20787] bond8: entered allmulticast mode
[  613.335466][T20813] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3613'.
[  613.552801][T20808] syzkaller1: entered promiscuous mode
[  613.562328][T20808] syzkaller1: entered allmulticast mode
[  613.620194][T20801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3607'.
[  614.006130][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  614.352964][T20861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3624'.
[  614.619461][T20875] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  614.652742][T20875] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  614.661787][T20875] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  614.690570][T20869] syzkaller0: entered promiscuous mode
[  614.700538][T20869] syzkaller0: entered allmulticast mode
[  614.721850][T20879] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3629'.
[  614.848174][T20866] syzkaller0: entered promiscuous mode
[  614.858230][T20866] syzkaller0: entered allmulticast mode
[  614.926642][T20880] syzkaller0: entered promiscuous mode
[  614.932292][T20880] syzkaller0: entered allmulticast mode
[  615.450565][T20906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3639'.
[  615.612685][T20913] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3642'.
[  615.624110][T20913] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3642'.
[  615.773727][T20908] netlink: 'syz.0.3640': attribute type 3 has an invalid length.
[  615.808583][T20908] netlink: 666 bytes leftover after parsing attributes in process `syz.0.3640'.
[  615.970978][T18083] IPVS: starting estimator thread 0...
[  616.094953][T20934] IPVS: using max 34 ests per chain, 81600 per kthread
[  616.371863][T20939] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3645'.
[  616.617546][T20946] netlink: 'syz.4.3647': attribute type 4 has an invalid length.
[  616.637662][T20946] netlink: 'syz.4.3647': attribute type 1 has an invalid length.
[  618.407051][T20955] "syz.1.3649" (20955) uses obsolete ecb(arc4) skcipher
[  620.829484][T20946] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  621.045368][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  623.159061][T21017] syzkaller0: entered promiscuous mode
[  623.175285][T21017] syzkaller0: entered allmulticast mode
[  623.270972][T21021] Bluetooth: MGMT ver 1.23
[  623.411504][T21026] netlink: 'syz.3.3670': attribute type 2 has an invalid length.
[  623.421292][T21026] netlink: 'syz.3.3670': attribute type 1 has an invalid length.
[  623.430718][T21026] __nla_validate_parse: 3 callbacks suppressed
[  623.430749][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3670'.
[  623.460714][T21026] nbd: illegal input index -120127480
[  623.743719][T21038] veth0: entered promiscuous mode
[  623.856677][T21041] lo speed is unknown, defaulting to 1000
[  623.880109][T21047] veth0: left promiscuous mode
[  623.950787][T21056] netlink: 'syz.1.3679': attribute type 61 has an invalid length.
[  624.413652][T21077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'.
[  624.435827][T21041] xfrm0 speed is unknown, defaulting to 1000
[  624.442151][T21073] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3683'.
[  625.199586][T21112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3692'.
[  625.212242][T21112] netlink: 'syz.1.3692': attribute type 7 has an invalid length.
[  625.232490][T21112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'.
[  625.286586][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3694'.
[  625.303026][T21115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3694'.
[  625.313348][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3694'.
[  625.399266][ T7165] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  625.419882][ T7165] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  625.458849][ T7137] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  625.582286][T21122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3696'.
[  625.597211][T21122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3696'.
[  625.888150][T21125] lo speed is unknown, defaulting to 1000
[  627.022578][T21141] sctp: [Deprecated]: syz.4.3702 (pid 21141) Use of struct sctp_assoc_value in delayed_ack socket option.
[  627.022578][T21141] Use struct sctp_sack_info instead
[  627.350049][T21126] IPVS: Unknown mcast interface: vcan0
[  627.357535][T21125] xfrm0 speed is unknown, defaulting to 1000
[  628.091867][T21159] syzkaller0: entered promiscuous mode
[  628.117957][T21159] syzkaller0: entered allmulticast mode
[  628.190570][T21153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.447041][T21153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.605559][T21153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  628.945578][T21153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.284312][ T7160] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  629.333118][ T1172] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  629.377539][ T1172] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  629.397234][ T7160] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  629.496138][T21201] nbd: socks must be embedded in a SOCK_ITEM attr
[  629.518383][T21201] block nbd0: shutting down sockets
[  629.624388][T21209] __nla_validate_parse: 3 callbacks suppressed
[  629.624407][T21209] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3716'.
[  629.669520][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3718'.
[  630.033030][T21229] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3722'.
[  630.437995][T21226] A link change request failed with some changes committed already. Interface veth1_to_bo
d may have been left with an inconsistent configuration, please check.
[  630.913027][T21256] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'.
[  630.923116][T21257] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3731'.
[  630.936961][T21232] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  630.989212][T21232] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.029342][T21256] netlink: 'syz.0.3731': attribute type 2 has an invalid length.
[  631.060256][T21257] netlink: 'syz.0.3731': attribute type 2 has an invalid length.
[  631.222801][T21269] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3734'.
[  631.240810][T21232] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  631.251248][T21232] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.610874][T21289] syzkaller0: entered promiscuous mode
[  631.629130][T21289] syzkaller0: entered allmulticast mode
[  631.820974][T21290] lo speed is unknown, defaulting to 1000
[  631.885843][T21294] syzkaller1: entered promiscuous mode
[  631.904433][T21294] syzkaller1: entered allmulticast mode
[  631.942427][T21294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3743'.
[  631.979845][T21294] gretap1: entered allmulticast mode
[  631.998257][T21297] IPVS: sh: FWM 3 0x00000003 - no destination available
[  632.072706][T21294] syzkaller0: entered promiscuous mode
[  632.089165][T21294] syzkaller0: entered allmulticast mode
[  632.119133][T21294] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3743'.
[  632.238363][T21232] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  632.484813][T21232] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  632.607091][T21304] syzkaller1: entered promiscuous mode
[  632.614028][T21304] syzkaller1: entered allmulticast mode
[  632.626329][T21290] xfrm0 speed is unknown, defaulting to 1000
[  633.633268][T21328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3753'.
[  633.649964][T21327] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3751'.
[  633.689041][T21232] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  633.718755][T21232] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  633.774460][T21319] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  633.787171][T21328] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  634.082413][T21334] bond2: Removing last arp target with arp_interval on
[  634.523246][T21355] netlink: 'syz.3.3762': attribute type 9 has an invalid length.
[  634.679124][T21363] __nla_validate_parse: 3 callbacks suppressed
[  634.679146][T21363] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3764'.
[  634.860875][T21376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3767'.
[  634.874535][T21377] netlink: 'syz.1.3769': attribute type 1 has an invalid length.
[  634.901551][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3767'.
[  634.961721][T21383] netlink: 'syz.2.3767': attribute type 3 has an invalid length.
[  635.032300][T21377] bond11: entered promiscuous mode
[  635.039805][T21377] 8021q: adding VLAN 0 to HW filter on device bond11
[  635.162944][T21377] bond11: (slave bridge3): making interface the new active one
[  635.172551][T21377] bridge3: entered promiscuous mode
[  635.182938][T21377] bond11: (slave bridge3): Enslaving as an active interface with an up link
[  635.222678][T21385] syzkaller0: entered promiscuous mode
[  635.228910][T21385] syzkaller0: entered allmulticast mode
[  635.238634][T21377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  635.252620][T21388] netlink: 180568 bytes leftover after parsing attributes in process `syz.0.3771'.
[  635.253493][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3769'.
[  635.631010][T21410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3772'.
[  635.790555][T21413] x_tables: duplicate underflow at hook 1
[  635.935478][T21420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  638.231224][T21426] netlink: 'syz.0.3778': attribute type 2 has an invalid length.
[  638.244951][T21428] netlink: 'syz.0.3778': attribute type 2 has an invalid length.
[  638.262770][T21423] netlink: 204 bytes leftover after parsing attributes in process `syz.1.3776'.
[  638.277603][T21426] : entered promiscuous mode
[  638.766538][T21455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3780'.
[  638.788670][T21444] 8021q: adding VLAN 0 to HW filter on device bond13
[  638.811493][T21444] bond12: (slave bond13): Enslaving as an active interface with an up link
[  639.030525][T21447] bond12: (slave gretap2): Enslaving as an active interface with an up link
[  639.042122][T21454] C: renamed from veth1_to_team
[  639.067688][T21454] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3783'.
[  639.126564][T21465] veth7: entered promiscuous mode
[  639.146599][T21459] syzkaller0: entered promiscuous mode
[  639.156718][T21471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3786'.
[  639.165827][T21459] syzkaller0: entered allmulticast mode
[  639.173337][ T7160] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  639.184062][ T7160] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.276702][ T7168] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  639.297723][ T7168] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.605761][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  639.701718][ T7141] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  639.713283][ T7141] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.723870][T21495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3792'.
[  639.883865][T21502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3795'.
[  639.903708][T21502] bond0: Unable to set down delay as MII monitoring is disabled
[  639.983309][T21502] lo speed is unknown, defaulting to 1000
[  640.097196][T21510] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3794'.
[  640.516789][T21519] openvswitch: netlink: Flow actions attr not present in new flow.
[  640.585642][T21519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3801'.
[  640.765965][T21522] veth1_to_bond: entered promiscuous mode
[  640.852979][T21533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3805'.
[  640.974778][T21536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3805'.
[  641.033511][T21540] xt_hashlimit: size too large, truncated to 1048576
[  641.081424][T21506] dvmrp0: entered allmulticast mode
[  641.089231][T21542] netlink: 'syz.3.3807': attribute type 1 has an invalid length.
[  641.134132][T21542] bond4: entered promiscuous mode
[  641.140440][T21542] 8021q: adding VLAN 0 to HW filter on device bond4
[  641.148173][T21502] xfrm0 speed is unknown, defaulting to 1000
[  641.158968][ T7168] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  641.180021][ T7168] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  641.199339][T21542] netlink: 'syz.3.3807': attribute type 5 has an invalid length.
[  641.297194][T21546] netlink: 'syz.2.3808': attribute type 62 has an invalid length.
[  641.366774][T21540] macvtap1: entered allmulticast mode
[  641.419026][T21544] macvtap2: entered allmulticast mode
[  641.474010][T21540] bond4: (slave bridge3): making interface the new active one
[  641.506137][T21540] bridge3: entered promiscuous mode
[  641.525747][T21540] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  641.578012][T21554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3810'.
[  641.699434][T21558] netlink: 'syz.0.3811': attribute type 1 has an invalid length.
[  641.724752][T21558] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3811'.
[  641.738007][T21558] NCSI netlink: No device for ifindex 0
[  642.251663][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3816'.
[  642.351164][T21571] netlink: 'syz.0.3817': attribute type 4 has an invalid length.
[  642.407108][T21571] netlink: 'syz.0.3817': attribute type 4 has an invalid length.
[  642.732272][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3821'.
[  642.800073][T21588] netlink: 'syz.1.3822': attribute type 1 has an invalid length.
[  643.319056][T21576] syzkaller1: entered promiscuous mode
[  643.326077][T21576] syzkaller1: entered allmulticast mode
[  643.744138][T21605] Cannot find set identified by id 0 to match
[  644.232875][T21619] syzkaller1: entered promiscuous mode
[  644.246733][T21619] syzkaller1: entered allmulticast mode
[  645.014209][T21642] netlink: 'syz.1.3838': attribute type 58 has an invalid length.
[  645.037521][T21642] __nla_validate_parse: 2 callbacks suppressed
[  645.037542][T21642] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3838'.
[  645.066498][T21644] syzkaller1: entered promiscuous mode
[  645.078372][T21644] syzkaller1: entered allmulticast mode
[  645.221656][T21634] veth0_virt_wifi: entered promiscuous mode
[  645.314547][T21655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3840'.
[  645.335769][T21655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3840'.
[  645.382105][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3840'.
[  645.631471][T21669] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3844'.
[  645.677908][T21669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3844'.
[  645.815398][T21660] team0: Port device team_slave_0 removed
[  645.827373][T21662] syzkaller1: entered promiscuous mode
[  645.833139][T21662] syzkaller1: entered allmulticast mode
[  645.892423][T21677] geneve2: entered promiscuous mode
[  645.920662][ T1172] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  645.932076][ T1172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  645.985574][ T1172] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  646.005390][ T1172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  646.040575][T21675] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  646.083844][T21675] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  646.099872][T21686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3849'.
[  646.111448][T21675] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  646.157971][T21678] syzkaller0: entered promiscuous mode
[  646.169454][T21678] syzkaller0: entered allmulticast mode
[  646.223042][T21681] syzkaller0: entered promiscuous mode
[  646.236634][T21681] syzkaller0: entered allmulticast mode
[  646.454279][T21696] block nbd0: Receive control failed (result -32)
[  646.462109][ T4937] block nbd0: Receive control failed (result -32)
[  646.462114][T15600] block nbd0: Receive control failed (result -32)
[  646.542325][T21700] netlink: 'syz.3.3852': attribute type 7 has an invalid length.
