last executing test programs:

3.056691533s ago: executing program 1 (id=5677):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async)
unshare(0x2c020400) (async)
unshare(0x2c020400) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, 0x0) (async)
r2 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$kcm(r2, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000004b80)=ANY=[@ANYBLOB="68000000000000001c0000000e0000003a845457d7712ec4490a5ecfc8bae46d8e0229befa402e7e9fe50b04d9f1e5dc387fc321179549d2f81b20d264f8a54bc03e2b49ffb8fd75a3600c90691fee161d823bc800a8ed867e7e99ae5a2c664b486e00000000000010010000000000001f000000030000004d5b01493770a9a7944e1b9437134d1791f0647565a8d222f29713444b2956467d2a45e67142c6971038f79e01700dbcd8ad2423f4f138897e1cc2337dc4d1c928c78ce7c1f375c2e2eb3439ca6513adb98c7e6d617d262399d633314c37ba85ab6456d614f38a71292691e1bbf24bd26be393ba3da653ee8fd95ff969c4e4eaa9b7b39193b1da80fb951515076d889a4932f534610f74d9488d5582a2e7b39fad9fcdaac8855d405fc66b8b23e8eadc8bf5848f589fe1e1d1d047698be16401988b8cf3d92edf2bb23ba0013883f5ae8a90bcaca70a4cf800eb6216ad6ae7bcb651aa014f905c507ce48d1cf78dae243631c0ceecefe2369e000000000000001010000000000000170100006a59ffff00a577b0c422b69ebedb6de0d242eb558136a031107d1edd05fe9a99e7f82f7ae2d132385d9210eac771a9683544aae7f69804875f5c0f99c5440ea10e428a6212496a6805280d8728a74dd55ed44a8ad2fda33ba852ec283c780e30587acc52b23d5281d2dffd1870eca045837ac7436d9be3b86810ec5537dfa0271fb25059bfb4b604f5d2341d7eabaa53a5fe6b61c751926fc585b8d6029b1f64f6b67de3c287d4ed430e87349cc2f2fbca804ab3b56621f5eabb1f67f44c39c1491c0c8e8973a1ff02bdd289de6ec679774ba97d5204a91828e489791867bdd58d103d65f4f8ef6fd197ee81f74aa7948d33a1a8d11e12714f642053fb7bca2dbbb79c1b0b994f138cb854fb1d15830519336a9cb339243ad2dbb7ff70b6f78db2363b91a14274cc7a0f351b53a85ea62a51171e9100546e015d3bfe7045f04217907010323e06eb7a4658df08da36447c656d4b410943f08b0075688971dfbd7e056899a66634b789c0e3dd8cb2ddb6027b6d6466f7887cd8185d285d565de20b1a8aff3b0b9c53c625e99a7a5ad49260a9306d1bf2327bd5bffbfba9656d9ec868e05796001cf883723f44556ffc9d8b19505417f3d30ba7c9b9eb8a73d6e6863ca9714597211340bc2603faae8adf1437abe6ee83dc66e4ec678a3d70017754f8473e93680b17a1c32ebc6f4dc9cd496659cabb779bd72270458d4fa2132df2cd9367135d41fa5b2bf015d88bd46a0e9d896c62752430778d51e08811efb2e444e6a53cb472a82f816648bb1d5e02d9ab3726f4b7efdfb336c687c654f8ee037bcdfcabaef8e21d26946dbf3f31df244e2e7c5d1c0dc40046e4ce7d02ee8fbe323c6ef0b8ba0712419e3443f652b1006a5aeacf47974435a79ee8db264cc5af32f64f359930e60ee903249906bf9327b50280973f93fcb0d5beafde88fbe2d4eb0b43b7855b37a4e24723a3f73acb7213f2b354393cc54a709a7bbd639f5518586c03926a75a6eba5e12ad82ab85a604e80170c294f8a242d115de29ad6a99165906a9ba487d238180ae635e8c3a676c0590e9025d7d09c599a30578eb2bf84c74a1c518f65dfe6aaa5e24f419ddead3c8148cd34522bb57b93e462114c1d861b2b12df047427ee4917304e4e8b66fe8dc238aae6cd9b8db9fa7faf79f2eb1317112c1fe426c177a1b8bdd16de98521a4239e1bbd1f47473d798fe88a6ced97c1693a15ad2f997d544202e3010708c228cef0a715f38de3ca410eea3b8405e83bfbfb2c441312546ac3f19139cd7616c75088508a07314349e8736a8949d62397c635bf9e2b0d4208b5c68914cd784842364d4dfb75e638194bd09582b4b9d0dbad981a89f1c5862d4d272d9b1aa2d185bcd2fa1ae74ebe48cd3e80360dc375eb4dbb22a87c16af0ec78cb7b62c3653c2d3ac5dce205d913414b34ca2878c0e5717ef0fac1d5b43dc9eef9f542c3ed8d51c6110259b0ca9a0962f552628241a57aec6dfef4893e8dc7e8d93ecf0615532011995bc6a591455d355a04fc6df5f45cc56a0b5fe6f5ebc7669cc78473b516ce1cca3bbbb4931bc2e075fe59bdb53b50c37fc5cb87b733753511bbdf47a8a202dccaf3adda727cf34ca13d2b4eb4da8ce0ba41abe230e4912fc2b493d5eb01f62efb31c24c6481bf189468a28d0f2e3c3fc36486c2557d8b7a7b29c696e2551142351cc632b5427d732c878a48baa85b0270607038828d64e8fc7e734b5242bc57cdfb1ce266d2416294e7960c9d4c7d5f26c2b01f537c16d674540c93478786be5fbb6a52ceb6ebda614b39901215e058b31b806c440d857b8ab876df9a0010a6c294b7268cbde575b533faa449645d8aecc85cb87b28aca6f5a0d8188729b6ebbf02f7a6dc0fa3a6128699682c6e59d9cbe1d8ea3711e3b093e64f63ca0b9535c7b77869ac9f9eccef87f37cc039c88335c089aa2f4d69f7e49fdc34918d4fdda6c4f886df7071cb56267da7b95b5330dd02462cbf03fff83199e39b2790fe078f272b54cdd08c9c1761e345075c14b81d4d9dd9b6700d8c3f72f0f4a751582dfba5690b362d1689f311f89012f8e8c29d08166e07f962aba34d08067b37975583df994e65269e538ca4bec1cf01f27f2c0f3c423913016a8621bf076902550257c745c453f1f35d7f18e17edcc3ead2b8326c3e735a13447bbe22be24358ab5287a79f3ede8ba8ec3a5f403ed54d9a24f51b10f895190585f66de17bca5218d3c9b3d38acf80c94ba568d1f673bf5691636c452a7c8886f118559fe9459a91fb6bdf7b1fd786d287acc5f00593b7a9620999d3ca7767e88c2225bd10a120fd9959f71543428a06f4a57121dea0c79bddcab5e2704a7594afa253c830ae97cfc8c93b7d7621c494a0d2df7e98f74665812ef0e1140853729639bd5a86bc578def3c8f230e58960838a9930b63ff814c7f3c72d204eab623835c269913225c5a3b64ae288eb0b4613d8ce8bcce1082841a72fc1da3306566118207a99c3c520fda0ee4b90c3e82ba5c328bece25a5422866de899b41df6c7e8745afc3c3ee062fef7e751170f0cd3fdbf606dd667f47fb25a8a2fc7142c1b6fd36e1565699ac97ad6c3427d1dac4254fe5736b6439f4484fecaa90b4c3de70f8b6f9c4a6edfa5514709993198392f9aa5b257c1484b26c3b471a3bbf82f3e7d0e1abf91069e23d2ad7b019ea8cec33bcbcc6a535579cfca1e257ec8ce0cf9610226fa93790f828b0c4422a36a84d7bd1939d68f154b348de657deef945cced204c81c1e514ba2e1f8b58bab0df5216a1571895d22458ae9f8d73117e5f71552366cdc2337fc5bb9cec4e0c90b076b86eb37a12fc955692b5fc67a19cdb0377adbc59a36def1fa778c2848faabf927dc2fb7571f5d88d4e3b4eb80210d1646b28b42d561f8dd33dcddfe9cfb858696f807fd5b2bcaca0a33805ec8d1ae39c708cd40c7214fdc4cbdacef718230f965e5bbc08b0585908d8a6d9ae6d3ae3354a56fefcdc7db93c4c1f85b0fe92b8115d89ea25c68891c0a29780bf1cfd2cd80ea7dd1949a19f49ead6b53af8247a01b79dd4f5894dea0c219eebe7497b8ae53baa9ad4834a66e4c987df2af4e4998579fc9d31d6d53d0a1e6f8526f9e2bf176f012b8231c2aa7479f6c6176b67567e47a98f5cdafd6faaeac7bcc7f0213f6814490d2812b7d20dee4e10e1a74a2ececbac4574b7cead3da266eb0352a3f9fb60edab4684fc6981e3366dc3c9bdd62500a5a5a5e927c447229676e3d504e1e90619a893d1476eb771173d7fad8b8164fef4596a5d4e3455c6f4fb00287b1a909f31ea1117d8825066ee2a8ec7886107654f18a0ed8a3d4f6bfb9c992a1e8970be7ed645cc758946a9b6f27a72456698f86305cd2281cfd1a32aa910f2ddff26a89339ade9b48eb1b0210c92300dca6cb404beaa7fc8f99a6f9379a1ac3ae6310efe7f2b4c22fa81a99dc303b9143fa025211e0638bd3ebf24b6326fefc8b30a7e20f661d8c4df922e9ef918308a431e59480ff71c4f49228eab595efd85a8b1ba2697a6c67506bfb10101d6ee5b4e4f3945786d44ef9cd5b287d6a28d0d6324d10fa25d6a44ceafd0960d6e9809c4deee0beebc48c6c5fe76a9053a0af175dcf48b1437d9bfa25048a45ccd1f8ab3555d37678b0dd1f266bdef2194a466f89a5d224e7605a01d570e8a5efdfd0cd68855c22baddd13ffe2a342f790d8e1d2ff52bc0d0dad3f25065345cc1b928be8b521a8bc0ecca9e4b83e701c43e9b0f733a9e4483ba502d781f87f048b53b9c1b1bc806beca0550daf830468d95b376ea71878fc6a966521f9b60d89bd13aa3ae9880130bf7d9db5652e8a81d4bbd1448cbaf73f83952bc338833c303e9c497a07241dfa83f1e97aceba6730f297ea10945856ccea6a858229af4e06156d5594508ed3704936005fdd64ebf92650f012dc243edeb65751013bb1a9c1423d72491dbfa592ecb44f1e568f0b9ae1f81d73b17c2fd2c3f942d525739da2f7f9125076f886ccd6d25e29a926601fb4139dc26cd4ba1264eab8bcba1375ef52d41c7b41977534f658139e5b67e031991cbbc872cdca79ea5b0ab656cdb6a5ab9ad452c09a993109772f225b64271f79f1c79c8e5ac781e3c303cc8b3f12452125c2b700ec3dc59faa6c73eecf781c801cb8a8c61b26ddba10f62c029a832ce3f3ebd6a0912980d4fce6cc102434d5021e1b1f79f238eebafccd09a0f1c7b4a06e2c8fc35300c3b51cebd58a2afdae85953541ed0cf1407c43c39c9567db5a1ef1be82a3de063071792c35b326417e03dfca09990f39434932c07fe3571698341c820f114b4f7af1b0d8faaefeb552e581dd977a2bb5ee401b7373d498eeeb53a5029ba4b7de0897938b71642e9bde207d91d41aad902d834be91deaaa28470e1f61dd0bb24d275744878e7f31fa287c6047315c5139d2af4b16c37ef1755ec992d19ab68ebc86b2b120f92cffd2f0a09d00a1575baec11ac9298f7b0fb0e43ef4b51cf9b5b2528fb5b56a8a7a60b6f9882e5d04232ab3db4fb7b382791e66199ce340fe8836d4aace00d8cf55922405d5d6eb295cae373e0411ed1f65e050679df6c03112be37bb54e18538210e0b9e51556039a7ab4c78b7e47dcdf93f88f23f56e70e6d78dde0d151731fa9d0b4b54660659b1cca70d6d6ab25ebb0bffe91ae1ab3919a3ff8c0d6f8259e7de8fb5415511eca188ad3102d74018ddb3ef3ff3f0bd4cb981639d03986323e3bd9e1733dc5a6f40b74b8632d25b510b224a13b8601f262ee1dd96393abb672c6a35e980e323e013a81037ea855b34019033c55eea954f101e41696fe597d427a8c6746e7169306e65170800586567ccaa2cae9c2fd87a9ee2885a378f2c2a5db2f7507ccc711e1a3d8173d48727f8df069b39b06036fe48968110beede132b62aab782d555661ec8f2212fb58457a685fb3dbeda28a785b29da7ae5d267d5146756a522f2a852b08a4a1facf216cb45a663f216118664c777d4af6d53bc33d4605bf95bae82d02254b22fee6fd640d92c6c4a8912d00f6c4ad9f6dbd92bb4a2095c21caccd84b5ca78faf58dd099275632895980a52461caec3fe00bf2fe3c7b89b4892470e8e1bcd8928da3c62baa0995e8e331b069750a4bf6319f52d8eb62203880f58f9af19c31571c34039f0d996ed77b2a0d438940b582b447a2f4b1f57be8ce33861370a6e024220a722e163155d01c5982cb5ad4eef9141b76fa750898c3488b9708253a0bbbd18c86dd7cde123d9479a9c2d42ecb2f6bb4c6f1b17828d613d2475fb11e5c175c22a24d0490b1744a54601be4cb5fb4d250beb1577976abdabf8b8ff32483a860c7dc918d123aa46f074c144add6b3457b029bbe715115fb75fce2c99672b488aae98be4c5bac2f5c88fbd6a54909f5f0ffbfccb99fb6dc9a7f7c466d94fbdba38faab2112a80fd50137cfea76402245fd70318ba3561d0eaaee0decc1d1754e7c489c0e76bf48be3e01b8f565a8ab963df16e5c58abe4b3f43975b864f7b12dcdcb54e999b50b1e69ba921253194f23e0469a21cf684b2fcdc38c76c0413c5a0285920dfe0f97b17ca1851ab86e0b06db83ca069e022d91dd20086c6cf9d521639c097aca9b9c4495a7e09f643137f4f7d4309a4102cba3bc6a7aafd652239d7b178070ab4b47ec4cd273851a534f305b59fe4c78108086b60f776f2363bdfca68a72b7bfa44507ec837256e2bba3711539a827cac97427136292dc812f4987cda2fb7bc40d8ac65cabfa2a5f188273768c1c410f7033ef4b1ef1aafa7600000000000000e0000000000000000901000005000000a28da0cfc089694d32c8a9898075c060ce38143c76320649331f3153d4649580e3a1397b706fd2b9a46cc0d2db4a18d7990613314789c4f56dc5c449e1023eee8c07f980f7f2f5d6d6ea4105efbae3c8a801ead81084f7fee3391f0aa924833f3d1a32695ac5995729f98b2fa0e84196e5423d3e6a9ffd9061ade3b758102c5dee17902bbf9dcd23ac9d8e57fa627aa2fa3531c50a302f7a7e4491a20eba2e7e6817ab62a0c86ad72b25ae0a7df31c9570d77e3b6262d611461fe3c425bd13f4feb31532c3414cd8cd00000000000000200000000000000006000000010000007509eea2bbc1af8fd50000000000000020000000000000000201000003000000208e459d9a5c654d26000000000000006800000000000000070100000e0000002432a269c93bd72057b8a0e334af3ea78aee37572806dbd1d3d3adc74802be2f02faea47191d2bcc2c1d412b31c781342a2b266be977e79502dfcb43f68e9d658a2b2331bff82787b21b939f02cbd70eba00000000000000f80c000000000000110100000600000005a9d2470ccb7a99d1bc85b741e01a0e58952bb180954993d8d4d6b09a961684b0849a229b1c50c2592bba6b79c474a9ec8d6730a1ab13b29d8240cf5394727c5e4741d1076250f78980eeaab860af5f1c54ccaac9c2ecff2270f3a185d9649067ee662750311f9235589bbc90fc5fde916d75a1fd6af72e9170906b1d5178d5915f253b5f6528ecd1a11d54ad6a5e453ebb995d57c15f6051e99e9ce7d576cdad6ce8adbc00a11df16a53185b2b91409cf706c67b145e0c3b5110c97e8369575bc2a039676f67a1b0d47ecd4e97bb510e5e6a2a2c5a02ca8c93b7e86e2cb15e21139f25d5259d0e84303d0b670a181a51fad0d5abbad7fb6285c75673a4fced359481983ba13d90ac60da55a9a882afd425da251c7060fb7c72f50127b1b3d3b2c556fe8ccaae212ddee808f8235a0cf27649e3049e5a3e4f60243a626cba4b80d6cf6d205c8edb5b9e6c19dfd78b715f97664b7a2be69035a4b358047efa078816dffc4bb10482e565ae320c24d6f4f114d21e7f615e7c814ce8c67c2dca828a2ffccc9b60e49928c6a155754d81f253d6f1c84a1a94a655e84c7ff575d436706369a4db4bdef5d02868d9fe49ac8714cc4fadd37a13961ca58086dc9d77690e5e550d8c72b1d6c876d4213f87710c131c72300f30a38da684103de04ce92a19f93011373d7b900f292e144ebb536738575f7c62351b61d72ad3a8f962a0239da41f0278158413d383dd7ff756d8ac2bdc1e6fd092ca446c7e34ad0371f0856d0427d40f63897e26499f134253e27b55e6ef8124f8b42609c3e1c7d43c19e8aa57017507365e5365d61340ce026e86238e90fbea5039b6a274d1e2944579911a32de7216f5c5b74dbb5bf4381f8c529db4c860929445dd57bc1648c822a887798b376e3ad023b7a73bb7628bf1d7b60ff25f9e77af12821c6996f4e9e8c9df3a94a7f82a9a121e27449305e0a5d4f18a3c0d3267c74a0166c4caedb363d913757af4a0dff20c48eeb86211833b7b09d783ff527783a0434658e1f173b85d036b3857d295371c742fc3d9bda73e9127e5b35787d3979dcc7aaec616e9c48900d320051c7c04530dcc2a432fd38aa33d1aa46a9a16d621c064e34c5b0361ae346ecc1585df37337b18ea4b8245bec3ffe3d72f542f122d1612de310d40f4b2048ef40cc5a7c206385646cf48d1ec566ae37a2dad2fde31c0d82d2d86e5caf0a31aa527cc9d27e0e6177dca7a8b17f54db7f457fbe377f1422a42bc83a6ecf23f18f3b2552b40b672bb3fc40f6b232f9bfec36f3b0c950e7217cc761acf463d578dde5f80fa058b6e20898275cc75592977a0e02224112b47c2da9c9883daac5d076a3858e36b4a2f6714f6d7128a58ca28489974013d6e8e95d77ede3e4dbe0638d34f9bb25b1dc90ae8ad563ff4abb0d95d00a1ec2add725d7c43ce327b74018a4e5732d2b28c6df5e288c55f964b9dcd23ced896909a6fb24db01fcc4bf4b19b6fb1f70cc7acea3639048ce3746dc150e1fc24b582c5daff28272bce2ee8dcf914e96692aaa23d4041f280c8935bea5bee716ffac324dd632aeec8aa7210f30f027ca6c2b3f20543b5ac24ddbe761b7f3915f75e686b4c644b2bcdec7c9c6252dfc9675e6cf6178bc956ffd6896747260875d74ddf66bf369d07984b850cd9f3003876726ae874482b0c441d3dcc61e61dda49d034bc2de2f26c17bb4507735c5612f717eac878031dcfd5b7102d4911cfcacbed2849a2eb7d5dbffabb12d15660b6d34425f416c94c3a0acf1504cef89872c74ac4dd3933a0dd973e09d3e54480552b3cff4805b7f1812374066cff3e9881befa1db4f232c0d03b2838aac118c1c3adcaa3d98927155e335b4854cc359ac1287bad0bf342182a78444077d9faa8b3925cd2f7f49ed8e6cf6a6055ce8f509bbdfd2f761deb0657dc4551942f0b610aed734dd0f108a659c2524eaf2a97799c937ce47456e89011b0858bf2e5e895bff42f92e38437afce708caf7c803a8133f8798c8309f6bdd796f4898df63c32cd1d995418bd0605e5d885a1efef5320ad6855a42bc1a175b1f10f0de0e7060de97871b01ad3aaac6df72fb093be67b351f56e092cf3bbc0a075c2aa50453dc424f50ba49b05e1b08dc8e229561095c59cc26853970ce2406709500d6d91ad58186ccdd633fec2b616aa0d97334a8524a27a3c68460be0548904fe2063746976f1652a454d1b072897e2c68003d209b135c5eb39316e61a6f49d81194e8da085367484987715dcf06f6a6ceff05136fb4a9fbc39455570e1a7194ade61e01ce6836e70899d6b0073cbb77290ef6252d939a07e0ebd833eb9c6260d47004a9a4971a95b29ceab8fed1df524f34d42c6e4ba7577f56ce2ad5fda9d9e758b759424e8c6a21bc9c34ae83e9f2a5074e8e4ada1c7e0bd317be7f5cd904a9595fff2d0c66f1c47a96f774e9a8eaf852960211b0548e0ddfd7e1fd57a5973cb13e69e301aaf626521b8bd11c077ff29f2764eb29b71d57264d1a2e849d84eef024910ce3c0e2d50c8e037ef8484471d6e53af87a1e8a18a0315f12ecdd2ef140a8fa0971bba6405e04a28af2941152b6a75433341df8e73e7399964e7929dd8525933bf8479eae04ffabb9cb0c4b386e74725124c813962d2abb6b988ad7440d435d18c26879e053ffc46f2051c20b7de9f789ea57e8c247cd02bd0aff3f01c520723168703435898e5989ded216e621335e55c71ec56661c11c3ba6561359ccd48eb7a7616486fe90abb932e45fdf4431bc530e2e5f61839b5c9a2c483f1be7f7f49ef9b1515b0af3a2241b720defac02d798e634353909e91ff88ff201aa26b11f6e01035dac361342eed460608ef4c4e67d229943ce56f177594a8b4018c1f2fa91bd035c6ed2f6ad787c1cf7a3ede5669be3691b258116956e8e193922804746099ff1299bb5eaec25e26fd8382d37243f18d8ac491f89c0ac925ebeb6571a73968294d832978c9e9262dcabbf3e9e81fcf82edcd82ec313a23a601d12017949f3d7e1a576c619561cd639545a78a5a5a740763efe5101f50d0f7033c842b47166a03cfc4d94083f8c3b37574f3ef5cb859db733d74c7f98b8c3a6e3bbdefb3ba1bd0f585ce7cf8013224d25126ed0343351932508ec45aec63ac79245fd45f02499f526f9484392895593714e020d159838f1a23d234edf3e867c567de445a76ea38be6c223b2d7f1c7d241368e532f5b056872a46a60e93098be57b9465e0725098cbb006a9baffb434d204757504dd4be3b0f3f7681760a4180c640f3dd126302e52d95bc788b8f0779019bb88269066e1e0ef963a7d843cb89ac8966971a35ea1f0f0e549b6adca412415dedcbf5ad5daffbfe8fb1bb233ff7bb9be3dfab65bddaf3e95632421bfa7ed1e3f73c71c412620a45b8152c42f9f53aa50362bf2752f6b68d03039cf7a110c2ea7f96f7b58499143ac12d9e8e055504ec74d221c3dd3c6538c6f82963c50edf5220414c5079d0958577932b28ae09812265bbf906abdb8388f8a0b4cf17fcc3002fe4dfea7c72b77ec64b009d888495466e844e7e187d372bcb7cc8be00ad6277a1329b7e7d68e248933ffe8e57eb3c0e0b0d0ac6cc79ff6145161a2c24e89d9beaf2b1155358ee4e9bb725cc437259083f4bff37860f861a2318b5817c4f606253cb65f897382e277ecc711b710923384cd7f06a09bbca351cb686bcb43c08a15e5d144ccf2ded55ffcbf4a557e42b1350d86db2a0ba0ecef52d3a3740279b99814a7b9ecec8f0750ffb90d0252391523b3d4601c53c0db030a44b1ea2c22d67dc2791d7f00f3fc616c3a03f466fc71a04e33d7a5a5ccbbbc75fc0015aa114438af6cf19f2ba04840beaaa63c3e220d0cb7a4524422f575b9ecdaff161f26409d80b63497ceac9e48aedbdb43f4bc505c4915b701778b05b7705c73bc4dfd3d43c3a09ec354c44839b54359c54f4594162ece4587dd5c5da18235310db7cfd9aee4f406c69e172dbb6e3dc54f3b72e8ae1eb274b0a7a5226922e407b6fc4b06b1554e42839384cb95902573c0dc2cd54b80b3a09748e0a41ea46ce48fdb24fa18b7c22f5d27c50349605f71f7b0be55eff55821dc98a2e47e19fc737e2883b8263aead1bedbfe985507b277bb816789f7693bd7e73ec5eacfd9b7aa84936cf59e49443a42fc435716808f806984f5b93fef66d7bf6ff0d846171a0444197cdb4e60a909b2a465b4b7d7282fff9164d0813265c7cf4e6935ab64df694d295c6180d3d4e57964c650f70cb0099e69c97676c9722b6303367dcf817d56ec5023634accc56e0092ba371790583dc90d9cc48a66e0de7289a750b8bc4b80aab34467982af4d5e39035b3d6d335bf12a6caf5356e755fc37fd6a6b8c6bb2f441c6c74e7fc1c5a3cdc1e9186192cbc90ff50b2eef63d2fc957054083611b057d9703a7e875379b77266d6ad71d8d5162429c05abe8632ef6fc1ed954ab0221bf808a7d051a07ad576b7d8ba0f175c1aaa4b807ade52d6332b73ca1cae060ca3cb1878cc6adc9c54b69213dd796eb6fba17c6f1c21d50e4d6fea095227eec5ac32a0f0a9e103332c99d4550d40562708387cbb2e8d43cd414529055078a7b9c31794afce529eb52b45e56ba346571e1bc873e80155434f100000000000000a853e7b2fbcab7"], 0x2008}, 0x44041) (async)
r3 = socket$netlink(0x10, 0x3, 0xc) (async)
r4 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="b00000000001010400000000000000000a000000380001802c000180140003000000000000000000000000000000000014000400ff01000000000000000000000000000106000340000300005c0002808500018014000300fe8000000000000000000000000000aa14000400200100008000000000000000000000022c00018014000300fe8000000000000000000000000000111400040000000000000008000000ffffac1414100800074000000000"], 0xb0}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000003010101"], 0x38}}, 0x0) (async)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="fc010000190001000000000300000000ac14141f0000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000020000000000000d5290f060000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000044010500fc020000000000000000000000000000000000003200000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000003300000002000000000000000000000000000000000000000000000001030000040000004900000000000000ff01000000000000000000000000000100000000320000000200"], 0x1fc}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c0000000001010200000000141a0000020000002400000108000200e00000010c00028005000100000000003c0018800800024000000002080002400000d7d608000340ffff8001080003408000000008000240000000000800034000000003050003407fffffff00000c40000000000000000000000000000000005544442114cae54bc713f64b705d6b022b15ba5df5a8899bc103c5dcba46d92b91dc75e1c3dc54fe856fccbfd2862452439cb25bede1ef27b255e5308ebde2d535aa23ab18cdef1404d2649e6116d61d7c921ee608f661c2e26f50e0453ebcd20706c8715d7c0f29b0b3aad6b14c0a77df0d76a0c4bbd34a609d5cdca94bad6a88dce1b7c163c029b837d3338dc8b9dee38a9f6ec1eef9c299ed38e34db6a2497feb4d0d52c519216e4c5314a6a1c7232c37"], 0x7c}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4809}, 0x14)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r9) (async)
syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r9) (async)
getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x1, 0x3, 0x6, 0x800}, &(0x7f00000001c0)=0x14) (async)
recvmsg(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/143, 0x8f}, {&(0x7f00000027c0)=""/4088, 0xff8}, {&(0x7f0000000600)=""/144, 0x90}, {&(0x7f00000000c0)=""/95, 0x5f}, {&(0x7f00000003c0)=""/53, 0x35}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000480)=""/142, 0x8e}], 0x7}, 0x22) (async)
bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) (async)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

