last executing test programs:

3.520557322s ago: executing program 1 (id=5611):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000100000000000100000054000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa060004000050000007000600727200000c000700010000000100000008000800000000000800090080"], 0x68}}, 0x0)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000300000030000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa060004000050"], 0x8c}}, 0x0)
r2 = socket$igmp(0x2, 0x3, 0x2)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}}, 0x0)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newlink={0xb0, 0x10, 0x400, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x220}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0xb407}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6e3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6d8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xec}}]}]}}}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x600}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000780)={'syz_tun\x00', &(0x7f0000000740)=@ethtool_rxfh={0x1, 0x8, 0x5, 0xd1, 0x2, "3d518e", 0x7}})
setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) (async)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000100000000000100000054000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa060004000050000007000600727200000c000700010000000100000008000800000000000800090080"], 0x68}}, 0x0) (async)
sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000300000030000180060001000a000000060002000600000014000300fe8000000000000000000000000000aa060004000050"], 0x8c}}, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) (async)
sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newlink={0xb0, 0x10, 0x400, 0x78bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x220}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x5c, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x58, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6, 0xffffffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0xb407}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6e3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x6d8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xec}}]}]}}}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BCAST_FLOOD={0x5, 0x1e, 0x1}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) (async)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000780)={'syz_tun\x00', &(0x7f0000000740)=@ethtool_rxfh={0x1, 0x8, 0x5, 0xd1, 0x2, "3d518e", 0x7}}) (async)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, 0x0, 0x0) (async)

3.092095284s ago: executing program 1 (id=5615):
r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) (async, rerun: 64)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0)
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000305ffffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000a10001001c00129389000100626f6e64000000000c00028008000400ff7fffff"], 0x3c}}, 0x8000000)

2.931203035s ago: executing program 2 (id=5619):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.921383829s ago: executing program 4 (id=5621):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000080)}, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="d114792dfed5be9910198d09c1d23f738b", @ANYRESOCT=r2], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, r3}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x50bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0x5, 0xfff2}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd26, 0xfffffff8, {0x0, 0x0, 0x0, r10, {0xffe0, 0xd}, {}, {0x8, 0x14}}}, 0x31}, 0x1, 0x0, 0x0, 0x4000020}, 0x40004)
socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000740)=""/70, 0x46}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000007c0)=""/159, 0x9f}, {&(0x7f0000000cc0)=""/178, 0xb2}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0x8}, 0x3}, {{&(0x7f0000000900)=@pptp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000000b00)=""/75, 0x4b}], 0x2, &(0x7f0000000c40)=""/115, 0x73}, 0x32f2683b}, {{0x0, 0x0, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/146, 0x92}, 0x7ff}], 0x3, 0x40010003, 0x0)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

2.816956849s ago: executing program 2 (id=5622):
unshare(0x22020600)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x122, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="2c020401004fe800000200000000000000000000000076d8d64a96e5860d0001"], 0x18)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001})
r2 = socket$inet(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000008000000000000001ada006b1166000000ba0095"], &(0x7f00000004c0)='syzkaller\x00', 0x2412e57d, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x42)
ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}})
ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1})
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
bind(r3, &(0x7f00000001c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10)
listen(r3, 0x5)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0040008"], 0x4a)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000001e80))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6(0xa, 0x3, 0x3)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cgroup.controllers\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$alg(0x26, 0x5, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

2.552638054s ago: executing program 1 (id=5626):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket$igmp(0x2, 0x3, 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x58}}, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x5e04, 0x1, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000080)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000900)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xffb0}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffb0}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000540)="aa", 0x1}], 0x1}, 0x800)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.swap.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f00000005c0)=r6, 0x4)
recvmsg(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2)
r7 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r7)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r9=>0x0})
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
connect$can_j1939(r7, &(0x7f0000000400)={0x1d, r9, 0x3, {0x2, 0x0, 0x3}, 0xfd}, 0x18)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0x3c, &(0x7f0000000480)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, 0x0, 0x0)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}, 0x1, 0x0, 0x0, 0x4000044}, 0x4090)

2.55191927s ago: executing program 2 (id=5627):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x9972, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x5575fb9d55d41c01}, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x2a, &(0x7f0000000180)="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", 0x107)
setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000002c0), 0x4)
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000300)={0x0, 0x0, 0x1}, 0xc)
connect$inet6(r0, &(0x7f0000000340)={0xa, 0x4e23, 0x8020000c, @loopback, 0xffffffff}, 0x1c)
r2 = socket$inet(0x2, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x1})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@deltfilter={0x24, 0x2d, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x7, 0xffff}, {}, {0xf, 0x6}}}, 0x24}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0)
sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=ANY=[@ANYBLOB="140000000200000500"/20], 0x14}}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001cc0)={r3, 0x0, 0xe, 0x0, &(0x7f0000001d40)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$kcm(0x11, 0x200000000000002, 0x300)
r9 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r9, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001e00)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0)
sendmsg$inet(r9, &(0x7f0000001e40)={&(0x7f0000001e80)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000001ec0)=[{&(0x7f0000001f40)="1d53154a735f005ebef05eee117df12ce581c74253b76a14a0cff5570e14f84f0688ee9be8d963ce2fae80e429749c8c4c70", 0x32}, {&(0x7f0000001f80)="db1bd6edab795ceaca1873f9e150128eff72e9b41ad7ec2589abaf2117ffec3d03d29ea5d04c6232da5deae94f28c9cdb9c600e705b3109363a444f98a636bcde00a8d398bddf5145a405f6a4949a046a711d4183d1ae7b7071b6aa9fa13586b67bb3ae1c1945012bd2b56bead4d51652c5d79a73f92eaca93ac305e089960efed2471c2e9727c60bb2de869851a0d625c9358cb06", 0x95}, {&(0x7f0000002040)="fa3b2221598a0afb0c550c00d82112718177d5dbbb45c0bf8c302dfe4ccfea7d664549ef9bfb678e23327c5857702b3797911bdb27631da755153e33a26380693273ae0e03db39bbe43cc0ec8f0c8a9ca5422d2b4e79820d01dfd62ae3babd658614b58764bbdf54312e356eb20d56beeafe8f9f112325158f1116ca46808ce490a87669f856108639e7fea01431a6fbdfaad64ff82d0d29c0a53935ba6b01cd811cb7f2ab01fd93ca79e688a00ce12f59bdbb73a1572ed2f520473aceee3b58efec7c3d3fe8360d666ad9efd3e1ebed9cfa1b8f73", 0xd5}, {&(0x7f0000002140)="87347883d10c38301c7769255b5256d0a0f601d7e0c9c961a57077829c4a986bbc5cf915733c6f4ac55bdaa679760a33552fb1b2941422fa6cf9a825e3da7316da5cee89b00b15f60f2104020798aa753f3542c7b33a3d6c829e7e1d21a40de754163e97babc7d66c71acd6a9844cf0fca8bfd99910a579583c61b64a5", 0x7d}, {&(0x7f00000021c0)="6fe6d612c0fbea4a36618f09a03b2ac22bc9d2fad884ef6f96347c19d253d9f2cfe40a0a45419712e015ee7cd36be031932fd4b96cfac3c6c97f42ca708698a5efff034324ed0c8f58163a80c594d546082b117916c5d0233fe047ead7f798a99408853655cbe5092bb512ec09eecb0ef2b32ad8057063e55e8e517636804f1ef3c6bf0774984c1c338e5f08e0feee7d4ed397ab5e2ff72180444037df22533dd55307943b850dc2eb09dc4562a7d7d1f79a510d70b39cd9930ffc204e8b4a2371701669bab07fcbf57f51", 0xcb}, {&(0x7f00000022c0)="1454d76ead0147db61d3a35c736a2e651152b4d1200c5b606a9c741bff6e0a4516d0d0c7939f52e8a4e7ebe1272fc62c9d9b1534ead693cc2c79ef0ed01771fb3a50a491f9489337d0c6057b214e96d068280ffab350611dcdde0a919c0a3d04d0324a3f0f41a2d65d733a433295d2e9aa14d4f7af3decdfa9d1c9a4b8fdafac478535fb89a0e9671a37ded1984882a46a002ac2e876002a7b5887fac09b", 0x9e}, {&(0x7f0000002380)="065ba15f4320535b851b4fdb287c1b049654733f0e69aee7cdddb49ed8b01d7ef033246dbbe71e6f9b14609c89", 0x2d}, {&(0x7f00000023c0)="2437b9d5642d7be6e9cd8142d4015908dbdee23436eef84081644237af3a82ee119fe5d5a9fd5c30da187c450986b8643af7525b0406b4", 0x37}], 0x8}, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000002400)={0x6, @loopback, 0x15, 0x0, 'sed\x00', 0x1d}, 0x2c)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000002440)={0x4, 0x5, &(0x7f0000002500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000002540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002580)={r10, 0x0, 0xd, 0x0, &(0x7f0000002600)="e02753e868a100000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000002640)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe}, {@loopback, 0x4908, 0x0, 0x1}}, 0x44)
socket$inet(0x2, 0x1, 0x6)

2.533803383s ago: executing program 4 (id=5628):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2e, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4080}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', <r1=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r1, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c0002"], 0x3c}}, 0x0)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
close(0xffffffffffffffff)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote, 0x80}}}, 0x84)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, 0x0, 0x0)

2.390909572s ago: executing program 3 (id=5630):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="24000000200081dc2bbd7000fedbdf250200009740f9c0b800000037b41617f5c70517000000080000"], 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x44004)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="3daa000000000000711013000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x18ea, 0x4)
r4 = socket$kcm(0x2, 0xa, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00'], 0x48}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r5, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff40, 0x20000, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
close(0x3)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x40, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x23}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8000}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x41)

2.274317614s ago: executing program 4 (id=5632):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

2.184664982s ago: executing program 4 (id=5633):
r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={0xffffffffffffffff, 0x2, 0x18}, 0xc)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000000c0)={0x1, <r1=>0x0}, 0x8)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=r1, 0x4) (async, rerun: 64)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (rerun: 64)
read$nci(r3, &(0x7f0000000440)=""/225, 0xe1)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000200)={r2}, 0x8)
read(r4, &(0x7f0000000240)=""/185, 0xb9)
r5 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000700)="89000000120081ae08060cdc030ec0007f03e3f7fffe000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040000000400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async, rerun: 32)
read(r4, 0x0, 0x60) (rerun: 32)
sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001fc0)={0x21a4, 0x3d, 0x4, 0x70bd25, 0x25dfdbfc, {0x9}, [@nested={0x218f, 0x159, 0x0, 0x1, [@generic="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", @generic="7b5c510d6c26776d8102fc370d44deb418d6bda04ddd520564918914ee2ff096bb360b46635dcd2742919ef068837ee81f144360abe34e4647a94d315ff9a6d3af5c49afcd65138b48cab95d45cc44bc3e25dfcd17ab8f602347cb6b054b35c52b8c12e2497381641831cdc4b36facf91ae5f15fc13b821a8f89227bef7553503a58c0a4f9a71ebbf103386708d61085201ff33ea5f602b007cedbe3d2fad50e63df41abd39baef52a0631e1d1760af8341c7445662fe81cad2f002e13c5d2fe84a578e850fee34052a9", @generic="44c1ae0e841db0c4ac094b02a7b75742822c84b23c4ef8110538629321de855cab292c7adf452bea555ea3d5213621c711ec17f02c2b6447cc86c9491bd9def40801816648fc727fd3ab901e410ee156e7bf1f47388e3b9c2bfd457ed63fcb114ba3b06381bf1b514d72aea70947ccb7f939aec097f3a431fdca33196238651802", @generic="b245ce863d66c1e06f7e5c5d854d65a1fb5c2de09411dc3512a21b1afb84222ca881f4d3d488ebd3600b085a37865a777df9b58e0abc0ff70e2770ba04f2102666f2b40af4c27a151dc25195580a014ba2a4d3638657ba6f3e8e03c2ccb6f39aa6fa019c2508355d71fdcdd320f9b3950475728c9fe5463f7335da48", @nested={0x4, 0xa1}, @generic="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"]}]}, 0x21a4}, 0x1, 0x0, 0x0, 0x4}, 0x2c000881)
close(r0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfa70}, [@btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x8, 0x1, 0x0, r0}]}, &(0x7f0000000140)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x8, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r7, 0x0, 0x32, &(0x7f0000000540)=0x1000000, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000580)={'veth0_macvtap\x00', <r8=>0x0})
sendmmsg$inet(r7, &(0x7f00000005c0)=[{{&(0x7f0000000600)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x40010) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x3, 0xf, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000bf02000000000000850000008600000095"], &(0x7f0000001ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r9, 0x0, 0xe, 0x0, &(0x7f0000001f80)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.940419213s ago: executing program 0 (id=5634):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r3, 0x303, 0x0, 0x0, {0x13}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x30, r3, 0x303, 0x0, 0x0, {0x13}, [@handle=@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0)
accept$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14) (async)
r4 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x14)
setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x1000}, 0x4)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x70bd28, 0x255fdbfb, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}}, 0x0)

1.923393172s ago: executing program 3 (id=5635):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.786836286s ago: executing program 0 (id=5636):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x80000004, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c)
r1 = socket$inet6(0xa, 0x80002, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a0001000000000000000000020000000000000000000000080010000000001c080019"], 0x2c}}, 0x0)

1.771599999s ago: executing program 3 (id=5637):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000009c0)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000a40)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2ac, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x298, 0x0, @wg=@data={0x4, 0x9, 0x5, "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"}}}}, 0x2ba)
r5 = socket(0x10, 0x803, 0x0)
unshare(0x22020600)
r6 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r6, &(0x7f0000000140)={0x2, 0xffff, @remote}, 0x10)
connect$unix(r6, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0)
sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x44)

1.520053778s ago: executing program 1 (id=5638):
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e)
listen(r0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f00000008c0)={&(0x7f0000000980)=@hci, 0x80, &(0x7f0000000080)}, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYRESHEX=r6, @ANYBLOB="d114792dfed5be9910198d09c1d23f738b", @ANYRESOCT=r2], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x0, r3}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x50bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0x5, 0xfff2}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x24)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd26, 0xfffffff8, {0x0, 0x0, 0x0, r10, {0xffe0, 0xd}, {}, {0x8, 0x14}}}, 0x31}, 0x1, 0x0, 0x0, 0x4000020}, 0x40004)
socket$key(0xf, 0x3, 0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_netfilter(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001"], 0xbc}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000740)=""/70, 0x46}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000007c0)=""/159, 0x9f}, {&(0x7f0000000cc0)=""/178, 0xb2}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0x8}, 0x3}, {{&(0x7f0000000900)=@pptp, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000600)=""/211, 0xd3}, {&(0x7f0000000b00)=""/75, 0x4b}], 0x2, &(0x7f0000000c40)=""/115, 0x73}, 0x32f2683b}, {{0x0, 0x0, &(0x7f0000000f80), 0x0, &(0x7f0000000fc0)=""/146, 0x92}, 0x7ff}], 0x3, 0x40010003, 0x0)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1.519393688s ago: executing program 0 (id=5639):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x3}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newqdisc={0x170, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.321065472s ago: executing program 0 (id=5640):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000101000000000000030000008500000027000000180100002020702500000000002020207b1af8ff00000000bfa900000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000680)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0xa}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={<r1=>0x2, 0x1d, "22de3da7ab13dee51d5343ade91c7ba3a7ea2a7670abfff3a8c700a599"}, &(0x7f00000000c0)=0x25)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0xaa}, 0x8)

1.154713923s ago: executing program 0 (id=5641):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0000d20b06000500", @ANYRES16=r2], 0x24}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r1)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x53f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004}, 0x4) (async)
sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x98, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x53f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4004}, 0x4)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1) (async)
write$cgroup_int(r1, &(0x7f0000000200), 0xffffffc1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES64=r5, @ANYRESDEC=r0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x4040012}, 0x0)

1.068866518s ago: executing program 3 (id=5642):
write(0xffffffffffffffff, &(0x7f0000000000), 0x0)
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a00)=@newqdisc={0x7c, 0x24, 0xd0f, 0x70bd27, 0x25dfdbfe, {0x60, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x200, 0x81, 0x80000000, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x8, 0xfffffff7, 0x1, 0x28}}]}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x8004)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
r3 = socket(0x840000000002, 0x3, 0x100)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0xe, 0x0, &(0x7f0000000280)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
connect$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @remote}, 0x61)
sendmmsg$inet(r3, &(0x7f0000000600), 0x4000095, 0x0)
ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000640)={{0x2, 0x0, @empty}, {}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}})

859.65834ms ago: executing program 2 (id=5643):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

826.241997ms ago: executing program 1 (id=5644):
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000006980)=@nameseq={0x1e, 0x1, 0x1, {0x42}}, 0x10)
bind$tipc(r1, &(0x7f00000069c0)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000006b00)={0x42, 0x1}, 0x10)
bind$tipc(r1, 0x0, 0x0)
close(r1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x13, &(0x7f0000000980)=ANY=[@ANYBLOB="1808000000ffd0000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000010000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x2, 0xb019, &(0x7f0000000c80)=""/234}, 0x78)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000048c0)='cgroup.controllers\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000064c0)='./cgroup.cpu/syz1\x00', 0x1ff)
write$tun(r3, &(0x7f0000006500)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000004100)={0xd, 0x4, &(0x7f00000041c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0xda}]}, &(0x7f0000004980)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000006540), 0x4000, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000a80))
r5 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r5, &(0x7f0000000800), 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1, 0xb, &(0x7f00000062c0)=ANY=[@ANYBLOB="b40000000000000779119c00000000001801000020646c2500000000002020207b18f8ff0000000079a100000000000007010000f8ffffffb702000008000000b703000007000000850000002f0000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000006380)='GPL\x00', 0x2, 0xc, &(0x7f00000063c0)=""/195, 0x0, 0x2e, '\x00', 0x0, @fallback=0xd}, 0x59)
ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x17)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000006940)={0x28, 0x1411, 0x1, 0x70bd26, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044080)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000a40)={'vxcan0\x00'})
sendmsg$nl_generic(r3, &(0x7f0000006900)={&(0x7f0000006500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000068c0)={&(0x7f0000006580)={0x340, 0x22, 0x400, 0x70bd25, 0x25dfdbfe, {0x8}, [@generic="90ead8d427f669d8fa1d2ff1821288c2a314f0dec67c9f7d01d452ab5a195f01b8a0735291b573fd9f176f8d0fecf6729d6aa07ccb4e6c28586ead04348a7564e45f8cf281e6508f4bf1e9014910cb73a430de48d65741b55f39e8de685ed477c5631c66ce5b3543b7e2388d7489d1795a64d0e574ec4555cc38811c", @nested={0x2af, 0x133, 0x0, 0x1, [@generic="40f559a339ebd338b1c8e9348b9e0df3c7746fd071fdbbac89e5e932569a8f6390bd61f656e931476f95a2e0da1e096bbd847c67d24f458d90c452936e5e1bee597e5d706c34f90e312a66d936961783c2809a878db8576664a0b43f5b7b171f08f825e2c8d596b84bb55733946eaf5b68b2bb0cdf876372b3298f9c9e04acfd0a4a16db1c22de00a757d6684704d1c6e3690264c5a1ab613099353e09492175fd5e13fb9fdf955ac600f14920ccc5d4bb5f667e02afa546031f4abffa2199d5f7883f9f1deee800ed8988ed48640538f545352af52bddfafb69aa7172ef14d488a4e6d0f58d0e1396dacb0cae790cbebdabd526782a6a06", @generic="96a02b359c14ed8103c5856bf2652887475eaa6fb86f638d1d6b30819b74ba866458090cd39188cf9b7bdd3144bee95dfead1c7f334a9207979493e9db6b9b768d0afcd17469ef830cf5781effe631de4261f108a67451d0725f5d76004b843e12af605b4041a6964183a888bc0510f90e5b5af113d0046d030183293ba6e6232cacdf64744ca71908176cd825ea5acb4a1c26734933439c6b1f05d4f4c32ef73e916901e924ef7ba55c6097cf3b0fbe6b73e1849da1c1adcf45eea38f5772a7918b78a97f550b6df9624e83aa605423f868", @nested={0x4, 0x11b}, @nested={0x4, 0xc8}, @generic="3fe60aa3769ae7ac46c49b6feee7a69e7068dfa0c909d76b241e071baab41e739019a73555318a2b054e306a278a5265635177edd8b5b8d23848abb9c83ad7314d4a7857f2b66fe59e41e77432650095fe984300a0f42c15e1e5aaf4bd1c0b62fb65785ec8b1f043c58c181b859ba24fa5666792dc53986fad52ea489ccef50a5e329528c834b9c9b1bc5323b5b077073e3f5512a2ef424fa9ebbe81d032fbc4ed33cb98d148c6fd4bb54a21f8c80fec575cf968ea3cee3aa93714cdc790b409a01813061e29072ed5a8ecc469be76085eb4c7fc6ff04f1ae6"]}]}, 0x340}, 0x1, 0x0, 0x0, 0xc0}, 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006040)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000001d80)=[{&(0x7f00000003c0)=""/134, 0x86}, {&(0x7f0000000480)=""/135, 0x87}, {&(0x7f0000000540)=""/109, 0x6d}, {&(0x7f00000005c0)=""/248, 0xf8}, {&(0x7f00000006c0)=""/210, 0xd2}, {&(0x7f00000007c0)=""/38, 0x26}, {&(0x7f0000000800)}, {&(0x7f0000000840)=""/86, 0x56}, {&(0x7f0000000d80)=""/4096, 0x1000}], 0x9}}, {{0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000001e40)=""/40, 0x28}, {&(0x7f0000001e80)=""/224, 0xe0}, {&(0x7f0000001f80)=""/10, 0xa}, {&(0x7f0000001fc0)=""/241, 0xf1}, {&(0x7f00000020c0)=""/219, 0xdb}], 0x5, &(0x7f0000002240)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000002680)=[{&(0x7f0000002280)=""/72, 0x48}, {&(0x7f0000002300)=""/82, 0x52}, {&(0x7f0000002380)=""/156, 0x9c}, {&(0x7f0000002440)=""/245, 0xf5}, {&(0x7f0000002540)=""/110, 0x6e}, {&(0x7f00000025c0)=""/35, 0x23}, {&(0x7f0000002600)=""/100, 0x64}], 0x17}}, {{&(0x7f0000002700)=@abs, 0x6e, &(0x7f0000002bc0)=[{&(0x7f0000002780)=""/135, 0x87}, {&(0x7f0000002840)=""/83, 0x53}, {&(0x7f00000028c0)=""/42, 0x2a}, {&(0x7f0000002900)=""/87, 0x53}, {&(0x7f0000002980)=""/184, 0xb8}, {&(0x7f0000002a40)=""/116, 0x74}, {&(0x7f0000002ac0)=""/162, 0xa2}, {&(0x7f0000002b80)=""/25, 0x19}], 0x8}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000004200)=[{&(0x7f0000002cc0)=""/172, 0xac}, {&(0x7f0000002d80)=""/147, 0x93}, {&(0x7f0000002e40)=""/188, 0xbc}, {&(0x7f0000002f00)=""/235, 0xeb}, {&(0x7f0000003000)=""/135, 0x87}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/47, 0x2f}, {&(0x7f00000045c0)=""/226, 0xd6}], 0x8}}, {{&(0x7f0000004280)=@abs, 0x6e, &(0x7f0000004900)=[{&(0x7f0000004300)=""/255, 0xff}, {&(0x7f0000004400)=""/53, 0x35}, {&(0x7f0000004440)=""/230, 0xe6}, {&(0x7f0000004540)=""/95, 0x5f}, {&(0x7f0000006a00)=""/254, 0xfe}, {&(0x7f00000046c0)=""/208, 0xd0}, {&(0x7f00000047c0)=""/210, 0xd2}, {&(0x7f00000048c0)}], 0x8, &(0x7f0000004980)}}, {{&(0x7f00000049c0)=@abs, 0x6e, &(0x7f0000004b00)=[{&(0x7f0000004a40)=""/149, 0x95}], 0x1, &(0x7f0000004b40)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f0000004bc0)=@abs, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004c40)=""/18, 0x12}, {&(0x7f0000004c80)=""/20, 0x14}], 0x2, &(0x7f0000004d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000004d80)=""/43, 0x2b}, {&(0x7f0000004dc0)=""/4096, 0x1000}, {&(0x7f0000005dc0)=""/106, 0x6a}, {&(0x7f0000005e40)=""/255, 0xff}], 0x4, &(0x7f0000005f80)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}}], 0x9, 0x40010003, &(0x7f0000006280)={0x77359400})

669.93644ms ago: executing program 2 (id=5645):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0xfffffffd, 0x20000000, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x7ffffffe, 0x5}}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bridge0\x00'}]}, 0x54}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000580)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000680), 0x366, 0x10, &(0x7f00000006c0), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r1}, 0x18)

452.615797ms ago: executing program 3 (id=5646):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2c00000018000506000000000000000023000001fe000001000000000500010003fff900080004"], 0x2c}}, 0x0)
close(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x24000800}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x48}}, {{0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0, 0x70, 0x4008000}}], 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x4001, 0x3, 0x1f8, 0x10f0, 0x700001b, 0x148, 0x10f0, 0x148, 0x11e8, 0x206, 0x240, 0x11e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @empty, 0xffffff00, 0xffffffff, 'veth0_to_hsr\x00', 'sit0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x46}, 0x1ea, 0x70, 0x90, 0x0, {0x390, 0x8f00}}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0xffffffff, 0xffffffff, 'virt_wifi0\x00', 'syzkaller1\x00', {0xff}, {}, 0x9d, 0x2, 0x18}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x0, 0x3, 0x6, 0x1, 0x5], 0x3, 0x7}, {0xffffffffffffffff, [0x0, 0x6, 0x4, 0x0, 0x2, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x258)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018100000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

337.35415ms ago: executing program 2 (id=5647):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001d00010000000000ffdbdf252d"], 0x1c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000001040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001000)={&(0x7f0000000b40)=@newchain={0x48c, 0x64, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0xffe0, 0x8}, {0xfff1, 0xb}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_MPLS_TC={0x5, 0x45, 0x10}, @TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x40}]}}, @filter_kind_options=@f_flow={{0x9}, {0x42c, 0x2, [@TCA_FLOW_POLICE={0x420, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xda7}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0xffffd714, 0x0, 0x8, 0x5, 0x2, 0x2, 0x3, 0xffff8001, 0x0, 0x7, 0x10000, 0xd, 0x8, 0x55f, 0x0, 0x9, 0x5, 0x200, 0x4, 0x5, 0x1, 0x7, 0x80000000, 0x9, 0x80, 0x3, 0xa, 0x3, 0x6, 0x101, 0x3, 0xffffff90, 0x9000000, 0xfffff4a7, 0x1, 0xffffff5a, 0xf4bc, 0x6, 0x2, 0x2, 0xd, 0x0, 0x2, 0x4, 0x1000, 0x5, 0x9, 0xfffffff8, 0x18000000, 0x5, 0x5, 0x3, 0x9, 0x3, 0x400, 0x7, 0x1, 0x63a, 0x3, 0xffffff0d, 0x2, 0x1, 0x5, 0x9, 0x9, 0x5424, 0x0, 0x7e, 0x9, 0x7, 0x7, 0x6cf, 0x9, 0x9, 0x5d, 0x1ff, 0x7c, 0xd3, 0x0, 0x30, 0x4, 0xffffff18, 0x9, 0x9, 0x38000, 0x8, 0xeb4, 0xfffffffa, 0x9, 0x0, 0x4, 0x1, 0x80000001, 0xffffffff, 0x1000, 0xfffffff9, 0x0, 0xf, 0x81, 0xfff, 0x4, 0x3, 0x9, 0x5, 0x7, 0xfffffffc, 0x2, 0xb, 0x8, 0x3, 0x10, 0x8, 0x8, 0x400, 0xa, 0x3c, 0xfffffff8, 0x0, 0x5, 0xfff, 0x401, 0x4, 0x6, 0x7fffffff, 0x8, 0x1, 0xc23e, 0x400, 0xa, 0x2, 0x0, 0x5, 0x80, 0x8, 0xfffffffc, 0xcf5, 0x40, 0xfffffff9, 0xfffffffa, 0x74, 0x4, 0x8, 0x3, 0x7, 0x3, 0x3, 0x7fff, 0x6, 0xfffffff9, 0xe, 0x6, 0x3, 0x400, 0x100, 0x9, 0x0, 0x1, 0xf, 0x5, 0x2, 0x7d, 0xffff, 0x5, 0xffffffff, 0xfffffffb, 0x8, 0x7df, 0x0, 0x3, 0x520eb751, 0x8000, 0x7, 0xacc1, 0xf4000000, 0x7, 0x1, 0x80000000, 0x100, 0x2, 0xcd4, 0xffff, 0x200000, 0x4, 0x9, 0x0, 0x2, 0x2, 0x8, 0x2, 0x8aae, 0xff, 0x80000001, 0x6, 0x7ff, 0x7, 0x68, 0x1, 0x5, 0x9, 0x2000000, 0x0, 0x4, 0x2, 0xc, 0x3, 0x4, 0x51, 0x7, 0x2, 0x6, 0x401, 0x0, 0x1, 0x1, 0xd, 0x3, 0x4, 0x984, 0x3, 0x9, 0x6, 0x6, 0x6, 0x1b1d, 0xfffffff7, 0x3b6f503, 0x3, 0x8, 0x1ff, 0x7, 0x3, 0x0, 0xa8d, 0x9, 0x37a, 0x100, 0xa, 0x9816, 0x39f9, 0x1, 0x3, 0xcb56, 0xd, 0x10001, 0x5, 0x4, 0x7, 0xff4e, 0x2, 0x62, 0x1000, 0x4, 0x2, 0x9, 0x600000]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}]}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x938}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x48c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000)

212.285142ms ago: executing program 1 (id=5648):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x5e04, 0x1, 0x90, [0x0, 0x0, 0x200000000400], 0x2, 0x0, &(0x7f0000000080)=[{}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x108)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x10, &(0x7f0000000900)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0xffb0}}, [@jmp={0x5, 0x0, 0x2, 0x6, 0x4, 0x10, 0x4}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_1\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x80000}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0xc}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0xfcd3}]}}]}, 0x58}}, 0x20000000)
connect$can_j1939(r2, &(0x7f0000000400)={0x1d, r4, 0x3, {0x2, 0x0, 0x3}, 0xfd}, 0x18)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b000000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="24200400858d000090001280080001007674690084000280080005007f0000010800050000000000080005000000000008000400ffffffff080006000900000008000500e000000208000400ac1414aa08000400ac1414bb08000500ffffffff080003000900000008000100", @ANYRES32=r4, @ANYBLOB="08000300215b000008000100", @ANYRES32=r4, @ANYBLOB="080002000400000008000200280000000800022008000000"], 0xb0}, 0x1, 0x0, 0x0, 0x48001}, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000480)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24048840)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000005c0)=0x474c, 0x4)
bind$inet(r8, 0x0, 0x0)
connect$inet(r8, &(0x7f0000000600)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg(r8, &(0x7f0000000640), 0x800001d, 0x300)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000740)={'netdevsim0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

148.14632ms ago: executing program 3 (id=5649):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)="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", 0x3b8}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, 0x0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x140c0885)
r2 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000"], 0x38}}, 0x0)
syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="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"], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf25020000000500010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x840)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000000340)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @private=0xa010102, {[@timestamp_addr={0x44, 0x4, 0x8, 0x1, 0xf}]}}, {{0x3, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x1, 0x0, 0x0, 0x3ff}}}}}}, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'team0\x00', 0xc201})
recvmmsg(r0, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0)

147.420096ms ago: executing program 4 (id=5650):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001800010000000000080000000a3700", @ANYRES32=0x0, @ANYBLOB="5eeefb"], 0x44}}, 0x0)
syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x58, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x800, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0xc, 0x0, 0x0, {[@exp_fastopen={0xfe, 0xc, 0xf989, "4870669d7821c471"}, @md5sig={0x13, 0x12, "6171cffc515318c1c852cc0ce8dbc955"}, @sack={0x5, 0xe, [0x1, 0x0, 0xfffffffa]}, @md5sig={0x13, 0x12, "9829e5b8831b669841f72541c6efc910"}, @fastopen={0x22, 0x3, "c6"}]}}}}}}}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000540)={0x2, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip6_vti0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000400)="100300", 0x3, 0x4004, &(0x7f0000000440)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'syztnl0\x00', r5, 0x2f, 0xff, 0x1, 0x4, 0x30, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @mcast2, 0x1, 0x80, 0x0, 0x200000}})
r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="140426bd7000fcdbdf2513000000050003000d00000005000300070000000c0400000003aaaaaaaaaaaa06000800ffff000006000800a0aa0000"], 0x40}, 0x1, 0x0, 0x0, 0x4001}, 0x4080)
sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x10}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x6}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x88}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x20048004)

36.573079ms ago: executing program 0 (id=5651):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) (async)
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000280)='GPL\x00'}, 0x80)
r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8)
close(r2) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340))
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async)
ioctl$NS_GET_NSTYPE(r2, 0xb703, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x40)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)='%+9llu \x00'}, 0x20)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000580)={r5, &(0x7f00000005c0)}, 0x20) (async)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r0, 0x607d8000) (async, rerun: 64)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000b3b200ff0f0000000000be17ca972d8d8d3c0000c29a8fafa663186a00000a0000009a7d7a0b189b1a539500"], &(0x7f0000000000)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94)

0s ago: executing program 4 (id=5652):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000180)={0x2, &(0x7f00000001c0)=[{0x30, 0xde, 0x85, 0xfffff038}, {0x6, 0xfc, 0x0, 0xffffffff}]}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0)
r4 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'veth0_to_team\x00', &(0x7f00000000c0)=@ethtool_channels={0x3d, 0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0x1}})
r5 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x1}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000140)={0xc4, 0x3, 0x2}, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce)

kernel console output (not intermixed with test programs):

z.3.4105'.
[  722.452780][T23683] 8021q: adding VLAN 0 to HW filter on device bond0
[  722.599710][T23688] sctp: [Deprecated]: syz.4.4104 (pid 23688) Use of struct sctp_assoc_value in delayed_ack socket option.
[  722.599710][T23688] Use struct sctp_sack_info instead
[  722.607467][T23682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4103'.
[  722.684164][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  722.967960][T23717] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4111'.
[  723.078129][T23723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4115'.
[  723.078153][T23723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4115'.
[  723.078165][T23723] netlink: 580 bytes leftover after parsing attributes in process `syz.3.4115'.
[  723.280597][T23740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4118'.
[  723.726581][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  723.853055][T23770] vlan2: entered promiscuous mode
[  723.853076][T23770] syz_tun: entered promiscuous mode
[  723.919021][T23772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4129'.
[  723.976170][T23769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4127'.
[  723.976190][T23769] tipc: Invalid UDP bearer configuration
[  723.976230][T23769] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  724.160064][T23781] syzkaller0: entered promiscuous mode
[  724.160100][T23781] syzkaller0: entered allmulticast mode
[  724.315874][T23790] ovs-system: entered promiscuous mode
[  724.330903][T23783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4131'.
[  724.473278][T23794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4137'.
[  724.626534][T23798] netlink: 'syz.1.4139': attribute type 4 has an invalid length.
[  724.696829][T23804] sctp: [Deprecated]: syz.0.4140 (pid 23804) Use of int in max_burst socket option deprecated.
[  724.696829][T23804] Use struct sctp_assoc_value instead
[  724.709928][T23804] sctp: [Deprecated]: syz.0.4140 (pid 23804) Use of int in max_burst socket option deprecated.
[  724.709928][T23804] Use struct sctp_assoc_value instead
[  724.764810][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  724.794252][T23811] pim6reg: entered allmulticast mode
[  724.825485][T23813] netlink: Conntrack attr has 8 unknown bytes
[  724.825518][T23813] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  724.828760][T23813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4143'.
[  724.869274][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4144'.
[  724.869303][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4144'.
[  724.909469][T23816] gretap1: entered allmulticast mode
[  724.929834][T23817] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  724.943376][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4144'.
[  724.943405][T23816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4144'.
[  725.005573][T23810] tipc: Resetting bearer <eth:syzkaller0>
[  725.076048][T23810] tipc: Disabling bearer <eth:syzkaller0>
[  725.125712][T23810] pim6reg: left allmulticast mode
[  725.516242][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.516340][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.516365][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.516389][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.516412][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.516436][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.516459][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.516482][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.516506][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.516530][T23836] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma?
[  725.804976][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  726.042557][T23855] syzkaller1: entered promiscuous mode
[  726.042581][T23855] syzkaller1: entered allmulticast mode
[  726.215075][T23857] openvswitch: ovs-system: Dropping previously announced user features
[  726.844526][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  727.572661][T23919] lo: left promiscuous mode
[  727.579483][T23919] tunl0: left promiscuous mode
[  727.582377][T23919] gre0: left promiscuous mode
[  727.599338][T23919] erspan0: left promiscuous mode
[  727.610498][T23919] ip_vti0: left promiscuous mode
[  727.627867][T23919] ip6_vti0: left promiscuous mode
[  727.628964][T23919] sit0: left promiscuous mode
[  727.646624][T23916] netlink: 'syz.1.4170': attribute type 1 has an invalid length.
[  727.646826][T23919] ip6tnl0: left promiscuous mode
[  727.649239][T23919] ip6gre0: left promiscuous mode
[  727.652306][T23919] syz_tun: left promiscuous mode
[  727.681639][T23919] ip6gretap0: left promiscuous mode
[  727.690760][T23919] bridge0: left promiscuous mode
[  727.699206][T23919] vcan0: left promiscuous mode
[  727.700570][T23919] .`: left promiscuous mode
[  727.701692][T23919] 8021q: adding VLAN 0 to HW filter on device .`
[  727.702786][T23919] team0: left promiscuous mode
[  727.703912][T23919] 8021q: adding VLAN 0 to HW filter on device team0
[  727.733376][T23919] dummy0: left promiscuous mode
[  727.740924][T23919] nlmon0: left promiscuous mode
[  727.742196][T23919] vxcan0: left promiscuous mode
[  727.745178][T23919] vxcan1: left promiscuous mode
[  727.746271][T23919] veth0: left promiscuous mode
[  727.755339][T23919] veth1: left promiscuous mode
[  727.766385][T23919] wg0: left promiscuous mode
[  727.777133][T23919] wg1: left promiscuous mode
[  727.791982][T23919] wg2: left promiscuous mode
[  727.801771][T23919] veth0_to_bridge: left promiscuous mode
[  727.816907][T23919] veth1_to_bridge: left promiscuous mode
[  727.822416][T23919] veth0_to_bond: left promiscuous mode
[  727.838024][T23919] bond_slave_0: left promiscuous mode
[  727.841049][T23919] veth1_to_bond: left promiscuous mode
[  727.863882][T23919] bond_slave_1: left promiscuous mode
[  727.884570][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  727.898678][T23919] veth0_to_team: left promiscuous mode
[  727.903901][T23919] team_slave_0: left promiscuous mode
[  727.909771][T23919] veth1_to_team: left promiscuous mode
[  727.919631][T23936] nbd2: detected capacity change from 0 to 63
[  727.922452][T23919] team_slave_1: left promiscuous mode
[  727.936981][T23919] veth0_to_batadv: left promiscuous mode
[  727.940298][T23919] batadv_slave_0: left promiscuous mode
[  727.942710][T23919] veth1_to_batadv: left promiscuous mode
[  727.962669][T23919] batadv_slave_1: left promiscuous mode
[  727.971480][T23919] xfrm0: left promiscuous mode
[  727.979682][T23919] veth0_to_hsr: left promiscuous mode
[  727.991785][T23919] veth1_to_hsr: left promiscuous mode
[  728.000946][T23919] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  728.000968][T23919] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  728.001018][T23919] hsr0: left promiscuous mode
[  728.033680][T23919] veth1_virt_wifi: left promiscuous mode
[  728.040623][T23919] veth0_virt_wifi: left promiscuous mode
[  728.042136][T23919] virt_wifi0: left promiscuous mode
[  728.042155][T23919] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  728.113397][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[  728.113528][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[  728.132233][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[  728.132337][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[  728.184538][ T7589] wg2 speed is unknown, defaulting to 1000
[  728.184590][ T7589] syz2: Port: 1 Link ACTIVE
[  728.257498][ T5619] block nbd2: Receive control failed (result -104)
[  728.318538][T23950] __nla_validate_parse: 4 callbacks suppressed
[  728.318558][T23950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4178'.
[  728.449472][T23955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4179'.
[  728.499163][T23952] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4180'.
[  728.783199][T23968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4184'.
[  728.818294][T23978] sctp: [Deprecated]: syz.4.4186 (pid 23978) Use of struct sctp_assoc_value in delayed_ack socket option.
[  728.818294][T23978] Use struct sctp_sack_info instead
[  728.819017][T23978] sctp: [Deprecated]: syz.4.4186 (pid 23978) Use of struct sctp_assoc_value in delayed_ack socket option.
[  728.819017][T23978] Use struct sctp_sack_info instead
[  728.892734][T23982] FAULT_INJECTION: forcing a failure.
[  728.892734][T23982] name failslab, interval 1, probability 0, space 0, times 0
[  728.892766][T23982] CPU: 1 UID: 0 PID: 23982 Comm: syz.0.4187 Not tainted syzkaller #0 PREEMPT(full) 
[  728.892786][T23982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  728.892798][T23982] Call Trace:
[  728.892805][T23982]  <TASK>
[  728.892813][T23982]  dump_stack_lvl+0xe8/0x150
[  728.892845][T23982]  should_fail_ex+0x410/0x560
[  728.892876][T23982]  should_failslab+0xa8/0x100
[  728.892905][T23982]  __kmalloc_noprof+0xfe/0x720
[  728.892928][T23982]  ? tomoyo_encode+0x2ad/0x570
[  728.893063][T23982]  ? tomoyo_encode+0x2ad/0x570
[  728.893098][T23982]  tomoyo_encode+0x2ad/0x570
[  728.893131][T23982]  tomoyo_realpath_from_path+0x5fa/0x640
[  728.893167][T23982]  ? tomoyo_path_number_perm+0x219/0x5f0
[  728.893191][T23982]  tomoyo_path_number_perm+0x246/0x5f0
[  728.893218][T23982]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  728.893241][T23982]  ? __lock_acquire+0x747/0x2de0
[  728.893294][T23982]  ? hook_file_ioctl+0x1f2/0x600
[  728.893376][T23982]  ? __fget_files+0x2a/0x420
[  728.893404][T23982]  ? __fget_files+0x2a/0x420
[  728.893427][T23982]  ? __fget_files+0x3a2/0x420
[  728.893451][T23982]  ? __fget_files+0x2a/0x420
[  728.893480][T23982]  security_file_ioctl+0xc3/0x2a0
[  728.893560][T23982]  __se_sys_ioctl+0x47/0x170
[  728.893586][T23982]  do_syscall_64+0x166/0x520
[  728.893610][T23982]  ? trace_irq_disable+0x3b/0x140
[  728.893630][T23982]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.893650][T23982]  ? clear_bhb_loop+0x70/0xc0
[  728.893674][T23982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  728.893695][T23982] RIP: 0033:0x7f08c539f559
[  728.893713][T23982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  728.893728][T23982] RSP: 002b:00007f08c61cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  728.893748][T23982] RAX: ffffffffffffffda RBX: 00007f08c5625fa0 RCX: 00007f08c539f559
[  728.893761][T23982] RDX: 0000200000000100 RSI: 00000000000089f0 RDI: 0000000000000003
[  728.893773][T23982] RBP: 00007f08c61cd090 R08: 0000000000000000 R09: 0000000000000000
[  728.893784][T23982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  728.893795][T23982] R13: 00007f08c5626038 R14: 00007f08c5625fa0 R15: 00007ffcd19241d8
[  728.893828][T23982]  </TASK>
[  728.893881][T23982] ERROR: Out of memory at tomoyo_realpath_from_path.
[  728.934553][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  729.429242][T23999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4192'.
[  729.898541][T24009] bond2: entered promiscuous mode
[  729.964421][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  730.017734][T24019] netlink: 'syz.2.4197': attribute type 2 has an invalid length.
[  730.017755][T24019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4197'.
[  730.118526][T24016] netlink: 'syz.2.4197': attribute type 2 has an invalid length.
[  730.118546][T24016] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4197'.
[  730.397370][T24043] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4198'.
[  730.400739][T24041] Bluetooth: hci0: unsupported parameter 5134
[  730.400760][T24041] Bluetooth: hci0: unsupported parameter 8192
[  730.400772][T24041] Bluetooth: hci0: unsupported parameter 5134
[  730.400784][T24041] Bluetooth: hci0: unsupported parameter 8192
[  730.454358][T24032] IPVS: rr: TCP 127.0.0.1:21 - no destination available
[  730.482367][T24046] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[  730.563802][T24045] IPVS: stopping master sync thread 24046 ...
[  730.566630][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4202'.
[  730.571338][T24036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4202'.
[  731.005052][T24075] syzkaller0: entered promiscuous mode
[  731.005077][T24075] syzkaller0: entered allmulticast mode
[  731.014380][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  731.540921][T24092] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058)
[  731.548087][T24096] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058)
[  732.054469][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  733.085302][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  733.453923][T24105] x_tables: ip_tables: icmp match: only valid for protocol 1
[  733.460523][T24101] erspan0: entered promiscuous mode
[  733.463857][T24101] vlan5: entered promiscuous mode
[  733.596519][T24108] ip_tables: iptables: counters copy to user failed while replacing table
[  733.678463][T24115] __nla_validate_parse: 33 callbacks suppressed
[  733.678482][T24115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4224'.
[  733.789168][T24118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4223'.
[  733.792661][T24119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4224'.
[  733.863935][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4224'.
[  733.946924][T24125] sctp: [Deprecated]: syz.4.4225 (pid 24125) Use of struct sctp_assoc_value in delayed_ack socket option.
[  733.946924][T24125] Use struct sctp_sack_info instead
[  733.948850][T24125] sctp: [Deprecated]: syz.4.4225 (pid 24125) Use of struct sctp_assoc_value in delayed_ack socket option.
[  733.948850][T24125] Use struct sctp_sack_info instead
[  733.951491][T24126] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  734.124321][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  734.221216][T24139] bond0: entered promiscuous mode
[  734.258282][T24142] FAULT_INJECTION: forcing a failure.
[  734.258282][T24142] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  734.258303][T24142] CPU: 1 UID: 0 PID: 24142 Comm: syz.0.4231 Not tainted syzkaller #0 PREEMPT(full) 
[  734.258318][T24142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  734.258325][T24142] Call Trace:
[  734.258330][T24142]  <TASK>
[  734.258335][T24142]  dump_stack_lvl+0xe8/0x150
[  734.258355][T24142]  should_fail_ex+0x410/0x560
[  734.258373][T24142]  _copy_to_user+0x31/0xb0
[  734.258390][T24142]  br_dev_siocdevprivate+0xebd/0x16b0
[  734.258483][T24142]  ? __pfx_br_dev_siocdevprivate+0x10/0x10
[  734.258496][T24142]  ? rcu_is_watching+0x16/0xb0
[  734.258511][T24142]  ? __mutex_lock+0x30b/0x1550
[  734.258527][T24142]  ? do_vfs_ioctl+0x116f/0x1530
[  734.258542][T24142]  ? dev_ioctl+0x83c/0x1150
[  734.258567][T24142]  ? __pfx___mutex_lock+0x10/0x10
[  734.258579][T24142]  ? full_name_hash+0x92/0xe0
[  734.258598][T24142]  dev_ifsioc+0xb56/0x1360
[  734.258614][T24142]  dev_ioctl+0x84c/0x1150
[  734.258628][T24142]  sock_ioctl+0x753/0x7e0
[  734.258646][T24142]  ? __pfx_sock_ioctl+0x10/0x10
[  734.258661][T24142]  ? __fget_files+0x3a2/0x420
[  734.258675][T24142]  ? __fget_files+0x2a/0x420
[  734.258690][T24142]  ? bpf_lsm_file_ioctl+0x9/0x20
[  734.258706][T24142]  ? __pfx_sock_ioctl+0x10/0x10
[  734.258720][T24142]  __se_sys_ioctl+0xfc/0x170
[  734.258733][T24142]  do_syscall_64+0x166/0x520
[  734.258745][T24142]  ? trace_irq_disable+0x3b/0x140
[  734.258756][T24142]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.258766][T24142]  ? clear_bhb_loop+0x70/0xc0
[  734.258779][T24142]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  734.258788][T24142] RIP: 0033:0x7f08c539f559
[  734.258799][T24142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  734.258808][T24142] RSP: 002b:00007f08c61cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  734.258820][T24142] RAX: ffffffffffffffda RBX: 00007f08c5625fa0 RCX: 00007f08c539f559
[  734.258827][T24142] RDX: 0000200000000100 RSI: 00000000000089f0 RDI: 0000000000000003
[  734.258834][T24142] RBP: 00007f08c61cd090 R08: 0000000000000000 R09: 0000000000000000
[  734.258840][T24142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  734.258848][T24142] R13: 00007f08c5626038 R14: 00007f08c5625fa0 R15: 00007ffcd19241d8
[  734.258876][T24142]  </TASK>
[  734.381689][ T1996] block nbd2: Connection timed out, retrying (0/1 alive)
[  734.386174][ T1996] block nbd2: Dead connection, failed to find a fallback
[  734.386195][ T1996] block nbd2: shutting down sockets
[  734.386208][ T1996] blk_print_req_error: 61 callbacks suppressed
[  734.386219][ T1996] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  734.386245][ T1996] buffer_io_error: 138 callbacks suppressed
[  734.386255][ T1996] Buffer I/O error on dev nbd2, logical block 0, async page read
[  734.386283][ T1996] Buffer I/O error on dev nbd2, logical block 1, async page read
[  734.386302][ T1996] Buffer I/O error on dev nbd2, logical block 2, async page read
[  734.386315][ T1996] Buffer I/O error on dev nbd2, logical block 3, async page read
[  734.390409][ T1996] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  734.390447][ T1996] Buffer I/O error on dev nbd2, logical block 0, async page read
[  734.390463][ T1996] Buffer I/O error on dev nbd2, logical block 1, async page read
[  734.390477][ T1996] Buffer I/O error on dev nbd2, logical block 2, async page read
[  734.390491][ T1996] Buffer I/O error on dev nbd2, logical block 3, async page read
[  734.390886][ T1996] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  734.390909][ T1996] Buffer I/O error on dev nbd2, logical block 0, async page read
[  734.394914][ T1996] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  734.394940][ T1996] Buffer I/O error on dev nbd2, logical block 1, async page read
[  734.395070][ T1996] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  734.395221][ T1996] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  734.396878][ T1996] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  734.397974][ T1996] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  734.398658][ T1996] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  734.398834][ T1996] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[  734.400904][T23896] ldm_validate_partition_table(): Disk read failed.
[  734.404819][T23896] Dev nbd2: unable to read RDB block 0
[  734.409650][T23896]  nbd2: unable to read partition table
[  734.451092][T23896] ldm_validate_partition_table(): Disk read failed.
[  734.453394][T23896] Dev nbd2: unable to read RDB block 0
[  734.456186][T23896]  nbd2: unable to read partition table
[  734.751702][T24150] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4233'.
[  734.889110][T24155] ip_tables: iptables: counters copy to user failed while replacing table
[  735.074133][T24155] bridge0: port 2(bridge_slave_1) entered disabled state
[  735.076829][T24155] bridge0: port 1(bridge_slave_0) entered disabled state
[  735.164428][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  735.505090][T24155] vlan0: left promiscuous mode
[  735.505431][T24155] vlan1: left promiscuous mode
[  735.505727][T24155] macvlan0: left promiscuous mode
[  735.505865][T24155] macvlan1: left promiscuous mode
[  735.506169][T24155] ipvlan1: left promiscuous mode
[  735.506311][T24155] geneve0: left promiscuous mode
[  735.506491][T24155] geneve1: left promiscuous mode
[  735.506666][T24155] netdevsim netdevsim3 netdevsim0: left promiscuous mode
[  735.507134][T24155] netdevsim netdevsim3 netdevsim1: left promiscuous mode
[  735.507563][T24155] netdevsim netdevsim3 netdevsim2: left promiscuous mode
[  735.507829][T24155] mac80211_hwsim hwsim48 ..ãc¤±: left promiscuous mode
[  735.507999][T24155] geneve2: left promiscuous mode
[  735.508138][T24155] macvlan2: left promiscuous mode
[  735.508276][T24155] syztnl0: left promiscuous mode
[  735.508618][T24155] bond1: left promiscuous mode
[  735.508753][T24155] veth2: left promiscuous mode
[  735.508895][T24155] veth3: left promiscuous mode
[  735.509040][T24155] bridge1: left promiscuous mode
[  735.509190][T24155] vx0: left promiscuous mode
[  735.509307][T24155] vxlan0: left promiscuous mode
[  735.509420][T24155] ip6tnl1: left promiscuous mode
[  735.509533][T24155] vti0: left promiscuous mode
[  735.509545][T24155] vti0: left allmulticast mode
[  735.509826][T24155] geneve3: left promiscuous mode
[  735.509963][T24155] bond3: left promiscuous mode
[  735.510259][T24155] xfrm1: left promiscuous mode
[  735.532816][T24155] vlan2: left allmulticast mode
[  735.532836][T24155] dummy0: left allmulticast mode
[  735.785054][ T7589] wg2 speed is unknown, defaulting to 1000
[  735.785093][ T7589] syz2: Port: 1 Link DOWN
[  735.988509][T24187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4248'.
[  736.164786][T24194] syzkaller0: entered promiscuous mode
[  736.164808][T24194] syzkaller0: entered allmulticast mode
[  736.204558][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  736.313952][T24201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4251'.
[  736.962913][T24219] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4255'.
[  737.072518][T24205] bridge_slave_1: left allmulticast mode
[  737.072547][T24205] bridge_slave_1: left promiscuous mode
[  737.072823][T24205] bridge0: port 2(bridge_slave_1) entered disabled state
[  737.117428][T24205] bridge_slave_0: left allmulticast mode
[  737.117453][T24205] bridge_slave_0: left promiscuous mode
[  737.117686][T24205] bridge0: port 1(bridge_slave_0) entered disabled state
[  737.197292][T24219] tipc: Cannot configure node identity twice
[  737.244511][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  737.513263][T24239] x_tables: ip6_tables: DNAT target: only valid in nat table, not syz1
[  737.583913][T24244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4264'.
[  737.638965][T24247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4265'.
[  737.653490][T24247] Bluetooth: MGMT ver 1.23
[  737.911578][T24258] syzkaller0: entered promiscuous mode
[  737.911600][T24258] syzkaller0: entered allmulticast mode
[  737.943731][T24258] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  737.957614][T24258] tipc: Resetting bearer <eth:syzkaller0>
[  738.138998][T24257] tipc: Resetting bearer <eth:syzkaller0>
[  738.228110][T24257] tipc: Disabling bearer <eth:syzkaller0>
[  738.288175][T24273] xt_ipcomp: unknown flags 1D
[  738.294514][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  738.412358][T24276] openvswitch: netlink: Flow actions attr not present in new flow.
[  738.443364][T24276] netlink: 'syz.0.4273': attribute type 1 has an invalid length.
[  738.528868][T24276] bond4: entered promiscuous mode
[  738.532016][T24276] 8021q: adding VLAN 0 to HW filter on device bond4
[  738.585121][T24286] 8021q: adding VLAN 0 to HW filter on device bond4
[  738.588525][T24286] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  738.588547][T24286] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  738.624702][T24286] bond4: (slave wireguard0): making interface the new active one
[  738.624726][T24286] wireguard0: entered promiscuous mode
[  738.626093][T24286] bond4: (slave wireguard0): Enslaving as an active interface with an up link
[  738.745022][T24297] __nla_validate_parse: 4 callbacks suppressed
[  738.745036][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4277'.
[  738.780044][T24299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4278'.
[  739.023979][T24311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4282'.
[  739.107290][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4283'.
[  739.324501][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  739.333212][T24329] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4290'.
[  739.333236][T24329] openvswitch: netlink: Flow key attr not present in new flow.
[  739.619970][T24347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4293'.
[  740.043200][T24377] openvswitch: ovs-system: Dropping previously announced user features
[  740.113405][T24374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4302'.
[  740.128550][T24374] veth1_to_batadv: entered allmulticast mode
[  740.265366][T24386] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4307'.
[  740.265397][T24386] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4307'.
[  740.300305][T24389] lo: Caught tx_queue_len zero misconfig
[  740.351655][T24393] netlink: 'syz.3.4309': attribute type 1 has an invalid length.
[  740.374484][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  740.399330][T24393] bond4: entered promiscuous mode
[  740.399711][T24393] 8021q: adding VLAN 0 to HW filter on device bond4
[  740.418081][T24393] vlan3: entered allmulticast mode
[  740.418102][T24393] bond4: entered allmulticast mode
[  740.419829][T24393] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4309'.
[  740.521440][T24401] netlink: 'syz.3.4312': attribute type 12 has an invalid length.
[  740.521461][T24401] netlink: 'syz.3.4312': attribute type 11 has an invalid length.
[  740.722480][T24413] openvswitch: ovs-system: Dropping previously announced user features
[  741.112219][T24434] syzkaller1: entered promiscuous mode
[  741.112243][T24434] syzkaller1: entered allmulticast mode
[  741.404480][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  741.409751][T24441] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  741.777406][T24467] openvswitch: ovs-system: Dropping previously announced user features
[  741.992230][T24483] openvswitch: netlink: Multiple metadata blocks provided
[  742.092360][T24485] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  742.373049][T24507] netlink: 'syz.0.4340': attribute type 1 has an invalid length.
[  742.409264][T24507] vlan5: entered promiscuous mode
[  742.409279][T24507] hsr0: entered promiscuous mode
[  742.412198][T24507] vlan5: entered allmulticast mode
[  742.412218][T24507] hsr0: entered allmulticast mode
[  742.412230][T24507] hsr_slave_1: entered allmulticast mode
[  742.446050][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  742.476034][T24507] hsr_slave_1: left promiscuous mode
[  742.679016][T24523] openvswitch: ovs-system: Dropping previously announced user features
[  742.830775][T24536] netlink: 'syz.4.4347': attribute type 23 has an invalid length.
[  742.830798][T24536] netlink: 'syz.4.4347': attribute type 21 has an invalid length.
[  742.830813][T24536] IPv6: NLM_F_CREATE should be specified when creating new route
[  743.361198][T24555] netlink: 'syz.1.4354': attribute type 1 has an invalid length.
[  743.383453][T24555] 8021q: adding VLAN 0 to HW filter on device bond0
[  743.427802][T24555] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  743.472383][T24555] 8021q: adding VLAN 0 to HW filter on device bond3
[  743.484502][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  743.582846][T24563] netlink: 'syz.1.4356': attribute type 10 has an invalid length.
[  743.582868][T24563] netlink: 'syz.1.4356': attribute type 5 has an invalid length.
[  743.591916][T24563] geneve3: entered promiscuous mode
[  743.591939][T24563] geneve3: entered allmulticast mode
[  743.595482][T13581] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 57231 - 0
[  743.595696][T13581] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 57231 - 0
[  743.595753][T13581] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 57231 - 0
[  743.595784][T13581] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 57231 - 0
[  744.062185][T24588] __nla_validate_parse: 11 callbacks suppressed
[  744.062205][T24588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4365'.
[  744.062220][T24588] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4365'.
[  744.062235][T24588] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4365'.
[  744.090970][T24593] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4366'.
[  744.157647][T24593] netlink: 'syz.2.4366': attribute type 1 has an invalid length.
[  744.393580][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4370'.
[  744.393603][T24609] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4370'.
[  744.398753][T24609] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4370'.
[  744.420289][T24611] ip_tables: iptables: counters copy to user failed while replacing table
[  744.524466][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  744.690723][T24619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4372'.
[  745.147290][T24654] syzkaller1: entered promiscuous mode
[  745.147314][T24654] syzkaller1: entered allmulticast mode
[  745.221311][T24669] netlink: 'syz.1.4379': attribute type 1 has an invalid length.
[  745.564223][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  745.857649][T24702] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  745.858509][T24702] syzkaller0: entered promiscuous mode
[  745.858528][T24702] syzkaller0: entered allmulticast mode
[  746.032342][T24707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4387'.
[  746.045579][T24701] bond4: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  746.053544][T24701] bond4 (unregistering): Released all slaves
[  746.256698][T24693] tipc: Resetting bearer <eth:syzkaller0>
[  746.342952][T24693] tipc: Disabling bearer <eth:syzkaller0>
[  746.604249][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  746.692696][T24732] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  746.828234][T24732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4391'.
[  746.876675][T24741] SET target dimension over the limit!
[  746.973360][T24741] netlink: Unknown conntrack attr (type=5126, max=9)
[  746.973406][T24741] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  747.188456][T24754] openvswitch: ovs-system: Dropping previously announced user features
[  747.192785][T24727] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  747.548166][T24777] netlink: 'syz.0.4397': attribute type 11 has an invalid length.
[  747.644249][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  747.917783][T24769] syzkaller0: entered promiscuous mode
[  747.917806][T24769] syzkaller0: entered allmulticast mode
[  748.113025][T24801] veth0: Caught tx_queue_len zero misconfig
[  748.473312][T24831] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  748.491142][T24836] openvswitch: ovs-system: Dropping previously announced user features
[  748.684431][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  749.356907][T24853] batadv0: entered promiscuous mode
[  749.427352][T24853] vlan3: entered promiscuous mode
[  749.515548][T24858] syzkaller0: entered promiscuous mode
[  749.515582][T24858] syzkaller0: entered allmulticast mode
[  749.724559][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  749.835135][T24882] netlink: 'syz.1.4419': attribute type 1 has an invalid length.
[  749.942608][T24887] netlink: 'syz.1.4419': attribute type 2 has an invalid length.
[  749.957515][T24888] netlink: 'syz.1.4419': attribute type 2 has an invalid length.
[  749.993886][T24887] : entered promiscuous mode
[  750.111204][T24896] __nla_validate_parse: 2 callbacks suppressed
[  750.111227][T24896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4418'.
[  750.111254][T24896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4418'.
[  750.146617][T24896] veth1: entered promiscuous mode
[  750.147687][T24896] veth0: entered promiscuous mode
[  750.148446][T24896] debugfs: 'hsr1' already exists in 'hsr'
[  750.148465][T24896] Cannot create hsr debugfs directory
[  750.148519][T24896] hsr1: Slave A (veth1) is not up; please bring it up to get a fully working HSR network
[  750.148535][T24896] hsr1: Slave B (veth0) is not up; please bring it up to get a fully working HSR network
[  750.207929][T24898] openvswitch: ovs-system: Dropping previously announced user features
[  750.300336][T24869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4415'.
[  750.313089][T24869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4415'.
[  750.581088][T24912] netlink: 'syz.1.4425': attribute type 10 has an invalid length.
[  750.583704][T24912] syz_tun: entered promiscuous mode
[  750.659671][T24912] syz_tun: entered allmulticast mode
[  750.660360][T24912] .`: (slave syz_tun): Enslaving as an active interface with an up link
[  750.678609][T24912] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4425'.
[  750.764513][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  751.036877][T24928] syzkaller0: entered promiscuous mode
[  751.036901][T24928] syzkaller0: entered allmulticast mode
[  751.096837][T24949] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes.
[  751.369065][T24962] netlink: 'syz.4.4435': attribute type 1 has an invalid length.
[  751.810486][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  752.848708][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  753.884298][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  753.893109][T24949] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  753.930072][T24952] gretap1: entered promiscuous mode
[  753.989396][T24981] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  753.993802][ T5280] 8021q: adding VLAN 0 to HW filter on device batadv0
[  753.995624][ T1109] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  753.996605][ T1109] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  753.996646][ T1109] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  753.996679][ T1109] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  754.153285][T24990] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4442'.
[  754.188876][T24968] ovs-system: entered promiscuous mode
[  754.433385][T25005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4444'.
[  754.435864][T25005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4444'.
[  754.535433][T25006] netlink: 'syz.3.4445': attribute type 1 has an invalid length.
[  754.535452][T25006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4445'.
[  754.732731][T25019] x_tables: ip_tables: icmp match: only valid for protocol 1
[  754.781061][T25003] netlink: 'syz.4.4443': attribute type 4 has an invalid length.
[  754.924382][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  755.080036][T25037] gre1: entered promiscuous mode
[  755.091204][T25041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4452'.
[  755.141145][T25038] syzkaller0: entered promiscuous mode
[  755.141167][T25038] syzkaller0: entered allmulticast mode
[  755.482259][T25046] veth5: entered promiscuous mode
[  755.593743][T25056] syzkaller0: entered promiscuous mode
[  755.593766][T25056] syzkaller0: entered allmulticast mode
[  755.611375][T25056] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  755.819874][T25047] tipc: Resetting bearer <eth:syzkaller0>
[  755.896312][T25047] tipc: Disabling bearer <eth:syzkaller0>
[  755.934231][T25084] syzkaller0: entered promiscuous mode
[  755.934255][T25084] syzkaller0: entered allmulticast mode
[  755.964564][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  756.032526][T25086] tipc: Started in network mode
[  756.032556][T25086] tipc: Node identity 2629bec618ac, cluster identity 4711
[  756.054180][T25086] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  756.073759][T25084] tipc: Resetting bearer <eth:syzkaller0>
[  756.268036][T25108] batadv1: entered promiscuous mode
[  756.302459][T25108] __nla_validate_parse: 1 callbacks suppressed
[  756.302480][T25108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4462'.
[  756.519899][T25063] tipc: Resetting bearer <eth:syzkaller0>
[  756.602081][T25063] tipc: Disabling bearer <eth:syzkaller0>
[  756.846103][T25132] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4468'.
[  757.004498][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  757.069575][T25140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4467'.
[  757.588445][T25165] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4474'.
[  757.636575][  T275] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  757.636634][  T275] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  757.636666][  T275] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  757.636696][  T275] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  757.866793][T25173] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  758.044465][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  758.091420][T25180] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4479'.
[  758.093614][T25179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4478'.
[  758.093646][T25179] netlink: 'syz.2.4478': attribute type 10 has an invalid length.
[  758.093660][T25179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4478'.
[  758.223247][T25184] syzkaller1: entered promiscuous mode
[  758.223269][T25184] syzkaller1: entered allmulticast mode
[  759.006474][T25212] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4488'.
[  759.065629][T25212] 8021q: adding VLAN 0 to HW filter on device bond3
[  759.094268][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  759.333284][T25229] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4489'.
[  760.134285][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  760.224854][T25256] ip_tables: iptables: counters copy to user failed while replacing table
[  760.440872][T25262] sit1: entered allmulticast mode
[  760.827240][T25285] netlink: 'syz.2.4504': attribute type 1 has an invalid length.
[  761.164386][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  761.296172][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4509'.
[  761.667147][T25324] Cannot find del_set index 4 as target
[  761.667834][T25325] Cannot find del_set index 4 as target
[  761.700015][T25320] syzkaller1: entered promiscuous mode
[  761.700039][T25320] syzkaller1: entered allmulticast mode
[  761.719220][T25320] ªªªªªª: renamed from vlan0 (while UP)
[  762.204393][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  762.414935][T25349] netlink: 'syz.4.4520': attribute type 10 has an invalid length.
[  762.778835][T25372] ip6t_REJECT: ECHOREPLY is not supported
[  762.961975][T25391] __nla_validate_parse: 1 callbacks suppressed
[  762.961994][T25391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4528'.
[  763.232026][T25406] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4534'.
[  763.246444][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  763.293984][T25409] netlink: 'syz.4.4535': attribute type 30 has an invalid length.
[  763.432586][T25403] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.695248][T25403] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.747050][T25432] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  763.751009][T25433] syzkaller0: entered promiscuous mode
[  763.751030][T25433] syzkaller0: entered allmulticast mode
[  763.763217][T25430] tipc: Resetting bearer <eth:syzkaller0>
[  763.872826][T25403] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.890495][T25427] tipc: Resetting bearer <eth:syzkaller0>
[  763.913054][T25427] tipc: Disabling bearer <eth:syzkaller0>
[  763.958011][T25403] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.091689][T13581] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  764.145331][T13581] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  764.145424][T13581] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  764.145456][T13581] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  764.207050][T25442] bridge_slave_0: left allmulticast mode
[  764.207075][T25442] bridge_slave_0: left promiscuous mode
[  764.207315][T25442] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.284199][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  764.781384][T25473] ip6gre1: entered promiscuous mode
[  764.781399][T25473] ip6gre1: entered allmulticast mode
[  764.797610][T25473] netlink: 'syz.3.4556': attribute type 21 has an invalid length.
[  764.797629][T25473] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4556'.
[  764.797699][T25473] netlink: 'syz.3.4556': attribute type 4 has an invalid length.
[  764.797711][T25473] netlink: 'syz.3.4556': attribute type 5 has an invalid length.
[  764.797721][T25473] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4556'.
[  764.928058][T25479] openvswitch: ovs-system: Dropping previously announced user features
[  765.324877][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  766.176359][T25531] openvswitch: ovs-system: Dropping previously announced user features
[  766.244289][T25537] veth1: Caught tx_queue_len zero misconfig
[  766.364317][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  766.845264][T25578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4580'.
[  767.095818][T25597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4584'.
[  767.174828][T25599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4585'.
[  767.414225][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  767.783502][T25614] syzkaller1: entered promiscuous mode
[  767.783525][T25614] syzkaller1: entered allmulticast mode
[  767.843758][T25619] netlink: 140 bytes leftover after parsing attributes in process `syz.3.4590'.
[  767.847811][T25619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4590'.
[  767.847843][T25619] netlink: 'syz.3.4590': attribute type 10 has an invalid length.
[  767.847858][T25619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4590'.
[  768.023625][T25619] geneve4: entered promiscuous mode
[  768.023649][T25619] geneve4: entered allmulticast mode
[  768.444205][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  769.021740][T25683] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  769.160659][T25683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4603'.
[  769.162592][T25683] bridge_slave_1: left allmulticast mode
[  769.162615][T25683] bridge_slave_1: left promiscuous mode
[  769.162801][T25683] bridge0: port 2(bridge_slave_1) entered disabled state
[  769.219531][T25695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4605'.
[  769.389351][T25695] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4605'.
[  769.389376][T25695] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  769.484205][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  769.557553][T25702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4609'.
[  769.558162][T25698] netlink: 'syz.3.4607': attribute type 2 has an invalid length.
[  769.665966][T25705] sctp: [Deprecated]: syz.2.4610 (pid 25705) Use of struct sctp_assoc_value in delayed_ack socket option.
[  769.665966][T25705] Use struct sctp_sack_info instead
[  769.719439][T25713] openvswitch: ovs-system: Dropping previously announced user features
[  769.739381][T25711] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4612'.
[  769.835543][T25719] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4615'.
[  769.929685][T25731] Bluetooth: hci0: unsupported parameter 5135
[  769.929706][T25731] Bluetooth: hci0: unsupported parameter 8192
[  769.929719][T25731] Bluetooth: hci0: unsupported parameter 5135
[  769.929730][T25731] Bluetooth: hci0: unsupported parameter 8192
[  770.158323][T25774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4620'.
[  770.171826][T25774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4620'.
[  770.417629][T25802] syzkaller0: entered promiscuous mode
[  770.417652][T25802] syzkaller0: entered allmulticast mode
[  770.435369][T25802] bond0: (slave ip6tnl0): Error: Device type is different from other slaves
[  770.524365][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  770.661772][T25812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4623'.
[  771.429897][T25891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4634'.
[  771.442498][T25891] ipvlan2: entered promiscuous mode
[  771.574787][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  771.881030][T25911] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.323362][   T30] audit: type=1800 audit(1792517189.831:21): pid=25935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4649" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1315 res=0 errno=0
[  772.604218][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  772.828804][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.828804][T25970] Use struct sctp_assoc_value instead
[  772.828837][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.828837][T25970] Use struct sctp_assoc_value instead
[  772.828866][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.828866][T25970] Use struct sctp_assoc_value instead
[  772.828887][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.828887][T25970] Use struct sctp_assoc_value instead
[  772.828908][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.828908][T25970] Use struct sctp_assoc_value instead
[  772.828927][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.828927][T25970] Use struct sctp_assoc_value instead
[  772.828948][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.828948][T25970] Use struct sctp_assoc_value instead
[  772.828968][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.828968][T25970] Use struct sctp_assoc_value instead
[  772.828988][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.828988][T25970] Use struct sctp_assoc_value instead
[  772.829008][T25970] sctp: [Deprecated]: syz.0.4657 (pid 25970) Use of int in maxseg socket option.
[  772.829008][T25970] Use struct sctp_assoc_value instead
[  773.649758][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  773.910214][T26015] ip6tnl3: entered allmulticast mode
[  773.922723][T13581] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  773.922964][T13581] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  773.944499][ T7517] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  774.007418][ T7517] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  774.200513][T26031] netlink: 'syz.0.4670': attribute type 4 has an invalid length.
[  774.223246][T26031] netlink: 'syz.0.4670': attribute type 4 has an invalid length.
[  774.454393][ T7517] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  774.488245][T26046] __nla_validate_parse: 8 callbacks suppressed
[  774.488266][T26046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'.
[  774.694392][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  774.710725][T26063] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4675'.
[  774.949308][T26074] 8021q: adding VLAN 0 to HW filter on device .`
[  774.952398][T26074] 8021q: adding VLAN 0 to HW filter on device team0
[  775.038135][T26074] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  775.038157][T26074] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  775.041566][T26074] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  775.092061][T25976] bridge0: port 1(bridge_slave_0) entered blocking state
[  775.092159][T25976] bridge0: port 1(bridge_slave_0) entered forwarding state
[  775.109124][T25976] bridge0: port 2(bridge_slave_1) entered blocking state
[  775.109240][T25976] bridge0: port 2(bridge_slave_1) entered forwarding state
[  775.148766][ T7517] wg2 speed is unknown, defaulting to 1000
[  775.148805][ T7517] syz2: Port: 1 Link ACTIVE
[  775.149242][T26082] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4682'.
[  775.149260][T26082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4682'.
[  775.149275][T26082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4682'.
[  775.149289][T26082] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4682'.
[  775.190708][T26097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4680'.
[  775.191213][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4680'.
[  775.340500][T26090] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  775.371171][T26090] bond4 (unregistering): Released all slaves
[  775.416353][T26097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4680'.
[  775.443779][T26099] netlink: 'syz.1.4681': attribute type 3 has an invalid length.
[  775.567069][T26106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4685'.
[  775.724416][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  775.746678][T26124] nftables ruleset with unbound set
[  776.473607][T26169] x_tables: duplicate underflow at hook 3
[  776.764426][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  777.294533][T26193] bond0: entered promiscuous mode
[  777.294557][T26193] veth0_to_bond: entered promiscuous mode
[  777.700131][T26224] hsr0: entered promiscuous mode
[  777.804405][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  777.804493][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  777.929108][T26220] hsr0: left promiscuous mode
[  777.960272][T26245] openvswitch: ovs-system: Dropping previously announced user features
[  777.968566][T26244] xt_hashlimit: size too large, truncated to 1048576
[  778.571516][T26286] 8021q: adding VLAN 0 to HW filter on device bond4
[  778.637959][T26286] 8021q: adding VLAN 0 to HW filter on device bond4
[  778.641248][T26286] bond4: (slave sit3): The slave device specified does not support setting the MAC address
[  778.641957][T26286] bond4: (slave sit3): Error -95 calling set_mac_address
[  778.773563][T26301] netlink: 'syz.3.4738': attribute type 8 has an invalid length.
[  778.844209][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  779.079162][T26320] ip_tables: iptables: counters copy to user failed while replacing table
[  779.255402][T26331] wg2: Caught tx_queue_len zero misconfig
[  779.474468][T26349] syzkaller0: entered promiscuous mode
[  779.474491][T26349] syzkaller0: entered allmulticast mode
[  779.498343][T26352] netlink: 'syz.4.4755': attribute type 4 has an invalid length.
[  779.498362][T26352] __nla_validate_parse: 20 callbacks suppressed
[  779.498371][T26352] netlink: 5620 bytes leftover after parsing attributes in process `syz.4.4755'.
[  779.884314][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  779.985758][T26378] 8021q: adding VLAN 0 to HW filter on device bond5
[  780.001853][T26378] team0: Port device bond5 added
[  780.232963][T26393] netlink: 27 bytes leftover after parsing attributes in process `syz.3.4764'.
[  780.483950][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4767'.
[  780.709623][T26420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4770'.
[  780.924195][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  781.253344][T26462] ip_tables: iptables: counters copy to user failed while replacing table
[  781.304465][T26451] syzkaller0: entered promiscuous mode
[  781.304488][T26451] syzkaller0: entered allmulticast mode
[  781.418017][T26470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4782'.
[  781.478551][T26474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4782'.
[  781.478623][T26474] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4782'.
[  781.974220][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  783.009205][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  784.044618][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  784.151808][T26510] netlink: 'syz.3.4793': attribute type 1 has an invalid length.
[  784.226763][T26522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4794'.
[  784.250227][T26513] 8021q: adding VLAN 0 to HW filter on device bond6
[  784.252592][T26513] bond5: (slave bond6): making interface the new active one
[  784.253179][T26513] bond5: (slave bond6): Enslaving as an active interface with an up link
[  784.291466][T26520] 8021q: adding VLAN 0 to HW filter on device bond7
[  784.293063][T26520] bond5: (slave bond7): Enslaving as a backup interface with an up link
[  784.309383][T26510] bond5: (slave gretap1): Enslaving as a backup interface with an up link
[  784.761788][T26540] syzkaller0: entered promiscuous mode
[  784.761810][T26540] syzkaller0: entered allmulticast mode
[  784.779050][T26547] xt_ipcomp: unknown flags 1D
[  784.785487][T26546] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  784.820607][T26539] tipc: Resetting bearer <eth:syzkaller0>
[  784.884027][T26539] tipc: Disabling bearer <eth:syzkaller0>
[  785.084615][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  785.208069][T26580] ip_tables: iptables: counters copy to user failed while replacing table
[  785.209973][T26580] netlink: 'syz.3.4806': attribute type 1 has an invalid length.
[  785.239216][T26580] 8021q: adding VLAN 0 to HW filter on device bond8
[  785.755915][T26610] netlink: 10 bytes leftover after parsing attributes in process `syz.3.4812'.
[  785.835909][T26614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4814'.
[  785.835952][T26614] netlink: 'syz.3.4814': attribute type 1 has an invalid length.
[  785.835965][T26614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4814'.
[  786.104293][T26630] openvswitch: netlink: Flow actions attr not present in new flow.
[  786.125220][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  786.181398][T26635] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4820'.
[  786.184663][T26637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4820'.
[  786.204313][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  786.729388][T26679] openvswitch: ovs-system: Dropping previously announced user features
[  787.164226][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  787.843733][T26688] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4834'.
[  787.844019][T26689] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4833'.
[  787.846937][T26688] netlink: 284 bytes leftover after parsing attributes in process `syz.1.4834'.
[  787.854805][T26689] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  787.918388][T26689] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4833'.
[  788.151579][T26710] sctp: [Deprecated]: syz.2.4842 (pid 26710) Use of struct sctp_assoc_value in delayed_ack socket option.
[  788.151579][T26710] Use struct sctp_sack_info instead
[  788.201078][T26716] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4846'.
[  788.204250][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  788.742474][T26747] pim6reg1: entered promiscuous mode
[  788.742496][T26747] pim6reg1: entered allmulticast mode
[  788.784913][T26755] syzkaller0: entered promiscuous mode
[  788.784936][T26755] syzkaller0: entered allmulticast mode
[  789.244128][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  789.449470][T26792] tipc: Cannot configure node identity twice
[  789.585161][T26804] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000
[  789.702394][T26800] 8021q: adding VLAN 0 to HW filter on device bond0
[  789.710223][T26800] 8021q: adding VLAN 0 to HW filter on device team0
[  790.284176][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  790.378318][T26800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  790.380842][T26800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  790.389277][T26800] 0·: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  790.389415][T26797] syzkaller0: Caught tx_queue_len zero misconfig
[  790.616673][T26829] syz_tun: entered allmulticast mode
[  791.195145][T26862] syzkaller1: entered promiscuous mode
[  791.195254][T26862] syzkaller1: entered allmulticast mode
[  791.324698][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  791.513102][T26883] __nla_validate_parse: 6 callbacks suppressed
[  791.513122][T26883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4893'.
[  791.956982][T26901] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4897'.
[  792.016616][T26902] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  792.018408][T26905] tipc: Enabling of bearer <eth:hsr0> rejected, failed to enable media
[  792.148058][T26909] syzkaller1: entered promiscuous mode
[  792.148080][T26909] syzkaller1: entered allmulticast mode
[  792.364146][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  792.411950][T26926] netlink: 'syz.3.4907': attribute type 1 has an invalid length.
[  792.631865][T26938] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4909'.
[  792.843120][T26951] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4917'.
[  792.963665][T26956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4918'.
[  793.013632][T26959] openvswitch: ovs-system: Dropping previously announced user features
[  793.200959][T26962] syzkaller0: entered promiscuous mode
[  793.200983][T26962] syzkaller0: entered allmulticast mode
[  793.223671][T26971] netlink: 'syz.2.4925': attribute type 1 has an invalid length.
[  793.294483][T26973] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4925'.
[  793.310380][T26977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4925'.
[  793.404146][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  793.519127][T26990] netlink: 'syz.3.4928': attribute type 2 has an invalid length.
[  793.519148][T26990] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4928'.
[  793.526806][T26981] Bluetooth: hci0: invalid length 0, exp 2 for type 12
[  794.449087][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  795.489097][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  795.949648][T26971] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  796.182391][T27041] openvswitch: ovs-system: Dropping previously announced user features
[  796.524131][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  796.559574][T27049] bond9: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  796.686145][T27049] bond9 (unregistering): Released all slaves
[  797.165635][T27069] FAULT_INJECTION: forcing a failure.
[  797.165635][T27069] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  797.165670][T27069] CPU: 1 UID: 0 PID: 27069 Comm: syz.2.4944 Not tainted syzkaller #0 PREEMPT(full) 
[  797.165717][T27069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  797.165742][T27069] Call Trace:
[  797.165753][T27069]  <TASK>
[  797.165762][T27069]  dump_stack_lvl+0xe8/0x150
[  797.165797][T27069]  should_fail_ex+0x410/0x560
[  797.165830][T27069]  _copy_from_user+0x2d/0xb0
[  797.165860][T27069]  kvmemdup_bpfptr_noprof+0x86/0xf0
[  797.165890][T27069]  map_update_elem+0x644/0xa80
[  797.165923][T27069]  __sys_bpf+0xb06/0xd90
[  797.165955][T27069]  ? __pfx___sys_bpf+0x10/0x10
[  797.165989][T27069]  ? __fget_files+0x2a/0x420
[  797.166037][T27069]  ? ksys_write+0x242/0x270
[  797.166059][T27069]  ? __pfx_ksys_write+0x10/0x10
[  797.166084][T27069]  __x64_sys_bpf+0xba/0xd0
[  797.166108][T27069]  do_syscall_64+0x166/0x520
[  797.166134][T27069]  ? trace_irq_disable+0x3b/0x140
[  797.166154][T27069]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.166174][T27069]  ? clear_bhb_loop+0x70/0xc0
[  797.166198][T27069]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.166217][T27069] RIP: 0033:0x7fafb6b9f559
[  797.166235][T27069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  797.166251][T27069] RSP: 002b:00007fafb7ad3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  797.166273][T27069] RAX: ffffffffffffffda RBX: 00007fafb6e25fa0 RCX: 00007fafb6b9f559
[  797.166287][T27069] RDX: 0000000000000020 RSI: 0000200000000ac0 RDI: 0000000000000002
[  797.166299][T27069] RBP: 00007fafb7ad3090 R08: 0000000000000000 R09: 0000000000000000
[  797.166311][T27069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  797.166323][T27069] R13: 00007fafb6e26038 R14: 00007fafb6e25fa0 R15: 00007ffffb06f5b8
[  797.166356][T27069]  </TASK>
[  797.564122][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  797.643491][T27084] openvswitch: ovs-system: Dropping previously announced user features
[  797.689565][T27085] nbd: must specify at least one socket
[  797.717983][T27085] vlan4: entered promiscuous mode
[  798.211402][T27120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4960'.
[  798.232240][T27121] openvswitch: ovs-s!: Dropping previously announced user features
[  798.440035][T27140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  798.604142][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  798.925497][T27163] netlink: 'syz.2.4969': attribute type 11 has an invalid length.
[  799.326613][T27184] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4971'.
[  799.654383][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  800.223997][T27209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4979'.
[  800.694139][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  801.540649][T27222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4980'.
[  801.724130][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  802.014018][T27252] syzkaller0: entered promiscuous mode
[  802.014619][T27252] syzkaller0: entered allmulticast mode
[  802.245877][T27274] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4995'.
[  802.245955][T27274] bridge_slave_1: left allmulticast mode
[  802.245975][T27274] bridge_slave_1: left promiscuous mode
[  802.246213][T27274] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.287562][T27274] bridge_slave_0: left allmulticast mode
[  802.287589][T27274] bridge_slave_0: left promiscuous mode
[  802.287841][T27274] bridge0: port 1(bridge_slave_0) entered disabled state
[  802.349099][T27278] netlink: 'syz.1.4996': attribute type 1 has an invalid length.
[  802.387115][T27278] 8021q: adding VLAN 0 to HW filter on device bond6
[  802.423762][T27278] 8021q: adding VLAN 0 to HW filter on device bond6
[  802.431739][T27278] bond6: (slave gre2): The slave device specified does not support setting the MAC address
[  802.432807][T27278] bond6: (slave gre2): Error -95 calling set_mac_address
[  802.450700][T27283] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4996'.
[  802.521345][T27283] 8021q: adding VLAN 0 to HW filter on device bond7
[  802.531418][T27283] bond6: (slave bond7): Enslaving as an active interface with a down link
[  802.573218][T27278] bond6 (unregistering): (slave bond7): Releasing active interface
[  802.590863][T27278] bond6 (unregistering): Released all slaves
[  802.764321][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  802.844854][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  802.980231][T27305] netlink: 'syz.0.5002': attribute type 1 has an invalid length.
[  803.804163][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  804.844341][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  805.062524][T27305] bond5: entered promiscuous mode
[  805.073023][T27305] 8021q: adding VLAN 0 to HW filter on device bond5
[  805.145164][T27313] 8021q: adding VLAN 0 to HW filter on device bond5
[  805.149440][T27313] bond5: (slave gre1): The slave device specified does not support setting the MAC address
[  805.149462][T27313] bond5: (slave gre1): Setting fail_over_mac to active for active-backup mode
[  805.180754][T27313] bond5: (slave gre1): making interface the new active one
[  805.180779][T27313] gre1: entered promiscuous mode
[  805.182299][T27313] bond5: (slave gre1): Enslaving as an active interface with an up link
[  805.339480][T27340] netlink: 'syz.0.5012': attribute type 1 has an invalid length.
[  805.339501][T27340] netlink: 'syz.0.5012': attribute type 2 has an invalid length.
[  805.339512][T27340] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5012'.
[  805.372661][T27336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5011'.
[  805.383239][T27336] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5011'.
[  805.411724][T27346] netlink: 'syz.2.5013': attribute type 5 has an invalid length.
[  805.633322][T27360] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5021'.
[  805.894313][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  806.358471][T27401] syzkaller1: entered promiscuous mode
[  806.358493][T27401] syzkaller1: entered allmulticast mode
[  806.361067][T27401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5030'.
[  806.377836][T27405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5030'.
[  806.458246][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5031'.
[  806.458492][T27409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5031'.
[  806.492717][T27409] netlink: 'syz.4.5031': attribute type 1 has an invalid length.
[  806.557264][T27414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5031'.
[  806.592893][T27409] 8021q: adding VLAN 0 to HW filter on device bond4
[  806.639186][T27409] bond4: (slave bridge12): making interface the new active one
[  806.640431][T27409] bond4: (slave bridge12): Enslaving as an active interface with an up link
[  806.924132][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  807.186076][T27453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5040'.
[  807.193576][T27456] netlink: 'syz.3.5045': attribute type 1 has an invalid length.
[  807.265763][T27460] netlink: 'syz.3.5045': attribute type 1 has an invalid length.
[  807.266260][T27456] 8021q: adding VLAN 0 to HW filter on device bond9
[  807.965351][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  809.004356][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  810.054309][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  810.114878][T27179] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  810.114933][T27179] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  810.114965][T27179] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  810.114995][T27179] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  810.250251][T27486] netlink: 'syz.3.5051': attribute type 58 has an invalid length.
[  810.309368][   T30] audit: type=1804 audit(1792517227.821:22): pid=27494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5055" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1701 res=1 errno=0
[  810.309503][   T30] audit: type=1800 audit(1792517227.821:23): pid=27494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5055" name="cgroup.controllers" dev="tmpfs" ino=1701 res=0 errno=0
[  810.311689][   T30] audit: type=1804 audit(1792517227.821:24): pid=27494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.5055" name="/newroot/328/cgroup.controllers" dev="tmpfs" ino=1701 res=1 errno=0
[  810.382272][T27480] __nla_validate_parse: 7 callbacks suppressed
[  810.382291][T27480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5052'.
[  810.685551][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5062'.
[  810.953595][T27531] ip6tnl3: entered allmulticast mode
[  810.961178][T25975] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  810.961399][T25975] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  810.987537][ T7508] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  811.013645][T27541] FAULT_INJECTION: forcing a failure.
[  811.013645][T27541] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  811.013675][T27541] CPU: 0 UID: 0 PID: 27541 Comm: syz.0.5068 Not tainted syzkaller #0 PREEMPT(full) 
[  811.013696][T27541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  811.013707][T27541] Call Trace:
[  811.013715][T27541]  <TASK>
[  811.013724][T27541]  dump_stack_lvl+0xe8/0x150
[  811.013759][T27541]  should_fail_ex+0x410/0x560
[  811.013790][T27541]  _copy_to_user+0x31/0xb0
[  811.013821][T27541]  simple_read_from_buffer+0xe1/0x170
[  811.013853][T27541]  proc_fail_nth_read+0x1bb/0x230
[  811.013872][T27541]  ? common_file_perm+0x20e/0x2b0
[  811.013900][T27541]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  811.013922][T27541]  ? rw_verify_area+0x24a/0x4c0
[  811.013941][T27541]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  811.013962][T27541]  vfs_read+0x213/0xa80
[  811.013984][T27541]  ? __pfx___mutex_lock+0x10/0x10
[  811.014011][T27541]  ? __pfx_vfs_read+0x10/0x10
[  811.014030][T27541]  ? __fget_files+0x2a/0x420
[  811.014058][T27541]  ? __fget_files+0x3a2/0x420
[  811.014082][T27541]  ? __fget_files+0x2a/0x420
[  811.014115][T27541]  ksys_read+0x150/0x270
[  811.014134][T27541]  ? __pfx_ksys_read+0x10/0x10
[  811.014164][T27541]  do_syscall_64+0x166/0x520
[  811.014186][T27541]  ? trace_irq_disable+0x3b/0x140
[  811.014206][T27541]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.014225][T27541]  ? clear_bhb_loop+0x70/0xc0
[  811.014248][T27541]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.014266][T27541] RIP: 0033:0x7f08c535fd8e
[  811.014284][T27541] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  811.014299][T27541] RSP: 002b:00007f08c61ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  811.014319][T27541] RAX: ffffffffffffffda RBX: 00007f08c61cd6c0 RCX: 00007f08c535fd8e
[  811.014333][T27541] RDX: 000000000000000f RSI: 00007f08c61cd0a0 RDI: 0000000000000004
[  811.014344][T27541] RBP: 00007f08c61cd090 R08: 0000000000000000 R09: 0000000000000000
[  811.014356][T27541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  811.014376][T27541] R13: 00007f08c5626038 R14: 00007f08c5625fa0 R15: 00007ffcd19241d8
[  811.014409][T27541]  </TASK>
[  811.078641][T27543] sctp: [Deprecated]: syz.4.5069 (pid 27543) Use of struct sctp_assoc_value in delayed_ack socket option.
[  811.078641][T27543] Use struct sctp_sack_info instead
[  811.078813][T27543] sctp: [Deprecated]: syz.4.5069 (pid 27543) Use of struct sctp_assoc_value in delayed_ack socket option.
[  811.078813][T27543] Use struct sctp_sack_info instead
[  811.094331][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  811.364450][ T7508] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  811.537706][T27571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5075'.
[  811.606493][ T7508] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  811.812958][T27587] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5076'.
[  811.848504][T27580] netlink: 'syz.3.5077': attribute type 1 has an invalid length.
[  811.957922][T27596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5077'.
[  811.961564][T27580] bond10: entered promiscuous mode
[  811.967802][T27597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5079'.
[  811.989220][T27580] 8021q: adding VLAN 0 to HW filter on device bond10
[  812.039139][T27596] 8021q: adding VLAN 0 to HW filter on device bond10
[  812.054932][T27596] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address
[  812.054956][T27596] bond10: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  812.109414][T27596] bond10: (slave wireguard0): making interface the new active one
[  812.109439][T27596] wireguard0: entered promiscuous mode
[  812.114316][T27596] bond10: (slave wireguard0): Enslaving as an active interface with an up link
[  812.134174][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  812.357041][T27606] sctp: [Deprecated]: syz.0.5082 (pid 27606) Use of struct sctp_assoc_value in delayed_ack socket option.
[  812.357041][T27606] Use struct sctp_sack_info instead
[  812.357392][T27606] sctp: [Deprecated]: syz.0.5082 (pid 27606) Use of struct sctp_assoc_value in delayed_ack socket option.
[  812.357392][T27606] Use struct sctp_sack_info instead
[  812.589483][T27626] openvswitch: netlink: Flow actions attr not present in new flow.
[  812.836884][T27634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5086'.
[  812.836907][T27634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5086'.
[  813.164187][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  814.101926][T27697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5099'.
[  814.214360][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  814.514898][T27729] netlink: 844 bytes leftover after parsing attributes in process `syz.4.5107'.
[  814.636226][T27733] openvswitch: ovs-system: Dropping previously announced user features
[  814.780290][T27742] tipc: Enabled bearer <eth:vlan1>, priority 10
[  815.244272][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  815.324593][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  815.420004][T27784] __nla_validate_parse: 2 callbacks suppressed
[  815.420023][T27784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5118'.
[  815.420081][T27769] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5118'.
[  815.755247][T27800] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  815.784229][T10680] tipc: Node number set to 1048952518
[  815.838487][T27807] netlink: 'syz.2.5124': attribute type 1 has an invalid length.
[  816.284596][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  816.324174][T27837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5131'.
[  816.329808][T27837] netlink: 'syz.2.5131': attribute type 2 has an invalid length.
[  816.485888][   T30] audit: type=1107 audit(1792517234.001:25): pid=27840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  816.536816][T27844] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5133'.
[  816.542668][   T30] audit: type=1804 audit(1792517234.051:26): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5133" name="/newroot/354/cgroup.controllers" dev="tmpfs" ino=1838 res=1 errno=0
[  816.542822][   T30] audit: type=1800 audit(1792517234.051:27): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5133" name="cgroup.controllers" dev="tmpfs" ino=1838 res=0 errno=0
[  816.608516][   T30] audit: type=1804 audit(1792517234.051:28): pid=27844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5133" name="/newroot/354/cgroup.controllers" dev="tmpfs" ino=1838 res=1 errno=0
[  816.808960][T27850] netlink: 'syz.0.5134': attribute type 1 has an invalid length.
[  816.909542][T27850] 8021q: adding VLAN 0 to HW filter on device bond6
[  816.911928][T27857] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  816.961285][T27850] mac80211_hwsim hwsim50 wlan1: entered promiscuous mode
[  817.225139][T27866] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5139'.
[  817.253562][T27875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5141'.
[  817.324286][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  817.531401][T27888] netlink: zone id is out of range
[  817.531418][T27888] netlink: zone id is out of range
[  817.531426][T27888] netlink: zone id is out of range
[  817.531434][T27888] netlink: zone id is out of range
[  817.531442][T27888] netlink: zone id is out of range
[  817.531450][T27888] netlink: zone id is out of range
[  817.531458][T27888] netlink: zone id is out of range
[  817.531466][T27888] netlink: zone id is out of range
[  817.568663][T27893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5146'.
[  817.598118][T27888] netlink: 88 bytes leftover after parsing attributes in process `syz.2.5144'.
[  817.598140][T27888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5144'.
[  818.041763][T27913] netlink: 'syz.2.5151': attribute type 1 has an invalid length.
[  818.180974][T27913] 8021q: adding VLAN 0 to HW filter on device bond5
[  818.200142][T27932] netlink: 'syz.1.5153': attribute type 8 has an invalid length.
[  818.201620][T27931] netlink: 'syz.0.5152': attribute type 10 has an invalid length.
[  818.214602][T27940] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5155'.
[  818.373773][T27940] netlink: 'syz.4.5155': attribute type 2 has an invalid length.
[  818.387303][T27945] netlink: 'syz.4.5155': attribute type 2 has an invalid length.
[  820.381467][T28037] xt_TCPMSS: Only works on TCP SYN packets
[  820.528259][T28045] __nla_validate_parse: 8 callbacks suppressed
[  820.528279][T28045] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5178'.
[  820.596073][T28048] netlink: 'syz.1.5178': attribute type 10 has an invalid length.
[  820.596095][T28048] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5178'.
[  821.477175][T28077] netlink: 'syz.1.5188': attribute type 2 has an invalid length.
[  821.477200][T28077] nbd: illegal input index -2130444284
[  821.484352][    C0] net_ratelimit: 5 callbacks suppressed
[  821.484372][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  821.638683][T28085] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5192'.
[  821.709072][T28090] netlink: 'syz.3.5195': attribute type 6 has an invalid length.
[  821.771643][T28094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5193'.
[  821.981852][T28110] pim6reg1: entered promiscuous mode
[  821.981876][T28110] pim6reg1: entered allmulticast mode
[  822.192092][T28121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5201'.
[  822.527434][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  823.567348][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  824.612856][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  824.613542][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  824.895771][T28128] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  824.895850][T28128] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  825.076592][T28149] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5207'.
[  825.460576][T28173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5213'.
[  825.644246][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  825.949127][T28211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5224'.
[  825.954232][T28211] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5224'.
[  826.085877][T18172] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  826.177710][T28219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5228'.
[  826.415491][ T7576] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  826.684156][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  826.749996][T28245] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[  826.750552][T28245] syzkaller0: entered promiscuous mode
[  826.750570][T28245] syzkaller0: entered allmulticast mode
[  827.173915][T28262] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5240'.
[  827.185544][T28262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5240'.
[  827.491850][T28284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5248'.
[  827.508412][T28287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5249'.
[  827.508435][T28287] netlink: 'syz.2.5249': attribute type 2 has an invalid length.
[  827.508447][T28287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5249'.
[  827.533794][T28293] xt_l2tp: v2 tid > 0xffff: 4294901760
[  827.546367][T28294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5248'.
[  827.610361][T28298] ip_tables: iptables: counters copy to user failed while replacing table
[  827.632742][T28298] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  827.662942][T28297] tipc: Disabling bearer <eth:syzkaller0>
[  827.724369][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  827.750239][T28306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5251'.
[  827.761330][T28306] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  827.790190][T28319] syzkaller1: left promiscuous mode
[  827.790248][T28319] syzkaller1: left allmulticast mode
[  828.767848][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  828.925987][T28351] ip_tables: iptables: counters copy to user failed while replacing table
[  829.808949][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  830.854147][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  831.161092][T28363] __nla_validate_parse: 4 callbacks suppressed
[  831.161120][T28363] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5265'.
[  831.419564][T28381] : left promiscuous mode
[  831.438701][T28385] IPVS: nq: FWM 3 0x00000003 - no destination available
[  831.453339][T28387] syzkaller0: entered promiscuous mode
[  831.453360][T28387] syzkaller0: entered allmulticast mode
[  831.467864][T28387] netlink: 2724 bytes leftover after parsing attributes in process `syz.3.5272'.
[  831.467959][T28387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5272'.
[  831.467969][T28387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5272'.
[  831.472957][T28387] TC_ACT_REPEAT abuse ?
[  831.618308][   T30] audit: type=1800 audit(1792517249.131:29): pid=28396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5274" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2338 res=0 errno=0
[  831.667807][T28398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5275'.
[  831.670112][T28398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5275'.
[  831.696961][T28398] veth1_to_team: Caught tx_queue_len zero misconfig
[  831.697015][T28398] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5275'.
[  831.752638][T28400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5276'.
[  831.810502][T28403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5276'.
[  831.869876][T28407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5279'.
[  831.882356][T28405] syzkaller0: entered promiscuous mode
[  831.882378][T28405] syzkaller0: entered allmulticast mode
[  831.889310][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  831.902444][T28405] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  831.930985][T28405] tipc: Resetting bearer <eth:syzkaller0>
[  831.943938][T28402] tipc: Resetting bearer <eth:syzkaller0>
[  832.016618][T28402] tipc: Disabling bearer <eth:syzkaller0>
[  832.170421][T28414] ovs-dp0: entered promiscuous mode
[  832.175105][T28414] netlink: 'syz.2.5281': attribute type 11 has an invalid length.
[  832.253302][T28427] IPv6: NLM_F_CREATE should be specified when creating new route
[  832.335739][T28431] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  832.389211][T28434] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  832.477150][T28439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  832.510999][T28434] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  832.533151][T28436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  832.591254][T28436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  832.924656][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  833.620590][T28478] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  833.822395][T28488] tipc: Enabling of bearer <udp:sy> rejected, failed to enable media
[  833.964118][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  834.032034][T28502] veth1_to_bond: entered promiscuous mode
[  834.046204][T28507] veth1_to_bond (unregistering): left promiscuous mode
[  834.053821][T28505] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  834.099379][T28513] openvswitch: netlink: Message has 8 unknown bytes.
[  834.467444][T28535] ip_tables: iptables: counters copy to user failed while replacing table
[  835.014145][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  837.084290][    C0] net_ratelimit: 1 callbacks suppressed
[  837.084325][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  837.404512][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  837.741208][T28577] __nla_validate_parse: 8 callbacks suppressed
[  837.741227][T28577] netlink: 6 bytes leftover after parsing attributes in process `syz.0.5325'.
[  837.876982][T28583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5326'.
[  837.877011][T28583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5326'.
[  837.877025][T28583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5326'.
[  838.041018][T28591] netlink: 'syz.1.5330': attribute type 1 has an invalid length.
[  838.111357][T28591] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link
[  838.124375][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  838.146423][T28591] veth5: entered promiscuous mode
[  838.158961][T28591] bond6: (slave veth5): Enslaving as a backup interface with a down link
[  838.164334][T28591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5330'.
[  838.169324][T28591] 8021q: adding VLAN 0 to HW filter on device bond6
[  838.172350][T14571] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  838.267281][T28600] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  838.307373][T27175] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  838.411504][T28607] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5335'.
[  838.489601][T28610] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  838.536550][T28612] netlink: 'syz.4.5336': attribute type 3 has an invalid length.
[  838.556621][T28612] netlink: 'syz.4.5336': attribute type 1 has an invalid length.
[  838.556824][T28612] netlink: 'syz.4.5336': attribute type 1 has an invalid length.
[  838.557014][T28612] netlink: 'syz.4.5336': attribute type 1 has an invalid length.
[  838.557207][T28612] netlink: 'syz.4.5336': attribute type 1 has an invalid length.
[  838.557411][T28612] netlink: 'syz.4.5336': attribute type 1 has an invalid length.
[  838.557600][T28612] netlink: 'syz.4.5336': attribute type 1 has an invalid length.
[  838.557790][T28612] netlink: 'syz.4.5336': attribute type 1 has an invalid length.
[  838.558024][T28612] netlink: 'syz.4.5336': attribute type 1 has an invalid length.
[  838.735236][T28632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5344'.
[  838.786473][T28642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5343'.
[  838.972119][T28656] ip_tables: iptables: counters copy to user failed while replacing table
[  838.985450][T28656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5347'.
[  839.054343][T28661] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5351'.
[  839.164370][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  839.676850][T28701] batman_adv: batadv0: Adding interface: syzkaller0
[  839.677040][T28701] batman_adv: batadv0: Interface activated: syzkaller0
[  839.718609][T28703] bond0: left promiscuous mode
[  839.719083][T28703] 8021q: adding VLAN 0 to HW filter on device bond0
[  839.722596][T28703] 8021q: adding VLAN 0 to HW filter on device batadv0
[  839.800132][T28703] veth1_vlan: left promiscuous mode
[  839.801377][T28703] veth0_vlan: left promiscuous mode
[  839.802459][T28703] veth0_vlan: entered promiscuous mode
[  839.814408][T28703] veth1_vlan: entered promiscuous mode
[  839.833334][T28703] mac80211_hwsim hwsim50 wlan1: left promiscuous mode
[  839.833356][T28703] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check.
[  839.948096][T14571] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  839.948452][T14571] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  839.948488][T14571] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  839.948519][T14571] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  840.204348][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  840.783591][T28755] GUP no longer grows the stack in syz.0.5372 (28755): 200000003000-20000000a000 (200000001000)
[  840.783622][T28755] CPU: 1 UID: 0 PID: 28755 Comm: syz.0.5372 Not tainted syzkaller #0 PREEMPT(full) 
[  840.783643][T28755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  840.783654][T28755] Call Trace:
[  840.783661][T28755]  <TASK>
[  840.783669][T28755]  dump_stack_lvl+0xe8/0x150
[  840.783702][T28755]  __get_user_pages+0x23b6/0x2750
[  840.783761][T28755]  ? lock_acquire+0x115/0x350
[  840.783801][T28755]  ? __gup_longterm_locked+0xc3b/0x15c0
[  840.783837][T28755]  __gup_longterm_locked+0xd52/0x15c0
[  840.783868][T28755]  ? lock_acquire+0x115/0x350
[  840.783922][T28755]  gup_fast_fallback+0x1d92/0x20e0
[  840.783983][T28755]  ? __pfx_gup_fast_fallback+0x10/0x10
[  840.784014][T28755]  ? lock_acquire+0x115/0x350
[  840.784031][T28755]  ? is_valid_gup_args+0x11f/0x200
[  840.784058][T28755]  ? get_user_pages_fast+0x4d/0xb0
[  840.784087][T28755]  __iov_iter_get_pages_alloc+0x378/0xa40
[  840.784123][T28755]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  840.784150][T28755]  iov_iter_get_pages2+0x5e/0xa0
[  840.784181][T28755]  __se_sys_vmsplice+0x7b5/0x1660
[  840.784222][T28755]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  840.784243][T28755]  ? __pfx_futex_wait+0x10/0x10
[  840.784356][T28755]  do_syscall_64+0x166/0x520
[  840.784382][T28755]  ? trace_irq_disable+0x3b/0x140
[  840.784403][T28755]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.784425][T28755]  ? clear_bhb_loop+0x70/0xc0
[  840.784450][T28755]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.784477][T28755] RIP: 0033:0x7f08c539f559
[  840.784496][T28755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  840.784513][T28755] RSP: 002b:00007f08c61cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  840.784534][T28755] RAX: ffffffffffffffda RBX: 00007f08c5625fa0 RCX: 00007f08c539f559
[  840.784549][T28755] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000006
[  840.784562][T28755] RBP: 00007f08c5436b20 R08: 0000000000000000 R09: 0000000000000000
[  840.784574][T28755] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  840.784586][T28755] R13: 00007f08c5626038 R14: 00007f08c5625fa0 R15: 00007ffcd19241d8
[  840.784620][T28755]  </TASK>
[  841.254863][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  841.356249][T28789] vlan0: entered promiscuous mode
[  841.392650][T28792] veth1_to_hsr: Caught tx_queue_len zero misconfig
[  841.548699][T28796] veth0: left promiscuous mode
[  841.548724][T28796] veth0: left allmulticast mode
[  841.562098][T28796] veth1_to_batadv: left allmulticast mode
[  841.718654][T28807] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT
[  842.209453][T28836] bond9: (slave bond_slave_0): Device is not our slave
[  842.209477][T28836] bond9: option active_slave: invalid value (bond_slave_0)
[  842.211262][T28836] bond9 (unregistering): Released all slaves
[  842.277349][T28830] net_ratelimit: 2 callbacks suppressed
[  842.277369][T28830] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check.
[  842.294279][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  842.389392][T28843] ip_tables: iptables: counters copy to user failed while replacing table
[  842.425048][T28843] ip_tables: iptables: counters copy to user failed while replacing table
[  842.672199][T28861] Cannot find map_set index 2 as target
[  842.811408][T28871] __nla_validate_parse: 146 callbacks suppressed
[  842.811428][T28871] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5406'.
[  843.324175][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  843.441197][T28897] validate_nla: 27 callbacks suppressed
[  843.441216][T28897] netlink: 'syz.4.5418': attribute type 1 has an invalid length.
[  843.499880][T28897] 8021q: adding VLAN 0 to HW filter on device bond6
[  843.524978][T28897] 8021q: adding VLAN 0 to HW filter on device bond6
[  843.525413][T28897] bond6: (slave gre1): The slave device specified does not support setting the MAC address
[  843.526161][T28897] bond6: (slave gre1): Error -95 calling set_mac_address
[  843.631079][T28900] gretap1: entered promiscuous mode
[  843.639967][T28900] bond6: (slave gretap1): making interface the new active one
[  843.640715][T28900] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  843.680951][T28910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5420'.
[  843.804375][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  843.878535][T28922] Bluetooth: hci0: unsupported parameter 5161
[  843.878555][T28922] Bluetooth: hci0: unsupported parameter 8192
[  843.878569][T28922] Bluetooth: hci0: unsupported parameter 5161
[  843.878580][T28922] Bluetooth: hci0: unsupported parameter 8192
[  843.890816][T28897] 8021q: adding VLAN 0 to HW filter on device bond7
[  843.917247][T28897] bond6: (slave bond7): Enslaving as an active interface with a down link
[  843.923426][T28900] bond6 (unregistering): (slave gretap1): Releasing active interface
[  843.973765][T28900] bond6 (unregistering): (slave bond7): Releasing active interface
[  843.992929][T28900] bond6 (unregistering): Released all slaves
[  844.232329][T28936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5428'.
[  844.309914][T28948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5432'.
[  844.364363][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  844.444341][    C0] ip6_tunnel: ip6tnl6 xmit: Local address not yet configured!
[  844.876111][T28994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5441'.
[  844.968871][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'.
[  844.968898][T28994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'.
[  845.060227][T28997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5441'.
[  845.266126][T29014] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0
[  845.387920][T29021] netlink: 'syz.0.5450': attribute type 1 has an invalid length.
[  845.404396][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  845.864198][T29040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5455'.
[  845.864227][T29040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5455'.
[  846.090559][T29065] xt_CT: No such helper "syz1"
[  846.444305][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  847.053012][T29127] xt_hashlimit: size too large, truncated to 1048576
[  847.053030][T29127] xt_hashlimit: max too large, truncated to 1048576
[  847.085666][T29122] bond10: ARP target 9.0.0.0 is already present
[  847.085690][T29122] bond10: option arp_ip_target: invalid value (9)
[  847.111613][T29122] bond10 (unregistering): Released all slaves
[  847.364513][T29135] xt_l2tp: missing protocol rule (udp|l2tpip)
[  847.391466][T29137] netlink: 'syz.3.5479': attribute type 1 has an invalid length.
[  847.430047][T29137] erspan2: entered allmulticast mode
[  847.479903][T29141] netlink: 'syz.3.5479': attribute type 1 has an invalid length.
[  847.485197][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  847.558184][T29143] erspan2: entered allmulticast mode
[  847.578109][T29146] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  847.624831][T29148] nbd3: detected capacity change from 0 to 32
[  847.624846][ T5619] block nbd3: Receive control failed (result -22)
[  847.635704][ T1996] block nbd3: Dead connection, failed to find a fallback
[  847.635726][ T1996] block nbd3: shutting down sockets
[  847.635740][ T1996] blk_print_req_error: 52 callbacks suppressed
[  847.635751][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.635777][ T1996] buffer_io_error: 138 callbacks suppressed
[  847.635788][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.639279][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.639308][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.639568][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.639592][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.639698][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.639720][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.639813][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.639835][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.639948][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.639969][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.640076][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.640098][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.640189][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.640210][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.640240][T29029] ldm_validate_partition_table(): Disk read failed.
[  847.640315][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.640337][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.640429][ T1996] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  847.640451][ T1996] Buffer I/O error on dev nbd3, logical block 0, async page read
[  847.640648][T29029] Dev nbd3: unable to read RDB block 0
[  847.641081][T29029]  nbd3: unable to read partition table
[  847.671937][T29029] ldm_validate_partition_table(): Disk read failed.
[  847.672297][T29029] Dev nbd3: unable to read RDB block 0
[  847.674658][T29029]  nbd3: unable to read partition table
[  847.837896][T29155] netlink: 'syz.3.5486': attribute type 1 has an invalid length.
[  847.908520][T29155] bond11: entered promiscuous mode
[  847.908945][T29155] 8021q: adding VLAN 0 to HW filter on device bond11
[  847.971286][T29162] syzkaller0: MTU not usable for tipc bearer
[  847.971324][T29162] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  847.997447][T29154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  848.026069][T29162] syzkaller0: mtu less than device minimum
[  848.534289][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  848.581180][T29202] FAULT_INJECTION: forcing a failure.
[  848.581180][T29202] name failslab, interval 1, probability 0, space 0, times 0
[  848.581211][T29202] CPU: 0 UID: 0 PID: 29202 Comm: syz.0.5494 Not tainted syzkaller #0 PREEMPT(full) 
[  848.581233][T29202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  848.581245][T29202] Call Trace:
[  848.581252][T29202]  <TASK>
[  848.581260][T29202]  dump_stack_lvl+0xe8/0x150
[  848.581291][T29202]  should_fail_ex+0x410/0x560
[  848.581321][T29202]  should_failslab+0xa8/0x100
[  848.581345][T29202]  ? skb_clone+0x212/0x3a0
[  848.581470][T29202]  kmem_cache_alloc_noprof+0xa1/0x600
[  848.581494][T29202]  ? skb_clone+0x212/0x3a0
[  848.581526][T29202]  skb_clone+0x212/0x3a0
[  848.581556][T29202]  __netlink_deliver_tap+0x355/0x6e0
[  848.581629][T29202]  ? netlink_deliver_tap+0x2e/0x1b0
[  848.581651][T29202]  netlink_deliver_tap+0x19c/0x1b0
[  848.581672][T29202]  netlink_unicast+0x8c1/0xa80
[  848.581752][T29202]  netlink_sendmsg+0x813/0xb40
[  848.581782][T29202]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.581815][T29202]  ? apparmor_socket_sendmsg+0x98/0x360
[  848.581843][T29202]  ? __pfx_netlink_sendmsg+0x10/0x10
[  848.581862][T29202]  sock_sendmsg_nosec+0x14e/0x190
[  848.581886][T29202]  ____sys_sendmsg+0x54e/0x850
[  848.581918][T29202]  ? __pfx_____sys_sendmsg+0x10/0x10
[  848.581953][T29202]  ? import_iovec+0x73/0xa0
[  848.581984][T29202]  ___sys_sendmsg+0x2a5/0x360
[  848.582008][T29202]  ? __lock_acquire+0x747/0x2de0
[  848.582034][T29202]  ? __pfx____sys_sendmsg+0x10/0x10
[  848.582097][T29202]  ? __fget_files+0x2a/0x420
[  848.582123][T29202]  ? __fget_files+0x3a2/0x420
[  848.582169][T29202]  __x64_sys_sendmsg+0x1b1/0x290
[  848.582198][T29202]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  848.582245][T29202]  do_syscall_64+0x166/0x520
[  848.582268][T29202]  ? trace_irq_disable+0x3b/0x140
[  848.582288][T29202]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.582307][T29202]  ? clear_bhb_loop+0x70/0xc0
[  848.582331][T29202]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  848.582350][T29202] RIP: 0033:0x7f08c539f559
[  848.582367][T29202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  848.582383][T29202] RSP: 002b:00007f08c61cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  848.582403][T29202] RAX: ffffffffffffffda RBX: 00007f08c5625fa0 RCX: 00007f08c539f559
[  848.582417][T29202] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003
[  848.582429][T29202] RBP: 00007f08c61cd090 R08: 0000000000000000 R09: 0000000000000000
[  848.582441][T29202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  848.582452][T29202] R13: 00007f08c5626038 R14: 00007f08c5625fa0 R15: 00007ffcd19241d8
[  848.582485][T29202]  </TASK>
[  848.760724][T29204] __nla_validate_parse: 2 callbacks suppressed
[  848.760743][T29204] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5493'.
[  848.760756][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5493'.
[  848.760773][T29204] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5493'.
[  848.760786][T29204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5493'.
[  848.760801][T29204] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5493'.
[  849.018853][T29219] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.080224][T29220] openvswitch: netlink: ct_state flags 806d0004 unsupported
[  849.098185][T29222] syzkaller0: entered promiscuous mode
[  849.098208][T29222] syzkaller0: entered allmulticast mode
[  849.107714][T29222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  849.118232][T29222] tipc: Resetting bearer <eth:syzkaller0>
[  849.133645][T29221] tipc: Resetting bearer <eth:syzkaller0>
[  849.218448][T29221] tipc: Disabling bearer <eth:syzkaller0>
[  849.320055][T29219] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.525878][T29219] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.565176][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  849.626812][T29219] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.697371][T29228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5500'.
[  849.766492][T25974] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  849.799981][T29245] FAULT_INJECTION: forcing a failure.
[  849.799981][T29245] name failslab, interval 1, probability 0, space 0, times 0
[  849.800010][T29245] CPU: 0 UID: 0 PID: 29245 Comm: syz.1.5506 Not tainted syzkaller #0 PREEMPT(full) 
[  849.800031][T29245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  849.800041][T29245] Call Trace:
[  849.800048][T29245]  <TASK>
[  849.800057][T29245]  dump_stack_lvl+0xe8/0x150
[  849.800088][T29245]  should_fail_ex+0x410/0x560
[  849.800118][T29245]  should_failslab+0xa8/0x100
[  849.800143][T29245]  ? skb_clone+0x212/0x3a0
[  849.800169][T29245]  kmem_cache_alloc_noprof+0xa1/0x600
[  849.800191][T29245]  ? skb_clone+0x212/0x3a0
[  849.800222][T29245]  skb_clone+0x212/0x3a0
[  849.800243][T29245]  ? nfnetlink_rcv+0x4b0/0x28c0
[  849.800368][T29245]  nfnetlink_rcv+0x4de/0x28c0
[  849.800415][T29245]  ? __local_bh_enable_ip+0xd6/0x140
[  849.800450][T29245]  ? lockdep_hardirqs_on+0x7b/0x110
[  849.800472][T29245]  ? __dev_queue_xmit+0x29b/0x3920
[  849.800524][T29245]  ? __local_bh_enable_ip+0xd6/0x140
[  849.800546][T29245]  ? __dev_queue_xmit+0x29b/0x3920
[  849.800571][T29245]  ? __dev_queue_xmit+0x1efb/0x3920
[  849.800600][T29245]  ? __dev_queue_xmit+0x29b/0x3920
[  849.800632][T29245]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  849.800678][T29245]  ? __copy_skb_header+0xa3/0x4a0
[  849.800720][T29245]  ? skb_clone+0x246/0x3a0
[  849.800749][T29245]  ? __netlink_deliver_tap+0x681/0x6e0
[  849.800767][T29245]  ? netlink_deliver_tap+0x2e/0x1b0
[  849.800791][T29245]  ? netlink_deliver_tap+0x2e/0x1b0
[  849.800809][T29245]  ? netlink_deliver_tap+0x2e/0x1b0
[  849.800833][T29245]  netlink_unicast+0x8ef/0xa80
[  849.800875][T29245]  netlink_sendmsg+0x813/0xb40
[  849.800902][T29245]  ? __pfx_netlink_sendmsg+0x10/0x10
[  849.800930][T29245]  ? apparmor_socket_sendmsg+0x98/0x360
[  849.800958][T29245]  ? __pfx_netlink_sendmsg+0x10/0x10
[  849.800975][T29245]  sock_sendmsg_nosec+0x14e/0x190
[  849.800999][T29245]  ____sys_sendmsg+0x54e/0x850
[  849.801029][T29245]  ? __pfx_____sys_sendmsg+0x10/0x10
[  849.801063][T29245]  ? import_iovec+0x73/0xa0
[  849.801094][T29245]  ___sys_sendmsg+0x2a5/0x360
[  849.801117][T29245]  ? __lock_acquire+0x747/0x2de0
[  849.801141][T29245]  ? __pfx____sys_sendmsg+0x10/0x10
[  849.801202][T29245]  ? __fget_files+0x2a/0x420
[  849.801228][T29245]  ? __fget_files+0x3a2/0x420
[  849.801264][T29245]  __x64_sys_sendmsg+0x1b1/0x290
[  849.801291][T29245]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  849.801334][T29245]  do_syscall_64+0x166/0x520
[  849.801356][T29245]  ? trace_irq_disable+0x3b/0x140
[  849.801375][T29245]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.801403][T29245]  ? clear_bhb_loop+0x70/0xc0
[  849.801426][T29245]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  849.801444][T29245] RIP: 0033:0x7f765f79f559
[  849.801463][T29245] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  849.801478][T29245] RSP: 002b:00007f76606de028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  849.801498][T29245] RAX: ffffffffffffffda RBX: 00007f765fa25fa0 RCX: 00007f765f79f559
[  849.801512][T29245] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003
[  849.801523][T29245] RBP: 00007f76606de090 R08: 0000000000000000 R09: 0000000000000000
[  849.801535][T29245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  849.801546][T29245] R13: 00007f765fa26038 R14: 00007f765fa25fa0 R15: 00007ffed8d76928
[  849.801578][T29245]  </TASK>
[  849.807156][T25976] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  849.827102][T25976] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  850.019217][T29248] netlink: 'syz.2.5508': attribute type 1 has an invalid length.
[  850.095332][T29248] bond6: entered promiscuous mode
[  850.097487][T29248] 8021q: adding VLAN 0 to HW filter on device bond6
[  850.105270][T25974] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.138576][T29251] netlink: 'syz.2.5508': attribute type 1 has an invalid length.
[  850.351922][T29261] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5510'.
[  850.404866][T29267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5513'.
[  850.410062][T29267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5513'.
[  850.410083][T29267] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5513'.
[  850.410108][T29267] netlink: 'syz.1.5513': attribute type 6 has an invalid length.
[  850.410120][T29267] netlink: 'syz.1.5513': attribute type 5 has an invalid length.
[  850.465487][T25977] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  850.465596][T25977] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  850.465630][T25977] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  850.465662][T25977] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  850.604320][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  850.873653][T29289] FAULT_INJECTION: forcing a failure.
[  850.873653][T29289] name failslab, interval 1, probability 0, space 0, times 0
[  850.873684][T29289] CPU: 1 UID: 0 PID: 29289 Comm: syz.4.5517 Not tainted syzkaller #0 PREEMPT(full) 
[  850.873705][T29289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  850.873716][T29289] Call Trace:
[  850.873724][T29289]  <TASK>
[  850.873733][T29289]  dump_stack_lvl+0xe8/0x150
[  850.873772][T29289]  should_fail_ex+0x410/0x560
[  850.873803][T29289]  should_failslab+0xa8/0x100
[  850.873826][T29289]  ? skb_clone+0x212/0x3a0
[  850.873851][T29289]  kmem_cache_alloc_noprof+0xa1/0x600
[  850.873873][T29289]  ? skb_clone+0x212/0x3a0
[  850.873906][T29289]  skb_clone+0x212/0x3a0
[  850.873928][T29289]  ? nfnetlink_rcv+0x4b0/0x28c0
[  850.873957][T29289]  nfnetlink_rcv+0x4de/0x28c0
[  850.873994][T29289]  ? __local_bh_enable_ip+0xd6/0x140
[  850.874016][T29289]  ? lockdep_hardirqs_on+0x7b/0x110
[  850.874038][T29289]  ? __dev_queue_xmit+0x29b/0x3920
[  850.874061][T29289]  ? __local_bh_enable_ip+0xd6/0x140
[  850.874083][T29289]  ? __dev_queue_xmit+0x29b/0x3920
[  850.874107][T29289]  ? __dev_queue_xmit+0x1efb/0x3920
[  850.874136][T29289]  ? __dev_queue_xmit+0x29b/0x3920
[  850.874167][T29289]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  850.874214][T29289]  ? __copy_skb_header+0xa3/0x4a0
[  850.874259][T29289]  ? skb_clone+0x246/0x3a0
[  850.874286][T29289]  ? __netlink_deliver_tap+0x681/0x6e0
[  850.874304][T29289]  ? netlink_deliver_tap+0x2e/0x1b0
[  850.874330][T29289]  ? netlink_deliver_tap+0x2e/0x1b0
[  850.874348][T29289]  ? netlink_deliver_tap+0x2e/0x1b0
[  850.874373][T29289]  netlink_unicast+0x8ef/0xa80
[  850.874414][T29289]  netlink_sendmsg+0x813/0xb40
[  850.874442][T29289]  ? __pfx_netlink_sendmsg+0x10/0x10
[  850.874468][T29289]  ? apparmor_socket_sendmsg+0x98/0x360
[  850.874495][T29289]  ? __pfx_netlink_sendmsg+0x10/0x10
[  850.874513][T29289]  sock_sendmsg_nosec+0x14e/0x190
[  850.874536][T29289]  ____sys_sendmsg+0x54e/0x850
[  850.874567][T29289]  ? __pfx_____sys_sendmsg+0x10/0x10
[  850.874601][T29289]  ? import_iovec+0x73/0xa0
[  850.874631][T29289]  ___sys_sendmsg+0x2a5/0x360
[  850.874654][T29289]  ? __lock_acquire+0x747/0x2de0
[  850.874679][T29289]  ? __pfx____sys_sendmsg+0x10/0x10
[  850.874740][T29289]  ? __fget_files+0x2a/0x420
[  850.874775][T29289]  ? __fget_files+0x3a2/0x420
[  850.874812][T29289]  __x64_sys_sendmsg+0x1b1/0x290
[  850.874840][T29289]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  850.874888][T29289]  do_syscall_64+0x166/0x520
[  850.874911][T29289]  ? trace_irq_disable+0x3b/0x140
[  850.874931][T29289]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.874950][T29289]  ? clear_bhb_loop+0x70/0xc0
[  850.874974][T29289]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  850.874992][T29289] RIP: 0033:0x7f5f1499f559
[  850.875009][T29289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  850.875024][T29289] RSP: 002b:00007f5f12bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  850.875044][T29289] RAX: ffffffffffffffda RBX: 00007f5f14c25fa0 RCX: 00007f5f1499f559
[  850.875058][T29289] RDX: 0000000000000000 RSI: 00002000000009c0 RDI: 0000000000000003
[  850.875069][T29289] RBP: 00007f5f12bf6090 R08: 0000000000000000 R09: 0000000000000000
[  850.875081][T29289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  850.875092][T29289] R13: 00007f5f14c26038 R14: 00007f5f14c25fa0 R15: 00007ffdfc5d6e48
[  850.875124][T29289]  </TASK>
[  851.036231][T29294] vlan3: entered promiscuous mode
[  851.036259][T29294] bridge0: entered promiscuous mode
[  851.300779][T29304] pimreg: entered allmulticast mode
[  851.493836][T29302] pimreg: left allmulticast mode
[  851.526720][T29319] syzkaller0: left promiscuous mode
[  851.526744][T29319] syzkaller0: left allmulticast mode
[  851.527982][T29321] ip_tables: iptables: counters copy to user failed while replacing table
[  851.644285][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  852.684284][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  852.790950][T29361] ip_tables: iptables: counters copy to user failed while replacing table
[  852.947671][T29373] netlink: 'syz.3.5542': attribute type 4 has an invalid length.
[  852.974440][T25974] bond6: (slave ip6gretap1): link status up again after 0 ms
[  852.974468][T25974] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  853.154822][T29388] ip_tables: iptables: counters copy to user failed while replacing table
[  853.215362][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  853.286703][T29395] syzkaller0: entered promiscuous mode
[  853.286725][T29395] syzkaller0: entered allmulticast mode
[  853.386227][T29391] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  853.388669][T29401] ip_tables: iptables: counters copy to user failed while replacing table
[  853.404122][T29391] tipc: Resetting bearer <eth:syzkaller0>
[  853.424469][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  853.539716][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  853.629272][T29407] veth1_to_team: entered promiscuous mode
[  853.648832][T29407] veth1_to_team: left promiscuous mode
[  853.714426][T25885] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  853.799217][T29421] netlink: 'syz.4.5555': attribute type 7 has an invalid length.
[  853.799237][T29421] netlink: 'syz.4.5555': attribute type 8 has an invalid length.
[  853.896809][T29426] bridge0: entered allmulticast mode
[  853.920881][T29426] bridge0: left allmulticast mode
[  853.929958][T29429] xt_bpf: check failed: parse error
[  854.386565][ T7508] tipc: Node number set to 898571792
[  854.522970][T29462] __nla_validate_parse: 5 callbacks suppressed
[  854.522990][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5564'.
[  854.565537][T29431] batman_adv: batadv0: Adding interface: syzkaller0
[  854.565556][T29431] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  854.565656][T29431] batman_adv: batadv0: Interface activated: syzkaller0
[  854.576225][T29464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5565'.
[  854.609342][T29464] netlink: 'syz.0.5565': attribute type 10 has an invalid length.
[  854.786352][T29472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5567'.
[  854.861249][T29430] batman_adv: batadv0: Interface deactivated: syzkaller0
[  854.908764][T29430] batman_adv: batadv0: Removing interface: syzkaller0
[  855.138763][T29479] syzkaller0: entered promiscuous mode
[  855.138786][T29479] syzkaller0: entered allmulticast mode
[  855.167075][T29479] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  855.184398][T29479] tipc: Resetting bearer <eth:syzkaller0>
[  855.192001][T29478] tipc: Resetting bearer <eth:syzkaller0>
[  855.228933][T29478] tipc: Disabling bearer <eth:syzkaller0>
[  855.382410][T29491] vlan2: entered promiscuous mode
[  855.382432][T29491] syz_tun: entered promiscuous mode
[  855.546996][T29498] netlink: 'syz.3.5577': attribute type 27 has an invalid length.
[  855.547021][T29498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5577'.
[  855.547045][T29498] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  855.727743][T29517] netlink: 'syz.3.5582': attribute type 12 has an invalid length.
[  855.727766][T29517] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5582'.
[  855.733351][T29516] syzkaller0: entered promiscuous mode
[  855.733371][T29516] syzkaller0: entered allmulticast mode
[  855.817114][T29518] netlink: 'syz.4.5583': attribute type 1 has an invalid length.
[  855.955088][T29520] syzkaller0: MTU not usable for tipc bearer
[  855.955127][T29520] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  856.152352][T29542] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5588'.
[  856.170623][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5590'.
[  856.170646][T29544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5590'.
[  856.302490][T29552] netlink: 'syz.4.5592': attribute type 28 has an invalid length.
[  856.302511][T29552] netlink: 'syz.4.5592': attribute type 3 has an invalid length.
[  856.302523][T29552] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5592'.
[  856.482552][T29558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5595'.
[  856.707616][T29558] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  856.728223][T29558] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  856.789048][T29558] tipc: Resetting bearer <eth:vlan1>
[  856.889844][T29558] veth3: left allmulticast mode
[  856.890108][T29558] veth5: left allmulticast mode
[  856.906103][T29558] vlan2: left promiscuous mode
[  856.906122][T29558] syz_tun: left promiscuous mode
[  856.906502][T29558] bond2: left promiscuous mode
[  856.931653][T29558] ipvlan2: left promiscuous mode
[  856.931883][T29558] ip6tnl3: left allmulticast mode
[  856.990753][T29558] vlan0: left promiscuous mode
[  856.991321][T29558] gretap1: left promiscuous mode
[  857.139868][T29580] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  857.160035][T29580] bond12 (unregistering): Released all slaves
[  857.274961][T25885] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  857.275071][T25885] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  857.275145][T25885] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  857.275180][T25885] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  857.620718][T29605] syzkaller0: entered promiscuous mode
[  857.620748][T29605] syzkaller0: entered allmulticast mode
[  857.784343][T25974] net_ratelimit: 535 callbacks suppressed
[  857.784364][T25974] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  857.871413][T29625] netlink: 'syz.0.5610': attribute type 83 has an invalid length.
[  857.884397][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  857.886433][T29631] netlink: 'syz.1.5611': attribute type 1 has an invalid length.
[  857.932081][T29631] bond9: entered promiscuous mode
[  857.932428][T29631] 8021q: adding VLAN 0 to HW filter on device bond9
[  857.972507][T29631] bond9: (slave bridge3): making interface the new active one
[  857.972531][T29631] bridge3: entered promiscuous mode
[  857.973356][T29631] bond9: (slave bridge3): Enslaving as an active interface with an up link
[  858.009184][T29643] netlink: 'syz.1.5611': attribute type 1 has an invalid length.
[  858.073895][T29637] bond9: (slave bridge4): Enslaving as a backup interface with an up link
[  858.086567][T25885] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  858.304162][T25974] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  858.383993][T29665] Bluetooth: hci0: invalid length 0, exp 2 for type 13
[  858.415803][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  858.530419][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  858.591452][T29677] syzkaller0: left promiscuous mode
[  858.591475][T29677] syzkaller0: left allmulticast mode
[  858.634587][T25974] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  858.744190][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  858.854188][T25977] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  858.924269][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  859.192395][T29708] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  859.206101][ T5726] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  859.209871][T29706] netlink: 'syz.0.5631': attribute type 6 has an invalid length.
[  859.815291][T29811] netlink: 'syz.3.5637': attribute type 1 has an invalid length.
[  859.889302][T29811] bond12: entered promiscuous mode
[  859.889849][T29811] 8021q: adding VLAN 0 to HW filter on device bond12
[  860.128698][ T5757] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  860.295266][T29858] lo: Caught tx_queue_len zero misconfig
[  860.954735][T29871] __nla_validate_parse: 11 callbacks suppressed
[  860.954754][T29871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5646'.
[  860.954770][T29871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5646'.
[  861.041686][T29873] netlink: 'syz.2.5647': attribute type 1 has an invalid length.
[  861.197536][T29873] bond7: entered promiscuous mode
[  861.197608][T29873] bond7: entered allmulticast mode
[  861.198004][T29873] 8021q: adding VLAN 0 to HW filter on device bond7
[  861.223177][T29878] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5650'.
[  861.331462][T29875] erspan1: entered allmulticast mode
[  861.339900][T29875] bond7: (slave erspan1): making interface the new active one
[  861.339922][T29875] erspan1: entered promiscuous mode
[  861.343144][T29875] 
[  861.358201][T29875] ======================================================
[  861.365289][T29875] WARNING: possible circular locking dependency detected
[  861.372388][T29875] syzkaller #0 Not tainted
[  861.376793][T29875] ------------------------------------------------------
[  861.383859][T29875] syz.2.5647/29875 is trying to acquire lock:
[  861.389915][T29875] ffff88807b351070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360
[  861.399038][T29875] 
[  861.399038][T29875] but task is already holding lock:
[  861.406398][T29875] ffff88804211dd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  861.416355][T29875] 
[  861.416355][T29875] which lock already depends on the new lock.
[  861.416355][T29875] 
[  861.426750][T29875] 
[  861.426750][T29875] the existing dependency chain (in reverse order) is:
[  861.435763][T29875] 
[  861.435763][T29875] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}:
[  861.444176][T29875]        _raw_spin_lock+0x2e/0x40
[  861.449215][T29875]        sch_direct_xmit+0x15f/0x4c0
[  861.454512][T29875]        __dev_queue_xmit+0x179a/0x3920
[  861.460062][T29875]        hsr_forward_skb+0x1701/0x2b70
[  861.465525][T29875]        hsr_dev_xmit+0x242/0x360
[  861.470555][T29875]        dev_hard_start_xmit+0x2cd/0x830
[  861.476191][T29875]        __dev_queue_xmit+0x14d1/0x3920
[  861.481750][T29875]        ip6_output+0x337/0x540
[  861.486675][T29875]        NF_HOOK+0x177/0x4f0
[  861.491405][T29875]        mld_sendpack+0x890/0xe10
[  861.496439][T29875]        mld_ifc_work+0x842/0xd60
[  861.501472][T29875]        process_scheduled_works+0xc3d/0x1630
[  861.507554][T29875]        worker_thread+0xa47/0xfb0
[  861.512658][T29875]        kthread+0x38b/0x480
[  861.517233][T29875]        ret_from_fork+0x514/0xb70
[  861.522363][T29875]        ret_from_fork_asm+0x1a/0x30
[  861.527645][T29875] 
[  861.527645][T29875] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}:
[  861.535801][T29875]        __lock_acquire+0x164c/0x2de0
[  861.541163][T29875]        lock_acquire+0x115/0x350
[  861.546174][T29875]        _raw_spin_lock_bh+0x36/0x50
[  861.551447][T29875]        hsr_dev_xmit+0x237/0x360
[  861.556458][T29875]        dev_hard_start_xmit+0x2cd/0x830
[  861.562087][T29875]        __dev_queue_xmit+0x14d1/0x3920
[  861.567626][T29875]        NF_HOOK+0x33a/0x3c0
[  861.572273][T29875]        arp_xmit+0x16c/0x270
[  861.576937][T29875]        arp_solicit+0xbdc/0xe40
[  861.581867][T29875]        __neigh_event_send+0xf0c/0x1510
[  861.587518][T29875]        neigh_resolve_output+0x1a1/0x720
[  861.593336][T29875]        ip_finish_output2+0xc4b/0x10b0
[  861.598917][T29875]        ip_output+0x29f/0x450
[  861.603674][T29875]        iptunnel_xmit+0x626/0xd10
[  861.608848][T29875]        ip_tunnel_xmit+0x195b/0x2040
[  861.614205][T29875]        erspan_xmit+0xb6a/0x1620
[  861.619264][T29875]        dev_hard_start_xmit+0x2cd/0x830
[  861.624903][T29875]        sch_direct_xmit+0x257/0x4c0
[  861.630215][T29875]        __dev_queue_xmit+0x179a/0x3920
[  861.635760][T29875]        alb_send_lp_vid+0x348/0x550
[  861.641071][T29875]        alb_send_learning_packets+0x12c/0x300
[  861.647213][T29875]        alb_fasten_mac_swap+0x45d/0xf70
[  861.652835][T29875]        bond_alb_handle_active_change+0xbc5/0xe50
[  861.659325][T29875]        bond_change_active_slave+0x1098/0x36d0
[  861.665569][T29875]        bond_select_active_slave+0x8a6/0xcd0
[  861.671620][T29875]        bond_enslave+0x239c/0x3b10
[  861.676802][T29875]        do_set_master+0x563/0x720
[  861.681958][T29875]        rtnl_newlink_create+0x4c8/0x7b0
[  861.687576][T29875]        rtnl_newlink+0x167a/0x1c30
[  861.692764][T29875]        rtnetlink_rcv_msg+0x802/0xc00
[  861.698207][T29875]        netlink_rcv_skb+0x226/0x4a0
[  861.703475][T29875]        netlink_unicast+0x8ef/0xa80
[  861.708748][T29875]        netlink_sendmsg+0x813/0xb40
[  861.714048][T29875]        sock_sendmsg_nosec+0x14e/0x190
[  861.719579][T29875]        ____sys_sendmsg+0x54e/0x850
[  861.724857][T29875]        ___sys_sendmsg+0x2a5/0x360
[  861.730063][T29875]        __x64_sys_sendmsg+0x1b1/0x290
[  861.735524][T29875]        do_syscall_64+0x166/0x520
[  861.740632][T29875]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  861.747037][T29875] 
[  861.747037][T29875] other info that might help us debug this:
[  861.747037][T29875] 
[  861.757247][T29875]  Possible unsafe locking scenario:
[  861.757247][T29875] 
[  861.764702][T29875]        CPU0                    CPU1
[  861.770047][T29875]        ----                    ----
[  861.775390][T29875]   lock(&qdisc_xmit_lock_key#4);
[  861.780406][T29875]                                lock(&hsr->seqnr_lock);
[  861.787413][T29875]                                lock(&qdisc_xmit_lock_key#4);
[  861.794947][T29875]   lock(&hsr->seqnr_lock);
[  861.799467][T29875] 
[  861.799467][T29875]  *** DEADLOCK ***
[  861.799467][T29875] 
[  861.807664][T29875] locks held by syz.2.5647/29875: 10, last CPU#1:
[  861.814139][T29875]  #0: ffffffff917bb5e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  861.823670][T29875]  #1: ffffffff9125b7e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30
[  861.832710][T29875]  #2: ffffffff8fd5c940 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920
[  861.842624][T29875]  #3: ffff888053cae228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920
[  861.855231][T29875]  #4: ffff88804211dd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0
[  861.865501][T29875]  #5: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450
[  861.874359][T29875]  #6: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0
[  861.884091][T29875]  #7: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270
[  861.892886][T29875]  #8: ffffffff8fd5c940 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920
[  861.902809][T29875]  #9: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360
[  861.911939][T29875] 
[  861.911939][T29875] stack backtrace:
[  861.917816][T29875] CPU: 1 UID: 0 PID: 29875 Comm: syz.2.5647 Not tainted syzkaller #0 PREEMPT(full) 
[  861.927168][T29875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  861.937205][T29875] Call Trace:
[  861.940496][T29875]  <TASK>
[  861.943439][T29875]  dump_stack_lvl+0xe8/0x150
[  861.948029][T29875]  print_circular_bug+0x2e2/0x300
[  861.953049][T29875]  check_noncircular+0x12f/0x150
[  861.957981][T29875]  __lock_acquire+0x164c/0x2de0
[  861.962819][T29875]  ? __siphash_unaligned+0x28d/0x3e0
[  861.968157][T29875]  ? __flow_hash_from_keys+0x431/0x6c0
[  861.973647][T29875]  lock_acquire+0x115/0x350
[  861.978138][T29875]  ? hsr_dev_xmit+0x237/0x360
[  861.982803][T29875]  ? hsr_dev_xmit+0x237/0x360
[  861.987464][T29875]  _raw_spin_lock_bh+0x36/0x50
[  861.992213][T29875]  ? hsr_dev_xmit+0x237/0x360
[  861.996875][T29875]  hsr_dev_xmit+0x237/0x360
[  862.001362][T29875]  ? hsr_dev_xmit+0x2d/0x360
[  862.005945][T29875]  dev_hard_start_xmit+0x2cd/0x830
[  862.011048][T29875]  ? validate_xmit_skb+0xec3/0x1a00
[  862.016237][T29875]  __dev_queue_xmit+0x14d1/0x3920
[  862.021252][T29875]  ? __dev_queue_xmit+0x29b/0x3920
[  862.026359][T29875]  ? __lock_acquire+0x747/0x2de0
[  862.031281][T29875]  ? arpt_do_table+0x25b/0x1f90
[  862.036177][T29875]  ? __pfx___dev_queue_xmit+0x10/0x10
[  862.041547][T29875]  ? __pfx_arpt_do_table+0x10/0x10
[  862.046650][T29875]  ? NF_HOOK+0xa2/0x3c0
[  862.050796][T29875]  NF_HOOK+0x33a/0x3c0
[  862.054851][T29875]  ? __pfx_arp_xmit_finish+0x10/0x10
[  862.060123][T29875]  ? NF_HOOK+0xa2/0x3c0
[  862.064264][T29875]  ? __pfx_NF_HOOK+0x10/0x10
[  862.068838][T29875]  ? lock_acquire+0x115/0x350
[  862.073502][T29875]  ? __pfx_arp_xmit_finish+0x10/0x10
[  862.078775][T29875]  ? inet_addr_type_dev_table+0x25/0x190
[  862.084396][T29875]  arp_xmit+0x16c/0x270
[  862.088541][T29875]  ? arp_xmit+0x23/0x270
[  862.092768][T29875]  arp_solicit+0xbdc/0xe40
[  862.097178][T29875]  ? __pfx_arp_solicit+0x10/0x10
[  862.102105][T29875]  ? __neigh_event_send+0xea4/0x1510
[  862.107379][T29875]  ? __pfx_arp_solicit+0x10/0x10
[  862.112301][T29875]  __neigh_event_send+0xf0c/0x1510
[  862.117402][T29875]  neigh_resolve_output+0x1a1/0x720
[  862.122591][T29875]  ? __pfx_ip_neigh_gw4+0x10/0x10
[  862.127613][T29875]  ? ip_finish_output2+0x3de/0x10b0
[  862.132797][T29875]  ip_finish_output2+0xc4b/0x10b0
[  862.137812][T29875]  ? ip_skb_dst_mtu+0x811/0xa50
[  862.142649][T29875]  ? ip_finish_output2+0x3de/0x10b0
[  862.147840][T29875]  ? ip_finish_output+0x40b/0x530
[  862.152919][T29875]  ip_output+0x29f/0x450
[  862.157163][T29875]  ? ip_output+0x5a/0x450
[  862.161477][T29875]  iptunnel_xmit+0x626/0xd10
[  862.166072][T29875]  ip_tunnel_xmit+0x195b/0x2040
[  862.170915][T29875]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  862.176103][T29875]  ? __gre_xmit+0x106/0x1a0
[  862.180593][T29875]  erspan_xmit+0xb6a/0x1620
[  862.185087][T29875]  ? __pfx_erspan_xmit+0x10/0x10
[  862.190013][T29875]  ? unwind_get_return_address+0x4d/0x90
[  862.195658][T29875]  ? __lock_acquire+0x747/0x2de0
[  862.200584][T29875]  dev_hard_start_xmit+0x2cd/0x830
[  862.205691][T29875]  sch_direct_xmit+0x257/0x4c0
[  862.210446][T29875]  ? __pfx_sch_direct_xmit+0x10/0x10
[  862.215718][T29875]  ? do_set_master+0x4c0/0x720
[  862.220472][T29875]  __dev_queue_xmit+0x179a/0x3920
[  862.225490][T29875]  ? __dev_queue_xmit+0x29b/0x3920
[  862.230604][T29875]  ? __pfx___dev_queue_xmit+0x10/0x10
[  862.235965][T29875]  ? __alloc_skb+0x27a/0x7a0
[  862.240541][T29875]  ? rcu_is_watching+0x16/0xb0
[  862.245292][T29875]  ? __alloc_skb+0x27a/0x7a0
[  862.249874][T29875]  ? trace_kmem_cache_alloc+0x29/0xe0
[  862.255245][T29875]  ? __alloc_skb+0x27a/0x7a0
[  862.259821][T29875]  ? kmem_cache_alloc_node_noprof+0x3be/0x610
[  862.265880][T29875]  ? __alloc_skb+0x4d0/0x7a0
[  862.270457][T29875]  ? alb_send_lp_vid+0x14e/0x550
[  862.275386][T29875]  alb_send_lp_vid+0x348/0x550
[  862.280138][T29875]  ? __pfx_alb_send_lp_vid+0x10/0x10
[  862.285410][T29875]  ? __pfx_alb_set_slave_mac_addr+0x10/0x10
[  862.291293][T29875]  alb_send_learning_packets+0x12c/0x300
[  862.296915][T29875]  ? __pfx_alb_send_learning_packets+0x10/0x10
[  862.303082][T29875]  ? alb_swap_mac_addr+0x230/0x340
[  862.308187][T29875]  alb_fasten_mac_swap+0x45d/0xf70
[  862.313289][T29875]  ? dev_addr_mod+0x1ba/0x350
[  862.318014][T29875]  bond_alb_handle_active_change+0xbc5/0xe50
[  862.324075][T29875]  ? __pfx_bond_alb_handle_active_change+0x10/0x10
[  862.330570][T29875]  ? __hw_addr_add_ex+0x182/0x520
[  862.335597][T29875]  ? __local_bh_enable_ip+0xd6/0x140
[  862.340873][T29875]  bond_change_active_slave+0x1098/0x36d0
[  862.346580][T29875]  ? __pfx_call_function_single_prep_ipi+0x10/0x10
[  862.353076][T29875]  ? smp_call_function_many_cond+0xfc7/0x1500
[  862.359130][T29875]  ? smp_call_function_many_cond+0x11b2/0x1500
[  862.365266][T29875]  ? __pfx_bond_change_active_slave+0x10/0x10
[  862.371318][T29875]  ? __pfx_do_sync_core+0x10/0x10
[  862.376335][T29875]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  862.382644][T29875]  ? bond_start_xmit+0x92/0x19e0
[  862.387577][T29875]  ? __pfx___text_poke+0x10/0x10
[  862.392529][T29875]  bond_select_active_slave+0x8a6/0xcd0
[  862.398077][T29875]  ? __pfx_bond_select_active_slave+0x10/0x10
[  862.404149][T29875]  bond_enslave+0x239c/0x3b10
[  862.408824][T29875]  ? __pfx_bond_enslave+0x10/0x10
[  862.413843][T29875]  ? __dev_notify_flags+0x3d4/0x510
[  862.419039][T29875]  ? __pfx___dev_change_flags+0x10/0x10
[  862.424574][T29875]  ? mutex_is_locked+0x17/0x50
[  862.429340][T29875]  do_set_master+0x563/0x720
[  862.433943][T29875]  rtnl_newlink_create+0x4c8/0x7b0
[  862.439049][T29875]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  862.444677][T29875]  ? __pfx___mutex_lock+0x10/0x10
[  862.449715][T29875]  ? ns_capable+0x89/0xe0
[  862.454055][T29875]  rtnl_newlink+0x167a/0x1c30
[  862.458736][T29875]  ? __pfx_rtnl_newlink+0x10/0x10
[  862.463758][T29875]  ? __netlink_deliver_tap+0x4f1/0x6e0
[  862.469216][T29875]  ? netlink_deliver_tap+0x19c/0x1b0
[  862.474501][T29875]  ? netlink_unicast+0x8c1/0xa80
[  862.479432][T29875]  ? netlink_sendmsg+0x813/0xb40
[  862.484361][T29875]  ? sock_sendmsg_nosec+0x14e/0x190
[  862.489558][T29875]  ? ____sys_sendmsg+0x54e/0x850
[  862.494506][T29875]  ? ___sys_sendmsg+0x2a5/0x360
[  862.499352][T29875]  ? __x64_sys_sendmsg+0x1b1/0x290
[  862.504453][T29875]  ? do_syscall_64+0x166/0x520
[  862.509209][T29875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.515279][T29875]  ? kasan_quarantine_put+0xbb/0x1f0
[  862.520552][T29875]  ? lockdep_hardirqs_on+0x7b/0x110
[  862.525743][T29875]  ? nlmon_xmit+0xb0/0x100
[  862.530234][T29875]  ? kmem_cache_free+0x182/0x650
[  862.535163][T29875]  ? __lock_acquire+0x747/0x2de0
[  862.540086][T29875]  ? __dev_queue_xmit+0x29b/0x3920
[  862.545190][T29875]  ? __local_bh_enable_ip+0xd6/0x140
[  862.550465][T29875]  ? lockdep_hardirqs_on+0x7b/0x110
[  862.555661][T29875]  ? __pfx_rtnl_newlink+0x10/0x10
[  862.560671][T29875]  rtnetlink_rcv_msg+0x802/0xc00
[  862.565596][T29875]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[  862.570692][T29875]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  862.576138][T29875]  ? __copy_skb_header+0xa3/0x4a0
[  862.581166][T29875]  netlink_rcv_skb+0x226/0x4a0
[  862.585934][T29875]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  862.591390][T29875]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  862.596672][T29875]  ? netlink_deliver_tap+0x2e/0x1b0
[  862.601864][T29875]  ? netlink_deliver_tap+0x2e/0x1b0
[  862.607057][T29875]  netlink_unicast+0x8ef/0xa80
[  862.611826][T29875]  netlink_sendmsg+0x813/0xb40
[  862.616580][T29875]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.621857][T29875]  ? apparmor_socket_sendmsg+0x98/0x360
[  862.627396][T29875]  ? __pfx_netlink_sendmsg+0x10/0x10
[  862.632674][T29875]  sock_sendmsg_nosec+0x14e/0x190
[  862.637685][T29875]  ____sys_sendmsg+0x54e/0x850
[  862.642444][T29875]  ? __pfx_____sys_sendmsg+0x10/0x10
[  862.647725][T29875]  ? import_iovec+0x73/0xa0
[  862.652235][T29875]  ___sys_sendmsg+0x2a5/0x360
[  862.656903][T29875]  ? __lock_acquire+0x747/0x2de0
[  862.661831][T29875]  ? __pfx____sys_sendmsg+0x10/0x10
[  862.667020][T29875]  ? tomoyo_path_number_perm+0x219/0x5f0
[  862.672653][T29875]  ? __fget_files+0x2a/0x420
[  862.677244][T29875]  ? __fget_files+0x3a2/0x420
[  862.681930][T29875]  __x64_sys_sendmsg+0x1b1/0x290
[  862.686867][T29875]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  862.692328][T29875]  ? kfree+0x4d/0x650
[  862.696314][T29875]  ? __pfx_kcov_ioctl+0x10/0x10
[  862.701158][T29875]  do_syscall_64+0x166/0x520
[  862.705737][T29875]  ? trace_irq_disable+0x3b/0x140
[  862.710745][T29875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.716799][T29875]  ? clear_bhb_loop+0x70/0xc0
[  862.721464][T29875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  862.727340][T29875] RIP: 0033:0x7fafb6b9f559
[  862.731741][T29875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  862.751333][T29875] RSP: 002b:00007fafb7ab2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  862.759743][T29875] RAX: ffffffffffffffda RBX: 00007fafb6e26090 RCX: 00007fafb6b9f559
[  862.767704][T29875] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  862.775665][T29875] RBP: 00007fafb6c36b20 R08: 0000000000000000 R09: 0000000000000000
[  862.783622][T29875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  862.791579][T29875] R13: 00007fafb6e26128 R14: 00007fafb6e26090 R15: 00007ffffb06f5b8
[  862.799548][T29875]  </TASK>
[  862.835844][   T30] audit: type=1800 audit(1792517280.341:30): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  862.835893][   T30] audit: type=1800 audit(1792517280.351:31): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  862.835923][   T30] audit: type=1800 audit(1792517280.351:32): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  862.835952][   T30] audit: type=1800 audit(1792517280.351:33): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  862.837895][   T30] audit: type=1800 audit(1792517280.351:34): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  862.837934][   T30] audit: type=1800 audit(1792517280.351:35): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  862.837965][   T30] audit: type=1800 audit(1792517280.351:36): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  862.838599][   T30] audit: type=1800 audit(1792517280.351:37): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  862.838635][   T30] audit: type=1800 audit(1792517280.351:38): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  862.842298][   T30] audit: type=1800 audit(1792517280.351:39): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5651" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2753 res=0 errno=0
[  863.090461][    C0] net_ratelimit: 20 callbacks suppressed
[  863.090486][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  863.103215][T29875] bond7: (slave erspan1): Enslaving as an active interface with an up link
[  863.103922][T29875] syz.2.5647 (29875) used greatest stack depth: 16744 bytes left
[  863.118592][T25976] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  863.234421][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  863.335342][T25977] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  863.444103][T25977] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  863.554153][T25977] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  863.664509][T25977] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  863.774141][T25977] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  863.885099][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  863.994147][T25977] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  868.114130][T13579] net_ratelimit: 40 callbacks suppressed
[  868.114153][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  868.234497][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  868.294079][    C0] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  868.344240][T13579] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  868.454193][T25972] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  868.564134][T25972] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  868.674281][T25977] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  868.794212][T25977] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  868.904166][T25972] bond6: (slave ip6gretap1): failed to get link speed/duplex
[  869.014092][T25972] bond6: (slave ip6gretap1): failed to get link speed/duplex