[  646.581911][ T7135] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  646.583185][T21700] netlink: 'syz.3.3852': attribute type 7 has an invalid length.
[  646.624068][ T7135] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  646.654239][ T7135] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  646.820896][T21713] netlink: 'syz.3.3854': attribute type 3 has an invalid length.
[  646.845223][T21713] netlink: 'syz.3.3854': attribute type 1 has an invalid length.
[  646.863540][T21713] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3854'.
[  646.887175][T21713] NCSI netlink: No device for ifindex 0
[  649.707202][ T7135] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  650.263528][T21736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3863'.
[  650.448359][T21740] syzkaller0: entered promiscuous mode
[  650.454821][T21742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3865'.
[  650.464270][T21740] syzkaller0: entered allmulticast mode
[  650.472260][T21746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3867'.
[  650.574940][T21744] veth1_to_bond: left promiscuous mode
[  650.640195][T21744] vlan4: left allmulticast mode
[  650.652418][T21744] veth0_to_bond: left allmulticast mode
[  650.662932][T21744] bond4: left promiscuous mode
[  650.668452][T21744] bridge3: left promiscuous mode
[  650.678165][T21744] macvtap1: left allmulticast mode
[  650.683827][T21744] macvtap2: left allmulticast mode
[  650.696466][T21744] geneve2: left promiscuous mode
[  650.899496][ T7135] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  650.913649][ T7135] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  650.955700][ T1172] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  650.982727][ T1172] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  651.023472][ T1172] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  651.068574][ T1172] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  651.103738][ T1172] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  651.130281][ T1172] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  651.909934][T21805] syzkaller0: entered promiscuous mode
[  651.916403][T21805] syzkaller0: entered allmulticast mode
[  651.927861][T21812] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  651.962154][T21812] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  651.996859][T21812] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  652.102407][T21824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3888'.
[  652.122409][T21824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3888'.
[  652.140823][T21824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'.
[  652.471278][T21835] lo speed is unknown, defaulting to 1000
[  654.833793][T21835] xfrm0 speed is unknown, defaulting to 1000
[  654.871065][T21811] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  655.178304][T21855] tc_dump_action: action bad kind
[  655.495398][T21864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3899'.
[  655.741515][T21870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3902'.
[  655.761606][T21877] tipc: Started in network mode
[  655.775390][T21877] tipc: Node identity ac14140f, cluster identity 4711
[  655.795035][T21877] tipc: New replicast peer: 255.255.255.255
[  655.806131][T21877] tipc: Enabled bearer <udp:syz2>, priority 10
[  655.998293][T21886] bridge_slave_0: left allmulticast mode
[  656.024007][T21886] bridge_slave_0: left promiscuous mode
[  656.052033][T21886] bridge0: port 1(bridge_slave_0) entered disabled state
[  656.136660][T21886] bridge_slave_1: left allmulticast mode
[  656.142751][T21886] bridge_slave_1: left promiscuous mode
[  656.154330][T21886] bridge0: port 2(bridge_slave_1) entered disabled state
[  656.194259][T21886] bond0: (slave bond_slave_0): Releasing backup interface
[  656.214965][T21886] bond0: (slave bond_slave_1): Releasing backup interface
[  656.234344][T21886] team0: Port device team_slave_0 removed
[  656.268290][T21886] team0: Port device team_slave_1 removed
[  656.292539][T21886] batman_adv: batadv0: Removing interface: batadv_slave_1
[  656.307858][T21886] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  656.423344][T21892] syzkaller0: entered promiscuous mode
[  656.431266][T21892] syzkaller0: entered allmulticast mode
[  656.503481][T21896] netlink: 'syz.0.3908': attribute type 1 has an invalid length.
[  656.805470][ T5754] tipc: Node number set to 2886997007
[  657.117659][T21913] lo speed is unknown, defaulting to 1000
[  657.162774][T21921] netlink: 'syz.1.3917': attribute type 5 has an invalid length.
[  657.219146][T21924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3917'.
[  657.238751][T21924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3917'.
[  657.289925][T21924] geneve3: entered promiscuous mode
[  657.295784][T21924] geneve3: entered allmulticast mode
[  657.411967][T21928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3920'.
[  657.477927][T21913] xfrm0 speed is unknown, defaulting to 1000
[  657.750955][T21944] netlink: 'syz.1.3924': attribute type 21 has an invalid length.
[  657.777121][T21944] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3924'.
[  657.833441][T21944] netlink: 'syz.1.3924': attribute type 5 has an invalid length.
[  657.893228][T21944] netlink: 'syz.1.3924': attribute type 6 has an invalid length.
[  657.927908][T21944] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3924'.
[  658.047653][T21955] netlink: 'syz.3.3927': attribute type 1 has an invalid length.
[  658.057915][T21955] netlink: 220 bytes leftover after parsing attributes in process `syz.3.3927'.
[  658.530555][T21985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3935'.
[  658.562603][T21985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3935'.
[  660.094426][T22016] netlink: 'syz.1.3944': attribute type 11 has an invalid length.
[  660.261296][T22022] syzkaller0: entered promiscuous mode
[  660.280196][T22022] syzkaller0: entered allmulticast mode
[  660.433036][T22031] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  660.546834][T22042] sctp: [Deprecated]: syz.0.3950 (pid 22042) Use of int in max_burst socket option.
[  660.546834][T22042] Use struct sctp_assoc_value instead
[  660.669902][T22050] netlink: 'syz.1.3951': attribute type 23 has an invalid length.
[  661.509445][T22076] __nla_validate_parse: 3 callbacks suppressed
[  661.509464][T22076] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3955'.
[  661.700629][T22085] syzkaller0: entered promiscuous mode
[  661.706941][T22085] syzkaller0: entered allmulticast mode
[  661.780203][T22084] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3961'.
[  661.789707][T22084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3961'.
[  661.855257][T22087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3962'.
[  662.066765][T22093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3965'.
[  662.350006][T22110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3970'.
[  662.444244][T22101] netlink: 'syz.4.3963': attribute type 1 has an invalid length.
[  662.452659][T22101] netlink: 1323 bytes leftover after parsing attributes in process `syz.4.3963'.
[  662.529244][T22115] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3970'.
[  662.546456][T22117] netlink: 'syz.2.3971': attribute type 1 has an invalid length.
[  662.578024][T22115] nbd: device at index 64 is going down
[  662.593923][T22117] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3971'.
[  662.902385][T22127] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3975'.
[  662.922741][T22136] FAULT_INJECTION: forcing a failure.
[  662.922741][T22136] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  662.944753][T22136] CPU: 1 UID: 0 PID: 22136 Comm: syz.3.3977 Not tainted syzkaller #0 PREEMPT(full) 
[  662.944789][T22136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  662.944803][T22136] Call Trace:
[  662.944811][T22136]  <TASK>
[  662.944820][T22136]  dump_stack_lvl+0xe8/0x150
[  662.944862][T22136]  should_fail_ex+0x40c/0x560
[  662.944892][T22136]  _copy_from_user+0x2d/0xb0
[  662.944924][T22136]  map_delete_elem+0x2b8/0x670
[  662.944959][T22136]  __sys_bpf+0x95d/0xd90
[  662.944995][T22136]  ? __pfx___sys_bpf+0x10/0x10
[  662.945045][T22136]  ? __fget_files+0x2a/0x420
[  662.945087][T22136]  ? ksys_write+0x242/0x270
[  662.945119][T22136]  ? __pfx_ksys_write+0x10/0x10
[  662.945154][T22136]  __x64_sys_bpf+0xba/0xd0
[  662.945178][T22136]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.945200][T22136]  do_syscall_64+0x174/0x580
[  662.945228][T22136]  ? trace_irq_disable+0x3b/0x140
[  662.945252][T22136]  ? clear_bhb_loop+0x40/0x90
[  662.945277][T22136]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  662.945297][T22136] RIP: 0033:0x7f604339de59
[  662.945316][T22136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  662.945334][T22136] RSP: 002b:00007f60442c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  662.945355][T22136] RAX: ffffffffffffffda RBX: 00007f6043625fa0 RCX: 00007f604339de59
[  662.945370][T22136] RDX: 0000000000000020 RSI: 0000200000000080 RDI: 0000000000000003
[  662.945383][T22136] RBP: 00007f60442c7090 R08: 0000000000000000 R09: 0000000000000000
[  662.945396][T22136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  662.945407][T22136] R13: 00007f6043626038 R14: 00007f6043625fa0 R15: 00007ffc6bf73468
[  662.945456][T22136]  </TASK>
[  664.199666][T22179] netlink: 'syz.4.3984': attribute type 1 has an invalid length.
[  664.209837][T22168] batadv_slave_0: entered promiscuous mode
[  664.285543][T22166] batadv_slave_0: left promiscuous mode
[  664.340303][T22177] syzkaller0: entered promiscuous mode
[  664.429625][T22177] syzkaller0: entered allmulticast mode
[  664.440420][T22188] nbd: must specify a size in bytes for the device
[  664.468303][T22185] syzkaller0: entered promiscuous mode
[  664.473940][T22185] syzkaller0: entered allmulticast mode
[  664.483948][T22185] tc_dump_action: action bad kind
[  664.538898][T22185] ip6tnl2: entered allmulticast mode
[  664.552941][ T1172] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  665.214231][T22227] sctp: [Deprecated]: syz.2.4005 (pid 22227) Use of int in max_burst socket option.
[  665.214231][T22227] Use struct sctp_assoc_value instead
[  665.262320][T22229] bond7: (slave team0): Releasing backup interface
[  665.291246][T22229] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  665.308051][T22232] x_tables: duplicate underflow at hook 1
[  665.725723][T22253] syzkaller0: entered promiscuous mode
[  665.750632][T22257] netlink: 'syz.2.4015': attribute type 1 has an invalid length.
[  665.752165][T22253] syzkaller0: entered allmulticast mode
[  665.850148][T22257] bond9: entered promiscuous mode
[  665.903467][T22257] 8021q: adding VLAN 0 to HW filter on device bond9
[  666.263978][T22268] vlan2: entered allmulticast mode
[  666.281521][T22268] bond9: entered allmulticast mode
[  666.335972][T22255] bridge4: entered promiscuous mode
[  666.363210][T22255] bridge4: entered allmulticast mode
[  666.389130][T22255] bond9: (slave bridge4): Enslaving as an active interface with an up link
[  666.949355][T22292] __nla_validate_parse: 7 callbacks suppressed
[  666.949375][T22292] netlink: 536 bytes leftover after parsing attributes in process `syz.0.4022'.
[  667.000990][T22292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4022'.
[  667.263667][T22301] lo speed is unknown, defaulting to 1000
[  667.337207][T22305] batadv_slave_1: entered promiscuous mode
[  667.811222][T22301] xfrm0 speed is unknown, defaulting to 1000
[  667.815921][T22340] netlink: 'syz.2.4037': attribute type 1 has an invalid length.
[  668.009552][T22340] 8021q: adding VLAN 0 to HW filter on device bond10
[  668.133554][T22340] vlan3: entered allmulticast mode
[  668.143760][T22346] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4037'.
[  668.153048][T22340] bond10: entered allmulticast mode
[  668.325416][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  668.678587][T22374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4044'.
[  668.952122][T22378] syzkaller0: entered promiscuous mode
[  668.970649][T22378] syzkaller0: entered allmulticast mode
[  669.397144][T22387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4047'.
[  669.823452][T22403] netlink: 'syz.2.4052': attribute type 83 has an invalid length.
[  669.884315][T22301] batadv_slave_1: left promiscuous mode
[  670.100289][T22417] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4053'.
[  670.124312][T22418] netlink: 'syz.3.4054': attribute type 1 has an invalid length.
[  670.162092][T22418] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4054'.
[  670.186876][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4056'.
[  670.770365][T22446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4060'.
[  670.945657][T22452] FAULT_INJECTION: forcing a failure.