2.956610505s ago: executing program 1 (id=5678):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a446c8a4400080006"], 0x20}}, 0x0)
close(r1)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10)
write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff80700000001000000000000000500080002000000", 0x24)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000240)="2feef4112da1651ec6327dd03dc1e30090c1bbec594b6d1fac1c475c6e723b58c0", 0x21}], 0x1, &(0x7f0000000340)}, 0x4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0)
ioctl$SIOCGSKNS(r7, 0x894c, &(0x7f00000000c0)={'wlan0\x00'})
ioctl$SIOCGSKNS(r6, 0x894c, &(0x7f0000000080)={'pim6reg1\x00', 0x200})
close(0x3)

2.648215166s ago: executing program 4 (id=5681):
r0 = socket$nl_route(0x10, 0x3, 0x0)
listen(r0, 0x8)
socket(0x1e, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x4b, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @local, 0xe}, 0x1c)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x9c, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x6c, 0x2, [@TCA_BASIC_ACT={0x60, 0x3, [@m_connmark={0x5c, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0xffffffff, 0x6, 0x4, 0x6}, 0x7fff}}]}, {0x10, 0x6, "e94d14d3693362caa1c3c068"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xb}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x10004080)
r10 = socket$kcm(0x11, 0x3, 0x0)
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r7, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}, 0x4011)
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.496083896s ago: executing program 0 (id=5683):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x840)
unshare(0x2c020500)
write$nci(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)
write$nci(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="000501"], 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e1d, @empty}, 0x10)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"])
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffea, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a010800000000000006000000550908000240000000020900010073797a310000000040000000030a01040000000000000000020000060900010073797a31000000000900030073797a3000000000140004800800014000000003080002400fed54e6550000001131332ca92fed18ceca70c21a95c7ec2a8f07b33502758ce1b94f008667862f582d9653c441"], 0x90}, 0x1, 0x0, 0x0, 0x240001c4}, 0x2000)
close(0x3)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r5, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538)
sendmsg(r5, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)="0a6ea58d6228d8465b159e2424b8ff9911fe6cdb30318d43e279513641a27c8f0d56cb29f637becc8ed81426b052082f45a42ee732bddce4a1477de081b96cb0539b43715c711bcdd4d9a54d21d5c3af77bf119e795c6e2403df71c1f8914ca0f4f683a7d3160d9a2e416d339b81def057e0ecacc256bed81747a400110f8ec63310787c807fd4d7a57ce53527b4e578115ba08652f4d784c6dea1341b5ad51b71a68e7bb510871995756e83b25535db1b2a8a2fe936fc6de0010553", 0xbc}, {&(0x7f00000002c0)="e07f974018cbe7c03c6afd134f662f1aed24ea0652e40b26d7f3a5e9bb15", 0x1e}], 0x2}}], 0x1, 0x20044840)
sendmmsg$inet(r0, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000bc0)="4490137c227c56ee66c372f3105eb1", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000001500)="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", 0x124}], 0x1}}], 0x2, 0x2090)

2.252233699s ago: executing program 3 (id=5685):
r0 = socket$nl_route(0x10, 0x3, 0x0)
pread64(r0, &(0x7f0000000080)=""/226, 0xe2, 0x101)
r1 = epoll_create1(0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x21abbbc, 0x19)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f00000000c0))
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fbdbdf25010000000800010003000000240004800500030005ffffff0400030002040000000000000000000005000300060000000800020002"], 0x48}}, 0x40080)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000000)={0x8}, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv6_newaddrlabel={0x2c, 0x48, 0xf11, 0x70bd27, 0x25dfdbfe, {0xa, 0x0, 0x40, 0x0, 0x0, 0x6}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4052)
getsockopt(r0, 0x2, 0x0, &(0x7f00000001c0)=""/107, &(0x7f0000000240)=0x6b)

2.169676189s ago: executing program 3 (id=5686):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getnexthop={0x20, 0x6a, 0x217, 0x70bd2a, 0x25dfdbfd, {}, [@NHA_MASTER={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x90a9b48ba845b7ce}, 0x4044004)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x4f4e, 0x4)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010600000000000000000900000024000480130001"], 0x38}}, 0x0)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300)
setsockopt$inet_int(r1, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4)
setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f00000002c0)=0x840, 0x4)
recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000080000000000000001000000620400000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)

2.133090048s ago: executing program 0 (id=5687):
syz_emit_ethernet(0x76, &(0x7f0000000880)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000403a01fe8000000000000000000000000000bbff02000000000000000000000000000104009078000000066cf6cd5302002cfffe800000000000000000000000000035fe80000000000000007876d4ffa030f9d80000050000001d13d86558da0a7f6b"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70000300", @ANYRES32=0x0, @ANYBLOB="04002d800c000600010e000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r3=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000008282be09e6c0e13188128b4e740bdf01316e75d53584ebbb3e1fa78a4504f2c289b10bfa55404734daf83d6307ad267f4f821167f46c7c2ac41343fcc39fbab1f84cf6c58821113b1c19701fdfe01fe97fbc62f108d5984f5b4ba2787917ab6678fb7b01977b853b475e"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x14, &(0x7f0000000d00)=ANY=[@ANYRES16=r2, @ANYRES32=r1, @ANYRESDEC=r3, @ANYRES8=r3, @ANYRESDEC=r0, @ANYBLOB="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", @ANYBLOB="35813640525a9fb20b38049b75656b29f09b84151e917f04f177781b80753b1f43d6be51f9cbd7e6041eea35919836902974f211e60ef3de6cbeb7d29098350dbe516142d13baaae4eb1a3ea3d1eb7926ab3cc7393e311963f58ac9f4a132401085e34af13679e4e2c9a90fa1de8e4815a5a58186965c868759111c53c113b52fd1636a4bf797f7a6c682f8e78fb98932f8e3ae8f9"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x4)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendmmsg$inet6(r7, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x0, @local, 0x3}, 0x1c, &(0x7f0000000480)=[{&(0x7f00000003c0)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)
r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$SO_J1939_ERRQUEUE(r8, 0x6b, 0x4, 0x0, 0x0)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="600000000206010100000000000000000000000005000400000000000900020073797a30000000000500010007000000050005000a0000001400078008001140123b0000ffff12000300686173683a6e65742c706f7274080000000000000000dfad42e5a8506a206e6ed9e9a96b79d08b57ebb2e45b97aa672925f488c82cd719562616fa537398576d2cca404b65821e15335787cfa0477dadd7bcbf21c3425dfae2a7b91eba1dc030a5026048093b81ee96cf18c5fc7dcd36c84f3e6dc90d670934559bd1aa6f5a3d773a859df52e89f9822b4c044b8387023421343e"], 0x60}}, 0x0)
connect$inet6(r5, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'veth0\x00', 0x7101})
r9 = socket$unix(0x1, 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xa}, {0xfff1}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x80000, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0xd, 0xb}}, [@TCA_STAB={0x7c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x5, 0x3, 0x1, 0x1, 0x8, 0xd4, 0x3}}, {0xa, 0x2, [0x7, 0x7, 0x800]}}, {{0x1c, 0x1, {0x3, 0xd, 0x57a9, 0x3ff, 0x0, 0x5, 0x93, 0x4}}, {0xc, 0x2, [0x33c, 0x6, 0x0, 0x3]}}, {{0x1c, 0x1, {0x80, 0x4, 0x7, 0x800, 0x0, 0xfffe, 0x1000, 0x4}}, {0xc, 0x2, [0x4, 0x6, 0x23, 0x4]}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000000300)={0x5, {{0xa, 0x4e22, 0x3ff, @mcast2, 0x5}}}, 0x88)
r12 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockopt$WPAN_WANTLQI(r12, 0x0, 0x3, &(0x7f00000000c0), &(0x7f00000004c0)=0x4)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
setsockopt$inet_tcp_TCP_REPAIR(r12, 0x6, 0x13, &(0x7f0000000280)=0x1, 0x4)

2.012259514s ago: executing program 1 (id=5688):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb01002000"], 0x0, 0x3e, 0x0, 0xa}, 0x28)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
splice(r4, 0x0, r2, 0x0, 0xf3a, 0x0)
tee(r1, r5, 0x8f5, 0x100000000000000)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x21)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r8}, 0xc)
write(r3, 0x0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000040)={0x0, <r10=>0x0}, &(0x7f0000000080)=0xc)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x2a, 0x107, 0x3, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000)

2.000341494s ago: executing program 3 (id=5689):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, [@alu={0x4, 0x1, 0xc, 0x6, 0xc, 0x84}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x32}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_fd={0x18, 0xa}, @exit]}, &(0x7f00000000c0)='GPL\x00', 0x247, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x1, 0xe, 0x9, 0x40}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x4, 0x4, 0xb, 0x5}, {0x3, 0x1, 0x9, 0x6}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r0, 0x0, 0xa1, 0x27, &(0x7f00000002c0)="d2d40ce96b68b6e1b59eafe57ceb1beed76851e0d3c7680ee3687207f8e072e82276ffbaf428d20e925a78ad72d17c6463e51cfad2a2b92953354b0a351334fb6fbdad77678818fff665b778a52096237fa393ec7ec7c5fbbf0e91be1a86f0fca0a2ae3a6f8db53251580e3ac48833cdd004f11f4b02e0adca80d63626a91a6eb572c3a9c28608b3825d3426455253f3789053b65db33b195440312ae869f3451c", &(0x7f0000000380)=""/39, 0x77e3, 0x0, 0x84, 0x2a, &(0x7f00000003c0)="9c28ddca614754b16e83f427e8ff46970e26757f55f00cd191ad3abdf93ccecdaee8df095dc8c6cb5c5b557d656735fbc5f1114d3b5022470e8c75215904cf426c1c4e31f66b99066dfed495d3bbcd7a0b034ba2fc6197561fcdf6170602bffaf886948ac916690c79036e0b7d6a72e84073ab6a7554c6e54e352140d327cce4fafa2202", &(0x7f0000000480)="cf67844326c01a2b89e755bb96c74f5397410b44f467f8ef1e2f6694bef405a79288133668333232ded7", 0x0, 0x0, 0x2}, 0x50)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$can_raw(r1, &(0x7f0000000600)={&(0x7f0000000540), 0x10, &(0x7f00000005c0)={&(0x7f0000000580)=@can={{0x4, 0x1}, 0x3, 0x2, 0x0, 0x0, "88373309ddd0f3aa"}, 0x10}}, 0x48000)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000840)={{<r2=>r1, &(0x7f0000000640)='\x00', 0x2040, &(0x7f0000000680)={@_ha_fsid={[0x1, 0xb51]}, {0x7f, 0x9, 0x7, 0xffffffffffff2b54}}, 0x7, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0xba}, {[0x8, 0x0, 0x9, 0xfffffffb]}, 0x800, 0xe1, &(0x7f0000000740)=""/225})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004801}, 0x4000000)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r2}, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r2)
sendmsg$NL80211_CMD_DEL_STATION(r3, &(0x7f0000000c40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a80)={0x160, r4, 0x10, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x14, 0xbd, [0x6, 0x5, 0xb, 0x9, 0x5, 0x8, 0xca, 0x10]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xdb, 0xbe, "6fd0ecc1ecd4881d335c88667dabf790b25e32ad217fb3976e374efa191e2cd172569a9fb270154283c4f7cd22002e9ed650a0d5056191acd3e662cdf49d09529ac1d367d963bbf2cc1b948849518f9e3086ee0819909335bc7bf306b770574aaa3fb04370eede7d7744db60880b5a0eab0d6e39613714eb13b0db798cd07bf717858e3c949369348cb732418757078e9460aad9337f093b3156988525ed9920bfec2788ba94c415c2ef3ce948614e2a2210d78907de5fa1cc82925e8667e725e784c9d3764acda0382a943ba59752716bef985c85d5f3"}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x8}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xd}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xc, 0x13, [{0x1b, 0x1}, {0x24, 0x1}, {0x2}, {0x6c}, {0x3, 0x1}, {0x1b, 0x1}, {0x5, 0x1}, {0x9}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x1a, 0x13, [{0x4}, {0x24, 0x1}, {0x60}, {0x1}, {0x36, 0x1}, {0x60}, {0x5, 0x1}, {0x5}, {0x16, 0x1}, {0x16}, {0x30}, {0xc}, {0x0, 0x1}, {0x1}, {0x30, 0x1}, {0xc}, {0x12}, {0x1}, {0x5, 0x1}, {0x24, 0x1}, {0x9}, {0x36, 0x1}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x20}, 0x10048810)
getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000d40), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000e40)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x68, r5, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:lirc_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @private=0xa010101}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000004}, 0x2)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x9, 0x50, r1, 0xd4088000)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'wpan3\x00', <r8=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000001180)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001140)={&(0x7f0000000f40)={0x1f0, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x14c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1b}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "8f5dd8da20f14f704a08f75d58d8e373"}, @NL802154_KEY_ATTR_ID={0x90, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x68, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x5555555555550281}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x38a5cb26267b2965}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x436783972f7a1208}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x40}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "412692ee0b1c4f1d31ed6fc7f7b93e32f4e1c3c08ac7b210664a102f67ddb0ae"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xa}, @NL802154_KEY_ATTR_ID={0x60, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa3c7cae}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}]}, @NL802154_ATTR_SEC_KEY={0x88, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0a7509cdc5cbff63b59edd072453e1db"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9436308c5175c74e210bc4f704d304b3"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "1203dcea34ffc2bd4b5cbed309e8e2e3"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "45f43a472736489d228d8de241e1d700bd1bd2b00f5f6e6d93ea1e96d15ab72e"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "17d5de59e3694a1d173cc341d18f372d4a14d7d2bb6470acde5a11924849eb74"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x80}, 0x2000010)
setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000011c0)={0x3}, 0x4)
setsockopt$sock_void(r3, 0x1, 0x53, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001280)={'gre0\x00', &(0x7f0000001200)={'tunl0\x00', <r9=>0x0, 0x0, 0x1, 0x2, 0x5, {{0x17, 0x4, 0x2, 0x1, 0x5c, 0x66, 0x7, 0x0, 0xf21206accb13927, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, {[@timestamp={0x44, 0x2c, 0x61, 0x0, 0x4, [0x1, 0x4, 0x5, 0x1, 0xffff0001, 0xe, 0xbf4, 0x0, 0x6, 0x3]}, @lsrr={0x83, 0x1b, 0xb3, [@initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}]}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000001300)={'syztnl2\x00', &(0x7f00000012c0)={'syztnl1\x00', r9, 0x700, 0x6cb604bbe28bbc5a, 0x8, 0x7f, {{0x8, 0x4, 0x0, 0x4, 0x20, 0x68, 0x0, 0x1, 0x2f, 0x0, @remote, @loopback, {[@rr={0x7, 0xb, 0x2b, [@multicast2, @empty]}]}}}}})
r10 = socket$packet(0x11, 0x2, 0x300)
ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r10, 0x8010671f, &(0x7f0000002340)={&(0x7f0000001340)=""/4096, 0x1000})
setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000002380)=0x1, 0x4)
write$tun(r2, &(0x7f00000023c0)={@void, @val={0x0, 0x4, 0x2, 0x5, 0x9, 0x1}, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xaa3f38f8af723e9c, @random="fe3e7cfb012e", @private0={0xfc, 0x0, '\x00', 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x3e)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000002540)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002500)={&(0x7f0000002440)=@delneigh={0xa0, 0x1d, 0x100, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, r9, 0x10, 0x0, 0x7}, [@NDA_FDB_EXT_ATTRS={0x30, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7f}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x13}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}]}, @NDA_FDB_EXT_ATTRS={0x30, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x1}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x36}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7f}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_FLAGS_EXT={0x8}, @NDA_DST_MAC={0xa, 0x1, @local}, @NDA_NH_ID={0x8}, @NDA_VLAN={0x6, 0x5, 0x2}]}, 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
getsockopt$IP_VS_SO_GET_TIMEOUT(r10, 0x0, 0x486, &(0x7f0000002580), &(0x7f00000025c0)=0xc)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000002680)={0x0, 0x10}, &(0x7f00000026c0)=0x8)

1.81619938s ago: executing program 3 (id=5690):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10)
listen(r0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10)
r2 = accept(r0, 0x0, 0x0)
setsockopt$sock_timeval(r2, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120c000004000005060000c16182e4f5820046ec", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20)
recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000a00)={<r4=>0x0, 0x0, "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", "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"})
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f0000000200)="05178100", 0x4, 0x50, &(0x7f0000000080)={0x11, 0x8100, r6, 0x1, 0xe2, 0x6, @remote}, 0x14)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f0000000840)={<r8=>0x0})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000000780)={{r8, 0x2, 0x7, 0x3ff, 0x80000000, 0x2, 0x5, 0x2, 0x4, 0x5, 0x6, 0x2, 0x7fffffffffffffff, 0x4, 0x1}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000001a00)={r4, r8, "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", "9e55f60e58563ec12d4407acc7c562e14a118c3ff5337b06092046c1de5b8b4bff1dd0796fc3f88f017267afada892b17abe88b8e64d250322b0e30d9c57ea3a61dc3acaa557fda4d85ed592ee4d9172466afbf4a7fea8c3b507d89960ce0fd0440e9bcbf0174ba2777f2778d1a025f205c90eb2de4b991afe8f6f2739b57d529fb1962bf953306a7550bb74f335be7d3bfff2401dd709678694b386da8940ee702da1162b15560a77056b637dc267a37341479fa4804de33af07da58b4a32d004a3052e0791d8a831c956df8bf71421bc688628f8ef7369866dd4c4094df3c8513a6647f199fe6914610c487d45729b9d0de9924be852902e77bcc9e80eb6f4b8fe58b83f239a2e15426ef10b8be19b4389886aaac85267335bd22a3ce28b000666e453fa9bbf3dff5c30cb20541bd017db86119f161954aaebd6d6f9aae7e5c9b6e314b25992cf0c2ef5d52ea60bb0a95702c32020c5641490e19a827b21e91393d019331d75d56a940cbb2b53e22deea7dce9c148ba6b300adf9ddfbf80f2877bd708a6d1cd7c93aafce0d3b3f88345ed5036f95488a613579e2509a3056c7436d666a3cbce886cb90e6605a504e0c466114d5d3e7ed91a884931b586fb6fbbe1ffc254ff3734bdce48072a80fc906df509e563ae742bcba412c825cc997010d944c41c4950dce2b485f5bcdbefa52dd98a8f7a8c152641f5195bba002729e9c0dc6844f8facb257f2285abb3e56abe4d602314befd782bbf74abe689ba25c4fe1098f75407fc1164c83395f70832a0cbb1719a5b6e9f9ac673d4a5839b05117203d2445f3050cdc1d579d3faad10d216a845884ca44537a52975f569eaaa069f665a1a5ee1f3a81b3ca860e55c6cfba0d3c54daf247ff5b056ea16b79fe24abe214bacb9d8bcde98b98d467171fbb01034bd56cbd5f02d77b89838beee59607fb8f58df7f96105e8e98c729b164cd7702a7d644b8f849045536e34147548ef60310165a8e1f55942011bd1db790039c993de0eee1a35c32cf582bca7d29b42042103399319ea7c871906fde44ad4700219629c25b0d770963a5f7efdca60d3cef0b6a5d1978c2bad59971e22a39a6b316081e991dc34bba324add0dd83ea0dc47c67b4ed662e42829fffa3fbaa768e4b2609886abd8e69e528d18188c05a6d0613a20b98c48300a70ff019181e3812fb044ebb97f05fc8898abd8789ef660f2bcee769227ab988a5963500d7052e338e0a10236dc5154f7b46798bebe663d3e0f4ce610cec24dc267c763f3288b6bdd1cfc061c60e82a8b46eb2372d573ab19425e617e99be11e224ce63f436e97b06243d816535b0df1e6826c0793842ae0a7895e9bda20fa199c007fc1164163f0cb49f34a201412ff39e0e0da52cd007c11d239afdc6bade0bf0dc936b52b1789923a1b58c13a2c411aac22aa0351be0b4668bd2d6aae1d917ffc400483de8ec7e41c4df523abb21575de0f1d19915f7c6af4b58020c59a0203aa4f2ecd6df1df17aadf16291932d3544ac5cc3c6bba4fd20f4253d847a042eedae5ac712ded34f8968e2f21bf06791a02c9f0414108f9ef644947b56215deea0f35716df3adb36f4fe3a6669aa679fd517dbebafcca2c442602652b69d67917aedb70941e862f84528e29d0ab87ea4ffa21f9da379a28c0a414209216dc447e2e42ade53e2a5159daad32bb2fd387489841502aed743717bd5e37f84604292e8fe35164007fcab36dd60dbf5a16ab6f87173661f98c221216f6ad23dcf2abb9c626524b4d7e11b0cf290585cc982498584687240f8b974188c81251233f142aa71fbdc04f282f36c3cd08bdef3f63e4ed31547acccdeff8e682f6d61804f41690b0ea961acb29104802a39a5689c7f88667f60168aff5011ae3722f1395b9ec5b48a91610dcbd6934ab6804b0b8377d4d59e276d200bb24ae3b5fc7adeab3d2b121ec94dcad3a59704dda23ea1eb80398e013f557017230d704d10d94dd2919fcf47869318a15534dae6c23b9d3bca1e9306330ef8c8c42275d27ee54ac2ff93f143918134a952d0f5fac10f1de65cf3bb5cc9d4b4e551f4143cfad75b7781e7d9919555821034127e0cbfc0d957f6fa71bcf37c7d360be81cee2fae3363c28e5c64abe17b75df1d278bcbba684a6196bfd54aa86fe133696e612a167eabb707f988af6bcc0eedb1a9e1b6e5f14269796afb342eb2fcfb8945ea829b808db6464af4895ddbc9838eb31a20ae9183dd4f76a03b89797ddfb4af8de0f483648d4c1bc1c2119f1422f1c72a5ad5c54b0660f054bfad51c22252662161722423734bd52ddc00599e5d872a35e0a79c26092e1cf3a7df358172e0ef06ea0beec226352c7ad80e637181c0fee2dea3f683174dec930e424815d2595a187b4c4fcc1978795a2911d238422d1577ee6f5cdc631c32f557b200c39f97656150f26d0c97505ad23bf4bffbda503e7aa6a54eeb4ca9b3c531520846529448d0c35d387ad2e4a17b0edbdf657b24cab9f8d81ce86364adfa1825940780106f30bd297ea02d55b19e393d4d758ede3c9a24174ee3354b2d0c2786bf3d7ab39519662728842b67be713b3c2b5e33d8fa21e033f6377637b9a10412100ceaf2e98547efd94d104fb49b65036a847ac244f7eaaa76ccfa11b49e12badb133caf72ec4c8ec717e5885cdc59a220452e6f32f2005568527256511cca98df492cb5a687a770f6ed9f043cb6555491c686031b28bc52985e4a8ca49c81630dc3832ff821d4180f9548cbc87df41c0e1ea91d1fea5386cfb790ff1690c7492d948325d301e2cd1a99f7853afc432285a66a947517aff2ddfd3625618a37bc1bd2f95a9d4f43e477d08b1be14a585a035d8b3d8b0b1c5088f29965eae489f794a397e0f7499f33ab0c7c54b83f7b4ccee6e8761b303fcb1fdb93e8b27b62ee12af79a31b37617f9ed0cb0edcb251b996e35ff8c054ea4f8f1f8e9d14a1edb862274640b719c023a7c8c5d2ac55928f87ff1a128eb54fa03a4ae3d014ff43d4f4adede9337f1e59563dd4f3aa53f9dec9b8d4d69139c23dd12091407390fb1caf2bce6449c58d80e32e98bd5ada7aa66262d7efcfc72638f4d42d15b4684fdec2618b35910c1d3fb725aa665e76be207730b54a5a52f7a95305f64920782b45de20710f4e716c77aa32f3662ce29120e77b2bad6bc3b97ef313b81478d2db78a4089749ab6f138ec5042252903998ab3d9d93f83d7be34a779f1e67aeef9c906fd5b6e545f6575c1ca27b02c003f66c2fe6d0ad58e5a8ec100e28bf5a1ff18c106e8e4de77c22acc7b73bfecaee7012e9fcffa81db1eca06aeb7a8ec41e145a0fe98798c983b212ca61f42018137dbd2ded4c10fabff1ed0c0b3d63ccb48b2687081f89433bdece405790957e5e2c815a837c2a7367865d3c8b7901ffc1daa91c347c79e00760fac1fc884fb1becd166ad2f4b88639f983c85966526e5eec8aa35d55c17507a6ff761513e1b1297bba534d33c02d7bb6940cb1375ef461318933b3d0383696d1cec1489e53157a2a4b9afc9fa4014ed6c4da1c894482e77b707a0420c2250334b05c8227f4dade377d4f3a0bb27267b1bbdd1f80d6ff119c966ec0cd9c2a1183f2dfb06ae6d5a30b9aaf08f2c6cfa98d1703bda181a3975d1400b30cb3bf4bb2b376179353bb9d3287227b02f365877f009a0ddc9d78f2aa9bf5e3479cf761a65470e5f75bd92c6817b78b1702a3d5e43b1563c7ef14921b1250c5de435a99f39cf9886fe5a347f14a1d6f8e2ab98306fea9e4404310d13c4f20c4268761d4d7253e079a45c4518b619c6c2d3cceca46e00a4099ace1af773f4da123bbd2565d914c8e3c02b800ee7489cd6fe476b4b7e13a59f538d0f4fe60584136674f3bc51cc1d1a4d1a2ee4ffb42088a617208c4a2ff528901e41086d9775950d9798edfb9f362d9d42efd9dddd351f3e0995b3c398489a7ec6d1aacf9eeca6f9cbe8f9778d18775ef4dad4213c7241b17ef21bad6f8d6098b6ef0f8d9cb101831483c21274a0713ce6444c8348f2c50787778baa5d73e2c0c368715e68fc9c4be5289163404cc606cd7019dd82989db7508eabc1df39f5da64b65bcc7fd7e605d08fb31f0ed807697f30b0e4af921733728f38603ab2247b9f594c401b89bbd65a6ec2fdea5d5d30b2190f4263c207c34494e854200a8966e53d8bb8b4b1404f6c070ed11520e70b1c06f5ca51c89c22e7bd43369ac79f208b73327757c9956b3105582f838daff63870d7658e3c47ba9ced59901a83ae394a37d975c2fbe727a68d2f386af87924ac0b136f1ac7c11e7136312981359b538330b88413b391368f8405ab25e986b5905d8c4f047129a9d087523a42a18d67a407f3675c7a75c41beb0e07c1f87391f05894c83d65ac419802f00fb43d35ba6b5efb53248bffe757bbc291737ff3306ea6e0455209b8c37160434f35395a35f8e73a80ca8f715f5868cdd9bde6e86335956f06bd0e0353006960245ae8f021a3f401f0efe05e52272ebb70c1b3e85f357282bf68cbb9f22ed15ecc9dc82735c0ddc3cea0973bd73a5efa30637f8046f9abbf063165226b8dca4bbf27529fd8553db71bd6aeacd1cb86f713cf20c6f9540a87d44e50ab4003617442cec891e1044c34ca72d1a5bdd8ea5fac7093270a7e63eef23c85cfb4144bfc30dd7492483fa37e074a2d037f43d61046f265f6c6d392180020e9b1d8a1da021950c53c14c4e04492d417d89d9d8dd81e575cefa7968907a788e5218de5a7363dfdea8991d3f9c62c3ed27343da85fe8f46e1db77aa443cd98843c9087d0b7f5bda0dfdb90218767e32f90384ac6bd7d167ac974e0fcc0877f20b41f05174163d661d7e9e5344220cb8be9218d6c27bd5c4cc25d765ef784ae3b4e7e5cab3d819e3a474abc8a7d1eabc04179e1abf359e1963cef4a5d9bb45663d4e8c65e51fda69595ae5fc55783ede176bf3fb40e959982fbb1e08052267aeede11f6103e632c5f39c6553a14ba35e0a2606aec65e5fa02cf844fb138e978d7994e952c03f7fb7fafa0d470a1ca2a47cd43bbc221d1151c47faf4e346ecfcfe64fea3d870daa0d9185813906096fc9b654e3ddfa0a86a6ffbb74849b45d3ce1bd2758af71df2a2059639df6ffec9a2700cc81a14e0a136770f369ce668e1f300f1e47a0caf7fc5e2355ea862c84f8c1a79598d82b6a44460c28e178f687bef5ba2d40bffa51a72f4133c56023465f268cf5cdc607cd836daaf6ef7e70d5f7165002a1ac6d23012fa87903561429cd5e29c3ea18d454c99d7d4e252a8ec23f474c888ff5e0e6ad77399c7dbe05985d5d89da7f432bfdcc052bc8f7a6c5b354de16b6b5c5c64444289515e130af611470c40094d1d73a7e6ad52d1d8d560b36f17"})
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2)
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x2b, 0x1, 0x0, 0xe0, 0x40, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x6e, 0x5, 0x2, 0x5e, 0x0, @multicast2, @rand_addr=0x64010102}}}}}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x58f, 0x0, 0x3, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x810)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.759539998s ago: executing program 4 (id=5691):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}, @IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r1, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$inet6(0xa, 0x3, 0x7)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x9590f6cc3ea35512)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r3, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$inet(0x2, 0x3, 0xa)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000400002000000400004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a3000000000140001800d00010073796e70726f7879000000000900010073797a30000000000900020073797a320000000020000000020a01080000000000000000000000090c000440000000000000000214000000020a010400000000000000000200000a14000000110001000000000000000000"], 0xc8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmmsg$inet(r4, &(0x7f0000000900)=[{{&(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000000000007000000860a00000003"], 0x20}}], 0x1, 0x24000004)
socket(0x10, 0x3, 0x0)
socket(0x1, 0x4, 0x9)
unshare(0x24020400)

1.519398128s ago: executing program 3 (id=5692):
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0)
r0 = epoll_create1(0x80000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000))
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$netlink(0x10, 0x3, 0xb)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x4, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet(0x2, 0x3, 0x1)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={<r8=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000003c0)={r8, @in={{0x2, 0x4e24, @private=0xa010101}}}, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sed\x00', 0x1, 0x10, 0x4}, 0x2c)
r9 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0xbb8, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

1.363233955s ago: executing program 0 (id=5694):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f, 0x48040}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x3}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x5}]}}}]}, 0x4c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bond0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r4=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r4}, @IFLA_HSR_SLAVE1={0x8, 0x1, r3}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x12}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV4={0x8, 0x1, @multicast1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x440, 0x0, 0x0, 0x148, 0x120, 0x148, 0x3a8, 0x240, 0x240, 0x3a8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e20, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x3, 0x1, 0x0, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0)

1.344287571s ago: executing program 1 (id=5695):
socket$kcm(0x10, 0x3, 0x0)

1.319264455s ago: executing program 4 (id=5696):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000a40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/17, 0x16}], 0x1, 0x1000000000000}}, @rdma_args={0x30, 0x114, 0x1, {{0x20080, 0x9}, {&(0x7f0000000600)=""/139, 0x8b}, &(0x7f0000000a00)=[{&(0x7f0000000b00)=""/249, 0xf9}, {&(0x7f0000000900)=""/159, 0x9f}, {&(0x7f00000009c0)}], 0x3, 0x1, 0x9}}], 0x90}, 0x0) (async)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000180)={0x0, 'lo\x00', {}, 0x2})

1.148728161s ago: executing program 1 (id=5697):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000110f610970000000000000000000", @ANYRES32=0x0, @ANYBLOB="02400000000000001c00128009000100626f6e64000000000c00028005000d007f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x44001}, 0x0)

1.145959285s ago: executing program 0 (id=5698):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000030feffff720af0fff8ffffff61a4f0ff000000002d040000000000003d400300000000006504000001ed000079130000000000006c44000000000000"], 0x0}, 0x94)
syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaac7533137cd4e1eaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f04a976bc4b4c9e3e260cbfad9904", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0xc014)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020400830a000000ff0e00000000000003000600002000000200000000000000000000000000000002000100000004d300000502000000e0030005003c20000002"], 0x50}, 0x1, 0x7}, 0x0)
r8 = socket$inet(0x2, 0x800, 0xbd)
sendto$inet(r8, &(0x7f0000000600)="7a8e4a316e7ccf503f0871221baa51e4c9a8e34efdc44cdd37cd3bca727d32481690b842c720abc011e6d510fb1fdd4490283d540aace179c90c40feac7aab4e3e808eaece2d09152962afbe564f663619381af0c9d4b5bdbce5a6a48dc1b7f4fd1eff92a32275e074a85e80d108610abe2359c2bfbd2fb24b786bfc02c4995a1340747dfed5a9fc0923bb998e85074441047ba30e24e1305bb904ce54bcfc633fd89fbecd74f99a8f1a778a8c9450da6cb5aa9960a68b62aa6f4dc279fead0083938bbab06a51b0", 0xc8, 0x8000, 0x0, 0x0)
write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400404"], 0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94)

1.064496664s ago: executing program 4 (id=5699):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d", 0x3b8}], 0x1}, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000006000000080000000b"], 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000040), 0x0}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r4, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x31fd}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc1}, 0x800)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a400060040000000200012800c0001006d6163766c616e001000020580140035006d6163766c616e300000ec6200"/60], 0x54}, 0x1, 0x0, 0x0, 0x8840}, 0x8000)
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r4, 0x9, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a0000000180100002020702500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800020850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x38, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c0017"], 0x38}}, 0x0)

1.061968819s ago: executing program 2 (id=5700):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250401f2800c00180008ac0f000000000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x2100000000000000)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50)
r2 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000))
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a"], 0x1c}}, 0x0)
recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/129, 0x81}, {&(0x7f0000000540)=""/18, 0x12}, {&(0x7f0000000580)=""/191, 0xbf}, {&(0x7f0000000640)=""/36, 0x24}, {&(0x7f0000000680)=""/178, 0xb2}, {&(0x7f0000000740)=""/195, 0xc3}, {&(0x7f0000000840)=""/179, 0xb3}], 0x7, &(0x7f0000001b80)=""/269, 0x10d}, 0x2b}, {{&(0x7f0000000a80)=@phonet, 0x80, &(0x7f0000001380)=[{&(0x7f00000011c0)=""/217, 0xd9}, {&(0x7f00000012c0)=""/185, 0xb9}], 0x2, &(0x7f00000013c0)=""/41, 0x29}}, {{&(0x7f0000001400)=@pptp={0x18, 0x2, {0x0, @local}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001480)=""/131, 0x83}, {&(0x7f0000001540)=""/241, 0xf1}, {&(0x7f0000001640)=""/199, 0xc7}, {&(0x7f0000001740)=""/19, 0x13}, {&(0x7f0000001780)=""/218, 0xda}, {&(0x7f0000001880)=""/166, 0xa6}, {&(0x7f0000001940)=""/152, 0x98}], 0x7}, 0x3}], 0x3, 0x3, &(0x7f0000001b40)={0x77359400})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000001403000000feffff7a0af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7040000050000006a0af2fe00000000850000007c000000b700000001000000950000000000000000e154cd844a954b26c933f7ffffffffffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac66ad029d1c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d6f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804d4a69bf9bc5fa77ee293fbd165a5a7c31de7910d1ed4065a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db3503680e5e5971ff4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dacfeb47479321a0574fb304bc2a1681989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3de8726c2a61ec45c19f97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde0745db06753a7ac7fe13cab6692422a46e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9bdce38c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c5f1e24d9f679e4fbe948dfb4cc4af05c28308241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5490f6589880ed6eea7b9c670012be05e7de0940313c5870786554df2623d58f5ace92d028f2c71a6ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77962a2cd8a104e16b77d5f7f13b1640d43e11801140caf1a8b1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b905fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af0a77fbcf2cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c026ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf34117a82a96b2ced73abb8e4bb718d6ee7aebf9ef40662d7836d252c566f5ee938a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7eee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab50fe82d5a96b09c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cdfba05e3633be3f00000001762e5f5a3a0bc33fdbe28a5ffc83f2f08544eb2794e7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5d81e750d50515a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f296"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000d40)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$inet_smc(0x2b, 0x1, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94)
r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10)
bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r6, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000400000000000000000000000850000004f000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a000000040000800400", @ANYRES32=r7], 0x1c}}, 0x0)
getsockname$packet(r4, 0x0, &(0x7f0000000440))
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x6, 0xf, 0x538}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, <r9=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000130000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94)

859.257233ms ago: executing program 2 (id=5701):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x24048800}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="ec000000100001002d390d00fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8121000000000000140003006e657464657673696d30000000000000b0001680ac00018010000600fa010000060000000900000018000c8014000100930a0000f602000005000000810000000c000700e60000000900000068000c8014000100ffffff"], 0xec}}, 0x4000844)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$sock(r5, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)="cc65135e", 0x4}], 0x1}}], 0x1, 0x2)
recvfrom(r6, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050029bd7000000076a2a686000008000300", @ANYRES32=r7, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x40895}, 0x200480c0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}, @TCA_FQ_PIE_ECN={0x8}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0xfffffffffffffe74, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000400019070000000000000025037c00008a0f428005000a"], 0x20}, 0x1, 0x0, 0x0, 0x4c896}, 0x4000)
sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0)
socketpair(0x22, 0x5, 0x9, &(0x7f0000000380)={<r10=>0xffffffffffffffff})
recvmmsg(r10, &(0x7f0000000c00)=[{{&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000005c0)=""/51, 0x33}, {&(0x7f00000006c0)=""/146, 0x92}, {&(0x7f0000000780)=""/59, 0x3b}, {&(0x7f0000000840)=""/151, 0x97}, {&(0x7f0000000900)=""/110, 0x6e}, {&(0x7f0000000980)=""/99, 0x63}, {&(0x7f0000000a00)=""/81, 0x51}], 0x8, &(0x7f0000000b00)=""/197, 0xc5}, 0x6}], 0x1, 0x10040, 0x0)

748.094592ms ago: executing program 4 (id=5702):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$bt_hci(r0, &(0x7f00000000c0)={0x1, @accept_logical_link={{0x439, 0x21}, {0xc8, {0xa, 0x8, 0x5, 0x5cc, 0x2, 0x9}, {0xa, 0x6, 0x0, 0x0, 0x5, 0x2}}}}, 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWSETELEM={0x18, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0xac}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)
sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x40}, 0x1, 0x0, 0x0, 0x20042001}, 0x10)

678.774691ms ago: executing program 4 (id=5703):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl(r1, 0x8b1b, &(0x7f0000000040))
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000003580), r0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=<r9=>0x0)
sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r9], 0x1c}}, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=<r10=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r11=>0x0)
sendmsg$NFC_CMD_LLC_SDREQ(r2, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r3, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8c1}, 0x2040000)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r14, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r15=>0x0})
sendmsg$nl_route(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r15], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r12, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r13, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}]}, 0x24}}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={<r16=>0x0, @private}, &(0x7f0000000140)=0xc)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x98, r5, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfb}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xdd}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r15}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r16}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3f}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c0}, 0x0)
sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f0000003600)={0x24, r3, 0x609, 0x70bd27, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc0)
r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r17, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r19=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r17, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x1c, r18, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r19}]}, 0x1c}}, 0x8004014)
sendmsg$NFC_CMD_DEACTIVATE_TARGET(r17, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x3c, r8, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x8001)

550.936454ms ago: executing program 0 (id=5704):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010400000000000000000000000000850000007500000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$kcm(0x21, 0x2, 0x2) (async)
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106)
r2 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) (async)
setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
connect$inet6(r2, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000080)={0x1})
sendmmsg$inet6(r2, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0)
recvmmsg(r1, &(0x7f0000005180)=[{{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fd}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x40002002, 0x0) (async)
recvmmsg(r1, &(0x7f0000005180)=[{{&(0x7f0000000280)=@in={0x2, 0x0, @broadcast}, 0x80, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x7fd}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x40002002, 0x0)
ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

499.646223ms ago: executing program 2 (id=5705):
ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, &(0x7f0000000100)={0x2, 0x8001, 0x53, &(0x7f0000000040)=""/83}) (async, rerun: 32)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x300, 0xffffffff, 0xffffffff, 0x300, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00], 'macvtap0\x00', 'pimreg0\x00', {0xff}, {0xff}, 0x3b, 0x5, 0x0, 0x25}, 0x0, 0xd8, 0xf8, 0x60030000, {0x0, 0xff000000}, [@common=@frag={{0x30}, {[0x800, 0x1], 0x3, 0x10, 0x2}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xff000000, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'pim6reg0\x00', {0xff}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x208, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x3, 0x4, 0x2, 0x1, 0x7}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x1, 0x4}, {0x0, 0xb, 0x6}, {0xffffffffffffffff, 0x1, 0x6}, 0xce, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x18000000}, 0x50) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async)
r2 = socket(0x2b, 0x80801, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x5, 0x4) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x44, 0x25, 0x301, 0x670bd24, 0x25dfdbfd, {0x15}, [@typed={0x2e, 0x14e, 0x0, 0x0, @str='\x01\x94{\xab\xe4\xb3\xe2x\x9d\xc1c1\x8c\xdb\x84d\xa4\xb2\xf6\xbe\x13\xf7J^\xd1K\x88*%\xa2\xad\x0eUQ#\'\x00-\xc8\x80\x0f\xc6'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x24008002) (async)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90)

339.641899ms ago: executing program 2 (id=5706):
r0 = epoll_create(0x48000)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="453f6d75235d6b2634c28a320adb04236b3e5657426e41fa4e752c9cc7ce4de0f3b5aeb96da698634d6f8ac6b793031a040d0246713e4506fb00d465d7c4e5ad", 0x40}], 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x9ffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket(0x1e, 0x4, 0x0)
bind$inet6(r2, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, <r4=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3, <r5=>0xffffffffffffffff}, 0x4)
sendfile(r5, r4, &(0x7f0000000100)=0x2, 0x3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r4, @ANYBLOB="00000000000000009500007b00000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)

264.425063ms ago: executing program 1 (id=5707):
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000001300)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001340)='Y', 0x1}, {0x0, 0x18}], 0x2}}], 0x1, 0x0)
r0 = socket$inet(0xa, 0x801, 0x84)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e9ffffff000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x9}, 0x94)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r4=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)="2e9b3d0007e03dd65193dfb6c575963f86ddf0", 0x13}, {&(0x7f0000000100)="05", 0x1}], 0x2)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
r5 = socket$key(0xf, 0x3, 0x2)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0)
listen(r0, 0xfffffffd)
r6 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000001000), 0x581, 0x40000000, 0x0)
setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb81000e0008004500002c00002000002f9078ac1e0001e0000001000065581e8358c4001890780400fc9b8a1e6624129391f2674e7424"], 0x42)

223.256716ms ago: executing program 2 (id=5708):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x25}}, {0x8, 0x2, @remote}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000801}, 0x4)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0)
setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000040)=0x7, 0x1)

79.672286ms ago: executing program 2 (id=5709):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf251500000008000300", @ANYRES32=r4, @ANYBLOB="28002b801c00038006000300feff000006000100039658fadc00020002000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c894}, 0x4010084) (async)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001300)=@mangle={'mangle\x00', 0x2, 0x6, 0x620, 0x5a0, 0x3d0, 0x3d0, 0x5a0, 0xd0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x4, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0xff, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0xfffffffe, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffd}}}}, 0x680) (async, rerun: 64)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd5, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0xe0, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000400), 0x8)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async, rerun: 64)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) (async, rerun: 64)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async, rerun: 64)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 64)
sendfile(r6, r7, 0x0, 0xffffffff004) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000018050000000000000000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0}, 0x94) (async)
bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r7}, 0x8)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000400000004000000002000000000000000000000d0400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28)

21.507895ms ago: executing program 3 (id=5710):
socket$can_j1939(0x1d, 0x2, 0x7)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x28, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9e}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
socket(0x15, 0x5, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0)
r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

0s ago: executing program 0 (id=5711):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000a00b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94)

kernel console output (not intermixed with test programs):

.1.4435'.
[  725.574471][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4440'.
[  725.604583][T23161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4440'.
[  725.776947][T23171] netlink: 'syz.2.4443': attribute type 1 has an invalid length.
[  725.806277][T23164] ip6tnl1: entered allmulticast mode
[  725.898883][T23171] bond7: entered promiscuous mode
[  725.906865][T23171] 8021q: adding VLAN 0 to HW filter on device bond7
[  725.982888][T23175] bridge0: port 1(vlan5) entered blocking state
[  726.014317][T23175] bridge0: port 1(vlan5) entered disabled state
[  726.034517][T23175] vlan5: entered allmulticast mode
[  726.042456][T23175] bridge_slave_1: entered allmulticast mode
[  726.054255][T23175] vlan5: entered promiscuous mode
[  726.069278][T23175] bridge_slave_1: entered promiscuous mode
[  726.158367][T23171] bond7: (slave bridge6): making interface the new active one
[  726.179103][T23171] bridge6: entered promiscuous mode
[  726.195903][T23171] bridge6: left promiscuous mode
[  726.231512][T23191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4447'.
[  726.277164][T23185] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  726.278999][T23186] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  726.727947][T20687] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  726.747153][T20687] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  726.756257][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  726.849805][T23181] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  726.880912][T20684] net_ratelimit: 20 callbacks suppressed
[  726.880941][T20684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.895691][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.031440][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.039889][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.324183][T23234] Cannot find map_set index 4 as target
[  727.435519][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  727.474529][ T5740] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  727.514582][T20691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.523423][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.641498][T23239] bond0: (slave bond_slave_1): Releasing backup interface
[  727.707249][T23239] bond_slave_1: left promiscuous mode
[  727.912148][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.921521][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.006576][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4461'.
[  728.071630][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.080345][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.340190][T23272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4464'.
[  728.876321][T23292] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  728.883960][T23292] IPv6: NLM_F_CREATE should be set when creating new route
[  728.891459][T23292] IPv6: NLM_F_CREATE should be set when creating new route
[  728.898903][T23292] IPv6: NLM_F_CREATE should be set when creating new route
[  729.549871][T23315] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4473'.
[  729.713236][T23315] veth0_to_hsr: entered promiscuous mode
[  729.736847][T23315] gretap0: entered promiscuous mode
[  729.755285][T23315] hsr1: entered promiscuous mode
[  729.842904][T23320] bridge_slave_0 (unregistering): left allmulticast mode
[  729.903217][T23320] bridge_slave_0 (unregistering): left promiscuous mode
[  729.948343][T23320] bridge0: port 1(bridge_slave_0) entered disabled state
[  730.096268][T23341] nbd: nbd2 already in use
[  730.116805][T23341] block nbd0: NBD_DISCONNECT
[  730.130541][T23341] block nbd0: Send disconnect failed -32
[  730.158714][T23341] block nbd0: shutting down sockets
[  730.208893][T23347] dvmrp0: left allmulticast mode
[  730.329291][T23355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4481'.
[  730.483339][T23353] lo speed is unknown, defaulting to 1000
[  730.574832][T23361] bridge0: port 2(bridge_slave_1) entered disabled state
[  730.649459][T23361] bond0: (slave bond_slave_0): Releasing backup interface
[  730.735183][T23361] bond0: (slave bond_slave_1): Releasing backup interface
[  730.790514][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  730.819517][T23375] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4486'.
[  730.835569][T23361] team0: Port device team_slave_0 removed
[  730.894116][T23361] team0: Port device team_slave_1 removed
[  730.921856][T23361] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  730.946623][T23361] batman_adv: batadv0: Removing interface: batadv_slave_0
[  730.975351][T23361] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  731.006057][T23361] batman_adv: batadv0: Removing interface: batadv_slave_1
[  731.164760][T23355] netlink: 45 bytes leftover after parsing attributes in process `syz.0.4481'.
[  731.419237][T23389] xfrm1: entered allmulticast mode
[  731.916003][T23415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4493'.
[  732.241043][ T5743] net_ratelimit: 26 callbacks suppressed
[  732.241063][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.256750][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.399640][T23426] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  732.541231][T20689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.550213][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.821114][T23438] vlan5: entered promiscuous mode
[  733.111625][ T5750] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.120172][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.271244][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.279915][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.292408][T20689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.301262][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.970080][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4512'.
[  734.006369][T23477] netlink: 'syz.0.4512': attribute type 29 has an invalid length.
[  734.034822][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4512'.
[  734.468440][T23493] netlink: 'syz.3.4517': attribute type 1 has an invalid length.
[  734.479474][T23492] netlink: 'syz.1.4518': attribute type 11 has an invalid length.
[  734.549996][T23493] 8021q: adding VLAN 0 to HW filter on device bond8
[  734.661497][T23493] bond8: (slave dummy0): Enslaving as a backup interface with an up link
[  734.687953][T23499] netlink: 'syz.3.4517': attribute type 10 has an invalid length.
[  734.698692][T23499] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4517'.
[  734.834025][T23495] bond8: (slave veth3): Enslaving as a backup interface with a down link
[  734.886573][T23499] dummy0: entered promiscuous mode
[  734.914458][T23499] bond8: (slave dummy0): Removing an active aggregator
[  734.943037][T23499] bond8: (slave dummy0): Releasing backup interface
[  734.975901][T23506] netlink: 'syz.1.4521': attribute type 11 has an invalid length.
[  734.988747][T23499] bond8: (slave dummy0): the permanent HWaddr of slave - aa:aa:aa:aa:aa:24 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  735.149510][T23508] 8021q: adding VLAN 0 to HW filter on device bond0
[  735.230468][T23509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4521'.
[  735.826926][T23516] pimreg: entered allmulticast mode
[  735.855931][T23516] syz_tun: left allmulticast mode
[  736.326187][T23515] pimreg: left allmulticast mode
[  736.910114][T23560] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4536'.
[  736.971616][T23560] netlink: 'syz.3.4536': attribute type 1 has an invalid length.
[  737.013291][T23562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4537'.
[  737.265977][T23574] tipc: Failed to remove unknown binding: 66,1,1/0:2278880010/2278880012
[  737.283055][ T9807] net_ratelimit: 26 callbacks suppressed
[  737.283073][ T9807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.299150][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.311318][T23574] tipc: Failed to remove unknown binding: 66,1,1/0:2278880010/2278880012
[  737.348782][T23574] tipc: Failed to remove unknown binding: 66,1,1/0:2278880010/2278880012
[  737.695103][T23596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4546'.
[  737.810884][T23602] IPv6: NLM_F_CREATE should be specified when creating new route
[  737.860519][T23602] 8021q: VLANs not supported on sit0
[  737.902649][T23596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4546'.
[  737.922778][T23599] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  738.198901][T20689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.208132][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.318959][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.327696][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.388691][T23620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4553'.
[  738.408421][T23620] netlink: 35 bytes leftover after parsing attributes in process `syz.4.4553'.
[  738.456855][T23622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4554'.
[  738.827087][T23636] netlink: 'syz.0.4557': attribute type 1 has an invalid length.
[  738.866951][T23627] bond9: option miimon: invalid value (18446744073709551607)
[  738.867879][T23633] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4556'.
[  738.874926][T23627] bond9: option miimon: allowed values 0 - 2147483647
[  738.893118][   T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.902299][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.941978][T23627] bond9 (unregistering): Released all slaves
[  738.994277][T23617] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  739.011275][T23617] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  739.030516][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  739.034755][T20688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.047079][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.093981][T23636] 8021q: adding VLAN 0 to HW filter on device bond5
[  739.147781][T23639] vlan2: entered allmulticast mode
[  739.167951][T23639] veth0_to_bond: entered allmulticast mode
[  739.185503][T23639] bond5: (slave vlan2): Opening slave failed
[  739.748599][T23673] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  739.884426][T23678] bridge3: entered promiscuous mode
[  739.896732][T23678] bridge3: entered allmulticast mode
[  739.932604][T23678] team0: Port device bridge3 added
[  739.948129][T23669] lo speed is unknown, defaulting to 1000
[  740.013320][T23673] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.256998][T23673] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.557183][T23686] hmac(sha2: entered promiscuous mode
[  740.587484][T23690] __nla_validate_parse: 3 callbacks suppressed
[  740.587507][T23690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4570'.
[  740.722518][T23696] netlink: 'syz.4.4571': attribute type 1 has an invalid length.
[  740.763324][T23673] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  740.798938][T23699] xt_CT: You must specify a L4 protocol and not use inversions on it
[  740.856426][T23701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4573'.
[  740.997521][T23705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4574'.
[  741.050409][T20685] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  741.158973][T20689] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  741.237668][T20689] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  741.277062][T20689] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  741.565821][T23730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4584'.
[  741.749531][T23736] netlink: 'syz.1.4585': attribute type 10 has an invalid length.
[  741.763118][T23740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4587'.
[  741.803415][T23744] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4589'.
[  741.818096][T23741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4588'.
[  741.853060][T23746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4585'.
[  741.858546][T23745] netlink: 'syz.0.4589': attribute type 1 has an invalid length.
[  741.971146][T23740] sch_tbf: burst 88 is lower than device veth7 mtu (1514) !
[  742.055708][T23756] netlink: 'syz.2.4592': attribute type 4 has an invalid length.
[  742.064374][T23756] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4592'.
[  742.128796][T23745] 8021q: adding VLAN 0 to HW filter on device bond6
[  742.194513][T23756] netlink: 1100 bytes leftover after parsing attributes in process `syz.2.4592'.
[  742.721067][ T7262] net_ratelimit: 24 callbacks suppressed
[  742.721095][ T7262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.736178][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.948901][T23798] lo speed is unknown, defaulting to 1000
[  743.674082][T23834] netlink: 'syz.4.4610': attribute type 32 has an invalid length.
[  743.860626][T20691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  743.871305][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.195256][T23839] lo speed is unknown, defaulting to 1000
[  744.452787][T23850] lo speed is unknown, defaulting to 1000
[  744.792046][T20691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.802487][T20691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.811322][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.820327][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.040883][T20691] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.049362][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  745.518882][T23879] netlink: 'syz.3.4620': attribute type 21 has an invalid length.
[  745.554973][T23881] batadv_slave_0: entered promiscuous mode
[  745.611701][T20688] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  745.611972][T23879] __nla_validate_parse: 9 callbacks suppressed
[  745.612032][T23879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4620'.
[  745.653005][T20688] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  745.665888][T23879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4620'.
[  745.676659][T23880] batadv_slave_0: left promiscuous mode
[  745.697387][T20688] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  745.731411][T23878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4614'.
[  745.969467][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4625'.
[  746.315469][T23907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4628'.
[  746.433325][T23911] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[  746.496414][T23912] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4628'.
[  746.561713][T23917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4631'.
[  746.586790][T23903] lo speed is unknown, defaulting to 1000
[  746.786798][T23922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4632'.
[  746.907252][ T5647] block nbd0: Receive control failed (result -32)
[  747.056951][T23929] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4633'.
[  747.174734][T23941] ipt_REJECT: TCP_RESET invalid for non-tcp
[  747.372325][T23948] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4638'.
[  747.882509][T23969] syzkaller0: entered promiscuous mode
[  747.907095][T23969] syzkaller0: entered allmulticast mode
[  748.268934][T23980] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  748.308412][T23980] bond7 (unregistering): Released all slaves
[  748.383174][T23979] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  748.412803][T20692] net_ratelimit: 18 callbacks suppressed
[  748.412826][T20692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  748.435905][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.217428][T24027] netlink: 'syz.2.4658': attribute type 2 has an invalid length.
[  749.232016][T24027] netlink: 'syz.2.4658': attribute type 2 has an invalid length.
[  749.416851][T24034] syzkaller0: entered promiscuous mode
[  749.423178][T24034] syzkaller0: entered allmulticast mode
[  749.592388][T20692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.601446][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.824021][T24042] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  749.857662][T24042] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  750.534043][T24080] syzkaller0: entered promiscuous mode
[  750.544042][T24080] syzkaller0: entered allmulticast mode
[  750.554644][ T7262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.563450][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.572932][T20692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.581649][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.733580][T20689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.929467][T24089] __nla_validate_parse: 12 callbacks suppressed
[  750.929493][T24089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4678'.
[  751.005046][T24086] bond4: Removing last ns target with arp_interval on
[  751.018679][T24088] 
: renamed from bond0
[  751.033326][T24095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4678'.
[  751.123169][T24092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4679'.
[  751.210078][T24104] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4682'.
[  751.234700][T24089] team1: entered promiscuous mode
[  751.248792][T24089] team1: entered allmulticast mode
[  751.255876][T24089] 8021q: adding VLAN 0 to HW filter on device team1
[  751.267837][T24095] team2 (uninitialized): Failed to send options change via netlink (err -105)
[  751.327771][T24095] team2: entered promiscuous mode
[  751.346520][T24095] team2: entered allmulticast mode
[  751.360074][T24095] 8021q: adding VLAN 0 to HW filter on device team2
[  751.373183][T24111] netlink: 'syz.4.4685': attribute type 10 has an invalid length.
[  751.486990][T24111] team0 (unregistering): Port device bridge3 removed
[  751.697252][T24117] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  751.734160][T24117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  751.743831][T24118] syzkaller0: entered promiscuous mode
[  751.749932][T24118] syzkaller0: entered allmulticast mode
[  751.822424][T24118] tipc: Resetting bearer <eth:syzkaller0>
[  751.888095][T24116] tipc: Resetting bearer <eth:syzkaller0>
[  751.895407][T24128] netlink: 'syz.4.4691': attribute type 3 has an invalid length.
[  751.915987][T24128] netlink: 666 bytes leftover after parsing attributes in process `syz.4.4691'.
[  752.022822][T24137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4695'.
[  752.034644][T24116] tipc: Disabling bearer <eth:syzkaller0>
[  752.049021][T24134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4694'.
[  752.141812][T24142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4695'.
[  752.174584][T24137] 8021q: adding VLAN 0 to HW filter on device bond0
[  752.188130][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4694'.
[  752.265395][T24140] 8021q: adding VLAN 0 to HW filter on device bond7
[  752.277725][T24140] bond0: (slave bond7): Enslaving as an active interface with an up link
[  752.378333][T24142] bond0 (unregistering): (slave bond7): Releasing backup interface
[  752.429933][T24142] bond0 (unregistering): Released all slaves
[  752.483062][T24156] xt_l2tp: invalid flags combination: 0
[  752.496291][T24159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4698'.
[  752.512883][T24156] netlink: 'syz.3.4699': attribute type 29 has an invalid length.
[  752.554597][T24156] netlink: 'syz.3.4699': attribute type 29 has an invalid length.
[  753.053415][T24181] netlink: 'syz.2.4704': attribute type 1 has an invalid length.
[  753.109786][T24181] 8021q: adding VLAN 0 to HW filter on device bond8
[  753.116882][T24185] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  753.193181][T24181] netlink: 'syz.2.4704': attribute type 8 has an invalid length.
[  753.259890][T24181] sch_fq: defrate 0 ignored.
[  754.092875][T20692] net_ratelimit: 15 callbacks suppressed
[  754.092897][T20692] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.107982][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  754.207167][T24231] syzkaller0: entered promiscuous mode
[  754.213302][T24231] syzkaller0: entered allmulticast mode
[  755.002216][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.035381][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.060673][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.121710][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.150496][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.172213][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.181850][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.191418][T24260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.612725][T24283] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  755.753624][T24283] bond1: (slave lo): Enslaving as an active interface with an up link
[  756.226854][T24318] syzkaller0: entered promiscuous mode
[  756.251844][T24318] syzkaller0: entered allmulticast mode
[  756.310560][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  756.424335][T24330] sch_tbf: burst 19872 is lower than device lo mtu (32783) !
[  756.428203][T24328] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000
[  756.653656][T24338] team0: entered promiscuous mode
[  756.667291][T24338] team0: entered allmulticast mode
[  756.697408][T24338] team0: Cannot enslave team device to itself
[  756.898399][T24350] __nla_validate_parse: 9 callbacks suppressed
[  756.898419][T24350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4756'.
[  757.039233][T24365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4758'.
[  757.121333][T24364] bond9: entered promiscuous mode
[  757.129465][T24364] bond9: entered allmulticast mode
[  757.436189][T24376] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4764'.
[  757.449520][T24376] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4764'.
[  757.704097][T24385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4765'.
[  758.195278][T24395] batadv_slave_1: entered promiscuous mode
[  758.209230][T24393] batadv_slave_1: left promiscuous mode
[  758.257944][T24398] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4772'.
[  758.292195][T24396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4771'.
[  758.367050][T24404] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4773'.
[  758.712894][T24419] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4778'.
[  758.998862][T24426] netlink: 'syz.3.4780': attribute type 16 has an invalid length.
[  759.171357][T24436] netlink: 'syz.3.4782': attribute type 1 has an invalid length.
[  759.183295][T24438] netlink: 'syz.3.4782': attribute type 1 has an invalid length.
[  759.489118][T24452] netlink: 'syz.3.4787': attribute type 1 has an invalid length.
[  759.564978][T24454] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  759.691863][ T9808] IPVS: starting estimator thread 0...
[  759.713894][T24460] bond10: entered promiscuous mode
[  759.727664][T24460] bond10: entered allmulticast mode
[  759.735581][T24460] 8021q: adding VLAN 0 to HW filter on device bond10
[  759.744034][T24471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4789'.
[  759.768921][T24471] net_ratelimit: 1030 callbacks suppressed
[  759.768943][T24471] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  759.783999][T24463] netlink: 'syz.1.4784': attribute type 1 has an invalid length.
[  759.793875][T24463] netlink: 'syz.1.4784': attribute type 2 has an invalid length.
[  759.830842][T24469] IPVS: using max 28 ests per chain, 67200 per kthread
[  760.013843][T24480] xt_ipcomp: unknown flags 1D
[  760.479224][T24496] nbd: must specify at least one socket
[  760.821486][T24509] netlink: 'syz.4.4800': attribute type 1 has an invalid length.
[  761.157159][T24509] 8021q: adding VLAN 0 to HW filter on device bond5
[  761.363250][T24504] lo speed is unknown, defaulting to 1000
[  761.612035][T24530] netlink: 'syz.2.4806': attribute type 4 has an invalid length.
[  762.080266][T24552] __nla_validate_parse: 12 callbacks suppressed
[  762.080288][T24552] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4812'.
[  762.284968][T24553] syzkaller0: entered promiscuous mode
[  762.290912][T24553] syzkaller0: entered allmulticast mode
[  762.315828][T24560] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  762.650814][T24553] lo speed is unknown, defaulting to 1000
[  762.828607][T24583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4820'.
[  762.981618][T24580] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  763.149185][T24593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4823'.
[  763.253622][T24597] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  763.304402][T24595] syzkaller1: tun_chr_ioctl cmd 1074025677
[  763.318869][T24595] syzkaller1: linktype set to 825
[  763.335879][T24595] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4824'.
[  763.402186][T24599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4824'.
[  763.487483][T24595] bond0 (unregistering): Released all slaves
[  763.577564][T24599] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4824'.
[  763.668623][T24610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4827'.
[  767.945869][T24615] netlink: 'syz.2.4828': attribute type 12 has an invalid length.
[  767.969580][T24616] macsec0: entered promiscuous mode
[  768.068647][T24619] nbd: must specify a size in bytes for the device
[  768.101120][T24619] nbd: must specify a size in bytes for the device
[  768.169256][T24616] macsec0: left promiscuous mode
[  768.329476][T24627] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4832'.
[  768.376965][T24629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4833'.
[  768.599024][T24641] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  768.618361][T24635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4831'.
[  768.638977][T24641] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  768.672753][   T30] audit: type=1800 audit(1780609175.974:13): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4837" name="memory.events" dev="tmpfs" ino=2084 res=0 errno=0
[  768.756040][   T30] audit: type=1804 audit(1780609175.974:14): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4837" name="/newroot/407/memory.events" dev="tmpfs" ino=2084 res=1 errno=0
[  768.804105][T24644] lo speed is unknown, defaulting to 1000
[  769.359749][T24659] netlink: 'syz.0.4839': attribute type 3 has an invalid length.
[  769.509568][T24663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4841'.
[  769.559483][T24663] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  769.584032][T24663] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  769.620137][T24665] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4842'.
[  769.643969][T24663] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  769.652709][T24663] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  769.661006][T24663] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  769.669282][T24663] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  769.677991][T24663] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  769.690836][T24663] netlink: 'syz.1.4841': attribute type 1 has an invalid length.
[  770.025269][T24672] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4842'.
[  770.403947][T24683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4847'.
[  770.438067][T24668] 8021q: adding VLAN 0 to HW filter on device bond6
[  770.448386][T24668] bond0: (slave bond6): making interface the new active one
[  770.457110][T24668] bond0: (slave bond6): Enslaving as an active interface with an up link
[  770.822092][T24693] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4851'.
[  770.891752][T24701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4854'.
[  770.931898][T24701] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  771.097653][T24696] lo speed is unknown, defaulting to 1000
[  771.564661][T24716] lo speed is unknown, defaulting to 1000
[  771.744896][T24696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4852'.
[  772.406643][T24740] nbd: must specify a size in bytes for the device
[  772.877172][T24758] bond8: entered promiscuous mode
[  772.883578][T24758] 8021q: adding VLAN 0 to HW filter on device bond8
[  772.891564][T24757] bond8: entered allmulticast mode
[  773.003285][T20688] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  773.019814][T20688] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  773.040428][T24765] validate_nla: 46 callbacks suppressed
[  773.040450][T24765] netlink: 'syz.3.4870': attribute type 13 has an invalid length.
[  773.058499][T20688] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  773.068523][T24765] netlink: 'syz.3.4870': attribute type 17 has an invalid length.
[  773.359983][T24765] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.388566][T24765] 8021q: adding VLAN 0 to HW filter on device team0
[  773.411317][T24765] dummy0: left promiscuous mode
[  773.458731][T24765] 8021q: adding VLAN 0 to HW filter on device batadv0
[  773.604395][T24765] batman_adv: batadv0: Interface activated: batadv_slave_0
[  773.638797][T24765] batman_adv: batadv0: Interface activated: batadv_slave_1
[  773.675640][T24801] __nla_validate_parse: 9 callbacks suppressed
[  773.675663][T24801] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4878'.
[  773.748785][T24765] veth1_vlan: left promiscuous mode
[  773.785259][T24765] veth0_vlan: entered promiscuous mode
[  773.832325][T24765] veth1_vlan: entered promiscuous mode
[  773.872868][T24765] veth1_macvtap: left promiscuous mode
[  773.886497][T24765] veth0_macvtap: left promiscuous mode
[  773.895812][T24765] veth0_macvtap: entered promiscuous mode
[  773.985962][T24765] veth1_macvtap: entered promiscuous mode
[  774.012642][T24765] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  774.020848][T24765] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  774.082972][T24765] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  774.137212][T24765] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  774.199118][T24765] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  774.263550][T24765] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  774.305588][T20692] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.313489][T20692] bridge0: port 1(bridge_slave_0) entered forwarding state
[  774.354157][T20692] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.361811][T20692] bridge0: port 2(bridge_slave_1) entered forwarding state
[  774.491435][T20689] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  774.523454][T20689] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  774.559551][T20689] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  774.829927][T24819] netlink: 'syz.4.4882': attribute type 1 has an invalid length.
[  774.885487][T24821] netlink: 'syz.4.4882': attribute type 6 has an invalid length.
[  775.012147][T24823] netlink: 'syz.1.4883': attribute type 178 has an invalid length.
[  775.101374][T24825] Cannot find set identified by id 0 to match
[  775.121264][T24825] netlink: 'syz.1.4883': attribute type 21 has an invalid length.
[  776.153341][T24871] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20002
[  776.430069][T24880] netlink: 'syz.0.4899': attribute type 6 has an invalid length.
[  776.454118][T24880] netlink: 'syz.0.4899': attribute type 7 has an invalid length.
[  776.472864][T24880] netlink: 'syz.0.4899': attribute type 8 has an invalid length.
[  776.551178][T24885] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.4898'.
[  776.897983][T24900] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4904'.
[  776.927795][T24900] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4904'.
[  777.154594][T24907] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode
[  777.171607][T24907] mac80211_hwsim hwsim27 wlan0: entered allmulticast mode
[  777.437059][T24913] lo speed is unknown, defaulting to 1000
[  777.493285][T24917] netlink: 'syz.3.4910': attribute type 83 has an invalid length.
[  778.001933][T24942] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4912'.
[  778.330652][T20689] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  778.367207][T20689] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  778.389480][T20689] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  778.426892][T20689] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  778.440856][T24961] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4919'.
[  778.669723][T24967] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4924'.
[  778.867768][T24974] lo speed is unknown, defaulting to 1000
[  779.531521][T25001] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4931'.
[  779.541477][T25001] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4931'.
[  779.582920][T25002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4931'.
[  779.813402][T24976] validate_nla: 1 callbacks suppressed
[  779.813422][T24976] netlink: 'syz.2.4925': attribute type 23 has an invalid length.
[  779.892253][T25010] erspan0: entered promiscuous mode
[  780.265359][T25021] syzkaller1: entered promiscuous mode
[  780.280439][T25021] syzkaller1: entered allmulticast mode
[  780.293820][T25011] erspan0: left promiscuous mode
[  780.625977][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4940'.
[  781.124725][T25056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4945'.
[  781.346585][T25066] FAULT_INJECTION: forcing a failure.
[  781.346585][T25066] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  781.387166][T25071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4951'.
[  781.396960][T25066] CPU: 0 UID: 0 PID: 25066 Comm: syz.4.4948 Not tainted syzkaller #0 PREEMPT(full) 
[  781.396989][T25066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  781.397003][T25066] Call Trace:
[  781.397012][T25066]  <TASK>
[  781.397022][T25066]  dump_stack_lvl+0xe8/0x150
[  781.397057][T25066]  should_fail_ex+0x412/0x560
[  781.397104][T25066]  _copy_from_user+0x2d/0xb0
[  781.397138][T25066]  ___sys_sendmsg+0x1c6/0x360
[  781.397171][T25066]  ? __lock_acquire+0x6b5/0x2cf0
[  781.397206][T25066]  ? __pfx____sys_sendmsg+0x10/0x10
[  781.397269][T25066]  ? __fget_files+0x2a/0x420
[  781.397296][T25066]  ? __fget_files+0x3a0/0x420
[  781.397459][T25066]  __x64_sys_sendmsg+0x1bd/0x2a0
[  781.397507][T25066]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  781.397539][T25066]  ? __pfx_ksys_write+0x10/0x10
[  781.397587][T25066]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.397615][T25066]  do_syscall_64+0x174/0x580
[  781.397648][T25066]  ? trace_irq_disable+0x3b/0x140
[  781.397682][T25066]  ? clear_bhb_loop+0x40/0x90
[  781.397709][T25066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.397731][T25066] RIP: 0033:0x7fabccb9ce59
[  781.397754][T25066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  781.397776][T25066] RSP: 002b:00007fabcda42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  781.397805][T25066] RAX: ffffffffffffffda RBX: 00007fabcce15fa0 RCX: 00007fabccb9ce59
[  781.397821][T25066] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  781.397834][T25066] RBP: 00007fabcda42090 R08: 0000000000000000 R09: 0000000000000000
[  781.397847][T25066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  781.397860][T25066] R13: 00007fabcce16038 R14: 00007fabcce15fa0 R15: 00007ffdabbcab48
[  781.397894][T25066]  </TASK>
[  781.659016][T25076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4952'.
[  781.735349][T25078] syz.1.4953: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  781.752499][T25071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4951'.
[  781.762806][T25071] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4951'.
[  781.773781][T25071] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4951'.
[  781.788246][T25078] CPU: 0 UID: 0 PID: 25078 Comm: syz.1.4953 Not tainted syzkaller #0 PREEMPT(full) 
[  781.788283][T25078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  781.788300][T25078] Call Trace:
[  781.788310][T25078]  <TASK>
[  781.788323][T25078]  dump_stack_lvl+0xe8/0x150
[  781.788360][T25078]  warn_alloc+0x249/0x340
[  781.788399][T25078]  ? stack_trace_save+0xa9/0x100
[  781.788442][T25078]  ? __pfx_warn_alloc+0x10/0x10
[  781.788486][T25078]  ? kasan_save_track+0x4f/0x80
[  781.788519][T25078]  ? kasan_save_track+0x3e/0x80
[  781.788550][T25078]  ? __kasan_kmalloc+0x93/0xb0
[  781.788583][T25078]  ? __kmalloc_cache_noprof+0x31c/0x660
[  781.788615][T25078]  ? xskq_create+0x56/0x170
[  781.788654][T25078]  ? xsk_setsockopt+0x54c/0x990
[  781.788685][T25078]  ? do_sock_setsockopt+0x17c/0x1b0
[  781.788715][T25078]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  781.788742][T25078]  ? do_syscall_64+0x174/0x580
[  781.788772][T25078]  __vmalloc_node_range_noprof+0x132/0x1750
[  781.788844][T25078]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  781.788890][T25078]  ? __kasan_kmalloc+0x93/0xb0
[  781.788932][T25078]  vmalloc_user_noprof+0xad/0xe0
[  781.788966][T25078]  ? xskq_create+0xbf/0x170
[  781.789003][T25078]  xskq_create+0xbf/0x170
[  781.789041][T25078]  xsk_init_queue+0x8a/0xe0
[  781.789078][T25078]  xsk_setsockopt+0x54c/0x990
[  781.789115][T25078]  ? __pfx_xsk_setsockopt+0x10/0x10
[  781.789149][T25078]  ? __pfx_aa_sk_perm+0x10/0x10
[  781.789204][T25078]  ? aa_sock_opt_perm+0xff/0x1a0
[  781.789247][T25078]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  781.789280][T25078]  ? __pfx_xsk_setsockopt+0x10/0x10
[  781.789316][T25078]  do_sock_setsockopt+0x17c/0x1b0
[  781.789349][T25078]  __x64_sys_setsockopt+0x13d/0x1b0
[  781.789379][T25078]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.789407][T25078]  do_syscall_64+0x174/0x580
[  781.789433][T25078]  ? trace_irq_disable+0x3b/0x140
[  781.789470][T25078]  ? clear_bhb_loop+0x40/0x90
[  781.789500][T25078]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.789524][T25078] RIP: 0033:0x7f3445d9ce59
[  781.789547][T25078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  781.789569][T25078] RSP: 002b:00007f3443ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  781.789597][T25078] RAX: ffffffffffffffda RBX: 00007f3446015fa0 RCX: 00007f3445d9ce59
[  781.789616][T25078] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  781.789631][T25078] RBP: 00007f3445e32d6f R08: 0000000000000004 R09: 0000000000000000
[  781.789647][T25078] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  781.789662][T25078] R13: 00007f3446016038 R14: 00007f3446015fa0 R15: 00007ffc4bc4b118
[  781.789734][T25078]  </TASK>
[  781.789745][T25078] Mem-Info:
[  782.111165][T25078] active_anon:5423 inactive_anon:0 isolated_anon:0
[  782.111165][T25078]  active_file:3754 inactive_file:40232 isolated_file:0
[  782.111165][T25078]  unevictable:768 dirty:296 writeback:0
[  782.111165][T25078]  slab_reclaimable:11627 slab_unreclaimable:173238
[  782.111165][T25078]  mapped:29896 shmem:1289 pagetables:1348
[  782.111165][T25078]  sec_pagetables:0 bounce:0
[  782.111165][T25078]  kernel_misc_reclaimable:0
[  782.111165][T25078]  free:1238300 free_pcp:19746 free_cma:0
[  782.220705][T25078] Node 0 active_anon:21592kB inactive_anon:0kB active_file:15016kB inactive_file:160724kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119584kB dirty:1184kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15212kB pagetables:5276kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  782.330718][T25078] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  782.495400][T25078] Node 0 DMA free:11244kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:20kB free_cma:0kB
[  782.529606][T25081] netlink: 'syz.1.4953': attribute type 10 has an invalid length.
[  782.588759][T25092] openvswitch: netlink: Message has 2 unknown bytes.
[  782.605201][T25078] lowmem_reserve[]: 0 2492 2493 2493 2493
[  782.612657][T25078] Node 0 DMA32 free:1154432kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21792kB inactive_anon:0kB active_file:15016kB inactive_file:160724kB unevictable:1536kB writepending:1184kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:41232kB local_pcp:18552kB free_cma:0kB
[  782.619753][T25092] netlink: 'syz.1.4953': attribute type 10 has an invalid length.
[  782.698015][T25078] lowmem_reserve[]: 0 0 0 0 0
[  782.703689][T25108] netlink: 'syz.3.4962': attribute type 10 has an invalid length.
[  782.714512][T25078] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:24kB local_pcp:12kB free_cma:0kB
[  782.755413][T25078] lowmem_reserve[]: 0 0 0 0 0
[  782.756406][T25092] team0: Port device dummy0 removed
[  782.769240][T25078] Node 1 Normal free:3789532kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:33984kB local_pcp:30476kB free_cma:0kB
[  782.804260][T25078] lowmem_reserve[]: 0 0 0 0 0
[  782.813633][T25078] Node 0 DMA: 1*4kB (U) 1*8kB (U) 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 2*1024kB (U) 2*2048kB (UM) 1*4096kB (M) = 11244kB
[  782.818049][T25092] dummy0: entered promiscuous mode
[  782.834750][T25078] Node 0 DMA32: 10644*4kB (UME) 6604*8kB (UME) 3534*16kB (UME) 457*32kB (UME) 719*64kB (UME) 840*128kB (UME) 557*256kB (UM) 330*512kB (UME) 242*1024kB (UM) 134*2048kB (UM) 0*4096kB = 1153904kB
[  782.857855][T25078] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  782.897865][T25092] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  782.909162][T25078] Node 1 Normal: 4*4kB (UM) 10*8kB (UM) 15*16kB (UM) 12*32kB (UM) 11*64kB (UM) 9*128kB (UM) 7*256kB (UM) 7*512kB (UM) 3*1024kB (UM) 3*2048kB (U) 921*4096kB (M) = 3789584kB
[  782.932257][T25078] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  782.950801][T25078] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  782.979829][T25078] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  782.994567][T25113] geneve2: entered promiscuous mode
[  783.005323][T25078] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  783.015214][T25078] 45271 total pagecache pages
[  783.021794][T25078] 0 pages in swap cache
[  783.027473][T25078] Free swap  = 124996kB
[  783.035669][T25078] Total swap = 124996kB
[  783.040088][T25078] 2097051 pages RAM
[  783.044338][T25078] 0 pages HighMem/MovableOnly
[  783.049165][T25078] 427120 pages reserved
[  783.053617][T25078] 0 pages cma reserved
[  783.068373][ T7262] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 47999 - 0
[  783.092250][ T7262] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 47999 - 0
[  783.125426][ T7262] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 47999 - 0
[  783.331274][T25128] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  783.347358][T25126] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  783.629732][T25133] vlan4: entered promiscuous mode
[  783.691333][T25139] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  784.085644][T25149] netlink: 'syz.4.4975': attribute type 111 has an invalid length.
[  784.186933][T25154] x_tables: duplicate underflow at hook 2
[  784.514303][T25165] syzkaller0: entered promiscuous mode
[  784.532459][T25165] syzkaller0: entered allmulticast mode
[  784.675366][T25173] __nla_validate_parse: 14 callbacks suppressed
[  784.675392][T25173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4981'.
[  784.731902][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4981'.
[  784.933435][T25176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4981'.
[  785.007514][T25177] bridge0: the hash_elasticity option has been deprecated and is always 16
[  785.030104][T25177] bridge0: entered allmulticast mode
[  785.051996][T20688] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  785.081836][T20688] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  785.103774][T20688] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  785.124770][T20688] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  785.344705][T25187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4984'.
[  785.386311][T25187] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  786.019000][T25213] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4992'.
[  786.138651][T25222] netlink: 'syz.0.4993': attribute type 16 has an invalid length.
[  786.172344][T25222] netlink: 'syz.0.4993': attribute type 17 has an invalid length.
[  786.364144][T25228] x_tables: duplicate underflow at hook 3
[  786.486411][T25222] 8021q: adding VLAN 0 to HW filter on device 

[  786.495896][T25238] FAULT_INJECTION: forcing a failure.
[  786.495896][T25238] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  786.504502][T25222] team0: left promiscuous mode
[  786.514919][T25222] team0: left allmulticast mode
[  786.522050][T25222] 8021q: adding VLAN 0 to HW filter on device team0
[  786.529679][T25222] dummy0: left promiscuous mode
[  786.540049][T25222] 8021q: adding VLAN 0 to HW filter on device batadv0
[  786.543984][T25238] CPU: 1 UID: 0 PID: 25238 Comm: syz.4.4997 Not tainted syzkaller #0 PREEMPT(full) 
[  786.544070][T25238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  786.544104][T25238] Call Trace:
[  786.544135][T25238]  <TASK>
[  786.544166][T25238]  dump_stack_lvl+0xe8/0x150
[  786.544249][T25238]  should_fail_ex+0x412/0x560
[  786.544333][T25238]  _copy_from_iter+0x1d3/0x1670
[  786.544410][T25238]  ? rcu_is_watching+0x15/0xb0
[  786.544503][T25238]  ? __pfx__copy_from_iter+0x10/0x10
[  786.544614][T25238]  ? netlink_sendmsg+0x650/0xb40
[  786.544701][T25238]  ? skb_put+0x11b/0x210
[  786.544770][T25238]  netlink_sendmsg+0x6c0/0xb40
[  786.544876][T25238]  ? __pfx_netlink_sendmsg+0x10/0x10
[  786.544955][T25238]  ? aa_sock_msg_perm+0xf1/0x1b0
[  786.545044][T25238]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  786.545130][T25238]  ____sys_sendmsg+0x972/0x9f0
[  786.545202][T25238]  ? __might_fault+0xaf/0x130
[  786.545290][T25238]  ? __pfx_____sys_sendmsg+0x10/0x10
[  786.545392][T25238]  ? import_iovec+0x73/0xa0
[  786.545467][T25238]  ___sys_sendmsg+0x2a5/0x360
[  786.545540][T25238]  ? __lock_acquire+0x6b5/0x2cf0
[  786.545610][T25238]  ? __pfx____sys_sendmsg+0x10/0x10
[  786.545769][T25238]  ? __fget_files+0x2a/0x420
[  786.545842][T25238]  ? __fget_files+0x3a0/0x420
[  786.545934][T25238]  __x64_sys_sendmsg+0x1bd/0x2a0
[  786.546029][T25238]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  786.546125][T25238]  ? __pfx_ksys_write+0x10/0x10
[  786.546233][T25238]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.546290][T25238]  do_syscall_64+0x174/0x580
[  786.546356][T25238]  ? trace_irq_disable+0x3b/0x140
[  786.546491][T25238]  ? clear_bhb_loop+0x40/0x90
[  786.546557][T25238]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  786.546621][T25238] RIP: 0033:0x7fabccb9ce59
[  786.546668][T25238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  786.546720][T25238] RSP: 002b:00007fabcda42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  786.546784][T25238] RAX: ffffffffffffffda RBX: 00007fabcce15fa0 RCX: 00007fabccb9ce59
[  786.546827][T25238] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  786.546861][T25238] RBP: 00007fabcda42090 R08: 0000000000000000 R09: 0000000000000000
[  786.546895][T25238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  786.546927][T25238] R13: 00007fabcce16038 R14: 00007fabcce15fa0 R15: 00007ffdabbcab48
[  786.547015][T25238]  </TASK>
[  786.965300][T25222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  786.978500][T25222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  787.010162][T25222] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  787.055478][T25223] lo speed is unknown, defaulting to 1000
[  787.611479][T25255] lo speed is unknown, defaulting to 1000
[  787.688485][T25264] bond9: entered promiscuous mode
[  787.694971][T25264] bond9: entered allmulticast mode
[  787.702050][T25264] 8021q: adding VLAN 0 to HW filter on device bond9
[  787.877938][T25258] lo speed is unknown, defaulting to 1000
[  788.734783][T25293] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5013'.
[  788.932230][T25282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5009'.
[  789.091716][T25308] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  789.182985][T25315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5019'.
[  789.203644][T25315] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  789.214728][T25315] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5019'.
[  789.705715][T25329] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5023'.
[  789.818135][T25332] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5024'.
[  789.868269][T25332] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5024'.
[  789.907514][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'.
[  790.043507][T25349] block nbd3: server does not support multiple connections per device.
[  790.056933][T25349] block nbd3: shutting down sockets
[  790.148539][T25373] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5027'.
[  790.278312][T25390] netlink: 216 bytes leftover after parsing attributes in process `syz.4.5029'.
[  790.306386][T25390] netlink: 772 bytes leftover after parsing attributes in process `syz.4.5029'.
[  790.363271][T25396] netlink: 'syz.1.5028': attribute type 1 has an invalid length.
[  790.424649][T25408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5030'.
[  790.517077][T25328] workqueue: Failed to create a rescuer kthread for wq "nfc25_nci_rx_wq": -EINTR
[  790.870655][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  791.009950][T25429] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5032'.
[  791.132267][T25432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5033'.
[  791.665786][T25442] veth0_to_team: entered allmulticast mode
[  791.853951][T25442] netlink: 'syz.1.5035': attribute type 1 has an invalid length.
[  791.935220][T25451] xt_bpf: check failed: parse error
[  792.233799][T25445] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  792.468626][T25445] syzkaller0: entered promiscuous mode
[  792.524445][T25445] syzkaller0: entered allmulticast mode
[  792.547096][T25445] tipc: Resetting bearer <eth:syzkaller0>
[  793.241763][ T7262] tipc: Resetting bearer <eth:syzkaller0>
[  793.265505][T25443] tipc: Resetting bearer <eth:syzkaller0>
[  796.913461][T25443] tipc: Disabling bearer <eth:syzkaller0>
[  796.936757][   T10] tipc: Node number set to 2570799148
[  797.139715][T25486] 8021q: adding VLAN 0 to HW filter on device bond0
[  797.175448][T25486] 8021q: adding VLAN 0 to HW filter on device team0
[  797.298689][T25486] batman_adv: batadv0: Interface activated: batadv_slave_0
[  797.337920][T25486] batman_adv: batadv0: Interface activated: batadv_slave_1
[  797.369848][T25486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  797.391533][T25486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  797.404914][T25486] hsr0: left promiscuous mode
[  797.413871][T25486] veth1_vlan: left promiscuous mode
[  797.424545][T25486] veth0_vlan: left promiscuous mode
[  797.431300][T25486] veth0_vlan: entered promiscuous mode
[  797.444200][T25486] veth1_vlan: entered promiscuous mode
[  797.454678][T25486] veth1_macvtap: left promiscuous mode
[  797.463918][T25486] veth1_macvtap: entered promiscuous mode
[  797.474792][T25486] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  797.609344][T25503] vlan6: entered allmulticast mode
[  797.627496][T25503] bond0: entered allmulticast mode
[  797.637956][T25503] bond_slave_0: entered allmulticast mode
[  797.661451][T25503] dummy0: entered allmulticast mode
[  797.720163][T25510] bond0: (slave ip6tnl0): refused to change device type
[  797.795577][T25511] ip6erspan0: entered allmulticast mode
[  797.887809][T25510] netlink: 'syz.3.5051': attribute type 21 has an invalid length.
[  797.979271][T25510] __nla_validate_parse: 2 callbacks suppressed
[  797.979293][T25510] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5051'.
[  797.999644][T25510] netlink: 'syz.3.5051': attribute type 1 has an invalid length.
[  798.012802][T25518] lo speed is unknown, defaulting to 1000
[  798.033671][T25527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5056'.
[  798.686935][T25543] xt_hashlimit: size too large, truncated to 1048576
[  798.881989][T25548] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  799.353706][T25566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5065'.
[  799.672561][T25581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5067'.
[  799.703603][T25581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5067'.
[  799.888112][T25587] netlink: 'syz.4.5071': attribute type 15 has an invalid length.
[  799.917182][T25578] lo speed is unknown, defaulting to 1000
[  800.219768][T25591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5073'.
[  800.609412][T25598] syzkaller1: entered promiscuous mode
[  800.623068][T25604] netlink: 'syz.0.5077': attribute type 1 has an invalid length.
[  800.633736][T25598] syzkaller1: entered allmulticast mode
[  800.904588][T25611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  801.005912][T25611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5078'.
[  801.090691][T25611] ip6gre2: entered promiscuous mode
[  801.101472][T25620] netlink: 'syz.4.5080': attribute type 1 has an invalid length.
[  801.114970][T25611] ip6gre2: entered allmulticast mode
[  801.127097][T25621] netlink: 'syz.4.5080': attribute type 1 has an invalid length.
[  801.224762][T25621] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  801.229840][T25620] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  801.274771][T25630] netlink: 'syz.3.5082': attribute type 1 has an invalid length.
[  801.307440][T25622] gretap1: entered allmulticast mode
[  801.363454][T25630] bond12: entered promiscuous mode
[  801.378155][T25630] 8021q: adding VLAN 0 to HW filter on device bond12
[  801.508496][T25630] 8021q: adding VLAN 0 to HW filter on device bond12
[  801.532834][T25630] bond12: (slave ip6gre3): The slave device specified does not support setting the MAC address
[  801.568853][T25630] bond12: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode
[  801.628495][T25630] bond12: (slave ip6gre3): making interface the new active one
[  801.645836][T25630] ip6gre3: entered promiscuous mode
[  801.682749][T25630] bond12: (slave ip6gre3): Enslaving as an active interface with an up link
[  801.705386][T25638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5085'.
[  801.799492][T25648] lo speed is unknown, defaulting to 1000
[  802.014337][T25656] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5088'.
[  802.234505][T25663] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  802.312453][T25663] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5091'.
[  802.795928][T25677] bond7: Removing last arp target with arp_interval on
[  803.243389][T25704] __nla_validate_parse: 4 callbacks suppressed
[  803.243414][T25704] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5102'.
[  803.518317][T25710] lo speed is unknown, defaulting to 1000
[  803.591964][T25719] netlink: 'syz.2.5106': attribute type 1 has an invalid length.
[  803.668986][T25719] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  803.705987][T25729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5108'.
[  803.715685][T25719] gretap2: entered allmulticast mode
[  803.822675][T25729] 8021q: adding VLAN 0 to HW filter on device bond9
[  804.095868][T25733] syzkaller1: entered promiscuous mode
[  804.106511][T25733] syzkaller1: entered allmulticast mode
[  804.119513][T25750] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR
[  804.147792][T25746] syz.0.5111 (25746) used obsolete PPPIOCDETACH ioctl
[  804.168141][T25746] netlink: 'syz.0.5111': attribute type 4 has an invalid length.
[  804.176865][T25746] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5111'.
[  804.679883][T25774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5119'.
[  804.722251][T25772] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5118'.
[  804.829585][T25778] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2
[  804.853512][T25778] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0
[  805.179856][T25788] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5123'.
[  805.198352][T25788] syzkaller1: entered promiscuous mode
[  805.204284][T25788] syzkaller1: entered allmulticast mode
[  805.214249][T25788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5123'.
[  805.453773][T25792] netlink: 'syz.2.5125': attribute type 1 has an invalid length.
[  805.496607][T25792] 8021q: adding VLAN 0 to HW filter on device bond10
[  805.689431][T20689] nci: nci_ntf_packet: unknown ntf opcode 0x102
[  805.702240][T25806] netlink: 56 bytes leftover after parsing attributes in process `syz.2.5125'.
[  805.848418][T25812] netlink: 'syz.3.5129': attribute type 21 has an invalid length.
[  805.857425][T25812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5129'.
[  805.893005][T25810] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  806.029357][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5129'.
[  808.473725][T25795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  808.786043][T25830] __nla_validate_parse: 3 callbacks suppressed
[  808.786064][T25830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5131'.
[  808.802114][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  808.979284][T25844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5137'.
[  809.097570][T25850] bridge1: entered promiscuous mode
[  809.103751][T25850] bridge1: entered allmulticast mode
[  809.144701][T25850] netlink: 'syz.1.5139': attribute type 3 has an invalid length.
[  809.308139][T25861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5140'.
[  809.318121][T25861] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  809.380130][T25869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5143'.
[  809.420972][T25872] netlink: 'syz.1.5144': attribute type 1 has an invalid length.
[  809.463208][T25872] 8021q: adding VLAN 0 to HW filter on device bond10
[  809.495501][T25872] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5144'.
[  809.565405][T25877] netlink: 'syz.3.5145': attribute type 1 has an invalid length.
[  809.609814][T25879] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5146'.
[  809.654561][T25881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5147'.
[  809.785570][T25884] bond13: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  809.827606][T25884] bond13 (unregistering): Released all slaves
[  809.968574][T25894] netlink: 'syz.1.5151': attribute type 1 has an invalid length.
[  810.027444][T25894] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5151'.
[  810.074400][T25894] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5151'.
[  810.111533][T25894] nbd: must specify an index to disconnect
[  811.190787][ T4950] Bluetooth: hci4: command 0x0405 tx timeout
[  850.895194][T25925] netlink: 'syz.3.5159': attribute type 1 has an invalid length.
[  850.925338][T25925] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5159'.
[  851.112946][T25931] netlink: 'syz.2.5161': attribute type 1 has an invalid length.
[  851.124517][T25933] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5162'.
[  851.143009][T25936] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:0
[  851.179629][T25931] 8021q: adding VLAN 0 to HW filter on device bond11
[  851.189625][T25937] bond11: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms
[  851.214310][T25937] bond11: entered allmulticast mode
[  851.233597][T25940] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5163'.
[  851.317058][T25943] netlink: 'syz.1.5164': attribute type 1 has an invalid length.
[  851.329853][T25931] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link
[  851.457559][T25943] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  851.507131][T25954] xt_TCPMSS: Only works on TCP SYN packets
[  851.527740][T25955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5165'.
[  851.913931][T25969] syzkaller0: entered promiscuous mode
[  851.927534][T25969] syzkaller0: entered allmulticast mode
[  852.323336][T25981] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5173'.
[  852.406325][T25983] netlink: 'syz.1.5174': attribute type 1 has an invalid length.
[  852.473235][T25983] 8021q: adding VLAN 0 to HW filter on device bond11
[  852.564765][T25989] bond12: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  852.587299][T25989] bond12 (unregistering): Released all slaves
[  852.616832][T25997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5177'.
[  853.128464][T26010] netlink: 'syz.4.5181': attribute type 61 has an invalid length.
[  853.423944][T26029] netlink: 'syz.3.5185': attribute type 10 has an invalid length.
[  853.458838][T26029] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5185'.
[  853.520074][T26032] lo speed is unknown, defaulting to 1000
[  853.677264][T26041] netlink: 'syz.1.5188': attribute type 1 has an invalid length.
[  853.710766][T26041] 8021q: adding VLAN 0 to HW filter on device bond12
[  853.932461][T26048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5190'.
[  853.948251][T26048] ip6gre2: entered promiscuous mode
[  853.955427][T26048] ip6gre2: entered allmulticast mode
[  853.970963][T26048] netlink: 92 bytes leftover after parsing attributes in process `syz.2.5190'.
[  854.337262][T26035] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  854.586542][T26061] netlink: 'syz.3.5195': attribute type 1 has an invalid length.
[  854.724474][T26072] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5197'.
[  855.231992][ T7264] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1
[  855.295144][T26099] netlink: 'syz.3.5206': attribute type 11 has an invalid length.
[  855.649489][T26115] syzkaller1: entered promiscuous mode
[  855.662013][T26115] syzkaller1: entered allmulticast mode
[  856.068738][T26130] netlink: 'syz.3.5213': attribute type 1 has an invalid length.
[  857.256017][T26115] tipc: Resetting bearer <eth:vlan0>
[  857.527580][T26115] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  857.643974][T26115] bond1: left promiscuous mode
[  857.653562][T26115] ip6tnl2: left allmulticast mode
[  857.688327][T26115] geneve2: left promiscuous mode
[  857.736349][T26115] veth7: left allmulticast mode
[  857.750034][T26115] gretap0: left allmulticast mode
[  857.755915][T26115] macvlan3: left promiscuous mode
[  857.763396][T26115] macvlan3: left allmulticast mode
[  857.772287][T26115] bond2: left promiscuous mode
[  857.777204][T26115] bridge2: left promiscuous mode
[  857.787397][T26115] vlan3: left allmulticast mode
[  857.792981][T26115] bond2: left allmulticast mode
[  857.798105][T26115] bridge2: left allmulticast mode
[  857.816433][T26115] geneve3: left promiscuous mode
[  857.833469][T26115] bridge3: left promiscuous mode
[  857.838836][T26115] bridge3: left allmulticast mode
[  857.881793][T26115] syzkaller1: left promiscuous mode
[  857.887288][T26115] syzkaller1: left allmulticast mode
[  857.896947][T26120] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) !
[  857.924722][T26130] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR
[  857.998502][T20685] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  858.051867][T20685] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  858.075628][T20685] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  858.095577][T20685] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  858.154171][T26143] lo speed is unknown, defaulting to 1000
[  858.161322][T20685] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  858.188694][T20685] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  858.216330][T20685] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  858.247842][T20685] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  858.456252][T26184] rdma_op ffff8880367d41f0 conn xmit_rdma 0000000000000000
[  858.576207][T26191] __nla_validate_parse: 5 callbacks suppressed
[  858.576229][T26191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5224'.
[  859.256667][T26213] netlink: 'syz.1.5230': attribute type 1 has an invalid length.
[  859.293076][T26213] bond13: entered promiscuous mode
[  859.298812][T26213] 8021q: adding VLAN 0 to HW filter on device bond13
[  859.317122][T26213] batadv_slave_1: entered promiscuous mode
[  859.346525][T26213] bond13: (slave bridge2): making interface the new active one
[  859.355448][T26213] bridge2: entered promiscuous mode
[  859.362493][T26213] bond13: (slave bridge2): Enslaving as an active interface with an up link
[  859.409290][T26212] batadv_slave_1: left promiscuous mode
[  859.628514][T26234] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5234'.
[  859.667254][T26234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5234'.
[  859.692384][T26234] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5234'.
[  860.321462][T26255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5241'.
[  860.536541][T26260] netlink: 193 bytes leftover after parsing attributes in process `syz.1.5243'.
[  860.645831][T26270] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5245'.
[  860.929117][T26278] lo speed is unknown, defaulting to 1000
[  860.966107][T26285] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5247'.
[  861.023235][T26292] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5247'.
[  861.048926][T26293] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.5252'.
[  861.855759][T26334] openvswitch: netlink: Missing valid actions attribute.
[  861.876676][T26334] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  862.381887][T26362] netlink: 'syz.3.5269': attribute type 3 has an invalid length.
[  862.817153][T26385] syzkaller0: entered promiscuous mode
[  862.824887][T26385] syzkaller0: entered allmulticast mode
[  862.870639][    C1] tcf_pedit_act: 22 callbacks suppressed
[  862.870660][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.885773][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.892199][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.898774][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.905204][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.911636][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.918538][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.925184][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.931639][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.939060][    C1] tc action pedit 'at' offset 2061 out of bounds
[  862.945608][    C1] TC_ACT_REPEAT abuse ?
[  863.342590][    C1] TC_ACT_REPEAT abuse ?
[  865.071757][T26342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  865.103629][T26399] netlink: 'syz.2.5282': attribute type 1 has an invalid length.
[  865.111091][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  865.128139][T26399] __nla_validate_parse: 2 callbacks suppressed
[  865.129221][T26399] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5282'.
[  865.556937][T26426] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5284'.
[  865.650717][T26432] netlink: 'syz.0.5291': attribute type 1 has an invalid length.
[  865.832939][T26428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5289'.
[  865.844785][T26428] netlink: 47 bytes leftover after parsing attributes in process `syz.1.5289'.
[  865.855118][T26428] netlink: 'syz.1.5289': attribute type 6 has an invalid length.
[  865.863491][T26428] netlink: 'syz.1.5289': attribute type 6 has an invalid length.
[  866.686794][T26443] bond10: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  866.763499][T26445] veth9: entered promiscuous mode
[  866.780121][T26445] bond10: (slave veth9): Enslaving as a backup interface with a down link
[  866.856684][T26462] nbd: nbd1 already in use
[  866.873100][T26462] block nbd0: NBD_DISCONNECT
[  866.883924][T26462] block nbd0: Send disconnect failed -32
[  866.907545][T26462] block nbd0: shutting down sockets
[  867.305534][T26486] openvswitch: netlink: Flow actions attr not present in new flow.
[  867.378871][T26482] bond14: ARP target 9.0.0.0 is already present
[  867.385526][T26482] bond14: option arp_ip_target: invalid value (9)
[  867.399948][T26482] bond14 (unregistering): Released all slaves
[  867.633484][T26502] syzkaller1: entered promiscuous mode
[  867.660521][T26502] syzkaller1: entered allmulticast mode
[  867.828508][T26512] netlink: 'syz.4.5305': attribute type 20 has an invalid length.
[  867.849757][T26512] netlink: 'syz.4.5305': attribute type 20 has an invalid length.
[  867.904240][T26516] FAULT_INJECTION: forcing a failure.
[  867.904240][T26516] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  867.922270][T26516] CPU: 1 UID: 0 PID: 26516 Comm: syz.1.5308 Not tainted syzkaller #0 PREEMPT(full) 
[  867.922300][T26516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  867.922315][T26516] Call Trace:
[  867.922324][T26516]  <TASK>
[  867.922337][T26516]  dump_stack_lvl+0xe8/0x150
[  867.922371][T26516]  should_fail_ex+0x412/0x560
[  867.922402][T26516]  _copy_from_user+0x2d/0xb0
[  867.922430][T26516]  ___sys_sendmsg+0x1c6/0x360
[  867.922457][T26516]  ? __lock_acquire+0x6b5/0x2cf0
[  867.922494][T26516]  ? __pfx____sys_sendmsg+0x10/0x10
[  867.922557][T26516]  ? __fget_files+0x2a/0x420
[  867.922585][T26516]  ? __fget_files+0x3a0/0x420
[  867.922622][T26516]  __x64_sys_sendmsg+0x1bd/0x2a0
[  867.922651][T26516]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  867.922687][T26516]  ? __pfx_ksys_write+0x10/0x10
[  867.922728][T26516]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.922752][T26516]  do_syscall_64+0x174/0x580
[  867.922778][T26516]  ? trace_irq_disable+0x3b/0x140
[  867.922810][T26516]  ? clear_bhb_loop+0x40/0x90
[  867.922837][T26516]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  867.922859][T26516] RIP: 0033:0x7f3445d9ce59
[  867.922879][T26516] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  867.922899][T26516] RSP: 002b:00007f3443ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  867.922922][T26516] RAX: ffffffffffffffda RBX: 00007f3446015fa0 RCX: 00007f3445d9ce59
[  867.922938][T26516] RDX: 0000000004000004 RSI: 0000200000001800 RDI: 0000000000000003
[  867.922952][T26516] RBP: 00007f3443ff6090 R08: 0000000000000000 R09: 0000000000000000
[  867.922965][T26516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  867.922978][T26516] R13: 00007f3446016038 R14: 00007f3446015fa0 R15: 00007ffc4bc4b118
[  867.923013][T26516]  </TASK>
[  868.124068][T26511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5306'.
[  868.135514][T26511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5306'.
[  868.196409][T26517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5306'.
[  868.386910][T26519] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5309'.
[  868.616279][T26527] lo speed is unknown, defaulting to 1000
[  868.935705][T26555] FAULT_INJECTION: forcing a failure.
[  868.935705][T26555] name failslab, interval 1, probability 0, space 0, times 0
[  869.025535][T26559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  869.039827][T26555] CPU: 0 UID: 0 PID: 26555 Comm: syz.1.5319 Not tainted syzkaller #0 PREEMPT(full) 
[  869.039857][T26555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  869.039871][T26555] Call Trace:
[  869.039880][T26555]  <TASK>
[  869.039888][T26555]  dump_stack_lvl+0xe8/0x150
[  869.039920][T26555]  should_fail_ex+0x412/0x560
[  869.039948][T26555]  should_failslab+0xa8/0x100
[  869.039982][T26555]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  869.040012][T26555]  ? __alloc_skb+0x186/0x7d0
[  869.040033][T26555]  ? __alloc_skb+0x1d0/0x7d0
[  869.040051][T26555]  ? __local_bh_enable_ip+0xd0/0x130
[  869.040079][T26555]  __alloc_skb+0x1d0/0x7d0
[  869.040099][T26555]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  869.040135][T26555]  netlink_sendmsg+0x5d4/0xb40
[  869.040171][T26555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  869.040200][T26555]  ? aa_sock_msg_perm+0xf1/0x1b0
[  869.040234][T26555]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  869.040266][T26555]  ____sys_sendmsg+0x972/0x9f0
[  869.040290][T26555]  ? __might_fault+0xaf/0x130
[  869.040324][T26555]  ? __pfx_____sys_sendmsg+0x10/0x10
[  869.040359][T26555]  ? import_iovec+0x73/0xa0
[  869.040389][T26555]  ___sys_sendmsg+0x2a5/0x360
[  869.040412][T26555]  ? __lock_acquire+0x6b5/0x2cf0
[  869.040440][T26555]  ? __pfx____sys_sendmsg+0x10/0x10
[  869.040501][T26555]  ? __fget_files+0x2a/0x420
[  869.040526][T26555]  ? __fget_files+0x3a0/0x420
[  869.040561][T26555]  __x64_sys_sendmsg+0x1bd/0x2a0
[  869.040589][T26555]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  869.040624][T26555]  ? __pfx_ksys_write+0x10/0x10
[  869.040663][T26555]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  869.040686][T26555]  do_syscall_64+0x174/0x580
[  869.040709][T26555]  ? trace_irq_disable+0x3b/0x140
[  869.040740][T26555]  ? clear_bhb_loop+0x40/0x90
[  869.040766][T26555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  869.040786][T26555] RIP: 0033:0x7f3445d9ce59
[  869.040806][T26555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  869.040825][T26555] RSP: 002b:00007f3443ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  869.040847][T26555] RAX: ffffffffffffffda RBX: 00007f3446015fa0 RCX: 00007f3445d9ce59
[  869.040863][T26555] RDX: 0000000004000004 RSI: 0000200000001800 RDI: 0000000000000003
[  869.040876][T26555] RBP: 00007f3443ff6090 R08: 0000000000000000 R09: 0000000000000000
[  869.040888][T26555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  869.040900][T26555] R13: 00007f3446016038 R14: 00007f3446015fa0 R15: 00007ffc4bc4b118
[  869.040931][T26555]  </TASK>
[  869.500006][T26569] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5325'.
[  869.633658][T26575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5326'.
[  870.409272][T26611] lo speed is unknown, defaulting to 1000
[  870.907736][T26641] syzkaller0: entered promiscuous mode
[  870.914204][T26641] syzkaller0: entered allmulticast mode
[  870.996495][T26643] bond0: (slave dummy0): Releasing backup interface
[  871.004691][T26643] dummy0: left promiscuous mode
[  871.013102][T26643] dummy0: left allmulticast mode
[  871.061192][T26643] bond0: (slave bond_slave_0): Releasing backup interface
[  871.093703][T26643] bond_slave_0: left promiscuous mode
[  871.107890][T26646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5344'.
[  871.112146][T26643] bond_slave_0: left allmulticast mode
[  871.165442][T26643] team0: Port device team_slave_0 removed
[  871.212265][T26643] team0: Port device team_slave_1 removed
[  871.226151][T26643] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  871.235003][T26643] batman_adv: batadv0: Removing interface: batadv_slave_0
[  871.244096][T26643] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  871.253169][T26643] batman_adv: batadv0: Removing interface: batadv_slave_1
[  871.273117][T26643] bond2: (slave geneve2): Releasing active interface
[  871.303845][T26643] bond3: (slave veth3): Releasing active interface
[  871.324837][T26643] bond5: (slave bridge0): Releasing active interface
[  871.332820][T26643] bridge0: left promiscuous mode
[  871.338016][T26643] vlan5: left promiscuous mode
[  871.344382][T26643] bridge_slave_1: left promiscuous mode
[  871.351563][T26643] bridge0: left allmulticast mode
[  871.369742][T26643] vlan5: left allmulticast mode
[  871.374980][T26643] bridge_slave_1: left allmulticast mode
[  871.381729][T26643] bridge0: port 1(vlan5) entered disabled state
[  871.395891][T26643] bond13: (slave bridge2): Releasing backup interface
[  871.403586][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  871.412192][T26643] bridge2: left promiscuous mode
[  871.551463][T26658] syzkaller1: entered promiscuous mode
[  871.557217][T26658] syzkaller1: entered allmulticast mode
[  872.391183][   T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  873.446142][T26621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  873.709854][T26672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5353'.
[  873.731385][T26668] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5349'.
[  873.747954][T26675] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5351'.
[  873.768582][T26672] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  873.800824][T26672] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  873.830077][T26672] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  873.872148][T26672] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5353'.
[  874.449047][T26691] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5356'.
[  874.644750][T26676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5352'.
[  875.425033][T26712] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5360'.
[  875.455862][T26706] bond13: entered allmulticast mode
[  875.519679][T26714] ip6gretap2: entered allmulticast mode
[  875.529582][T26714] bond13: (slave ip6gretap2): Enslaving as an active interface with an up link
[  875.639151][T26716] 8021q: adding VLAN 0 to HW filter on device bond14
[  875.647731][T26716] bridge0: port 1(bond14) entered blocking state
[  875.663025][T26716] bridge0: port 1(bond14) entered disabled state
[  875.671987][T26716] bond14: entered allmulticast mode
[  876.848079][T26761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5372'.
[  876.895232][T26761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5372'.
[  877.085927][T26768] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5373'.
[  877.231838][T26772] sctp: [Deprecated]: syz.3.5374 (pid 26772) Use of struct sctp_assoc_value in delayed_ack socket option.
[  877.231838][T26772] Use struct sctp_sack_info instead
[  877.278039][T26772] sctp: [Deprecated]: syz.3.5374 (pid 26772) Use of struct sctp_assoc_value in delayed_ack socket option.
[  877.278039][T26772] Use struct sctp_sack_info instead
[  877.473588][T26779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5376'.
[  877.512442][T26778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5376'.
[  877.561150][T26778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5376'.
[  877.570363][T26778] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  877.601360][T26779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5376'.
[  877.676573][T26778] batman_adv: batadv0: Removing interface: batadv_slave_1
[  877.690722][T26785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5377'.
[  877.703180][T26786] xt_cgroup: path and classid specified
[  879.488532][T26833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5387'.
[  879.989191][T26842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5393'.
[  880.285263][T26848] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  880.600169][T26857] lo speed is unknown, defaulting to 1000
[  880.934601][T26874] lo: entered promiscuous mode
[  880.942491][T26874] tunl0: entered promiscuous mode
[  880.948747][T26874] gre0: entered promiscuous mode
[  881.085688][T26874] ip_vti0: entered promiscuous mode
[  881.092166][T26874] ip6_vti0: entered promiscuous mode
[  881.098787][T26874] sit0: entered promiscuous mode
[  881.105604][T26874] ip6tnl0: entered promiscuous mode
[  881.188375][T26874] ip6gre0: entered promiscuous mode
[  881.202625][T26874] syz_tun: entered promiscuous mode
[  881.224600][T26874] ip6gretap0: entered promiscuous mode
[  881.273855][T26874] vcan0: entered promiscuous mode
[  881.310910][T26874] bond0: entered promiscuous mode
[  881.316033][T26874] bond_slave_0: entered promiscuous mode
[  881.321937][T26874] bond_slave_1: entered promiscuous mode
[  881.425861][T26874] team0: entered promiscuous mode
[  881.432873][T26874] team_slave_0: entered promiscuous mode
[  881.439851][T26874] team_slave_1: entered promiscuous mode
[  881.456263][T26874] dummy0: entered promiscuous mode
[  881.467177][T26874] nlmon0: entered promiscuous mode
[  881.475695][T26874] batadv0: entered promiscuous mode
[  881.536924][T26874] vxcan0: entered promiscuous mode
[  881.557917][T26874] vxcan1: entered promiscuous mode
[  881.564225][T26874] veth0: entered promiscuous mode
[  881.570192][T26874] veth1: entered promiscuous mode
[  881.576033][T26874] wg0: entered promiscuous mode
[  881.581987][T26874] wg1: entered promiscuous mode
[  881.642421][T26874] wg2: entered promiscuous mode
[  881.648406][T26874] : entered promiscuous mode
[  881.656522][T26874] veth1_to_bond: entered promiscuous mode
[  881.725493][T26874] veth0_to_team: entered promiscuous mode
[  881.732943][T26874] veth1_to_team: entered promiscuous mode
[  881.740533][T26874] veth0_to_batadv: entered promiscuous mode
[  881.747484][T26874] batadv_slave_0: entered promiscuous mode
[  881.756755][T26874] xfrm0: entered promiscuous mode
[  881.764241][T26874] veth1_to_hsr: entered promiscuous mode
[  881.771622][T26874] hsr0: entered promiscuous mode
[  881.777533][T26874] veth1_virt_wifi: entered promiscuous mode
[  881.784325][T26874] veth0_virt_wifi: entered promiscuous mode
[  881.792960][T26874] vlan0: entered promiscuous mode
[  881.799351][T26874] vlan1: entered promiscuous mode
[  881.862326][T26874] macvlan0: entered promiscuous mode
[  881.868629][T26874] macvlan1: entered promiscuous mode
[  881.875934][T26874] ipvlan0: entered promiscuous mode
[  881.882303][T26874] ipvlan1: entered promiscuous mode
[  881.923079][T26874] veth0_macvtap: entered promiscuous mode
[  882.015935][T26874] macsec0: entered promiscuous mode
[  882.021953][T26874] geneve0: entered promiscuous mode
[  882.030302][T26874] geneve1: entered promiscuous mode
[  882.036403][T26874] mac80211_hwsim hwsim32 wlan0: entered promiscuous mode
[  882.093388][T26874] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  882.307041][T26879] syzkaller1: entered promiscuous mode
[  882.312605][T26879] syzkaller1: entered allmulticast mode
[  882.343043][T26886] bond9: option resend_igmp: invalid value (2878)
[  882.349559][T26886] bond9: option resend_igmp: allowed values 0 - 255
[  882.358573][T26886] bond9 (unregistering): Released all slaves
[  882.388903][T26900] openvswitch: netlink: IP tunnel dst address not specified
[  882.427967][T26901] openvswitch: netlink: IP tunnel dst address not specified
[  882.605785][T26896] vlan2: entered allmulticast mode
[  882.612724][T26896] bond0: entered allmulticast mode
[  882.813849][T26904] netlink: 'syz.3.5406': attribute type 8 has an invalid length.
[  883.424777][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  883.672177][T26924] bond11: option fail_over_mac: invalid value (127)
[  883.706134][T26924] bond11 (unregistering): Released all slaves
[  883.847553][T26928] __nla_validate_parse: 1 callbacks suppressed
[  883.847576][T26928] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5413'.
[  884.572894][ T9830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.694464][ T7264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.703357][ T7264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  884.991619][T26948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5418'.
[  885.182427][T26948] 8021q: adding VLAN 0 to HW filter on device bond14
[  885.413878][T26955] gretap1: entered allmulticast mode
[  885.455593][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.606263][T26955] bond14: (slave gretap1): Enslaving as an active interface with an up link
[  885.677141][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  885.931038][T26963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5421'.
[  886.007395][T26963] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  886.054015][T26963] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5421'.
[  886.131907][T26967] lo speed is unknown, defaulting to 1000
[  886.448035][ T7264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  886.847525][T26974] netlink: 204 bytes leftover after parsing attributes in process `syz.4.5424'.
[  887.945105][  T808] net_ratelimit: 2 callbacks suppressed
[  887.945126][  T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.059417][T20684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.125251][T20684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.297821][T26906] Set syz1 is full, maxelem 65536 reached
[  888.471783][T26160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  888.757598][   T30] audit: type=1800 audit(1780609296.054:15): pid=27008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5435" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2409 res=0 errno=0
[  888.855952][T27011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5434'.
[  888.991938][T27011] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  889.035665][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.059039][T27011] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  889.066845][T27011] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5434'.
[  889.367247][ T7264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.375663][ T7264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.466512][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.475316][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  889.495983][T27031] netlink: 'syz.3.5437': attribute type 4 has an invalid length.
[  889.513228][T27026] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5438'.
[  889.552641][T27026] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5438'.
[  889.726605][T27033] lo speed is unknown, defaulting to 1000
[  889.930285][T27037] netlink: 'syz.4.5441': attribute type 1 has an invalid length.
[  889.955898][T27039] netlink: 'syz.3.5442': attribute type 1 has an invalid length.
[  889.963877][T27039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5442'.
[  890.763045][T27071] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5452'.
[  890.929511][T27066] syzkaller0: entered promiscuous mode
[  890.942504][T27073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5453'.
[  890.952440][T27066] syzkaller0: entered allmulticast mode
[  891.714958][T27098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5458'.
[  891.955815][T27103] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5460'.
[  892.035017][T27105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5461'.
[  892.636970][T27109] netlink: 'syz.3.5462': attribute type 4 has an invalid length.
[  892.686283][T27109] ipt_ECN: cannot use operation on non-tcp rule
[  892.986597][T27115] netlink: 'syz.0.5464': attribute type 4 has an invalid length.
[  893.241886][T27121] net_ratelimit: 23 callbacks suppressed
[  893.241912][T27121] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  893.315786][T27122] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  893.549877][T27134] netlink: 'syz.0.5471': attribute type 1 has an invalid length.
[  893.674851][T27134] 8021q: adding VLAN 0 to HW filter on device bond11
[  893.803753][T27139] xt_hashlimit: max too large, truncated to 1048576
[  893.816406][T27143] openvswitch: netlink: Flow key attr not present in new flow.
[  893.976908][T27149] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048)
[  893.999178][T27149] __nla_validate_parse: 3 callbacks suppressed
[  893.999201][T27149] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5475'.
[  894.062938][T27149] netlink: 488 bytes leftover after parsing attributes in process `syz.0.5475'.
[  894.183044][T27155] netlink: 192 bytes leftover after parsing attributes in process `syz.1.5473'.
[  894.951951][T27154] ip6tnl2: entered allmulticast mode
[  894.999912][T27151] lo speed is unknown, defaulting to 1000
[  895.434459][T27173] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5482'.
[  895.462170][T27171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5482'.
[  895.517095][T27170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5482'.
[  895.585171][T27170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5482'.
[  896.029201][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5487'.
[  896.038653][T27192] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5487'.
[  896.223590][T27197] netlink: 157 bytes leftover after parsing attributes in process `syz.3.5488'.
[  896.589003][T27208] bridge0: port 1(vlan4) entered blocking state
[  896.595716][T27208] bridge0: port 1(vlan4) entered disabled state
[  896.612661][T27208] vlan4: entered allmulticast mode
[  896.651525][T27208] dummy0: entered allmulticast mode
[  896.659948][T27208] vlan4: entered promiscuous mode
[  896.665144][T27208] dummy0: entered promiscuous mode
[  896.765352][T27208] vlan0: entered promiscuous mode
[  897.162610][T27220] A link change request failed with some changes committed already. Interface bond2 may have been left with an inconsistent configuration, please check.
[  897.239854][T27224] tap0: tun_chr_ioctl cmd 1074025676
[  897.246195][T27224] tap0: owner set to 0
[  897.358304][T27220] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  897.491553][T27230] pim6reg1: entered promiscuous mode
[  897.497020][T27230] pim6reg1: entered allmulticast mode
[  898.181697][T27250] netlink: 'syz.2.5505': attribute type 28 has an invalid length.
[  898.194995][T27250] netlink: 'syz.2.5505': attribute type 3 has an invalid length.
[  898.471609][T27257] FAULT_INJECTION: forcing a failure.
[  898.471609][T27257] name failslab, interval 1, probability 0, space 0, times 0
[  898.486425][T27257] CPU: 1 UID: 0 PID: 27257 Comm: syz.4.5507 Not tainted syzkaller #0 PREEMPT(full) 
[  898.486457][T27257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  898.486478][T27257] Call Trace:
[  898.486487][T27257]  <TASK>
[  898.486497][T27257]  dump_stack_lvl+0xe8/0x150
[  898.486529][T27257]  should_fail_ex+0x412/0x560
[  898.486559][T27257]  should_failslab+0xa8/0x100
[  898.486584][T27257]  kmem_cache_alloc_node_noprof+0x8f/0x690
[  898.486615][T27257]  ? __alloc_skb+0x186/0x7d0
[  898.486637][T27257]  ? __alloc_skb+0x1d0/0x7d0
[  898.486656][T27257]  ? __local_bh_enable_ip+0xd0/0x130
[  898.486685][T27257]  __alloc_skb+0x1d0/0x7d0
[  898.486713][T27257]  netlink_sendmsg+0x5d4/0xb40
[  898.486750][T27257]  ? __pfx_netlink_sendmsg+0x10/0x10
[  898.486779][T27257]  ? aa_sock_msg_perm+0xf1/0x1b0
[  898.486815][T27257]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  898.486850][T27257]  ____sys_sendmsg+0x972/0x9f0
[  898.486875][T27257]  ? __might_fault+0xaf/0x130
[  898.486911][T27257]  ? __pfx_____sys_sendmsg+0x10/0x10
[  898.486947][T27257]  ? import_iovec+0x73/0xa0
[  898.486977][T27257]  ___sys_sendmsg+0x2a5/0x360
[  898.487001][T27257]  ? __lock_acquire+0x6b5/0x2cf0
[  898.487030][T27257]  ? __pfx____sys_sendmsg+0x10/0x10
[  898.487094][T27257]  ? __fget_files+0x2a/0x420
[  898.487121][T27257]  ? __fget_files+0x3a0/0x420
[  898.487158][T27257]  __x64_sys_sendmsg+0x1bd/0x2a0
[  898.487188][T27257]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  898.487224][T27257]  ? __pfx_ksys_write+0x10/0x10
[  898.487264][T27257]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.487297][T27257]  do_syscall_64+0x174/0x580
[  898.487321][T27257]  ? trace_irq_disable+0x3b/0x140
[  898.487353][T27257]  ? clear_bhb_loop+0x40/0x90
[  898.487380][T27257]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  898.487401][T27257] RIP: 0033:0x7fabccb9ce59
[  898.487423][T27257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  898.487441][T27257] RSP: 002b:00007fabcda42028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  898.487464][T27257] RAX: ffffffffffffffda RBX: 00007fabcce15fa0 RCX: 00007fabccb9ce59
[  898.487480][T27257] RDX: 0000000004000844 RSI: 0000200000000280 RDI: 0000000000000003
[  898.487493][T27257] RBP: 00007fabcda42090 R08: 0000000000000000 R09: 0000000000000000
[  898.487507][T27257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  898.487520][T27257] R13: 00007fabcce16038 R14: 00007fabcce15fa0 R15: 00007ffdabbcab48
[  898.487556][T27257]  </TASK>
[  899.053010][T27267] __nla_validate_parse: 6 callbacks suppressed
[  899.053035][T27267] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5508'.
[  899.112657][T27272] netlink: 'syz.1.5508': attribute type 10 has an invalid length.
[  899.797498][T27286] netlink: 'syz.2.5514': attribute type 1 has an invalid length.
[  900.288155][T27296] lo speed is unknown, defaulting to 1000
[  900.420974][T27302] syzkaller1: entered promiscuous mode
[  900.426538][T27302] syzkaller1: entered allmulticast mode
[  900.545325][T27298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5517'.
[  901.066151][T27310] sctp: [Deprecated]: syz.4.5519 (pid 27310) Use of struct sctp_assoc_value in delayed_ack socket option.
[  901.066151][T27310] Use struct sctp_sack_info instead
[  906.641401][T27345] lo speed is unknown, defaulting to 1000
[  906.675374][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5522'.
[  906.701719][T27346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5522'.
[  907.008288][T27351] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5524'.
[  907.074886][T27351] Bluetooth: MGMT ver 1.23
[  907.631538][T27360] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5527'.
[  908.317406][T27372] netlink: 'syz.2.5530': attribute type 3 has an invalid length.
[  908.656507][T27381] lo speed is unknown, defaulting to 1000
[  909.367004][T27395] 8021q: adding VLAN 0 to HW filter on device bond12
[  909.374752][T27395] bridge0: port 1(bond12) entered blocking state
[  909.381556][T27395] bridge0: port 1(bond12) entered disabled state
[  909.388642][T27395] bond12: entered allmulticast mode
[  909.473359][T27395] bond12: entered promiscuous mode
[  909.489601][T27395] bridge0: port 1(bond12) entered blocking state
[  909.496338][T27395] bridge0: port 1(bond12) entered forwarding state
[  909.503968][T27408] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5538'.
[  909.716135][T20684] bridge0: port 1(bond12) entered disabled state
[  909.951841][T27414] syzkaller0: entered promiscuous mode
[  909.958627][T27414] syzkaller0: entered allmulticast mode
[  910.115938][T27418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5542'.
[  910.125409][T27418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5542'.
[  910.136316][T27418] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.5542'.
[  911.150602][T27437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5549'.
[  911.321043][T27441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5550'.
[  911.723764][T27455] IPVS: set_ctl: invalid protocol: 46 172.20.20.37:20001
[  911.732674][T27455] SET target dimension over the limit!
[  911.755785][T27455] syzkaller0: entered promiscuous mode
[  911.767650][T27455] syzkaller0: entered allmulticast mode
[  911.878727][T27455] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  911.926645][T27454] tipc: Resetting bearer <eth:syzkaller0>
[  912.054310][T27454] tipc: Disabling bearer <eth:syzkaller0>
[  912.588248][T27478] netlink: 'syz.4.5563': attribute type 13 has an invalid length.
[  912.613782][T27479] ipt_REJECT: TCP_RESET invalid for non-tcp
[  912.614252][T27478] netlink: 'syz.4.5563': attribute type 17 has an invalid length.
[  912.931484][T27484] __nla_validate_parse: 2 callbacks suppressed
[  912.931509][T27484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5563'.
[  913.243524][T27481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5564'.
[  913.545657][ T4950] block nbd0: Receive control failed (result -32)
[  913.556802][ T4950] block nbd0: Receive control failed (result -32)
[  913.568072][ T4950] block nbd0: Receive control failed (result -32)
[  913.640386][T27478] bridge0: port 1(vlan4) entered blocking state
[  913.646894][T27478] bridge0: port 1(vlan4) entered listening state
[  913.659264][T27478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  913.727681][T27478] bridge0: port 3(vlan2) entered blocking state
[  913.735560][T27478] bridge0: port 3(vlan2) entered listening state
[  913.915709][T27473] nbd0: detected capacity change from 0 to 13743895347200
[  913.935225][T27376] block nbd0: Dead connection, failed to find a fallback
[  913.943167][T27376] block nbd0: shutting down sockets
[  913.949404][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  913.963867][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  913.972585][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  913.982115][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  913.990069][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  913.999291][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  914.007412][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  914.036635][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  914.044665][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  914.053747][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  914.061727][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  914.070888][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  914.079491][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  914.088831][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  914.096886][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  914.106545][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  914.110309][T27478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  914.114686][T27376] ldm_validate_partition_table(): Disk read failed.
[  914.114813][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  914.115173][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  914.115344][T27376] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  914.115372][T27376] Buffer I/O error on dev nbd0, logical block 0, async page read
[  914.187168][T27478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  914.210753][T27478] veth1_vlan: left promiscuous mode
[  914.223995][T27478] vlan0: left promiscuous mode
[  914.229262][T27478] tipc: Resetting bearer <eth:vlan0>
[  914.235078][T27478] tipc: Resetting bearer <eth:vlan0>
[  914.241514][T27478] veth1_vlan: entered promiscuous mode
[  914.260591][T27376] Dev nbd0: unable to read RDB block 0
[  914.267662][T27376]  nbd0: unable to read partition table
[  914.283306][T27376] ldm_validate_partition_table(): Disk read failed.
[  914.292394][T27376] Dev nbd0: unable to read RDB block 0
[  914.298780][T27376]  nbd0: unable to read partition table
[  914.325666][T27478] veth1_macvtap: left promiscuous mode
[  914.337033][T27478] veth0_macvtap: left promiscuous mode
[  914.472288][T27478] veth0_macvtap: entered promiscuous mode
[  914.545969][T27478] veth1_macvtap: entered promiscuous mode
[  914.577814][T27478] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  914.589023][T27478] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  914.681663][T27478] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  914.748454][T27478] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  914.792613][T27478] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  914.851729][T27478] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  915.000535][ T7264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  915.009540][ T7264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  915.018563][ T7264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  915.027323][ T7264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  915.087537][T27504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  915.202886][T27511] openvswitch: netlink: nsh attr 14384 is out of range max 3
[  915.210569][T27511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  915.333045][T27519] 8021q: VLANs not supported on lo
[  915.597504][T27511] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  915.640688][T27511] batman_adv: batadv0: Adding interface: gretap2
[  915.647295][T27511] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  915.672697][T27511] batman_adv: batadv0: Interface activated: gretap2
[  915.761272][T27522] lo speed is unknown, defaulting to 1000
[  915.788651][T27527] siw: device registration error -23
[  915.816063][T27528] mac80211_hwsim hwsim47 wlan1: Master is either lo or non-ether device
[  915.974234][T27531] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5573'.
[  916.047890][T27534] netlink: 'syz.2.5575': attribute type 1 has an invalid length.
[  916.162723][T27531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5573'.
[  916.340218][T27534] 8021q: adding VLAN 0 to HW filter on device bond13
[  916.349598][T27538] bond13: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  916.359073][T27538] bond13: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6)
[  917.202061][T27556] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5580'.
[  918.313922][T27574] xt_CT: You must specify a L4 protocol and not use inversions on it
[  918.646109][T27575] syzkaller1: entered promiscuous mode
[  918.651754][T27575] syzkaller1: entered allmulticast mode
[  919.487959][T27586] FAULT_INJECTION: forcing a failure.
[  919.487959][T27586] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  919.554231][T27586] CPU: 0 UID: 0 PID: 27586 Comm: syz.0.5584 Not tainted syzkaller #0 PREEMPT(full) 
[  919.554262][T27586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  919.554277][T27586] Call Trace:
[  919.554285][T27586]  <TASK>
[  919.554295][T27586]  dump_stack_lvl+0xe8/0x150
[  919.554326][T27586]  should_fail_ex+0x412/0x560
[  919.554355][T27586]  _copy_from_user+0x2d/0xb0
[  919.554382][T27586]  ___sys_sendmsg+0x1c6/0x360
[  919.554407][T27586]  ? __lock_acquire+0x6b5/0x2cf0
[  919.554435][T27586]  ? __pfx____sys_sendmsg+0x10/0x10
[  919.554498][T27586]  ? __fget_files+0x2a/0x420
[  919.554524][T27586]  ? __fget_files+0x3a0/0x420
[  919.554562][T27586]  __x64_sys_sendmsg+0x1bd/0x2a0
[  919.554588][T27586]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  919.554623][T27586]  ? rcu_is_watching+0x15/0xb0
[  919.554659][T27586]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.554682][T27586]  do_syscall_64+0x174/0x580
[  919.554708][T27586]  ? clear_bhb_loop+0x40/0x90
[  919.554734][T27586]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  919.554755][T27586] RIP: 0033:0x7fed3199ce59
[  919.554776][T27586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  919.554803][T27586] RSP: 002b:00007fed3280b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  919.554827][T27586] RAX: ffffffffffffffda RBX: 00007fed31c15fa0 RCX: 00007fed3199ce59
[  919.554843][T27586] RDX: 00000000000000c0 RSI: 0000200000003680 RDI: 0000000000000005
[  919.554856][T27586] RBP: 00007fed3280b090 R08: 0000000000000000 R09: 0000000000000000
[  919.554870][T27586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  919.554883][T27586] R13: 00007fed31c16038 R14: 00007fed31c15fa0 R15: 00007ffdb552c4b8
[  919.554917][T27586]  </TASK>
[  920.320851][T27601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5588'.
[  920.423919][T27601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5588'.
[  920.427777][T27602] xt_recent: hitcount (4294967288) is larger than allowed maximum (65535)
[  921.013607][T27613] netlink: 'syz.0.5591': attribute type 1 has an invalid length.
[  921.021509][T27613] netlink: 'syz.0.5591': attribute type 2 has an invalid length.
[  921.219015][T27615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5592'.
[  921.883037][T27636] netlink: 320 bytes leftover after parsing attributes in process `syz.0.5599'.
[  921.892669][T27636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5599'.
[  921.948212][T27636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5599'.
[  921.957277][T27636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5599'.
[  922.217995][T27641] veth1_vlan: left promiscuous mode
[  922.839694][T27661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5607'.
[  923.058321][T27663] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  923.888868][T27678] syzkaller1: entered promiscuous mode
[  923.894463][T27678] syzkaller1: entered allmulticast mode
[  924.091298][T27683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  924.120660][ T7262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.147217][T26159] tipc: Node number set to 4278321153
[  924.194398][T27687] netlink: 'syz.1.5617': attribute type 1 has an invalid length.
[  924.202202][T27687] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5617'.
[  924.212154][T27687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5617'.
[  924.402102][T27657] Set syz1 is full, maxelem 65536 reached
[  924.682664][T20683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.692225][T20683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.938122][T27708] lo speed is unknown, defaulting to 1000
[  925.305121][T27727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.347058][ T7264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.498497][T27730] §: renamed from sit0 (while UP)
[  926.037342][T27755] __nla_validate_parse: 6 callbacks suppressed
[  926.037365][T27755] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5640'.
[  926.146257][T27763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5638'.
[  926.155297][T27763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5638'.
[  926.367750][T27767] lo speed is unknown, defaulting to 1000
[  926.463564][T27750] block nbd3: server does not support multiple connections per device.
[  926.475097][T27750] block nbd3: shutting down sockets
[  926.769284][T27785] FAULT_INJECTION: forcing a failure.
[  926.769284][T27785] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  926.835887][T27785] CPU: 0 UID: 0 PID: 27785 Comm: syz.1.5648 Not tainted syzkaller #0 PREEMPT(full) 
[  926.835918][T27785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  926.835931][T27785] Call Trace:
[  926.835940][T27785]  <TASK>
[  926.835950][T27785]  dump_stack_lvl+0xe8/0x150
[  926.835982][T27785]  should_fail_ex+0x412/0x560
[  926.836011][T27785]  _copy_from_iter+0x1d3/0x1670
[  926.836039][T27785]  ? rcu_is_watching+0x15/0xb0
[  926.836072][T27785]  ? __pfx__copy_from_iter+0x10/0x10
[  926.836104][T27785]  ? netlink_sendmsg+0x650/0xb40
[  926.836129][T27785]  ? skb_put+0x11b/0x210
[  926.836155][T27785]  netlink_sendmsg+0x6c0/0xb40
[  926.836190][T27785]  ? __pfx_netlink_sendmsg+0x10/0x10
[  926.836219][T27785]  ? aa_sock_msg_perm+0xf1/0x1b0
[  926.836253][T27785]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  926.836293][T27785]  ____sys_sendmsg+0x972/0x9f0
[  926.836318][T27785]  ? __might_fault+0xaf/0x130
[  926.836353][T27785]  ? __pfx_____sys_sendmsg+0x10/0x10
[  926.836388][T27785]  ? import_iovec+0x73/0xa0
[  926.836418][T27785]  ___sys_sendmsg+0x2a5/0x360
[  926.836441][T27785]  ? __lock_acquire+0x6b5/0x2cf0
[  926.836469][T27785]  ? __pfx____sys_sendmsg+0x10/0x10
[  926.836536][T27785]  ? __fget_files+0x2a/0x420
[  926.836562][T27785]  ? __fget_files+0x3a0/0x420
[  926.836599][T27785]  __x64_sys_sendmsg+0x1bd/0x2a0
[  926.836627][T27785]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  926.836662][T27785]  ? __pfx_ksys_write+0x10/0x10
[  926.836702][T27785]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.836726][T27785]  do_syscall_64+0x174/0x580
[  926.836749][T27785]  ? trace_irq_disable+0x3b/0x140
[  926.836782][T27785]  ? clear_bhb_loop+0x40/0x90
[  926.836808][T27785]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  926.836828][T27785] RIP: 0033:0x7f3445d9ce59
[  926.836848][T27785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  926.836866][T27785] RSP: 002b:00007f3443ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  926.836888][T27785] RAX: ffffffffffffffda RBX: 00007f3446015fa0 RCX: 00007f3445d9ce59
[  926.836904][T27785] RDX: 00000000000000c0 RSI: 0000200000003680 RDI: 0000000000000005
[  926.836917][T27785] RBP: 00007f3443ff6090 R08: 0000000000000000 R09: 0000000000000000
[  926.836929][T27785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  926.836942][T27785] R13: 00007f3446016038 R14: 00007f3446015fa0 R15: 00007ffc4bc4b118
[  926.836977][T27785]  </TASK>
[  927.185806][T27795] netlink: 'syz.1.5652': attribute type 1 has an invalid length.
[  927.208638][T27795] netlink: 'syz.1.5652': attribute type 3 has an invalid length.
[  927.584420][T27811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5658'.
[  927.617575][T27800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5654'.
[  927.676902][T27810] lo speed is unknown, defaulting to 1000
[  927.746773][T27818] netlink: 'syz.1.5660': attribute type 1 has an invalid length.
[  927.819093][T27818] bond15: entered promiscuous mode
[  927.825434][T27818] 8021q: adding VLAN 0 to HW filter on device bond15
[  927.864466][T27818] sctp: [Deprecated]: syz.1.5660 (pid 27818) Use of int in max_burst socket option.
[  927.864466][T27818] Use struct sctp_assoc_value instead
[  927.891010][T27822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5659'.
[  927.921305][T27825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5661'.
[  927.970423][T27822] bridge0: port 2(bridge_slave_1) entered disabled state
[  927.977844][T27828] FAULT_INJECTION: forcing a failure.
[  927.977844][T27828] name failslab, interval 1, probability 0, space 0, times 0
[  927.991312][T27828] CPU: 0 UID: 0 PID: 27828 Comm: syz.2.5662 Not tainted syzkaller #0 PREEMPT(full) 
[  927.991340][T27828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  927.991353][T27828] Call Trace:
[  927.991362][T27828]  <TASK>
[  927.991372][T27828]  dump_stack_lvl+0xe8/0x150
[  927.991403][T27828]  should_fail_ex+0x412/0x560
[  927.991434][T27828]  should_failslab+0xa8/0x100
[  927.991458][T27828]  __kmalloc_noprof+0xe8/0x760
[  927.991489][T27828]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  927.991530][T27828]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  927.991563][T27828]  ? kernel_text_address+0xa5/0xe0
[  927.991621][T27828]  genl_family_rcv_msg_doit+0xd9/0x330
[  927.991653][T27828]  ? __asan_memcpy+0x40/0x70
[  927.991691][T27828]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  927.991732][T27828]  ? apparmor_capable+0x126/0x170
[  927.991760][T27828]  ? bpf_lsm_capable+0x9/0x20
[  927.991781][T27828]  ? security_capable+0x7e/0x2c0
[  927.991820][T27828]  genl_rcv_msg+0x61c/0x7a0
[  927.991858][T27828]  ? __pfx_genl_rcv_msg+0x10/0x10
[  927.991888][T27828]  ? __pfx_nfc_genl_dep_link_up+0x10/0x10
[  927.992017][T27828]  netlink_rcv_skb+0x232/0x4b0
[  927.992043][T27828]  ? __pfx_genl_rcv_msg+0x10/0x10
[  927.992075][T27828]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  927.992118][T27828]  ? down_read+0x270/0x2e0
[  927.992143][T27828]  ? genl_rcv+0xd/0x40
[  927.992174][T27828]  genl_rcv+0x28/0x40
[  927.992201][T27828]  netlink_unicast+0x75c/0x8e0
[  927.992237][T27828]  netlink_sendmsg+0x813/0xb40
[  927.992273][T27828]  ? __pfx_netlink_sendmsg+0x10/0x10
[  927.992302][T27828]  ? aa_sock_msg_perm+0xf1/0x1b0
[  927.992336][T27828]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  927.992369][T27828]  ____sys_sendmsg+0x972/0x9f0
[  927.992394][T27828]  ? __might_fault+0xaf/0x130
[  927.992435][T27828]  ? __pfx_____sys_sendmsg+0x10/0x10
[  927.992471][T27828]  ? import_iovec+0x73/0xa0
[  927.992502][T27828]  ___sys_sendmsg+0x2a5/0x360
[  927.992526][T27828]  ? __lock_acquire+0x6b5/0x2cf0
[  927.992555][T27828]  ? __pfx____sys_sendmsg+0x10/0x10
[  927.992621][T27828]  ? __fget_files+0x2a/0x420
[  927.992647][T27828]  ? __fget_files+0x3a0/0x420
[  927.992692][T27828]  __x64_sys_sendmsg+0x1bd/0x2a0
[  927.992721][T27828]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  927.992758][T27828]  ? __pfx_ksys_write+0x10/0x10
[  927.992799][T27828]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  927.992822][T27828]  do_syscall_64+0x174/0x580
[  927.992845][T27828]  ? trace_irq_disable+0x3b/0x140
[  927.992877][T27828]  ? clear_bhb_loop+0x40/0x90
[  927.992904][T27828]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  927.992926][T27828] RIP: 0033:0x7f994559ce59
[  927.992946][T27828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  927.992964][T27828] RSP: 002b:00007f994651a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  927.992987][T27828] RAX: ffffffffffffffda RBX: 00007f9945815fa0 RCX: 00007f994559ce59
[  927.993002][T27828] RDX: 00000000000000c0 RSI: 0000200000003680 RDI: 0000000000000005
[  927.993016][T27828] RBP: 00007f994651a090 R08: 0000000000000000 R09: 0000000000000000
[  927.993054][T27828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  927.993067][T27828] R13: 00007f9945816038 R14: 00007f9945815fa0 R15: 00007fff6538b1b8
[  927.993103][T27828]  </TASK>
[  928.001545][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.517386][T27822] bridge_slave_1 (unregistering): left allmulticast mode
[  928.524761][T27822] bridge_slave_1 (unregistering): left promiscuous mode
[  928.544792][T27822] bridge0: port 2(bridge_slave_1) entered disabled state
[  928.617977][T27825] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  928.635764][T27825] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5661'.
[  929.032114][T27841] tipc: MTU too low for tipc bearer
[  929.038065][T27847] bond0: option resend_igmp: invalid value (1023)
[  929.044721][T27847] bond0: option resend_igmp: allowed values 0 - 255
[  929.055718][T27843] syzkaller0: entered promiscuous mode
[  929.061362][T27843] syzkaller0: entered allmulticast mode
[  929.324011][T27861] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5668'.
[  929.383786][T27863] syzkaller0: entered promiscuous mode
[  929.389701][T27863] syzkaller0: entered allmulticast mode
[  929.701972][T27872] netlink: 200 bytes leftover after parsing attributes in process `syz.1.5671'.
[  929.791046][T20683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.799779][T20683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.812148][T20688] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.351389][T27896] netlink: 'syz.1.5678': attribute type 6 has an invalid length.
[  930.386768][T27896] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  930.410798][T27896] syzkaller0: entered promiscuous mode
[  930.416351][T27896] syzkaller0: entered allmulticast mode
[  930.435902][T27896] tipc: Resetting bearer <eth:syzkaller0>
[  930.482867][T27896] tipc: Resetting bearer <eth:syzkaller0>
[  930.517544][T27896] tipc: Disabling bearer <eth:syzkaller0>
[  930.557029][T27900] lo speed is unknown, defaulting to 1000
[  930.831547][T27912] xt_hashlimit: size too large, truncated to 1048576
[  931.025417][T27921] netlink: 'syz.3.5685': attribute type 3 has an invalid length.
[  931.130031][T27924] __nla_validate_parse: 1 callbacks suppressed
[  931.130051][T27924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5686'.
[  931.152717][ T7264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  931.207878][T27919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5684'.
[  931.336546][T27930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5687'.
[  931.785867][T27944] nbd: illegal input index -1
[  931.988906][T27952] bond0: entered promiscuous mode
[  931.995364][T27952] batadv0: entered promiscuous mode
[  932.001338][T27952] debugfs: 'hsr1' already exists in 'hsr'
[  932.007160][T27952] Cannot create hsr debugfs directory
[  932.012965][T27956] 8021q: VLANs not supported on lo
[  932.074212][T27949] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5693'.
[  932.213108][T27965] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5699'.
[  932.252638][T27967] netlink: 'syz.2.5700': attribute type 1 has an invalid length.
[  932.283129][T27967] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5700'.
[  932.298767][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5700'.
[  932.306369][T27961] bond16: option fail_over_mac: invalid value (127)
[  932.316855][T27961] bond16 (unregistering): Released all slaves
[  932.522119][T27979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5701'.
[  932.581515][T27979] netlink: 'syz.2.5701': attribute type 10 has an invalid length.
[  932.782753][T27990] SET target dimension over the limit!
[  933.147755][T28004] macvtap0: entered promiscuous mode
[  933.153132][T28004] bridge0: entered promiscuous mode
[  933.181223][T28004] bridge0: port 2(macvtap0) entered blocking state
[  933.188069][T28004] bridge0: port 2(macvtap0) entered disabled state
[  933.195012][T28004] macvtap0: entered allmulticast mode
[  933.200622][T28004] bridge0: entered allmulticast mode
[  933.209525][T28004] macvtap0: left allmulticast mode
[  933.214903][T28004] bridge0: left allmulticast mode
[  933.320189][T28004] 
[  933.322597][T28004] ======================================================
[  933.329825][T28004] WARNING: possible circular locking dependency detected
[  933.337091][T28004] syzkaller #0 Not tainted
[  933.341546][T28004] ------------------------------------------------------
[  933.348608][T28004] syz.2.5709/28004 is trying to acquire lock:
[  933.354708][T28004] ffff88801be8d2a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80
[  933.364780][T28004] 
[  933.364780][T28004] but task is already holding lock:
[  933.372254][T28004] ffffffff8f390060 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  933.380999][T28004] 
[  933.380999][T28004] which lock already depends on the new lock.
[  933.380999][T28004] 
[  933.391442][T28004] 
[  933.391442][T28004] the existing dependency chain (in reverse order) is:
[  933.400594][T28004] 
[  933.400594][T28004] -> #11 (gdp_mutex){+.+.}-{4:4}:
[  933.408118][T28004]        __mutex_lock+0x1a3/0x1550
[  933.413283][T28004]        get_device_parent+0x16f/0x3a0
[  933.418867][T28004]        device_add+0x2e1/0xbb0
[  933.423933][T28004]        device_create+0x269/0x300
[  933.429091][T28004]        msr_device_create+0x33/0x50
[  933.434629][T28004]        cpuhp_invoke_callback+0x445/0x860
[  933.440474][T28004]        cpuhp_thread_fun+0x36b/0x780
[  933.446059][T28004]        smpboot_thread_fn+0x541/0xa50
[  933.451770][T28004]        kthread+0x389/0x470
[  933.456403][T28004]        ret_from_fork+0x514/0xb70
[  933.461733][T28004]        ret_from_fork_asm+0x1a/0x30
[  933.467068][T28004] 
[  933.467068][T28004] -> #10 (cpuhp_state-up){+.+.}-{0:0}:
[  933.474933][T28004]        cpuhp_thread_fun+0x127/0x780
[  933.480340][T28004]        smpboot_thread_fn+0x541/0xa50
[  933.485833][T28004]        kthread+0x389/0x470
[  933.490467][T28004]        ret_from_fork+0x514/0xb70
[  933.495607][T28004]        ret_from_fork_asm+0x1a/0x30
[  933.501073][T28004] 
[  933.501073][T28004] -> #9 (cpu_hotplug_lock){++++}-{0:0}:
[  933.508854][T28004]        cpus_read_lock+0x42/0x160
[  933.514016][T28004]        static_key_slow_inc+0x12/0x30
[  933.519581][T28004]        ipv6_flowlabel_opt+0x1b94/0x29c0
[  933.525582][T28004]        do_ipv6_setsockopt+0xd9f/0x3150
[  933.531431][T28004]        ipv6_setsockopt+0x59/0x170
[  933.536674][T28004]        rawv6_setsockopt+0x276/0x5f0
[  933.542224][T28004]        do_sock_setsockopt+0x17c/0x1b0
[  933.547799][T28004]        __x64_sys_setsockopt+0x13d/0x1b0
[  933.553553][T28004]        do_syscall_64+0x174/0x580
[  933.558707][T28004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.565258][T28004] 
[  933.565258][T28004] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  933.573212][T28004]        lock_sock_nested+0x41/0x100
[  933.578818][T28004]        inet_shutdown+0x6a/0x390
[  933.584147][T28004]        nbd_mark_nsock_dead+0x2e9/0x560
[  933.589932][T28004]        sock_shutdown+0x15e/0x260
[  933.595098][T28004]        nbd_clear_sock+0x24/0x170
[  933.600251][T28004]        nbd_config_put+0x2dd/0x580
[  933.605501][T28004]        nbd_genl_connect+0x19d5/0x1cf0
[  933.611077][T28004]        genl_family_rcv_msg_doit+0x22a/0x330
[  933.617190][T28004]        genl_rcv_msg+0x61c/0x7a0
[  933.622299][T28004]        netlink_rcv_skb+0x232/0x4b0
[  933.627738][T28004]        genl_rcv+0x28/0x40
[  933.632313][T28004]        netlink_unicast+0x75c/0x8e0
[  933.637636][T28004]        netlink_sendmsg+0x813/0xb40
[  933.642978][T28004]        ____sys_sendmsg+0x972/0x9f0
[  933.648313][T28004]        ___sys_sendmsg+0x2a5/0x360
[  933.653535][T28004]        __x64_sys_sendmsg+0x1bd/0x2a0
[  933.659032][T28004]        do_syscall_64+0x174/0x580
[  933.664253][T28004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.670728][T28004] 
[  933.670728][T28004] -> #7 (&nsock->tx_lock){+.+.}-{4:4}:
[  933.678690][T28004]        __mutex_lock+0x1a3/0x1550
[  933.683942][T28004]        nbd_queue_rq+0x37b/0x1100
[  933.689284][T28004]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  933.695573][T28004]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  933.703121][T28004]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  933.709757][T28004]        blk_mq_run_hw_queue+0x348/0x4f0
[  933.715422][T28004]        blk_mq_dispatch_list+0xd16/0xe10
[  933.721185][T28004]        blk_mq_flush_plug_list+0x48d/0x570
[  933.727215][T28004]        __blk_flush_plug+0x3ed/0x4d0
[  933.732713][T28004]        __submit_bio+0x28d/0x580
[  933.737780][T28004]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  933.744324][T28004]        block_read_full_folio+0x7b7/0x830
[  933.750221][T28004]        filemap_read_folio+0x137/0x3b0
[  933.755897][T28004]        do_read_cache_folio+0x358/0x590
[  933.761587][T28004]        read_part_sector+0xb6/0x2b0
[  933.767016][T28004]        adfspart_check_ICS+0xb1/0x960
[  933.772631][T28004]        bdev_disk_changed+0x817/0x1770
[  933.778232][T28004]        blkdev_get_whole+0x380/0x510
[  933.783889][T28004]        bdev_open+0x31e/0xd30
[  933.788826][T28004]        blkdev_open+0x470/0x610
[  933.793856][T28004]        do_dentry_open+0x822/0x13a0
[  933.799195][T28004]        vfs_open+0x3b/0x340
[  933.803811][T28004]        path_openat+0x2e08/0x3860
[  933.808947][T28004]        do_file_open+0x23e/0x4a0
[  933.814009][T28004]        do_sys_openat2+0x113/0x200
[  933.819243][T28004]        __x64_sys_openat+0x138/0x170
[  933.824672][T28004]        do_syscall_64+0x174/0x580
[  933.829841][T28004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  933.836276][T28004] 
[  933.836276][T28004] -> #6 (&cmd->lock){+.+.}-{4:4}:
[  933.843599][T28004]        __mutex_lock+0x1a3/0x1550
[  933.848735][T28004]        nbd_queue_rq+0xc6/0x1100
[  933.853888][T28004]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  933.859986][T28004]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  933.867263][T28004]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  933.873976][T28004]        blk_mq_run_hw_queue+0x348/0x4f0
[  933.879652][T28004]        blk_mq_dispatch_list+0xd16/0xe10
[  933.885405][T28004]        blk_mq_flush_plug_list+0x48d/0x570
[  933.891322][T28004]        __blk_flush_plug+0x3ed/0x4d0
[  933.896790][T28004]        __submit_bio+0x28d/0x580
[  933.901855][T28004]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  933.908393][T28004]        block_read_full_folio+0x7b7/0x830
[  933.914403][T28004]        filemap_read_folio+0x137/0x3b0
[  933.920077][T28004]        do_read_cache_folio+0x358/0x590
[  933.925770][T28004]        read_part_sector+0xb6/0x2b0
[  933.931083][T28004]        adfspart_check_ICS+0xb1/0x960
[  933.936569][T28004]        bdev_disk_changed+0x817/0x1770
[  933.942139][T28004]        blkdev_get_whole+0x380/0x510
[  933.947621][T28004]        bdev_open+0x31e/0xd30
[  933.952495][T28004]        blkdev_open+0x470/0x610
[  933.957577][T28004]        do_dentry_open+0x822/0x13a0
[  933.962887][T28004]        vfs_open+0x3b/0x340
[  933.967956][T28004]        path_openat+0x2e08/0x3860
[  933.973119][T28004]        do_file_open+0x23e/0x4a0
[  933.978172][T28004]        do_sys_openat2+0x113/0x200
[  933.983579][T28004]        __x64_sys_openat+0x138/0x170
[  933.988982][T28004]        do_syscall_64+0x174/0x580
[  933.994123][T28004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.000565][T28004] 
[  934.000565][T28004] -> #5 (set->srcu){.+.+}-{0:0}:
[  934.007906][T28004]        __synchronize_srcu+0xca/0x300
[  934.013387][T28004]        elevator_switch+0x1e8/0x7a0
[  934.018910][T28004]        elevator_change+0x2cc/0x450
[  934.024221][T28004]        elevator_set_default+0x36c/0x430
[  934.029990][T28004]        blk_register_queue+0x3e9/0x4e0
[  934.035568][T28004]        __add_disk+0x677/0xd50
[  934.040454][T28004]        add_disk_fwnode+0xfb/0x480
[  934.045765][T28004]        nbd_dev_add+0x72c/0xb50
[  934.050843][T28004]        nbd_init+0x168/0x1f0
[  934.055882][T28004]        do_one_initcall+0x250/0x870
[  934.061210][T28004]        do_initcall_level+0x104/0x190
[  934.066820][T28004]        do_initcalls+0x59/0xa0
[  934.071713][T28004]        kernel_init_freeable+0x2a6/0x3e0
[  934.077739][T28004]        kernel_init+0x1d/0x1d0
[  934.082704][T28004]        ret_from_fork+0x514/0xb70
[  934.087862][T28004]        ret_from_fork_asm+0x1a/0x30
[  934.093181][T28004] 
[  934.093181][T28004] -> #4 (&q->elevator_lock){+.+.}-{4:4}:
[  934.101029][T28004]        __mutex_lock+0x1a3/0x1550
[  934.106190][T28004]        elevator_change+0x1b3/0x450
[  934.111522][T28004]        elevator_set_none+0xb5/0x140
[  934.116933][T28004]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  934.123298][T28004]        nbd_start_device+0x17f/0xb10
[  934.128702][T28004]        nbd_genl_connect+0x165b/0x1cf0
[  934.134279][T28004]        genl_family_rcv_msg_doit+0x22a/0x330
[  934.140380][T28004]        genl_rcv_msg+0x61c/0x7a0
[  934.145435][T28004]        netlink_rcv_skb+0x232/0x4b0
[  934.150749][T28004]        genl_rcv+0x28/0x40
[  934.155290][T28004]        netlink_unicast+0x75c/0x8e0
[  934.160695][T28004]        netlink_sendmsg+0x813/0xb40
[  934.166001][T28004]        ____sys_sendmsg+0x972/0x9f0
[  934.171318][T28004]        ___sys_sendmsg+0x2a5/0x360
[  934.176554][T28004]        __x64_sys_sendmsg+0x1bd/0x2a0
[  934.182398][T28004]        do_syscall_64+0x174/0x580
[  934.187728][T28004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.194179][T28004] 
[  934.194179][T28004] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  934.202827][T28004]        blk_alloc_queue+0x546/0x680
[  934.208149][T28004]        __blk_mq_alloc_disk+0x197/0x390
[  934.213893][T28004]        nbd_dev_add+0x499/0xb50
[  934.218870][T28004]        nbd_init+0x168/0x1f0
[  934.223607][T28004]        do_one_initcall+0x250/0x870
[  934.228993][T28004]        do_initcall_level+0x104/0x190
[  934.234500][T28004]        do_initcalls+0x59/0xa0
[  934.239406][T28004]        kernel_init_freeable+0x2a6/0x3e0
[  934.245355][T28004]        kernel_init+0x1d/0x1d0
[  934.250254][T28004]        ret_from_fork+0x514/0xb70
[  934.255484][T28004]        ret_from_fork_asm+0x1a/0x30
[  934.261103][T28004] 
[  934.261103][T28004] -> #2 (fs_reclaim){+.+.}-{0:0}:
[  934.268416][T28004]        fs_reclaim_acquire+0x71/0x100
[  934.273932][T28004]        kmem_cache_alloc_lru_noprof+0x45/0x640
[  934.280401][T28004]        alloc_inode+0xb8/0x1b0
[  934.285283][T28004]        iget_locked+0x131/0x6a0
[  934.290244][T28004]        kernfs_get_inode+0x4f/0x780
[  934.295907][T28004]        kernfs_get_tree+0x5cd/0x980
[  934.301730][T28004]        sysfs_get_tree+0x46/0x110
[  934.306922][T28004]        vfs_get_tree+0x92/0x2a0
[  934.311944][T28004]        do_new_mount+0x341/0xd30
[  934.316993][T28004]        __se_sys_mount+0x31d/0x420
[  934.322218][T28004]        do_syscall_64+0x174/0x580
[  934.327364][T28004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.333815][T28004] 
[  934.333815][T28004] -> #1 (&root->kernfs_rwsem){++++}-{4:4}:
[  934.342283][T28004]        down_write+0x96/0x200
[  934.347104][T28004]        kernfs_remove_by_name_ns+0x4e/0x140
[  934.353174][T28004]        device_links_driver_bound+0x54f/0x14e0
[  934.359461][T28004]        driver_bound+0xd8/0x2e0
[  934.364520][T28004]        really_probe+0x789/0xaf0
[  934.369861][T28004]        __driver_probe_device+0x1ef/0x380
[  934.375707][T28004]        driver_probe_device+0x4f/0x240
[  934.381371][T28004]        __device_attach_driver+0x279/0x430
[  934.387636][T28004]        bus_for_each_drv+0x258/0x2f0
[  934.393049][T28004]        __device_attach+0x2c5/0x450
[  934.398764][T28004]        device_initial_probe+0xa1/0xd0
[  934.404366][T28004]        bus_probe_device+0x12a/0x220
[  934.409776][T28004]        device_add+0x7e9/0xbb0
[  934.414749][T28004]        faux_device_create_with_groups+0x189/0x290
[  934.421363][T28004]        regulator_dummy_init+0x19/0x40
[  934.427069][T28004]        regulator_init+0xca/0x110
[  934.432397][T28004]        do_one_initcall+0x250/0x870
[  934.437936][T28004]        do_initcall_level+0x104/0x190
[  934.443458][T28004]        do_initcalls+0x59/0xa0
[  934.448355][T28004]        kernel_init_freeable+0x2a6/0x3e0
[  934.454120][T28004]        kernel_init+0x1d/0x1d0
[  934.459008][T28004]        ret_from_fork+0x514/0xb70
[  934.464153][T28004]        ret_from_fork_asm+0x1a/0x30
[  934.469486][T28004] 
[  934.469486][T28004] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}:
[  934.478142][T28004]        __lock_acquire+0x15a5/0x2cf0
[  934.483600][T28004]        lock_acquire+0x106/0x350
[  934.488780][T28004]        down_read+0x47/0x2e0
[  934.493847][T28004]        kernfs_remove+0x35/0x80
[  934.498832][T28004]        __kobject_del+0xe1/0x330
[  934.503994][T28004]        kobject_del+0x45/0x60
[  934.508815][T28004]        cleanup_glue_dir+0x1a3/0x220
[  934.514218][T28004]        device_del+0x780/0x8f0
[  934.519116][T28004]        device_destroy+0xb2/0x1a0
[  934.524271][T28004]        macvtap_device_event+0x226/0x400
[  934.530158][T28004]        notifier_call_chain+0x1ad/0x3d0
[  934.536015][T28004]        unregister_netdevice_many_notify+0x177f/0x20c0
[  934.543080][T28004]        rtnl_newlink_create+0x84b/0xb70
[  934.548759][T28004]        rtnl_newlink+0x166a/0x1bb0
[  934.553982][T28004]        rtnetlink_rcv_msg+0x7d5/0xbe0
[  934.559736][T28004]        netlink_rcv_skb+0x232/0x4b0
[  934.565050][T28004]        netlink_unicast+0x75c/0x8e0
[  934.570364][T28004]        netlink_sendmsg+0x813/0xb40
[  934.575688][T28004]        ____sys_sendmsg+0x972/0x9f0
[  934.581232][T28004]        ___sys_sendmsg+0x2a5/0x360
[  934.586498][T28004]        __x64_sys_sendmsg+0x1bd/0x2a0
[  934.592010][T28004]        do_syscall_64+0x174/0x580
[  934.597510][T28004]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.604077][T28004] 
[  934.604077][T28004] other info that might help us debug this:
[  934.604077][T28004] 
[  934.614370][T28004] Chain exists of:
[  934.614370][T28004]   &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex
[  934.614370][T28004] 
[  934.627940][T28004]  Possible unsafe locking scenario:
[  934.627940][T28004] 
[  934.635853][T28004]        CPU0                    CPU1
[  934.641358][T28004]        ----                    ----
[  934.646777][T28004]   lock(gdp_mutex);
[  934.650745][T28004]                                lock(cpuhp_state-up);
[  934.657644][T28004]                                lock(gdp_mutex);
[  934.664110][T28004]   rlock(&root->kernfs_supers_rwsem);
[  934.669609][T28004] 
[  934.669609][T28004]  *** DEADLOCK ***
[  934.669609][T28004] 
[  934.677869][T28004] 3 locks held by syz.2.5709/28004:
[  934.683279][T28004]  #0: ffffffff9030cc30 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  934.692877][T28004]  #1: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0
[  934.702187][T28004]  #2: ffffffff8f390060 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220
[  934.711535][T28004] 
[  934.711535][T28004] stack backtrace:
[  934.717452][T28004] CPU: 1 UID: 0 PID: 28004 Comm: syz.2.5709 Not tainted syzkaller #0 PREEMPT(full) 
[  934.717473][T28004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  934.717484][T28004] Call Trace:
[  934.717492][T28004]  <TASK>
[  934.717500][T28004]  dump_stack_lvl+0xe8/0x150
[  934.717523][T28004]  print_circular_bug+0x2e1/0x300
[  934.717549][T28004]  check_noncircular+0x12e/0x150
[  934.717574][T28004]  __lock_acquire+0x15a5/0x2cf0
[  934.717601][T28004]  ? kernfs_remove+0x35/0x80
[  934.717624][T28004]  lock_acquire+0x106/0x350
[  934.717641][T28004]  ? kernfs_remove+0x35/0x80
[  934.717670][T28004]  down_read+0x47/0x2e0
[  934.717691][T28004]  ? kernfs_remove+0x35/0x80
[  934.717714][T28004]  kernfs_remove+0x35/0x80
[  934.717737][T28004]  __kobject_del+0xe1/0x330
[  934.717759][T28004]  kobject_del+0x45/0x60
[  934.717777][T28004]  cleanup_glue_dir+0x1a3/0x220
[  934.717797][T28004]  device_del+0x780/0x8f0
[  934.717815][T28004]  ? __pfx_device_del+0x10/0x10
[  934.717834][T28004]  device_destroy+0xb2/0x1a0
[  934.717851][T28004]  ? __pfx_device_destroy+0x10/0x10
[  934.717869][T28004]  ? kernfs_remove_by_name_ns+0x101/0x140
[  934.717896][T28004]  macvtap_device_event+0x226/0x400
[  934.717917][T28004]  ? __pfx_macvtap_device_event+0x10/0x10
[  934.717935][T28004]  ? igmp_netdev_event+0x7c/0x750
[  934.717962][T28004]  notifier_call_chain+0x1ad/0x3d0
[  934.717987][T28004]  unregister_netdevice_many_notify+0x177f/0x20c0
[  934.718018][T28004]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  934.718043][T28004]  ? netdev_upper_dev_unlink+0x99/0xe0
[  934.718058][T28004]  ? __pfx_netdev_upper_dev_unlink+0x10/0x10
[  934.718074][T28004]  ? macvlan_dellink+0x3e2/0x470
[  934.718122][T28004]  rtnl_newlink_create+0x84b/0xb70
[  934.718141][T28004]  ? __pfx___nla_validate_parse+0x10/0x10
[  934.718172][T28004]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  934.718192][T28004]  ? __pfx___mutex_lock+0x10/0x10
[  934.718214][T28004]  ? ns_capable+0x89/0xe0
[  934.718232][T28004]  rtnl_newlink+0x166a/0x1bb0
[  934.718253][T28004]  ? __pfx_rtnl_newlink+0x10/0x10
[  934.718267][T28004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.718299][T28004]  ? kasan_quarantine_put+0xbb/0x1f0
[  934.718323][T28004]  ? lockdep_hardirqs_on+0x7a/0x110
[  934.718342][T28004]  ? nlmon_xmit+0xb0/0x100
[  934.718435][T28004]  ? kmem_cache_free+0x182/0x650
[  934.718464][T28004]  ? __lock_acquire+0x6b5/0x2cf0
[  934.718482][T28004]  ? __dev_queue_xmit+0x2b6/0x3950
[  934.718510][T28004]  ? __local_bh_enable_ip+0xd0/0x130
[  934.718527][T28004]  ? lockdep_hardirqs_on+0x7a/0x110
[  934.718543][T28004]  ? __dev_queue_xmit+0x2b6/0x3950
[  934.718562][T28004]  ? __local_bh_enable_ip+0xd0/0x130
[  934.718577][T28004]  ? __dev_queue_xmit+0x2b6/0x3950
[  934.718600][T28004]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  934.718621][T28004]  ? __pfx_rtnl_newlink+0x10/0x10
[  934.718636][T28004]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  934.718654][T28004]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  934.718670][T28004]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  934.718685][T28004]  ? ref_tracker_free+0x693/0x840
[  934.718704][T28004]  ? __pfx_ref_tracker_free+0x10/0x10
[  934.718727][T28004]  netlink_rcv_skb+0x232/0x4b0
[  934.718746][T28004]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  934.718762][T28004]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  934.718786][T28004]  ? netlink_deliver_tap+0x2e/0x1b0
[  934.718803][T28004]  ? netlink_deliver_tap+0x2e/0x1b0
[  934.718823][T28004]  netlink_unicast+0x75c/0x8e0
[  934.718844][T28004]  netlink_sendmsg+0x813/0xb40
[  934.718868][T28004]  ? __pfx_netlink_sendmsg+0x10/0x10
[  934.718888][T28004]  ? aa_sock_msg_perm+0xf1/0x1b0
[  934.718914][T28004]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  934.718939][T28004]  ____sys_sendmsg+0x972/0x9f0
[  934.718958][T28004]  ? __might_fault+0xaf/0x130
[  934.718982][T28004]  ? __pfx_____sys_sendmsg+0x10/0x10
[  934.719003][T28004]  ? import_iovec+0x73/0xa0
[  934.719024][T28004]  ___sys_sendmsg+0x2a5/0x360
[  934.719042][T28004]  ? __lock_acquire+0x6b5/0x2cf0
[  934.719060][T28004]  ? __pfx____sys_sendmsg+0x10/0x10
[  934.719081][T28004]  ? futex_wait+0x2a2/0x390
[  934.719115][T28004]  ? __fget_files+0x2a/0x420
[  934.719135][T28004]  ? __fget_files+0x3a0/0x420
[  934.719159][T28004]  __x64_sys_sendmsg+0x1bd/0x2a0
[  934.719185][T28004]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  934.719212][T28004]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.719229][T28004]  do_syscall_64+0x174/0x580
[  934.719246][T28004]  ? trace_irq_disable+0x3b/0x140
[  934.719271][T28004]  ? clear_bhb_loop+0x40/0x90
[  934.719289][T28004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  934.719305][T28004] RIP: 0033:0x7f994559ce59
[  934.719322][T28004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  934.719336][T28004] RSP: 002b:00007f994651a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  934.719354][T28004] RAX: ffffffffffffffda RBX: 00007f9945815fa0 RCX: 00007f994559ce59
[  934.719367][T28004] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  934.719378][T28004] RBP: 00007f9945632d6f R08: 0000000000000000 R09: 0000000000000000
[  934.719388][T28004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  934.719397][T28004] R13: 00007f9945816038 R14: 00007f9945815fa0 R15: 00007fff6538b1b8
[  934.719416][T28004]  </TASK>
[  935.333637][T20684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.346401][T26159] bridge0: left promiscuous mode
[  935.511303][T20684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.520874][T20683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.566596][T27982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  936.792078][T20684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  940.631273][T20687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.271528][T20683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.280308][T20683] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  941.911381][ T7264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog