last executing test programs:

3m33.047616285s ago: executing program 4 (id=3739):
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, 0xffffffffffffffff, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000840)={0x20, 0x0, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}]}]}, 0x20}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="21000000d584000002000000ffff000005"], 0x48)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000980)=@newtfilter={0x98, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x64, 0x2, [@TCA_MATCHALL_ACT={0x60, 0x2, [@m_ife={0x5c, 0x1, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x98}}, 0x4800)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r6 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4)

3m32.943228419s ago: executing program 4 (id=3740):
r0 = bpf$ITER_CREATE(0x21, 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x143942, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2) (async)
r3 = socket$rds(0x15, 0x5, 0x0) (async)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r4)
unshare(0x400) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x468f74858728407a, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) (async)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async)
sendmsg$rds(r3, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async, rerun: 64)
write$tun(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="000008000100000000003d0000004600004000000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="b41f0000907800040a0300050200000000000000000002d58838068b9100000005ee31b0833f9d3e10a9ca21a476fea4c044c5eca5abedb48da732799bf2579a86cbcd61dedc2f43e290e592aa45f7f56959457826faf2ff8c9ceccca3025abef2691eb183778c83136e62a9a6c2deb03ffbf772e4686c7b69e14c58ee2f8e7be09eb5d9b24ab9295cfabf06cf8c03cc8d95e6e74e000e2365a5f200f517ec7a11da8212a953e08eb7c00eb214a144ca3bb61caceac61b14e8ff5c45ce1777f59e4ce4569e93bd11af2685efcc0d3bbd353db8f15fa0b41f835533b8c5fe28ec56ec515d65051e36"], 0x4e) (rerun: 64)

3m32.906081138s ago: executing program 4 (id=3741):
r0 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@delsa={0x28, 0x12, 0x1, 0x400, 0x0, {@in6=@dev={0xfe, 0x80, '\x00', 0x2c}, 0x4d1, 0x0, 0x33}}, 0x28}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x9, 0x9}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x44840)

3m32.816097267s ago: executing program 4 (id=3742):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="0097f9d2ffffff925782a5000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8001}, 0x3e)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)

3m32.812658255s ago: executing program 4 (id=3743):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002)

3m32.749118853s ago: executing program 4 (id=3744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000340)=""/95}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0)
syz_emit_ethernet(0x40, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0xa, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @local, {[@dstopts={0x2c}], '\a\x00'}}}}}, 0x0)

3m17.5868247s ago: executing program 32 (id=3744):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0700000004000000000900000500000028"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000050000850000001b000000b700000018000000850000005000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r1, 0x0, &(0x7f0000000340)=""/95}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000340)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbff, {0x6}}, 0x14}}, 0x0)
syz_emit_ethernet(0x40, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0xa, 0x2b, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @local, {[@dstopts={0x2c}], '\a\x00'}}}}}, 0x0)

2m43.844946715s ago: executing program 3 (id=4036):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvmmsg(r0, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000100)=""/166, 0xa6}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/248, 0xf8}, {&(0x7f0000001b00)=""/96, 0x60}], 0x4, &(0x7f0000001bc0)=""/128, 0x80}, 0x80000001}, {{&(0x7f0000001c80)=@caif=@dbg, 0x80, &(0x7f0000002180)}}, {{&(0x7f0000002200)=@llc, 0x80, &(0x7f0000003400)=[{&(0x7f0000002280)=""/90, 0x5a}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000003300)=""/130, 0x82}, {&(0x7f00000033c0)}], 0x4, &(0x7f0000003440)=""/221, 0xdd}, 0x2}, {{0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000003540)=""/190, 0xbe}], 0x1, &(0x7f0000003640)=""/172, 0xac}, 0x6}, {{&(0x7f0000003700)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000003780)}, {&(0x7f00000037c0)=""/207, 0xcf}, {&(0x7f00000038c0)=""/217, 0xffffffffffffff05}, {&(0x7f00000039c0)=""/132, 0x84}, {&(0x7f0000003a80)=""/64, 0x40}, {&(0x7f0000003ac0)=""/198, 0xc6}, {&(0x7f0000003bc0)=""/4094, 0xffe}, {&(0x7f0000004bc0)=""/187, 0xbb}, {&(0x7f0000004c80)=""/64, 0x40}], 0x9, &(0x7f0000004d80)=""/159, 0x9f}, 0x6}], 0x5, 0x300, &(0x7f0000004f80)={0x0, 0x989680})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81f7}}, {0x20, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r3, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044)
setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x3, 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r4 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, &(0x7f0000000080))
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYRES8], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="3c0200000000000000000000000001000106"], 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48)
r7 = socket(0x2b, 0x80801, 0x1)
ioctl$sock_qrtr_TIOCOUTQ(r7, 0x8905, &(0x7f0000000000))
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38)
r8 = socket$inet6(0xa, 0x3, 0xff)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x1, 0x1, 0xffffeffd, 0x14, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0xba08}})

2m42.786147051s ago: executing program 3 (id=4046):
r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @broadcast}, 0x10)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)=0x2)
setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'erspan0\x00', 0x2}, 0x18)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000140)={0x1, 0x1, 0x8, 0xd29f, 0x6, 0x17})
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000180)={0x40000000})
bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f0000000200)={0x100000000})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000240), r2)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x401, 0x200, 0x9, 0x6}, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000002c0), r2)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r3, 0x4002f516, &(0x7f0000000300)={0x9, 0x6})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x2, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x44000)
r5 = openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
epoll_wait(r5, &(0x7f0000000480)=[{}], 0x1, 0x188920e3)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5, <r6=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)=r5}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r5, <r7=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pi6   \x00'}, 0x20)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f00000008c0)={'ip6gre0\x00', &(0x7f0000000840)={'syztnl1\x00', <r8=>0x0, 0x2f, 0x4, 0x0, 0x6, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x40, 0x7, 0x6, 0x6}})
r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x18, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x9}, [@btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @jmp={0x5, 0x1, 0x7, 0xa, 0x198df5af14fef02f, 0x40, 0x1}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5c0e, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @map_fd={0x18, 0x2, 0x1, 0x0, r7}]}, &(0x7f0000000700)='GPL\x00', 0x75, 0xe0, &(0x7f0000000740)=""/224, 0x41000, 0x1c, '\x00', r8, 0x25, r5, 0x8, &(0x7f0000000900)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x8, 0x2, 0xf, 0x32a6}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000980)=[r5, r5], &(0x7f00000009c0)=[{0x3, 0x1, 0x4, 0x5}, {0x1, 0x4, 0xc, 0x7}, {0x6, 0x4, 0xa}, {0x2, 0x4, 0x10, 0x4}, {0x5, 0x5, 0x2, 0x3}], 0x10, 0x9}, 0x94)
getsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000b00), &(0x7f0000000b40)=0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000b80)='htcp', 0x4)
ioctl$F2FS_IOC_GET_FEATURES(r9, 0x8004f50c, &(0x7f0000000bc0))
shutdown(r2, 0x0)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000c40), r2)
sendmsg$FOU_CMD_GET(r2, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r10, 0x1, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x45376ee5ab65bc8d}, 0xc010)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001000)={0x6, 0x11, &(0x7f0000000d40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x8c194bc5e2b26965}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000e00)='GPL\x00', 0x4, 0x17, &(0x7f0000000e40)=""/23, 0x40f00, 0x1, '\x00', r8, 0x25, r5, 0x8, &(0x7f0000000e80)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000ec0)={0x0, 0x3, 0x7, 0xc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000f80)=[r6, 0xffffffffffffffff, r5, r7, 0xffffffffffffffff, r6, r7, r0], &(0x7f0000000fc0)=[{0x1, 0x2, 0x1, 0xa}, {0x1, 0x2, 0x7, 0xa}, {0x4, 0x5, 0xa, 0xd03a043310099630}, {0x4, 0x2, 0x5, 0x8}], 0x10, 0x3}, 0x94)

2m41.960668562s ago: executing program 3 (id=4048):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1, 0x0, 0x4}, 0x20)
sendmsg$inet6(r2, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000280)}, 0xff00)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
recvmmsg(r1, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000140)=""/42, 0x2a}], 0x2}, 0x8000}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)

2m41.502322853s ago: executing program 3 (id=4055):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xcc}}, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10)
setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r4 = accept4(r3, 0x0, 0x0, 0x800)
socket(0x1a, 0x800, 0x1)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a", 0x27}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e72119", 0x9d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/195, 0xc3}], 0x1}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)={0x28, 0x2d, 0x107, 0x70bd2b, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x63, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x28}}, 0x4008030)
recvmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000580)=""/192, 0xc0}], 0x1}, 0x2103)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c)
listen(r0, 0x0)

2m41.163689147s ago: executing program 3 (id=4058):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0ff}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) (async)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) (async, rerun: 64)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, &(0x7f00000005c0), 0x802}, 0x38) (rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="180000008f000000000000000902048018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000086000000bf092000000000003609010000000000950000000000000018010000786c6c2500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bd0af4ff00000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0xb0, &(0x7f0000000cc0)=""/4096, 0x41100, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0xac)

2m40.773411452s ago: executing program 3 (id=4060):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl(r3, 0x509, &(0x7f0000000180)="c88d36eb1a63f7eaacddd8892c2ce8755a708e1460625427d79c5c3c45200e882d610c17680ed0021a6adbe9110834f0c3311284a370b3bcf2f09f2ea3d97fd1e5a0b1b1bd81e26aa7a79967df44f6eed3da5038e872ff29357e21b7fb54b046dbb6752eff4a52f1aaed680afb96dc08b07e9605033332847c7829ef080c738f2532a9b9ce6cff30483710ac01b00c3159af1b5b8bc8b3b79ae3e92f3174")
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x32, 0x8, 0xf7e, 0x81}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$packet(0x11, 0x3, 0x300)
r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
listen(r6, 0xffffffff)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000270300000000019078ac1e0001a81414aa040090730300000045000000000000000000000000000000ffffffff"], 0x0)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, 0x0)
splice(r0, &(0x7f0000000100)=0x6c7, r8, &(0x7f0000000080)=0x1000000, 0x6, 0x2)

1m52.849479293s ago: executing program 33 (id=4060):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
r1 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0xccb, @dev={0xfe, 0x80, '\x00', 0x13}, 0x3}, 0x1c)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl(r3, 0x509, &(0x7f0000000180)="c88d36eb1a63f7eaacddd8892c2ce8755a708e1460625427d79c5c3c45200e882d610c17680ed0021a6adbe9110834f0c3311284a370b3bcf2f09f2ea3d97fd1e5a0b1b1bd81e26aa7a79967df44f6eed3da5038e872ff29357e21b7fb54b046dbb6752eff4a52f1aaed680afb96dc08b07e9605033332847c7829ef080c738f2532a9b9ce6cff30483710ac01b00c3159af1b5b8bc8b3b79ae3e92f3174")
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x32, 0x8, 0xf7e, 0x81}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r5)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x1000000}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
socket$packet(0x11, 0x3, 0x300)
r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
listen(r6, 0xffffffff)
sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x50)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000270300000000019078ac1e0001a81414aa040090730300000045000000000000000000000000000000ffffffff"], 0x0)
r8 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc)
ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, 0x0)
splice(r0, &(0x7f0000000100)=0x6c7, r8, &(0x7f0000000080)=0x1000000, 0x6, 0x2)

52.231983218s ago: executing program 1 (id=4511):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000004280)={<r1=>0x0, 0xa810, 0x20}, 0x0)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, &(0x7f0000004300)={r1, @in6={{0xa, 0x4e24, 0x0, @empty, 0x9}}}, 0x84)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r2, &(0x7f0000004700)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10)
sendto$inet(r2, &(0x7f0000004740)="aaadf46442c2c82710791b7e178bbabeedbbed38bc95920cb45b", 0x1a, 0x5, &(0x7f0000004780)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x24, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1, 0x411}}], 0x48}, 0x0)

51.303903447s ago: executing program 1 (id=4514):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0)

51.138534813s ago: executing program 1 (id=4515):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)

51.01344827s ago: executing program 1 (id=4517):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x24, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x8, 0x0, 0x0}}, 0x10)
r3 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xfffd}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0)
recvmsg$can_raw(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffd39, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/122, 0x7a}, {&(0x7f0000000040)=""/26, 0x17}, {&(0x7f0000000180)=""/184, 0xb5}], 0x3}, 0x40012001)

50.94183266s ago: executing program 1 (id=4518):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26, 0x0, 0xa}, 0x28)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0xc8, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_SYNPROXY={0x3c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xa}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000020000000100000c02000000000000000100000d00000000000000000000000000005f"], 0x0, 0x3c, 0x0, 0x0, 0x3}, 0x28)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000001000000950000000000000089e77f8ebcaddbfc4a227578d1cb976ecc68c344d8ff40ff622e0468de3e8635b575a60c2f52f68a3d09ae0786d54b8566432a45477d69e5253bd7789fc72a4a0a98dffafe6f807759dad9dd8a388bd108b1a1193dfad8076886fe0696fae3d18be4f67b3c32efec1fa3716b5081948eaa4462801032f5629435a871d5f4ed206bc04fb1cfebcaa01f15abc5266dfe125c3159992515f536b9c9108988abdea6df3dbb4d8a8998bdd76dea"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xf9}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x110, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_REPLY={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private2}}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x0)

50.603703199s ago: executing program 1 (id=4522):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000002700090025bd7800fddbdf250f000000671bf26d05e5620ca0f5965e62ed2780e96b86f88eb2763afceea3247942f426c3b58f3d2164f35bff9af0ff82465fee09ccf46ff9afc5be6f38ed66558ca7526a76be0ffb2c4afb139a70cfe904a5af3e90412fecc45345f6e4b0ac1903d6c65d96f6d7dcae4f34bdb5e9b991a4e2a44f984f1829d8193d4d83033d48eeacd959b43630d145f78314e2a24641c949a81525397469c75ccbdba56b4e5acd62ad2d23f753138a0b001ea1287018fda901fbbbb18f79a1170678aeb5443f4c2312f158aee90350c7d99becd69108b46fd0fcb01bc562e4"], 0x14}}, 0x4000080)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x5e)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001a40)=@filter={'filter\x00', 0xe, 0x2, 0x12e, [0x0, 0x200000001780, 0x200000001886, 0x2000000019e4], 0x0, 0x0, &(0x7f0000001780)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x6, 0x10, 0x6005, 'erspan0\x00', 'vlan1\x00', 'bond_slave_0\x00', 'dvmrp1\x00', @random="1a04fbd2aa76", [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x1a6)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan3\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000800000008000000000000", @ANYRES32], 0x50)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048080}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000002c0)={{<r8=>r7, &(0x7f0000000000)='\x00', 0x348f436a27e0bc3f, &(0x7f0000000040)={@align=0x4, {0x3, 0x4, 0x4, 0x8}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x6}, {[0x1, 0x4, 0x1, 0xc5]}, 0xfffffff9, 0xc4, &(0x7f0000000100)=""/196})
ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) (async)
ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r8)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000400)) (async)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000400)=<r10=>0x0)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd4, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0) (async)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd4, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0)

35.234270003s ago: executing program 34 (id=4522):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000002700090025bd7800fddbdf250f000000671bf26d05e5620ca0f5965e62ed2780e96b86f88eb2763afceea3247942f426c3b58f3d2164f35bff9af0ff82465fee09ccf46ff9afc5be6f38ed66558ca7526a76be0ffb2c4afb139a70cfe904a5af3e90412fecc45345f6e4b0ac1903d6c65d96f6d7dcae4f34bdb5e9b991a4e2a44f984f1829d8193d4d83033d48eeacd959b43630d145f78314e2a24641c949a81525397469c75ccbdba56b4e5acd62ad2d23f753138a0b001ea1287018fda901fbbbb18f79a1170678aeb5443f4c2312f158aee90350c7d99becd69108b46fd0fcb01bc562e4"], 0x14}}, 0x4000080)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
r1 = socket$inet_icmp(0x2, 0x2, 0x1)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sk_msg}, 0x94)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000280)=""/73}, 0x20)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x5e)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001a40)=@filter={'filter\x00', 0xe, 0x2, 0x12e, [0x0, 0x200000001780, 0x200000001886, 0x2000000019e4], 0x0, 0x0, &(0x7f0000001780)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{0x6, 0x10, 0x6005, 'erspan0\x00', 'vlan1\x00', 'bond_slave_0\x00', 'dvmrp1\x00', @random="1a04fbd2aa76", [0xff, 0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x7}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x1a6)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4) (async)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r4)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000640)={'wpan3\x00'})
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000800000008000000000000", @ANYRES32], 0x50)
sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x30, r6, 0x800, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan1\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048080}, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000004c0), 0x0, 0xf)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r7, 0x4058587a, &(0x7f00000002c0)={{<r8=>r7, &(0x7f0000000000)='\x00', 0x348f436a27e0bc3f, &(0x7f0000000040)={@align=0x4, {0x3, 0x4, 0x4, 0x8}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x6}, {[0x1, 0x4, 0x1, 0xc5]}, 0xfffffff9, 0xc4, &(0x7f0000000100)=""/196})
ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0) (async)
ioctl$TUNDETACHFILTER(r8, 0x401054d6, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r8)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000400)) (async)
ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000400)=<r10=>0x0)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd4, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0) (async)
sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xd4, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x2400c004}, 0x0)

9.476758657s ago: executing program 5 (id=4864):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000800), 0x40000000000013a, 0xf0, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ad0000009600000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xa, 0xfffffffffffffffc, 0x0, 0x48, '\x00', 0x0, 0x38}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0x23, 0x2, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000800)=r1, 0x4)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
recvmsg(r4, &(0x7f0000000280)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000880)=""/248, 0xf8}], 0x1}, 0x1f00)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYRES8=r3], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
epoll_create1(0x80000)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xeffffffffffffffd, 0x0, 0x10000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x7, 0x7fffffff}, 0x0, 0x0)
sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@initdev, @initdev, <r8=>0x0}, &(0x7f0000000440)=0x1)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f00000003c0)={'syztnl1\x00', r8, 0x700, 0x8000, 0x0, 0x0, {{0x7, 0x4, 0x1, 0x6, 0x1c, 0x67, 0x0, 0x5, 0x13, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xf}, {[@cipso={0x86, 0x6, 0x3}]}}}}})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb0100180000000000000064000000640000000b00000008000000080000000100000002000000e1000000000000000001000000000000003571b91e0000000000000000000000000000000000070000003faec58fabf0089ea81853aa000000004977000000000000000f0200000017600000000000000000612e00"/135], &(0x7f0000000600), 0x87, 0x0, 0x1}, 0x28)
clock_gettime(0x0, &(0x7f0000000300)={<r9=>0x0, <r10=>0x0})
ppoll(&(0x7f00000000c0), 0x0, &(0x7f0000000340)={r9, r10+60000000}, &(0x7f0000000380)={[0xfff]}, 0x8)
r11 = socket(0x400000000010, 0x3, 0x0)
r12 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@deltfilter={0x2c, 0x2d, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x8}, {0x1, 0xb}, {0x10, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0x10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r11)

7.692896624s ago: executing program 5 (id=4881):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x114}}, 0x40)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x10078, 0x4)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0x20000003, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xa}, 0x1c)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYBLOB="c6ae6894b6dda1e95dc8b7ae0ce66313561dee647d1b792044f2adc695b20c00df604e3f0dd85fe9", @ANYRESDEC=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94)
r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4)
bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r5}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = accept4$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000180)=0x1c, 0x800)
r7 = socket$netlink(0x10, 0x3, 0x6)
sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001c80)=ANY=[@ANYBLOB="18000000120021010000000009000000080021"], 0x18}], 0x1}, 0x0)
setsockopt$inet6_MCAST_LEAVE_GROUP(r6, 0x29, 0x2d, &(0x7f0000000300)={0x8, {{0xa, 0x4e23, 0x3, @mcast2, 0xffff}}}, 0x88)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@polexpire={0xd4, 0x1b, 0x103, 0x0, 0x0, {{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@policy_type={0xa}, @XFRMA_IF_ID={0x8}]}, 0xd4}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r8, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0xffffffffffffffe2, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)}}], 0x48}, 0x0)

7.197958925s ago: executing program 5 (id=4885):
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28010000010201020000000000000000000000060900060073797a3000000000080008"], 0x128}}, 0x800)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="68020000010501010000000000000000050000065402010000000000810000006400010405001f0073797a31000000000000000000000000000000000000000000000000000000003de49a697763c1d26b44090a94b4a1ae83a34cf498713925ae23432d7089339a787f7f7d5a7e01474465a1d8aa14418d6e38fff5c65bb86a04b08afd3de1b339f7ff080000000000010000807f00090002000000080000004001"], 0x268}, 0x1, 0x0, 0x0, 0x20044080}, 0x44)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x2000c050)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80c1}, 0x40000000)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x62}, 0x48)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31040000000900010073797a30000000000800054000000021380000001d0a03000000000000000000070000000900010073797a3000000000090002"], 0xbc}}, 0x48004)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}})
r6 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r7, &(0x7f0000000240), 0x0}, 0x20)
getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r8, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x4, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x20000000)
sendto$packet(r3, &(0x7f0000000580)='o', 0x5b4, 0x4, &(0x7f0000000180)={0x11, 0x8100, r8, 0x1, 0xe9, 0x6, @local}, 0x14)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
setsockopt$inet6_opts(r9, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x98)
setsockopt$inet6_opts(r9, 0x29, 0x36, &(0x7f0000000040)=@fragment={0x12, 0x0, 0x48, 0x0, 0x0, 0x1b, 0x67}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000140)={<r10=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x44, @remote, 0x5}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r9, 0x84, 0x66, &(0x7f0000000280)={r10, 0xffff}, &(0x7f00000002c0)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50)
write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33)
r11 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33)

6.943808523s ago: executing program 2 (id=4887):
socket$tipc(0x1e, 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000)
r0 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x2)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0100001600010028bd7000fcdbdf25e0000001000000000000000000000000000000000000000000000000000000004e2100034e220010020080a03b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000004000000000004d432000000200100000000000000000000000000003a3700000000000000000000000000000200000000000000b80a00000000000008000000000000000100000000000000040000000000000003000000000000002200000000000000d2000000000000000400000000000000030000000000000000000000cc000000070000002cbd700004350000b0e801002c0000000000000001000000020000001c00040001004e224e20000020010000000000000000000000000000080061b52a"], 0x11c}, 0x1, 0x0, 0x0, 0x48095}, 0x4000014)

6.500278692s ago: executing program 5 (id=4890):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000002000000000000000000"], 0x48) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000002000000000000000000"], 0x48)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket(0x2a, 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
writev(r3, &(0x7f0000000340)=[{&(0x7f0000000100)="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", 0x141}, {&(0x7f0000000440)="448b7c0a", 0x4}], 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000040)="11", 0x1)
setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000000)=0x1144, 0x4)
accept4$packet(r2, &(0x7f0000000040)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14, 0x0)
getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x7f, 0x1, @vifc_lcl_ifindex=r7, @empty}, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IFLA_BROADCAST={0xa}]}, 0x5c}}, 0xc080) (async)
sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x421, 0x4, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x26d2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x25}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, @IFLA_BROADCAST={0xa}]}, 0x5c}}, 0xc080)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0))
r9 = socket$key(0xf, 0x3, 0x2)
getsockopt$sock_int(r9, 0x1, 0x9, 0x0, &(0x7f0000000f80))
socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11, <r12=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r10}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000240), &(0x7f0000000280)=r10}, 0x20) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r12}, &(0x7f0000000240), &(0x7f0000000280)=r10}, 0x20)
syz_emit_ethernet(0xe, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@generic={0x88a2}}}, 0x0) (async)
syz_emit_ethernet(0xe, &(0x7f0000000280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@generic={0x88a2}}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x5, [@typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @union={0xd, 0x8, 0x0, 0x5, 0x1, 0x7, [{0x3, 0x3, 0x9c4}, {0xe, 0x2, 0x274}, {0xe, 0x1, 0x4}, {0x8, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x6, 0x1, 0xff}, {0x7, 0x3, 0x1d}, {0xc, 0x4}]}]}, {0x0, [0x61, 0x61, 0x0]}}, &(0x7f0000000800)=""/40, 0x95, 0x28, 0x0, 0x7fff, 0x10000}, 0x28) (async)
r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x5, [@typedef={0x7, 0x0, 0x0, 0x8, 0x1}, @union={0xd, 0x8, 0x0, 0x5, 0x1, 0x7, [{0x3, 0x3, 0x9c4}, {0xe, 0x2, 0x274}, {0xe, 0x1, 0x4}, {0x8, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x6, 0x1, 0xff}, {0x7, 0x3, 0x1d}, {0xc, 0x4}]}]}, {0x0, [0x61, 0x61, 0x0]}}, &(0x7f0000000800)=""/40, 0x95, 0x28, 0x0, 0x7fff, 0x10000}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x8, '\x00', r6, r13, 0x4, 0x5, 0x4}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0x1}, 0x50)

6.434652357s ago: executing program 2 (id=4891):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
accept4(r0, &(0x7f0000000300)=@vsock, &(0x7f00000003c0)=0x80, 0x80800)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

6.409025058s ago: executing program 6 (id=4892):
r0 = socket(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x14, 0x4, &(0x7f0000000080)=ANY=[@ANYRES16=r0], &(0x7f0000003ff6)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r1, @lirc_mode2=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0)
ppoll(&(0x7f0000000180)=[{r0, 0x64a0}], 0x1, 0x0, 0x0, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1, 0xe92}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket(0x11, 0x4, 0x1000)

6.292318916s ago: executing program 2 (id=4894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r2, 0x1, 0x170bf2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x7fff}]}, 0x44}, 0x1, 0x0, 0x0, 0x4920}, 0x44860)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x3}, 0x4)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'vlan1\x00', 0xffff})
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
r7 = socket(0x2, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x23}}, @in={0x2, 0x4e23, @local}], 0x20)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r7, 0x84, 0x65, &(0x7f0000000180)=[@in={0x2, 0x4e23, @local}], 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
ppoll(&(0x7f0000000300)=[{r4, 0x81}], 0x1, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x68, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="6fb3a7bad432522aa7a147e1ac51d2e3897a513d1266e86dcca4", 0x1a)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18)
sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a"], 0x34}}, 0x4040)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="ebdc25bd7000fedbdf250f000000200007800c000300000000000000000008000200464200000800020005000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000)

6.103505917s ago: executing program 0 (id=4896):
r0 = socket(0x10, 0x3, 0x0) (async)
syz_emit_ethernet(0x9e, &(0x7f0000000100)={@local, @local, @val, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x60, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x2b, 0x0, 0x2}, @srh={0x0, 0x4, 0x4, 0x2, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}]}]}}}}}}}, 0x0) (async)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "18047d80edc79ded5baf17b8d4ef60c9b3b201ad412d10413208ddeec3ca63150ca2e8e880626d219622937291bf1a88f2a7e933b9de68b10c358ceb836b1269874d68178d5ca2a64891b8ac2b18bec75794ef929a921ba80fe335e76deda6606f266cad000e1e9f949c533252624fbdb25e28a005a01da7a07e844a72943d4959681afcb9a2b3b3c4b2b511416252a03ab78abf8be2fc6313a03763da61a574a9bc59b728aa3c020edc176afb984194f31696e2b3357c5757fbf99bae1c8dde4cfedc5714471bdd688ce6ac6e3d2a149abd76a0fe9a448d792273206fc444294e3bae3fc553bc9bd6d0b67ea837b7a0b7f9ef00"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x12, 0x4, 0x6}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}]}}]}, 0x154}}, 0x0)

5.420173989s ago: executing program 6 (id=4898):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000001280)={&(0x7f0000000040)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=[{0x1010, 0x29, 0x101, "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"}, {0x110, 0x1, 0x9, "ddcc9fb4ec087e700c63470c7b0187f1f7cd0724243e4994f048109e582a42e71f15c853ed2e02ea995e82151d0fb6c920cafe817d583a36676cd4875fce5ae72d7e63b86d309d832dace714b4106d63f53bc53e9716239a5f6b8c04cdc68ce73b1e68c71ba0a8221384647cee61c89381c23845f9693426385cf0b3a5dba93e575670772363fb74aaf75de06dc471522b838ed9e00d80d8cced297edadb4e031befb5c08b8b05df2f78a7aed9c897e18275a5a8b897dbbba4bb8893380174f3b3c2804af222eae479dbaec414fa76893d7c060c30a5fe03cd74604ebbe7927b32aeadd42e0758caa68d5333fea8560f55cc5f562fc84a69902cfbb4d9"}, {0x58, 0x11, 0x7fff, "57d583a43a6e1c6d852493aa3f2c587206bb3f3728a08431363a8b5aad91a5b487a32ef5235efc17b425e712f5506e64cc783c755d8eb45403625fdd99d6c0d2bf68"}], 0x1178}, 0x24004000)
r2 = socket$packet(0x11, 0x3, 0x300)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000012c0)={[{0x0, 'net_prio'}, {0x2b, 'io'}, {0x2d, 'blkio'}, {0x2b, 'cpuset'}, {0x2d, 'io'}, {0x2b, 'memory'}, {0x2d, 'rlimit'}]}, 0x31)
r3 = accept$inet(r1, &(0x7f0000001300)={0x2, 0x0, @broadcast}, &(0x7f0000001340)=0x10)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001380)={0x9, 0x0, 0x4, 0x3d0, <r4=>0x0}, &(0x7f00000013c0)=0x10)
getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000001400)={r4, 0xf60d, 0x9, [0x7, 0x7, 0x8, 0x7, 0x8, 0x9, 0x213a, 0x3, 0x2]}, &(0x7f0000001440)=0x1a)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001480)={0x5d, <r5=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000014c0)=r5, 0x4)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000001500), 0x4)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
r7 = gettid()
sendmsg$AUDIT_SET(r6, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x3e9, 0x8, 0x70bd2a, 0x25dfdbfc, {0x1, 0x0, 0x2, r7, 0x8, 0x0, 0x800, 0x1, 0x0, 0x7, 0x8}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x55)
clock_gettime(0x0, &(0x7f0000001640)={<r8=>0x0, <r9=>0x0})
setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000001680)={r8, r9/1000+10000}, 0x10)
r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001880)=@bpf_lsm={0x1d, 0x1, &(0x7f0000001700)=@raw=[@alu={0x4, 0x0, 0xa, 0x9, 0x5, 0x100, 0x10}], &(0x7f0000001740)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x79, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x9, 0x1}, 0x8, 0x10, 0x0, 0x0, r5, 0x0, 0x8, &(0x7f00000017c0)=[0x1], &(0x7f0000001800)=[{0x3, 0x5, 0x3, 0x9}, {0x3, 0x4, 0x8, 0x4}, {0x2, 0x5, 0x2, 0x7}, {0x0, 0x2, 0x1, 0x6}, {0x2, 0x4, 0x10, 0x7}, {0x0, 0x5, 0xf, 0x2}, {0x3, 0x5, 0xc, 0x9}, {0x5, 0x5, 0xd, 0x7}], 0x10, 0x7f}, 0x94)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002ec0)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x400800}, 0xc, &(0x7f0000002e80)={&(0x7f0000001940)=@deltfilter={0x1534, 0x2d, 0x200, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xa}, {0x6, 0x3}, {0xffe0, 0xfffb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1508, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0x8}}, @TCA_BPF_POLICE={0x450, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x8, 0x34c66b1, 0x1, 0x80000000, 0x574, 0x0, 0x2, 0x10001, 0x8, 0x2, 0x3, 0x9, 0x0, 0x3, 0xa, 0x8001, 0x9000000, 0x0, 0x617, 0xff, 0x7, 0x3, 0x56, 0x0, 0x6, 0x7, 0x280000, 0x9, 0x1, 0xfff, 0x3, 0x1000, 0x7, 0xa, 0x5, 0xe, 0x9, 0x3, 0x2, 0x3, 0x40000000, 0x3, 0xfffffff9, 0xffffff01, 0x4590, 0x0, 0x0, 0x3, 0xf, 0x7fff, 0x4, 0x20000, 0x81, 0xc6, 0x5, 0x4, 0x101, 0xa9d1, 0x200, 0x5, 0x9d, 0x7, 0x954, 0x4, 0xa, 0x0, 0x8, 0xfffffff9, 0x9, 0x843, 0x96c, 0x530, 0xc, 0x9, 0x8, 0x1705, 0x0, 0x200, 0xfffffff8, 0xfffffffd, 0x128, 0xb5fa, 0x2, 0x401, 0x6, 0x4, 0x6, 0x3a8, 0xa2, 0x3, 0x7, 0x6, 0x23, 0x4, 0x401, 0x6, 0x9, 0x2, 0x8, 0x7, 0x5, 0x5, 0x80000001, 0x80000001, 0x5, 0x0, 0x7ff, 0x2f, 0x1, 0x8, 0x70, 0x6, 0x7ff, 0x8, 0x9, 0x401, 0x5, 0x2, 0x9, 0x1, 0xeb, 0x9, 0x6, 0x2, 0x8, 0x17, 0x2, 0x7, 0x5, 0x2, 0x9, 0x52, 0xffff, 0x778, 0x6088, 0x5cd8, 0x3, 0xffffffff, 0x4, 0x1, 0x0, 0x8, 0x9, 0x5, 0x0, 0x0, 0x4, 0x0, 0xffff, 0x1, 0x7fff, 0x3, 0x2, 0x60f, 0x2, 0x68, 0x6a7a5a98, 0x2, 0x1000, 0x0, 0x2741, 0x85, 0xa, 0xba2, 0x4, 0x30da, 0x84, 0xffffffff, 0xaacc, 0x2, 0x3, 0x3ff, 0x6, 0x80, 0x7f, 0x5, 0x0, 0xfffffff8, 0x8001, 0x0, 0x3, 0x8001, 0x2, 0x800, 0x1000, 0x34f4, 0x0, 0x10000, 0x5, 0x3, 0x7, 0x9, 0x9, 0x7, 0x1, 0xe, 0x3, 0xffff, 0x2, 0x80000001, 0x8, 0x401, 0x7, 0x1, 0x3, 0x8, 0x903, 0x6, 0x10000, 0x1000, 0x100, 0x2, 0x9, 0x4, 0x7ff, 0x59, 0xffffffff, 0x8, 0x9, 0x6, 0xf, 0x9, 0xb24, 0x40, 0x100, 0x3, 0x9, 0x7ff, 0xd, 0xfffffff7, 0x9, 0x8001, 0x866, 0x216, 0xacd, 0x7, 0x2, 0x3, 0x5, 0x83, 0x8000, 0xe3e, 0x7ce3, 0x7, 0x3, 0x7fffffff, 0x5, 0x8, 0x5, 0xffff, 0x6, 0x4, 0xffffffff, 0x1e7d, 0xfffff66d]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffffb}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0xffffffffffffffff, 0x7, 0x7, 0x4, {0x5, 0x2, 0x2, 0x9de, 0x9458, 0xfff}, {0x31, 0x1, 0x3, 0x5, 0x86, 0x2}, 0x1, 0xa33, 0x3}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FD={0x8, 0x6, r10}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x5, 0x6, 0x26, 0xfffffffa}, {0x800, 0x5, 0x8, 0x100}, {0xc67e, 0x9, 0x35, 0x6}, {0x7975, 0xfd, 0x81, 0x3}, {0x7, 0xf, 0xac, 0x9}, {0x2, 0x8, 0x8, 0x2}, {0x10, 0x8, 0x3, 0x10001}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_POLICE={0x1040, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x40000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x3, 0x1000, 0x5, 0x5, 0x5, 0x7346, 0x7, 0x4, 0x0, 0x5, 0x0, 0xead1, 0x0, 0x3, 0x625a, 0x3, 0x29d, 0x1d, 0x4, 0x7, 0x4, 0xd, 0x5, 0x5, 0x5, 0x7, 0x21, 0x8, 0x4, 0xfffffffd, 0x80000000, 0x8, 0x8000, 0xe6, 0x5, 0x0, 0x9, 0x1, 0xc, 0x9, 0x45, 0x7, 0x7fffffff, 0x10, 0x3, 0xf5e, 0x4, 0x47, 0x1, 0x1, 0x83ea, 0xb88, 0x2, 0x4, 0x4, 0x80, 0x100, 0x1243, 0x8, 0x7, 0x80000000, 0x0, 0xffffffff, 0x3, 0x1, 0x7f, 0x100, 0x1, 0x4, 0x6, 0x9ffe, 0xb, 0x1, 0x8, 0x1ff, 0x6, 0x101, 0x2, 0x607, 0xf6, 0x7, 0x4, 0x1, 0x5, 0x0, 0xff, 0x3, 0x1, 0x9, 0x8000, 0x3, 0x0, 0x28c7, 0x4, 0xfffffff9, 0xd7, 0x9, 0x85, 0xffffff4d, 0x1, 0xfffffff4, 0xfffffffe, 0x8, 0x8, 0x400, 0x6d, 0x2, 0x9, 0x4, 0xaa, 0x7fff, 0x5, 0x1, 0x101, 0x6, 0x6, 0x6, 0x1, 0x7fff, 0x8000, 0x8, 0x8, 0x1, 0x65aa, 0x6, 0x5, 0x3, 0x401, 0xdead, 0x2, 0x8000, 0x1, 0x1, 0xfffffffc, 0x0, 0x0, 0xa6, 0x0, 0x43c0, 0x704e51e8, 0x3, 0xe, 0x10, 0x9, 0x78ae, 0x5, 0x7, 0x10000, 0x1, 0x7253, 0xffffffff, 0x7, 0x1, 0x9, 0xfffffff2, 0x7fff, 0x7, 0xd99, 0xf2d5, 0x3b, 0x10, 0x6, 0x1de, 0x0, 0x80, 0xfff, 0x5c9b, 0x3, 0xa, 0x6, 0x2, 0xa91, 0x0, 0x4, 0xf7, 0x5, 0x7, 0xe8a, 0x2, 0x0, 0xa4, 0xfffffffe, 0x7, 0x8000, 0xff, 0xd, 0xfff, 0xd2, 0x7, 0x74f, 0x7f, 0x2, 0x5, 0x8, 0x7, 0x9e1, 0x6, 0x1, 0x8, 0xd, 0xfffffff8, 0x3, 0xfe9, 0x8, 0x4, 0x9398, 0x0, 0xe, 0x7, 0x6, 0x10, 0x83, 0x7f, 0x7, 0x10, 0x9, 0x6, 0x10000, 0xb962, 0x2, 0x9, 0x1, 0x800, 0x1, 0x3, 0x1, 0x1000, 0x6, 0x4, 0x2, 0x5, 0x962f, 0x2, 0x4, 0x4, 0xffffffff, 0x5, 0x7, 0x8, 0x1c00, 0x6, 0xc, 0x0, 0x8001, 0x620e, 0x7f, 0x8, 0x1, 0x8, 0x2, 0x0, 0xed1, 0x7, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xff, 0x0, 0x0, 0x81, 0x221, 0xfffffffb, 0x4, 0x200, 0x4, 0x92f9, 0x0, 0x2, 0x6, 0x0, 0x401, 0xfffff8b3, 0xffff, 0x8000, 0x7ff, 0x1, 0x1000, 0x0, 0x100, 0x6, 0x9, 0x6, 0x6, 0xfffffff7, 0x8, 0xfff, 0x5, 0x8, 0x2, 0x7, 0xc52, 0x3, 0x80000000, 0x0, 0x1, 0xffff, 0x9, 0xf68e, 0x4, 0x6, 0x2, 0x9, 0x40, 0x9, 0x7, 0x9, 0x271, 0x800, 0xfffffffa, 0xc, 0xc, 0x25a, 0xd01d, 0x0, 0x3d8b, 0x4, 0x4, 0x7bcc8db0, 0x100, 0x8, 0x8, 0xffff, 0x10001, 0x6, 0x3ff, 0x6, 0x9, 0x0, 0x6, 0x101, 0x6, 0x1, 0x7, 0x10001, 0x9, 0x7fffffff, 0x8, 0x0, 0xae, 0x0, 0x2, 0x100, 0x7, 0x706191fc, 0x8, 0x3, 0x1, 0x8, 0x81, 0x0, 0x3, 0x4, 0x6, 0x0, 0x3ff, 0x9, 0x7, 0x2, 0x1655, 0x37, 0x8, 0x0, 0x2, 0x200, 0x2e8, 0x3, 0x9, 0x7, 0x80000001, 0x800, 0x401, 0x8, 0xffffffb5, 0x6, 0x5, 0x5, 0xfffffff7, 0x101, 0x5, 0x8, 0x5, 0x7, 0xfffffff8, 0x10, 0x4, 0x3, 0x7, 0xeb69, 0xffff2cc0, 0x81, 0x3, 0x2, 0xa, 0x2, 0x40400, 0x0, 0x175, 0x4, 0x7fff, 0x23b07254, 0x1ff, 0x91, 0x9, 0x100, 0x39d, 0xc, 0x5cc, 0x2, 0x8, 0x1200, 0xffffec5e, 0x7, 0x8, 0xe, 0x9, 0x3, 0x80000001, 0x2, 0xaff, 0x3, 0xfffffffb, 0x2, 0x80000000, 0x1, 0xd44, 0x4, 0x800, 0x10000, 0x2, 0x60000000, 0x2, 0x9, 0x80000000, 0x9, 0xc, 0x8, 0xfffffffa, 0x4, 0x3, 0x1, 0x4, 0x9, 0x7, 0x433, 0x8001, 0x8000, 0x7, 0x1, 0x736e, 0x4, 0x7f, 0x400, 0x0, 0x9, 0x7, 0x1, 0x13c082c0, 0x2, 0x2, 0x7, 0x30, 0x8001, 0x4, 0x7, 0x10, 0x401, 0x400, 0x9, 0x9, 0x461, 0x6, 0x81, 0x7fff, 0xde9b, 0x7, 0x7fffffff, 0x1, 0x2, 0x7, 0x3ff, 0x1, 0x3c, 0x5, 0x1, 0x0, 0x1, 0xfffff45e, 0x2, 0x8, 0x14, 0x2, 0x5, 0x0, 0x3, 0x3, 0x9, 0xff, 0x5, 0x7f, 0xc, 0x2, 0x93ef, 0x2d, 0x73b2994b, 0x2, 0xf, 0x3, 0x8, 0xfff, 0x3ff, 0x1, 0x6]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x40, 0xffffffff, 0x8, 0xf, 0xff, 0x8000, 0x401, 0x5, 0x4, 0x4, 0x3, 0x200, 0x8000, 0x4e5, 0x7, 0x0, 0xed, 0x3, 0x2, 0x7, 0x41, 0x9, 0x7, 0x2, 0x242f, 0x0, 0x0, 0x6, 0xfc, 0x8, 0x1, 0xc, 0x2, 0xa42d0d36, 0x3, 0x8, 0x10, 0x8, 0x7, 0x1, 0x1, 0x7ff, 0x400, 0x3, 0x6, 0x2, 0x6cd, 0x800, 0x4, 0x38, 0x1ff, 0x4, 0x3, 0xffffffff, 0xaa, 0x8, 0x8, 0x100, 0x6, 0x0, 0xbc, 0xffff, 0x4e41, 0xd, 0x7, 0x4, 0xa, 0x2, 0xf, 0xa, 0x5, 0x5, 0xfffffff9, 0xd, 0x800, 0x9, 0xb59, 0x8, 0x8000, 0x1, 0x4d37, 0x85cf, 0x7fff, 0x5, 0x6, 0x81, 0x400, 0x3, 0xffff, 0x1, 0x800, 0x5, 0x0, 0x8f, 0xffffffda, 0x1, 0x1, 0x1000, 0x10001, 0x14000000, 0x0, 0x181, 0x5, 0x4, 0x401, 0x4, 0x101, 0xe, 0xe, 0x9, 0xcfc, 0x0, 0x0, 0xfffffffb, 0xb, 0x4, 0x0, 0x3, 0x8, 0x3, 0x9e16, 0xf71, 0xa, 0x34a7, 0x6, 0x7fffffff, 0x3, 0x1ff, 0x7, 0x4, 0x8, 0x96, 0x6, 0x4, 0x6, 0xc9, 0x7, 0x3, 0x10001, 0x2a, 0x6000, 0xbd, 0x518566c0, 0x4, 0x6, 0x200, 0x4, 0xff, 0xfffffffd, 0x24, 0xffffff81, 0xa2, 0x5, 0x3, 0x62, 0x81, 0x4, 0x4, 0x9, 0x7, 0x8, 0x9, 0xfffff453, 0x88b6, 0x4, 0x10000, 0x1ff, 0x7, 0xe65, 0x2, 0x123a, 0x8, 0x800, 0x8, 0x401, 0x9, 0x9, 0x5, 0x10001, 0x8, 0x6, 0x7, 0x8000, 0xe2a8, 0x7, 0x5d47, 0x8, 0xfffffff8, 0x6, 0x9, 0x1, 0x0, 0xfff, 0x2, 0x0, 0x5, 0x6, 0x6, 0x0, 0x0, 0x16c, 0x6, 0x0, 0x8, 0xfbf9c13, 0x10001, 0x1, 0xa004, 0xa341, 0x400, 0x3, 0xe, 0x80000000, 0x9, 0xfffffb70, 0x6, 0x1ff, 0x9, 0x10000, 0x70, 0x5, 0x0, 0x7, 0x2244, 0x1, 0x6, 0x77, 0x5, 0x7fff, 0x9, 0xffff, 0x9, 0x1, 0x5, 0xffffffff, 0x0, 0x6, 0xfffffffd, 0x2, 0x8, 0x100, 0x6, 0x0, 0x9, 0x1b86, 0x0, 0x6, 0x2, 0x1, 0x800, 0x7, 0x9, 0x8, 0xfffffffa, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x96, 0x8001, 0x8, 0x3, 0x9, 0x0, 0x0, 0x1, 0x9, 0x6, 0x645, 0x6, 0x3, 0xfff, 0x1, 0xfffffffa, 0x5, 0xffffff00, 0x40, 0x10001, 0x6, 0x4, 0x1, 0x3dd, 0xd98, 0x3, 0x0, 0x3, 0x5, 0x3, 0x443, 0x9, 0x79, 0xff, 0xa0, 0x7, 0x1, 0x10000, 0x3, 0x10, 0x800, 0x6, 0xfff, 0x8, 0x80000000, 0x80000001, 0x380000, 0x18, 0x77d2, 0x84cf, 0x2, 0x9, 0x5, 0x1ff, 0x4, 0x3ff, 0xffff, 0xffff, 0xce, 0xabea, 0x9, 0x81, 0x5ec3, 0x10000, 0x6, 0x8, 0x10000, 0xb40, 0x7b9, 0x8, 0x4, 0x7, 0xfffffff7, 0x0, 0x5, 0xfffff801, 0x660, 0x9, 0x5, 0x8, 0x8, 0x42, 0x6, 0x3ff, 0x200, 0x4e, 0xd, 0x8000, 0xad, 0x9, 0x0, 0x10000, 0x8, 0x5, 0xd, 0xd, 0x10000, 0x2, 0x2, 0xa, 0x81, 0x1, 0x7, 0x1, 0x795b, 0x3, 0x9, 0x7, 0x1, 0x8, 0xf, 0x0, 0xfffffffd, 0xc440, 0x3, 0x7, 0x7, 0xd0000000, 0xffff6c5b, 0x6e, 0x10000, 0x5, 0x2, 0x2, 0x1000, 0xf72, 0x7, 0x9, 0x1, 0xaae, 0x400, 0x69fd, 0x6, 0x7, 0x1, 0x9, 0x8, 0x3, 0x0, 0x1, 0x3, 0x7, 0x10000, 0x6, 0x7, 0xff, 0xfffffff7, 0xfffffffb, 0x1, 0xffffffde, 0x7ff, 0x0, 0xbd2, 0xfff, 0x40, 0x8000, 0x4, 0xffffffff, 0x8, 0x4, 0x68dd, 0x6, 0x1, 0x71d5, 0x5, 0x7, 0x1000, 0x10001, 0x80000001, 0x5, 0x8, 0x8, 0x8, 0x3, 0xc3, 0x8, 0x2, 0x80000000, 0xffffffff, 0x9, 0x9, 0x5, 0x40, 0x3, 0xfffeffff, 0x5, 0x7, 0x6, 0x0, 0x6, 0x5, 0x88, 0x8, 0x401, 0x9, 0x0, 0x80000001, 0x1000, 0x1, 0xca61, 0x1, 0x0, 0xfffeffff, 0x800, 0x5, 0x30, 0x3b0, 0x6816bb6b, 0xe, 0x7, 0x1, 0xffff7fff, 0x43, 0x6, 0x1, 0x2, 0x2, 0x7f3843e9, 0x5, 0x8001, 0x7f, 0x1, 0xfffffff5, 0x10000, 0x2, 0xa05, 0x1f, 0xfff, 0x5, 0x3, 0x2, 0x7, 0x0, 0x638, 0x7f, 0xffffff24, 0x41c, 0xf95, 0x0, 0x6, 0x0, 0x5, 0x1, 0x5, 0x0, 0x2, 0x0, 0x1, 0xe2f6, 0xffffffc0, 0x1, 0x9d83, 0x800, 0x100, 0x8d9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x54e9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x79}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x4}]}}]}, 0x1534}, 0x1, 0x0, 0x0, 0x4}, 0x800)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000002f00)={<r11=>r1, 0x8, 0x690})
r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002f80), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_SERVICE(r11, &(0x7f0000003140)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003100)={&(0x7f0000002fc0)={0x138, r12, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2239}]}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x62}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x43}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x9}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}]}, 0x138}, 0x1, 0x0, 0x0, 0x8804}, 0x8840)
r13 = socket$inet6(0xa, 0x4, 0x9)
ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r13, 0x4002f516, &(0x7f0000003180)={0x2, 0x9})
r14 = socket$packet(0x11, 0x3, 0x300)
sendmsg$IPVS_CMD_FLUSH(r11, &(0x7f0000003340)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003300)={&(0x7f0000003200)={0xd0, r12, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x400}, @IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x12, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x32}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2f}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8090}, 0x4044040)
ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000003380)={'vcan0\x00', <r15=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f00000033c0)={@remote, 0x29, r15})
ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0)
read$nci(r11, &(0x7f0000003400)=""/233, 0xe9)

1.943579188s ago: executing program 0 (id=4899):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031400e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x4}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [<r4=>0x0]}, &(0x7f0000000080)=0x8)
unshare(0x22000200)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r4, 0x5}, 0xc)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0}}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'gre0\x00'})
r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0)
pipe(&(0x7f0000000040)={<r8=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0600000004000000a50000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000d00000000000000000", @ANYRES32=0x0, @ANYRES16=r8, @ANYBLOB="00000f3e9dd3e05e4382cd3aa3616f00000000000000000000da000000bee2f55a5f676e626fb781c9c47491f5cc33ceb3380614e2e1f74fdf8734550f7054c72b95a3fdb628c7545f97166a762bcd902334ce5c861408f536273506a0d928170a4804476f65b130afa9ae98d4165b76fb79bfbdb0a81c875441fac0dfcc1f8bf241f77c0f8d4cd68960301135e17cdb463694091f0001707916c41eefd8ca7f4fabc00479a05ccf210442c504cd986e692ccef951f61f0e2d51ac65c42d74a9d15dcdda59c138d6937c0d4560cc8769cda7e4caa8bfabec2305b5374957c5abe28a74ce455d24", @ANYRES32=r7, @ANYRESOCT=r6], 0x50)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r5, r8, 0x4, 0x0, 0x1}, 0x50)
getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={r4, 0x80000001}, &(0x7f00000000c0)=0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a010400008b0000000000e7ff00002400048020000180080001006f73660014000280080001400000000c080003400000000100010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}, 0x1, 0x0, 0x0, 0x20004090}, 0xc0)

1.943331894s ago: executing program 7 (id=4900):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x150, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x104, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "935fcc0d76a5bcfce584052ea21b4b2622057154ff788c325f3b596e54307c08"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x7c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}]}]}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010001480"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.942738395s ago: executing program 6 (id=4901):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv6_delrule={0x24, 0x21, 0x11, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0)
sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a3100000000050001000700000034000780"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)

1.93319299s ago: executing program 2 (id=4902):
sendmsg$DEVLINK_CMD_TRAP_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x100, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x20000800)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={0x38, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32=0x280}, @nested={0x1c, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x8, 0x38, 0x0, 0x1, [@typed={0x4, 0x7f, 0x0, 0x0, @binary}]}]}]}, 0x38}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200))
sendmmsg$inet6(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}, {{&(0x7f0000000340)={0xa, 0x4e24, 0xfff, @remote}, 0x1c, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x2, 0x44004)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1)
sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000001540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000c40)={0x884, r2, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0xc}}}}, [@NL80211_ATTR_HE_BSS_COLOR={0x4}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x17e, 0x80, [@supported_rates={0x1, 0x6, [{0x3}, {0x12}, {0x1, 0x1}, {0x3}, {0x50, 0x1}, {0x3}]}, @random={0x3, 0x75, "bc57dc6f02dff14509704f21f0993b1da9a81d1e14ce3d521807e98a7347fe1e739db8cf053668c03a04e0745a48452d44cae2702f70542c91e87101ee59ed529fc33ac6260f7356e8f29881ff78e1580410d10c940ac5aa50902ef23f77e0a14aaa39f82eb9c40c0a82b1251128dd9d8a2d0b1522"}, @random={0xee, 0xef, "96b43b6e6c38989ec40b6a314ab21c908b6e26a37f3014cc1143caad8d150fe60ec75176065de1e9998e1b50bcff8f80a826079a5a3b9d8ba3cdba154ce68e6aa28b4c0d7e3942f268be8561d55c62c763b3607cfa0bd47d5271f6fdec9a77cdf794d2fba5000da6eb534ccad824fe771e6094465a17174fddcd81471a2b423be76a675383af9779367f7c7fbe8fa1e45bb376c4b674e9479f0500713d7b057de5ef92c7a730ebcd133940cfb31726691a65a0555d27598aabb2c136e84a348ccfeb1d122c786048cd0cb93a5ddcc40091ef42669e6d676a572178398057c1d71722fe8b8482c2034e3359b728c6d6"}, @ibss={0x6, 0x2, 0x5}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x79, 0x2c, 0x3}}]}, @NL80211_ATTR_BEACON_TAIL={0x7e, 0xf, [@mesh_chsw={0x76, 0x6, {0xac, 0x4, 0xc, 0x400}}, @prep={0x83, 0x1f, {{}, 0x5, 0x9, @device_b, 0xfb, @void, 0x3, 0x2}}, @mesh_chsw={0x76, 0x6, {0x7, 0x5, 0x42, 0x8001}}, @rann={0x7e, 0x15, {{0x0, 0x74}, 0x7, 0xe4, @device_a, 0x7bf, 0x0, 0x11}}, @peer_mgmt={0x75, 0x4, {0x1, 0x0, @void, @void, @void}}, @mesh_id={0x72, 0x6}, @ht={0x2d, 0x1a, {0x8000, 0x2, 0x0, 0x0, {0x5, 0x0, 0x0, 0x133, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x1, 0x7, 0x4}}, @gcr_ga={0xbd, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0xe7, 0x80, [@tim={0x5, 0xe1, {0x2, 0x65, 0x12, "23483a7a2c0b732d4a5f0ea968a67b0c79f598088ac89e64a17534ba39fbc04a9e0f43ba4424d2b0850144ca656ed086d50e3a719ef971beb63392472b9671e24d43108fc79d9204cb2485e05e3a9c60333d8790b7065c5526d596e4f3bdbbc60c82532ed009e85e04006ff952071da8956bf4bf2ebf954fd1808aa1ca198780d6fafc97d6df4979e095e2c34b13739e13b9e1825f16d66066e00ba0801fa93bf43b4c656eef5b15c13208ae727722f66c2cce7c7c115fbe45d33aee775ea0fedf408c38af9da2814ca30fbefc1fe8136a9b2d48a1e906158178baa46dc2"}}]}, @NL80211_ATTR_BEACON_TAIL={0x7e, 0xf, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x9, 0x7, @device_b, 0x9, @value=@device_b, 0x7, 0x0, @device_a, 0x4c}}, @random={0x8, 0x4e, "d59524798d415b66f28c54403a049a6b862ca60dfcbb5c3776f232f68619aeb412fbd3d76c9d9ac83c062721e4deb96d903c8421c8895f425f7f115e93cc39e1ac9f75ef395640acaec7570aa173"}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_BEACON_HEAD={0x294, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7fff}, @device_b, @device_b, @from_mac=@device_b, {0x6, 0x6}}, 0x3, @random=0x8000, 0x121, @void, @val={0x1, 0x1, [{0x24}]}, @val={0x3, 0x1, 0x30}, @val={0x4, 0x6, {0x7f, 0x10, 0xfff3, 0x6ef}}, @void, @val={0x5, 0x51, {0x0, 0x27, 0x5, "c861eaa20109744c39031408f14ba48f8ba1207ea74263b086f9dcd0852539c0cbaa4f2feac9f8e6064b019558535232adf3d18d507b1fe2bbdb48bd63f5c96ec5b5d59fa6bdf7b3d9cfa4d95497"}}, @val={0x25, 0x3, {0x0, 0x1}}, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x3, 0x48}}, @val={0x76, 0x6, {0xfb, 0xfe, 0x1e, 0x4}}, [{0xdd, 0x78, "c88640d2ab4b6a1ab5924725c20602b3dca869e42c6cbd82274583cb69dd7ecfe48d5cb4b1ac40ff9113308653a83b97bc0fc9f01f1703f9f941cbed1d972e81f769391404b7bdff63341122beb1250b741d1a200c9d00dec37a7d5228e499dbb0c6b2726f694cd17c8dd8b7e326331500f3809ad397f9e7"}, {0xdd, 0xbf, "c3507e2f650296a24c95187bd4521bf6a5c808661da8681e9408c73bcf699f9dd1bd35b7368c365619b76649b7757878e82c2f9dcfd0db94d9c3f80d622fa6031ba4321ff72249208ef51e3b50af7903db2c43e75a9c936444b17cb9306ca2162737c958db86f1ee25dff9403c31eeb4a3e76504972b7f20438e2e93fa6cb62c2f8c167949343d537e85b4157b38b72575a8f8c242ba83b8ad0e838ac48f91b9ad0efa98825cea849e510cd804b21be07c0179b91b55342cfa117823aad6cf"}, {0xdd, 0xb5, "683bb04ef4471930104944bffa6278b9d953336e9b457b95c0684fd790a31107c9f762809a1bc7483ff2c5d7ed19414877f32c3bcca17f69f51aca1f3f956d7edbce89fd6eb481c76c295ba75b65ac4996815e52b12d6aad7fba7cdec66730a8dd1157694cf8aa352946e312cd5023ca99063c5bc6f622c4079534816d5e7f342dc5f522220e41cc95855ddd4f89bff6ecef82edebb7e644cbbee20ea72cdcaad01d3cf1494e9f5fae97fca86d64fa048dfb64ec49"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xdc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd3, 0x2, "9f508cfcaf2335641cd332a8763c060e8bbc7f87e0de75d05fd16e8a2c28b90b37f82e3f1d0b4e2049384681c8b901113f6bfece2faafa7e7457a60ba96be2fcec1493360244663933eeafbfe1de02638dbe366fcc56a25a1cdf76e3415b1cbaae6df1c7ffda1de11eb666170a7dd30ae97f483406c11a0b5bb9821ec647d8ba9881522caaf4acdd50c6e915b9738a98c65ed399ca66229d72488243781879c88cc532226b7e1eb1efe925e2cee88575846d04483607095e8f1f78086475b6030d39668b11d812c25a2541a56743c5"}]}, @NL80211_ATTR_IE={0xf, 0x2a, [@dsss={0x3, 0x1, 0x74}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_FTM_RESPONDER={0xd8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x14, 0x3, "fd054cf5e510eec5a410dd57679b7d00"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xbf, 0x3, "c3879b4263b60aef4c8f1d0563717eb90c787963791485091253db68387864c76e5e502f1ab29ec2318eeed33afdb17287c44c707baaaaf84e77f13670700fd9a340f2ff644af70f6bdce932173f0c104097621c2fa2c1c9fcb11c66627ac6382b133fb70c43eb85488f598092886fa68416a0725c7c7452c46aaf9bccc460b08dd9be8f88d0540c0b7335ecd7bbfcd7e19d0de79392ca5055cb7c8faa2c52516ac27fdfe08fe4e20e261cffeb025c97ac86140d085af28bba56ae"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x28, 0x80, [@ht={0x2d, 0x1a, {0x400, 0x3, 0x5, 0x0, {0x59, 0x6, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x800, 0xb6bf, 0xd5}}, @cf={0x4, 0x6, {0x8, 0x0, 0x2, 0xac9}}]}], @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x53}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1e9e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xea5}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x884}}, 0x40040)

1.813201948s ago: executing program 7 (id=4903):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000)
syz_emit_ethernet(0x46, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb88a81400810000000800471800300064000004069078e00000017f00000186060000000200004e204e23a1c8fcf65d5c7faed61dde35645e3f4f224049b8ff8e27258e84480ea140664eebeccf1ff866e322e91451b0ba2ea22d589e8ab26f9baf4aa92b5faca748785e487cd5975b2a85baca2f5d2369d567a31613dd1ee7d1c883e952814588606d3a92da2f54a1f3429883cd68aa26201aee580f57749dcf2616aa303e73831c840694cd359421b2ca9afe26d59266441b0e97449024f62a572cb6c2b0ca8d2cf6287a110ce784d09081c55664ec1428b4c6f3c11ef31d39aecad4ba4b48f2e9018db0dc56735caa", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5180"], 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=0x0, @ANYRES64=r4, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)}], 0x1}}], 0x1, 0x20000044)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r6 = accept4(r5, 0x0, 0x0, 0x800)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)}, 0x0)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r9=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r11, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r12, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

1.763752399s ago: executing program 2 (id=4904):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
accept4(r0, &(0x7f0000000300)=@vsock, &(0x7f00000003c0)=0x80, 0x80800)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98847fa6d197b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f10737fff413ec95f3f00b74ee0b29ece9b69f72fb4c2aa6c7dfa87c9fe2aee84bb3a92701c9023dd4d8cf3ca1472c5e575437195e2c6e7be4309e7e13c09dc61faa43311c1fa08644f", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1.186023045s ago: executing program 2 (id=4905):
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x13, 0xffffffffffffffff, 0x42d15000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94)
syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYRES32=r1, @ANYRES64=r1, @ANYRESDEC=0x0], 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21)
r4 = socket$tipc(0x1e, 0x2, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r6 = socket$netlink(0x10, 0x3, 0xb)
ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x1, 0xe}, {0x2}}}, 0x24}}, 0x8000)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f0000000000)={0x0, 0x5}, 0x8)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r7, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
recvmmsg(r2, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/249, 0xf9}], 0x1}, 0x536a}], 0x1, 0x40000007, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000080))
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})

1.185618605s ago: executing program 5 (id=4906):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ac0200001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r3, @ANYBLOB="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"], 0x2ac}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000090)
r4 = socket(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x12, 0x2, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r7}, 0x20)
r9 = socket$packet(0x11, 0x2, 0x300)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r10=>0x0})
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r4)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="000a28bd70c82a19d15500fddbdf251500000020000180140002006e657464657673696d3000000000000008000100", @ANYRES32=r3, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a80180004"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0)
r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r13 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32, @ANYBLOB="110001"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001a000100feffffff0000000081"], 0x1c}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r12, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x36, 0x1, @udp='udp:syz1\x00'}]}]}, 0x54}}, 0x0)

988.508526ms ago: executing program 0 (id=4907):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000500)=r1, 0x4)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r6=>0x0)
unshare(0x10080)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054)
write$nci(r2, 0x0, 0x14)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x400, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40841}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x3c}}, 0x0)

987.304746ms ago: executing program 6 (id=4908):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x48890}, 0x24000000)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100))

649.73321ms ago: executing program 6 (id=4909):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2, 0x25, 0x2, @val=@tcx={@void, @value=r0}}, 0x1c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r0, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x200000000000000)

486.673889ms ago: executing program 7 (id=4910):
r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) (async)
bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4b, @empty, 0x8}, 0x1c) (async)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r0, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24044080) (async)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="1adec23692c99892e8fab631cefd1bce1f6111128d02acb527c6ca578e6e27507f16e0b21b3f06d169", 0x29}], 0x1}, 0x4000)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000000)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10)

416.440647ms ago: executing program 5 (id=4911):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8000, 0x5, 0x5}}]}, 0x40}}, 0xc800)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18, 0x40000000}, 0xc800)
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x2f, 0x1a, 0x6, 0x8, 0x51, @local, @private0, 0x1, 0xee89036aa2cc40bf, 0x5, 0x7ff}})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10)
setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810)
socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x3, 0x84)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@local, 0x0, 0x100, 0x4e26, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffff6, 0x400000002000000, 0x1, 0xfffffffffffffffd}, {0xbad, 0x1, 0x8, 0x10}, 0x1, 0x0, 0x2, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x8, @in=@remote, 0x3504, 0x4, 0x0, 0x0, 0x9, 0x6, 0x4}}, 0xe8)

372.258097ms ago: executing program 7 (id=4912):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2300000008000000020000000300000005"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000040000001802000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x63, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x8, 0x6, 0x1}, 0x50)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x63, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4)
sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd3000000000000000000000014000780080011400000000005001500030000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x5}, {0x6, 0xfd}]})
write$ppp(r0, &(0x7f0000000280)="1e08bc018558d8", 0x7)

267.905123ms ago: executing program 0 (id=4913):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14)
sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080), 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@newtaction={0x68, 0x30, 0xffff, 0x70bd29, 0x1000, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x0, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063115e000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23)

212.784091ms ago: executing program 0 (id=4914):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$kcm(0x2b, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24)
getsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000280), &(0x7f00000002c0)=0x4)
close(r2)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10)
setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @random="0000000040e6"}, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, <r4=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f00000005c0)=0x10000, 0x4)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r5 = accept4(r3, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="f0000000000000001701000002000000d50000009104197e826e4aeab2f106ef90b98e6d178f4a8e17a0dae367625d6e2b350dd7e5c3b46ddcb939fd87a7e8291ea1d11bd4d8dda07aad56460c9d6f8bc3d0851ead6fa903c5c5d480c9d30e793fd02facd747b57a1f0b51fc57f1a6d43df60c70eae90009040d99cc819bd75eec90d246b4442bf7067dab5468b52643d36e3552354056e3eacc898a238addbbfbf38310e09a648ddcba77ce56df59ff66485713f4c2087f8808740e16f8e6a322a7b6571c14f826e3923b8d9c015f8b74a650319c41e0512b3b323a403b8abb2542a6fbfd173239eb00000000000000"], 0xf0}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000600)=""/87, 0x57}, {&(0x7f0000000540)=""/95, 0x5f}, {&(0x7f0000000680)=""/209, 0xd1}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x4}, 0x0)
socket$netlink(0x10, 0x3, 0x10)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$llc(r5, &(0x7f0000000340)={0x1a, 0x30e, 0x7f, 0x6, 0x23, 0x6, @random="ded4f68d72ff"}, 0x10)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000002540)={{r3}, 0x0, 0x8, @unused=[0x9, 0xff, 0x4, 0x1], @devid})
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000001c0)={r8, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}}, 0x0, 0x0, 0xffffffff, 0x0, 0xd4}, 0x9c)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={r8, 0x6, 0xfffe}, 0x8)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000500)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4044001}], 0x1, 0x4040800)

209.836564ms ago: executing program 6 (id=4915):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="08000800060005000000140000004532"], 0xfce)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
socket$kcm(0x2, 0x3, 0x2) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async)
write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="08000800060005000000140000004532"], 0xfce) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) (async)

156.441981ms ago: executing program 7 (id=4916):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280), 0x0)
accept4(r0, &(0x7f0000000300)=@vsock, &(0x7f00000003c0)=0x80, 0x80800)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="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", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

60.598264ms ago: executing program 7 (id=4917):
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r3=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c000500000000000000000005003700f1ff000008000200", @ANYRES32=r3], 0x50}, 0x4, 0x700000000000000}, 0x0) (fail_nth: 7)

0s ago: executing program 0 (id=4918):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="12000000010000000400000008"], 0x48)
close(0x3)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x7b)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0080323029f1a31c2f7077459037c2524a96b462cff5f0a7729b06000000000000008478193248522a288286ad72723e18e6997697919447b44c3e0764152a54d201a48ec0d3e5765d93b59d4c4bca869bfeedf52f14634e6a718ab14207e815d2226eccdfe5ab8c1677619b57a0df2ea888c9566210b442a7d2bad3c9a8bfd5da1d30f97f31e655547d47b9923f9ced37176cb244", @ANYRES16=r3, @ANYBLOB="010027bd7000000000000c000000200001801400020076657468315f746f5f6261746164760008000300010000000800038004000380"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x804)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x128}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
accept4(r1, 0x0, 0x0, 0x800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007200000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r8}, 0xc)
setsockopt$sock_timeval(r6, 0x1, 0x2, 0x0, 0x48)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98)
write$cgroup_subtree(r5, &(0x7f0000000500)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
r9 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000140)={<r10=>0x0, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0xe, 0xf9}, &(0x7f0000000000)=0x9c)
bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="050000008104fe004055720ae800000080000030eaf8f45b78c01f1bab86490a52024a4ab068deada5a978ec1512123054ba81", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES8=r10, @ANYBLOB="000000000000000000000000000000000000000000000000ff0000f36ee6776620a095a78f598bfadada460de7189d246759e615a03385dabb14dcd6d0c60d2dddfdbe27d30a23aaa8a0ee5ae486f4ebf6"], 0x50)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r12 = openat$cgroup_subtree(r5, &(0x7f0000000400), 0x2, 0x0)
ioctl$OCFS2_IOC_GROUP_ADD(r12, 0x40186f02, &(0x7f0000000580)={0x0, 0x1857df50, 0x3, 0x7f})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

8.691302][T20973] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3568'.
[  788.726919][T20969] syz_tun: entered allmulticast mode
[  788.755340][T20968] syz_tun: left allmulticast mode
[  789.260971][T20998] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  789.297911][T21000] netlink: 'syz.3.3575': attribute type 1 has an invalid length.
[  789.340545][T21000] 8021q: adding VLAN 0 to HW filter on device bond2
[  789.435575][T21007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3577'.
[  789.651716][T21015] xt_hashlimit: size too large, truncated to 1048576
[  789.706644][T21021] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3578'.
[  790.009959][T21031] block nbd2: server does not support multiple connections per device.
[  790.033506][T21031] block nbd2: shutting down sockets
[  790.056782][T21035] lo: entered allmulticast mode
[  790.086810][T21035] tunl0: entered allmulticast mode
[  790.093630][T21035] gre0: entered allmulticast mode
[  790.102001][T21035] gretap0: entered allmulticast mode
[  790.108542][T21035] erspan0: entered allmulticast mode
[  790.116362][T21035] ip_vti0: entered allmulticast mode
[  790.130664][T21035] ip6_vti0: entered allmulticast mode
[  790.147280][T21035] sit0: entered allmulticast mode
[  790.154617][T21035] ip6tnl0: entered allmulticast mode
[  790.161120][T21035] ip6gre0: entered allmulticast mode
[  790.167168][T21035] syz_tun: entered allmulticast mode
[  790.178798][T21035] ip6gretap0: entered allmulticast mode
[  790.185867][T21035] bridge0: entered allmulticast mode
[  790.207070][T21035] vcan0: entered allmulticast mode
[  790.222922][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802b275800: rx timeout, send abort
[  790.244218][T21035] bond0: entered allmulticast mode
[  790.256967][T21035] bond_slave_1: entered allmulticast mode
[  790.281224][T21035] team0: entered allmulticast mode
[  790.296044][T21035] team_slave_0: entered allmulticast mode
[  790.303075][T21035] team_slave_1: entered allmulticast mode
[  790.314368][T21035] dummy0: entered allmulticast mode
[  790.324338][T21035] nlmon0: entered allmulticast mode
[  790.332140][T21035] batadv0: entered allmulticast mode
[  790.338828][T21035] vxcan0: entered allmulticast mode
[  790.345902][T21035] vxcan1: entered allmulticast mode
[  790.352488][T21035] veth0: entered allmulticast mode
[  790.358472][T21035] veth1: entered allmulticast mode
[  790.365227][T21035] wg0: entered allmulticast mode
[  790.375171][T21035] wg1: entered allmulticast mode
[  790.382597][T21035] wg2: entered allmulticast mode
[  790.388750][T21035] veth0_to_bridge: entered allmulticast mode
[  790.397264][T21035] veth1_to_bridge: entered allmulticast mode
[  790.406193][T21035] veth1_to_bond: entered allmulticast mode
[  790.413889][T21035] veth0_to_team: entered allmulticast mode
[  790.422760][T21035] veth1_to_team: entered allmulticast mode
[  790.430253][T21035] veth0_to_batadv: entered allmulticast mode
[  790.436908][T21035] batadv_slave_0: entered allmulticast mode
[  790.444508][T21035] veth1_to_batadv: entered allmulticast mode
[  790.452340][T21035] batadv_slave_1: entered allmulticast mode
[  790.459012][T21035] xfrm0: entered allmulticast mode
[  790.466063][T21035] veth0_to_hsr: entered allmulticast mode
[  790.472893][T21035] hsr_slave_0: entered allmulticast mode
[  790.482363][T21035] veth1_to_hsr: entered allmulticast mode
[  790.488769][T21035] hsr_slave_1: entered allmulticast mode
[  790.495365][T21035] hsr0: entered allmulticast mode
[  790.502337][T21035] veth1_virt_wifi: entered allmulticast mode
[  790.508940][T21035] veth0_virt_wifi: entered allmulticast mode
[  790.516803][T21035] virt_wifi0: entered allmulticast mode
[  790.525718][T21035] veth1_vlan: entered allmulticast mode
[  790.533459][T21035] veth0_vlan: entered allmulticast mode
[  790.540806][T21035] vlan0: entered allmulticast mode
[  790.546811][T21035] vlan1: entered allmulticast mode
[  790.561187][T21035] macvlan0: entered allmulticast mode
[  790.576040][T21035] macvlan1: entered allmulticast mode
[  790.585895][T21035] ipvlan0: entered allmulticast mode
[  790.624936][T21035] ipvlan1: entered allmulticast mode
[  790.641079][T21035] veth1_macvtap: entered allmulticast mode
[  790.647772][T21035] veth0_macvtap: entered allmulticast mode
[  790.654824][T21035] macvtap0: entered allmulticast mode
[  790.661884][T21035] macsec0: entered allmulticast mode
[  790.667969][T21035] geneve0: entered allmulticast mode
[  790.675467][T21035] geneve1: entered allmulticast mode
[  790.685413][T21035] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  790.695468][T21035] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  790.711212][T21035] netdevsim netdevsim1 netdevsim2: entered allmulticast mode
[  790.730440][T21035] netdevsim netdevsim1 netdevsim3: entered allmulticast mode
[  790.737873][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802b275800: abort rx timeout. Force session deactivation
[  790.756569][T21035] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode
[  790.790895][T21035] mac80211_hwsim hwsim51 wlan1: entered allmulticast mode
[  790.800586][T21035] macsec1: left promiscuous mode
[  790.805797][T21035] macsec1: entered allmulticast mode
[  790.812367][T21035] ip6tnl1: entered allmulticast mode
[  790.831071][T21035] bridge1: left promiscuous mode
[  790.834316][T21051] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3587'.
[  790.888210][T17394] bridge0: port 2(bridge_slave_1) entered blocking state
[  790.895436][T17394] bridge0: port 2(bridge_slave_1) entered forwarding state
[  791.042697][T21054] SET target dimension over the limit!
[  791.081577][T21055] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3588'.
[  791.141981][T21055] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3588'.
[  791.206215][T21066] dummy0: entered promiscuous mode
[  791.259312][T21073] netlink: 400 bytes leftover after parsing attributes in process `syz.1.3593'.
[  791.509044][T21068] dummy0: left promiscuous mode
[  791.635244][T21082] syzkaller0: entered promiscuous mode
[  791.649155][T21082] syzkaller0: entered allmulticast mode
[  791.656859][T21036] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  791.670941][T21036] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  791.696508][T21082] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  791.714853][T21088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3598'.
[  791.782421][T21088] veth3: entered allmulticast mode
[  791.826029][T21082] tipc: Resetting bearer <eth:syzkaller0>
[  791.874523][T21036] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  791.892433][T21036] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  791.895010][T21081] tipc: Resetting bearer <eth:syzkaller0>
[  791.958746][T21081] tipc: Disabling bearer <eth:syzkaller0>
[  792.163227][T21036] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  792.190962][T21036] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  792.236300][T21102] netlink: 'syz.4.3603': attribute type 11 has an invalid length.
[  792.382783][T21036] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  792.400288][T21036] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  792.455436][T21110] xt_bpf: check failed: parse error
[  792.617822][T21036] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  792.632229][T21036] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  792.693608][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'.
[  793.345253][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3617'.
[  793.357163][T21148] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  793.383290][T21148] batman_adv: batadv0: Removing interface: batadv_slave_0
[  793.415652][T21148] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  793.478124][T21152] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3618'.
[  793.487117][T21148] batman_adv: batadv0: Removing interface: batadv_slave_1
[  793.502662][T21152] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3618'.
[  793.512639][T21152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3618'.
[  793.541666][T21148] batman_adv: batadv0: Interface deactivated: gretap1
[  793.553633][T21148] batman_adv: batadv0: Removing interface: gretap1
[  794.174087][T21190] netlink: 'syz.3.3627': attribute type 1 has an invalid length.
[  794.353350][T21196] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  794.652118][T21218] xt_l2tp: v2 sid > 0xffff: 4294967294
[  795.085495][T21226] vlan2: entered promiscuous mode
[  795.115012][T21226] bond0: entered promiscuous mode
[  795.135696][T21226] bond_slave_0: entered promiscuous mode
[  795.143271][T21226] bond_slave_1: entered promiscuous mode
[  795.426189][T21245] netlink: 'syz.2.3640': attribute type 15 has an invalid length.
[  795.447538][T21235] syzkaller0: entered promiscuous mode
[  795.464947][T21235] syzkaller0: entered allmulticast mode
[  795.484016][T21237] syzkaller0: entered promiscuous mode
[  795.504614][T21237] syzkaller0: entered allmulticast mode
[  798.453171][ T5638] block nbd2: Receive control failed (result -32)
[  798.461896][T17397] block nbd2: Receive control failed (result -32)
[  798.631665][  T810] IPVS: starting estimator thread 0...
[  798.648395][T21270] bridge1: entered promiscuous mode
[  798.672642][T21270] bridge1: entered allmulticast mode
[  798.685687][T21270] team0: Port device bridge1 added
[  798.694361][T21275] __nla_validate_parse: 10 callbacks suppressed
[  798.694379][T21275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3647'.
[  798.713441][T21279] netlink: 'syz.2.3646': attribute type 2 has an invalid length.
[  798.749497][T21277] IPVS: using max 35 ests per chain, 84000 per kthread
[  798.808689][T21279] 
: entered promiscuous mode
[  798.962226][T21298] xt_ipcomp: unknown flags 1D
[  799.132943][T21303] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3653'.
[  799.159616][T21303] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  799.373578][T21312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3654'.
[  799.392826][T21312] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3654'.
[  799.438015][T21312] geneve2: entered promiscuous mode
[  799.463249][T21312] geneve2: entered allmulticast mode
[  800.114714][T21329] bridge0: port 2(bridge_slave_1) entered disabled state
[  800.122482][T21329] bridge0: port 1(bridge_slave_0) entered disabled state
[  800.318832][T21340] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3665'.
[  800.618018][T21329] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  801.097494][T21329] ipip0: left promiscuous mode
[  801.113624][T21329] bridge1: left promiscuous mode
[  801.119546][T21329] bridge1: left allmulticast mode
[  801.244180][T19113] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  801.256317][T21347] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3666'.
[  801.266096][T19113] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  801.346936][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'.
[  801.375484][T21348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3667'.
[  801.427462][T19113] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  801.448189][T21353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3668'.
[  801.449785][T19113] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  801.488183][T21353] netlink: 'syz.0.3668': attribute type 1 has an invalid length.
[  801.710422][T21353] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3668'.
[  801.823735][T21358] bond3: (slave veth7): Enslaving as an active interface with a down link
[  802.165653][T21376] netlink: 'syz.3.3674': attribute type 11 has an invalid length.
[  802.723284][T21406] xt_hashlimit: size too large, truncated to 1048576
[  803.702923][T21413] syzkaller0: entered promiscuous mode
[  803.724036][T21421] raw_sendmsg: syz.3.3682 forgot to set AF_INET. Fix it!
[  803.742635][T21413] syzkaller0: entered allmulticast mode
[  803.769506][  T810] IPVS: starting estimator thread 0...
[  803.810228][T21424] netlink: 'syz.2.3686': attribute type 1 has an invalid length.
[  803.823152][T21426] __nla_validate_parse: 19 callbacks suppressed
[  803.823172][T21426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3687'.
[  803.841716][T21420] IPv6: sit1: Disabled Multicast RS
[  803.879547][T21422] IPVS: using max 29 ests per chain, 69600 per kthread
[  804.020135][T21429] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  804.034971][T21428] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3686'.
[  804.044205][T21429] bond1: (slave vti0): Error -95 calling set_mac_address
[  805.206251][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3689'.
[  805.223382][T21447] netlink: 'syz.3.3689': attribute type 10 has an invalid length.
[  805.231909][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3689'.
[  806.848524][T21424] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  806.937925][T21447] geneve2: entered promiscuous mode
[  807.004217][T21447] geneve2: entered allmulticast mode
[  807.262284][T21467] syzkaller0: entered promiscuous mode
[  807.282993][T21467] syzkaller0: entered allmulticast mode
[  807.365594][T21474] netlink: 'syz.1.3697': attribute type 40 has an invalid length.
[  807.511280][T21482] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3698'.
[  807.538243][T21473] syzkaller0: entered promiscuous mode
[  807.576026][T21473] syzkaller0: entered allmulticast mode
[  807.761555][T21488] netlink: 'syz.4.3699': attribute type 23 has an invalid length.
[  807.836657][T21488] netlink: 'syz.4.3699': attribute type 23 has an invalid length.
[  807.847013][T21493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3701'.
[  807.857284][T21494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3701'.
[  807.883898][T21493] vlan2: entered promiscuous mode
[  807.957286][T21494] vlan2: entered promiscuous mode
[  808.071094][T21488] netlink: 'syz.4.3699': attribute type 23 has an invalid length.
[  808.148578][T21488] netlink: 'syz.4.3699': attribute type 23 has an invalid length.
[  808.270378][T21488] netlink: 'syz.4.3699': attribute type 23 has an invalid length.
[  808.369917][T21488] netlink: 'syz.4.3699': attribute type 23 has an invalid length.
[  808.384924][T21491] syzkaller1: entered promiscuous mode
[  808.418519][T21491] syzkaller1: entered allmulticast mode
[  808.497481][T21513] syzkaller0: entered promiscuous mode
[  808.514416][T21513] syzkaller0: entered allmulticast mode
[  808.772588][ T1319] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  808.827368][T21526] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  809.349164][T21543] bridge_slave_0: left promiscuous mode
[  809.355690][T21543] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.379015][T21543] bridge_slave_1: left promiscuous mode
[  809.385449][T21543] bridge0: port 2(bridge_slave_1) entered disabled state
[  809.421681][T21543] bond0: (slave bond_slave_1): Releasing backup interface
[  809.495396][T21543] team0: Port device team_slave_0 removed
[  809.536524][T21543] team0: Port device team_slave_1 removed
[  809.556925][T21543] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  809.588436][T21543] batman_adv: batadv0: Removing interface: batadv_slave_0
[  809.614464][T21543] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  809.642738][T21543] batman_adv: batadv0: Removing interface: batadv_slave_1
[  809.663718][T21543] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  810.885112][T21576] 8021q: adding VLAN 0 to HW filter on device bond1
[  811.625803][T21631] syzkaller1: entered promiscuous mode
[  811.631689][T21631] syzkaller1: entered allmulticast mode
[  812.217829][T21655] sch_fq: defrate 8 ignored.
[  812.322110][T21659] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  813.207605][T21581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  813.632656][T21680] xt_hashlimit: size too large, truncated to 1048576
[  813.826408][T21692] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3752'.
[  813.875513][T21692] netlink: 'syz.3.3752': attribute type 10 has an invalid length.
[  813.910986][T21692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3752'.
[  813.951159][T21692] dummy0: entered promiscuous mode
[  814.027445][T21701] netlink: 'syz.0.3755': attribute type 4 has an invalid length.
[  814.043483][T21701] netlink: 'syz.0.3755': attribute type 4 has an invalid length.
[  814.321072][T21716] netlink: 'syz.0.3757': attribute type 7 has an invalid length.
[  814.436119][T21721] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3759'.
[  814.454092][T21721] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3759'.
[  814.475507][T21721] team0: Port device dummy0 removed
[  814.625270][T21724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3760'.
[  814.693903][T21729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3762'.
[  814.899649][T21746] netlink: 'syz.1.3766': attribute type 1 has an invalid length.
[  814.925680][T21747] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3766'.
[  814.975088][T21746] 8021q: adding VLAN 0 to HW filter on device bond2
[  815.015177][T21748] bond2: (slave geneve3): making interface the new active one
[  815.040880][T21748] bond2: (slave geneve3): Enslaving as an active interface with an up link
[  815.062651][T21752] netlink: 'syz.0.3767': attribute type 62 has an invalid length.
[  815.168833][T21754] netlink: 'syz.1.3768': attribute type 1 has an invalid length.
[  815.182871][T21744] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3765'.
[  815.399191][T21766] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3770'.
[  815.411530][T21766] syzkaller0: entered promiscuous mode
[  815.417057][T21766] syzkaller0: entered allmulticast mode
[  815.427825][T21766] netlink: 'syz.2.3770': attribute type 1 has an invalid length.
[  815.436279][T21766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3770'.
[  815.570158][T21769] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  816.137841][T17394] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x23
[  816.185825][T21806] syzkaller0: entered promiscuous mode
[  816.213167][T21806] syzkaller0: entered allmulticast mode
[  816.316945][T21811] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  816.378399][T21812] xt_l2tp: v2 sid > 0xffff: 262144
[  816.402223][T21811] syzkaller0: entered promiscuous mode
[  816.407729][T21811] syzkaller0: entered allmulticast mode
[  816.414059][T21811] tipc: Resetting bearer <eth:syzkaller0>
[  816.448864][T21810] tipc: Resetting bearer <eth:syzkaller0>
[  816.505019][T21814] block nbd8: server does not support multiple connections per device.
[  816.528411][T21819] netlink: 'syz.0.3784': attribute type 1 has an invalid length.
[  816.541021][T21814] block nbd8: shutting down sockets
[  818.706791][T21810] tipc: Disabling bearer <eth:syzkaller0>
[  818.733489][T21819] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  819.068730][T21844] syzkaller0: entered promiscuous mode
[  819.087629][T21844] syzkaller0: entered allmulticast mode
[  819.255396][T21855] __nla_validate_parse: 2 callbacks suppressed
[  819.255751][T21855] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3792'.
[  819.274352][T21850] netlink: 'syz.2.3791': attribute type 1 has an invalid length.
[  819.333516][T21844] tipc: Started in network mode
[  819.348456][T21844] tipc: Node identity 3264e1013c49, cluster identity 4711
[  819.373352][T21844] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  819.408716][T21843] tipc: Resetting bearer <eth:syzkaller0>
[  819.492777][T21843] tipc: Disabling bearer <eth:syzkaller0>
[  820.388770][T21874] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3798'.
[  820.485141][T21878] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  820.505531][T21878] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  820.517134][T21878] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  820.730692][T21890] x_tables: duplicate underflow at hook 1
[  822.264111][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3814'.
[  822.326140][T21953] Bluetooth: MGMT ver 1.23
[  822.336369][T21947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3814'.
[  822.373360][T21953] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3814'.
[  822.422692][T21947] wlan0: renamed from sit0 (while UP)
[  822.452640][T21947] wlan0: entered promiscuous mode
[  822.461772][T21947] wlan0: entered allmulticast mode
[  822.496566][T21947] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3814'.
[  822.512807][T21947] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  822.607559][T21961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3818'.
[  822.694530][T21961] bond4: option ad_actor_sys_prio: invalid value (0)
[  822.702722][T21961] bond4: option ad_actor_sys_prio: allowed values 1 - 65535
[  823.275822][T21961] bond4 (unregistering): Released all slaves
[  823.623998][T21982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'.
[  823.648652][T21974] syzkaller0: entered promiscuous mode
[  823.656441][T21974] syzkaller0: entered allmulticast mode
[  823.940355][T21987] sctp: [Deprecated]: syz.1.3825 (pid 21987) Use of int in max_burst socket option.
[  823.940355][T21987] Use struct sctp_assoc_value instead
[  824.017987][T21989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3826'.
[  824.348289][T21996] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3827'.
[  824.600375][T21994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3827'.
[  827.409141][T22009] xt_hashlimit: size too large, truncated to 1048576
[  827.478989][T22014] netlink: 'syz.0.3832': attribute type 11 has an invalid length.
[  827.788267][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3835'.
[  828.057235][T22032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3839'.
[  828.232975][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  828.249193][ T5638] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  828.261618][ T5638] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  828.273249][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  828.282304][ T5638] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  828.383293][T17397] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  828.393933][T17397] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  828.405117][T17397] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  828.426147][T17397] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  828.437186][T17397] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  828.744514][T22024] bond4: option fail_over_mac: invalid value (127)
[  828.787116][T22024] bond4 (unregistering): Released all slaves
[  828.996914][T22037] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  829.103504][T22054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3842'.
[  829.767671][T22080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3847'.
[  830.520005][T17397] Bluetooth: hci1: command tx timeout
[  832.599715][T17397] Bluetooth: hci1: command tx timeout
[  833.042478][T22141] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3857'.
[  833.075942][T22153] netlink: 'syz.1.3858': attribute type 4 has an invalid length.
[  833.092681][T17394] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  833.129962][T17394] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  833.266956][T17394] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  833.289263][T17394] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  834.004148][T22174] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20003
[  834.421630][T22193] x_tables: duplicate underflow at hook 2
[  834.526979][T22196] netlink: 'syz.2.3866': attribute type 7 has an invalid length.
[  834.690391][T17397] Bluetooth: hci1: command tx timeout
[  834.772810][T22201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3871'.
[  835.138212][T22040] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.173663][T22040] bridge0: port 1(bridge_slave_0) entered disabled state
[  835.200622][T22040] bridge_slave_0: entered allmulticast mode
[  835.237912][T22040] bridge_slave_0: entered promiscuous mode
[  835.493202][T22040] bridge0: port 2(bridge_slave_1) entered blocking state
[  835.534204][T22040] bridge0: port 2(bridge_slave_1) entered disabled state
[  835.553836][T22040] bridge_slave_1: entered allmulticast mode
[  835.564845][T22040] bridge_slave_1: entered promiscuous mode
[  835.601245][T22224] netlink: 'syz.0.3874': attribute type 2 has an invalid length.
[  835.685337][T22229] atomic_op ffff888078a72198 conn xmit_atomic 0000000000000000
[  835.775580][T22040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  835.873027][T22040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  836.021900][T22040] team0: Port device team_slave_0 added
[  836.073900][T22040] team0: Port device team_slave_1 added
[  836.272850][T22040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  836.297460][T22040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  836.337780][T22244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3880'.
[  836.369447][T22040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  836.404801][T22040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  836.429472][T22040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  836.505513][T22040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  836.715035][T22253] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3882'.
[  836.760745][T17397] Bluetooth: hci1: command tx timeout
[  836.766151][T22253] netlink: 'syz.1.3882': attribute type 10 has an invalid length.
[  836.901128][T22040] hsr_slave_0: entered promiscuous mode
[  836.922903][T22040] hsr_slave_1: entered promiscuous mode
[  836.943945][T22040] debugfs: 'hsr0' already exists in 'hsr'
[  836.957204][T22040] Cannot create hsr debugfs directory
[  837.288260][T22268] netlink: 'syz.3.3886': attribute type 83 has an invalid length.
[  837.317126][T22237] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  837.627419][T22274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3887'.
[  837.682281][T22274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3887'.
[  837.827825][T22281] smc: net device vlan1 applied user defined pnetid SYZ2
[  837.887078][T22280] netlink: 'syz.0.3889': attribute type 16 has an invalid length.
[  838.293126][T22298] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3895'.
[  838.358436][T22300] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3896'.
[  838.436810][T22302] x_tables: duplicate underflow at hook 2
[  838.803750][T22040] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  838.843925][T22040] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  838.888863][T22040] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  838.949752][T22040] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  838.976884][T22040] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  838.997490][T22040] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  839.058020][T22040] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  839.095116][T22040] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  839.288866][ T6929] IPVS: starting estimator thread 0...
[  839.376975][T22338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3905'.
[  839.409790][T22333] IPVS: using max 25 ests per chain, 60000 per kthread
[  839.415335][T22338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3905'.
[  839.590041][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3907'.
[  839.736100][T22341] #: renamed from ip6_vti0 (while UP)
[  839.933035][T22350] veth3: entered allmulticast mode
[  839.972408][T22350] bond4: (slave veth3): Enslaving as an active interface with an up link
[  840.086595][T22349] bond4 (unregistering): (slave veth3): Releasing backup interface
[  840.114300][T22349] bond4 (unregistering): Released all slaves
[  840.133014][T22357] __nla_validate_parse: 2 callbacks suppressed
[  840.133032][T22357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3909'.
[  840.231978][T22357] pim6reg1: entered promiscuous mode
[  840.237422][T22357] pim6reg1: entered allmulticast mode
[  840.317054][T22358] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3909'.
[  840.494730][T22040] 8021q: adding VLAN 0 to HW filter on device bond0
[  840.615884][T22040] 8021q: adding VLAN 0 to HW filter on device team0
[  840.678662][T17393] bridge0: port 1(bridge_slave_0) entered blocking state
[  840.686499][T17393] bridge0: port 1(bridge_slave_0) entered forwarding state
[  840.808105][ T8053] bridge0: port 2(bridge_slave_1) entered blocking state
[  840.816335][ T8053] bridge0: port 2(bridge_slave_1) entered forwarding state
[  840.849951][T22379] netlink: 'syz.1.3915': attribute type 1 has an invalid length.
[  840.960300][T22379] 8021q: adding VLAN 0 to HW filter on device bond3
[  841.098006][T22391] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  841.115643][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3919'.
[  841.186066][T22391] bond4: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  841.202384][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3919'.
[  841.209010][T22391] bond4 (unregistering): Released all slaves
[  841.222194][T22397] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3919'.
[  841.233297][T22397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3919'.
[  841.244688][T22397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3919'.
[  841.598416][T22404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3921'.
[  841.650220][T22404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3921'.
[  841.703814][T22406] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3921'.
[  842.513254][T22433] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  842.556163][T22433] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  842.582636][T22433] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  843.523608][T22449] 8021q: adding VLAN 0 to HW filter on device bond3
[  843.554084][T22449] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  843.697821][T17394] bond3: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  843.755649][T17394] bond3: (slave veth7): making interface the new active one
[  843.848002][T17394] bond3: active interface up!
[  843.943868][T22463] bridge1: entered promiscuous mode
[  843.965340][T22463] bridge1: entered allmulticast mode
[  843.976614][T22463] team0: Port device bridge1 added
[  844.098508][T22471] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  844.183406][T22464] bridge0: port 3(team0) entered blocking state
[  844.219757][T22464] bridge0: port 3(team0) entered disabled state
[  844.240663][T22464] team0: entered allmulticast mode
[  844.245996][T22464] team_slave_0: entered allmulticast mode
[  844.269845][T22464] team_slave_1: entered allmulticast mode
[  844.324292][T22464] team0: entered promiscuous mode
[  844.348657][T22464] team_slave_0: entered promiscuous mode
[  844.372507][T22464] team_slave_1: entered promiscuous mode
[  844.401240][T22464] bridge0: port 3(team0) entered blocking state
[  844.407746][T22464] bridge0: port 3(team0) entered forwarding state
[  844.478719][T22040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  845.126639][T22495] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  845.218374][T22497] erspan0: entered promiscuous mode
[  845.683581][T22505] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3941'.
[  845.742281][T22512] netlink: 'syz.1.3942': attribute type 1 has an invalid length.
[  845.750373][T22512] netlink: 'syz.1.3942': attribute type 1 has an invalid length.
[  845.759997][T22512] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22)
[  846.671403][T22040] veth0_vlan: entered promiscuous mode
[  846.738839][T22040] veth1_vlan: entered promiscuous mode
[  846.887396][T22040] veth0_macvtap: entered promiscuous mode
[  846.918064][T22040] veth1_macvtap: entered promiscuous mode
[  846.986404][T22040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  847.052496][T22040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  847.240722][T19115] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  847.290973][T19115] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  847.315665][T19115] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  847.362205][T19115] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  847.758522][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  847.794518][T22553] ipt_REJECT: ECHOREPLY no longer supported.
[  847.798828][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.055805][T17393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  848.080307][T17393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  848.206463][T22559] netlink: 'syz.2.3952': attribute type 83 has an invalid length.
[  849.180147][T22574] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3955'.
[  849.223247][T22574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3955'.
[  849.381511][T22583] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3958'.
[  849.933261][T22595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3961'.
[  849.985116][T22600] netlink: 'syz.5.3961': attribute type 3 has an invalid length.
[  850.313080][T22613] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 0, id = 0
[  850.377694][T22599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3963'.
[  850.576067][T22617] netlink: 'syz.5.3966': attribute type 1 has an invalid length.
[  850.629316][T22622] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3966'.
[  850.835973][T22624] netlink: 'syz.1.3968': attribute type 13 has an invalid length.
[  850.876267][T22624] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3968'.
[  851.113694][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3971'.
[  851.461198][T22632] batadv0: entered promiscuous mode
[  851.483064][T22632] 8021q: adding VLAN 0 to HW filter on device macsec1
[  851.545756][T22645] netlink: 272 bytes leftover after parsing attributes in process `syz.3.3972'.
[  851.658509][T22650] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  851.706182][T22650] syzkaller0: entered promiscuous mode
[  851.735255][T22650] syzkaller0: entered allmulticast mode
[  851.994181][T22650] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3974'.
[  852.039068][T22649] tipc: Resetting bearer <eth:syzkaller0>
[  852.134249][T22649] tipc: Disabling bearer <eth:syzkaller0>
[  853.104310][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3987'.
[  853.143284][T22688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3987'.
[  853.389137][T22694] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3989'.
[  855.743256][T22752] netlink: 'syz.3.4002': attribute type 9 has an invalid length.
[  855.751785][T22752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4002'.
[  856.670235][T22765] netlink: 'syz.3.4006': attribute type 32 has an invalid length.
[  856.678160][T22765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4006'.
[  856.713363][T22765] bond3: option coupled_control: invalid value (255)
[  856.719752][T22717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  856.733385][T22765] bond3 (unregistering): Released all slaves
[  857.105649][T22772] FAULT_INJECTION: forcing a failure.
[  857.105649][T22772] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  857.175521][T22772] CPU: 0 UID: 0 PID: 22772 Comm: syz.2.4008 Not tainted syzkaller #0 PREEMPT(full) 
[  857.175553][T22772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  857.175581][T22772] Call Trace:
[  857.175667][T22772]  <TASK>
[  857.175773][T22772]  dump_stack_lvl+0xe8/0x150
[  857.175942][T22772]  should_fail_ex+0x40c/0x560
[  857.176068][T22772]  _copy_from_iter+0x1d3/0x1660
[  857.176146][T22772]  ? kmem_cache_alloc_node_noprof+0x1a1/0x610
[  857.176236][T22772]  ? rcu_is_watching+0x15/0xb0
[  857.176298][T22772]  ? trace_kmem_cache_alloc+0x29/0xe0
[  857.176327][T22772]  ? kmem_cache_alloc_node_noprof+0x3b8/0x610
[  857.176354][T22772]  ? __pfx__copy_from_iter+0x10/0x10
[  857.176383][T22772]  ? __alloc_skb+0x276/0x7a0
[  857.176481][T22772]  ? __alloc_skb+0x276/0x7a0
[  857.176522][T22772]  ? netlink_sendmsg+0x650/0xb40
[  857.176591][T22772]  ? skb_put+0x112/0x210
[  857.176651][T22772]  netlink_sendmsg+0x6c0/0xb40
[  857.176692][T22772]  ? __pfx_netlink_sendmsg+0x10/0x10
[  857.176721][T22772]  ? aa_sock_msg_perm+0xf1/0x1b0
[  857.176801][T22772]  ? __pfx_netlink_sendmsg+0x10/0x10
[  857.176823][T22772]  sock_sendmsg_nosec+0x13a/0x180
[  857.176884][T22772]  ____sys_sendmsg+0x54e/0x850
[  857.176949][T22772]  ? __pfx_____sys_sendmsg+0x10/0x10
[  857.176995][T22772]  ? import_iovec+0x73/0xa0
[  857.177032][T22772]  ___sys_sendmsg+0x2a5/0x360
[  857.177070][T22772]  ? __lock_acquire+0x683/0x2cf0
[  857.177113][T22772]  ? __pfx____sys_sendmsg+0x10/0x10
[  857.177188][T22772]  ? __fget_files+0x2a/0x420
[  857.177234][T22772]  ? __fget_files+0x3a2/0x420
[  857.177276][T22772]  __x64_sys_sendmsg+0x1b1/0x290
[  857.177314][T22772]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  857.177370][T22772]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.177413][T22772]  do_syscall_64+0x174/0x580
[  857.177506][T22772]  ? trace_irq_disable+0x3b/0x140
[  857.177552][T22772]  ? clear_bhb_loop+0x40/0x90
[  857.177579][T22772]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  857.177602][T22772] RIP: 0033:0x7fc54959de99
[  857.177632][T22772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  857.177652][T22772] RSP: 002b:00007fc54a3b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  857.177715][T22772] RAX: ffffffffffffffda RBX: 00007fc549825fa0 RCX: 00007fc54959de99
[  857.177732][T22772] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004
[  857.177746][T22772] RBP: 00007fc54a3b7090 R08: 0000000000000000 R09: 0000000000000000
[  857.177760][T22772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  857.177773][T22772] R13: 00007fc549826038 R14: 00007fc549825fa0 R15: 00007ffcb4cbac28
[  857.177810][T22772]  </TASK>
[  857.793588][T22779] tipc: Started in network mode
[  857.798542][T22779] tipc: Node identity ac1414aa, cluster identity 4711
[  857.835854][T22779] tipc: Enabled bearer <udp:s>, priority 10
[  858.007560][T22787] x_tables: duplicate underflow at hook 1
[  858.073307][   T30] audit: type=1804 audit(1784422878.243:7): pid=22786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4013" name="/newroot/15/cgroup.controllers" dev="tmpfs" ino=100 res=1 errno=0
[  858.176914][   T30] audit: type=1800 audit(1784422878.243:8): pid=22786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4013" name="cgroup.controllers" dev="tmpfs" ino=100 res=0 errno=0
[  858.258835][T22790] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4014'.
[  858.964899][T22142] tipc: Node number set to 2886997162
[  859.137365][T22820] FAULT_INJECTION: forcing a failure.
[  859.137365][T22820] name failslab, interval 1, probability 0, space 0, times 1
[  859.177519][T22820] CPU: 0 UID: 0 PID: 22820 Comm: syz.5.4022 Not tainted syzkaller #0 PREEMPT(full) 
[  859.177561][T22820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  859.177575][T22820] Call Trace:
[  859.177583][T22820]  <TASK>
[  859.177593][T22820]  dump_stack_lvl+0xe8/0x150
[  859.177633][T22820]  should_fail_ex+0x40c/0x560
[  859.177665][T22820]  should_failslab+0xa8/0x100
[  859.177739][T22820]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  859.177769][T22820]  ? skb_clone+0x212/0x3a0
[  859.177790][T22820]  ? skb_clone+0x212/0x3a0
[  859.177824][T22820]  skb_clone+0x212/0x3a0
[  859.177850][T22820]  __netlink_deliver_tap+0x413/0x860
[  859.177888][T22820]  ? netlink_deliver_tap+0x2e/0x1b0
[  859.177913][T22820]  netlink_deliver_tap+0x19c/0x1b0
[  859.177936][T22820]  netlink_unicast+0x77f/0x940
[  859.177982][T22820]  netlink_sendmsg+0x813/0xb40
[  859.178016][T22820]  ? __pfx_netlink_sendmsg+0x10/0x10
[  859.178047][T22820]  ? aa_sock_msg_perm+0xf1/0x1b0
[  859.178077][T22820]  ? __pfx_netlink_sendmsg+0x10/0x10
[  859.178099][T22820]  sock_sendmsg_nosec+0x13a/0x180
[  859.178130][T22820]  ____sys_sendmsg+0x54e/0x850
[  859.178172][T22820]  ? __pfx_____sys_sendmsg+0x10/0x10
[  859.178223][T22820]  ? import_iovec+0x73/0xa0
[  859.178261][T22820]  ___sys_sendmsg+0x2a5/0x360
[  859.178295][T22820]  ? __lock_acquire+0x683/0x2cf0
[  859.178331][T22820]  ? __pfx____sys_sendmsg+0x10/0x10
[  859.178408][T22820]  ? __fget_files+0x2a/0x420
[  859.178437][T22820]  ? __fget_files+0x3a2/0x420
[  859.178484][T22820]  __x64_sys_sendmsg+0x1b1/0x290
[  859.178524][T22820]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  859.178614][T22820]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.178640][T22820]  do_syscall_64+0x174/0x580
[  859.178672][T22820]  ? trace_irq_disable+0x3b/0x140
[  859.178700][T22820]  ? clear_bhb_loop+0x40/0x90
[  859.178729][T22820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  859.178751][T22820] RIP: 0033:0x7f4dd359de99
[  859.178772][T22820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  859.178791][T22820] RSP: 002b:00007f4dd446e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  859.178815][T22820] RAX: ffffffffffffffda RBX: 00007f4dd3825fa0 RCX: 00007f4dd359de99
[  859.178831][T22820] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004
[  859.178845][T22820] RBP: 00007f4dd446e090 R08: 0000000000000000 R09: 0000000000000000
[  859.178859][T22820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  859.178872][T22820] R13: 00007f4dd3826038 R14: 00007f4dd3825fa0 R15: 00007ffeeee10da8
[  859.178908][T22820]  </TASK>
[  859.688924][T22833] netlink: 'syz.3.4024': attribute type 3 has an invalid length.
[  859.699782][T22833] netlink: 'syz.3.4024': attribute type 3 has an invalid length.
[  859.715150][T22834] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4025'.
[  860.043770][T22836] bridge0: port 2(bridge_slave_1) entered disabled state
[  860.051680][T22836] bridge0: port 1(bridge_slave_0) entered disabled state
[  860.149756][T22836] bridge0: entered allmulticast mode
[  860.278598][T22850] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4029'.
[  860.971564][T22866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4033'.
[  861.188155][T22875] netlink: 'syz.1.4035': attribute type 1 has an invalid length.
[  861.219511][T22866] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4033'.
[  861.263862][T22878] x_tables: duplicate underflow at hook 1
[  861.569227][T22885] netlink: 'syz.2.4037': attribute type 1 has an invalid length.
[  861.799229][T22885] 8021q: adding VLAN 0 to HW filter on device bond5
[  861.818416][T22885] bond4: (slave bond5): making interface the new active one
[  861.838020][T22885] bond4: (slave bond5): Enslaving as an active interface with an up link
[  861.871901][T22895] bond4: (slave gretap1): Enslaving as a backup interface with an up link
[  861.933562][T22885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4037'.
[  861.967421][T22885] 8021q: adding VLAN 0 to HW filter on device bond4
[  861.982788][T22900] netlink: 'syz.5.4041': attribute type 1 has an invalid length.
[  861.996425][T22900] netlink: 64851 bytes leftover after parsing attributes in process `syz.5.4041'.
[  862.195280][T22904] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4042'.
[  862.614198][T22919] FAULT_INJECTION: forcing a failure.
[  862.614198][T22919] name failslab, interval 1, probability 0, space 0, times 0
[  862.674831][T22919] CPU: 0 UID: 0 PID: 22919 Comm: syz.0.4047 Not tainted syzkaller #0 PREEMPT(full) 
[  862.674863][T22919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  862.674876][T22919] Call Trace:
[  862.674885][T22919]  <TASK>
[  862.674894][T22919]  dump_stack_lvl+0xe8/0x150
[  862.674934][T22919]  should_fail_ex+0x40c/0x560
[  862.674968][T22919]  should_failslab+0xa8/0x100
[  862.675004][T22919]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  862.675031][T22919]  ? local_lock_release+0x9c/0x160
[  862.675064][T22919]  ? __alloc_skb+0x1d7/0x7a0
[  862.675093][T22919]  ? __alloc_skb+0x1d7/0x7a0
[  862.675131][T22919]  __alloc_skb+0x1d7/0x7a0
[  862.675167][T22919]  netlink_ack+0x136/0xb30
[  862.675223][T22919]  netlink_rcv_skb+0x2a4/0x4a0
[  862.675260][T22919]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  862.675414][T22919]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  862.675462][T22919]  ? bpf_lsm_capable+0x9/0x20
[  862.675509][T22919]  ? security_capable+0x7e/0x2c0
[  862.675611][T22919]  nfnetlink_rcv+0x2b9/0x28c0
[  862.675648][T22919]  ? __dev_queue_xmit+0x29b/0x37f0
[  862.675701][T22919]  ? __local_bh_enable_ip+0xd0/0x130
[  862.675744][T22919]  ? lockdep_hardirqs_on+0x7a/0x110
[  862.675812][T22919]  ? __dev_queue_xmit+0x29b/0x37f0
[  862.675834][T22919]  ? __local_bh_enable_ip+0xd0/0x130
[  862.675861][T22919]  ? __dev_queue_xmit+0x29b/0x37f0
[  862.675883][T22919]  ? __dev_queue_xmit+0x1ed7/0x37f0
[  862.675905][T22919]  ? do_syscall_64+0x174/0x580
[  862.675936][T22919]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.675972][T22919]  ? __dev_queue_xmit+0x29b/0x37f0
[  862.675997][T22919]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  862.676037][T22919]  ? __pfx___dev_queue_xmit+0x10/0x10
[  862.676068][T22919]  ? ref_tracker_free+0x689/0x830
[  862.676142][T22919]  ? __pfx_ref_tracker_free+0x10/0x10
[  862.676180][T22919]  ? __skb_clone+0x449/0x6c0
[  862.676209][T22919]  ? skb_clone+0x246/0x3a0
[  862.676234][T22919]  ? __netlink_deliver_tap+0x811/0x860
[  862.676256][T22919]  ? netlink_deliver_tap+0x2e/0x1b0
[  862.676284][T22919]  ? netlink_deliver_tap+0x2e/0x1b0
[  862.676306][T22919]  ? netlink_deliver_tap+0x2e/0x1b0
[  862.676334][T22919]  netlink_unicast+0x7bb/0x940
[  862.676380][T22919]  netlink_sendmsg+0x813/0xb40
[  862.676414][T22919]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.676443][T22919]  ? aa_sock_msg_perm+0xf1/0x1b0
[  862.676472][T22919]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.676493][T22919]  sock_sendmsg_nosec+0x13a/0x180
[  862.676525][T22919]  ____sys_sendmsg+0x54e/0x850
[  862.676568][T22919]  ? __pfx_____sys_sendmsg+0x10/0x10
[  862.676613][T22919]  ? import_iovec+0x73/0xa0
[  862.676656][T22919]  ___sys_sendmsg+0x2a5/0x360
[  862.676689][T22919]  ? __lock_acquire+0x683/0x2cf0
[  862.676725][T22919]  ? __pfx____sys_sendmsg+0x10/0x10
[  862.676809][T22919]  ? __fget_files+0x2a/0x420
[  862.676839][T22919]  ? __fget_files+0x3a2/0x420
[  862.676878][T22919]  __x64_sys_sendmsg+0x1b1/0x290
[  862.676916][T22919]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  862.676970][T22919]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.676995][T22919]  do_syscall_64+0x174/0x580
[  862.677035][T22919]  ? clear_bhb_loop+0x40/0x90
[  862.677068][T22919]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.677089][T22919] RIP: 0033:0x7f9b37b9de99
[  862.677110][T22919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  862.677128][T22919] RSP: 002b:00007f9b38996028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  862.677151][T22919] RAX: ffffffffffffffda RBX: 00007f9b37e25fa0 RCX: 00007f9b37b9de99
[  862.677168][T22919] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000004
[  862.677181][T22919] RBP: 00007f9b38996090 R08: 0000000000000000 R09: 0000000000000000
[  862.677195][T22919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  862.677207][T22919] R13: 00007f9b37e26038 R14: 00007f9b37e25fa0 R15: 00007ffef1624168
[  862.677243][T22919]  </TASK>
[  863.496399][T22932] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002
[  863.602182][T22938] xt_hashlimit: size too large, truncated to 1048576
[  863.690280][T22943] netlink: 'syz.3.4055': attribute type 1 has an invalid length.
[  863.716265][T22943] netlink: 'syz.3.4055': attribute type 1 has an invalid length.
[  864.112065][T22951] syzkaller0: entered promiscuous mode
[  864.139980][T22951] syzkaller0: entered allmulticast mode
[  864.685546][T22966] netlink: 'syz.2.4061': attribute type 1 has an invalid length.
[  864.707370][T22966] netlink: 756 bytes leftover after parsing attributes in process `syz.2.4061'.
[  864.834459][T22961] pim6reg: entered allmulticast mode
[  865.007798][T22973] netlink: 388 bytes leftover after parsing attributes in process `syz.0.4064'.
[  865.197633][T22982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4065'.
[  865.278274][T22986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4067'.
[  865.353228][T22990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4067'.
[  865.519023][T17394] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  865.555034][T17394] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  865.590917][T17394] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  865.609480][T17394] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  865.752537][T22995] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4069'.
[  865.812806][T22997] netlink: 'syz.1.4070': attribute type 1 has an invalid length.
[  866.412422][T23014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4076'.
[  866.675596][T23012] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  866.703715][T23012] bond4 (unregistering): Released all slaves
[  866.891068][T23021] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  866.935825][T23021] bond4 (unregistering): Released all slaves
[  867.602425][T23064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4088'.
[  867.962943][T23070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4091'.
[  868.137866][T23070] macvtap1: entered allmulticast mode
[  868.253042][T23086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4095'.
[  868.266327][T23086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4095'.
[  868.408958][T23090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4096'.
[  868.418629][T23090] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4096'.
[  869.244693][T23094] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4097'.
[  869.259858][T23094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4097'.
[  869.272263][T23094] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4097'.
[  869.282896][T23094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4097'.
[  869.413581][T23097] netlink: 'syz.1.4098': attribute type 8 has an invalid length.
[  869.440599][T23097] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20004
[  870.207078][ T1319] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  870.358489][T23050] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  870.680628][T23103] netlink: 'syz.1.4100': attribute type 1 has an invalid length.
[  870.958658][T23103] 8021q: adding VLAN 0 to HW filter on device bond4
[  871.174462][T23108] bond4: (slave veth5): Enslaving as an active interface with a down link
[  871.307247][T23117] 8021q: adding VLAN 0 to HW filter on device batadv1
[  871.370419][T23117] bond4: (slave batadv1): making interface the new active one
[  871.415527][T23117] batadv1: entered promiscuous mode
[  871.423057][T23117] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  871.965586][T23147] netlink: 'syz.0.4110': attribute type 9 has an invalid length.
[  872.525243][T23158] netlink: 'syz.5.4114': attribute type 1 has an invalid length.
[  873.326720][T23170] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6
[  873.904129][T23165] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  873.939212][T23165] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  874.008597][T23184] x_tables: ip_tables: icmp match: only valid for protocol 1
[  874.327561][T23192] erspan0: entered promiscuous mode
[  874.345818][T23192] erspan0: entered allmulticast mode
[  874.409181][T23195] bond4 (unregistering): Released all slaves
[  875.293285][T23223] __nla_validate_parse: 2 callbacks suppressed
[  875.293330][T23223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4131'.
[  875.876335][T23232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4134'.
[  875.897592][T23237] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4135'.
[  875.910219][T23234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4134'.
[  882.530923][   T48] batadv1: left promiscuous mode
[  912.286203][T23256] team0: Port device syz_tun added
[  912.562548][T17397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  912.577792][T17397] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  912.593923][T17397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  912.604365][T17397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  912.615480][T17397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  912.625375][T23272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4144'.
[  912.697072][T23260] bond4: entered promiscuous mode
[  912.712205][T23260] bond4: entered allmulticast mode
[  912.719232][T23260] 8021q: adding VLAN 0 to HW filter on device bond4
[  912.740170][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  912.752062][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  912.762975][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  912.772667][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  912.781574][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  913.357946][T23294] erspan0: mtu less than device minimum
[  913.436925][T23300] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  913.506659][T23302] netlink: 'syz.1.4148': attribute type 4 has an invalid length.
[  913.568805][T23296] veth13: entered allmulticast mode
[  913.727224][T23307] netlink: 7 bytes leftover after parsing attributes in process `syz.2.4149'.
[  913.915525][T23315] ip6tnl1: entered allmulticast mode
[  914.061094][T17393] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  914.093846][T22148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  914.102913][T17393] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  914.164000][   T30] audit: type=1107 audit(1784422934.323:9): pid=23323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  914.190584][T23329] netlink: 'syz.2.4152': attribute type 1 has an invalid length.
[  914.553139][T22148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  914.699058][T23339] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4157'.
[  914.709643][T22148] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  914.798627][T23339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4157'.
[  914.840897][T17397] Bluetooth: hci6: command tx timeout
[  915.391764][T23357] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4163'.
[  915.496012][T23367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4160'.
[  915.676330][T23367] bridge0: port 2(bridge_slave_1) entered blocking state
[  915.683638][T23367] bridge0: port 2(bridge_slave_1) entered forwarding state
[  915.691433][T23367] bridge0: port 1(bridge_slave_0) entered blocking state
[  915.698753][T23367] bridge0: port 1(bridge_slave_0) entered forwarding state
[  915.793315][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  915.887635][T23367] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  915.912270][T23371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4165'.
[  915.940670][T23371] nbd: must specify at least one socket
[  916.708969][T23389] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4167'.
[  916.881744][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  916.929695][T17397] Bluetooth: hci6: command tx timeout
[  918.525213][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  919.005655][T17397] Bluetooth: hci6: command tx timeout
[  920.651027][T23393] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4170'.
[  920.694185][T23393] openvswitch: netlink: Flow key attr not present in new flow.
[  920.810155][T23269] bridge0: port 1(bridge_slave_0) entered blocking state
[  920.817637][T23269] bridge0: port 1(bridge_slave_0) entered disabled state
[  920.825353][T23269] bridge_slave_0: entered allmulticast mode
[  920.834224][T23269] bridge_slave_0: entered promiscuous mode
[  920.863716][T23269] bridge0: port 2(bridge_slave_1) entered blocking state
[  920.880614][T23269] bridge0: port 2(bridge_slave_1) entered disabled state
[  920.908279][T23269] bridge_slave_1: entered allmulticast mode
[  920.918296][T23269] bridge_slave_1: entered promiscuous mode
[  921.039114][T23269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  921.063761][T23269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  921.083124][T17397] Bluetooth: hci6: command tx timeout
[  921.120534][T23269] team0: Port device team_slave_0 added
[  921.194051][T23269] team0: Port device team_slave_1 added
[  921.373030][T23269] batman_adv: batadv0: Adding interface: batadv_slave_0
[  921.396003][T23269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  921.422390][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  921.442519][T23269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  921.461804][T23269] batman_adv: batadv0: Adding interface: batadv_slave_1
[  921.468892][T23269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  921.504579][T23429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4179'.
[  921.517687][T23269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  921.870100][T23439] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4181'.
[  921.888837][T23269] hsr_slave_0: entered promiscuous mode
[  921.913469][T23269] hsr_slave_1: entered promiscuous mode
[  921.928726][T23269] debugfs: 'hsr0' already exists in 'hsr'
[  921.944829][T23269] Cannot create hsr debugfs directory
[  922.368738][   T30] audit: type=1800 audit(1784422942.533:10): pid=23454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4185" name="blkio.bfq.time_recursive" dev="tmpfs" ino=329 res=0 errno=0
[  922.413420][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'.
[  922.451994][T23453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4184'.
[  922.484012][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'.
[  922.496041][T23453] netlink: 'syz.0.4184': attribute type 5 has an invalid length.
[  922.498480][T23454] syzkaller0: entered promiscuous mode
[  922.521187][T23454] syzkaller0: entered allmulticast mode
[  922.551999][T23453] netlink: 'syz.0.4184': attribute type 4 has an invalid length.
[  922.603205][T23455] netlink: 'syz.0.4184': attribute type 4 has an invalid length.
[  922.719042][T17398] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  922.729094][T17398] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  922.740950][T17398] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[  922.772973][T23462] netlink: 'syz.1.4188': attribute type 1 has an invalid length.
[  923.126533][T23269] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  923.141219][T23269] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  923.155958][T23474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4191'.
[  923.173095][T23269] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  923.201608][T23269] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  923.258907][T23269] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  923.271681][T23474] netlink: 'syz.1.4191': attribute type 10 has an invalid length.
[  923.306758][T23269] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  923.332866][T23474] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  923.354361][T23474] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  923.393312][T23269] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  923.438629][T23269] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  923.481693][T23482] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4193'.
[  923.630938][T23482] 8021q: adding VLAN 0 to HW filter on device bond1
[  924.023521][T23269] 8021q: adding VLAN 0 to HW filter on device bond0
[  924.073945][T23269] 8021q: adding VLAN 0 to HW filter on device team0
[  924.105977][T19115] bridge0: port 1(bridge_slave_0) entered blocking state
[  924.113278][T19115] bridge0: port 1(bridge_slave_0) entered forwarding state
[  924.158074][T19115] bridge0: port 2(bridge_slave_1) entered blocking state
[  924.165372][T19115] bridge0: port 2(bridge_slave_1) entered forwarding state
[  925.638751][T23537] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4205'.
[  925.642117][T17397] Bluetooth: hci6: command tx timeout
[  926.268936][T23561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4210'.
[  926.298211][T23561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4210'.
[  926.383522][T23269] 8021q: adding VLAN 0 to HW filter on device batadv0
[  927.799974][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  927.938482][T23616] syzkaller1: tun_chr_ioctl cmd 1074025677
[  927.945407][T23616] syzkaller1: linktype set to 769
[  927.954412][T23269] veth0_vlan: entered promiscuous mode
[  928.016262][T23269] veth1_vlan: entered promiscuous mode
[  928.076291][T23269] veth0_macvtap: entered promiscuous mode
[  928.093268][T23269] veth1_macvtap: entered promiscuous mode
[  928.104165][T23619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4223'.
[  928.121797][T23619] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4223'.
[  928.134622][T23619] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4223'.
[  928.194563][T23269] batman_adv: batadv0: Interface activated: batadv_slave_0
[  928.239286][T23269] batman_adv: batadv0: Interface activated: batadv_slave_1
[  928.266100][T17398] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  928.277376][T17398] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  928.314318][T17398] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  928.323341][T17398] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  930.185142][T23598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  930.817987][T17393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  930.837813][T17393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  930.862859][T23670] netlink: 'syz.5.4237': attribute type 10 has an invalid length.
[  930.906234][T23670] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4237'.
[  930.936744][T23663] bond5: ARP target 9.0.0.0 is already present
[  930.946586][T23663] bond5: option arp_ip_target: invalid value (9)
[  930.956359][T23663] bond5 (unregistering): Released all slaves
[  931.332627][T17394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  931.370239][T17394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  931.526647][T23677] syzkaller0: entered promiscuous mode
[  931.534419][T23677] syzkaller0: entered allmulticast mode
[  931.653243][ T1319] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  931.711942][T23680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  931.744487][T23692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4243'.
[  931.763506][T23675] tipc: Resetting bearer <eth:syzkaller0>
[  931.852710][T23696] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4243'.
[  932.959243][T23708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4245'.
[  936.252898][T23675] tipc: Disabling bearer <eth:syzkaller0>
[  936.265946][T23692] lo speed is unknown, defaulting to 1000
[  936.290304][T23692] lo speed is unknown, defaulting to 1000
[  936.334411][T23692] lo speed is unknown, defaulting to 1000
[  936.381779][T23692] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  936.466381][T23692] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  936.554214][T23692] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  936.587787][T23722] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4247'.
[  936.649903][T23722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4247'.
[  936.660375][T23724] netlink: 'syz.6.4142': attribute type 2 has an invalid length.
[  936.682334][T23692] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  936.704187][T23724] netlink: 'syz.6.4142': attribute type 2 has an invalid length.
[  936.824743][T23736] netlink: 'syz.0.4250': attribute type 1 has an invalid length.
[  936.891738][T23692] lo speed is unknown, defaulting to 1000
[  936.899037][T23736] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  936.902653][T23692] lo speed is unknown, defaulting to 1000
[  936.936289][T23692] lo speed is unknown, defaulting to 1000
[  936.975550][T23692] lo speed is unknown, defaulting to 1000
[  937.006458][T23692] lo speed is unknown, defaulting to 1000
[  937.047053][T23692] lo speed is unknown, defaulting to 1000
[  937.076285][T23692] lo speed is unknown, defaulting to 1000
[  937.174165][T23692] lo speed is unknown, defaulting to 1000
[  937.185028][T23692] lo speed is unknown, defaulting to 1000
[  937.221574][T23692] lo speed is unknown, defaulting to 1000
[  937.396756][T23692] lo speed is unknown, defaulting to 1000
[  937.410305][T23692] lo speed is unknown, defaulting to 1000
[  937.771348][T23770] netlink: 'syz.6.4259': attribute type 8 has an invalid length.
[  937.795459][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4259'.
[  937.837471][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4259'.
[  937.928469][T23782] netlink: 388 bytes leftover after parsing attributes in process `syz.0.4260'.
[  937.945545][T23770] netlink: 'syz.6.4259': attribute type 8 has an invalid length.
[  937.956210][   T63] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  937.974279][T23770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4259'.
[  937.983446][   T63] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  937.983493][   T63] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  937.983532][   T63] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  938.269106][T23785] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4262'.
[  938.455684][T23791] x_tables: duplicate underflow at hook 2
[  938.456278][T23793] netlink: 'syz.0.4265': attribute type 1 has an invalid length.
[  938.534464][T23793] bond5: entered promiscuous mode
[  938.666322][T23793] 8021q: adding VLAN 0 to HW filter on device bond5
[  938.798634][T23793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4265'.
[  938.837204][T23793] bond5: entered allmulticast mode
[  939.141775][T23797] bond5: (slave bridge2): making interface the new active one
[  939.308306][T23797] bridge2: entered promiscuous mode
[  939.388402][T23797] bridge2: entered allmulticast mode
[  939.518781][T23797] bond5: (slave bridge2): Enslaving as an active interface with an up link
[  939.644128][T23805] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  939.900371][T23832] bridge1: entered promiscuous mode
[  939.929551][T23832] bridge1: entered allmulticast mode
[  939.959013][T23832] team0: Port device bridge1 added
[  939.990475][T23844] netlink: 'syz.6.4272': attribute type 46 has an invalid length.
[  940.054018][T23838] bridge0: port 3(team0) entered blocking state
[  940.098337][T23838] bridge0: port 3(team0) entered disabled state
[  940.133165][T23838] team0: entered allmulticast mode
[  940.139158][T23838] team_slave_0: entered allmulticast mode
[  940.150839][T23838] team_slave_1: entered allmulticast mode
[  940.176879][T23838] team0: entered promiscuous mode
[  940.185276][T23838] team_slave_0: entered promiscuous mode
[  940.194244][T23849] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  940.195634][T23838] team_slave_1: entered promiscuous mode
[  940.214895][T23838] bridge0: port 3(team0) entered blocking state
[  940.223297][T23838] bridge0: port 3(team0) entered forwarding state
[  940.949154][T23884] netlink: 'syz.5.4278': attribute type 1 has an invalid length.
[  941.243186][T23890] veth2: entered allmulticast mode
[  941.283051][T23890] veth3: entered allmulticast mode
[  941.308894][T23890] bond2: (slave veth3): Enslaving as an active interface with a down link
[  941.395168][T23884] netlink: 260 bytes leftover after parsing attributes in process `syz.5.4278'.
[  941.409031][T23902] bond2: (slave veth0_to_bond): making interface the new active one
[  941.516312][T23902] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  941.661507][T23904] bond2: (slave veth0_to_bond): Releasing active interface
[  941.988679][T23906] lo speed is unknown, defaulting to 1000
[  942.108467][T23913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4284'.
[  942.182537][T10299] IPVS: starting estimator thread 0...
[  942.290708][T23921] IPVS: using max 26 ests per chain, 62400 per kthread
[  942.349015][T23923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4286'.
[  942.586452][T23923] bond0: (slave bond_slave_1): Releasing backup interface
[  943.105669][T23938] netlink: 'syz.2.4289': attribute type 1 has an invalid length.
[  943.115374][T23938] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4289'.
[  943.206934][T23906] dvmrp0: entered allmulticast mode
[  943.806435][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4290'.
[  943.960029][T23953] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4293'.
[  944.035990][T23951] syzkaller1: entered promiscuous mode
[  944.060634][T23951] syzkaller1: entered allmulticast mode
[  944.180850][T23960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4294'.
[  944.275636][T23961] wlan0 speed is unknown, defaulting to 1000
[  944.295917][T23961] wlan0 speed is unknown, defaulting to 1000
[  944.318681][T23961] wlan0 speed is unknown, defaulting to 1000
[  944.344468][T23966] netlink: 'syz.6.4295': attribute type 44 has an invalid length.
[  944.377216][T23961] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  944.453356][T23961] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  944.498970][T23961] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  944.595399][T23961] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  945.165339][T23979] bridge0: entered allmulticast mode
[  945.206190][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.283171][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.337405][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.374578][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.422819][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.470093][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.503628][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.532896][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.568315][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.587564][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.610323][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.625486][T23998] x_tables: duplicate underflow at hook 2
[  945.636504][T24000] 8021q: VLANs not supported on gre0
[  945.645744][T23961] wlan0 speed is unknown, defaulting to 1000
[  945.719715][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  945.822475][T24002] netlink: 11 bytes leftover after parsing attributes in process `syz.2.4305'.
[  945.865238][T24004] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4306'.
[  945.944892][T24007] netlink: 'syz.5.4307': attribute type 5 has an invalid length.
[  945.977930][T24004] gretap0: entered promiscuous mode
[  946.016418][T24004] vlan2: entered promiscuous mode
[  946.656555][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4313'.
[  946.672048][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4313'.
[  946.735141][T24031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4313'.
[  947.693845][T24051] bridge_slave_0: left allmulticast mode
[  947.722999][T24051] bridge_slave_0: left promiscuous mode
[  947.746258][T24051] bridge0: port 1(bridge_slave_0) entered disabled state
[  947.867007][T24051] bridge_slave_1: left allmulticast mode
[  947.910854][T24051] bridge_slave_1: left promiscuous mode
[  947.941190][T24051] bridge0: port 2(bridge_slave_1) entered disabled state
[  948.028038][T24051] bond0: (slave bond_slave_0): Releasing backup interface
[  948.191037][T24051] bond0: (slave bond_slave_1): Releasing backup interface
[  948.338418][T24051] team0: Port device team_slave_0 removed
[  948.473032][T24051] team0: Port device team_slave_1 removed
[  948.512519][T24051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  948.546108][T24051] batman_adv: batadv0: Removing interface: batadv_slave_0
[  948.623318][T24051] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  948.653665][T24051] batman_adv: batadv0: Removing interface: batadv_slave_1
[  948.687180][T24051] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  948.727949][T24060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4321'.
[  948.780417][T24064] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4321'.
[  949.388215][T24090] syzkaller0: entered promiscuous mode
[  949.399636][T24090] syzkaller0: entered allmulticast mode
[  949.473497][T24096] sctp: [Deprecated]: syz.6.4327 (pid 24096) Use of struct sctp_assoc_value in delayed_ack socket option.
[  949.473497][T24096] Use struct sctp_sack_info instead
[  950.081708][T24102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4330'.
[  950.338270][T24104] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4331'.
[  951.386812][T24118] lo speed is unknown, defaulting to 1000
[  951.423952][T23721] udevd[23721]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  951.461969][T23718] udevd[23718]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  951.524322][T24118] wlan0 speed is unknown, defaulting to 1000
[  951.895792][T24142] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  952.568724][T24155] x_tables: duplicate entry at hook 3
[  952.611699][T24156] netlink: 'syz.6.4344': attribute type 2 has an invalid length.
[  952.637115][T24156] netlink: 'syz.6.4344': attribute type 8 has an invalid length.
[  952.665490][T24152] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4343'.
[  952.674887][T24156] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4344'.
[  952.903624][T24154] netlink: 'syz.6.4344': attribute type 2 has an invalid length.
[  952.972172][T24154] netlink: 'syz.6.4344': attribute type 8 has an invalid length.
[  953.000655][T24154] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4344'.
[  953.603147][T24175] syzkaller0: entered promiscuous mode
[  953.628666][T24175] syzkaller0: entered allmulticast mode
[  954.066958][T24187] netlink: 'syz.0.4350': attribute type 12 has an invalid length.
[  954.109567][T24187] netlink: 'syz.0.4350': attribute type 29 has an invalid length.
[  954.132872][T24187] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4350'.
[  954.215584][T24190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4351'.
[  954.493784][T24200] netlink: 'syz.0.4353': attribute type 12 has an invalid length.
[  954.507540][T24200] netlink: 'syz.0.4353': attribute type 29 has an invalid length.
[  954.517941][T24200] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4353'.
[  954.686988][T24206] netlink: 'syz.1.4354': attribute type 2 has an invalid length.
[  954.836020][T24208] IPVS: Unknown mcast interface: macsec0
[  955.014061][T24210] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4355'.
[  955.027750][T24210] bond0: option arp_validate: invalid value (18446744073433185929)
[  955.563195][T24224] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.618277][T24224] bridge_slave_0 (unregistering): left allmulticast mode
[  955.660849][T24224] bridge_slave_0 (unregistering): left promiscuous mode
[  955.693850][T24224] bridge0: port 1(bridge_slave_0) entered disabled state
[  955.914117][T24240] netlink: 'syz.1.4364': attribute type 21 has an invalid length.
[  955.932602][T24240] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4364'.
[  955.991996][T24242] netdevsim netdevsim2 
€Â: renamed from netdevsim0 (while UP)
[  956.117318][T24242] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4365'.
[  956.614335][T24258] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) !
[  956.662711][T24258] syzkaller0: entered promiscuous mode
[  956.684939][T24258] syzkaller0: entered allmulticast mode
[  956.830070][T24269] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20003
[  956.882714][T24271] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4376'.
[  957.183015][T24278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4379'.
[  957.491964][T24287] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4381'.
[  957.516748][T24287] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4381'.
[  957.550558][T24287] tipc: Invalid UDP bearer configuration
[  957.550623][T24287] tipc: Enabling of bearer <udp:sy{±> rejected, failed to enable media
[  957.885388][T24289] 8021q: adding VLAN 0 to HW filter on device bond5
[  957.946779][T24300] xt_recent: Unsupported userspace flags (000000c5)
[  958.097496][T24302] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode
[  958.144366][T24302] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode
[  958.186910][T24302] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  959.198460][T24329] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001
[  959.362464][T24331] openvswitch: netlink: Missing key (keys=40, expected=100)
[  959.605053][T24341] __nla_validate_parse: 2 callbacks suppressed
[  959.605092][T24341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4399'.
[  959.642737][T24341] netlink: 'syz.1.4399': attribute type 7 has an invalid length.
[  959.659352][T24341] netlink: 'syz.1.4399': attribute type 8 has an invalid length.
[  959.676720][T24341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4399'.
[  960.283824][ T6944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  960.670832][T24375] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4409'.
[  961.206014][T24390] FAULT_INJECTION: forcing a failure.
[  961.206014][T24390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  961.229415][T24390] CPU: 1 UID: 0 PID: 24390 Comm: syz.6.4410 Not tainted syzkaller #0 PREEMPT(full) 
[  961.229446][T24390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  961.229460][T24390] Call Trace:
[  961.229469][T24390]  <TASK>
[  961.229478][T24390]  dump_stack_lvl+0xe8/0x150
[  961.229521][T24390]  should_fail_ex+0x40c/0x560
[  961.229554][T24390]  _copy_from_user+0x2d/0xb0
[  961.229674][T24390]  ___sys_sendmsg+0x1c6/0x360
[  961.229710][T24390]  ? __lock_acquire+0x683/0x2cf0
[  961.229747][T24390]  ? __pfx____sys_sendmsg+0x10/0x10
[  961.229820][T24390]  ? __fget_files+0x2a/0x420
[  961.229850][T24390]  ? __fget_files+0x3a2/0x420
[  961.229889][T24390]  __x64_sys_sendmsg+0x1b1/0x290
[  961.229927][T24390]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  961.229989][T24390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.230015][T24390]  do_syscall_64+0x174/0x580
[  961.230048][T24390]  ? trace_irq_disable+0x3b/0x140
[  961.230077][T24390]  ? clear_bhb_loop+0x40/0x90
[  961.230104][T24390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  961.230127][T24390] RIP: 0033:0x7ff5dc39de99
[  961.230148][T24390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  961.230168][T24390] RSP: 002b:00007ff5dd1ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  961.230192][T24390] RAX: ffffffffffffffda RBX: 00007ff5dc625fa0 RCX: 00007ff5dc39de99
[  961.230208][T24390] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006
[  961.230222][T24390] RBP: 00007ff5dd1ce090 R08: 0000000000000000 R09: 0000000000000000
[  961.230236][T24390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  961.230249][T24390] R13: 00007ff5dc626038 R14: 00007ff5dc625fa0 R15: 00007ffe728d94c8
[  961.230284][T24390]  </TASK>
[  961.433960][T22133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  961.442123][T22133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  961.681602][T24404] macvlan0: mtu less than device minimum
[  962.028491][T24423] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4422'.
[  962.054558][T24415] syzkaller0: entered promiscuous mode
[  962.060206][T24415] syzkaller0: entered allmulticast mode
[  962.449417][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.464143][T22133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  962.473198][T22133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  963.571024][ T6944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  964.687375][ T6944] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.490195][T22143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.735312][T24428] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4423'.
[  965.761907][T24440] netlink: 'syz.6.4427': attribute type 4 has an invalid length.
[  965.816609][T22061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  965.970633][T24446] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4428'.
[  966.070592][T24450] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4429'.
[  966.321046][T24466] pimreg: entered allmulticast mode
[  966.327945][T24465] pimreg: left allmulticast mode
[  966.510348][T24474] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  966.640514][T24482] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4438'.
[  966.676184][T24482] bond0: (slave bond_slave_1): Releasing backup interface
[  966.895008][T24498] sctp: [Deprecated]: syz.2.4442 (pid 24498) Use of struct sctp_assoc_value in delayed_ack socket option.
[  966.895008][T24498] Use struct sctp_sack_info instead
[  966.939965][T22133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  966.981527][T24503] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4443'.
[  967.297030][T24514] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4446'.
[  967.747004][T24542] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4450'.
[  967.756177][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4450'.
[  967.765780][T24542] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4450'.
[  967.782141][T24543] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4450'.
[  968.044889][T22061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  968.176470][T22143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  968.540244][T22143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  968.634133][T24589] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  969.188707][T22133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  969.332319][T24621] lo speed is unknown, defaulting to 1000
[  969.346404][T24621] wlan0 speed is unknown, defaulting to 1000
[  969.564417][T24640] netlink: 'syz.6.4476': attribute type 1 has an invalid length.
[  969.578746][T24640] netlink: 'syz.6.4476': attribute type 2 has an invalid length.
[  969.684080][T24642] bond8: entered promiscuous mode
[  969.692184][T24642] bond8: entered allmulticast mode
[  969.697905][T24642] 8021q: adding VLAN 0 to HW filter on device bond8
[  969.711039][T24628] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  969.998245][T24655] batman_adv: batadv0: Adding interface: macsec2
[  970.004714][T24655] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  970.030712][T24655] batman_adv: batadv0: Not using interface macsec2 (retrying later): interface not active
[  970.217907][T24668] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  970.311478][T22061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  970.659703][T24691] netlink: 'syz.2.4485': attribute type 8 has an invalid length.
[  970.674010][T24691] bond0: entered promiscuous mode
[  970.679120][T24691] bond_slave_0: entered promiscuous mode
[  970.700894][T24691] gretap0: entered promiscuous mode
[  970.707872][T24691] team0: entered promiscuous mode
[  970.712988][T24691] team_slave_0: entered promiscuous mode
[  970.718891][T24691] team_slave_1: entered promiscuous mode
[  970.724778][T24691] syz_tun: entered promiscuous mode
[  970.789724][T24691] debugfs: 'hsr1' already exists in 'hsr'
[  970.795577][T24691] Cannot create hsr debugfs directory
[  970.816433][T24691] hsr1: entered promiscuous mode
[  970.845124][T24696] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  970.939696][T24699] __nla_validate_parse: 7 callbacks suppressed
[  970.939714][T24699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4492'.
[  971.479488][T22061] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.495670][ T7124] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  971.525777][ T7124] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  971.557599][ T7124] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  971.580169][ T7124] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  971.599645][T22143] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  971.619131][ T7124] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  971.638506][ T7124] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  971.685231][T22133] wlan0 speed is unknown, defaulting to 1000
[  971.691703][T22133] syz0: Port: 1 Link DOWN
[  971.699539][ T7124] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  971.743850][ T7124] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  971.829574][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4497'.
[  971.940386][T24719] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  972.184343][T24733] netlink: 'syz.0.4503': attribute type 1 has an invalid length.
[  973.012631][T24749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4508'.
[  973.170660][ T7124] pim6reg: left allmulticast mode
[  973.318066][ T7124] batman_adv: batadv0: Removing interface: ip6gretap1
[  973.531001][ T7124] tipc: Disabling bearer <eth:gre0>
[  973.551208][ T7124] bond5 (unregistering): (slave gre4): Releasing backup interface
[  973.717037][ T7124] bond1 (unregistering): Released all slaves
[  973.749045][ T7124] bond2 (unregistering): Released all slaves
[  973.771304][ T7124] bond3 (unregistering): Released all slaves
[  973.788472][ T7124] bond4 (unregistering): Released all slaves
[  973.824309][ T7124] bond5 (unregistering): Released all slaves
[  973.842440][ T7124] bond0 (unregistering): Released all slaves
[  973.878113][T24769] bridge_slave_0: left allmulticast mode
[  973.885707][T24769] bridge_slave_0: entered allmulticast mode
[  973.893217][T24769] team0: Port device bridge_slave_0 added
[  974.004104][T24772] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  974.204070][ T7124] tipc: Left network mode
[  974.302720][T24782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4519'.
[  974.345070][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4519'.
[  974.487957][T24791] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4523'.
[  974.632688][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  974.661389][T24795] block nbd1: NBD_DISCONNECT
[  974.683736][T24795] block nbd1: Send disconnect failed -32
[  974.741771][ T6563] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  974.858072][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  975.049771][T24810] netlink: 296 bytes leftover after parsing attributes in process `syz.2.4525'.
[  975.212892][T24814] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4525'.
[  975.252833][T24820] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4528'.
[  975.298485][T24820] syzkaller0: entered promiscuous mode
[  975.304039][T24820] syzkaller0: entered allmulticast mode
[  975.317941][T24820] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  975.338491][T24819] tipc: Resetting bearer <eth:syzkaller0>
[  975.376211][T24819] tipc: Disabling bearer <eth:syzkaller0>
[  975.423055][T22133] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  976.233742][T24845] syzkaller0: entered promiscuous mode
[  976.239390][T24845] syzkaller0: entered allmulticast mode
[  976.859264][ T7124] hsr_slave_0: left promiscuous mode
[  976.865500][ T7124] hsr_slave_1: left promiscuous mode
[  978.148874][ T7124] IPVS: stop unused estimator thread 0...
[  979.042780][T24832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  979.238851][T24856] geneve4: entered promiscuous mode
[  979.246654][T24858] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4537'.
[  979.280160][T24858] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4537'.
[  979.901561][T24900] netlink: 'syz.6.4547': attribute type 62 has an invalid length.
[  980.013119][T24903] tipc: New replicast peer: 255.255.255.255
[  980.019999][T24903] tipc: Enabled bearer <udp:syz2>, priority 10
[  980.049780][T24903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4549'.
[  980.076823][T24903] netlink: 'syz.0.4549': attribute type 1 has an invalid length.
[  980.093478][T24908] netlink: 'syz.6.4551': attribute type 1 has an invalid length.
[  980.101660][T24908] netlink: 'syz.6.4551': attribute type 1 has an invalid length.
[  980.181236][T24909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4549'.
[  980.189741][T24903] bond6: entered promiscuous mode
[  980.201271][T24903] 8021q: adding VLAN 0 to HW filter on device bond6
[  980.421078][T24898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4548'.
[  980.565832][T24929] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4555'.
[  980.642165][T24929] lo speed is unknown, defaulting to 1000
[  980.671875][T24929] wlan0 speed is unknown, defaulting to 1000
[  980.722375][T24936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4556'.
[  980.923406][T24941] netlink: 'syz.0.4558': attribute type 1 has an invalid length.
[  981.091883][T24946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4561'.
[  981.142935][T24946] xt_TCPMSS: Only works on TCP SYN packets
[  981.298714][T24955] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4564'.
[  981.380757][T24959] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4562'.
[  981.418692][T24948] lo speed is unknown, defaulting to 1000
[  981.426422][T24948] wlan0 speed is unknown, defaulting to 1000
[  981.516622][T24946] bridge_slave_1: left allmulticast mode
[  981.527720][T24946] bridge_slave_1: left promiscuous mode
[  981.541621][T24946] bridge0: port 2(bridge_slave_1) entered disabled state
[  981.565416][T24946] bridge_slave_0: left allmulticast mode
[  981.574575][T24946] bridge_slave_0: left promiscuous mode
[  981.580938][T24946] bridge0: port 1(bridge_slave_0) entered disabled state
[  982.364890][T24990] syzkaller1: entered promiscuous mode
[  982.370730][T24990] syzkaller1: entered allmulticast mode
[  982.883473][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  983.167806][T25014] xt_hashlimit: size too large, truncated to 1048576
[  983.532491][T25017] netlink: 'syz.0.4579': attribute type 1 has an invalid length.
[  983.557716][T25017] netlink: 'syz.0.4579': attribute type 2 has an invalid length.
[  983.761691][T25032] ipip0: entered promiscuous mode
[  984.330678][T25054] __nla_validate_parse: 4 callbacks suppressed
[  984.330710][T25054] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4592'.
[  984.890909][T25074] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4598'.
[  984.951732][T25074] syzkaller1: entered promiscuous mode
[  984.975161][T25074] syzkaller1: entered allmulticast mode
[  985.125910][T25086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4602'.
[  985.140369][T25086] netlink: 'syz.2.4602': attribute type 1 has an invalid length.
[  985.171444][T25090] sctp: [Deprecated]: syz.0.4603 (pid 25090) Use of struct sctp_assoc_value in delayed_ack socket option.
[  985.171444][T25090] Use struct sctp_sack_info instead
[  985.297356][T25093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4604'.
[  985.421122][T25100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4604'.
[  985.448404][T25100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4604'.
[  985.561874][T25100] veth17: entered allmulticast mode
[  985.574737][T25100] bond8: (slave veth17): Enslaving as an active interface with an up link
[  985.641148][T25093] bond8 (unregistering): (slave veth17): Releasing backup interface
[  985.687468][T25093] bond8 (unregistering): Released all slaves
[  985.903197][T25116] syzkaller1: entered promiscuous mode
[  985.908933][T25116] syzkaller1: entered allmulticast mode
[  986.044109][T25120] netlink: 'syz.2.4609': attribute type 2 has an invalid length.
[  986.137869][T25124] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4611'.
[  986.149579][T25124] netlink: 83 bytes leftover after parsing attributes in process `syz.5.4611'.
[  986.316285][T25128] x_tables: duplicate underflow at hook 1
[  986.467082][T25139] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4617'.
[  986.477777][T25139] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  986.487924][T25139] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  986.496893][T25139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4617'.
[  986.507400][T25139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  987.173643][T25171] xt_CT: You must specify a L4 protocol and not use inversions on it
[  987.672737][T25181] FAULT_INJECTION: forcing a failure.
[  987.672737][T25181] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  987.685984][T25181] CPU: 1 UID: 0 PID: 25181 Comm: syz.2.4631 Not tainted syzkaller #0 PREEMPT(full) 
[  987.686015][T25181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[  987.686028][T25181] Call Trace:
[  987.686036][T25181]  <TASK>
[  987.686047][T25181]  dump_stack_lvl+0xe8/0x150
[  987.686087][T25181]  should_fail_ex+0x40c/0x560
[  987.686119][T25181]  _copy_from_user+0x2d/0xb0
[  987.686152][T25181]  ___sys_sendmsg+0x1c6/0x360
[  987.686186][T25181]  ? __lock_acquire+0x683/0x2cf0
[  987.686222][T25181]  ? __pfx____sys_sendmsg+0x10/0x10
[  987.686263][T25181]  ? kstrtouint+0x6e/0xe0
[  987.686319][T25181]  ? __fget_files+0x2a/0x420
[  987.686347][T25181]  ? __fget_files+0x3a2/0x420
[  987.686387][T25181]  __sys_sendmmsg+0x273/0x4d0
[  987.686415][T25181]  ? __pfx___sys_sendmmsg+0x10/0x10
[  987.686461][T25181]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  987.686595][T25181]  ? ksys_write+0x242/0x270
[  987.686631][T25181]  ? __pfx_ksys_write+0x10/0x10
[  987.686672][T25181]  __x64_sys_sendmmsg+0xa0/0xc0
[  987.686701][T25181]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.686725][T25181]  do_syscall_64+0x174/0x580
[  987.686757][T25181]  ? trace_irq_disable+0x3b/0x140
[  987.686784][T25181]  ? clear_bhb_loop+0x40/0x90
[  987.686812][T25181]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  987.686834][T25181] RIP: 0033:0x7fc54959de99
[  987.686854][T25181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  987.686874][T25181] RSP: 002b:00007fc54a3b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  987.686897][T25181] RAX: ffffffffffffffda RBX: 00007fc549825fa0 RCX: 00007fc54959de99
[  987.686913][T25181] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003
[  987.686926][T25181] RBP: 00007fc54a3b7090 R08: 0000000000000000 R09: 0000000000000000
[  987.686939][T25181] R10: 0000000004000801 R11: 0000000000000246 R12: 0000000000000001
[  987.686953][T25181] R13: 00007fc549826038 R14: 00007fc549825fa0 R15: 00007ffcb4cbac28
[  987.686987][T25181]  </TASK>
[  988.121453][T25196] ip6gre1: entered promiscuous mode
[  988.142455][T25196] ip6gre1: entered allmulticast mode
[  988.156335][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  988.171596][   T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  988.194100][T22147] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  988.252850][T22148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  988.468150][T25205] lo speed is unknown, defaulting to 1000
[  988.475834][T25205] wlan0 speed is unknown, defaulting to 1000
[  988.590072][T22148] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  988.615620][T25217] netlink: 'syz.0.4643': attribute type 1 has an invalid length.
[  988.656057][T25215] tipc: Started in network mode
[  988.661163][T25215] tipc: Node identity a25b88a6daf2, cluster identity 4711
[  988.668494][T25215] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  988.697680][T25217] 8021q: adding VLAN 0 to HW filter on device bond8
[  988.724402][T25215] netlink: 'syz.5.4642': attribute type 3 has an invalid length.
[  988.737995][T25215] tipc: Resetting bearer <eth:syzkaller0>
[  989.054758][T25223] tipc: Disabling bearer <eth:syzkaller0>
[  989.146685][T25244] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  989.516091][T25257] bridge_slave_1: invalid flags given to default FDB implementation
[  989.712375][T25253] bridge1: entered promiscuous mode
[  989.717673][T25253] bridge1: entered allmulticast mode
[  989.721508][T25259] xt_hashlimit: size too large, truncated to 1048576
[  989.730022][T25253] team0: Port device bridge1 added
[  989.960057][T25264] __nla_validate_parse: 2 callbacks suppressed
[  989.960078][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4653'.
[  990.127761][ T5638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  990.140288][ T5638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  990.164670][ T5638] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  990.180790][ T5638] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  990.188841][ T5638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  990.463753][T25285] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  990.471971][T25285] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  990.592650][T25292] netlink: 120 bytes leftover after parsing attributes in process `syz.6.4660'.
[  990.601766][T25292] tipc: Enabling of bearer <utp:s> rejected, media not registered
[  990.612028][T25290] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4659'.
[  990.847147][T25303] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4662'.
[  990.861676][T25268] lo speed is unknown, defaulting to 1000
[  990.871443][T25268] wlan0 speed is unknown, defaulting to 1000
[  991.061986][T25302] block nbd1: server does not support multiple connections per device.
[  991.081530][T25302] block nbd1: shutting down sockets
[  991.254749][T25320] xt_hashlimit: size too large, truncated to 1048576
[  991.374285][T25268] bridge0: port 1(bridge_slave_0) entered blocking state
[  991.407388][T25268] bridge0: port 1(bridge_slave_0) entered disabled state
[  991.435274][T25268] bridge_slave_0: entered allmulticast mode
[  991.473110][T25268] bridge_slave_0: entered promiscuous mode
[  991.497628][T25268] bridge0: port 2(bridge_slave_1) entered blocking state
[  991.505027][T25268] bridge0: port 2(bridge_slave_1) entered disabled state
[  991.512263][T25268] bridge_slave_1: entered allmulticast mode
[  991.532933][T25268] bridge_slave_1: entered promiscuous mode
[  991.650812][T25268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  991.678263][T25339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4668'.
[  991.692914][T25268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  991.730557][T25342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4670'.
[  991.739515][T25268] team0: Port device team_slave_0 added
[  991.746017][T25268] team0: Port device team_slave_1 added
[  991.825790][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'.
[  991.828553][T25268] batman_adv: batadv0: Adding interface: batadv_slave_0
[  991.840351][T25337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4670'.
[  991.841701][T25268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  991.867279][T25345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4669'.
[  991.876499][T25268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  991.882612][T25268] batman_adv: batadv0: Adding interface: batadv_slave_1
[  991.918493][T25268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  991.944435][T25268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  992.003553][T25268] hsr_slave_0: entered promiscuous mode
[  992.027921][T25268] hsr_slave_1: entered promiscuous mode
[  992.047234][T25268] debugfs: 'hsr0' already exists in 'hsr'
[  992.053513][T25268] Cannot create hsr debugfs directory
[  992.248366][ T5638] Bluetooth: hci7: command tx timeout
[  992.385899][T25360] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4676'.
[  992.417036][T25362] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  992.434767][T25363] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  992.474628][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  992.535101][T25358] xfrm0: entered allmulticast mode
[  992.542976][T25358] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  992.960870][T25268] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  992.975960][T25268] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  992.993592][T25268] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  993.011110][T25268] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  993.046483][T25268] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  993.077779][T25268] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  993.086291][T25268] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  993.097342][ T1319] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  993.158884][T25268] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  993.198421][T25397] netlink: 'syz.6.4685': attribute type 29 has an invalid length.
[  993.449233][T25268] 8021q: adding VLAN 0 to HW filter on device bond0
[  993.511088][T25268] 8021q: adding VLAN 0 to HW filter on device team0
[  993.547908][   T48] bridge0: port 1(bridge_slave_0) entered blocking state
[  993.555172][   T48] bridge0: port 1(bridge_slave_0) entered forwarding state
[  993.632110][   T48] bridge0: port 2(bridge_slave_1) entered blocking state
[  993.639358][   T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[  994.134310][T25445] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  994.398932][ T5638] Bluetooth: hci7: command tx timeout
[  994.476527][T25449] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input7
[  994.662177][T25458] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  994.971413][T25474] netlink: 'syz.6.4703': attribute type 1 has an invalid length.
[  995.031468][T25474] 8021q: adding VLAN 0 to HW filter on device bond2
[  995.120931][T25474] 8021q: adding VLAN 0 to HW filter on device bond0
[  995.130732][T25474] bond2: (slave bond0): Enslaving as an active interface with a down link
[  995.266180][T25482] __nla_validate_parse: 4 callbacks suppressed
[  995.266202][T25482] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4704'.
[  995.308847][T25268] 8021q: adding VLAN 0 to HW filter on device batadv0
[  995.377614][T25482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4704'.
[  995.553964][T25465] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  995.946534][T25268] veth0_vlan: entered promiscuous mode
[  995.999287][T25268] veth1_vlan: entered promiscuous mode
[  996.046627][T25268] veth0_macvtap: entered promiscuous mode
[  996.058948][T25268] veth1_macvtap: entered promiscuous mode
[  996.147710][T25268] batman_adv: batadv0: Interface activated: batadv_slave_0
[  996.160385][T25268] batman_adv: batadv0: Interface activated: batadv_slave_1
[  996.185823][   T48] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  996.238773][   T48] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  996.250304][   T48] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  996.259131][   T48] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  996.558899][ T5638] Bluetooth: hci7: command tx timeout
[  996.634073][T19114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.650261][T19114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  996.841969][T25519] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4711'.
[  996.864527][T25527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4714'.
[  996.941807][ T7126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  996.951586][ T7126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  997.159406][T25537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4717'.
[  997.162400][T25538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4716'.
[  997.185371][T25537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4717'.
[  997.244684][T25538] ip6gre2: entered promiscuous mode
[  997.249987][T25538] ip6gre2: entered allmulticast mode
[  997.257002][T25538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4716'.
[  997.261893][T25539] netlink: 'syz.5.4716': attribute type 6 has an invalid length.
[  997.301289][T25539] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4716'.
[  997.312058][T25538] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4716'.
[  997.444976][T25552] hsr0: entered promiscuous mode
[  997.570936][T25552] hsr0: left promiscuous mode
[  997.722453][T25562] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  998.354422][T25596] netlink: 'syz.2.4726': attribute type 18 has an invalid length.
[  998.401373][T25596] netlink: 'syz.2.4726': attribute type 18 has an invalid length.
[  998.415014][ T7126] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  998.432616][ T7126] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  998.470786][ T7126] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  998.715206][ T5638] Bluetooth: hci7: command tx timeout
[  998.727898][T25617] xt_bpf: check failed: parse error
[  999.741375][T25652] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  999.803945][T25652] sch_tbf: burst 6281 is lower than device lo mtu (65550) !
[  999.868629][T25653] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  999.947802][T25657] netlink: 'syz.2.4734': attribute type 15 has an invalid length.
[ 1000.461531][T25575] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1000.548306][T25662] __nla_validate_parse: 12 callbacks suppressed
[ 1000.548333][T25662] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4738'.
[ 1000.575349][T25662] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4738'.
[ 1001.092041][T25679] veth0: entered promiscuous mode
[ 1001.131749][T25681] veth0: left promiscuous mode
[ 1001.239341][T25686] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1001.280643][T25697] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4747'.
[ 1001.340823][T25699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4747'.
[ 1001.355886][T25699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4747'.
[ 1001.371180][T25688] netlink: 'syz.2.4745': attribute type 1 has an invalid length.
[ 1001.410508][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1001.555272][T25707] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4750'.
[ 1001.601804][T25698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4745'.
[ 1001.613711][T25688] bond9: (slave veth0_to_bond): making interface the new active one
[ 1001.636008][T25706] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4749'.
[ 1001.638272][T25707] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4750'.
[ 1001.663974][T25688] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1001.680409][T25698] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1001.694300][T25710] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4749'.
[ 1001.820467][T25715] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[ 1001.832569][T25715] bond3 (unregistering): Released all slaves
[ 1001.866867][T25717] netlink: 'syz.7.4751': attribute type 4 has an invalid length.
[ 1002.612073][T25741] bond3: entered promiscuous mode
[ 1002.617339][T25741] bond3: entered allmulticast mode
[ 1002.625527][T25741] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1003.112562][T25754] gretap0: entered promiscuous mode
[ 1003.135443][T25754] vlan2: entered promiscuous mode
[ 1003.573993][T25778] syzkaller0: entered promiscuous mode
[ 1003.579577][T25778] syzkaller0: entered allmulticast mode
[ 1003.589997][T25778] tipc: Started in network mode
[ 1003.594905][T25778] tipc: Node identity 92fc675b53e8, cluster identity 4711
[ 1003.602337][T25778] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1003.615951][T25777] tipc: Resetting bearer <eth:syzkaller0>
[ 1003.668847][T25777] tipc: Disabling bearer <eth:syzkaller0>
[ 1004.019519][T25787] netlink: 'syz.5.4773': attribute type 7 has an invalid length.
[ 1004.028823][T25787] netlink: 'syz.5.4773': attribute type 4 has an invalid length.
[ 1004.885534][T25824] netlink: 'syz.0.4786': attribute type 19 has an invalid length.
[ 1004.906574][T25824] netlink: 'syz.0.4786': attribute type 20 has an invalid length.
[ 1005.009649][T25826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1005.268204][T25856] netlink: 'syz.6.4792': attribute type 1 has an invalid length.
[ 1005.305404][T25856] bond4: entered promiscuous mode
[ 1005.311646][T25856] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1005.537552][T25860] bond4: (slave veth5): making interface the new active one
[ 1005.567648][T25860] veth5: entered promiscuous mode
[ 1005.575115][T25860] bond4: (slave veth5): Enslaving as an active interface with an up link
[ 1005.915916][T25876] syzkaller0: entered promiscuous mode
[ 1005.921467][T25876] syzkaller0: entered allmulticast mode
[ 1006.241139][T25890] __nla_validate_parse: 14 callbacks suppressed
[ 1006.241156][T25890] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4800'.
[ 1006.412501][T25893] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4801'.
[ 1006.652817][T25900] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4803'.
[ 1006.673456][T25900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4803'.
[ 1006.707742][T25902] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[ 1007.183553][T19114] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x69
[ 1009.953918][T25912] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1010.434005][T25937] openvswitch: netlink: Missing key (keys=40, expected=100)
[ 1010.711168][T25961] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4817'.
[ 1010.739175][T25961] openvswitch: netlink: Message has -2 unknown bytes.
[ 1010.746684][T25959] syzkaller0: entered promiscuous mode
[ 1010.752512][T25961] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1010.761890][T25959] syzkaller0: entered allmulticast mode
[ 1011.013423][T25964] lo speed is unknown, defaulting to 1000
[ 1011.021579][T25964] wlan0 speed is unknown, defaulting to 1000
[ 1011.593250][T25982] netlink: 'syz.5.4823': attribute type 18 has an invalid length.
[ 1011.639506][T25982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4823'.
[ 1011.658394][T17396] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1011.658845][T25982] netlink: 'syz.5.4823': attribute type 18 has an invalid length.
[ 1011.730283][T25982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4823'.
[ 1011.743039][T25987] netlink: 'syz.5.4823': attribute type 11 has an invalid length.
[ 1012.002954][T17396] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1012.205457][T17396] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1012.221092][T17396] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1012.533033][T26018] syzkaller0: entered promiscuous mode
[ 1012.538713][T26018] syzkaller0: entered allmulticast mode
[ 1012.557147][T26023] veth0: entered promiscuous mode
[ 1012.820645][T26045] netlink: 9 bytes leftover after parsing attributes in process `syz.5.4835'.
[ 1012.867619][T26040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4833'.
[ 1012.896798][T26045] netlink: 5 bytes leftover after parsing attributes in process `syz.5.4835'.
[ 1013.064961][T26045] 0ªî{X¹¦: renamed from gretap0
[ 1013.137373][T26045] 0ªî{X¹¦: entered allmulticast mode
[ 1013.155152][T26045] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[ 1013.177974][T26022] veth0: left promiscuous mode
[ 1013.274889][T26053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4836'.
[ 1013.455373][ T5283] veth1_macvtap: left promiscuous mode
[ 1013.737106][T26071] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4838'.
[ 1013.940889][T26083] netlink: 'syz.6.4846': attribute type 21 has an invalid length.
[ 1013.952161][T26083] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4846'.
[ 1013.995114][T26083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4846'.
[ 1014.154140][T26096] IPv6: addrconf: prefix option has invalid lifetime
[ 1014.162929][T26097] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4848'.
[ 1014.571181][T26111] netlink: 'syz.2.4853': attribute type 1 has an invalid length.
[ 1014.969120][T26131] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[ 1015.191806][T26141] netlink: 'syz.5.4859': attribute type 2 has an invalid length.
[ 1015.423717][T26140] lo speed is unknown, defaulting to 1000
[ 1015.543662][T26140] wlan0 speed is unknown, defaulting to 1000
[ 1015.928113][T26168] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1016.870327][T26195] __nla_validate_parse: 7 callbacks suppressed
[ 1016.870347][T26195] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4871'.
[ 1016.957857][T26198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4872'.
[ 1017.205980][T26212] tipc: New replicast peer: 255.255.255.255
[ 1017.212658][T26212] tipc: Enabled bearer <udp:syz2>, priority 10
[ 1017.428431][T26215] lo speed is unknown, defaulting to 1000
[ 1017.436124][T26215] wlan0 speed is unknown, defaulting to 1000
[ 1017.713185][T26228] netlink: 'syz.5.4881': attribute type 33 has an invalid length.
[ 1018.111050][T26237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4885'.
[ 1018.263266][T26237] bridge2: entered promiscuous mode
[ 1018.268571][T26237] bridge2: entered allmulticast mode
[ 1018.276548][ T6563] tipc: Node number set to 3239339867
[ 1018.346395][T26237] netlink: 65031 bytes leftover after parsing attributes in process `syz.5.4885'.
[ 1018.624237][T26254] netlink: 'syz.6.4889': attribute type 21 has an invalid length.
[ 1018.632165][T26254] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1018.801881][T26256] syzkaller0: entered promiscuous mode
[ 1018.858107][T26256] syzkaller0: entered allmulticast mode
[ 1019.189811][T26270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4894'.
[ 1019.974109][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1023.217252][T26297] netlink: 'syz.7.4900': attribute type 1 has an invalid length.
[ 1023.225289][T26297] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1023.315970][T26302] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4899'.
[ 1023.584630][T26312] netlink: 'syz.7.4903': attribute type 1 has an invalid length.
[ 1023.846540][T26300] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4901'.
[ 1024.504037][T26312] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1024.520778][T26315] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1024.546462][T26318] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4906'.
[ 1024.636791][T26339] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[ 1024.836153][T26352] netlink: 'syz.0.4913': attribute type 4 has an invalid length.
[ 1024.943101][T26356] syzkaller1: entered promiscuous mode
[ 1024.948669][T26356] syzkaller1: entered allmulticast mode
[ 1024.967729][T26359] batadv_slave_0: entered promiscuous mode
[ 1024.983923][T26358] batadv_slave_0: left promiscuous mode
[ 1025.122130][   T31] INFO: task syz.3.4060:22969 blocked for more than 143 seconds.
[ 1025.129982][   T31]       Not tainted syzkaller #0
[ 1025.134960][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1025.141782][T26362] FAULT_INJECTION: forcing a failure.
[ 1025.141782][T26362] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1025.156724][   T31] task:syz.3.4060      state:D stack:26384 pid:22969 tgid:22959 ppid:18748  task_flags:0x400140 flags:0x00080002
[ 1025.168736][   T31] Call Trace:
[ 1025.172061][   T31]  <TASK>
[ 1025.175034][   T31]  __schedule+0x17d9/0x56c0
[ 1025.179597][   T31]  ? __lock_acquire+0x683/0x2cf0
[ 1025.184652][   T31]  ? __pfx___schedule+0x10/0x10
[ 1025.189581][   T31]  ? schedule+0x90/0x2b0
[ 1025.193888][   T31]  schedule+0x164/0x2b0
[ 1025.198112][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1025.202868][T26362] CPU: 0 UID: 0 PID: 26362 Comm: syz.7.4917 Not tainted syzkaller #0 PREEMPT(full) 
[ 1025.202946][T26362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1025.202980][T26362] Call Trace:
[ 1025.203001][T26362]  <TASK>
[ 1025.203030][T26362]  dump_stack_lvl+0xe8/0x150
[ 1025.203127][T26362]  should_fail_ex+0x40c/0x560
[ 1025.203212][T26362]  _copy_from_user+0x2d/0xb0
[ 1025.203298][T26362]  kstrtouint_from_user+0xd6/0x180
[ 1025.203380][T26362]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1025.203505][T26362]  proc_fail_nth_write+0x8e/0x210
[ 1025.203626][T26362]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1025.203740][T26362]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1025.203847][T26362]  vfs_write+0x296/0xba0
[ 1025.203958][T26362]  ? __pfx_vfs_write+0x10/0x10
[ 1025.204055][T26362]  ? __fget_files+0x2a/0x420
[ 1025.204147][T26362]  ? __fget_files+0x3a2/0x420
[ 1025.204220][T26362]  ? __fget_files+0x2a/0x420
[ 1025.204317][T26362]  ksys_write+0x150/0x270
[ 1025.204411][T26362]  ? __pfx_ksys_write+0x10/0x10
[ 1025.204527][T26362]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.204590][T26362]  do_syscall_64+0x174/0x580
[ 1025.204674][T26362]  ? trace_irq_disable+0x3b/0x140
[ 1025.204743][T26362]  ? clear_bhb_loop+0x40/0x90
[ 1025.204810][T26362]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.204865][T26362] RIP: 0033:0x7f12d8d5e6ce
[ 1025.204926][T26362] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1025.204972][T26362] RSP: 002b:00007f12d9bf2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1025.205035][T26362] RAX: ffffffffffffffda RBX: 00007f12d9bf36c0 RCX: 00007f12d8d5e6ce
[ 1025.205077][T26362] RDX: 0000000000000001 RSI: 00007f12d9bf30a0 RDI: 0000000000000003
[ 1025.205125][T26362] RBP: 00007f12d9bf3090 R08: 0000000000000000 R09: 0000000000000000
[ 1025.205180][T26362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1025.205221][T26362] R13: 00007f12d9026038 R14: 00007f12d9025fa0 R15: 00007ffe61698518
[ 1025.205324][T26362]  </TASK>
[ 1025.524552][   T31]  __mutex_lock+0x7bf/0x1550
[ 1025.529270][   T31]  ? __mutex_lock+0x5d4/0x1550
[ 1025.534109][   T31]  ? nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450
[ 1025.540738][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1025.545847][   T31]  ? net_generic+0x1e/0x240
[ 1025.550414][   T31]  ? net_generic+0x1e/0x240
[ 1025.572867][   T31]  nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450
[ 1025.579320][   T31]  ? __kmalloc_noprof+0x375/0x720
[ 1025.584442][   T31]  ? __asan_memset+0x22/0x50
[ 1025.589239][   T31]  ? __nla_validate_parse+0x2429/0x2d50
[ 1025.594860][   T31]  ? do_syscall_64+0x174/0x580
[ 1025.599660][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.605769][   T31]  ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10
[ 1025.612599][   T31]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1025.618379][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1025.624707][   T31]  ? trace_kmalloc+0x2a/0xf0
[ 1025.629355][   T31]  ? __kmalloc_noprof+0x396/0x720
[ 1025.649013][   T31]  ? __nla_parse+0x40/0x60
[ 1025.653536][   T31]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1025.660055][   T31]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1025.666461][   T31]  genl_family_rcv_msg_doit+0x233/0x340
[ 1025.691838][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1025.698026][   T31]  ? bpf_lsm_capable+0x9/0x20
[ 1025.702819][   T31]  ? security_capable+0x7e/0x2c0
[ 1025.707849][   T31]  genl_rcv_msg+0x614/0x7a0
[ 1025.712430][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1025.717517][   T31]  ? __pfx_nfsd_nl_svc_export_set_reqs_doit+0x10/0x10
[ 1025.724375][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1025.729811][   T31]  netlink_rcv_skb+0x226/0x4a0
[ 1025.734617][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1025.740216][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1025.746790][   T31]  ? down_read+0x2be/0x330
[ 1025.751271][   T31]  genl_rcv+0x28/0x40
[ 1025.755317][   T31]  netlink_unicast+0x7bb/0x940
[ 1025.760117][   T31]  netlink_sendmsg+0x813/0xb40
[ 1025.764914][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1025.770224][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[ 1025.775204][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1025.780523][   T31]  sock_sendmsg_nosec+0x13a/0x180
[ 1025.802421][   T31]  ____sys_sendmsg+0x54e/0x850
[ 1025.807261][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1025.812616][   T31]  ? import_iovec+0x73/0xa0
[ 1025.817168][   T31]  ___sys_sendmsg+0x2a5/0x360
[ 1025.821916][   T31]  ? __lock_acquire+0x683/0x2cf0
[ 1025.826905][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1025.832162][   T31]  ? futex_wait+0x2a2/0x390
[ 1025.836752][   T31]  ? __fget_files+0x2a/0x420
[ 1025.841380][   T31]  ? __fget_files+0x3a2/0x420
[ 1025.846131][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[ 1025.851628][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1025.857168][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.863332][   T31]  do_syscall_64+0x174/0x580
[ 1025.867984][   T31]  ? trace_irq_disable+0x3b/0x140
[ 1025.873050][   T31]  ? clear_bhb_loop+0x40/0x90
[ 1025.877816][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1025.883736][   T31] RIP: 0033:0x7f266359de99
[ 1025.888381][   T31] RSP: 002b:00007f26643a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1025.909282][   T31] RAX: ffffffffffffffda RBX: 00007f2663826090 RCX: 00007f266359de99
[ 1025.918497][   T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000009
[ 1025.926596][   T31] RBP: 00007f2663633eaf R08: 0000000000000000 R09: 0000000000000000
[ 1025.934625][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1025.942745][   T31] R13: 00007f2663826128 R14: 00007f2663826090 R15: 00007fffd1c22648
[ 1025.950797][   T31]  </TASK>
[ 1025.954007][   T31] 
[ 1025.954007][   T31] Showing all locks held in the system:
[ 1025.961878][   T31] 1 lock held by khungtaskd/31:
[ 1025.966920][   T31]  #0: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1025.977247][   T31] 2 locks held by getty/5379:
[ 1025.982123][   T31]  #0: ffff888035c410a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1025.992146][   T31]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 1026.002364][   T31] 2 locks held by syz.4.3744/21661:
[ 1026.023526][   T31]  #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1026.031844][   T31]  #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x135/0x1750
[ 1026.042152][   T31] 2 locks held by syz.3.4060/22969:
[ 1026.047385][   T31]  #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1026.055632][   T31]  #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1450
[ 1026.066531][   T31] 2 locks held by syz.1.4522/24794:
[ 1026.071797][   T31]  #0: ffffffff9009cba8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1026.080077][   T31]  #1: ffffffff8ee8e620 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xe2/0x1b0
[ 1026.090093][   T31] 2 locks held by syz.6.4915/26356:
[ 1026.095334][   T31]  #0: ffff88807a8140d0 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100
[ 1026.106234][   T31]  #1: ffffffff8eb5ff68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[ 1026.134442][   T31] 
[ 1026.136941][   T31] =============================================
[ 1026.136941][   T31] 
[ 1026.145495][   T31] NMI backtrace for cpu 1
[ 1026.145516][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1026.145541][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1026.145554][   T31] Call Trace:
[ 1026.145563][   T31]  <TASK>
[ 1026.145571][   T31]  dump_stack_lvl+0xe8/0x150
[ 1026.145611][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[ 1026.145760][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1026.145802][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x380
[ 1026.145838][   T31]  sys_info+0x135/0x170
[ 1026.145861][   T31]  watchdog+0xfd7/0x1030
[ 1026.145904][   T31]  ? watchdog+0x1c7/0x1030
[ 1026.145939][   T31]  kthread+0x388/0x470
[ 1026.145971][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1026.145994][   T31]  ? __pfx_kthread+0x10/0x10
[ 1026.146025][   T31]  ret_from_fork+0x514/0xb70
[ 1026.146077][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1026.146108][   T31]  ? __switch_to+0xc89/0x1420
[ 1026.146138][   T31]  ? __pfx_kthread+0x10/0x10
[ 1026.146170][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1026.146209][   T31]  </TASK>
[ 1026.146218][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1026.270001][    C0] NMI backtrace for cpu 0
[ 1026.270020][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[ 1026.270041][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1026.270052][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[ 1026.270086][    C0] Code: ac 80 02 e9 13 05 03 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 7a 1a 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[ 1026.270102][    C0] RSP: 0018:ffffffff8e807de0 EFLAGS: 00000246
[ 1026.270123][    C0] RAX: 0000000000355471 RBX: ffffffff819ab33c RCX: 0000000080000001
[ 1026.270136][    C0] RDX: 0000000000000001 RSI: ffffffff8e22ba06 RDI: ffffffff8c4bd380
[ 1026.270150][    C0] RBP: ffffffff8e807eb8 R08: ffff8880b86338db R09: 1ffff110170c671b
[ 1026.270164][    C0] R10: dffffc0000000000 R11: ffffed10170c671c R12: 0000000000000000
[ 1026.270176][    C0] R13: 1ffffffff1d11de8 R14: 1ffffffff1d00fc4 R15: dffffc0000000000
[ 1026.270190][    C0] FS:  0000000000000000(0000) GS:ffff888124f5e000(0000) knlGS:0000000000000000
[ 1026.270205][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1026.270217][    C0] CR2: 00007f4dd37ed2f8 CR3: 0000000074c3a000 CR4: 00000000003526f0
[ 1026.270234][    C0] Call Trace:
[ 1026.270242][    C0]  <TASK>
[ 1026.270249][    C0]  default_idle+0x9/0x20
[ 1026.270266][    C0]  default_idle_call+0x72/0xb0
[ 1026.270285][    C0]  do_idle+0x1cc/0x540
[ 1026.270338][    C0]  ? __pfx_do_idle+0x10/0x10
[ 1026.270368][    C0]  cpu_startup_entry+0x43/0x60
[ 1026.270392][    C0]  rest_init+0x2de/0x300
[ 1026.270413][    C0]  start_kernel+0x392/0x3e0
[ 1026.270487][    C0]  x86_64_start_reservations+0x24/0x30
[ 1026.270565][    C0]  x86_64_start_kernel+0x137/0x1b0
[ 1026.270584][    C0]  common_startup_64+0x13e/0x157
[ 1026.270616][    C0]  </TASK>
[ 1026.473559][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1026.480554][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1026.489712][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026
[ 1026.499795][   T31] Call Trace:
[ 1026.503102][   T31]  <TASK>
[ 1026.506063][   T31]  vpanic+0x56c/0xa60
[ 1026.510086][   T31]  ? __pfx___schedule+0x10/0x10
[ 1026.514973][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1026.519521][   T31]  ? nmi_trigger_cpumask_backtrace+0x207/0x380
[ 1026.525723][   T31]  panic+0xc5/0xd0
[ 1026.529482][   T31]  ? __pfx_panic+0x10/0x10
[ 1026.533938][   T31]  ? preempt_schedule_common+0x82/0xd0
[ 1026.539423][   T31]  ? preempt_schedule_thunk+0x16/0x40
[ 1026.544872][   T31]  ? nmi_trigger_cpumask_backtrace+0x314/0x380
[ 1026.551076][   T31]  ? nmi_trigger_cpumask_backtrace+0x319/0x380
[ 1026.557282][   T31]  watchdog+0x1030/0x1030
[ 1026.561660][   T31]  ? watchdog+0x1c7/0x1030
[ 1026.566209][   T31]  kthread+0x388/0x470
[ 1026.570356][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1026.575117][   T31]  ? __pfx_kthread+0x10/0x10
[ 1026.579859][   T31]  ret_from_fork+0x514/0xb70
[ 1026.584498][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1026.589652][   T31]  ? __switch_to+0xc89/0x1420
[ 1026.594367][   T31]  ? __pfx_kthread+0x10/0x10
[ 1026.598993][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1026.603805][   T31]  </TASK>
[ 1026.607466][   T31] Kernel Offset: disabled
[ 1026.611833][   T31] Rebooting in 86400 seconds..