[  670.945657][T22452] name failslab, interval 1, probability 0, space 0, times 0
[  670.959541][T22452] CPU: 1 UID: 0 PID: 22452 Comm: syz.1.4063 Not tainted syzkaller #0 PREEMPT(full) 
[  670.959570][T22452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  670.959583][T22452] Call Trace:
[  670.959592][T22452]  <TASK>
[  670.959601][T22452]  dump_stack_lvl+0xe8/0x150
[  670.959638][T22452]  should_fail_ex+0x40c/0x560
[  670.959669][T22452]  should_failslab+0xa8/0x100
[  670.959702][T22452]  __kmalloc_noprof+0xfe/0x720
[  670.959729][T22452]  ? is_bpf_text_address+0x26/0x2b0
[  670.959759][T22452]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  670.959787][T22452]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  670.959827][T22452]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  670.959858][T22452]  ? kernel_text_address+0xa5/0xe0
[  670.959897][T22452]  genl_family_rcv_msg_doit+0xda/0x340
[  670.959932][T22452]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  670.959968][T22452]  ? apparmor_capable+0x126/0x170
[  670.960005][T22452]  ? bpf_lsm_capable+0x9/0x20
[  670.960031][T22452]  ? security_capable+0x7e/0x2c0
[  670.960071][T22452]  genl_rcv_msg+0x614/0x7a0
[  670.960105][T22452]  ? __pfx_genl_rcv_msg+0x10/0x10
[  670.960131][T22452]  ? __pfx_ioam6_genl_ns_set_schema+0x10/0x10
[  670.960170][T22452]  netlink_rcv_skb+0x226/0x4a0
[  670.960205][T22452]  ? __pfx_genl_rcv_msg+0x10/0x10
[  670.960234][T22452]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  670.960284][T22452]  ? down_read+0x2be/0x330
[  670.960310][T22452]  genl_rcv+0x28/0x40
[  670.960334][T22452]  netlink_unicast+0x7bb/0x940
[  670.960377][T22452]  netlink_sendmsg+0x813/0xb40
[  670.960409][T22452]  ? __pfx_netlink_sendmsg+0x10/0x10
[  670.960436][T22452]  ? aa_sock_msg_perm+0xf1/0x1b0
[  670.960464][T22452]  ? __pfx_netlink_sendmsg+0x10/0x10
[  670.960484][T22452]  sock_sendmsg_nosec+0x13a/0x180
[  670.960513][T22452]  ____sys_sendmsg+0x54e/0x850
[  670.960553][T22452]  ? __pfx_____sys_sendmsg+0x10/0x10
[  670.960595][T22452]  ? import_iovec+0x73/0xa0
[  670.960630][T22452]  ___sys_sendmsg+0x2a5/0x360
[  670.960661][T22452]  ? __lock_acquire+0x683/0x2cf0
[  670.960695][T22452]  ? __pfx____sys_sendmsg+0x10/0x10
[  670.960765][T22452]  ? __fget_files+0x2a/0x420
[  670.960792][T22452]  ? __fget_files+0x3a2/0x420
[  670.960831][T22452]  __x64_sys_sendmsg+0x1b1/0x290
[  670.960867][T22452]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  670.960920][T22452]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.960944][T22452]  do_syscall_64+0x174/0x580
[  670.960974][T22452]  ? trace_irq_disable+0x3b/0x140
[  670.961008][T22452]  ? clear_bhb_loop+0x40/0x90
[  670.961037][T22452]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  670.961059][T22452] RIP: 0033:0x7fd79959de59
[  670.961079][T22452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  670.961098][T22452] RSP: 002b:00007fd79a430028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  670.961120][T22452] RAX: ffffffffffffffda RBX: 00007fd799825fa0 RCX: 00007fd79959de59
[  670.961136][T22452] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 000000000000000b
[  670.961149][T22452] RBP: 00007fd79a430090 R08: 0000000000000000 R09: 0000000000000000
[  670.961163][T22452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  670.961175][T22452] R13: 00007fd799826038 R14: 00007fd799825fa0 R15: 00007fff06665e68
[  670.961209][T22452]  </TASK>
[  671.691739][   T30] audit: type=1804 audit(1783816374.397:11): pid=22467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4067" name="/newroot/279/cgroup.controllers" dev="tmpfs" ino=1445 res=1 errno=0
[  671.726878][T22468] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4068'.
[  671.743310][   T30] audit: type=1800 audit(1783816374.397:12): pid=22467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4067" name="cgroup.controllers" dev="tmpfs" ino=1445 res=0 errno=0
[  671.774749][T22468] netlink: 'syz.1.4068': attribute type 1 has an invalid length.
[  671.836948][T22468] geneve4: entered promiscuous mode
[  671.895960][T22478] xt_NFQUEUE: number of queues (3633) out of range (got 69161)
[  672.707858][T22484] openvswitch: netlink: IP tunnel dst address not specified
[  673.007068][T22489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4074'.
[  673.238981][T22502] netlink: 'syz.2.4079': attribute type 2 has an invalid length.
[  673.344361][T22502] : entered promiscuous mode
[  673.528622][T22509] netlink: 'syz.2.4081': attribute type 6 has an invalid length.
[  673.719404][T22512] syzkaller0: entered promiscuous mode
[  673.725178][T22512] syzkaller0: entered allmulticast mode
[  673.940928][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4086'.
[  674.003217][T22529] openvswitch: netlink: Flow actions attr not present in new flow.
[  674.016150][T22530] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4086'.
[  674.034185][T22530] bond6: entered promiscuous mode
[  674.039970][T22530] bond6: entered allmulticast mode
[  674.046868][T22530] 8021q: adding VLAN 0 to HW filter on device bond6
[  674.051913][T22529] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4087'.
[  674.112308][T22529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4087'.
[  674.284751][T22537] netlink: 'syz.2.4088': attribute type 1 has an invalid length.
[  674.302234][T22535] lo speed is unknown, defaulting to 1000
[  674.401560][T22537] 8021q: adding VLAN 0 to HW filter on device bond11
[  674.410039][T22537] netlink: 'syz.2.4088': attribute type 1 has an invalid length.
[  674.472500][T22537] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR
[  674.940154][T22555] netlink: 'syz.1.4093': attribute type 16 has an invalid length.
[  674.984107][T22555] netlink: 'syz.1.4093': attribute type 17 has an invalid length.
[  675.182737][T22562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4094'.
[  675.278714][T22535] xfrm0 speed is unknown, defaulting to 1000
[  675.320830][T22539] lo speed is unknown, defaulting to 1000
[  675.645883][T22574] tipc: Failed to remove unknown binding: 66,1,1/3244877765:907891439/907891441
[  675.931408][T22587] netlink: 'syz.2.4101': attribute type 5 has an invalid length.
[  675.954064][T22587] netlink: 'syz.2.4101': attribute type 21 has an invalid length.
[  675.972725][T22587] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4101'.
[  676.094760][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  676.247387][T22539] xfrm0 speed is unknown, defaulting to 1000
[  676.291702][T22575] syzkaller1: entered promiscuous mode
[  676.300691][T22575] syzkaller1: entered allmulticast mode
[  676.650056][T22603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4106'.
[  676.689985][T22606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4106'.
[  677.075993][T22610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4107'.
[  677.192334][T22617] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  677.201096][T22617] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  677.214337][T22617] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  677.327626][T22621] syzkaller0: entered promiscuous mode
[  677.333293][T22621] syzkaller0: entered allmulticast mode
[  678.005022][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  678.845514][T22650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4114'.
[  678.854700][T22650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4114'.
[  681.009421][T22656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4116'.
[  681.141838][T22658] tipc: Started in network mode
[  681.146984][T22658] tipc: Node identity 462227386a9, cluster identity 4711
[  681.154239][T22658] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  681.165597][T22658] syzkaller0: entered promiscuous mode
[  681.171146][T22658] syzkaller0: entered allmulticast mode
[  681.209715][T22662] netlink: 'syz.1.4119': attribute type 1 has an invalid length.
[  681.288294][T22662] bond14: entered promiscuous mode
[  681.293986][T22662] 8021q: adding VLAN 0 to HW filter on device bond14
[  681.350617][T22662] 8021q: adding VLAN 0 to HW filter on device bond14
[  681.380464][T22662] bond14: (slave ipip2): The slave device specified does not support setting the MAC address
[  681.392537][T22662] bond14: (slave ipip2): Setting fail_over_mac to active for active-backup mode
[  681.410153][T22662] bond14: (slave ipip2): making interface the new active one
[  681.425332][T22662] ipip2: entered promiscuous mode
[  681.439436][T22662] bond14: (slave ipip2): Enslaving as an active interface with an up link
[  681.874139][T22704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4128'.
[  682.016028][T22658] tipc: Resetting bearer <eth:syzkaller0>
[  682.023568][T22708] sctp: [Deprecated]: syz.0.4129 (pid 22708) Use of int in max_burst socket option.
[  682.023568][T22708] Use struct sctp_assoc_value instead
[  682.139897][T22658] tipc: Disabling bearer <eth:syzkaller0>
[  682.227268][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4133'.
[  682.367298][T22727] netlink: 'syz.2.4134': attribute type 13 has an invalid length.
[  682.401417][T22732] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4136'.
[  682.413710][T22727] netlink: 'syz.2.4134': attribute type 17 has an invalid length.
[  682.807733][T22727] mac80211_hwsim hwsim24 wlan0: left promiscuous mode
[  682.816799][T22727] mac80211_hwsim hwsim24 wlan0: left allmulticast mode
[  682.826613][T22727] ip6gre1: left promiscuous mode
[  682.831654][T22727] ip6gre1: left allmulticast mode
[  682.852594][T22727] ip6erspan0: left allmulticast mode
[  682.867577][T22727] bond2: left promiscuous mode
[  682.872823][T22727] 8021q: adding VLAN 0 to HW filter on device bond2
[  682.882377][T22727] bond3: left promiscuous mode
[  682.888400][T22727] erspan1: left promiscuous mode
[  682.893648][T22727] bond3: left allmulticast mode
[  682.902398][T22727] erspan1: left allmulticast mode
[  682.931518][T22727] 8021q: adding VLAN 0 to HW filter on device bond5
[  682.968832][T22727] bond8: left allmulticast mode
[  682.977278][T22727] 8021q: adding VLAN 0 to HW filter on device bond8
[  683.003711][T22727] 8021q: adding VLAN 0 to HW filter on device eth0
[  683.038554][T22727] 8021q: adding VLAN 0 to HW filter on device eth1
[  683.077847][T22727] 8021q: adding VLAN 0 to HW filter on device eth2
[  683.094550][T22752] openvswitch: netlink: IP tunnel dst address not specified
[  683.103436][T22752] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  683.111410][T22727] 8021q: adding VLAN 0 to HW filter on device eth3
[  683.201633][T22727] bond9: left promiscuous mode
[  683.207060][T22727] bridge4: left promiscuous mode
[  683.216188][T22727] vlan2: left allmulticast mode
[  683.221206][T22727] bond9: left allmulticast mode
[  683.228820][T22727] bridge4: left allmulticast mode
[  683.242265][T22727] vlan3: left allmulticast mode
[  683.247845][T22727] bond10: left allmulticast mode
[  683.294295][ T7137] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  683.307289][ T7137] bond4: (slave veth5): making interface the new active one
[  683.339628][ T7137] bond4: active interface up!
[  683.717373][T22779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4146'.
[  683.948782][T22754] netlink: 'syz.4.4140': attribute type 1 has an invalid length.
[  683.965011][T22795] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4151'.
[  684.199053][T22803] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4152'.
[  684.245298][T22803] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4152'.
[  684.592152][T22821] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4158'.
[  684.617286][T22754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4140'.
[  684.836138][T22831] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4160'.
[  685.012501][T22832] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  685.094096][T22828] team0: Mode changed to "loadbalance"
[  685.289762][T22848] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  685.310971][T22848] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  685.465552][T22854] netlink: 'syz.0.4167': attribute type 49 has an invalid length.
[  685.504711][T22854] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4167'.
[  685.604051][T22859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4168'.
[  685.652129][T22859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4168'.
[  686.145747][T22878] syzkaller0: entered promiscuous mode
[  686.153026][T22878] syzkaller0: entered allmulticast mode
[  686.301330][T22889] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4172'.
[  687.008484][T22923] openvswitch: netlink: Unknown key attributes 20
[  687.096854][ T8098] udevd[8098]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory
[  687.325107][T22932] bond0: (slave dummy0): Releasing backup interface
[  687.451507][T22945] x_tables: duplicate entry at hook 1
[  688.040350][T22971] erspan0: entered promiscuous mode
[  688.067985][T22971] erspan0: entered allmulticast mode
[  688.210392][T22973] syzkaller1: entered promiscuous mode
[  688.219317][T22973] syzkaller1: entered allmulticast mode
[  688.381550][T22965] netlink: 'syz.4.4184': attribute type 1 has an invalid length.
[  688.421104][T22988] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  689.336392][T23015] syzkaller0: entered promiscuous mode
[  689.376967][T23015] syzkaller0: entered allmulticast mode
[  689.797824][T23038] macsec1: entered promiscuous mode
[  689.803201][T23038] dummy0: entered promiscuous mode
[  689.809150][T23038] macsec1: entered allmulticast mode
[  689.817587][T23038] dummy0: entered allmulticast mode
[  689.839882][T23040] __nla_validate_parse: 4 callbacks suppressed
[  689.839903][T23040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4209'.
[  690.001661][T23045] syzkaller0: entered promiscuous mode
[  690.019942][T23045] syzkaller0: entered allmulticast mode
[  690.807549][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  691.829411][T23087] netlink: 170676 bytes leftover after parsing attributes in process `syz.2.4220'.
[  691.839771][T23087] openvswitch: netlink: ufid size 41726 bytes exceeds the range (1, 16)
[  691.865546][T23087] openvswitch: netlink: Message has 512 unknown bytes.
[  694.304826][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4227'.
[  694.490850][T23120] 8021q: adding VLAN 0 to HW filter on device bond7
[  695.441789][T23164] netlink: 'syz.1.4239': attribute type 1 has an invalid length.
[  695.476328][T23164] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4239'.
[  695.619218][T23168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4241'.
[  695.630988][T23168] nbd: must specify at least one socket
[  695.757230][T23178] x_tables: unsorted entry at hook 3
[  695.946281][T23181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4245'.
[  696.220843][T23199] syzkaller0: entered promiscuous mode
[  696.234849][T23199] syzkaller0: entered allmulticast mode
[  696.550307][T23212] netlink: 'syz.3.4252': attribute type 58 has an invalid length.
[  696.573711][T23212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4252'.
[  697.012474][T23232] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  697.181476][T23238] netlink: 'syz.2.4259': attribute type 1 has an invalid length.
[  697.190623][T23238] netlink: 220 bytes leftover after parsing attributes in process `syz.2.4259'.
[  697.519047][T23249] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4263'.
[  697.545133][T23249] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4263'.
[  697.580822][T23249] netlink: 'syz.0.4263': attribute type 1 has an invalid length.
[  697.881942][T23265] vlan4: entered promiscuous mode
[  697.933417][T23267] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4269'.
[  698.074399][T23271] netlink: 'syz.0.4271': attribute type 1 has an invalid length.
[  698.087790][T23271] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4271'.
[  698.136163][T23273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4272'.
[  698.340029][T23279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  698.360215][T23279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  698.371656][T23279] bond0 (unregistering): Released all slaves
[  698.677426][T23295] syzkaller0: entered promiscuous mode
[  698.689058][T23295] syzkaller0: entered allmulticast mode
[  698.795933][T23301] netlink: 'syz.0.4283': attribute type 1 has an invalid length.
[  699.536992][T23336] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  699.556486][T23333] team0: entered promiscuous mode
[  699.567336][T23333] team_slave_0: entered promiscuous mode
[  699.574159][T23332] nbd: couldn't find a device at index 2
[  699.585216][T23333] team_slave_1: entered promiscuous mode
[  699.593308][T23333] team0: entered allmulticast mode
[  699.601860][T23333] team_slave_0: entered allmulticast mode
[  699.613119][T23333] team_slave_1: entered allmulticast mode
[  699.899190][T23340] 8021q: adding VLAN 0 to HW filter on device bond8
[  699.946347][T18079] bridge0: entered promiscuous mode
[  700.306164][T23324] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  700.495201][T23372] __nla_validate_parse: 7 callbacks suppressed
[  700.495221][T23372] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4300'.
[  700.629588][T23372] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4300'.
[  700.667175][T23372] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4300'.
[  700.717597][T23382] netlink: 'syz.0.4303': attribute type 1 has an invalid length.
[  700.772446][T23385] sctp: [Deprecated]: syz.3.4302 (pid 23385) Use of struct sctp_assoc_value in delayed_ack socket option.
[  700.772446][T23385] Use struct sctp_sack_info instead
[  700.815054][T23382] netlink: 'syz.0.4303': attribute type 13 has an invalid length.
[  700.843433][T23382] netlink: 'syz.0.4303': attribute type 17 has an invalid length.
[  701.066840][T23400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4307'.
[  701.257901][T23405] netlink: 'syz.3.4305': attribute type 1 has an invalid length.
[  701.775420][T23417] netlink: 'syz.0.4311': attribute type 1 has an invalid length.
[  701.819663][T23424] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4312'.
[  701.860194][T23417] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  702.000210][T23431] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4315'.
[  702.118983][T23433] syzkaller0: entered promiscuous mode
[  702.141865][T23433] syzkaller0: entered allmulticast mode
[  702.475738][T23451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4319'.
[  702.560680][T23415] syzkaller0: entered promiscuous mode
[  702.567023][T23415] syzkaller0: entered allmulticast mode
[  702.929211][T23472] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4324'.
[  703.357905][T23493] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4331'.
[  703.406276][T23493] nbd: couldn't find a device at index 879558656
[  703.938952][T23512] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.4338'.
[  704.036974][T23521] netlink: 'syz.3.4339': attribute type 13 has an invalid length.
[  704.045435][T23521] bond0: option fail_over_mac: invalid value (183)
[  704.203197][T23526] syzkaller0: entered promiscuous mode
[  704.208919][T23526] syzkaller0: entered allmulticast mode
[  704.213190][T23528] netlink: 'syz.1.4343': attribute type 1 has an invalid length.
[  704.538861][T23541] veth7: entered allmulticast mode
[  704.922246][T23533] veth0_virt_wifi: left promiscuous mode
[  705.090142][T23533] bridge2: left promiscuous mode
[  705.290976][T23533] 8021q: adding VLAN 0 to HW filter on device bond2
[  705.409581][T23533] veth7: left promiscuous mode
[  705.424893][T23533] 8021q: adding VLAN 0 to HW filter on device bond3
[  705.447003][T23533] 8021q: adding VLAN 0 to HW filter on device bond0
[  705.668200][T23570] __nla_validate_parse: 6 callbacks suppressed
[  705.668218][T23570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4353'.
[  705.892788][T23583] syzkaller0: entered promiscuous mode
[  705.901161][T23583] syzkaller0: entered allmulticast mode
[  705.966792][T23588] sctp: [Deprecated]: syz.3.4358 (pid 23588) Use of int in max_burst socket option.
[  705.966792][T23588] Use struct sctp_assoc_value instead
[  706.227918][T23601] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4363'.
[  706.457993][T23613] netlink: 'syz.2.4366': attribute type 1 has an invalid length.
[  706.474756][T23613] netlink: 228 bytes leftover after parsing attributes in process `syz.2.4366'.
[  706.699599][T23627] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4369'.
[  706.733923][T23628] netlink: 'syz.1.4368': attribute type 13 has an invalid length.
[  706.762914][T23630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4370'.
[  706.790791][T23632] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  706.802165][T23632] IPVS: rr: FWM 3 0x00000003 - no destination available
[  707.016699][T23643] netlink: 67 bytes leftover after parsing attributes in process `syz.0.4372'.
[  707.192890][T23630] 8021q: adding VLAN 0 to HW filter on device bond14
[  707.208814][T23640] syzkaller1: tun_chr_ioctl cmd 1074025677
[  707.219600][T23640] syzkaller1: linktype set to 825
[  707.370946][T23646] tipc: Started in network mode
[  707.393909][T23646] tipc: Node identity , cluster identity 4711
[  707.427923][T23646] tipc: Failed to obtain node identity
[  707.468332][T23646] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  707.490531][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4375'.
[  707.556929][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4375'.
[  707.571947][T23657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4375'.
[  707.632560][T23650] syzkaller0: entered promiscuous mode
[  707.639392][T23650] syzkaller0: entered allmulticast mode
[  707.649055][T23652] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4373'.
[  710.219450][T23666] syzkaller1: entered promiscuous mode
[  710.225323][T23666] syzkaller1: entered allmulticast mode
[  710.248955][T23680] bond14: entered allmulticast mode
[  710.281149][T23680] ipip2: entered allmulticast mode
[  710.443642][T23690] syzkaller0: entered promiscuous mode
[  710.457312][T23690] syzkaller0: entered allmulticast mode
[  710.558527][T23701] netlink: 'syz.0.4386': attribute type 3 has an invalid length.
[  710.566563][T23701] netlink: 'syz.0.4386': attribute type 3 has an invalid length.
[  710.592751][T23700] syzkaller1: entered promiscuous mode
[  710.600236][T23700] syzkaller1: entered allmulticast mode
[  710.688150][T23706] tipc: Started in network mode
[  710.693132][T23706] tipc: Node identity ac14140f, cluster identity 4711
[  710.711392][T23706] tipc: New replicast peer: 255.255.255.255
[  710.718325][T23706] tipc: Enabled bearer <udp:syz2>, priority 10
[  710.750257][   T30] audit: type=1804 audit(1783816413.457:13): pid=23706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4387" name="/newroot/297/cgroup.controllers" dev="tmpfs" ino=1541 res=1 errno=0
[  710.790913][   T30] audit: type=1800 audit(1783816413.487:14): pid=23706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4387" name="cgroup.controllers" dev="tmpfs" ino=1541 res=0 errno=0
[  710.883172][T23711] netlink: 'syz.2.4390': attribute type 1 has an invalid length.
[  710.928863][T23711] 8021q: adding VLAN 0 to HW filter on device bond15
[  710.937883][T23714] tunl0: Caught tx_queue_len zero misconfig
[  710.964051][T23717] bond15: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  710.975512][T23717] bond15: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  711.008766][T23711] bond15: (slave ip6gretap1): making interface the new active one
[  711.019219][T23711] bond15: (slave ip6gretap1): Enslaving as an active interface with an up link
[  711.098262][T23721] netlink: 'syz.1.4392': attribute type 13 has an invalid length.
[  711.110148][T23721] gretap0: refused to change device tx_queue_len
[  711.120192][T23721] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  711.604513][T23741] netlink: 'syz.0.4398': attribute type 1 has an invalid length.
[  711.861308][T23752] netlink: 'syz.2.4399': attribute type 10 has an invalid length.
[  712.169959][T23754] __nla_validate_parse: 6 callbacks suppressed
[  712.169979][T23754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4400'.
[  714.451085][T23743] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  714.452333][T23741] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  714.481570][T18079] tipc: Node number set to 2886997007
[  714.561561][T23752] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  714.642699][T23764] xt_hashlimit: size too large, truncated to 1048576
[  715.057725][T23779] netlink: 'syz.1.4407': attribute type 4 has an invalid length.
[  715.070290][T23779] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4407'.
[  715.112434][T23781] bond9: Unable to set up delay as MII monitoring is disabled
[  715.142720][T23781] bond9 (unregistering): Released all slaves
[  715.258748][T23775] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  715.697951][T23809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4413'.
[  715.814312][T23812] netlink: 'syz.1.4415': attribute type 3 has an invalid length.
[  716.282860][ T7165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  716.294109][ T7165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  716.324239][T23836] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4422'.
[  716.573196][T23850] netlink: 912 bytes leftover after parsing attributes in process `syz.1.4423'.
[  716.599758][T23850] openvswitch: netlink: Flow key attr not present in new flow.
[  716.611871][T23852] netlink: 'syz.3.4426': attribute type 10 has an invalid length.
[  716.675652][T23852] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4426'.
[  716.750996][T23855] netlink: 'syz.3.4427': attribute type 49 has an invalid length.
[  716.809395][T23857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4428'.
[  716.825258][T23857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4428'.
[  718.964926][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  719.278808][T23833] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  719.371801][T23861] bridge4: entered allmulticast mode
[  719.419150][T23866] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4429'.
[  719.522340][T23872] x_tables: unsorted entry at hook 2
[  719.532973][T23866] 8021q: adding VLAN 0 to HW filter on device bond4
[  719.636646][T23875] IPv6: NLM_F_CREATE should be specified when creating new route
[  719.656566][T23875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4431'.
[  719.856722][T23886] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  719.971346][T23886] 
: renamed from dummy0
[  720.062135][T23894] x_tables: duplicate underflow at hook 2
[  720.183959][T23897] syzkaller1: entered promiscuous mode
[  720.197196][T23897] syzkaller1: entered allmulticast mode
[  720.850550][T23918] syzkaller0: entered promiscuous mode
[  720.856383][T23918] syzkaller0: entered allmulticast mode
[  720.874174][T23918] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  720.882755][T23918] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  720.904965][T23918] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  721.122921][T23924] lo speed is unknown, defaulting to 1000
[  721.213683][T23927] xt_limit: Overflow, try lower: 2/2147483648
[  721.439709][T23924] xfrm0 speed is unknown, defaulting to 1000
[  722.193445][T23941] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4451'.
[  722.219585][T23941] netlink: 'syz.3.4451': attribute type 1 has an invalid length.
[  722.228907][T23941] netlink: 'syz.3.4451': attribute type 5 has an invalid length.
[  722.237423][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4451'.
[  724.783217][T23963] openvswitch: netlink: Missing valid actions attribute.
[  724.801054][T23963] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  725.363925][T23938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4450'.
[  725.549359][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  725.592465][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  725.720054][T23974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4461'.
[  725.752288][T23974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4461'.
[  725.845131][T23986] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4461'.
[  726.328095][T24000] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4467'.
[  726.785103][T24006] lo speed is unknown, defaulting to 1000
[  727.089073][T24021] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  727.113424][T24021] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  727.179522][T24021] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  727.217020][T24015] syzkaller0: entered promiscuous mode
[  727.256051][T24015] syzkaller0: entered allmulticast mode
[  727.479551][T24006] xfrm0 speed is unknown, defaulting to 1000
[  728.622430][T24054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4481'.
[  730.443563][T24053] bridge0: Caught tx_queue_len zero misconfig
[  730.458305][T24054] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  730.475404][T24054] batman_adv: batadv0: Removing interface: batadv_slave_0
[  730.525767][T24054] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  730.562824][T24054] batman_adv: batadv0: Removing interface: batadv_slave_1
[  730.597448][T24059] netlink: 'syz.0.4482': attribute type 1 has an invalid length.
[  730.608179][T24058] netlink: 'syz.0.4482': attribute type 1 has an invalid length.
[  730.902949][T24073] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4487'.
[  731.292560][T24083] bond0: entered promiscuous mode
[  731.339317][T24083] bond0: left promiscuous mode
[  731.673615][T24097] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  731.875153][T24095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4489'.
[  732.139210][T24110] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  732.174979][T24110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4494'.
[  732.313424][T24116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4498'.
[  732.351493][T24116] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4498'.
[  732.746030][T24138] netlink: 'syz.1.4503': attribute type 1 has an invalid length.
[  732.850775][T24142] netlink: 'syz.1.4503': attribute type 10 has an invalid length.
[  732.859360][T24142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4503'.
[  733.119692][T24138] 8021q: adding VLAN 0 to HW filter on device bond15
[  733.217997][T24156] netlink: 'syz.2.4507': attribute type 21 has an invalid length.
[  733.261914][T24156] netlink: 'syz.2.4507': attribute type 22 has an invalid length.
[  733.297578][T24156] netlink: 'syz.2.4507': attribute type 23 has an invalid length.
[  733.326356][T24156] netlink: 'syz.2.4507': attribute type 25 has an invalid length.
[  733.348931][T24156] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4507'.
[  734.188721][T24202] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.4517'.
[  736.611272][T24184] bridge0: port 3(syz_tun) entered blocking state
[  736.626253][T24184] bridge0: port 3(syz_tun) entered disabled state
[  736.640679][T24184] syz_tun: entered allmulticast mode
[  736.653502][T24184] syz_tun: entered promiscuous mode
[  736.786404][T24207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4518'.
[  736.910275][T24218] syzkaller0: entered promiscuous mode
[  736.917387][T24218] syzkaller0: entered allmulticast mode
[  737.057272][T24211] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  737.075184][T24211] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  737.083769][T24211] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  737.100800][T24224] tipc: Failed to remove unknown binding: 66,1,1/0:1229947920/1229947922
[  737.140274][T24228] ÿ: renamed from bond_slave_0
[  737.571568][T24248] netlink: 'syz.0.4532': attribute type 3 has an invalid length.
[  737.589727][T24248] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4532'.
[  737.617815][T24248] netlink: 'syz.0.4532': attribute type 1 has an invalid length.
[  737.642685][T24250] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4532'.
[  737.651998][T24248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4532'.
[  737.661373][T24250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4532'.
[  737.672109][T24244] syzkaller0: entered promiscuous mode
[  737.684192][T24250] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4532'.
[  737.686489][T24244] syzkaller0: entered allmulticast mode
[  738.305317][T24263] netlink: 'syz.2.4535': attribute type 16 has an invalid length.
[  738.323756][T24263] netlink: 'syz.2.4535': attribute type 17 has an invalid length.
[  742.936048][T24283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4539'.
[  743.863570][T24263] bridge0: port 3(syz_tun) entered blocking state
[  743.870231][T24263] bridge0: port 3(syz_tun) entered forwarding state
[  743.892363][T24263] bridge0: port 1(bridge_slave_0) entered blocking state
[  743.899659][T24263] bridge0: port 1(bridge_slave_0) entered forwarding state
[  743.912618][T24263] bridge0: port 2(bridge_slave_1) entered blocking state
[  743.919972][T24263] bridge0: port 2(bridge_slave_1) entered forwarding state
[  744.016471][T18083] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  744.144161][T24272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4537'.
[  744.315607][T24283] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR
[  744.480963][T24288] 8021q: adding VLAN 0 to HW filter on device bond0
[  744.519692][T24288] 8021q: adding VLAN 0 to HW filter on device team0
[  744.549203][T24288] 8021q: adding VLAN 0 to HW filter on device batadv0
[  744.575975][T18081] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  744.645898][T24288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  744.666848][T24288] veth1_vlan: left promiscuous mode
[  744.676983][T24288] veth0_vlan: left promiscuous mode
[  744.684416][T24288] veth0_vlan: entered promiscuous mode
[  744.692206][T24288] veth1_vlan: entered promiscuous mode
[  744.703499][T24288] veth1_macvtap: left promiscuous mode
[  744.711327][T24288] veth0_macvtap: left promiscuous mode
[  744.720147][T24288] veth0_macvtap: entered promiscuous mode
[  744.728366][T24288] veth1_macvtap: entered promiscuous mode
[  744.742444][T24288] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  744.751146][T24288] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  744.759984][T24288] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  744.769190][T24288] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  744.786698][T24288] 8021q: adding VLAN 0 to HW filter on device bond1
[  744.795099][T24288] 8021q: adding VLAN 0 to HW filter on device bond2
[  744.813275][T24288] 8021q: adding VLAN 0 to HW filter on device bond3
[  744.825767][T24288] 8021q: adding VLAN 0 to HW filter on device bond4
[  744.838255][T24288] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  744.846586][T24288] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  744.856227][T24288] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  744.870715][T24288] 8021q: adding VLAN 0 to HW filter on device bond5
[  744.878408][T24288] 8021q: adding VLAN 0 to HW filter on device bond6
[  744.899084][T24288] 8021q: adding VLAN 0 to HW filter on device bond9
[  744.908806][T18083] bridge3: entered promiscuous mode
[  745.015095][ T7160] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  745.034978][ T7160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  745.055019][ T7160] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  745.064421][ T7160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  745.078946][ T7160] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  745.090912][ T7160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  745.100902][ T7160] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  745.111265][ T7160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  745.310710][T24319] bond16 (unregistering): Released all slaves
[  745.388332][T24325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4550'.
[  745.862989][T24350] bridge0: port 3(syz_tun) entered disabled state
[  745.873134][T24350] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.880799][T24350] bridge0: port 1(bridge_slave_0) entered disabled state
[  746.245570][ T5713] xfrm0 speed is unknown, defaulting to 1000
[  746.246652][ T7161] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  746.251648][ T5713] syz0: Port: 1 Link DOWN
[  746.293685][ T7161] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  746.323173][ T7161] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  746.337766][T24352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4556'.
[  746.450266][T24354] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4557'.
[  746.594216][T10256] xfrm0 speed is unknown, defaulting to 1000
[  746.602506][ T7161] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  746.910090][T24376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4563'.
[  746.977074][T24378] netlink: 'syz.0.4564': attribute type 13 has an invalid length.
[  747.050022][T24382] veth1_to_bond: entered allmulticast mode
[  747.072143][T24382] veth1_to_bond: entered promiscuous mode
[  747.102479][T24382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4567'.
[  747.105858][T24385] syz_tun: entered allmulticast mode
[  747.152942][T24382] veth1_to_bond (unregistering): left allmulticast mode
[  747.177583][T24382] veth1_to_bond (unregistering): left promiscuous mode
[  747.193279][T24382] bond0: (slave bond_slave_1): Releasing backup interface
[  747.258565][T24387] syzkaller0: entered promiscuous mode
[  747.271001][T24385] sctp: [Deprecated]: syz.3.4568 (pid 24385) Use of struct sctp_assoc_value in delayed_ack socket option.
[  747.271001][T24385] Use struct sctp_sack_info instead
[  747.284206][T24387] syzkaller0: entered allmulticast mode
[  747.315807][T24385] IPVS: sh: FWM 3 0x00000003 - no destination available
[  747.358912][T24392] netlink: 'syz.2.4571': attribute type 1 has an invalid length.
[  747.429200][T24396] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4572'.
[  747.458030][T24392] bond16: entered promiscuous mode
[  747.470207][T24392] 8021q: adding VLAN 0 to HW filter on device bond16
[  747.494217][T24399] 8021q: adding VLAN 0 to HW filter on device bond16
[  747.501869][T24399] bond16: (slave gre2): The slave device specified does not support setting the MAC address
[  747.513854][T24399] bond16: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  747.530839][T24399] bond16: (slave gre2): making interface the new active one
[  747.547414][T24399] gre2: entered promiscuous mode
[  747.558224][T24399] bond16: (slave gre2): Enslaving as an active interface with an up link
[  747.583477][T24403] sctp: [Deprecated]: syz.1.4574 (pid 24403) Use of struct sctp_assoc_value in delayed_ack socket option.
[  747.583477][T24403] Use struct sctp_sack_info instead
[  747.682451][T24392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4571'.
[  747.686194][T24400] netlink: 'syz.4.4573': attribute type 21 has an invalid length.
[  747.743199][T24392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4571'.
[  748.058635][T24424] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  748.064222][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4580'.
[  748.312636][T24400] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4573'.
[  748.425169][T24444] netlink: 'syz.0.4585': attribute type 13 has an invalid length.
[  748.441345][T24400] netlink: 'syz.4.4573': attribute type 4 has an invalid length.
[  748.493407][T24446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4585'.
[  748.586537][T24400] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4573'.
[  748.671979][T24442] ±ÿmrÝ„`eù: renamed from lo (while UP)
[  748.862491][T24459] netlink: 'syz.3.4589': attribute type 1 has an invalid length.
[  748.923494][T24458] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4589'.
[  748.959257][T24459] 8021q: adding VLAN 0 to HW filter on device bond10
[  749.015095][T24459] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4589'.
[  749.118284][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4594'.
[  749.133751][T24473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4594'.
[  749.175403][T24470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4592'.
[  749.418008][T24484] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4598'.
[  749.463256][T24484] bond0: entered promiscuous mode
[  749.500671][T24484] bond_slave_0: entered promiscuous mode
[  749.565515][T24484] bond_slave_1: entered promiscuous mode
[  749.586493][T24484] bridge0: entered promiscuous mode
[  749.601704][T24484] gretap0: entered promiscuous mode
[  749.645919][T24484] debugfs: 'hsr0' already exists in 'hsr'
[  749.685176][T24484] Cannot create hsr debugfs directory
[  749.698595][T24484] hsr0: entered promiscuous mode
[  749.758398][T24484] sctp: [Deprecated]: syz.2.4598 (pid 24484) Use of int in max_burst socket option.
[  749.758398][T24484] Use struct sctp_assoc_value instead
[  750.007869][T24521] syzkaller0: entered promiscuous mode
[  750.039071][T24521] syzkaller0: entered allmulticast mode
[  750.430477][T24538] netlink: 'syz.0.4610': attribute type 1 has an invalid length.
[  750.587736][T24542] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  757.365093][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  768.865708][T24554] openvswitch: netlink: Duplicate or invalid key (type 0).
[  768.881979][T24554] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.104483][T24574] netlink: 'syz.0.4618': attribute type 2 has an invalid length.
[  769.215873][T24582] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.4620'.
[  769.232653][T24574] ´: entered promiscuous mode
[  769.249721][T24582] netlink: 'syz.2.4620': attribute type 2 has an invalid length.
[  769.275822][T24584] openvswitch: netlink: Key 6 has unexpected len 8 expected 2
[  769.471820][T24596] IPv6: NLM_F_CREATE should be specified when creating new route
[  769.480014][T24596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  769.487312][T24596] IPv6: NLM_F_CREATE should be set when creating new route
[  769.494662][T24596] IPv6: NLM_F_CREATE should be set when creating new route
[  769.497663][T24586] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  770.105319][T24625] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4632'.
[  770.138009][T24625] syzkaller1: entered promiscuous mode
[  770.151859][T24625] syzkaller1: entered allmulticast mode
[  770.542180][ T7168] nci: nci_rx_work: unknown MT 0x6
[  770.555284][T24654] netlink: 'syz.4.4628': attribute type 4 has an invalid length.
[  770.563276][T24654] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4628'.
[  770.597300][T24654] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  770.671725][T24657] Cannot find del_set index 4 as target
[  771.460526][T24676] netlink: 596 bytes leftover after parsing attributes in process `syz.3.4641'.
[  771.549716][T24678] syzkaller0: entered promiscuous mode
[  771.555513][T24678] syzkaller0: entered allmulticast mode
[  771.621600][T24682] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  771.630636][T24682] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  771.639817][T24682] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  772.850991][T24621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  772.979530][T24689] netlink: 'syz.0.4644': attribute type 1 has an invalid length.
[  773.303443][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4647'.
[  773.312758][T24709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4647'.
[  775.052997][T24689] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  775.386829][T24724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4651'.
[  775.583551][T24733] bond11: option all_slaves_active: invalid value (127)
[  775.601492][T24733] bond11 (unregistering): Released all slaves
[  775.782335][T24751] erspan0: left promiscuous mode
[  775.802040][T24754] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4656'.
[  775.819841][T24755] sctp: [Deprecated]: syz.2.4657 (pid 24755) Use of int in max_burst socket option deprecated.
[  775.819841][T24755] Use struct sctp_assoc_value instead
[  775.892198][T24758] netlink: 'syz.3.4660': attribute type 32 has an invalid length.
[  775.906181][T24758] netlink: 'syz.3.4660': attribute type 32 has an invalid length.
[  776.038058][T24751] team0: left promiscuous mode
[  776.050863][T24751] team_slave_0: left promiscuous mode
[  776.060735][T24751] team_slave_1: left promiscuous mode
[  776.074386][T24751] 8021q: adding VLAN 0 to HW filter on device team0
[  776.151313][T24751] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  776.321561][T24764] FAULT_INJECTION: forcing a failure.
[  776.321561][T24764] name failslab, interval 1, probability 0, space 0, times 0
[  776.337262][T24764] CPU: 0 UID: 0 PID: 24764 Comm: syz.3.4661 Not tainted syzkaller #0 PREEMPT(full) 
[  776.337293][T24764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  776.337308][T24764] Call Trace:
[  776.337317][T24764]  <TASK>
[  776.337327][T24764]  dump_stack_lvl+0xe8/0x150
[  776.337376][T24764]  should_fail_ex+0x40c/0x560
[  776.337521][T24764]  should_failslab+0xa8/0x100
[  776.337557][T24764]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  776.337584][T24764]  ? local_lock_release+0x9c/0x160
[  776.337644][T24764]  ? __alloc_skb+0x1d7/0x7a0
[  776.337694][T24764]  ? __alloc_skb+0x1d7/0x7a0
[  776.337733][T24764]  __alloc_skb+0x1d7/0x7a0
[  776.337768][T24764]  netlink_ack+0x136/0xb30
[  776.337827][T24764]  ? __pfx_genl_rcv_msg+0x10/0x10
[  776.337876][T24764]  ? __pfx_nl80211_post_doit+0x10/0x10
[  776.337939][T24764]  ? __pfx_ref_tracker_free+0x10/0x10
[  776.338003][T24764]  netlink_rcv_skb+0x2a4/0x4a0
[  776.338039][T24764]  ? __pfx_genl_rcv_msg+0x10/0x10
[  776.338069][T24764]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  776.338121][T24764]  ? down_read+0x2be/0x330
[  776.338182][T24764]  genl_rcv+0x28/0x40
[  776.338208][T24764]  netlink_unicast+0x7bb/0x940
[  776.338252][T24764]  netlink_sendmsg+0x813/0xb40
[  776.338283][T24764]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.338309][T24764]  ? aa_sock_msg_perm+0xf1/0x1b0
[  776.338364][T24764]  ? __pfx_netlink_sendmsg+0x10/0x10
[  776.338385][T24764]  sock_sendmsg_nosec+0x13a/0x180
[  776.338435][T24764]  ____sys_sendmsg+0x54e/0x850
[  776.338499][T24764]  ? __pfx_____sys_sendmsg+0x10/0x10
[  776.338544][T24764]  ? import_iovec+0x73/0xa0
[  776.338624][T24764]  ___sys_sendmsg+0x2a5/0x360
[  776.338658][T24764]  ? __lock_acquire+0x683/0x2cf0
[  776.338694][T24764]  ? __pfx____sys_sendmsg+0x10/0x10
[  776.338769][T24764]  ? __fget_files+0x2a/0x420
[  776.338798][T24764]  ? __fget_files+0x3a2/0x420
[  776.338839][T24764]  __x64_sys_sendmsg+0x1b1/0x290
[  776.338877][T24764]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  776.338933][T24764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.338958][T24764]  do_syscall_64+0x174/0x580
[  776.339031][T24764]  ? trace_irq_disable+0x3b/0x140
[  776.339061][T24764]  ? clear_bhb_loop+0x40/0x90
[  776.339089][T24764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  776.339112][T24764] RIP: 0033:0x7f604339de59
[  776.339140][T24764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  776.339160][T24764] RSP: 002b:00007f60442c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  776.339183][T24764] RAX: ffffffffffffffda RBX: 00007f6043625fa0 RCX: 00007f604339de59
[  776.339200][T24764] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  776.339214][T24764] RBP: 00007f60442c7090 R08: 0000000000000000 R09: 0000000000000000
[  776.339228][T24764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  776.339241][T24764] R13: 00007f6043626038 R14: 00007f6043625fa0 R15: 00007ffc6bf73468
[  776.339277][T24764]  </TASK>
[  777.306596][T24807] openvswitch: netlink: Flow actions attr not present in new flow.
[  777.424390][T24802] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled!
[  777.845406][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  777.887972][T24818] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4674'.
[  778.266308][T24820] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  778.603219][T24843] xt_hashlimit: size too large, truncated to 1048576
[  778.686510][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4679'.
[  778.942551][T24858] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4683'.
[  778.991182][T24858] netlink: 'syz.1.4683': attribute type 1 has an invalid length.
[  779.295940][T24864] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4683'.
[  779.472810][T24858] bond16: entered promiscuous mode
[  779.494113][T24858] 8021q: adding VLAN 0 to HW filter on device bond16
[  779.854414][T24881] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  779.989582][T24888] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4685'.
[  780.048082][T24869] syzkaller1: tun_chr_ioctl cmd 1074025677
[  780.142921][T24895] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4685'.
[  780.194077][T24869] syzkaller1: linktype set to 1
[  780.221901][T24897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4689'.
[  780.300455][T24900] sctp: [Deprecated]: syz.4.4684 (pid 24900) Use of struct sctp_assoc_value in delayed_ack socket option.
[  780.300455][T24900] Use struct sctp_sack_info instead
[  780.493520][T24897] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4689'.
[  780.654764][T24906] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  780.971055][T24923] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4693'.
[  781.341001][T24925] bond0: Device is already in use.
[  781.350234][T24926] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  781.505969][T24939] ±ÿmrÝ„`eù speed is unknown, defaulting to 1000
[  781.597275][T24948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4702'.
[  781.758156][T24958] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4703'.
[  781.768057][T24958] netlink: 'syz.1.4703': attribute type 10 has an invalid length.
[  781.794143][T24958] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4703'.
[  781.860780][T24958] geneve0: entered promiscuous mode
[  781.875509][T24958] geneve0: entered allmulticast mode
[  781.882041][T24965] netlink: 296 bytes leftover after parsing attributes in process `syz.0.4705'.
[  781.928214][ T7168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  781.998464][T24967] syzkaller0: entered promiscuous mode
[  782.026527][T24967] syzkaller0: entered allmulticast mode
[  782.152554][T24960] ±ÿmrÝ„`eù speed is unknown, defaulting to 1000
[  782.166495][T24939] xfrm0 speed is unknown, defaulting to 1000
[  782.959114][T24960] xfrm0 speed is unknown, defaulting to 1000
[  782.992269][T24992] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  783.463226][T25005] netlink: 'syz.0.4711': attribute type 1 has an invalid length.
[  783.486092][T25005] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4711'.
[  783.983126][T25015] netlink: 'syz.2.4714': attribute type 27 has an invalid length.
[  784.097433][T25019] netlink: 'syz.3.4716': attribute type 21 has an invalid length.
[  784.219829][T25019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4716'.
[  784.271644][T25025] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4718'.
[  784.733901][T25027] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.4718'.
[  785.657775][T25051] netlink: 'syz.3.4723': attribute type 1 has an invalid length.
[  785.706157][T25049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4721'.
[  785.871309][T25051] 8021q: adding VLAN 0 to HW filter on device bond11
[  785.985866][T25052] bond11: (slave gretap1): making interface the new active one
[  786.023168][T25052] bond11: (slave gretap1): Enslaving as an active interface with an up link
[  786.057734][T25056] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  786.071849][T25056] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  786.114184][T25056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4721'.
[  786.379681][T25075] xt_CT: You must specify a L4 protocol and not use inversions on it
[  786.618505][T25086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4732'.
[  786.761829][T25092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4736'.
[  786.795993][T25092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4736'.
[  786.930011][T25104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4740'.
[  786.940621][T25104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4740'.
[  786.976126][T25097] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  787.011228][T25106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4740'.
[  787.023697][T25106] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4740'.
[  787.567738][T25127] can: request_module (can-proto-3) failed.
[  787.902019][T25139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  788.149943][T25154] netlink: 176 bytes leftover after parsing attributes in process `syz.1.4755'.
[  788.164346][T25156] netlink: 'syz.0.4756': attribute type 4 has an invalid length.
[  788.198168][T25156] netlink: 'syz.0.4756': attribute type 4 has an invalid length.
[  788.286291][T25164] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[  788.840713][T25187] syzkaller1: tun_chr_ioctl cmd 1074025677
[  788.854427][T25187] syzkaller1: linktype set to 773
[  788.921541][T25160] bond0: (slave wlan0): Opening slave failed
[  788.979041][T25190] IPVS: set_ctl: invalid protocol: 22 172.20.20.45:20000
[  789.229784][T25205] netlink: 'syz.2.4768': attribute type 5 has an invalid length.
[  789.572620][T25231] netlink: 'syz.2.4774': attribute type 21 has an invalid length.
[  789.619121][T25227] ±ÿmrÝ„`eù speed is unknown, defaulting to 1000
[  789.654779][T25231] IPv6: NLM_F_CREATE should be specified when creating new route
[  790.400757][T25267] netlink: 'syz.0.4785': attribute type 2 has an invalid length.
[  790.499629][T25227] xfrm0 speed is unknown, defaulting to 1000
[  790.650792][T25277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  790.673148][T25277] batman_adv: batadv0: Removing interface: batadv_slave_0
[  790.730243][T25277] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  790.765302][T25277] batman_adv: batadv0: Removing interface: batadv_slave_1
[  791.401653][T25300] x_tables: ip6_tables: eui64 match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD
[  791.658677][T25313] __nla_validate_parse: 6 callbacks suppressed
[  791.658696][T25313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4796'.
[  792.356178][T21696] block nbd3: Receive control failed (result -32)
[  792.377481][T15600] block nbd3: Receive control failed (result -32)
[  792.388583][ T4937] block nbd3: Receive control failed (result -32)
[  792.417512][T25333] xt_CT: You must specify a L4 protocol and not use inversions on it
[  792.684777][T25342] netlink: 'syz.0.4800': attribute type 1 has an invalid length.
[  792.716513][T25342] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4800'.
[  792.999469][T25360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4804'.
[  793.253439][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4808'.
[  793.899842][T25381] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4809'.
[  793.910391][T25381] netlink: 'syz.4.4809': attribute type 11 has an invalid length.
[  795.315858][T25421] netlink: 404 bytes leftover after parsing attributes in process `syz.3.4813'.
[  795.325986][T25421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4813'.
[  795.335110][T25421] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4813'.
[  795.344298][T25421] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4813'.
[  795.476723][T25348] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  795.802712][T25433] sctp: [Deprecated]: syz.0.4816 (pid 25433) Use of int in maxseg socket option.
[  795.802712][T25433] Use struct sctp_assoc_value instead
[  796.355065][T25453] xt_l2tp: missing protocol rule (udp|l2tpip)
[  796.388678][T25448] bond0: Unable to set peer notification delay as MII monitoring is disabled
[  796.453832][T25453] ±ÿmrÝ„`eù speed is unknown, defaulting to 1000
[  797.070047][T25453] xfrm0 speed is unknown, defaulting to 1000
[  797.661660][T25490] veth1_macvtap: left promiscuous mode
[  797.764689][T25490] veth1_macvtap: entered promiscuous mode
[  797.807223][T25501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4818'.
[  797.821193][T25494] bond5: Removing last ns target with arp_interval on
[  798.247600][   T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.257889][T18083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.285975][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.336574][T25518] syzkaller1: tun_chr_ioctl cmd 1074025677
[  798.352915][T25518] syzkaller1: linktype set to 805
[  798.370550][T25521] IPVS: Unknown mcast interface: pimreg0
[  798.515012][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.635945][T25527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4831'.
[  798.796360][T25530] netlink: 'syz.0.4832': attribute type 1 has an invalid length.
[  798.817434][T25530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4832'.
[  798.850986][T25530] netlink: 'syz.0.4832': attribute type 1 has an invalid length.
[  799.194456][T25545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4836'.
[  799.224400][T25545] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4836'.
[  799.263087][T25551] netlink: 'syz.2.4837': attribute type 10 has an invalid length.
[  799.299748][T25545] netlink: 66 bytes leftover after parsing attributes in process `syz.3.4836'.
[  799.372859][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.448306][T18083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.670869][ T7135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  799.935246][T25557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4834'.
[  800.198000][T25581] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4844'.
[  800.250188][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.283308][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.294953][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.303636][T25583] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4845'.
[  800.303754][T25584] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4845'.
[  800.365494][T25582] team0: entered promiscuous mode
[  800.384974][T25582] team_slave_0: entered promiscuous mode
[  800.401368][T25582] team_slave_1: entered promiscuous mode
[  800.593129][T25595] bond18: (slave bond_slave_1): Device is not our slave
[  800.642016][T25595] bond18: option active_slave: invalid value (bond_slave_1)
[  800.687685][T25595] bond18 (unregistering): Released all slaves
[  800.856707][T25602] pim6reg1: entered promiscuous mode
[  800.863859][T25602] pim6reg1: entered allmulticast mode
[  800.991500][T25617] netlink: 'syz.1.4853': attribute type 1 has an invalid length.
[  801.238276][T25626] xt_hashlimit: size too large, truncated to 1048576
[  801.324878][T25628] 
@0Ù: renamed from bond_slave_1 (while UP)
[  801.442745][T25630] syzkaller0: entered promiscuous mode
[  801.454816][T25630] syzkaller0: entered allmulticast mode
[  801.665945][T25643] netlink: 'syz.2.4861': attribute type 12 has an invalid length.
[  801.721998][T25646] netlink: 'syz.2.4861': attribute type 3 has an invalid length.
[  802.520930][T25684] netlink: 'syz.2.4873': attribute type 4 has an invalid length.
[  802.562868][T25684] netlink: 'syz.2.4873': attribute type 4 has an invalid length.
[  802.665351][T25696] netlink: 'syz.1.4875': attribute type 1 has an invalid length.
[  802.721278][T25697] netlink: 'syz.1.4875': attribute type 1 has an invalid length.
[  802.765037][T25696] netlink: 'syz.1.4875': attribute type 4 has an invalid length.
[  802.785572][T25697] netlink: 'syz.1.4875': attribute type 4 has an invalid length.
[  802.816384][T25697] __nla_validate_parse: 5 callbacks suppressed
[  802.816404][T25697] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4875'.
[  803.066743][T25712] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4880'.
[  803.088679][T25712] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4880'.
[  803.310316][T25716] syzkaller0: entered promiscuous mode
[  803.345235][T25716] syzkaller0: entered allmulticast mode
[  803.368085][T18083] net_ratelimit: 7 callbacks suppressed
[  803.368104][T18083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.536326][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.129743][T25749] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4886'.
[  804.139678][T25750] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4886'.
[  804.154177][T25749] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4886'.
[  804.165144][ T7165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.542468][T25759] bond6: entered promiscuous mode
[  804.548317][T25759] 8021q: adding VLAN 0 to HW filter on device bond6
[  804.565310][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.670550][T25765] ±ÿmrÝ„`eù speed is unknown, defaulting to 1000
[  804.786204][T25774] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  804.794056][T25774] syzkaller0: entered promiscuous mode
[  804.800224][T25774] syzkaller0: entered allmulticast mode
[  804.810513][T25774] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  804.936092][T25774] tipc: Resetting bearer <eth:syzkaller0>
[  804.981670][T25773] tipc: Resetting bearer <eth:syzkaller0>
[  805.089090][T25773] tipc: Disabling bearer <eth:syzkaller0>
[  805.296408][ T7168] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.340071][T25765] xfrm0 speed is unknown, defaulting to 1000
[  805.607370][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.624441][T25789] nbd4: detected capacity change from 0 to 63
[  806.216899][T25813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4900'.
[  806.312482][T25819] team0: left promiscuous mode
[  806.319988][T25819] team_slave_0: left promiscuous mode
[  806.342536][ T4937] block nbd4: Receive control failed (result -104)
[  806.342628][T25819] team_slave_1: left promiscuous mode
[  806.403161][T25819] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  806.428097][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.436275][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.663545][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  806.832596][T25832] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4903'.
[  807.123122][T25840] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4906'.
[  807.307918][T25846] validate_nla: 2 callbacks suppressed
[  807.307938][T25846] netlink: 'syz.3.4908': attribute type 12 has an invalid length.
[  807.330008][T25846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4908'.
[  807.774753][T25865] netlink: 'syz.4.4907': attribute type 1 has an invalid length.
[  807.857732][T25865] bond3: entered promiscuous mode
[  807.911028][T25865] 8021q: adding VLAN 0 to HW filter on device bond3
[  807.997410][T25865] __nla_validate_parse: 2 callbacks suppressed
[  807.997430][T25865] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4907'.
[  808.071366][ T7168] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  808.206335][T25865] bond3: (slave bridge4): making interface the new active one
[  808.218793][T25874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  808.240637][T25865] bridge4: entered promiscuous mode
[  808.428436][T25865] bond3: (slave bridge4): Enslaving as an active interface with an up link
[  808.530130][T25883] netlink: 'syz.1.4916': attribute type 2 has an invalid length.
[  808.541006][T25883] netlink: 'syz.1.4916': attribute type 1 has an invalid length.
[  808.549998][T25883] nbd: illegal input index 65544
[  808.736693][ T5754] net_ratelimit: 2 callbacks suppressed
[  808.736715][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.755634][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  808.879621][T25907] block nbd0: Unsupported socket: should be TCP or UNIX.
[  809.068387][T25910] bond17 (unregistering): Released all slaves
[  809.447113][T18081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.495391][T25939] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4927'.
[  809.545344][T25942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4926'.
[  809.596343][T25942] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4926'.
[  809.640265][T25944] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4927'.
[  809.663696][T25942] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  809.704151][T25944] netlink: 'syz.2.4927': attribute type 4 has an invalid length.
[  809.751748][T25944] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4927'.
[  809.767909][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.810725][T25944] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  809.865453][ T7133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.632894][T25980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4930'.
[  810.805251][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.994902][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.615003][T25990] Cannot find set identified by id 65535 to match
[  811.846687][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.453648][T26037] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4943'.
[  812.533211][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4943'.
[  812.566203][T26040] netlink: 'syz.1.4943': attribute type 13 has an invalid length.
[  812.581327][T26040] netlink: 'syz.1.4943': attribute type 17 has an invalid length.
[  812.773082][T26040] gretap0: refused to change device tx_queue_len
[  813.577463][T26071] sctp: [Deprecated]: syz.0.4949 (pid 26071) Use of struct sctp_assoc_value in delayed_ack socket option.
[  813.577463][T26071] Use struct sctp_sack_info instead
[  813.895657][T26085] bond0: entered promiscuous mode
[  813.910417][T26085] bridge_slave_0: entered promiscuous mode
[  813.919513][T26085] debugfs: 'hsr1' already exists in 'hsr'
[  813.928547][T26085] Cannot create hsr debugfs directory
[  813.937455][ T5754] net_ratelimit: 5 callbacks suppressed
[  813.937474][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.354904][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  814.467885][T26113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4960'.
[  814.612641][T26124] IPv4: Oversized IP packet from 127.202.26.0
[  814.967966][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.104777][T26150] netlink: 'syz.1.4967': attribute type 21 has an invalid length.
[  815.167391][T26150] netlink: 'syz.1.4967': attribute type 1 has an invalid length.
[  815.179148][T26150] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4967'.
[  815.475652][ T7169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.529445][T18079] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.678610][T26173] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3259765250/3259765252
[  815.690811][T26173] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3259765250/3259765251
[  815.711859][T26173] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3259765250/3259765252
[  815.744754][T26173] tipc: Failed to remove unknown binding: 66,0,0/2886997007:3259765250/3259765251
[  815.761786][T26178] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4978'.
[  815.814935][T26180] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4978'.
[  815.835891][T26180] bridge0: entered allmulticast mode
[  815.843120][T26180] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4978'.
[  816.018385][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.246417][T26199] syzkaller0: entered promiscuous mode
[  816.263367][T26199] syzkaller0: entered allmulticast mode
[  816.276851][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4984'.
[  816.350752][T26207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4984'.
[  816.615144][  T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.643326][T26210] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check.
[  816.840051][T26223] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component
[  816.868936][T26223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4989'.
[  817.046921][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.122840][T26243] netlink: 'syz.1.4994': attribute type 16 has an invalid length.
[  817.143556][T26243] netlink: 'syz.1.4994': attribute type 17 has an invalid length.
[  817.304354][T26243] erspan0: left allmulticast mode
[  817.336708][T26243] team0: left allmulticast mode
[  817.341834][T26243] team_slave_0: left allmulticast mode
[  817.350554][T26243] team_slave_1: left allmulticast mode
[  817.439306][T26247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4995'.
[  817.877415][T26261] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  817.967836][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5000'.
[  818.064404][T26261] bond18: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  818.119517][T26261] bond18 (unregistering): Released all slaves
[  818.232395][T26262] vlan3: entered promiscuous mode
[  818.242798][T26262] gretap0: entered promiscuous mode
[  818.951821][   T13] net_ratelimit: 5 callbacks suppressed
[  818.951843][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.224054][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  819.454056][T26312] 
[  819.456458][T26312] ======================================================
[  819.463510][T26312] WARNING: possible circular locking dependency detected
[  819.470573][T26312] syzkaller #0 Not tainted
[  819.475019][T26312] ------------------------------------------------------
[  819.482066][T26312] syz.3.5011/26312 is trying to acquire lock:
[  819.488159][T26312] ffffffff8ec848a0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x15b/0x650
[  819.497356][T26312] 
[  819.497356][T26312] but task is already holding lock:
[  819.504745][T26312] ffff88807f1da9f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  819.514271][T26312] 
[  819.514271][T26312] which lock already depends on the new lock.
[  819.514271][T26312] 
[  819.524717][T26312] 
[  819.524717][T26312] the existing dependency chain (in reverse order) is:
[  819.533757][T26312] 
[  819.533757][T26312] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[  819.541344][T26312]        __might_fault+0xcb/0x130
[  819.546571][T26312]        _copy_from_iter+0x100/0x1660
[  819.551969][T26312]        tcp_sendmsg_locked+0x2620/0x55c0
[  819.557837][T26312]        tcp_sendmsg+0x2f/0x50
[  819.562631][T26312]        sock_sendmsg_nosec+0x10e/0x180
[  819.568204][T26312]        sock_write_iter+0x2de/0x3e0
[  819.573510][T26312]        vfs_write+0x612/0xba0
[  819.578297][T26312]        ksys_write+0x150/0x270
[  819.583177][T26312]        do_syscall_64+0x174/0x580
[  819.588340][T26312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.594782][T26312] 
[  819.594782][T26312] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}:
[  819.602451][T26312]        lock_sock_nested+0x41/0x100
[  819.607760][T26312]        inet_shutdown+0x6a/0x390
[  819.612907][T26312]        nbd_mark_nsock_dead+0x2cb/0x550
[  819.618796][T26312]        recv_work+0x1cee/0x1e10
[  819.623752][T26312]        process_scheduled_works+0xa8e/0x14e0
[  819.629841][T26312]        worker_thread+0xa47/0xfb0
[  819.634970][T26312]        kthread+0x388/0x470
[  819.639587][T26312]        ret_from_fork+0x514/0xb70
[  819.644721][T26312]        ret_from_fork_asm+0x1a/0x30
[  819.650029][T26312] 
[  819.650029][T26312] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[  819.657702][T26312]        __mutex_lock+0x19d/0x1550
[  819.662852][T26312]        nbd_queue_rq+0x373/0x1150
[  819.667986][T26312]        blk_mq_dispatch_rq_list+0x499/0x1990
[  819.674177][T26312]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  819.681087][T26312]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  819.687623][T26312]        blk_mq_run_work_fn+0x16c/0x300
[  819.693187][T26312]        process_scheduled_works+0xa8e/0x14e0
[  819.699278][T26312]        worker_thread+0xa47/0xfb0
[  819.704416][T26312]        kthread+0x388/0x470
[  819.709032][T26312]        ret_from_fork+0x514/0xb70
[  819.714171][T26312]        ret_from_fork_asm+0x1a/0x30
[  819.719476][T26312] 
[  819.719476][T26312] -> #4 (&cmd->lock){+.+.}-{4:4}:
[  819.726719][T26312]        __mutex_lock+0x19d/0x1550
[  819.731954][T26312]        nbd_queue_rq+0xc1/0x1150
[  819.737022][T26312]        blk_mq_dispatch_rq_list+0x499/0x1990
[  819.743127][T26312]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  819.750011][T26312]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  819.756544][T26312]        blk_mq_run_work_fn+0x16c/0x300
[  819.762119][T26312]        process_scheduled_works+0xa8e/0x14e0
[  819.768210][T26312]        worker_thread+0xa47/0xfb0
[  819.773350][T26312]        kthread+0x388/0x470
[  819.777976][T26312]        ret_from_fork+0x514/0xb70
[  819.783111][T26312]        ret_from_fork_asm+0x1a/0x30
[  819.788411][T26312] 
[  819.788411][T26312] -> #3 (set->srcu){.+.+}-{0:0}:
[  819.795566][T26312]        __synchronize_srcu+0xc9/0x2f0
[  819.801065][T26312]        elevator_switch+0x1e8/0x7b0
[  819.806450][T26312]        elevator_change+0x2fa/0x480
[  819.811757][T26312]        elevator_set_default+0x375/0x440
[  819.817502][T26312]        blk_register_queue+0x3f3/0x4e0
[  819.823136][T26312]        __add_disk+0x6cb/0xe30
[  819.828041][T26312]        add_disk_fwnode+0xfb/0x4b0
[  819.833256][T26312]        nbd_dev_add+0x733/0xb60
[  819.838219][T26312]        nbd_init+0x15f/0x1e0
[  819.842972][T26312]        do_one_initcall+0x250/0x870
[  819.848286][T26312]        do_initcall_level+0x10a/0x1a0
[  819.853780][T26312]        do_initcalls+0x59/0xa0
[  819.858663][T26312]        kernel_init_freeable+0x29d/0x3e0
[  819.864416][T26312]        kernel_init+0x1d/0x1d0
[  819.869285][T26312]        ret_from_fork+0x514/0xb70
[  819.874451][T26312]        ret_from_fork_asm+0x1a/0x30
[  819.879798][T26312] 
[  819.879798][T26312] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[  819.887669][T26312]        __mutex_lock+0x19d/0x1550
[  819.892821][T26312]        elevator_change+0x1af/0x480
[  819.898130][T26312]        elevator_set_none+0xb5/0x140
[  819.903524][T26312]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  819.909880][T26312]        nbd_start_device+0x189/0xb30
[  819.915282][T26312]        nbd_genl_connect+0x1597/0x1c10
[  819.920862][T26312]        genl_family_rcv_msg_doit+0x233/0x340
[  819.926951][T26312]        genl_rcv_msg+0x614/0x7a0
[  819.931998][T26312]        netlink_rcv_skb+0x226/0x4a0
[  819.937313][T26312]        genl_rcv+0x28/0x40
[  819.941836][T26312]        netlink_unicast+0x7bb/0x940
[  819.947154][T26312]        netlink_sendmsg+0x813/0xb40
[  819.952483][T26312]        sock_sendmsg_nosec+0x13a/0x180
[  819.958055][T26312]        ____sys_sendmsg+0x54e/0x850
[  819.963367][T26312]        ___sys_sendmsg+0x2a5/0x360
[  819.968601][T26312]        __x64_sys_sendmsg+0x1b1/0x290
[  819.974085][T26312]        do_syscall_64+0x174/0x580
[  819.979227][T26312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.985669][T26312] 
[  819.985669][T26312] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  819.994296][T26312]        blk_alloc_queue+0x544/0x690
[  819.999615][T26312]        __blk_mq_alloc_disk+0x194/0x390
[  820.005278][T26312]        nbd_dev_add+0x494/0xb60
[  820.010257][T26312]        nbd_init+0x15f/0x1e0
[  820.014961][T26312]        do_one_initcall+0x250/0x870
[  820.020290][T26312]        do_initcall_level+0x10a/0x1a0
[  820.025861][T26312]        do_initcalls+0x59/0xa0
[  820.030745][T26312]        kernel_init_freeable+0x29d/0x3e0
[  820.036496][T26312]        kernel_init+0x1d/0x1d0
[  820.041365][T26312]        ret_from_fork+0x514/0xb70
[  820.046499][T26312]        ret_from_fork_asm+0x1a/0x30
[  820.051885][T26312] 
[  820.051885][T26312] -> #0 (fs_reclaim){+.+.}-{0:0}:
[  820.059122][T26312]        __lock_acquire+0x1520/0x2cf0
[  820.064517][T26312]        lock_acquire+0x106/0x350
[  820.069574][T26312]        fs_reclaim_acquire+0x71/0x100
[  820.075055][T26312]        prepare_alloc_pages+0x15b/0x650
[  820.080888][T26312]        __alloc_frozen_pages_noprof+0x12f/0x380
[  820.087238][T26312]        alloc_pages_mpol+0x212/0x380
[  820.092817][T26312]        alloc_pages_noprof+0xac/0x2a0
[  820.098307][T26312]        __pud_alloc+0x3a/0x460
[  820.103174][T26312]        handle_mm_fault+0x1f85/0x3080
[  820.108649][T26312]        do_user_addr_fault+0x744/0x1340
[  820.114301][T26312]        exc_page_fault+0x6a/0xc0
[  820.119345][T26312]        asm_exc_page_fault+0x26/0x30
[  820.124738][T26312]        rep_movs_alternative+0x30/0xa0
[  820.130317][T26312]        _copy_from_user+0x7a/0xb0
[  820.135525][T26312]        vlan_ioctl_handler+0xbd/0x630
[  820.141060][T26312]        sock_ioctl+0x612/0x7e0
[  820.145933][T26312]        __se_sys_ioctl+0xfc/0x170
[  820.151060][T26312]        do_syscall_64+0x174/0x580
[  820.156202][T26312]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.162641][T26312] 
[  820.162641][T26312] other info that might help us debug this:
[  820.162641][T26312] 
[  820.172879][T26312] Chain exists of:
[  820.172879][T26312]   fs_reclaim --> sk_lock-AF_INET --> &mm->mmap_lock
[  820.172879][T26312] 
[  820.185417][T26312]  Possible unsafe locking scenario:
[  820.185417][T26312] 
[  820.192885][T26312]        CPU0                    CPU1
[  820.198268][T26312]        ----                    ----
[  820.203644][T26312]   rlock(&mm->mmap_lock);
[  820.208085][T26312]                                lock(sk_lock-AF_INET);
[  820.215053][T26312]                                lock(&mm->mmap_lock);
[  820.221936][T26312]   lock(fs_reclaim);
[  820.225967][T26312] 
[  820.225967][T26312]  *** DEADLOCK ***
[  820.225967][T26312] 
[  820.234135][T26312] 2 locks held by syz.3.5011/26312:
[  820.239342][T26312]  #0: ffffffff9000d060 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5eb/0x7e0
[  820.248697][T26312]  #1: ffff88807f1da9f8 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[  820.258667][T26312] 
[  820.258667][T26312] stack backtrace:
[  820.264586][T26312] CPU: 1 UID: 0 PID: 26312 Comm: syz.3.5011 Not tainted syzkaller #0 PREEMPT(full) 
[  820.264611][T26312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  820.264626][T26312] Call Trace:
[  820.264637][T26312]  <TASK>
[  820.264647][T26312]  dump_stack_lvl+0xe8/0x150
[  820.264681][T26312]  print_circular_bug+0x2e1/0x300
[  820.264702][T26312]  check_noncircular+0x12e/0x150
[  820.264734][T26312]  __lock_acquire+0x1520/0x2cf0
[  820.264765][T26312]  ? __lock_acquire+0x683/0x2cf0
[  820.264793][T26312]  ? prepare_alloc_pages+0x15b/0x650
[  820.264817][T26312]  lock_acquire+0x106/0x350
[  820.264840][T26312]  ? prepare_alloc_pages+0x15b/0x650
[  820.264869][T26312]  fs_reclaim_acquire+0x71/0x100
[  820.264891][T26312]  ? prepare_alloc_pages+0x15b/0x650
[  820.264914][T26312]  prepare_alloc_pages+0x15b/0x650
[  820.264940][T26312]  __alloc_frozen_pages_noprof+0x12f/0x380
[  820.264968][T26312]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  820.264995][T26312]  ? __pfx_policy_nodemask+0x10/0x10
[  820.265020][T26312]  ? is_bpf_text_address+0x26/0x2b0
[  820.265047][T26312]  ? kernel_text_address+0xa5/0xe0
[  820.265078][T26312]  alloc_pages_mpol+0x212/0x380
[  820.265107][T26312]  alloc_pages_noprof+0xac/0x2a0
[  820.265135][T26312]  __pud_alloc+0x3a/0x460
[  820.265155][T26312]  handle_mm_fault+0x1f85/0x3080
[  820.265178][T26312]  ? __pfx_mt_find+0x10/0x10
[  820.265284][T26312]  ? handle_mm_fault+0xec/0x3080
[  820.265306][T26312]  ? __pfx_handle_mm_fault+0x10/0x10
[  820.265330][T26312]  ? __lock_acquire+0x683/0x2cf0
[  820.265356][T26312]  ? lock_mm_and_find_vma+0xa7/0x340
[  820.265379][T26312]  do_user_addr_fault+0x744/0x1340
[  820.265413][T26312]  exc_page_fault+0x6a/0xc0
[  820.265440][T26312]  asm_exc_page_fault+0x26/0x30
[  820.265458][T26312] RIP: 0010:rep_movs_alternative+0x30/0xa0
[  820.265481][T26312] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08
[  820.265497][T26312] RSP: 0018:ffffc90005357c98 EFLAGS: 00050206
[  820.265515][T26312] RAX: 00007ffffffff001 RBX: 0000000000000038 RCX: 0000000000000038
[  820.265528][T26312] RDX: 0000000000000001 RSI: 0000200000000240 RDI: ffffc90005357d00
[  820.265545][T26312] RBP: ffffc90005357db0 R08: ffffc90005357d37 R09: 1ffff92000a6afa6
[  820.265559][T26312] R10: dffffc0000000000 R11: fffff52000a6afa7 R12: dffffc0000000000
[  820.265573][T26312] R13: ffffffff9ac73f80 R14: ffffc90005357d00 R15: 0000200000000240
[  820.265595][T26312]  _copy_from_user+0x7a/0xb0
[  820.265622][T26312]  vlan_ioctl_handler+0xbd/0x630
[  820.265650][T26312]  ? __pfx___mutex_lock+0x10/0x10
[  820.265677][T26312]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  820.265704][T26312]  ? hook_file_ioctl+0x1f0/0x5f0
[  820.265784][T26312]  ? __pfx_vlan_ioctl_handler+0x10/0x10
[  820.265811][T26312]  sock_ioctl+0x612/0x7e0
[  820.265833][T26312]  ? __pfx_sock_ioctl+0x10/0x10
[  820.265852][T26312]  ? __fget_files+0x2a/0x420
[  820.265874][T26312]  ? __fget_files+0x3a2/0x420
[  820.265897][T26312]  ? __fget_files+0x2a/0x420
[  820.265921][T26312]  ? bpf_lsm_file_ioctl+0x9/0x20
[  820.265941][T26312]  ? __pfx_sock_ioctl+0x10/0x10
[  820.265960][T26312]  __se_sys_ioctl+0xfc/0x170
[  820.265976][T26312]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.265995][T26312]  do_syscall_64+0x174/0x580
[  820.266021][T26312]  ? trace_irq_disable+0x3b/0x140
[  820.266043][T26312]  ? clear_bhb_loop+0x40/0x90
[  820.266064][T26312]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  820.266082][T26312] RIP: 0033:0x7f604339de59
[  820.266099][T26312] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  820.266114][T26312] RSP: 002b:00007f60442c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  820.266132][T26312] RAX: ffffffffffffffda RBX: 00007f6043625fa0 RCX: 00007f604339de59
[  820.266146][T26312] RDX: 0000200000000240 RSI: 0000000000008982 RDI: 0000000000000004
[  820.266163][T26312] RBP: 00007f6043433e6f R08: 0000000000000000 R09: 0000000000000000
[  820.266174][T26312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  820.266186][T26312] R13: 00007f6043626038 R14: 00007f6043625fa0 R15: 00007ffc6bf73468
[  820.266207][T26312]  </TASK>
[  820.678388][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.749344][T26315] __nla_validate_parse: 5 callbacks suppressed
[  820.749364][T26315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5008'.
[  821.275149][  T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.605083][T18081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.685511][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.375326][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  822.725079][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.474995][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  823.766542][ T8856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.575027][  T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.645873][T18083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.805319][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.676805][  T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.845493][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.785309][  T150] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  826.885250][T10256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.685625][T18083] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.894868][ T7141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.925649][ T5754] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog