last executing test programs:

7.013529429s ago: executing program 1 (id=5246):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r0, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x218, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xffff00, 0xff000000, 0x4, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0xff, 0x0, 0xff]}}, 0x4cfd, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'sit0\x00', {0xff}, {}, 0x0, 0x108}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff0000ff, 0xb, 0x1, {@empty, {[0x0, 0x2064f8bb0fa89a85, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x10, 0x4, 0x6, 0xffff, 0x40, 0x8001, 'batadv_slave_1\x00', 'ipvlan0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x10, 0x701, 0x0, 0x40, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='!\x00'}]}, 0x1c}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt$MRT(r1, 0x0, 0xcf, &(0x7f0000000440), &(0x7f0000000480)=0x4)

6.798747197s ago: executing program 1 (id=5249):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000800000000001c5a00000000000018020000", @ANYRES16=0x0, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES16=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x40802)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000128bd7000fddbdf2500000000080009000a000000080008000100000008000700ffffffff0800080080000000080006000400000008000600ff03000008000900f7ffffff"], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)

6.445203521s ago: executing program 1 (id=5250):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x75, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], <r2=>0x0, 0x75, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r3, &(0x7f0000000000)=ANY=[], 0x38)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0xa, 0x0)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1f", 0x7}], 0x1, 0x1)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5)
sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x34, r6, 0xb1b, 0x70bd2a, 0x0, {0x2a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0xd4209235c937efa7}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfb}]}, 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0xb8, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0xb8}}, 0x20000000) (async)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0xb8, r7, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0xb8}}, 0x20000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0)
r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000b00), 0x4)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r2], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x14, &(0x7f0000000d00)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x14, &(0x7f0000000d00)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x7}]}, &(0x7f0000000900)='GPL\x00', 0xffffff77, 0x6f, &(0x7f0000000940)=""/111, 0x41000, 0x20, '\x00', 0x0, 0x1a, r3, 0x8, &(0x7f0000000a80)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xc, 0x1de, 0x9}, 0x10, 0x250b5, r8, 0x9, &(0x7f0000000b40)=[r9], &(0x7f0000000b80)=[{0x1, 0x5, 0x3, 0x1}, {0x2, 0x4, 0x6, 0x8}, {0x1, 0x3, 0x6}, {0x0, 0x1, 0x1, 0x9e56a39c64a5c2d2}, {0x3, 0x4, 0xc, 0x1}, {0x3, 0x3, 0x6, 0x7}, {0x3, 0x1, 0x6, 0x2}, {0x2, 0x5, 0x2, 0x6}, {0x4, 0x4, 0xa, 0x6}], 0x10, 0x6}, 0x94)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000080)={'bridge_slave_0\x00'})
syz_emit_ethernet(0x6e, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000382b00fc220000000000000000000000000000fe8000000000000000000000000000aa6700000000000000210074b941"], 0x0)

5.410147379s ago: executing program 3 (id=5257):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r3=>0x0})
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
connect$bt_l2cap(r4, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x28, r2, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x403, 0x70bd2a, 0x2, {0x0, 0x0, 0x4, 0x0, 0x4300, 0x1000080}}, 0x20}, 0x1, 0x1000000, 0x0, 0x20000044}, 0x0)

5.32663061s ago: executing program 3 (id=5258):
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d9a9238}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto(r0, &(0x7f0000000040)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x24044044, 0x0, 0x32)

5.043371297s ago: executing program 1 (id=5262):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r3 = socket(0x8, 0x3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000000000000000400000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c697000"], 0x4c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
ioctl$TUNGETSNDBUF(r4, 0x800454d3, 0x0)
r9 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r9, 0x0, 0x20048041)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x8c, 0x24, 0x4, 0x70bd24, 0x1, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff1}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x89, [0x8, 0xe, 0x4, 0x8, 0x1, 0xa, 0x8, 0x1, 0x6, 0x2, 0xe, 0x4a, 0x7, 0xe, 0xf, 0x2], 0x0, [0x3, 0x4, 0xd9, 0x1, 0x2, 0x1, 0xdc9, 0x4, 0x9a, 0x6, 0xa, 0x3ff, 0xa331, 0x100, 0x4, 0x3], [0xd, 0x9, 0x6, 0x6, 0xcbb, 0x7, 0xfff, 0x5, 0x1, 0x6, 0x6, 0x8, 0x9, 0x7291, 0xd, 0x573f]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8004}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010c300)={0x0, [{}, {}, {<r10=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r11=>0x0}, {}, {}, {}, {}, {}, {<r12=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r13=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r14=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r15=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r16=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r17=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {<r18=>0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, <r19=>0x0}, {}, {}, {}, {<r20=>0x0}, {}, {<r21=>0x0}], 0x2, "f35cdffa4c22ce"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000110700)={0x9, [{}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12}, {r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r14}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r15}, {}, {}, {}, {}, {}, {0x0, r19}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r21}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r17}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r11}, {}, {}, {}, {}, {}, {r20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}], 0x7, "e81e98e4abedff"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0)
r22 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r22, 0x400454ca, 0x0)

4.189207326s ago: executing program 0 (id=5268):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB="23b8563bc08bb49477f4aa9ee44f7ad83d165fcb1b0a431b3a0b1f55af1852878955f22d9e336e66d29330d0bc0c7ecb6b6e9fb93e8d41d37d004416411155aff14eaec1559da36ae33db33e7ffa0a57bf18775a5af056f9cf2f1e5073d9f1b4555898b0ae6f20fb66872440eaa1f5d96ca20ff1783578fce24e39eadbebc370c7e75715500f32ea3948c851e37d33e7459e263a1f87d27a005cf332d00b5b032d71f2ae3b844cec", @ANYBLOB="887f66688f061d75", @ANYBLOB="ac09654b7a5e9c0eb52b9e4a7056124a596c23a192a94be5cac5798ed0c22addd8a627ca0cc1f01defde6c3f8e1e8e2ca6c9ea33afcd3c376daccb77ede7edc25956c75d2526580ec7a934d5d918d9857dcab1a301a6b8bda62cd4b4", @ANYRESDEC=r0, @ANYBLOB="ea055bad73d8e65350697df35382006b2fd7b2bad71c840e16644bd977d68c37d3b84b6e2fcf6b2fb47079"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4800)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r5, &(0x7f0000000380)={0x1f, 0xc000, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000080), &(0x7f0000000240)=r8}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0xb7a2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd}, 0x50)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x200280d0}, 0x24050081)
r9 = socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r10 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r10)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed7f000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000580)=@ethtool_drvinfo={0x26, "744e97db9afbb12414a6834af78cb3831712e2a2293e398b46cd813d5dd09cd1", "6b6f9b9f8372dd6625bde94e9edc7c35bb7c2c1ffb866b4b4dd789c42881c2a8", "a7695026e9086edf8ccef78410fc16bacb308ca6b200a3c8b84dbc322fd0b42b", "830600cb7a9ae29e5c81d91096bfa200", "29b1b2e5f114e8a8a9f1e200777acf7ef09dbb3c6fde217f4d4cf2e20859b560", "de07748767cdc8e5821ffd4a", 0x200, 0x0, 0x10001, 0x4c4, 0x101}})
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="9bef1534ff91080a00000009000000070000000800000000000000", @ANYRES32, @ANYBLOB="02cb00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r11, 0x0, 0x0, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_opts(r12, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x9, 0x3, 0x2b0, 0x118, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, &(0x7f0000000000), {[{{@ipv6={@remote, @mcast1, [0xff000000, 0xffffffff, 0xffffff00, 0xffffff00], [0xff000000, 0xff000000, 0xffffff00, 0xffffff00], 'xfrm0\x00', 'veth1_macvtap\x00', {}, {}, 0x33, 0x6, 0x4}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'veth1_to_team\x00', {0x6}}}}, {{@ipv6={@empty, @private1, [0x0, 0xffffff00, 0xff000000], [0xffffff00, 0xff, 0xff000000, 0xff000000], 'caif0\x00', 'bridge0\x00', {}, {0xff}, 0x2c, 0x23, 0x2, 0xcb}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000b0ff0000000000006900000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000010008500000005000000bf0900000000000035090100000600009500000000000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9720000000000007080000fffdffffbfa400000000000007040000f0ffffff74020000080000e118220000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.444615038s ago: executing program 0 (id=5270):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c0000", @ANYBLOB="0c0002800500230000000000080009001f94da87"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x120, 0x30, 0xffff, 0x0, 0x0, {}, [{0x10c, 0x1, [@m_ife={0x108, 0x1, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x120}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x9e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017c0000", @ANYBLOB="0c0002800500230000000000080009001f94da87"], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtaction={0x120, 0x30, 0xffff, 0x0, 0x0, {}, [{0x10c, 0x1, [@m_ife={0x108, 0x1, 0x0, 0x0, {{0x8}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x30, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7fff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x9}, @IFE_META_PRIO={0x8, 0x3, @val=0x201}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xa, 0x80, 0x3, 0x0, 0x10}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_TCINDEX={0x6, 0x5, @val=0xfff}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x80000000}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xff, 0x2000000e, 0x8, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x120}}, 0x0) (async)

3.109635663s ago: executing program 0 (id=5271):
r0 = socket$inet6(0xa, 0x3, 0x2f)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x18, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000030000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000af000000000000008510000001000000950000000000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000640)={&(0x7f0000000300)="cfeaf31f221628da6d6712", &(0x7f0000000340)=""/149, &(0x7f0000000400)="83288e48bd20519d6cb07fefddcd8c4b1245979c249f2367ceb7daa600f285dd60305e43c12aec6f898b730770560d753da8b67a614e3ed9e1e978ba92328313fe7ecee897fdfec1a6f56c454c0cc08120ea949c3231c7324b1676dfeeae640b9e80c5584e318ecf850864b2dc8bd62404f2871cd1cdb5e0d27623833e1003d8a1db80cdfe288eeab3f663424f785696812a55ea5e1120410499b756b536cb30accb2eed90a0e8f42bc9582d0339", &(0x7f0000000580)="11a74f321b677fa10c63d25577ccae5478f7c5cf2ed77590eae8c3f3521f4bf2904efe906f7b4e0ecc6cd5b12edd058f03dad24aa0de7c5d44ff2b4357910b3c61aa2188e488db500a8f59b50c8df93fad2a8ddeebfd17598870333755248a3f593821a8747340745be3882e4b07c29172e95f05cc25b10998cd8f65bee54b027b945ca9c7afbf9574722f7237d997381e641cca1569fc1fc4bbba4f6af51d03a66a2dd309c842ae7b300c", 0x7f, r2}, 0x38)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r3 = socket$kcm(0xa, 0x1, 0x0)
r4 = socket$kcm(0xa, 0x5, 0x0)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x10, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xd, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}})
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4})
r6 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda107000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020c31af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x50, 0x0, 0x1, 0x4, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x24, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x765a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x12b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3e30}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x50}}, 0x3000c000)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r6})

2.416082505s ago: executing program 3 (id=5274):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
recvmmsg(r0, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4)
setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001a40)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x9, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x1, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x2, 0x0, 0x7}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x3, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000400, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0xfffffffe, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0xe80, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x4, 0xb, 0x37, 0x4, 0xbb, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0xffffff9d, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffc3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x80000, 0x2, 0x0, 0x0, 0x19b90000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x9a0a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x9, 0x0, 0x8c62, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x5, 0xfffffffc, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x91, 0x9fd, 0xfffffffe, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x9, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x13, 0x5, 0x200, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0x800e0b2, 0x1, 0x8fc, 0x8, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0xfd, 0xfffffffa, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x7, 0x2, 0x7f, 0x0, 0x12, 0x4, 0x0, 0x1000004, 0x7, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x0, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0xe5a, 0x4, 0x6, 0x81, 0xd44, 0x10, 0x6, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0x1, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x4, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xbfff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000004, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x4, 0x0, 0x1000002, 0x4, 0x9, 0x9, 0xfffffffa, 0x7, 0x1, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x1000009, 0x4, 0x6, 0x7, 0x200, 0x37, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x33, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x1}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000000000))
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r4, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000003640)='?', 0x1}], 0x1}}], 0x1, 0xc005)
sendmmsg$inet(r4, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000240)='@', 0x1}], 0xef}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}], 0x1}}], 0x2, 0x4000000)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000002000010026bd7000fbdbdf250210100009000006"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804)
r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0)
ioctl$XFS_IOC_FSGEOMETRY(r1, 0x8100587e, &(0x7f0000000500))
write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6)

2.389111003s ago: executing program 0 (id=5275):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0xfffffffe}}, 0x2e)
getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080))

2.148037601s ago: executing program 0 (id=5278):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080)=0xffffffff, 0x4)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = socket(0x8, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000280)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r5, 0x9801, 0x802}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}]}}}]}, 0x40}}, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="60000000100039040200"/20, @ANYRES32=r5, @ANYBLOB="50100000000000002800128008000100677265001c00028008000700ac1414aa0600030081000000060003462b"], 0x60}}, 0x4040000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x78, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x24, 0x7, 'system_u:object_r:apm_bios_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x1e}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000)
accept4$tipc(r1, 0x0, &(0x7f0000000000), 0x800)

1.878332248s ago: executing program 1 (id=5281):
r0 = socket(0x1d, 0x2, 0x3) (async)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x3, {0x2, 0x0, 0x2}}, 0x18) (async, rerun: 32)
sendmmsg(r0, &(0x7f0000004000)=[{{0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f00000003c0)="9d04e504", 0x4}, {0x0}], 0x2, &(0x7f0000002b00)}}], 0x1, 0x4040040) (rerun: 32)
syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) (async)
setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, 0x0, 0x0)

1.648802551s ago: executing program 1 (id=5284):
unshare(0x64000600)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d9a9238}, 0x94)
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
sendto(r0, &(0x7f0000000040)="cec17299253d97363be011fae774c95eff3d8fd74ca2974f22ee90adb120661dae2d9d1a15e80b3f", 0x28, 0x24044044, 0x0, 0x32)

1.618833525s ago: executing program 2 (id=5285):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) (async)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380100001a000100feffffef00010000fc020000000000000000000000000001fc0100000000000000000000000000014001071c4e2300050a0000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000e000000100000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c25080000000000050000000000000081000000000000000000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffc030000ff0000008000000000350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff800000"], 0x138}}, 0x844) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x0) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r5=>0x0}) (async)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x30, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}]}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xc94}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40001}, 0x4080)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r8, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) (async)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r8, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", ""]}, 0x28}}, 0x40)

1.46093269s ago: executing program 4 (id=5287):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) (async)
ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000440)={{[0x0, 0x4, 0x6000, 0x4]}, 0x0, 0x3, 0x8, 0x0, 0x0}) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'wlan1\x00'}})
r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r4, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) (async)
r5 = socket$inet(0x2, 0x3, 0x30)
sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r3, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x49}}}}, ["", ""]}, 0x28}}, 0x80) (async)
getsockopt$inet_mreqsrc(r5, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0}) (async)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$XFS_IOC_SCRUBV_METADATA(r1, 0xc0285840, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, r7, 0x300, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x4a}}}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}]}, 0x34}}, 0x48040) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r12=>0x0}) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r14, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
socket$tipc(0x1e, 0x2, 0x0) (async)
sendmsg$NL80211_CMD_REGISTER_FRAME(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0)

1.427163773s ago: executing program 3 (id=5288):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x100, 0x4) (async)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x100, 0x4)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x2)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0)
socket$kcm(0x21, 0x2, 0xa) (async)
socket$kcm(0x21, 0x2, 0xa)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020601080000000000000500050f0a00000005000400000000000b00020053797a3100000000120003006229747a0a377215d26a75bab6340f00"/76], 0x4c}}, 0x0) (async)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020601080000000000000500050f0a00000005000400000000000b00020053797a3100000000120003006229747a0a377215d26a75bab6340f00"/76], 0x4c}}, 0x0)
r8 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f0000001500)={0x0, 0x4, 0x3, 0x1165, 0x2, 0xe8a2, 0x1, 0x3, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x7, 0x42bb}}, &(0x7f00000015c0)=0xb0)
r9 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r10, 0x0) (async)
shutdown(r10, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r11 = socket$netlink(0x10, 0x3, 0x0)
writev(r11, 0x0, 0x0)
sendmsg$AUDIT_GET_FEATURE(r11, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x10, 0x3fb, 0x300, 0x70bd28, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$inet6_opts(r10, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x98)

1.293937036s ago: executing program 4 (id=5289):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0xfffffffe}}, 0x2e)
getsockopt(r4, 0x111, 0x3, 0x0, &(0x7f0000000080))

1.275055646s ago: executing program 2 (id=5290):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34060, 0x0)

1.253934423s ago: executing program 4 (id=5291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000370400000000000000000000000027ea3e31d1b3860027d801b89cac7e0811430a646d17db6ff62ea80977fb1cc9fc78946b9a5bfed6638d1c0056e8ada6c45cea0e26fb2452953d66b2fd17ab4c104f9e48b4d47b41f7ef38e0d1a82461d2c3b118ad6acc0b7906bf22aac24fa9c5e0048502d26338e4f84ff36d559f0b1f34f5a16d600520eda507c7319aec5122eaf6944075e0c3be2aa82703e4683f2a0751d89b1f72a59e29dab57aba21143abddaa28d4d5e8f9db391a16edbe680d0de69845aad44f8bd", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050011000000000008001200fcffffff"], 0x44}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000100)=""/235, 0xeb, 0x0, &(0x7f0000000200)=""/92, 0x5c}}, 0x10)

1.110056285s ago: executing program 3 (id=5292):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x4800)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c"], 0x7c}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x50)
bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x11, 0x0, 'aegis256-generic\x00'}, 0x58)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x86, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28f86ac6911e26622113c1d519b46c2b1bb9b76cf8008d37a06e88b31100ae16fcb20ca3c5e2bc78d0014278c1e4c7fb4ab35e2c3ae32abc7bf205fd325765be5684ece2933f3325ec9cb8b4725605bf2722d1ded87089430c8a"}, 0x0)
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="480000001400195a8563e43c12f461560a2972063700000000000000590000a2bc5603ca00000f7f89000004200000000101ff000000032fdc0e2d9d9b7373ed", 0x40}], 0x1)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x40040)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x4008001}, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000017000000540006803c00040067636d286165732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014)

1.098020492s ago: executing program 4 (id=5293):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0))
ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0})
pread64(r0, 0x0, 0x0, 0x8)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000003c0)=0x2000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x46, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$packet(0x11, 0x2, 0x300)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r6, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

852.998197ms ago: executing program 2 (id=5294):
socket$nl_netfilter(0x10, 0x3, 0xc)
unshare(0x8000400)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20a800, 0x0)
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x6})
socket$netlink(0x10, 0x3, 0x0)
r2 = socket$kcm(0x23, 0x5, 0x0)
listen(r2, 0x800)
pselect6(0x29, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x782, <r4=>0x0}, 0x8)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x40, '\x00', 0x0, r3, 0x2, 0x0, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x2b, 0x19, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @jmp={0x5, 0x0, 0x9, 0x0, 0x5, 0xc598fce15bdb8f49, 0xffffffffffffffe8}, @map_val={0x18, 0x6, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x9}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7}, @generic={0x5, 0xd, 0x5, 0x2, 0x5}]}, &(0x7f00000002c0)='GPL\x00', 0x3, 0x3d, &(0x7f0000000300)=""/61, 0x0, 0x16, '\x00', 0x0, @fallback=0x21, r3, 0x8, &(0x7f0000000340)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0xa, 0x5}, 0x10, r4, r3, 0x6, &(0x7f0000000480)=[r3, r3, r3, r3, r3, r5, r3, r3], &(0x7f00000004c0)=[{0x1, 0x2, 0x6, 0x8}, {0x3, 0x1, 0x5, 0x5}, {0x5, 0x4, 0xd, 0x4}, {0x3, 0x0, 0x5}, {0x0, 0xffffffff, 0xe, 0xb}, {0x3, 0x5, 0x4, 0x1}], 0x10, 0x1}, 0x94)
write$cgroup_int(r3, &(0x7f0000000200)=0xf, 0x12)
r6 = socket(0x10, 0x803, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0xffec}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x4c, 0x2, {0x21}}]}}]}, 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="4eb7000000000000911019000000040095"], &(0x7f0000000480)='syzkaller\x00', 0xfffffffc}, 0x94)
r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r9)
sendmsg$NLBL_CIPSOV4_C_ADD(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16=r10, @ANYRESHEX=r4], 0x174}}, 0x24040892)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x8, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)

836.939725ms ago: executing program 3 (id=5295):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) (async)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000580), 0xaec, r2}, 0x38) (async)
recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/242, 0xf2}, {&(0x7f0000002180)=""/144, 0x90}], 0x2}, 0x0)

586.206968ms ago: executing program 4 (id=5296):
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x3c, "c56f6c4d74e1e33f22fee1bb9934d4674613b9c1ae7a0a05be1b37fc6dcdf7e33edac57c1174c205664831b7cc8d69e7b827b4b208516b53140c6e64"}, &(0x7f0000000100)=0x44)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r2)
unshare(0x22020600)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000)
r5 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000280))
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}}, 0x10)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r6}, 0x20)
sendmmsg$inet6(r6, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0)
r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz0\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_GET_DEV_STATS(r9, 0xc4089434, &(0x7f0000000a00)={0x0, 0x47, 0x0, [0x19c, 0x0, 0x8, 0x10, 0x8], [0x6, 0x7ff, 0x3, 0xfff, 0x2, 0x8000000000000000, 0x8000000000000001, 0x6, 0x4, 0x9, 0x532, 0x40, 0x3, 0x6, 0xb, 0x1, 0xfffffffffffffffd, 0x8000000000000001, 0x800, 0xc, 0x5, 0x8, 0x9, 0x7fffffffffffffff, 0x5, 0xc0, 0x5e4, 0xce, 0x5, 0x4, 0xf, 0x3, 0x10000, 0x0, 0x8000000000000000, 0x7, 0x6, 0x1, 0x2e, 0x8, 0x5, 0x322, 0x200, 0x40, 0x9, 0x5, 0x80000000, 0x5, 0x9, 0x8e4e, 0x5, 0x1400000000000000, 0x4, 0x3, 0x10, 0x3, 0x9, 0x9, 0x0, 0xa5, 0x1af, 0x1, 0x2, 0x1, 0x13f, 0x7, 0x5, 0x3, 0x6, 0xc, 0x3, 0xffffffff, 0x9, 0x8, 0x20000000, 0x4, 0x3, 0x9, 0x0, 0x8, 0x7, 0xb4a, 0x2, 0x6, 0xc0, 0x800, 0x101, 0x100000001, 0x100, 0x40, 0x4, 0x3, 0x8000000000000000, 0x4, 0xdb, 0xe, 0x1ff, 0x8f, 0xffffffffffffffff, 0xfffffffffffffff2, 0xd, 0x8000, 0xfffffffffffffff9, 0x5, 0xa, 0x5, 0x40, 0x0, 0x8, 0xb732, 0x0, 0xffffffffffffffb4, 0x5, 0x0, 0xfffffffffffffffa, 0x6, 0x1, 0x9, 0x0, 0xf, 0x329]})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r1, 0x4)

581.370248ms ago: executing program 2 (id=5297):
r0 = socket$packet(0x11, 0xa, 0x300)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
setsockopt(0xffffffffffffffff, 0x84, 0x7f, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0))
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r1}, 0x20)
socket$xdp(0x2c, 0x3, 0x0)
sendto$inet(r1, &(0x7f00000019c0)="ba424e9bd3229c8edecdb037cd9714c4c34389b4ca7ed9b1960fbc0659d4d28381923472960cfe7ecd0369c740e1923f915db0", 0x33, 0x4002, 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000340)={@empty, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0)
write$tun(r0, &(0x7f0000001a00)={@void, @val={0x1, 0x0, 0x1, 0x81, 0xcaf5, 0x7}, @mpls={[{0x7}, {0x3}, {0x2}, {0x7, 0x0, 0x1}, {0x7}], @ipv6=@icmpv6={0x2, 0x6, "5f3092", 0x24f0, 0x3a, 0x1, @private2, @mcast1, {[@srh={0x62, 0xe, 0x4, 0x7, 0xd0, 0x8, 0x4, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @loopback, @rand_addr=' \x01\x00']}, @hopopts={0x3a, 0xb, '\x00', [@enc_lim={0x4, 0x1, 0xa}, @calipso={0x7, 0x30, {0x0, 0xa, 0xa, 0x6, [0x5a8, 0x5, 0x632, 0x2, 0xd1]}}, @pad1, @enc_lim={0x4, 0x1, 0x76}, @jumbo={0xc2, 0x4, 0x7}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x73, 0x12, 0x4, 0x9, 0x4, 0x10, 0x2e5e, [@private0={0xfc, 0x0, '\x00', 0x1}, @private0, @mcast2, @private2, @local, @remote, @private0, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @dstopts={0x6, 0xb, '\x00', [@generic={0x8, 0x4e, "10795615ae8208a4e78f5d2e4202597b0c8fda80484dcbac5712522f579af18c59c37a59c3e6bc9b886a1861e89281509ed0d2cdd3e952c134d562b5530951c6a9b4aed1ee1741d155da82b08cf0"}, @ra={0x5, 0x2, 0x2138}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xb}]}, @hopopts={0x2f, 0x25, '\x00', [@pad1, @calipso={0x7, 0x48, {0x2, 0x10, 0xf, 0xbc46, [0x4e, 0x17, 0x401, 0x4, 0x6, 0x5, 0x3, 0x3]}}, @pad1, @generic={0x5, 0xd5, "51ceca9ed63c56c0859c706c229b5356d8e24497bb335adbe6f5f928aa6d2c01625d7b3c50ea65c005b898a0194cfdb07b747b1407e0184998a80497e34d25a1056be21152f020739b86f7c4814c09d3ba07ee9285fd46e106848ded0bdc30db809eed09dec450e97942af3db70c3c9efda61b70a20e375c4b1744c4fcf80b7aae9d28838a9ea5bc18d207011304a724091e3497890d07fae407fde0a87373c58a2cf20e112e5f254f613265b45681621c37e7595ec8c2d48b59a6a602d16be5fbad457116393b25bd5a4e271b20a1dfe6a3cc54b5"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @routing={0x3b, 0x6, 0x2, 0x8, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback]}, @dstopts={0x3c, 0x20b, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @generic={0x2, 0x1000, "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"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x3, 0xd, [0x2, 0x76, 0x8001]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x16, "2ce4865072bd0c1cc2bdd2e4287d5d45e65e155b3821"}, @ra={0x5, 0x2, 0xde3}, @padn={0x1, 0x0, [0x0]}]}, @dstopts={0x5c, 0x1f, '\x00', [@generic={0x9, 0xf9, "42a0a2840ea2589f0fd75bd1c952bcef07adc0790949bda1db62c446f3684b79e80f1ea2782d04ed5d74cdbfb0a8a1343e7f984c3e258b39fe4bad7df9f716071e292fda783e5bc9a665346c6cea7ffb894bd9c48e77588f92d409e9e4e15d3c0e37488fbe76cc051edc5e6172d1a8e689a93023d578f10197bb6e2c872d6c9948bf3f6304fc711b3bb75bac48f5ee52ea18da40de77d5065b970d2edc05fc62a58186ac1b58ffce45619a7cd1058e136015d39968f4e88e45f9464efd935f1e3bc239ad098cefcb1d19bb99056b2da9280083d717741bacdbbe394ba158fb8811d26c5492fb32ff67ea1fbe1ff0481f03d9615c97e9c627c5"}]}, @routing={0x2, 0x4, 0x1, 0x2, 0x0, [@empty, @remote]}], @echo_reply={0x81, 0x0, 0x0, 0x27, 0x7f, "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"}}}}}, 0x2536)
socket$nl_generic(0x10, 0x3, 0x10)

510.510372ms ago: executing program 2 (id=5298):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000))
r1 = socket$inet6(0xa, 0x2, 0xfffffffd)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x16, 0x2, 0x0, 0x8, 0x1080, 0x1, 0xfc, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50)
sendto$inet6(r1, &(0x7f00000000c0)="754cd549cbef83fae6df9039605878a72beefd89fab46be65a2bc5d24308b9c01261c13b32911625533b4c350d4c1e817a24e763be8c705273619aae5d57013a3bfd0f6b680a3306018651d61acf56cfc7a0e55737d81832f4819348d01c71002fe9acc07ca87f64358065d85a0a0a457487b32137778f58ac7b5aa0a049e7d9e0b8f97a25125582e08c9bcb37acfec83ba0e9652db0770820af2b546db4bc78f1482585727dc0cbd1a16339fe4ec4", 0xaf, 0x800, &(0x7f0000000180)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0), &(0x7f0000000200)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r2=>0x0})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r3=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff})
socketpair(0x8, 0x6, 0x0, &(0x7f0000000340)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={<r7=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={<r8=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={<r9=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x88, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SOCKETS={0x4c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x44000840)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan1\x00', <r11=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, 0x0, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40881}, 0xc0)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r13, 0x0, 0x8, &(0x7f0000000700)=0x9, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{0x1, <r14=>0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
read(r14, &(0x7f0000000800)=""/116, 0x74)
getsockopt$inet_sctp_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000880)={<r15=>0x0, 0x7, 0x5d3, 0x5, 0x7, 0x3, 0x400, 0xfff, {0x0, @in6={{0xa, 0x4e21, 0xb, @dev={0xfe, 0x80, '\x00', 0x26}, 0x69}}, 0x7ad, 0x2, 0xe87, 0x6, 0x3}}, &(0x7f0000000940)=0xb0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000980)={<r16=>0x0, @in={{0x2, 0x4e23, @local}}, [0x4, 0x2, 0xfffffffffffffff7, 0x9, 0x9, 0x2, 0x3, 0x3f53, 0x800, 0xfffffffffffffff4, 0x1, 0x5, 0x9, 0x7f, 0x3]}, &(0x7f0000000a80)=0x100)
getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000ac0)={r15, 0x1000, 0x7fff, 0x0, 0x9, 0x8, 0x7f, 0x4a43, {r16, @in={{0x2, 0x4e22, @private=0xa010101}}, 0x1, 0x8, 0x400, 0xdb, 0x1}}, &(0x7f0000000b80)=0xb0)
r17 = socket$nl_generic(0x10, 0x3, 0x10)
r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r5)
sendmsg$NL80211_CMD_FRAME(r17, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x18, r18, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x14)
sendmsg$nl_route_sched_retired(r6, &(0x7f0000001bc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000d40)=@newtclass={0xe04, 0x28, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x1, 0x5}, {0xe, 0xffff}, {0x7, 0x9}}, [@c_atm={{0x8}, {0x24, 0x2, [@TCA_ATM_HDR={0x1f, 0x3, "6430fcf554bc9f75b7a4fb25f579d342b9ce04da8fbf0ffa97649d"}]}}, @c_cbq={{0x8}, {0x460, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xf, 0x1, 0x3, 0xfff0, 0x67b2, 0x2}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x16, 0x3, 0x10, 0x4, 0x3ff, 0x7, 0x3c, 0x80000}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x2, 0x2, 0xff, 0x14a1, 0xc}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x30, 0x1, 0x4, 0x8, 0x3, 0x6, 0x0, 0x8e, 0x3d3f, 0x10001, 0x4, 0x2, 0x324, 0x6, 0xe, 0x6, 0x7, 0xf0, 0xfffffff9, 0x200, 0xa, 0x3, 0xffff, 0xffff, 0xffffffc0, 0x1, 0x8, 0x3, 0x2, 0xff3, 0x5, 0x81, 0x3, 0xfffffffc, 0xc, 0x8001, 0x7fff, 0x0, 0x1, 0x43c6, 0x7, 0x5, 0x3db, 0xc12, 0x3, 0x8, 0x8000, 0x80, 0x3, 0x8, 0x7, 0x1, 0x9a0, 0x0, 0x401, 0x9, 0xe6, 0x2, 0x9, 0x8, 0x1, 0x4, 0x7fff, 0xa6477ff, 0x3, 0x7, 0xfffffff7, 0x7fff, 0x1, 0x1, 0x0, 0x100, 0x6, 0x9, 0x80, 0xff, 0x6, 0x9, 0x2, 0x6, 0x9, 0x0, 0x4, 0x6, 0x100, 0x4, 0x4, 0x7f, 0x7, 0x3, 0xfff, 0x0, 0x3, 0x7ff, 0x6, 0x5, 0x3ff, 0x3c4, 0xffff, 0x40, 0x8001, 0xfff, 0x7, 0x401, 0x0, 0xff, 0x0, 0x7, 0x9, 0x0, 0x5, 0x97, 0x7, 0x2, 0x3, 0x80000000, 0x5, 0x561d, 0x7, 0x8, 0x9, 0x7, 0xcab, 0x3, 0x5, 0x10, 0x1, 0xffffffff, 0x7, 0x2, 0x1, 0x7f, 0x4, 0x3, 0x400, 0x8, 0x0, 0x4, 0x4, 0x7, 0xffffffff, 0x2, 0x585, 0x1, 0x5464, 0x0, 0x81, 0x3, 0x2, 0x5, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffff, 0x5, 0x7, 0x6, 0x713eeb82, 0x9, 0x8, 0x4, 0x9, 0xb693, 0x5, 0x7, 0x1, 0x6, 0xffff, 0x3ba, 0x0, 0x8, 0x3, 0x3, 0xffffffff, 0x8, 0x7, 0x0, 0x3e095521, 0x85, 0x0, 0x4d, 0x5, 0x511, 0xff, 0x8, 0x40, 0x1db, 0x0, 0x9, 0x200, 0x0, 0x4, 0x2, 0x401, 0x9, 0x8, 0x5, 0xffffffff, 0x9, 0x8, 0x0, 0x2, 0x5, 0x6, 0x1000, 0x4, 0x1, 0xfff, 0x4, 0x2, 0x3, 0x888, 0x401, 0x0, 0xa1, 0xd0b, 0x80, 0x5, 0x8, 0x4, 0xd510, 0x1, 0xfffffff8, 0xfffffffc, 0xaa49, 0x5, 0x0, 0x9, 0x80, 0xfc, 0x7, 0x8, 0x9, 0xb090, 0x1c, 0x8, 0x1, 0x40800, 0x8, 0x81, 0x2, 0xffff, 0x5, 0xffff0634, 0x5, 0x6, 0x0, 0x7fff, 0xffffff51, 0x5, 0x4f69a5c, 0x6, 0x4, 0x600000, 0x9]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xc, 0xfff2}, 0x0, 0x5}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6, 0x1, 0x9, 0x0, 0x1, 0x6}}]}}, @c_cbq={{0x8}, {0x418, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0x2, 0xfff2}, 0xe, 0xfffffff6}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x401, 0x9, 0x4, 0x8, 0x1, 0x2, 0x1, 0xa961, 0x200, 0x0, 0x4828, 0x4, 0x400, 0x5, 0x400, 0x164, 0xd5a, 0x8ed1, 0xac4, 0xfffffff9, 0x506b, 0x9844, 0x7, 0x0, 0x40, 0x2, 0x6, 0x100, 0xc, 0xff, 0x8001, 0x7, 0xffff, 0x3ff, 0x8, 0x7, 0x3, 0x6, 0xf2, 0x2, 0x5, 0x5, 0x5, 0x2, 0x86e, 0x792, 0x0, 0x9, 0xbc98, 0x2, 0xc99, 0xfffffffa, 0xfffffff7, 0xeb0a, 0xcf, 0x25ea, 0x8, 0x55ed, 0x33, 0xae1f, 0x6ebd, 0x8, 0x1, 0xb8b, 0x1ff, 0x1, 0x1, 0x3, 0x10, 0xe4c0, 0x9, 0x8, 0x3, 0x8, 0x7ff, 0x4e, 0x0, 0x48f177fa, 0x8, 0xd, 0x0, 0x9, 0x800, 0x0, 0x10, 0xffffffff, 0x0, 0xffffffff, 0x1ff, 0x80000000, 0x4443, 0x1, 0x80, 0x1, 0x9, 0xfffffffc, 0xe, 0x3, 0x5437, 0x6, 0x9, 0x31, 0x9, 0x9, 0x2, 0xa, 0xa, 0x8, 0x3, 0x8, 0x0, 0x2, 0x2, 0x1, 0x400, 0xfffffffa, 0x4, 0x4, 0x4, 0x0, 0x5, 0x48, 0x1000, 0x8, 0x80000001, 0x4, 0x2, 0x3, 0x800, 0x7, 0x8, 0x4000000, 0x3, 0x0, 0x2, 0x5, 0x0, 0x7, 0x800, 0x3, 0xac, 0x400, 0x66, 0x3, 0x4, 0x5, 0x10, 0x7fffffff, 0x8, 0x10001, 0x0, 0x2, 0x300, 0xfffeffff, 0xffff, 0x8, 0x738c, 0xbd2f, 0x5, 0x0, 0x10000, 0x3, 0x1, 0x0, 0x40, 0x9, 0x2, 0x1000, 0xdbf, 0x4, 0x5, 0x9, 0x3, 0x5, 0xc, 0x8, 0x504c032c, 0x4, 0x0, 0x8, 0x47, 0xc3b, 0x5, 0x7, 0x81, 0xcc64, 0x8, 0x40, 0x1ff, 0x81, 0x2, 0x5223, 0x3, 0x2, 0x7, 0x2, 0x3, 0x7f, 0x3, 0x2, 0x80000000, 0x7fff, 0x4, 0x180, 0x4, 0x60000, 0x22ed, 0x0, 0x7fff, 0xffff, 0xf7, 0x2, 0x2, 0x9, 0x3, 0x66e, 0x9, 0x3, 0x0, 0x7, 0x80000001, 0x3, 0xf5a, 0x3, 0x8, 0x80000001, 0x9, 0x8000, 0xf3, 0x5, 0xed6, 0x3, 0x6, 0x6, 0x5, 0x4, 0xa, 0x6, 0x800, 0x2, 0x637c, 0x1, 0x6, 0x0, 0x8, 0x9, 0xf, 0x1, 0x8001, 0x8001, 0xc61, 0xfff, 0x9, 0xc6f, 0x0, 0x3]}]}}, @c_cbq={{0x8}, {0x420, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0x39c, 0x47f, 0x65e, 0xef74, 0x3, 0x4, 0x6, 0xffff0e05, 0x1, 0x0, 0x1, 0x1c1, 0x3, 0xfffffff8, 0x7fffffff, 0x0, 0xe1e0, 0x80000000, 0x4, 0x444d, 0x3, 0x3ff, 0x1, 0x8, 0x1, 0xf, 0x7, 0x1, 0x80, 0xffff, 0x0, 0x8001, 0x5, 0x3, 0xfe0, 0x6, 0x1000, 0x261, 0xfffffff7, 0x0, 0x1000, 0x9, 0x4, 0x5, 0x1800, 0x7, 0x3, 0x115, 0xffffffff, 0xf45b, 0x3, 0x4, 0x963, 0x3, 0x6, 0x8, 0x5, 0xffff, 0xb74e, 0xffffffff, 0x2, 0xfffffff7, 0x0, 0x7, 0xb, 0xfffffff9, 0x8, 0x3, 0x7fff, 0x0, 0x5c8, 0xffffffff, 0x5ea3, 0x2525, 0x5, 0x5, 0x2, 0xbf6, 0x100, 0x2, 0x9, 0x4, 0x7, 0xffffffff, 0xfff0, 0xff, 0x95f, 0x1, 0x1ff, 0xfffffffb, 0x4e7, 0x4, 0x8, 0x1, 0x9, 0x7, 0x69e8, 0x4, 0x80, 0x5, 0x0, 0x4, 0x9, 0x0, 0x4, 0x0, 0x8, 0x3, 0x6, 0x9, 0x4f7d, 0x8, 0x0, 0x2a, 0x0, 0x8, 0x8, 0x1, 0x5, 0x4, 0xfffffff9, 0x800, 0x0, 0xfffffffe, 0xfffff800, 0x8001, 0xe6, 0x400, 0x1, 0x2, 0xfffffff8, 0x8001, 0x5, 0x7, 0x4, 0x4, 0x7fffffff, 0x8, 0x9, 0x6, 0x6, 0x8000, 0x4, 0x9, 0x8f9, 0x4, 0x6, 0x24000000, 0x0, 0x3, 0xb38, 0x2, 0x9, 0x59, 0xd, 0x7, 0x4, 0xffffff80, 0xfffffffd, 0x0, 0x1ff, 0xd4e, 0x8, 0x6, 0x2, 0x3, 0x9, 0x3, 0x0, 0x21c495f3, 0xe5, 0x240, 0xccc, 0xf2, 0x9, 0x2, 0x7, 0x0, 0x4f, 0x3, 0x0, 0x1, 0x9, 0x81, 0xce56, 0x1, 0x5, 0x1, 0x1, 0x4, 0x7, 0x8, 0xfff, 0x80, 0x7f, 0x2, 0x8, 0x5e8, 0x401, 0x1, 0xcb1c, 0x3, 0x7, 0xffff, 0xa14, 0x9, 0x3, 0xc, 0x1, 0x8, 0x4, 0x800, 0x3331, 0x40, 0x1, 0xeb0, 0xa8, 0x3d, 0x7ff, 0x8, 0x80000001, 0xfff, 0x48, 0x1, 0xfff, 0x8, 0xc6, 0x58, 0x7, 0x7, 0x1, 0x0, 0x5, 0x2, 0xffffffff, 0x6, 0x9, 0x9, 0xff, 0x8, 0x2, 0xfff, 0x5, 0xf5, 0x6, 0x4b, 0xfffffffb, 0x9, 0x8, 0x6, 0x1, 0x10000, 0x5, 0x0, 0x9]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2a, 0x2, 0x18, 0x9, 0x7ff, 0xffff, 0x4, 0x8b40}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x4}}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x8, 0x1, 0x1, 0x0, 0x8, 0x7}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x8, 0x4, 0xc, 0x401, 0x26}}]}}, @c_cbq={{0x8}, {0x6c, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0xcf, 0x0, 0x9, 0x2, 0xfffa}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0xbf, 0x5, 0xc4, 0x7f, 0xffff, 0x8}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7f, 0x2, 0x1, 0x400, 0x6, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x6, 0x8, 0x3, 0x1, 0xa83}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x20, 0x2, 0x20, 0x0, 0x0, 0x4, 0x3, 0x800}}, @TCA_CBQ_RATE={0x10, 0x5, {0x7, 0x1, 0x5, 0x9, 0x4, 0x3}}]}}, @c_atm={{0x8}, {0x44, 0x2, [@TCA_ATM_FD={0x8, 0x1, r4}, @TCA_ATM_HDR={0x35, 0x3, "48e768d1137d82c3ca5cdbaa510204229817edbbfeacce4c03e091c27e6df0d03e6a9d3f746656d7d1dd28acd92621c4a0"}]}}]}, 0xe04}, 0x1, 0x0, 0x0, 0x4000010}, 0x0)
setsockopt$sock_timeval(r9, 0x1, 0x42, &(0x7f0000001c00), 0x10)

189.406242ms ago: executing program 4 (id=5299):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4)
socket(0x10, 0x3, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
shutdown(r1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000010070000258796080000000000fdff00000000000000000076d5fd41411b95ad51aaea2a1a4776", @ANYRES32=0x0, @ANYBLOB="158804000301040008001b000000000008000d0003000000"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844)
r7 = socket(0x2b, 0x1, 0x1)
setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000500)={0x6, {{0xa, 0x4e21, 0xffffffda, @mcast2, 0x72}}, 0x1, 0x4, [{{0xa, 0x4e23, 0xff, @rand_addr=' \x01\x00', 0xffe}}, {{0xa, 0x4e20, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x1ff, @private0}}, {{0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd6}}]}, 0x290)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)

115.91935ms ago: executing program 2 (id=5300):
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x5}, 0x10}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000100)={0xa, 0x4e24, 0x66a5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000001300)="bf", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000180)="a42e4e957cea84", 0x7}], 0x1}}], 0x2, 0x931766f6319eed44)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001000390427bd7000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="01980000241800001800028008000100"/28, @ANYRES32=r4, @ANYBLOB], 0x38}}, 0x0)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = socket(0x10, 0x800, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1200000004092929b4fa00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"/28], 0x50)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), r7)
sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0)
unshare(0x6a040000)
r10 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58)
r11 = accept$alg(r10, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4)
sendmsg$alg(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000024c0)}], 0x1, 0x0, 0x0, 0x4008011}, 0x4040004)
recvmmsg(r11, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)}, {&(0x7f0000000780)=""/248, 0xf8}], 0x2}, 0xfff}], 0x2, 0x2021, 0x0)

0s ago: executing program 0 (id=5301):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) (async)
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$kcm(0x2, 0xa, 0x2) (async)
getsockopt$TIPC_NODE_RECVQ_DEPTH(0xffffffffffffffff, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000012c0)=ANY=[@ANYBLOB="c0000000000101040000000000000000020000007400018014000180080001000000000008000200e00000020c00028005000100000000004300028005000100060000000c00038005000100000000000c00028005000100000000002c00018014000300fe88000000000000000000000000000114000400fe8000000000000000000000000000aa240002800c00028005000100000000001400018008000100ac1e00df070002"], 0xc0}}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
write$tun(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="200088beaaaaaaaaaabb0180c200000e88a8000081000002080045fc001c0068000000119078a494f60d0566138064010100e0000001000017c100089078a441e9cda22e97be4a29e512eefbd93761224f00e72e33bb844e26a615e73871b97243bc3e33f7f0303fe7e4ccbc7a6d276240b073772dfba8064740fc0e7421b5690e82f83763e751be93d3d0bcb71796c8206882a8c3afae13898e3f4fd810a7143f91f41ad7e3b9cd132aee404344f10a54cb2ea37e0209ff8101accef7e7628172e9385da4a3ecd237c899fbe2665172fe6a75fbcced9bef6ffdecc9d27a56527b5adc1164245d5317a9427c99d072078c4f25d5e717bca5"], 0x36)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="05030403000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}, 0x1, 0x0, 0x0, 0x4004844}, 0x0) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40)

kernel console output (not intermixed with test programs):

0371] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.500255][T20371] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.510495][T20371] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  581.529730][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  581.687589][T20539] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3608'.
[  581.706585][T20542] 8021q: adding VLAN 0 to HW filter on device bond3
[  581.715716][T20542] bond2: (slave bond3): making interface the new active one
[  581.725094][T20542] bond2: (slave bond3): Enslaving as an active interface with an up link
[  581.862426][T16634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  581.936826][T20544] bond2 (unregistering): Released all slaves
[  582.112398][T20577] netlink: 'syz.2.3616': attribute type 1 has an invalid length.
[  582.256550][T20577] bond4: entered promiscuous mode
[  582.284671][T20577] 8021q: adding VLAN 0 to HW filter on device bond4
[  582.345431][T20593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  582.757317][T20605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3625'.
[  582.823511][T20606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3625'.
[  582.834430][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3625'.
[  584.719029][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  586.778549][T20630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3634'.
[  586.854372][T20627] xt_CT: You must specify a L4 protocol and not use inversions on it
[  586.914432][T20630] 8021q: adding VLAN 0 to HW filter on device bond2
[  586.939845][T20633] 8021q: adding VLAN 0 to HW filter on device bond2
[  586.957448][T20633] bond2: (slave vti0): The slave device specified does not support setting the MAC address
[  586.969072][T20633] bond2: (slave vti0): Error -95 calling set_mac_address
[  587.015531][T20637] bond2: (slave dummy0): Error -99 calling set_mac_address
[  587.031317][T20640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3636'.
[  587.201818][T20640] vlan3: entered allmulticast mode
[  587.227224][T20640] bridge3: entered allmulticast mode
[  587.253146][T20643] bridge3: port 1(erspan0) entered blocking state
[  587.281263][T20643] bridge3: port 1(erspan0) entered disabled state
[  587.293589][T20646] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  587.308621][T20655] Bluetooth: MGMT ver 1.23
[  587.317461][T20643] erspan0: entered allmulticast mode
[  587.322005][T20640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3636'.
[  587.364596][T20643] erspan0: entered promiscuous mode
[  587.413257][T20643] bridge3: port 1(erspan0) entered blocking state
[  587.419937][T20643] bridge3: port 1(erspan0) entered forwarding state
[  587.474412][T20640] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3636'.
[  587.550701][T20663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3643'.
[  587.600453][T20667] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3644'.
[  587.670542][T20663] 8021q: adding VLAN 0 to HW filter on device bond5
[  587.677158][T20674] netlink: 'syz.2.3647': attribute type 21 has an invalid length.
[  587.686117][T20674] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3647'.
[  587.762034][T20671] 8021q: adding VLAN 0 to HW filter on device bond5
[  587.769807][T20671] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  587.782028][T20671] bond5: (slave vti0): Error -95 calling set_mac_address
[  587.809282][T20670] bond1: Unable to set up delay as MII monitoring is disabled
[  587.819976][T20670] bond1 (unregistering): Released all slaves
[  587.846717][T20674] netlink: 'syz.2.3647': attribute type 4 has an invalid length.
[  587.854908][T20674] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3647'.
[  587.868269][T20663] bond5: (slave dummy0): Error -99 calling set_mac_address
[  588.241646][T20687] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  588.378421][T20702] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3654'.
[  588.410089][T20702] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3654'.
[  588.610470][T20710] netlink: 'syz.0.3655': attribute type 1 has an invalid length.
[  588.635993][T20710] netlink: 'syz.0.3655': attribute type 2 has an invalid length.
[  589.249519][T20738] syzkaller0: entered promiscuous mode
[  589.270066][T20738] syzkaller0: entered allmulticast mode
[  589.505255][T20747] 8021q: adding VLAN 0 to HW filter on device bond0
[  589.526539][T20747] 8021q: adding VLAN 0 to HW filter on device team0
[  589.565096][T20747] 8021q: adding VLAN 0 to HW filter on device batadv0
[  589.800834][T20747] batman_adv: batadv0: Interface activated: batadv_slave_0
[  589.818275][T20747] batman_adv: batadv0: Interface activated: batadv_slave_1
[  589.845343][T20747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  589.869088][T20747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  589.885410][T20747] veth1_vlan: left promiscuous mode
[  589.892630][T20747] veth0_vlan: left promiscuous mode
[  589.899889][T20747] veth0_vlan: entered promiscuous mode
[  589.908080][T20747] veth1_vlan: entered promiscuous mode
[  589.919584][T20747] veth1_macvtap: left promiscuous mode
[  589.926563][T20747] veth0_macvtap: left promiscuous mode
[  589.934143][T20747] veth0_macvtap: entered promiscuous mode
[  589.941854][T20747] veth1_macvtap: entered promiscuous mode
[  589.957053][T20747] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  589.966543][T20747] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  589.975515][T20747] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  589.984541][T20747] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  589.997050][T20747] bond0: entered allmulticast mode
[  590.008855][T20747] bond_slave_0: entered allmulticast mode
[  590.014713][T20747] bond_slave_1: entered allmulticast mode
[  590.021174][T20747] bond_slave_0: entered promiscuous mode
[  590.029493][T20747] bond_slave_1: entered promiscuous mode
[  590.035868][T20747] bond0: entered promiscuous mode
[  590.042978][T20747] macvtap1: left allmulticast mode
[  590.048251][T20747] bond0: left allmulticast mode
[  590.053935][T20747] bond_slave_0: left allmulticast mode
[  590.059820][T20747] bond_slave_1: left allmulticast mode
[  590.066694][T20747] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  590.082543][T20747] 8021q: adding VLAN 0 to HW filter on device bond1
[  590.091746][T20747] vlan2: left allmulticast mode
[  590.096689][T20747] bond1: left allmulticast mode
[  590.103258][T20747] geneve2: left allmulticast mode
[  590.129499][T20747] 8021q: adding VLAN 0 to HW filter on device bond2
[  590.342134][T20371] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.349387][T20371] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.361004][T20371] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.368198][T20371] bridge0: port 2(bridge_slave_1) entered forwarding state
[  590.490816][T16634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  590.510338][T16634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  590.550669][T20768] netlink: 'syz.1.3670': attribute type 1 has an invalid length.
[  590.582802][T16634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  590.620902][T16634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  590.718506][T20770] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  590.933442][T20772] 8021q: adding VLAN 0 to HW filter on device bond7
[  590.972307][T20772] bond6: (slave bond7): making interface the new active one
[  590.982720][T20772] bond6: (slave bond7): Enslaving as an active interface with an up link
[  590.996038][T20367] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  591.008102][T20367] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  591.019100][T14565] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  591.045378][T20780] bond6: (slave gretap1): Enslaving as a backup interface with an up link
[  591.159079][  T994] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  591.756703][T20817] netlink: 'syz.3.3685': attribute type 18 has an invalid length.
[  591.778890][T20817] __nla_validate_parse: 13 callbacks suppressed
[  591.778910][T20817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3685'.
[  591.839722][  T994] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  591.914849][T20817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3685'.
[  591.921667][T20828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3688'.
[  591.954434][T20817] netlink: 'syz.3.3685': attribute type 18 has an invalid length.
[  591.994331][T20817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3685'.
[  592.361434][T20850] lo speed is unknown, defaulting to 1000
[  592.381616][T20850] lo speed is unknown, defaulting to 1000
[  592.485698][T20858] syzkaller0: entered promiscuous mode
[  592.514618][T20858] syzkaller0: entered allmulticast mode
[  592.562208][T20858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  592.562800][T20867] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3698'.
[  592.579880][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3695'.
[  592.682024][T20855] tipc: Resetting bearer <eth:syzkaller0>
[  592.779758][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3699'.
[  592.800330][T20855] tipc: Disabling bearer <eth:syzkaller0>
[  592.978655][T20875] FAULT_INJECTION: forcing a failure.
[  592.978655][T20875] name failslab, interval 1, probability 0, space 0, times 0
[  592.991926][T20875] CPU: 1 UID: 0 PID: 20875 Comm: syz.3.3700 Not tainted syzkaller #0 PREEMPT(full) 
[  592.991973][T20875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  592.991996][T20875] Call Trace:
[  592.992004][T20875]  <TASK>
[  592.992013][T20875]  dump_stack_lvl+0xe8/0x150
[  592.992051][T20875]  should_fail_ex+0x40c/0x560
[  592.992088][T20875]  should_failslab+0xa8/0x100
[  592.992119][T20875]  __kmalloc_noprof+0xfe/0x720
[  592.992145][T20875]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  592.992167][T20875]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  592.992194][T20875]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  592.992232][T20875]  genl_family_rcv_msg_doit+0xda/0x340
[  592.992257][T20875]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  592.992296][T20875]  ? apparmor_capable+0x126/0x170
[  592.992354][T20875]  ? bpf_lsm_capable+0x9/0x20
[  592.992379][T20875]  ? security_capable+0x7e/0x2c0
[  592.992472][T20875]  genl_rcv_msg+0x614/0x7a0
[  592.992508][T20875]  ? __pfx_genl_rcv_msg+0x10/0x10
[  592.992536][T20875]  ? __pfx_ieee802154_set_macparams+0x10/0x10
[  592.992653][T20875]  netlink_rcv_skb+0x226/0x4a0
[  592.992678][T20875]  ? __pfx_genl_rcv_msg+0x10/0x10
[  592.992708][T20875]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  592.992748][T20875]  ? down_read+0x2be/0x330
[  592.992776][T20875]  genl_rcv+0x28/0x40
[  592.992809][T20875]  netlink_unicast+0x7bb/0x940
[  592.992851][T20875]  netlink_sendmsg+0x813/0xb40
[  592.992885][T20875]  ? __pfx_netlink_sendmsg+0x10/0x10
[  592.992914][T20875]  ? aa_sock_msg_perm+0xf1/0x1b0
[  592.992946][T20875]  ? __pfx_netlink_sendmsg+0x10/0x10
[  592.992969][T20875]  sock_sendmsg_nosec+0x13a/0x180
[  592.993002][T20875]  ____sys_sendmsg+0x54e/0x850
[  592.993032][T20875]  ? __pfx_____sys_sendmsg+0x10/0x10
[  592.993065][T20875]  ? import_iovec+0x73/0xa0
[  592.993092][T20875]  ___sys_sendmsg+0x2a5/0x360
[  592.993114][T20875]  ? __lock_acquire+0x683/0x2cf0
[  592.993145][T20875]  ? __pfx____sys_sendmsg+0x10/0x10
[  592.993214][T20875]  ? __fget_files+0x2a/0x420
[  592.993238][T20875]  ? __fget_files+0x3a2/0x420
[  592.993270][T20875]  __x64_sys_sendmsg+0x1b1/0x290
[  592.993297][T20875]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  592.993340][T20875]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.993369][T20875]  do_syscall_64+0x174/0x580
[  592.993387][T20875]  ? trace_irq_disable+0x3b/0x140
[  592.993409][T20875]  ? clear_bhb_loop+0x40/0x90
[  592.993430][T20875]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  592.993447][T20875] RIP: 0033:0x7f9344b9de59
[  592.993467][T20875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  592.993481][T20875] RSP: 002b:00007f9345ab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  592.993502][T20875] RAX: ffffffffffffffda RBX: 00007f9344e25fa0 RCX: 00007f9344b9de59
[  592.993516][T20875] RDX: 0000000000040004 RSI: 00002000000003c0 RDI: 0000000000000004
[  592.993528][T20875] RBP: 00007f9345ab7090 R08: 0000000000000000 R09: 0000000000000000
[  592.993539][T20875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  592.993551][T20875] R13: 00007f9344e26038 R14: 00007f9344e25fa0 R15: 00007ffec320e138
[  592.993584][T20875]  </TASK>
[  593.585621][T20881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3701'.
[  593.586513][T20885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3704'.
[  593.618516][T20885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3704'.
[  593.773138][T20893] netlink: 'syz.2.3706': attribute type 142 has an invalid length.
[  593.936228][T20888] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  593.937672][T20890] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  594.168391][T20907] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  594.422757][T20918] FAULT_INJECTION: forcing a failure.
[  594.422757][T20918] name failslab, interval 1, probability 0, space 0, times 0
[  594.438960][T20918] CPU: 0 UID: 0 PID: 20918 Comm: syz.4.3713 Not tainted syzkaller #0 PREEMPT(full) 
[  594.438987][T20918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  594.439006][T20918] Call Trace:
[  594.439013][T20918]  <TASK>
[  594.439021][T20918]  dump_stack_lvl+0xe8/0x150
[  594.439056][T20918]  should_fail_ex+0x40c/0x560
[  594.439090][T20918]  should_failslab+0xa8/0x100
[  594.439119][T20918]  kmem_cache_alloc_node_noprof+0xb3/0x610
[  594.439141][T20918]  ? local_lock_release+0x9c/0x160
[  594.439165][T20918]  ? __alloc_skb+0x1d7/0x7a0
[  594.439182][T20918]  ? __alloc_skb+0x1d7/0x7a0
[  594.439212][T20918]  __alloc_skb+0x1d7/0x7a0
[  594.439237][T20918]  netlink_ack+0x136/0xb30
[  594.439260][T20918]  ? __pfx_genl_rcv_msg+0x10/0x10
[  594.439306][T20918]  netlink_rcv_skb+0x2a4/0x4a0
[  594.439331][T20918]  ? __pfx_genl_rcv_msg+0x10/0x10
[  594.439361][T20918]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  594.439402][T20918]  ? down_read+0x2be/0x330
[  594.439429][T20918]  genl_rcv+0x28/0x40
[  594.439455][T20918]  netlink_unicast+0x7bb/0x940
[  594.439489][T20918]  netlink_sendmsg+0x813/0xb40
[  594.439517][T20918]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.439546][T20918]  ? aa_sock_msg_perm+0xf1/0x1b0
[  594.439578][T20918]  ? __pfx_netlink_sendmsg+0x10/0x10
[  594.439601][T20918]  sock_sendmsg_nosec+0x13a/0x180
[  594.439632][T20918]  ____sys_sendmsg+0x54e/0x850
[  594.439662][T20918]  ? __pfx_____sys_sendmsg+0x10/0x10
[  594.439696][T20918]  ? import_iovec+0x73/0xa0
[  594.439722][T20918]  ___sys_sendmsg+0x2a5/0x360
[  594.439744][T20918]  ? __lock_acquire+0x683/0x2cf0
[  594.439773][T20918]  ? __pfx____sys_sendmsg+0x10/0x10
[  594.439828][T20918]  ? __fget_files+0x2a/0x420
[  594.439849][T20918]  ? __fget_files+0x3a2/0x420
[  594.439881][T20918]  __x64_sys_sendmsg+0x1b1/0x290
[  594.439904][T20918]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  594.439947][T20918]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.439968][T20918]  do_syscall_64+0x174/0x580
[  594.439987][T20918]  ? trace_irq_disable+0x3b/0x140
[  594.440019][T20918]  ? clear_bhb_loop+0x40/0x90
[  594.440042][T20918]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.440060][T20918] RIP: 0033:0x7f7ecb19de59
[  594.440078][T20918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  594.440095][T20918] RSP: 002b:00007f7ecbfce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  594.440115][T20918] RAX: ffffffffffffffda RBX: 00007f7ecb425fa0 RCX: 00007f7ecb19de59
[  594.440129][T20918] RDX: 0000000000040004 RSI: 00002000000003c0 RDI: 0000000000000004
[  594.440141][T20918] RBP: 00007f7ecbfce090 R08: 0000000000000000 R09: 0000000000000000
[  594.440153][T20918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  594.440164][T20918] R13: 00007f7ecb426038 R14: 00007f7ecb425fa0 R15: 00007ffe551b03e8
[  594.440197][T20918]  </TASK>
[  595.146117][T20923] bond2: option all_slaves_active: invalid value (127)
[  595.158129][T20923] bond2 (unregistering): Released all slaves
[  595.198918][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  595.282235][T20933] lo speed is unknown, defaulting to 1000
[  595.292417][T20933] lo speed is unknown, defaulting to 1000
[  595.303869][T20939] netlink: set zone limit has 8 unknown bytes
[  595.351060][T20939] netlink: set zone limit has 8 unknown bytes
[  595.726167][T20947] batadv_slave_1: entered promiscuous mode
[  595.745582][T20947] batadv_slave_1: left promiscuous mode
[  601.999708][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  603.930714][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  613.396012][T20975] __nla_validate_parse: 7 callbacks suppressed
[  613.396031][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3727'.
[  613.435203][T20975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3727'.
[  613.593484][T20988] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3733'.
[  613.608008][T20988] 0·: renamed from hsr0 (while UP)
[  613.625805][T20988] 0·: entered allmulticast mode
[  613.636817][T20988] hsr_slave_0: entered allmulticast mode
[  613.649399][T20988] hsr_slave_1: entered allmulticast mode
[  613.663105][T20988] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  613.901917][ T5632] block nbd0: Receive control failed (result -32)
[  613.908515][T20998] nbd: must specify a size in bytes for the device
[  613.944618][ T5639] block nbd0: Receive control failed (result -32)
[  613.947576][ T5635] block nbd0: Receive control failed (result -32)
[  614.162373][T20367] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  614.201211][T21007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3738'.
[  614.258269][T21010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3737'.
[  614.665943][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3742'.
[  614.799267][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  614.964984][T21028] 8021q: adding VLAN 0 to HW filter on device bond5
[  615.271744][T21043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3745'.
[  615.552610][T21047] syzkaller0: entered promiscuous mode
[  615.580411][T21047] syzkaller0: entered allmulticast mode
[  615.676311][  T994] IPVS: starting estimator thread 0...
[  615.739287][T21053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3749'.
[  615.788866][T21051] IPVS: using max 31 ests per chain, 74400 per kthread
[  615.967211][   T30] audit: type=1804 audit(1783078762.233:28): pid=21057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3750" name="/newroot/157/memory.events" dev="tmpfs" ino=820 res=1 errno=0
[  616.415116][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3757'.
[  616.422968][T21074] netlink: 69 bytes leftover after parsing attributes in process `syz.4.3756'.
[  616.448402][T21073] syzkaller0: entered promiscuous mode
[  616.468684][T21073] syzkaller0: entered allmulticast mode
[  616.804819][T21083] bond2: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  616.830094][T21083] bond2 (unregistering): Released all slaves
[  617.105042][T21091] netlink: 'syz.3.3761': attribute type 1 has an invalid length.
[  617.298660][T21091] 8021q: adding VLAN 0 to HW filter on device bond2
[  617.451982][T21095] bond2: (slave gretap2): making interface the new active one
[  617.474297][T21095] bond2: (slave gretap2): Enslaving as an active interface with an up link
[  618.408954][T21140] __nla_validate_parse: 7 callbacks suppressed
[  618.408974][T21140] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3773'.
[  618.435359][T21137] netlink: 'syz.1.3772': attribute type 1 has an invalid length.
[  618.453377][T21137] netlink: 'syz.1.3772': attribute type 1 has an invalid length.
[  618.472972][T21137] netlink: 'syz.1.3772': attribute type 2 has an invalid length.
[  618.493326][T21137] netlink: 'syz.1.3772': attribute type 1 has an invalid length.
[  618.792650][T21157] bond1 (unregistering): Released all slaves
[  618.906169][T21169] netlink: 204 bytes leftover after parsing attributes in process `syz.2.3779'.
[  619.087020][T21157] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  619.349530][   T30] audit: type=1800 audit(1783078765.623:29): pid=21189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3784" name="memory.events" dev="tmpfs" ino=942 res=0 errno=0
[  619.632405][T21197] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3785'.
[  619.869129][T21209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'.
[  619.881112][T21209] netlink: 'syz.0.3790': attribute type 14 has an invalid length.
[  619.890920][T21209] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3790'.
[  620.096360][T21219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3792'.
[  620.369688][T21243] xt_connbytes: Forcing CT accounting to be enabled
[  620.742607][T21253] netlink: 'syz.0.3803': attribute type 10 has an invalid length.
[  620.759786][T21253] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.767375][T21253] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.830283][T21253] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.837470][T21253] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.845133][T21253] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.852315][T21253] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.868905][T21253] bridge0: entered promiscuous mode
[  620.875391][T21253] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  620.953411][T21272] netlink: 'syz.0.3807': attribute type 1 has an invalid length.
[  621.086537][T21276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3808'.
[  621.368685][T21289] netlink: 872 bytes leftover after parsing attributes in process `syz.1.3811'.
[  621.861221][T21302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3817'.
[  621.886046][T21302] netlink: 'syz.1.3817': attribute type 20 has an invalid length.
[  621.907883][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3817'.
[  621.921083][T21307] netlink: 'syz.1.3817': attribute type 20 has an invalid length.
[  622.632225][T21336] netlink: 'syz.4.3826': attribute type 4 has an invalid length.
[  622.673066][T21336] netlink: 'syz.4.3826': attribute type 4 has an invalid length.
[  622.731386][T21336] netlink: 'syz.4.3826': attribute type 4 has an invalid length.
[  623.055096][T21354] syzkaller0: entered promiscuous mode
[  623.071426][T21354] syzkaller0: entered allmulticast mode
[  623.657947][T21381] __nla_validate_parse: 31 callbacks suppressed
[  623.657968][T21381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3836'.
[  623.674094][T21368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3832'.
[  623.736903][T21359] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  623.827517][T21386] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3838'.
[  623.943518][T21391] xt_policy: too many policy elements
[  624.290754][T21359] bond6 (unregistering): Released all slaves
[  624.508377][T21402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3839'.
[  624.569981][T21403] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3839'.
[  624.828100][T21409] erspan0: entered promiscuous mode
[  624.992064][T21409] 0·: left allmulticast mode
[  625.013963][T21409] hsr_slave_0: left allmulticast mode
[  625.021438][T21409] hsr_slave_1: left allmulticast mode
[  625.106694][T21409] ip6gre1: left allmulticast mode
[  625.189018][ T5830] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  625.202951][T21409] 8021q: adding VLAN 0 to HW filter on device bond4
[  625.211643][T21409] 8021q: adding VLAN 0 to HW filter on device bond5
[  625.225369][T21409] 8021q: adding VLAN 0 to HW filter on device bond6
[  625.254807][ T3305] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  625.367541][T21429] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3844'.
[  625.575735][T21432] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3845'.
[  625.910207][T21442] lo speed is unknown, defaulting to 1000
[  625.941171][T21442] lo speed is unknown, defaulting to 1000
[  625.999246][ T5830] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  626.111286][T21445] netlink: 'syz.1.3849': attribute type 4 has an invalid length.
[  626.153768][T21445] netlink: 'syz.1.3849': attribute type 4 has an invalid length.
[  626.217699][T21445] netlink: 'syz.1.3849': attribute type 4 has an invalid length.
[  626.575009][T21466] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  626.575408][T21465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3853'.
[  626.711194][T21465] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3853'.
[  626.782844][T21467] netlink: 100 bytes leftover after parsing attributes in process `syz.1.3853'.
[  627.265870][T21481] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  627.301212][T21481] xt_hashlimit: size too large, truncated to 1048576
[  628.210993][T21505] syzkaller0: entered promiscuous mode
[  628.228129][T21505] syzkaller0: entered allmulticast mode
[  628.580738][T21530] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  628.618509][T21530] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  628.773123][T21543] __nla_validate_parse: 15 callbacks suppressed
[  628.773145][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3878'.
[  628.862259][T21543] hsr_slave_1 (unregistering): left promiscuous mode
[  629.167295][T21552] xt_time: invalid argument - start or stop time greater than 23:59:59
[  629.359915][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  629.420082][T21565] netlink: 'syz.4.3886': attribute type 1 has an invalid length.
[  629.444370][T21567] netlink: 'syz.4.3886': attribute type 1 has an invalid length.
[  629.498386][T21557] smc: removing ib device syz1
[  629.507335][T21572] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3889'.
[  629.513373][T21565] 8021q: adding VLAN 0 to HW filter on device bond1
[  629.603371][T21580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3888'.
[  629.695363][T21574] bond1: (slave veth3): Enslaving as an active interface with a down link
[  629.828207][T21557] smbdirect: ib_dev[syz1] removed
[  629.970842][T21580] hsr_slave_1 (unregistering): left promiscuous mode
[  630.144425][T21590] syzkaller0: entered promiscuous mode
[  630.163553][T21590] syzkaller0: entered allmulticast mode
[  630.475152][T21603] netlink: 'syz.1.3896': attribute type 10 has an invalid length.
[  630.490391][T14563] IPVS: starting estimator thread 0...
[  630.526160][T21604] netlink: 'syz.1.3896': attribute type 10 has an invalid length.
[  630.530708][T21606] veth1_to_batadv: entered promiscuous mode
[  630.588920][T21610] IPVS: using max 35 ests per chain, 84000 per kthread
[  630.833265][T21622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3902'.
[  630.894654][T21624] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3903'.
[  631.069925][T21624] netlink: 'syz.1.3903': attribute type 1 has an invalid length.
[  631.095207][T21624] netlink: 'syz.1.3903': attribute type 2 has an invalid length.
[  631.398210][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3908'.
[  631.615177][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3910'.
[  631.720601][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3910'.
[  631.997181][T21656] netdevsim netdevsim1 netdevsim0: left allmulticast mode
[  632.109670][T14564] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  632.279483][T21663] syzkaller0: entered promiscuous mode
[  632.297700][T21663] syzkaller0: entered allmulticast mode
[  632.341358][T21663] netlink: 'syz.3.3915': attribute type 5 has an invalid length.
[  632.382909][T14564] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  632.403033][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'.
[  632.547687][T20361] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  632.556697][T21676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3917'.
[  632.581448][T20361] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  632.636958][T20361] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  632.665628][T20361] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  632.850471][T21692] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  632.858423][T21687] syzkaller1: entered promiscuous mode
[  632.886024][T21687] syzkaller1: entered allmulticast mode
[  634.181648][T21741] netlink: 'syz.0.3934': attribute type 1 has an invalid length.
[  634.217491][T21741] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3934'.
[  634.252002][T21741] NCSI netlink: No device for ifindex 0
[  634.672188][T21759] netlink: 'syz.0.3939': attribute type 4 has an invalid length.
[  634.723783][T21765] netlink: 'syz.0.3939': attribute type 4 has an invalid length.
[  634.997507][T21768] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3939'.
[  635.469724][T21778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3942'.
[  635.536744][T21778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3942'.
[  635.905032][T21807] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  635.930818][T21808] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  636.336017][T21819] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x6
[  637.199435][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  637.297473][T21844] macvtap1: left promiscuous mode
[  637.309339][T21844] bond0: left promiscuous mode
[  637.340197][T14563] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  637.575397][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3959'.
[  637.585587][T21850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3959'.
[  637.609570][T14563] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  637.849069][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  639.008094][T21813] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  640.373301][T21911] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3978'.
[  640.408467][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3978'.
[  640.472476][T21911] veth1_macvtap: left promiscuous mode
[  640.690264][T21926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3983'.
[  640.720386][T21926] syz_tun: entered allmulticast mode
[  641.208311][T21949] syzkaller0: entered promiscuous mode
[  641.218445][T21949] syzkaller0: entered allmulticast mode
[  641.336222][T21954] netlink: 'syz.4.3991': attribute type 3 has an invalid length.
[  642.066970][T21956] bridge0: port 2(bridge_slave_1) entered disabled state
[  642.074502][T21956] bridge0: port 1(bridge_slave_0) entered disabled state
[  642.458733][T21956] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  642.819712][T21956] bond1: left promiscuous mode
[  642.833084][T21956] vlan2: left promiscuous mode
[  642.842430][T21956] bridge0: left promiscuous mode
[  642.914090][T21956] ip6gre1: left promiscuous mode
[  643.137058][   T62] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  643.156891][   T62] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.180559][   T62] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  643.203633][   T62] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.238205][   T62] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  643.267897][T21977] netlink: 'syz.1.3997': attribute type 32 has an invalid length.
[  643.288449][   T62] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.342846][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3999'.
[  643.371721][   T62] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  643.394823][   T62] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.700694][T22002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4003'.
[  643.713113][T22008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4005'.
[  643.722472][T22002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4003'.
[  643.766523][T22008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4005'.
[  643.787147][T22008] netlink: 'syz.0.4005': attribute type 18 has an invalid length.
[  643.870888][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4007'.
[  643.903095][T22018] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4008'.
[  644.033962][T22026] syzkaller0: entered promiscuous mode
[  644.050558][T22026] syzkaller0: entered allmulticast mode
[  644.222002][T14571] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  644.682264][T22048] netlink: 'syz.4.4019': attribute type 24 has an invalid length.
[  644.791486][T14568] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  645.227995][T22087] netlink: 'syz.4.4030': attribute type 1 has an invalid length.
[  645.556196][T22072] lo speed is unknown, defaulting to 1000
[  645.715241][T22102] syzkaller0: entered promiscuous mode
[  645.721811][T22102] syzkaller0: entered allmulticast mode
[  645.798391][T22115] __nla_validate_parse: 14 callbacks suppressed
[  645.798407][T22115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4037'.
[  650.022185][T22111] lo speed is unknown, defaulting to 1000
[  650.197305][T22139] openvswitch: netlink: Duplicate or invalid key (type 0).
[  650.205875][T22143] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4044'.
[  650.210396][T22139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.236961][T22143] netlink: 'syz.0.4044': attribute type 4 has an invalid length.
[  650.556966][T22156] netlink: 348 bytes leftover after parsing attributes in process `syz.2.4048'.
[  650.702644][T22164] netlink: 'syz.1.4052': attribute type 13 has an invalid length.
[  650.711017][T22164] netlink: 'syz.1.4052': attribute type 17 has an invalid length.
[  650.795911][T22164] erspan0: left promiscuous mode
[  650.893801][T22164] 8021q: adding VLAN 0 to HW filter on device bond0
[  650.912448][T22164] 8021q: adding VLAN 0 to HW filter on device team0
[  650.936232][T22164] 8021q: adding VLAN 0 to HW filter on device batadv0
[  651.096831][T22164] batman_adv: batadv0: Interface activated: batadv_slave_1
[  651.133016][T22180] netlink: 868 bytes leftover after parsing attributes in process `syz.3.4056'.
[  651.153080][T22164] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  651.176766][T22164] veth1_vlan: left promiscuous mode
[  651.194477][T22164] veth0_vlan: left promiscuous mode
[  651.225178][T22164] veth0_vlan: entered promiscuous mode
[  651.247472][T22164] veth1_vlan: entered promiscuous mode
[  651.331030][T22164] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  651.384279][T22164] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  651.419390][T22164] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  651.474283][T22164] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  651.496739][T22164] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  651.644944][T16634] bridge0: port 1(bridge_slave_0) entered blocking state
[  651.652161][T16634] bridge0: port 1(bridge_slave_0) entered forwarding state
[  651.674946][T16634] bridge0: port 2(bridge_slave_1) entered blocking state
[  651.682179][T16634] bridge0: port 2(bridge_slave_1) entered forwarding state
[  651.802100][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  651.838256][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  651.866906][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  652.045016][T22192] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4058'.
[  652.096042][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  652.110051][T22181] netlink: 'syz.2.4055': attribute type 1 has an invalid length.
[  652.117988][T22181] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4055'.
[  652.282160][T22203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4061'.
[  652.561348][T22212] lo speed is unknown, defaulting to 1000
[  653.098074][T22238] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[  653.727974][T22260] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  653.756814][T22265] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  653.944580][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4078'.
[  653.964399][T22276] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4078'.
[  654.150367][T22280] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  654.328115][T22281] syzkaller0: entered promiscuous mode
[  654.341007][T22281] syzkaller0: entered allmulticast mode
[  654.428988][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.479414][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  654.568941][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  654.759573][T22271] tipc: Resetting bearer <eth:syzkaller0>
[  654.774677][T22311] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4086'.
[  654.864601][T22271] tipc: Disabling bearer <eth:syzkaller0>
[  655.425556][T22321] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[  655.472363][T22321] bond3 (unregistering): Released all slaves
[  655.728229][T22325] netlink: 'syz.4.4089': attribute type 1 has an invalid length.
[  655.850833][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4089'.
[  655.945926][T22329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4089'.
[  655.968043][T22325] bond2: entered promiscuous mode
[  656.002256][T22325] 8021q: adding VLAN 0 to HW filter on device bond2
[  656.440312][T22363] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4099'.
[  656.451119][T22363] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4099'.
[  656.557288][T22368] netlink: 'syz.4.4101': attribute type 12 has an invalid length.
[  656.571427][T22368] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4101'.
[  657.194927][T22384] syzkaller1: entered promiscuous mode
[  657.202669][T22384] syzkaller1: entered allmulticast mode
[  659.032851][T22337] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  659.253969][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4107'.
[  659.286211][T22399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4109'.
[  659.374059][T22409] netlink: 'syz.1.4110': attribute type 2 has an invalid length.
[  659.412445][T22399] bond3: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  659.429550][T22399] bond3 (unregistering): Released all slaves
[  659.452940][T22413] netlink: 'syz.0.4111': attribute type 4 has an invalid length.
[  659.466951][T22412] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4112'.
[  659.518089][T22397] netlink: 'syz.0.4111': attribute type 4 has an invalid length.
[  659.672919][T22397] netlink: 'syz.0.4111': attribute type 4 has an invalid length.
[  659.869376][T22431] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4117'.
[  659.911348][T22435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'.
[  660.094147][T22444] netlink: 'syz.4.4119': attribute type 1 has an invalid length.
[  660.121218][T22444] netlink: 'syz.4.4119': attribute type 4 has an invalid length.
[  660.158201][T22444] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.4119'.
[  660.172136][T22446] netlink: 'syz.4.4119': attribute type 1 has an invalid length.
[  660.204018][T22446] netlink: 'syz.4.4119': attribute type 4 has an invalid length.
[  660.257612][T22451] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4123'.
[  660.430738][T22454] Bluetooth: MGMT ver 1.23
[  661.555943][   T30] audit: type=1800 audit(1783078807.823:30): pid=22462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4125" name="memory.events" dev="tmpfs" ino=966 res=0 errno=0
[  661.998091][T22499] __nla_validate_parse: 3 callbacks suppressed
[  661.998109][T22499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4135'.
[  662.676715][T22531] validate_nla: 1 callbacks suppressed
[  662.676735][T22531] netlink: 'syz.4.4141': attribute type 49 has an invalid length.
[  662.906325][T22537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4143'.
[  662.960044][T22537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4143'.
[  663.115853][T22542] bridge2: port 1(vlan4) entered blocking state
[  663.149248][T22542] bridge2: port 1(vlan4) entered disabled state
[  663.172059][T22542] vlan4: entered allmulticast mode
[  663.193521][T22542] bridge2: entered allmulticast mode
[  663.218365][T22542] vlan4: left allmulticast mode
[  663.237954][T22542] bridge2: left allmulticast mode
[  663.335182][T22540] lo speed is unknown, defaulting to 1000
[  663.912637][T22540] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4144'.
[  664.378571][T22578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4151'.
[  664.540777][T22587] x_tables: ip_tables: TEE.1 target: invalid size 40 (kernel) != (user) 0
[  664.655255][T22589] syzkaller1: entered promiscuous mode
[  664.694179][T22589] syzkaller1: entered allmulticast mode
[  664.763356][T22595] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4157'.
[  664.878075][T22595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4157'.
[  664.911090][T22601] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4156'.
[  664.920474][T22595] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  665.399155][T22603] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  665.484182][T22616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4162'.
[  666.344338][T22660] netlink: 'syz.3.4172': attribute type 1 has an invalid length.
[  666.726875][T22679] xt_NFQUEUE: number of total queues is 0
[  666.934585][T22689] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4185'.
[  666.964165][T22685] tc_dump_action: action bad kind
[  666.968787][T22687] netlink: 'syz.3.4186': attribute type 1 has an invalid length.
[  667.056909][T22687] 8021q: adding VLAN 0 to HW filter on device bond3
[  667.162334][T22701] netlink: 'syz.3.4186': attribute type 13 has an invalid length.
[  667.311259][T22695] bond3: (slave veth7): Enslaving as an active interface with a down link
[  667.357379][T22687] 8021q: adding VLAN 0 to HW filter on device batadv2
[  667.373530][T22687] bond3: (slave batadv2): making interface the new active one
[  667.387617][T22687] batadv2: entered promiscuous mode
[  667.393828][T22687] bond3: (slave batadv2): Enslaving as an active interface with an up link
[  667.407462][T22700] __nla_validate_parse: 1 callbacks suppressed
[  667.407482][T22700] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4188'.
[  667.496916][T22720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4193'.
[  667.578248][T22714] syzkaller0: entered promiscuous mode
[  667.596103][T22720] xt_l2tp: invalid flags combination: 8
[  667.599547][T22714] syzkaller0: entered allmulticast mode
[  667.628978][T22720] xt_hashlimit: max too large, truncated to 1048576
[  667.663722][T22720] xt_hashlimit: overflow, try lower: 137438953472/8
[  667.726719][T22726] netlink: 'syz.2.4193': attribute type 1 has an invalid length.
[  667.760566][T22720] gre0: entered promiscuous mode
[  667.773377][T22720] gre0: entered allmulticast mode
[  667.885812][T22738] netlink: 'syz.1.4198': attribute type 29 has an invalid length.
[  668.522579][T22765] bond0: entered promiscuous mode
[  668.550731][T22765] bond0: left promiscuous mode
[  668.627381][T22772] syzkaller0: entered promiscuous mode
[  668.635166][T22772] syzkaller0: entered allmulticast mode
[  668.753116][T22780] netlink: 36764 bytes leftover after parsing attributes in process `syz.4.4209'.
[  668.832469][T22784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4212'.
[  668.843214][T22784] netlink: 'syz.0.4212': attribute type 10 has an invalid length.
[  668.852075][T22784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4212'.
[  669.104168][T22791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4215'.
[  669.188211][T22801] netlink: 172 bytes leftover after parsing attributes in process `syz.4.4215'.
[  669.245926][T22795] syzkaller1: entered promiscuous mode
[  669.265139][T22795] syzkaller1: entered allmulticast mode
[  669.290621][T22803] syzkaller0: entered promiscuous mode
[  669.308080][T22803] syzkaller0: entered allmulticast mode
[  669.774201][ T5635] block nbd3: Receive control failed (result -32)
[  670.035478][T22823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4225'.
[  670.058187][T22823] xt_TCPMSS: Only works on TCP SYN packets
[  670.194603][T22830] netlink: 'syz.3.4228': attribute type 4 has an invalid length.
[  670.214099][T22836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4229'.
[  670.456261][T22840] syzkaller0: entered promiscuous mode
[  670.475966][T22840] syzkaller0: entered allmulticast mode
[  670.647321][T22848] vti0: entered promiscuous mode
[  670.664349][T22848] vti0: entered allmulticast mode
[  670.671447][T22853] Unsupported ieee802154 address type: 0
[  670.838957][T22859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4237'.
[  670.999877][T22872] netlink: 'syz.3.4242': attribute type 13 has an invalid length.
[  671.272441][T22872] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.279869][T22872] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.549556][T22872] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  671.581581][T22872] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  672.088263][T22874] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  672.098845][T22874] batman_adv: batadv0: Removing interface: batadv_slave_1
[  672.178885][T16634] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.190786][T16634] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.199908][T16634] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.208882][T16634] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.218632][T20361] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.229390][T20361] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  672.238331][T20361] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  672.247733][T20361] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  675.600253][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  685.277955][T22880] tipc: Started in network mode
[  685.287408][T22880] tipc: Node identity , cluster identity 8
[  685.293808][T22880] tipc: Failed to obtain node identity
[  685.299884][T22880] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  685.338363][T22888] bond4: option tlb_dynamic_lb: invalid value (128)
[  685.352965][T22888] bond4 (unregistering): Released all slaves
[  685.557089][T22900] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4249'.
[  685.614412][T22900] batadv0: entered promiscuous mode
[  685.616332][T22889] netlink: 'syz.4.4247': attribute type 3 has an invalid length.
[  685.644036][T22900] macsec2: entered promiscuous mode
[  685.662121][T22900] macsec2: entered allmulticast mode
[  685.685310][T22900] batadv0: entered allmulticast mode
[  685.708077][T22900] 8021q: adding VLAN 0 to HW filter on device macsec2
[  685.734733][T22900] batadv0: left allmulticast mode
[  685.754451][T22900] batadv0: left promiscuous mode
[  685.795151][T22910] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4252'.
[  685.808466][T22910] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4252'.
[  685.875718][T22910] netlink: 'syz.3.4252': attribute type 5 has an invalid length.
[  685.908287][T22910] netlink: 43 bytes leftover after parsing attributes in process `syz.3.4252'.
[  686.084122][T22922] hsr0: entered allmulticast mode
[  686.101128][T22922] hsr_slave_0: entered allmulticast mode
[  686.120220][T22922] hsr_slave_1: entered allmulticast mode
[  686.139270][T22922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4255'.
[  686.179076][T22922] hsr_slave_0: left promiscuous mode
[  686.194211][T22922] hsr_slave_1: left promiscuous mode
[  686.206173][T22922] hsr0 (unregistering): left allmulticast mode
[  686.216696][T22924] netlink: 'syz.0.4256': attribute type 28 has an invalid length.
[  686.251658][T22924] netlink: 'syz.0.4256': attribute type 3 has an invalid length.
[  686.281024][T22924] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4256'.
[  686.926540][T22956] netlink: 'syz.4.4260': attribute type 3 has an invalid length.
[  686.968925][T22956] netlink: 'syz.4.4260': attribute type 1 has an invalid length.
[  686.990789][T22956] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4260'.
[  687.270293][T22975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4268'.
[  687.651571][T22985] syzkaller0: entered promiscuous mode
[  687.666850][T22985] syzkaller0: entered allmulticast mode
[  688.069706][T22999] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4272'.
[  688.337231][T23006] xt_hashlimit: size too large, truncated to 1048576
[  688.378219][T23002] syzkaller0: entered promiscuous mode
[  688.397791][T23002] syzkaller0: entered allmulticast mode
[  688.442757][T23017] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.485961][T23020] netlink: 'syz.1.4276': attribute type 11 has an invalid length.
[  688.516171][T23020] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4276'.
[  688.546184][T23017] bridge_slave_0 (unregistering): left allmulticast mode
[  688.564427][T23017] bridge_slave_0 (unregistering): left promiscuous mode
[  688.594769][T23017] bridge0: port 1(bridge_slave_0) entered disabled state
[  688.613233][T23025] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  688.625978][T23025] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  688.747361][T23005] lo speed is unknown, defaulting to 1000
[  689.610289][T23066] netlink: 'syz.4.4285': attribute type 1 has an invalid length.
[  689.628822][T23051] lo speed is unknown, defaulting to 1000
[  689.732360][T23072] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  689.777455][T23072] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  690.418561][T23104] lo speed is unknown, defaulting to 1000
[  690.725227][T23117] netlink: 'syz.4.4299': attribute type 1 has an invalid length.
[  690.905934][T23119] bond3: (slave gretap1): making interface the new active one
[  690.941375][T23119] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  690.960625][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  691.002103][T23121] vlan3: entered allmulticast mode
[  691.017008][T23121] bond3: entered allmulticast mode
[  691.036584][T23121] gretap1: entered allmulticast mode
[  691.050259][T23121] bond3: (slave vlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  691.333940][T23127] __nla_validate_parse: 5 callbacks suppressed
[  691.333960][T23127] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4301'.
[  691.718473][T23144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4306'.
[  691.861829][T23149] lo speed is unknown, defaulting to 1000
[  691.967237][T23160] netlink: 'syz.1.4309': attribute type 1 has an invalid length.
[  692.368054][T23164] bond8: Unable to set up delay as MII monitoring is disabled
[  692.423750][T23164] bond8 (unregistering): Released all slaves
[  692.550085][T23160] 8021q: adding VLAN 0 to HW filter on device bond8
[  692.665392][T23173] bond8: (slave ip6gretap1): making interface the new active one
[  692.698041][T23173] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link
[  693.213535][T23198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4316'.
[  693.278477][T23198] xt_connbytes: Forcing CT accounting to be enabled
[  693.320718][T23198] xt_CT: You must specify a L4 protocol and not use inversions on it
[  693.638163][T23211] tipc: Started in network mode
[  693.658329][T23211] tipc: Node identity 7274a9e5b695, cluster identity 4711
[  693.699558][T23211] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  693.748022][T23214] ip6tnl2: entered allmulticast mode
[  693.770876][T23215] syzkaller0: entered promiscuous mode
[  693.776969][T23215] syzkaller0: entered allmulticast mode
[  693.920860][T23215] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4319'.
[  693.979013][T23211] tipc: Resetting bearer <eth:syzkaller0>
[  694.035359][T23210] tipc: Resetting bearer <eth:syzkaller0>
[  694.082660][T23210] tipc: Disabling bearer <eth:syzkaller0>
[  694.100954][T23226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4324'.
[  694.164602][T23228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4325'.
[  694.236636][T23228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  694.256280][T23228] batman_adv: batadv0: Removing interface: batadv_slave_1
[  694.307653][T23230] tc_dump_action: action bad kind
[  694.544632][T23248] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  694.582537][T23250] netlink: 296 bytes leftover after parsing attributes in process `syz.1.4330'.
[  694.614571][T23249] netlink: 'syz.2.4331': attribute type 1 has an invalid length.
[  694.646975][T23249] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4331'.
[  694.671494][T23245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4330'.
[  694.827355][T23249] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4331'.
[  695.005811][T23270] openvswitch: netlink: Duplicate or invalid key (type 0).
[  695.051089][T23270] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  695.199539][T23274] block nbd4: server does not support multiple connections per device.
[  695.227623][T23274] block nbd4: shutting down sockets
[  695.698434][T23307] openvswitch: netlink: Duplicate or invalid key (type 0).
[  695.707565][T23307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  695.815068][T23310] netlink: 'syz.2.4352': attribute type 5 has an invalid length.
[  696.230683][T23323] syzkaller0: entered promiscuous mode
[  696.236323][T23323] syzkaller0: entered allmulticast mode
[  696.798186][T23347] __nla_validate_parse: 8 callbacks suppressed
[  696.798200][T23347] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4361'.
[  700.341281][T23351] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  700.359251][T23344] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  700.378408][T23344] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  700.389572][T23344] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  701.081705][T23385] netlink: 'syz.3.4371': attribute type 1 has an invalid length.
[  701.113846][T23385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4371'.
[  701.642343][T23398] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4374'.
[  701.981333][T23414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4377'.
[  702.687178][T23437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4385'.
[  702.939946][T23448] netlink: 'syz.3.4388': attribute type 6 has an invalid length.
[  703.029317][T23455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4390'.
[  703.048597][T23456] netlink: 'syz.4.4389': attribute type 1 has an invalid length.
[  703.194403][T23456] bond4: entered promiscuous mode
[  703.200839][T23456] 8021q: adding VLAN 0 to HW filter on device bond4
[  703.296625][T23463] 8021q: adding VLAN 0 to HW filter on device bond4
[  703.344482][T23463] bond4: (slave vti1): The slave device specified does not support setting the MAC address
[  703.355692][T23463] bond4: (slave vti1): Setting fail_over_mac to active for active-backup mode
[  703.382136][T23463] bond4: (slave vti1): making interface the new active one
[  703.390347][T23463] vti1: entered promiscuous mode
[  703.397465][T23463] bond4: (slave vti1): Enslaving as an active interface with an up link
[  703.570759][T23471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4393'.
[  703.723165][T23469] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  703.767996][T23479] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4397'.
[  704.013848][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4402'.
[  704.576559][T23517] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4410'.
[  704.592314][T23519] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4411'.
[  704.631120][T23519] team0 (unregistering): Port device team_slave_1 removed
[  704.717651][T23524] xt_TCPMSS: Only works on TCP SYN packets
[  704.784806][T23526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4413'.
[  704.867296][T23526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4413'.
[  704.910943][T23526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  705.272129][   T30] audit: type=1800 audit(1783078851.543:31): pid=23541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4417" name="memory.events" dev="tmpfs" ino=1055 res=0 errno=0
[  705.614985][T23566] netlink: 'syz.0.4426': attribute type 1 has an invalid length.
[  705.691684][T23566] 8021q: adding VLAN 0 to HW filter on device bond3
[  705.886990][T23575] lo speed is unknown, defaulting to 1000
[  707.024620][T23599] smc: net device wlan0 applied user defined pnetid SYZ0
[  707.240839][T14563] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  707.367012][T14563] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  707.507017][T23608] x_tables: duplicate underflow at hook 3
[  707.618185][T23612] syzkaller1: entered promiscuous mode
[  707.654005][T23612] syzkaller1: entered allmulticast mode
[  708.007998][T23630] __nla_validate_parse: 1 callbacks suppressed
[  708.008016][T23630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4442'.
[  708.106296][T23639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4444'.
[  708.141659][T23639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4444'.
[  708.223835][T23644] tipc: Started in network mode
[  708.231689][T23644] tipc: Node identity 26cb249df156, cluster identity 8
[  708.244599][T23644] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  708.254242][T23644] syzkaller0: entered promiscuous mode
[  708.260197][T23644] syzkaller0: entered allmulticast mode
[  708.270842][T23644] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  708.319491][   T29] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  708.344915][T23644] tipc: Resetting bearer <eth:syzkaller0>
[  708.391663][T23643] tipc: Resetting bearer <eth:syzkaller0>
[  708.500817][T23643] tipc: Disabling bearer <eth:syzkaller0>
[  709.368948][T23678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4457'.
[  709.393498][T23678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4457'.
[  709.409133][T23679] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4456'.
[  709.409644][T23678] netlink: 58 bytes leftover after parsing attributes in process `syz.4.4457'.
[  709.447253][T23678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4457'.
[  709.516012][T23678] team0 (unregistering): Port device team_slave_0 removed
[  709.547197][T23678] team0 (unregistering): Port device team_slave_1 removed
[  709.775761][T23685] lo speed is unknown, defaulting to 1000
[  709.803410][T23697] netlink: 'syz.2.4462': attribute type 23 has an invalid length.
[  709.878054][T23707] netlink: 'syz.2.4462': attribute type 21 has an invalid length.
[  709.915925][T23707] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4462'.
[  710.141697][T23709] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4465'.
[  710.631721][T23732] nbd: must specify at least one socket
[  712.093182][T23781] netlink: 'syz.1.4481': attribute type 2 has an invalid length.
[  712.345465][T23793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  712.781137][T23812] sctp: [Deprecated]: syz.1.4492 (pid 23812) Use of int in maxseg socket option.
[  712.781137][T23812] Use struct sctp_assoc_value instead
[  713.131680][T23817] __nla_validate_parse: 8 callbacks suppressed
[  713.131699][T23817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4493'.
[  713.173780][T23822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4495'.
[  713.187934][T23817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4493'.
[  713.217365][T23822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4495'.
[  713.234707][T23823] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4495'.
[  713.272166][T23822] netlink: 'syz.3.4495': attribute type 19 has an invalid length.
[  713.283564][T23822] netlink: 'syz.3.4495': attribute type 20 has an invalid length.
[  713.286535][T23823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4495'.
[  713.345954][T23830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4495'.
[  713.360356][T23823] netlink: 'syz.3.4495': attribute type 19 has an invalid length.
[  713.454224][T23823] netlink: 'syz.3.4495': attribute type 20 has an invalid length.
[  713.580874][T23842] dummy0: entered allmulticast mode
[  713.607738][T23842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4501'.
[  713.896558][T23849] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4503'.
[  714.136777][T23856] netlink: 'syz.2.4504': attribute type 33 has an invalid length.
[  714.978200][T23884] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4511'.
[  715.015386][T23881] netlink: 'syz.2.4511': attribute type 1 has an invalid length.
[  715.331211][T23881] bond6: entered promiscuous mode
[  715.336784][T23881] 8021q: adding VLAN 0 to HW filter on device bond6
[  715.653296][   T29] IPVS: starting estimator thread 0...
[  715.769019][T23906] IPVS: using max 30 ests per chain, 72000 per kthread
[  715.801479][T23901] bridge3: port 1(erspan0) entered disabled state
[  716.041929][T23918] openvswitch: netlink: Flow key attr not present in new flow.
[  716.125414][T23918] netlink: 'syz.3.4520': attribute type 2 has an invalid length.
[  716.634716][T23943] lo speed is unknown, defaulting to 1000
[  716.987881][T23943] 8021q: adding VLAN 0 to HW filter on device bond7
[  717.011770][T23943] bond7: entered promiscuous mode
[  717.033673][T23943] bond7: entered allmulticast mode
[  719.110800][T23920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  719.354283][T23965] xt_CT: You must specify a L4 protocol and not use inversions on it
[  719.423904][T23965] netlink: 'syz.1.4531': attribute type 21 has an invalid length.
[  719.597636][T23975] netlink: 'syz.3.4537': attribute type 2 has an invalid length.
[  719.668566][T23977] __nla_validate_parse: 5 callbacks suppressed
[  719.668585][T23977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4533'.
[  719.936137][T23995] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4543'.
[  720.025401][T23998] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4544'.
[  720.299987][T24009] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  720.307295][T24009] IPv6: NLM_F_CREATE should be set when creating new route
[  720.314623][T24009] IPv6: NLM_F_CREATE should be set when creating new route
[  720.321905][T24009] IPv6: NLM_F_CREATE should be set when creating new route
[  720.369175][T24010] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  720.472779][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'.
[  720.499051][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4551'.
[  720.565210][T24016] bond9: Removing last arp target with arp_interval on
[  720.735347][T24034] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4558'.
[  720.811266][T24037] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4557'.
[  720.966440][T24043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4557'.
[  721.116416][T24054] syzkaller1: entered promiscuous mode
[  721.130455][T24054] syzkaller1: entered allmulticast mode
[  721.317641][T24056] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4563'.
[  721.560817][T24065] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4567'.
[  721.644546][T24073] netlink: 'syz.2.4568': attribute type 5 has an invalid length.
[  721.667004][T24073] netlink: 'syz.2.4568': attribute type 5 has an invalid length.
[  721.679531][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  721.849924][T24079] netlink: 'syz.2.4571': attribute type 1 has an invalid length.
[  722.138494][T24079] 8021q: adding VLAN 0 to HW filter on device bond8
[  722.222731][T24091] vlan4: entered promiscuous mode
[  722.241437][T24091] bond8: entered promiscuous mode
[  722.264531][T24091] vlan4: entered allmulticast mode
[  722.284886][T24091] bond8: entered allmulticast mode
[  722.347989][T24093] bond8: (slave bridge5): making interface the new active one
[  722.360482][T24093] bridge5: entered promiscuous mode
[  722.369171][T24093] bridge5: entered allmulticast mode
[  722.391621][T24093] bond8: (slave bridge5): Enslaving as an active interface with an up link
[  723.134240][T24128] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  724.762633][T24183] gre0: left allmulticast mode
[  724.817599][T24180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  724.924436][T24183] bridge3: port 1(erspan0) entered blocking state
[  724.931102][T24183] bridge3: port 1(erspan0) entered forwarding state
[  725.012865][T24183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  725.058161][T24183] veth1_vlan: left promiscuous mode
[  725.103937][T24183] veth0_vlan: left promiscuous mode
[  725.137474][T24183] veth0_vlan: entered promiscuous mode
[  725.155984][T24183] veth1_vlan: entered promiscuous mode
[  725.183395][T24183] veth1_macvtap: left promiscuous mode
[  725.200562][T24183] veth0_macvtap: left promiscuous mode
[  725.212425][T24183] veth0_macvtap: entered promiscuous mode
[  725.229068][T24183] veth1_macvtap: entered promiscuous mode
[  725.261148][T24183] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  725.283169][T24183] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  725.302941][T24183] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  725.321243][T24183] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  725.341476][T24183] mac80211_hwsim hwsim23 wlan0: left allmulticast mode
[  725.357337][T24183] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  725.669928][T20366] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  725.700378][T20366] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  725.732361][T20366] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  725.754165][T20366] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  726.159597][T16641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.170656][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.394441][T24215] xt_limit: Overflow, try lower: 324382443/0
[  726.423646][T24215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.433880][T24213] sctp: [Deprecated]: syz.4.4606 (pid 24213) Use of int in max_burst socket option.
[  726.433880][T24213] Use struct sctp_assoc_value instead
[  726.617380][T24222] bridge6: entered promiscuous mode
[  726.634403][T24222] bridge6: entered allmulticast mode
[  726.656400][T24222] team0: Port device bridge6 added
[  726.729963][T24225] __nla_validate_parse: 11 callbacks suppressed
[  726.729982][T24225] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4610'.
[  726.774816][T24225] netlink: 'syz.1.4610': attribute type 9 has an invalid length.
[  726.784831][T24233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4611'.
[  726.806865][T20361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.817649][T24222] bridge7: entered promiscuous mode
[  726.841999][T24222] bridge7: entered allmulticast mode
[  726.850948][T24225] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.4610'.
[  726.870459][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.886911][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.892894][T24222] team0: Port device bridge7 added
[  726.905172][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.925313][T24221] lo speed is unknown, defaulting to 1000
[  727.440014][T20370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.116708][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4620'.
[  728.363190][T24263] netlink: 'syz.1.4621': attribute type 27 has an invalid length.
[  728.851797][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4628'.
[  729.474158][T24299] netlink: 'syz.4.4630': attribute type 4 has an invalid length.
[  729.524884][T24295] netlink: 'syz.4.4630': attribute type 4 has an invalid length.
[  729.620556][T24294] netlink: 'syz.4.4630': attribute type 4 has an invalid length.
[  729.693309][T24306] x_tables: unsorted entry at hook 3
[  729.921842][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  730.007454][T24321] xt_NFQUEUE: number of total queues is 0
[  730.159129][T24319] syzkaller0: entered promiscuous mode
[  730.185140][T24319] syzkaller0: entered allmulticast mode
[  730.192272][T24327] xt_hashlimit: size too large, truncated to 1048576
[  730.272186][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4639'.
[  730.296829][T24333] netlink: 160 bytes leftover after parsing attributes in process `syz.4.4638'.
[  730.355553][T24336] Cannot find del_set index 1 as target
[  730.383871][T24334] syzkaller0: entered promiscuous mode
[  730.402880][T24334] syzkaller0: entered allmulticast mode
[  731.333571][T24352] netlink: 'syz.0.4645': attribute type 4 has an invalid length.
[  731.357001][T24352] netlink: 'syz.0.4645': attribute type 4 has an invalid length.
[  731.388230][T24352] netlink: 'syz.0.4645': attribute type 4 has an invalid length.
[  731.576256][T24355] bond0: (slave bond_slave_1): Releasing backup interface
[  731.619507][T24357] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4647'.
[  731.750141][T24355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4646'.
[  731.923724][T20362] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.933987][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  731.944801][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.073989][T24371] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4652'.
[  732.080516][T24370] netlink: 'syz.3.4651': attribute type 13 has an invalid length.
[  732.136198][T24370] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4651'.
[  732.440387][T24370] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4651'.
[  732.559672][T16641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.568147][T16640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.577764][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.586678][T14568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.034059][T24387] syzkaller0: entered promiscuous mode
[  733.060761][T24387] syzkaller0: entered allmulticast mode
[  733.075400][T24388] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4656'.
[  733.136558][T24387] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  733.175451][T24386] tipc: Resetting bearer <eth:syzkaller0>
[  733.238166][T24393] netlink: 'syz.2.4658': attribute type 4 has an invalid length.
[  733.247584][T24386] tipc: Disabling bearer <eth:syzkaller0>
[  733.273006][T24390] netlink: 'syz.2.4658': attribute type 4 has an invalid length.
[  733.291964][T24390] netlink: 'syz.2.4658': attribute type 4 has an invalid length.
[  733.707507][T24410] netlink: 'syz.3.4664': attribute type 5 has an invalid length.
[  734.129843][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4670'.
[  734.176403][T24423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4670'.
[  734.323868][T24437] netlink: 'syz.4.4673': attribute type 4 has an invalid length.
[  734.375790][T24438] netlink: 'syz.4.4673': attribute type 4 has an invalid length.
[  734.396415][T24430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  734.408899][T24437] netlink: 'syz.4.4673': attribute type 4 has an invalid length.
[  734.857961][T24448] lo speed is unknown, defaulting to 1000
[  735.302547][T24467] syzkaller0: entered promiscuous mode
[  735.313441][T24465] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4682'.
[  735.326193][T24467] syzkaller0: entered allmulticast mode
[  735.607522][T24479] xt_TPROXY: Can be used only with -p tcp or -p udp
[  735.643374][T24479] lo: entered allmulticast mode
[  735.649316][T24479] lo: left allmulticast mode
[  735.679406][T14563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  735.831114][T24481] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  735.931724][T24483] netlink: 'syz.0.4688': attribute type 4 has an invalid length.
[  735.965879][T24488] batman_adv: batadv0: Removing interface: batadv_slave_0
[  735.981907][T24485] netlink: 'syz.0.4688': attribute type 4 has an invalid length.
[  736.055110][T24497] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4689'.
[  736.148288][T24488] erspan0: entered promiscuous mode
[  736.155546][T24488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4689'.
[  736.398503][T24505] ipt_REJECT: TCP_RESET invalid for non-tcp
[  736.475956][T24507] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  736.503029][T24507] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[  736.837399][T24525] lo speed is unknown, defaulting to 1000
[  737.200972][T24536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4701'.
[  737.476535][T24547] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4705'.
[  737.680375][T20366] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.690626][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.705219][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.020966][T24569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4711'.
[  738.323414][T16640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.334702][ T3305] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.362799][T14571] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.377700][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.577730][T24589] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4717'.
[  739.214345][T24618] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4728'.
[  739.227040][T24618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4728'.
[  739.237920][T24618] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4728'.
[  739.301781][T24625] validate_nla: 3 callbacks suppressed
[  739.301799][T24625] netlink: 'syz.1.4728': attribute type 21 has an invalid length.
[  739.303908][T24612] 8021q: adding VLAN 0 to HW filter on device bond6
[  739.309512][T24623] netlink: 'syz.2.4729': attribute type 2 has an invalid length.
[  739.321931][T24612] bond5: (slave bond6): Enslaving as an active interface with an up link
[  739.346418][T24625] netlink: 'syz.1.4728': attribute type 21 has an invalid length.
[  739.369525][T24623] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4729'.
[  739.982334][T24639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4736'.
[  740.091092][T24639] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4736'.
[  740.287256][T24668] netlink: 'syz.4.4742': attribute type 9 has an invalid length.
[  740.556018][T24680] FAULT_INJECTION: forcing a failure.
[  740.556018][T24680] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  740.575100][T24680] CPU: 1 UID: 0 PID: 24680 Comm: syz.3.4746 Not tainted syzkaller #0 PREEMPT(full) 
[  740.575125][T24680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  740.575136][T24680] Call Trace:
[  740.575144][T24680]  <TASK>
[  740.575152][T24680]  dump_stack_lvl+0xe8/0x150
[  740.575187][T24680]  should_fail_ex+0x40c/0x560
[  740.575223][T24680]  _copy_from_user+0x2d/0xb0
[  740.575247][T24680]  do_sys_poll+0x258/0x1110
[  740.575281][T24680]  ? __lock_acquire+0x683/0x2cf0
[  740.575314][T24680]  ? __pfx_do_sys_poll+0x10/0x10
[  740.575337][T24680]  ? aa_file_perm+0x18b/0x15f0
[  740.575444][T24680]  ? ktime_get_ts64+0xa9/0x410
[  740.575526][T24680]  ? __pfx_timespec64_add_safe+0x10/0x10
[  740.575564][T24680]  __x64_sys_poll+0x190/0x360
[  740.575590][T24680]  ? __pfx___x64_sys_poll+0x10/0x10
[  740.575620][T24680]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.575643][T24680]  do_syscall_64+0x174/0x580
[  740.575666][T24680]  ? trace_irq_disable+0x3b/0x140
[  740.575691][T24680]  ? clear_bhb_loop+0x40/0x90
[  740.575714][T24680]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.575732][T24680] RIP: 0033:0x7f9344b9de59
[  740.575750][T24680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  740.575767][T24680] RSP: 002b:00007f9345ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  740.575788][T24680] RAX: ffffffffffffffda RBX: 00007f9344e25fa0 RCX: 00007f9344b9de59
[  740.575801][T24680] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000
[  740.575814][T24680] RBP: 00007f9345ab7090 R08: 0000000000000000 R09: 0000000000000000
[  740.575826][T24680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  740.575837][T24680] R13: 00007f9344e26038 R14: 00007f9344e25fa0 R15: 00007ffec320e138
[  740.575868][T24680]  </TASK>
[  741.441112][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.224020][T24732] netlink: 'syz.4.4761': attribute type 1 has an invalid length.
[  742.314092][T24732] 8021q: adding VLAN 0 to HW filter on device bond7
[  742.413432][T24735] vlan3: entered allmulticast mode
[  742.468583][T24735] bond7: entered allmulticast mode
[  742.556158][T24741] bond7: (slave geneve2): making interface the new active one
[  742.605943][T24741] geneve2: entered allmulticast mode
[  742.641000][T24741] bond7: (slave geneve2): Enslaving as an active interface with an up link
[  743.005551][T24755] lo speed is unknown, defaulting to 1000
[  743.646350][T24769] netlink: 'syz.2.4771': attribute type 4 has an invalid length.
[  743.691957][T24769] netlink: 'syz.2.4771': attribute type 4 has an invalid length.
[  743.735485][T24769] netlink: 'syz.2.4771': attribute type 4 has an invalid length.
[  744.080429][T16641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.100508][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.109285][T20361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.129393][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.336308][T24782] gtp1: entered promiscuous mode
[  744.350276][T24782] gtp1: entered allmulticast mode
[  744.371511][T24782] team0: Device gtp1 is of different type
[  744.380227][T24788] netlink: 'syz.4.4778': attribute type 1 has an invalid length.
[  744.477514][T24796] __nla_validate_parse: 2 callbacks suppressed
[  744.477531][T24796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4780'.
[  744.501148][T24796] xt_CT: You must specify a L4 protocol and not use inversions on it
[  744.526541][T24788] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4778'.
[  744.608579][T24788] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4778'.
[  745.277155][T24833] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4788'.
[  746.198388][T24852] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4795'.
[  746.520613][T24860] lo speed is unknown, defaulting to 1000
[  746.670539][T24866] bond0: (slave bond_slave_1): Releasing backup interface
[  747.118059][T24874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4801'.
[  747.163138][T24874] 8021q: adding VLAN 0 to HW filter on device bond4
[  747.199342][   T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.226094][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'.
[  747.235445][T24878] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4802'.
[  747.326536][T24880] tipc: Invalid UDP bearer configuration
[  747.326590][T24880] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  747.349331][T24880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4803'.
[  747.528126][T24882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4804'.
[  748.143406][T24908] sock: sock_timestamping_bind_phc: sock not bind to device
[  748.475663][T24920] lo speed is unknown, defaulting to 1000
[  749.226103][T24938] xt_hashlimit: size too large, truncated to 1048576
[  749.274548][T24943] x_tables: duplicate underflow at hook 2
[  749.335400][T24941] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  749.638840][T24949] __nla_validate_parse: 4 callbacks suppressed
[  749.638858][T24949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4815'.
[  749.840945][T16640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.850452][T20370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.860829][ T5361] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.875656][T14568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  750.523542][T24954] 8021q: adding VLAN 0 to HW filter on device bond0
[  750.583602][T24954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  750.953915][T24954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  750.973037][T24954] veth1_macvtap: left promiscuous mode
[  750.982015][T24954] veth0_macvtap: left promiscuous mode
[  750.996629][T24954] veth0_macvtap: entered promiscuous mode
[  751.012548][T24954] veth1_macvtap: entered promiscuous mode
[  751.082909][T24954] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  751.102725][T24954] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  751.137315][T24954] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  751.179989][T24954] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  751.206453][T24954] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  751.309187][T16640] bridge0: port 1(bridge_slave_0) entered blocking state
[  751.316420][T16640] bridge0: port 1(bridge_slave_0) entered forwarding state
[  751.381962][T16640] bridge0: port 2(bridge_slave_1) entered blocking state
[  751.389177][T16640] bridge0: port 2(bridge_slave_1) entered forwarding state
[  751.487924][T24977] FAULT_INJECTION: forcing a failure.
[  751.487924][T24977] name failslab, interval 1, probability 0, space 0, times 0
[  751.529834][T20370] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  751.547741][T20370] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  751.557580][T24977] CPU: 1 UID: 0 PID: 24977 Comm: syz.3.4829 Not tainted syzkaller #0 PREEMPT(full) 
[  751.557605][T24977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  751.557617][T24977] Call Trace:
[  751.557625][T24977]  <TASK>
[  751.557634][T24977]  dump_stack_lvl+0xe8/0x150
[  751.557670][T24977]  should_fail_ex+0x40c/0x560
[  751.557705][T24977]  should_failslab+0xa8/0x100
[  751.557736][T24977]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  751.557762][T24977]  ? __pmd_alloc+0xc1/0x5c0
[  751.557815][T24977]  ? __pmd_alloc+0xc1/0x5c0
[  751.557842][T24977]  __pmd_alloc+0xc1/0x5c0
[  751.557867][T24977]  handle_mm_fault+0xe20/0x3080
[  751.557903][T24977]  ? handle_mm_fault+0xec/0x3080
[  751.557933][T24977]  ? __pfx_handle_mm_fault+0x10/0x10
[  751.557970][T24977]  ? __lock_acquire+0x683/0x2cf0
[  751.558001][T24977]  ? lock_mm_and_find_vma+0xa7/0x340
[  751.558027][T24977]  do_user_addr_fault+0x744/0x1340
[  751.558084][T24977]  exc_page_fault+0x6a/0xc0
[  751.558107][T24977]  asm_exc_page_fault+0x26/0x30
[  751.558126][T24977] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  751.558155][T24977] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 ff 60 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  751.558171][T24977] RSP: 0018:ffffc90003e0f838 EFLAGS: 00050202
[  751.558189][T24977] RAX: 00007ffffffff001 RBX: 00000000000000f0 RCX: 00000000000000f0
[  751.558203][T24977] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc90003e0fc7c
[  751.558216][T24977] RBP: ffffc90003e0fe10 R08: ffffc90003e0fd6b R09: 1ffff920007c1fad
[  751.558231][T24977] R10: dffffc0000000000 R11: fffff520007c1fae R12: ffffc90003e0fc7c
[  751.558245][T24977] R13: ffffc90003e0fc78 R14: ffffc90003e0fc7c R15: 0000200000000000
[  751.558279][T24977]  _copy_from_user+0x7a/0xb0
[  751.558303][T24977]  do_sys_poll+0x258/0x1110
[  751.558335][T24977]  ? __lock_acquire+0x683/0x2cf0
[  751.558367][T24977]  ? __pfx_do_sys_poll+0x10/0x10
[  751.558390][T24977]  ? aa_file_perm+0x18b/0x15f0
[  751.558496][T24977]  ? ktime_get_ts64+0xa9/0x410
[  751.558547][T24977]  ? __pfx_timespec64_add_safe+0x10/0x10
[  751.558581][T24977]  __x64_sys_poll+0x190/0x360
[  751.558606][T24977]  ? __pfx___x64_sys_poll+0x10/0x10
[  751.558639][T24977]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.558657][T24977]  do_syscall_64+0x174/0x580
[  751.558676][T24977]  ? trace_irq_disable+0x3b/0x140
[  751.558699][T24977]  ? clear_bhb_loop+0x40/0x90
[  751.558722][T24977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  751.558739][T24977] RIP: 0033:0x7f9344b9de59
[  751.558755][T24977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  751.558769][T24977] RSP: 002b:00007f9345ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  751.558787][T24977] RAX: ffffffffffffffda RBX: 00007f9344e25fa0 RCX: 00007f9344b9de59
[  751.558807][T24977] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000
[  751.558820][T24977] RBP: 00007f9345ab7090 R08: 0000000000000000 R09: 0000000000000000
[  751.558831][T24977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  751.558843][T24977] R13: 00007f9344e26038 R14: 00007f9344e25fa0 R15: 00007ffec320e138
[  751.558875][T24977]  </TASK>
[  751.937279][T20370] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  751.975759][T20361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  752.107484][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  752.259394][    C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  752.293160][T24997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4835'.
[  752.294426][T24992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4833'.
[  752.305185][T24999] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  752.328568][T24992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4833'.
[  752.367683][T24992] netlink: 58 bytes leftover after parsing attributes in process `syz.0.4833'.
[  752.609508][    C1] IPv6: veth0_to_bridge: IPv6 duplicate address fe80::a8aa:aaff:feaa:aa1b used by aa:aa:aa:aa:aa:1b detected!
[  752.663171][T25008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4838'.
[  752.668782][T25013] netlink: 'syz.1.4840': attribute type 4 has an invalid length.
[  752.685108][T25012] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4839'.
[  752.705259][T25008] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  752.710614][T25013] netlink: 'syz.1.4840': attribute type 4 has an invalid length.
[  752.737818][T25013] netlink: 'syz.1.4840': attribute type 4 has an invalid length.
[  753.105226][T25026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4843'.
[  753.172015][T25028] netlink: 'syz.3.4845': attribute type 1 has an invalid length.
[  753.195316][T25029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4843'.
[  753.502299][T25028] bond5: entered promiscuous mode
[  753.507816][T25028] 8021q: adding VLAN 0 to HW filter on device bond5
[  753.537013][T25038] nbd: must specify at least one socket
[  753.633689][T25038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4847'.
[  753.763985][T25045] netlink: 'syz.1.4850': attribute type 24 has an invalid length.
[  754.173072][T25062] netlink: 'syz.0.4854': attribute type 4 has an invalid length.
[  754.196146][T25062] netlink: 'syz.0.4854': attribute type 4 has an invalid length.
[  754.209727][T25062] netlink: 'syz.0.4854': attribute type 4 has an invalid length.
[  754.248566][T25068] netlink: 'syz.2.4856': attribute type 1 has an invalid length.
[  754.354958][T25071] bond9: Unable to set down delay as MII monitoring is disabled
[  754.373832][T25071] bond9 (unregistering): Released all slaves
[  754.463883][T25068] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  754.747959][T25077] syzkaller0: entered promiscuous mode
[  754.763791][T25077] syzkaller0: entered allmulticast mode
[  755.107435][T25095] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4862'.
[  755.685354][T25121] netlink: 'syz.3.4869': attribute type 1 has an invalid length.
[  755.962779][T25127] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4869'.
[  756.062601][T25121] 8021q: adding VLAN 0 to HW filter on device bond7
[  756.082270][T25121] bond6: (slave bond7): making interface the new active one
[  756.094360][T25121] bond6: (slave bond7): Enslaving as an active interface with an up link
[  756.230428][T25145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4873'.
[  756.268427][T25145] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4873'.
[  757.112116][T25187] xt_CT: You must specify a L4 protocol and not use inversions on it
[  757.320984][ T5290] veth0_macvtap: left promiscuous mode
[  757.661329][T25206] netlink: 388 bytes leftover after parsing attributes in process `syz.1.4885'.
[  757.690577][T25202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4887'.
[  757.917318][T25214] netlink: 'syz.1.4889': attribute type 4 has an invalid length.
[  757.956828][T25214] netlink: 'syz.1.4889': attribute type 4 has an invalid length.
[  758.058428][T25214] netlink: 'syz.1.4889': attribute type 4 has an invalid length.
[  758.079120][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  758.262647][T25225] ip6tnl3: entered allmulticast mode
[  758.456806][T25231] netlink: 10 bytes leftover after parsing attributes in process `syz.1.4894'.
[  758.495251][T25231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4894'.
[  758.759757][T25247] netlink: 'syz.0.4899': attribute type 4 has an invalid length.
[  759.145052][T25258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4903'.
[  759.574295][T25274] netlink: 'syz.2.4908': attribute type 4 has an invalid length.
[  759.603123][T25274] netlink: 'syz.2.4908': attribute type 4 has an invalid length.
[  759.634141][T25274] netlink: 'syz.2.4908': attribute type 4 has an invalid length.
[  759.895397][T25291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4911'.
[  759.935810][T25284] lo speed is unknown, defaulting to 1000
[  761.080359][T25322] netlink: 'syz.0.4924': attribute type 4 has an invalid length.
[  761.089153][T25322] netlink: 'syz.0.4924': attribute type 4 has an invalid length.
[  761.117806][T25322] netlink: 'syz.0.4924': attribute type 4 has an invalid length.
[  761.310150][T25325] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.4925'.
[  761.693305][T25334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4929'.
[  761.717842][T25336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4929'.
[  761.842418][T25339] syzkaller0: entered promiscuous mode
[  761.869070][T25339] syzkaller0: entered allmulticast mode
[  761.899239][T25339] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  761.939325][T25339] tipc: Resetting bearer <eth:syzkaller0>
[  761.963145][T25337] tipc: Resetting bearer <eth:syzkaller0>
[  762.080337][T25337] tipc: Disabling bearer <eth:syzkaller0>
[  762.171562][T25347] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4932'.
[  762.209421][T25347] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4932'.
[  762.245274][T25327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4926'.
[  762.815415][T25371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4938'.
[  763.268629][T25382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4942'.
[  763.316737][T25383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4943'.
[  763.546207][T25388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4945'.
[  763.586452][T25388] netlink: 'syz.2.4945': attribute type 12 has an invalid length.
[  763.619383][T25388] netlink: 'syz.2.4945': attribute type 13 has an invalid length.
[  764.319320][T25419] netlink: 'syz.4.4955': attribute type 4 has an invalid length.
[  764.494834][T25426] bridge0: port 4(veth0_virt_wifi) entered blocking state
[  764.532112][T25426] bridge0: port 4(veth0_virt_wifi) entered disabled state
[  764.549429][T25426] veth0_virt_wifi: entered allmulticast mode
[  764.596258][T25426] veth0_virt_wifi: entered promiscuous mode
[  764.614889][T25426] bridge0: port 4(veth0_virt_wifi) entered blocking state
[  764.622193][T25426] bridge0: port 4(veth0_virt_wifi) entered forwarding state
[  768.736977][T25438] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  768.978265][T25464] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  769.008018][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  769.031918][T25468] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.880528][T25509] __nla_validate_parse: 6 callbacks suppressed
[  769.880548][T25509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4974'.
[  769.920416][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[  770.290840][T25521] lo speed is unknown, defaulting to 1000
[  770.318515][T25532] syzkaller1: entered promiscuous mode
[  770.350773][T25532] syzkaller1: entered allmulticast mode
[  770.407448][T25528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4979'.
[  770.597722][T25533] batadv0: entered promiscuous mode
[  770.712901][T25533] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  770.818453][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4980'.
[  771.524247][T25557] dummy0: left allmulticast mode
[  771.632999][T25562] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  771.640340][T25562] IPv6: NLM_F_CREATE should be set when creating new route
[  771.684337][T25554] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  771.725080][T25557] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  772.057365][T25570] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4986'.
[  772.379122][T25587] syzkaller1: entered promiscuous mode
[  772.428483][T25587] syzkaller1: entered allmulticast mode
[  772.633688][T25607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4992'.
[  773.674948][T25636] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  773.987974][T25654] IPVS: Unknown mcast interface: rose0
[  774.191723][T25658] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5004'.
[  774.222358][T25657] lo speed is unknown, defaulting to 1000
[  774.574755][T25674] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20004
[  774.617868][T25663] syzkaller0: entered promiscuous mode
[  774.637179][T25663] syzkaller0: entered allmulticast mode
[  774.666142][T25676] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5010'.
[  774.788093][T25681] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5011'.
[  774.833144][T25682] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5011'.
[  774.992042][T25685] sctp: [Deprecated]: syz.4.5012 (pid 25685) Use of int in max_burst socket option deprecated.
[  774.992042][T25685] Use struct sctp_assoc_value instead
[  779.114716][T25706] FAULT_INJECTION: forcing a failure.
[  779.114716][T25706] name failslab, interval 1, probability 0, space 0, times 0
[  779.145676][T25706] CPU: 0 UID: 0 PID: 25706 Comm: syz.3.5017 Not tainted syzkaller #0 PREEMPT(full) 
[  779.145704][T25706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  779.145716][T25706] Call Trace:
[  779.145724][T25706]  <TASK>
[  779.145732][T25706]  dump_stack_lvl+0xe8/0x150
[  779.145767][T25706]  should_fail_ex+0x40c/0x560
[  779.145801][T25706]  should_failslab+0xa8/0x100
[  779.145831][T25706]  kmem_cache_alloc_lru_noprof+0xa7/0x5f0
[  779.145857][T25706]  ? hugetlbfs_alloc_inode+0xef/0x130
[  779.145918][T25706]  ? hugetlbfs_alloc_inode+0xef/0x130
[  779.145947][T25706]  hugetlbfs_alloc_inode+0xef/0x130
[  779.145971][T25706]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  779.145993][T25706]  alloc_inode+0x6a/0x1b0
[  779.146025][T25706]  new_inode+0x1f/0x170
[  779.146052][T25706]  hugetlbfs_get_inode+0x73/0x660
[  779.146071][T25706]  ? fput+0xa0/0xd0
[  779.146099][T25706]  hugetlb_file_setup+0x21d/0x630
[  779.146123][T25706]  ksys_mmap_pgoff+0x1ec/0x760
[  779.146148][T25706]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.146170][T25706]  do_syscall_64+0x174/0x580
[  779.146190][T25706]  ? trace_irq_disable+0x3b/0x140
[  779.146215][T25706]  ? clear_bhb_loop+0x40/0x90
[  779.146239][T25706]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  779.146258][T25706] RIP: 0033:0x7f9344b9de59
[  779.146277][T25706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  779.146294][T25706] RSP: 002b:00007f9345ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  779.146315][T25706] RAX: ffffffffffffffda RBX: 00007f9344e25fa0 RCX: 00007f9344b9de59
[  779.146329][T25706] RDX: 0000000002000009 RSI: 000000000095c000 RDI: 0000200000000000
[  779.146342][T25706] RBP: 00007f9345ab7090 R08: ffffffffffffffff R09: 0000000000000000
[  779.146355][T25706] R10: 8c4b815a5465c2b1 R11: 0000000000000246 R12: 0000000000000001
[  779.146368][T25706] R13: 00007f9344e26038 R14: 00007f9344e25fa0 R15: 00007ffec320e138
[  779.146400][T25706]  </TASK>
[  779.510123][T25711] x_tables: duplicate underflow at hook 3
[  780.075461][T20370] bond0 (unregistering): Released all slaves
[  780.099831][T20370] bond1 (unregistering): Released all slaves
[  780.115298][T20370] bond2 (unregistering): Released all slaves
[  780.130729][T20370] bond3 (unregistering): Released all slaves
[  780.145773][T20370] bond4 (unregistering): Released all slaves
[  780.165571][T20370] bond5 (unregistering): Released all slaves
[  780.187859][T20370] bond6 (unregistering): Released all slaves
[  780.206105][T20370] bond7 (unregistering): Released all slaves
[  780.222551][T20370] bond8 (unregistering): Released all slaves
[  780.240256][T20370] bond9 (unregistering): Released all slaves
[  780.262286][T20370] bond10 (unregistering): Released all slaves
[  780.286945][T20370] bond11 (unregistering): Released all slaves
[  780.303793][T20370] bond12 (unregistering): Released all slaves
[  780.320964][T20370] bond13 (unregistering): Released all slaves
[  780.344461][T20370] bond14 (unregistering): Released all slaves
[  780.361330][T20370] bond15 (unregistering): Released all slaves
[  780.381143][T20370] bond16 (unregistering): (slave veth5): Releasing active interface
[  780.401960][T20370] bond16 (unregistering): (slave batadv0): Releasing active interface
[  780.412314][T20370] bond16 (unregistering): Released all slaves
[  780.427756][T20370] bond17 (unregistering): Released all slaves
[  780.441423][T20370] bond18 (unregistering): Released all slaves
[  780.455057][T25715] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  780.545172][T25720] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5023'.
[  780.715368][T20370] : left promiscuous mode
[  780.894286][T25737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5027'.
[  781.111103][T20370] tipc: Disabling bearer <eth:vlan0>
[  781.164502][T20370] tipc: Left network mode
[  781.344527][T25753] FAULT_INJECTION: forcing a failure.
[  781.344527][T25753] name failslab, interval 1, probability 0, space 0, times 0
[  781.381027][T25751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5032'.
[  781.403969][T25754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5034'.
[  781.422697][T25753] CPU: 1 UID: 0 PID: 25753 Comm: syz.3.5033 Not tainted syzkaller #0 PREEMPT(full) 
[  781.422726][T25753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  781.422738][T25753] Call Trace:
[  781.422748][T25753]  <TASK>
[  781.422758][T25753]  dump_stack_lvl+0xe8/0x150
[  781.422794][T25753]  should_fail_ex+0x40c/0x560
[  781.422829][T25753]  should_failslab+0xa8/0x100
[  781.422859][T25753]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  781.422883][T25753]  ? security_inode_alloc+0x39/0x310
[  781.422910][T25753]  ? security_inode_alloc+0x39/0x310
[  781.422943][T25753]  security_inode_alloc+0x39/0x310
[  781.422973][T25753]  inode_init_always_gfp+0x97e/0xd30
[  781.423003][T25753]  ? __pfx_hugetlbfs_alloc_inode+0x10/0x10
[  781.423026][T25753]  alloc_inode+0x82/0x1b0
[  781.423051][T25753]  new_inode+0x1f/0x170
[  781.423079][T25753]  hugetlbfs_get_inode+0x73/0x660
[  781.423098][T25753]  ? fput+0xa0/0xd0
[  781.423126][T25753]  hugetlb_file_setup+0x21d/0x630
[  781.423151][T25753]  ksys_mmap_pgoff+0x1ec/0x760
[  781.423176][T25753]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.423198][T25753]  do_syscall_64+0x174/0x580
[  781.423228][T25753]  ? trace_irq_disable+0x3b/0x140
[  781.423253][T25753]  ? clear_bhb_loop+0x40/0x90
[  781.423277][T25753]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  781.423297][T25753] RIP: 0033:0x7f9344b9de59
[  781.423314][T25753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  781.423329][T25753] RSP: 002b:00007f9345ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  781.423350][T25753] RAX: ffffffffffffffda RBX: 00007f9344e25fa0 RCX: 00007f9344b9de59
[  781.423364][T25753] RDX: 0000000002000009 RSI: 000000000095c000 RDI: 0000200000000000
[  781.423378][T25753] RBP: 00007f9345ab7090 R08: ffffffffffffffff R09: 0000000000000000
[  781.423391][T25753] R10: 8c4b815a5465c2b1 R11: 0000000000000246 R12: 0000000000000001
[  781.423404][T25753] R13: 00007f9344e26038 R14: 00007f9344e25fa0 R15: 00007ffec320e138
[  781.423431][T25753]  </TASK>
[  781.450950][T25760] xt_TCPMSS: Only works on TCP SYN packets
[  781.704327][T25758] netlink: 'syz.0.5035': attribute type 1 has an invalid length.
[  781.744042][T25762] gretap2: entered promiscuous mode
[  782.363496][T25797] netlink: 'syz.0.5041': attribute type 1 has an invalid length.
[  782.390123][T25799] netlink: 200 bytes leftover after parsing attributes in process `syz.3.5042'.
[  782.437714][T25799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5042'.
[  782.887463][T25797] 8021q: adding VLAN 0 to HW filter on device bond5
[  782.929310][T25821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5044'.
[  782.964598][T25821] tc_dump_action: action bad kind
[  783.073271][T25829] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  783.089115][T25829] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  783.475554][T25844] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5049'.
[  783.623556][T20370] hsr_slave_0: left promiscuous mode
[  783.668020][T20370] hsr_slave_1: left promiscuous mode
[  785.110739][T25907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5059'.
[  785.167005][T25909] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5059'.
[  785.385704][T20370] IPVS: stop unused estimator thread 0...
[  785.904677][T25942] lo speed is unknown, defaulting to 1000
[  786.161583][T25949] netlink: 'syz.0.5072': attribute type 1 has an invalid length.
[  786.292654][T25951] bond6: (slave gretap2): making interface the new active one
[  786.311291][T25951] bond6: (slave gretap2): Enslaving as an active interface with an up link
[  786.427341][T25956] __nla_validate_parse: 4 callbacks suppressed
[  786.427361][T25956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5073'.
[  786.772773][T25965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5076'.
[  786.825317][T25965] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  786.841714][T25965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5076'.
[  786.898315][T25970] xt_policy: output policy not valid in PREROUTING and INPUT
[  786.921690][T25973] xt_TPROXY: Can be used only with -p tcp or -p udp
[  787.012499][T25975] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5080'.
[  787.224263][T25987] xt_hashlimit: size too large, truncated to 1048576
[  787.657433][T26011] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5090'.
[  787.700233][T26011] netdevsim netdevsim3 
€Â: renamed from netdevsim0 (while UP)
[  787.779579][T26016] lo speed is unknown, defaulting to 1000
[  787.814457][T26016] lo speed is unknown, defaulting to 1000
[  787.828124][T26020] lo speed is unknown, defaulting to 1000
[  787.872884][T26016] lo speed is unknown, defaulting to 1000
[  787.904781][T26024] openvswitch: netlink: Key 0 has unexpected len 4 expected 0
[  788.067990][T26020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  788.156480][T26040] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5100'.
[  788.201611][T26036] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.5100'.
[  788.213254][T26041] netlink: 'syz.0.5099': attribute type 13 has an invalid length.
[  788.410389][T14571] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  788.458543][T26046] hsr0: entered allmulticast mode
[  788.523106][T26016] infiniband syz1: set down
[  788.527704][T14571] lo speed is unknown, defaulting to 1000
[  788.535077][T26016] infiniband syz1: added lo
[  788.549812][T14571] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  788.575099][T26016] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  788.591873][T26016] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  788.609726][T26016] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  788.654178][T26016] RDS/IB: syz1: added
[  788.658268][T26016] smc: adding ib device syz1 with port count 1
[  788.665269][T26016] smc:    ib device syz1 port 1 has no pnetid
[  788.672497][T14571] lo speed is unknown, defaulting to 1000
[  788.681024][T26016] lo speed is unknown, defaulting to 1000
[  788.726930][T26054] xt_hashlimit: size too large, truncated to 1048576
[  788.895297][T26057] netlink: 'syz.2.5106': attribute type 1 has an invalid length.
[  789.095709][T26068] SET target dimension over the limit!
[  789.110277][T26016] lo speed is unknown, defaulting to 1000
[  789.574265][T26076] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.608899][T26016] lo speed is unknown, defaulting to 1000
[  789.740232][T26076] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  789.946029][T26076] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.127861][T26093] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.149519][T26016] lo speed is unknown, defaulting to 1000
[  790.167611][T26099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5119'.
[  790.177938][T26097] netlink: 'syz.2.5119': attribute type 10 has an invalid length.
[  790.218423][T26076] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.272707][T26097] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  790.434171][T26093] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.607862][T26106] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  790.621472][T20370] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  790.630016][T26016] lo speed is unknown, defaulting to 1000
[  790.657122][T20371] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  790.811140][T26093] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  790.903027][ T1356] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  790.948215][ T1356] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  791.047381][T26093] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  791.085873][T26118] netlink: 'syz.0.5126': attribute type 1 has an invalid length.
[  791.155816][T26118] 8021q: adding VLAN 0 to HW filter on device bond7
[  791.165114][T26016] lo speed is unknown, defaulting to 1000
[  791.174704][T26120] lo: Caught tx_queue_len zero misconfig
[  791.252662][T26118] 8021q: adding VLAN 0 to HW filter on device bond7
[  791.263871][T26118] bond7: (slave ip6tnl0): The slave device specified does not support setting the MAC address
[  791.275689][T26118] bond7: (slave ip6tnl0): Error -95 calling set_mac_address
[  791.324413][T26120] bond7: entered promiscuous mode
[  791.333670][T26120] bond7: entered allmulticast mode
[  791.438387][ T1356] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  791.536746][ T1356] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  791.546071][T26016] lo speed is unknown, defaulting to 1000
[  791.583041][ T1356] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  791.603198][T26131] nbd: nbd0 already in use
[  791.609678][T26131] block nbd0: NBD_DISCONNECT
[  791.614388][T26131] block nbd0: Send disconnect failed -32
[  791.620912][T26131] block nbd0: Send disconnect failed -32
[  791.626617][T26131] block nbd0: Send disconnect failed -32
[  791.635287][T26131] block nbd0: shutting down sockets
[  791.665544][T20366] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  792.275208][T26016] lo speed is unknown, defaulting to 1000
[  792.355414][   T30] audit: type=1804 audit(1783078938.623:32): pid=26160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5135" name="/newroot/449/cgroup.controllers" dev="tmpfs" ino=2320 res=1 errno=0
[  792.438823][   T30] audit: type=1800 audit(1783078938.653:33): pid=26160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5135" name="cgroup.controllers" dev="tmpfs" ino=2320 res=0 errno=0
[  792.724758][T26172] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5139'.
[  793.229004][T26194] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5143'.
[  793.309578][T26173] netlink: 'syz.0.5138': attribute type 2 has an invalid length.
[  793.328366][T26173] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[  793.540999][T26209] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  793.872976][T26221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5151'.
[  793.909073][T26217] xt_CT: No such helper "snmp_trap"
[  794.046231][T26225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5153'.
[  794.263951][T26236] syzkaller0: entered promiscuous mode
[  794.287153][T26236] syzkaller0: entered allmulticast mode
[  794.463681][T26241] lo speed is unknown, defaulting to 1000
[  794.503272][T26241] lo speed is unknown, defaulting to 1000
[  795.024027][T26262] FAULT_INJECTION: forcing a failure.
[  795.024027][T26262] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  795.070203][T26262] CPU: 0 UID: 0 PID: 26262 Comm: syz.3.5165 Not tainted syzkaller #0 PREEMPT(full) 
[  795.070231][T26262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  795.070243][T26262] Call Trace:
[  795.070251][T26262]  <TASK>
[  795.070260][T26262]  dump_stack_lvl+0xe8/0x150
[  795.070296][T26262]  should_fail_ex+0x40c/0x560
[  795.070331][T26262]  _copy_from_user+0x2d/0xb0
[  795.070362][T26262]  ___sys_sendmsg+0x1c6/0x360
[  795.070388][T26262]  ? __lock_acquire+0x683/0x2cf0
[  795.070419][T26262]  ? __pfx____sys_sendmsg+0x10/0x10
[  795.070441][T26262]  ? __lock_acquire+0x683/0x2cf0
[  795.070472][T26262]  ? kstrtouint+0x6e/0xe0
[  795.070538][T26262]  __sys_sendmmsg+0x273/0x4d0
[  795.070568][T26262]  ? __pfx___sys_sendmmsg+0x10/0x10
[  795.070602][T26262]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  795.070639][T26262]  ? ksys_write+0x242/0x270
[  795.070672][T26262]  ? __pfx_ksys_write+0x10/0x10
[  795.070705][T26262]  __x64_sys_sendmmsg+0xa0/0xc0
[  795.070726][T26262]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.070746][T26262]  do_syscall_64+0x174/0x580
[  795.070763][T26262]  ? trace_irq_disable+0x3b/0x140
[  795.070787][T26262]  ? clear_bhb_loop+0x40/0x90
[  795.070811][T26262]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.070830][T26262] RIP: 0033:0x7f9344b9de59
[  795.070850][T26262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  795.070867][T26262] RSP: 002b:00007f9345ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  795.070889][T26262] RAX: ffffffffffffffda RBX: 00007f9344e25fa0 RCX: 00007f9344b9de59
[  795.070903][T26262] RDX: 0000000000034000 RSI: 0000200000004380 RDI: 0000000000000003
[  795.070916][T26262] RBP: 00007f9345ab7090 R08: 0000000000000000 R09: 0000000000000000
[  795.070928][T26262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  795.070940][T26262] R13: 00007f9344e26038 R14: 00007f9344e25fa0 R15: 00007ffec320e138
[  795.070972][T26262]  </TASK>
[  796.507456][T26299] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5176'.
[  796.899649][T26317] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5179'.
[  797.470559][T26342] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.5186'.
[  797.505266][T26342] netlink: 4356 bytes leftover after parsing attributes in process `syz.2.5186'.
[  797.542061][T26351] netlink: 'syz.2.5186': attribute type 2 has an invalid length.
[  797.690626][T26351] : entered promiscuous mode
[  797.976085][T26373] netlink: 'syz.3.5195': attribute type 4 has an invalid length.
[  798.027809][T26377] netlink: 'syz.3.5195': attribute type 4 has an invalid length.
[  798.133399][T26380] netlink: 'syz.2.5192': attribute type 7 has an invalid length.
[  798.173257][T26380] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5192'.
[  798.960555][T26402] syzkaller1: entered promiscuous mode
[  798.966069][T26402] syzkaller1: entered allmulticast mode
[  798.987921][T26404] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5200'.
[  799.109245][T26415] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  799.148000][T26415] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  799.868843][T26427] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5207'.
[  799.954620][T26429] x_tables: ip_tables: icmp match: only valid for protocol 1
[  800.005264][T26427] ip6gre2: entered promiscuous mode
[  800.064167][T26427] ip6gre2: entered allmulticast mode
[  800.702483][T26449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5214'.
[  800.998068][T26452] syzkaller0: entered promiscuous mode
[  801.034694][T26457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5217'.
[  801.057201][T26452] syzkaller0: entered allmulticast mode
[  801.100697][T26460] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5218'.
[  801.572382][T26478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5223'.
[  801.617658][T26476] lo speed is unknown, defaulting to 1000
[  801.637070][T26476] lo speed is unknown, defaulting to 1000
[  802.109868][T26503] netlink: 'syz.2.5229': attribute type 1 has an invalid length.
[  802.312994][T26507] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5231'.
[  802.416973][T26513] netlink: 296 bytes leftover after parsing attributes in process `syz.1.5233'.
[  802.489098][T26516] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5234'.
[  803.080052][T26537] lo speed is unknown, defaulting to 1000
[  803.157687][T26537] lo speed is unknown, defaulting to 1000
[  803.205688][T26546] __nla_validate_parse: 33 callbacks suppressed
[  803.205706][T26546] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5243'.
[  803.626130][T26554] netlink: 'syz.1.5246': attribute type 1 has an invalid length.
[  803.779252][T26563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5249'.
[  803.840708][T26563] erspan0: entered promiscuous mode
[  803.872768][T26563] macvtap0: entered promiscuous mode
[  803.893575][T26563] macvtap0: entered allmulticast mode
[  803.914835][T26563] erspan0: entered allmulticast mode
[  804.938039][T26591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5254'.
[  805.041827][T26591] bond9: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  805.058962][T26591] bond9 (unregistering): Released all slaves
[  805.376442][T26606] lo speed is unknown, defaulting to 1000
[  805.400041][T26599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5256'.
[  805.430758][T26606] lo speed is unknown, defaulting to 1000
[  805.663279][T26621] lo speed is unknown, defaulting to 1000
[  806.070348][T26621] lo speed is unknown, defaulting to 1000
[  807.076789][T26655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5269'.
[  807.300241][T26651] gre0: left promiscuous mode
[  807.716765][T26651] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  807.755775][T26651] mac80211_hwsim hwsim23 wlan0: left promiscuous mode
[  807.772529][T26651] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  808.226745][T26677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5275'.
[  808.326785][T26681] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5274'.
[  808.554172][T26690] lo speed is unknown, defaulting to 1000
[  808.595966][T26690] lo speed is unknown, defaulting to 1000
[  808.668032][T26702] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5278'.
[  808.808586][T26704] can: request_module (can-proto-3) failed.
[  808.817596][T26710] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5283'.
[  808.846998][T26713] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5283'.
[  808.970574][T26718] pim6reg1: entered promiscuous mode
[  808.990679][T26719] netlink: 312 bytes leftover after parsing attributes in process `syz.2.5285'.
[  809.011533][T26718] pim6reg1: entered allmulticast mode
[  809.028467][T26719] netlink: 'syz.2.5285': attribute type 1 has an invalid length.
[  809.168813][T26731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5288'.
[  809.205897][T26717] lo speed is unknown, defaulting to 1000
[  809.216261][T26734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5289'.
[  809.307535][T26739] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5291'.
[  809.316453][T26717] lo speed is unknown, defaulting to 1000
[  809.806520][T26749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5294'.
[  810.188263][ T5635] block nbd0: Receive control failed (result -107)
[  810.590998][T26767] 
[  810.593365][T26767] ======================================================
[  810.600419][T26767] WARNING: possible circular locking dependency detected
[  810.603679][T26769] lo speed is unknown, defaulting to 1000
[  810.607518][T26767] syzkaller #0 Not tainted
[  810.617692][T26767] ------------------------------------------------------
[  810.624793][T26767] syz.2.5300/26767 is trying to acquire lock:
[  810.630870][T26767] ffff88805030ff18 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb5/0x2f0
[  810.639918][T26767] 
[  810.639918][T26767] but task is already holding lock:
[  810.647293][T26767] ffff88802a501828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  810.656809][T26767] 
[  810.656809][T26767] which lock already depends on the new lock.
[  810.656809][T26767] 
[  810.667204][T26767] 
[  810.667204][T26767] the existing dependency chain (in reverse order) is:
[  810.676204][T26767] 
[  810.676204][T26767] -> #6 (&q->elevator_lock){+.+.}-{4:4}:
[  810.684119][T26767]        __mutex_lock+0x19d/0x1550
[  810.689241][T26767]        elevator_change+0x1af/0x480
[  810.694626][T26767]        elevator_set_none+0xb5/0x140
[  810.699998][T26767]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  810.706502][T26767]        nbd_start_device+0x189/0xb30
[  810.712016][T26767]        nbd_genl_connect+0x1597/0x1c10
[  810.717558][T26767]        genl_family_rcv_msg_doit+0x233/0x340
[  810.723618][T26767]        genl_rcv_msg+0x614/0x7a0
[  810.728640][T26767]        netlink_rcv_skb+0x226/0x4a0
[  810.733933][T26767]        genl_rcv+0x28/0x40
[  810.738433][T26767]        netlink_unicast+0x7bb/0x940
[  810.743710][T26767]        netlink_sendmsg+0x813/0xb40
[  810.748994][T26767]        sock_sendmsg_nosec+0x13a/0x180
[  810.754560][T26767]        ____sys_sendmsg+0x54e/0x850
[  810.759855][T26767]        ___sys_sendmsg+0x2a5/0x360
[  810.765045][T26767]        __x64_sys_sendmsg+0x1b1/0x290
[  810.770579][T26767]        do_syscall_64+0x174/0x580
[  810.775681][T26767]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.782094][T26767] 
[  810.782094][T26767] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[  810.790779][T26767]        blk_alloc_queue+0x544/0x690
[  810.796129][T26767]        __blk_mq_alloc_disk+0x194/0x390
[  810.801752][T26767]        nbd_dev_add+0x494/0xb60
[  810.806683][T26767]        nbd_init+0x15f/0x1e0
[  810.811478][T26767]        do_one_initcall+0x250/0x870
[  810.816772][T26767]        do_initcall_level+0x10a/0x1a0
[  810.822320][T26767]        do_initcalls+0x59/0xa0
[  810.827337][T26767]        kernel_init_freeable+0x29d/0x3e0
[  810.833050][T26767]        kernel_init+0x1d/0x1d0
[  810.837894][T26767]        ret_from_fork+0x514/0xb70
[  810.843027][T26767]        ret_from_fork_asm+0x1a/0x30
[  810.848387][T26767] 
[  810.848387][T26767] -> #4 (fs_reclaim){+.+.}-{0:0}:
[  810.855606][T26767]        fs_reclaim_acquire+0x71/0x100
[  810.861062][T26767]        kmem_cache_alloc_node_noprof+0x6a/0x610
[  810.867379][T26767]        __alloc_skb+0x1d7/0x7a0
[  810.872495][T26767]        __ip6_append_data+0x2ec4/0x40c0
[  810.878252][T26767]        ip6_append_data+0x108/0x270
[  810.883542][T26767]        rawv6_sendmsg+0x1298/0x18c0
[  810.888860][T26767]        sock_sendmsg_nosec+0x10e/0x180
[  810.894401][T26767]        ____sys_sendmsg+0x54e/0x850
[  810.899682][T26767]        ___sys_sendmsg+0x2a5/0x360
[  810.904871][T26767]        __x64_sys_sendmsg+0x1b1/0x290
[  810.910320][T26767]        do_syscall_64+0x174/0x580
[  810.915419][T26767]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  810.922104][T26767] 
[  810.922104][T26767] -> #3 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  810.929828][T26767]        lock_sock_nested+0x41/0x100
[  810.935107][T26767]        inet_shutdown+0x6a/0x390
[  810.940200][T26767]        nbd_mark_nsock_dead+0x2cb/0x550
[  810.945824][T26767]        recv_work+0x1cee/0x1e10
[  810.950751][T26767]        process_scheduled_works+0xa8e/0x14e0
[  810.956923][T26767]        worker_thread+0xa47/0xfb0
[  810.962036][T26767]        kthread+0x388/0x470
[  810.966617][T26767]        ret_from_fork+0x514/0xb70
[  810.971724][T26767]        ret_from_fork_asm+0x1a/0x30
[  810.976997][T26767] 
[  810.976997][T26767] -> #2 (&nsock->tx_lock){+.+.}-{4:4}:
[  810.984632][T26767]        __mutex_lock+0x19d/0x1550
[  810.989735][T26767]        nbd_queue_rq+0x373/0x1150
[  810.994841][T26767]        blk_mq_dispatch_rq_list+0x499/0x1990
[  811.000984][T26767]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  811.007975][T26767]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  811.014463][T26767]        blk_mq_run_work_fn+0x16c/0x300
[  811.020001][T26767]        process_scheduled_works+0xa8e/0x14e0
[  811.026061][T26767]        worker_thread+0xa47/0xfb0
[  811.031165][T26767]        kthread+0x388/0x470
[  811.035744][T26767]        ret_from_fork+0x514/0xb70
[  811.040850][T26767]        ret_from_fork_asm+0x1a/0x30
[  811.046121][T26767] 
[  811.046121][T26767] -> #1 (&cmd->lock){+.+.}-{4:4}:
[  811.053319][T26767]        __mutex_lock+0x19d/0x1550
[  811.058422][T26767]        nbd_queue_rq+0xc1/0x1150
[  811.063435][T26767]        blk_mq_dispatch_rq_list+0x499/0x1990
[  811.069490][T26767]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  811.076327][T26767]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  811.082829][T26767]        blk_mq_run_work_fn+0x16c/0x300
[  811.088370][T26767]        process_scheduled_works+0xa8e/0x14e0
[  811.094430][T26767]        worker_thread+0xa47/0xfb0
[  811.099533][T26767]        kthread+0x388/0x470
[  811.104118][T26767]        ret_from_fork+0x514/0xb70
[  811.109221][T26767]        ret_from_fork_asm+0x1a/0x30
[  811.114494][T26767] 
[  811.114494][T26767] -> #0 (set->srcu){.+.+}-{0:0}:
[  811.121699][T26767]        __lock_acquire+0x1520/0x2cf0
[  811.127072][T26767]        lock_sync+0x9d/0x120
[  811.131746][T26767]        __synchronize_srcu+0xc9/0x2f0
[  811.137207][T26767]        elevator_switch+0x1e8/0x7b0
[  811.142501][T26767]        elevator_change+0x2fa/0x480
[  811.148297][T26767]        elevator_set_default+0x375/0x440
[  811.154010][T26767]        blk_register_queue+0x3f3/0x4e0
[  811.159619][T26767]        __add_disk+0x6cb/0xe30
[  811.164485][T26767]        add_disk_fwnode+0xfb/0x4b0
[  811.169675][T26767]        nbd_dev_add+0x733/0xb60
[  811.174605][T26767]        nbd_genl_connect+0x992/0x1c10
[  811.180056][T26767]        genl_family_rcv_msg_doit+0x233/0x340
[  811.186116][T26767]        genl_rcv_msg+0x614/0x7a0
[  811.191226][T26767]        netlink_rcv_skb+0x226/0x4a0
[  811.196506][T26767]        genl_rcv+0x28/0x40
[  811.201006][T26767]        netlink_unicast+0x7bb/0x940
[  811.206289][T26767]        netlink_sendmsg+0x813/0xb40
[  811.211569][T26767]        sock_sendmsg_nosec+0x13a/0x180
[  811.217201][T26767]        ____sys_sendmsg+0x54e/0x850
[  811.222478][T26767]        ___sys_sendmsg+0x2a5/0x360
[  811.227667][T26767]        __x64_sys_sendmsg+0x1b1/0x290
[  811.233121][T26767]        do_syscall_64+0x174/0x580
[  811.238223][T26767]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.244632][T26767] 
[  811.244632][T26767] other info that might help us debug this:
[  811.244632][T26767] 
[  811.254849][T26767] Chain exists of:
[  811.254849][T26767]   set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock
[  811.254849][T26767] 
[  811.268552][T26767]  Possible unsafe locking scenario:
[  811.268552][T26767] 
[  811.276004][T26767]        CPU0                    CPU1
[  811.281845][T26767]        ----                    ----
[  811.287243][T26767]   lock(&q->elevator_lock);
[  811.291830][T26767]                                lock(&q->q_usage_counter(io)#49);
[  811.299725][T26767]                                lock(&q->elevator_lock);
[  811.306831][T26767]   sync(set->srcu);
[  811.310979][T26767] 
[  811.310979][T26767]  *** DEADLOCK ***
[  811.310979][T26767] 
[  811.319106][T26767] 6 locks held by syz.2.5300/26767:
[  811.324295][T26767]  #0: ffffffff90099f68 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  811.333242][T26767]  #1: ffffffff90099da0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  811.342209][T26767]  #2: ffff88803394d9c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x4b0
[  811.352648][T26767]  #3: ffff88802a5018b0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4e0
[  811.362505][T26767]  #4: ffff88802a501338 (&q->q_usage_counter(queue)#54){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  811.373378][T26767]  #5: ffff88802a501828 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  811.383289][T26767] 
[  811.383289][T26767] stack backtrace:
[  811.389173][T26767] CPU: 0 UID: 0 PID: 26767 Comm: syz.2.5300 Not tainted syzkaller #0 PREEMPT(full) 
[  811.389192][T26767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  811.389202][T26767] Call Trace:
[  811.389211][T26767]  <TASK>
[  811.389220][T26767]  dump_stack_lvl+0xe8/0x150
[  811.389250][T26767]  print_circular_bug+0x2e1/0x300
[  811.389268][T26767]  check_noncircular+0x12e/0x150
[  811.389294][T26767]  __lock_acquire+0x1520/0x2cf0
[  811.389315][T26767]  ? check_noncircular+0xda/0x150
[  811.389340][T26767]  ? lockdep_unlock+0x5d/0xd0
[  811.389357][T26767]  ? __lock_acquire+0x13e8/0x2cf0
[  811.389377][T26767]  ? __lock_acquire+0x13e8/0x2cf0
[  811.389398][T26767]  ? __synchronize_srcu+0xb5/0x2f0
[  811.389417][T26767]  lock_sync+0x9d/0x120
[  811.389435][T26767]  ? __synchronize_srcu+0xb5/0x2f0
[  811.389457][T26767]  __synchronize_srcu+0xc9/0x2f0
[  811.389477][T26767]  ? __pfx___synchronize_srcu+0x10/0x10
[  811.389496][T26767]  ? do_raw_spin_lock+0x12b/0x2f0
[  811.389516][T26767]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  811.389613][T26767]  ? ktime_get_mono_fast_ns+0x2d2/0x2f0
[  811.389634][T26767]  ? synchronize_srcu+0x20a/0x260
[  811.389655][T26767]  elevator_switch+0x1e8/0x7b0
[  811.389670][T26767]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  811.389691][T26767]  elevator_change+0x2fa/0x480
[  811.389706][T26767]  ? do_raw_spin_unlock+0xf5/0x210
[  811.389724][T26767]  elevator_set_default+0x375/0x440
[  811.389741][T26767]  ? __pfx_elevator_set_default+0x10/0x10
[  811.389762][T26767]  ? disk_register_independent_access_ranges+0x2d8/0x380
[  811.389817][T26767]  ? blk_crypto_sysfs_register+0x11c/0x170
[  811.389862][T26767]  blk_register_queue+0x3f3/0x4e0
[  811.389884][T26767]  __add_disk+0x6cb/0xe30
[  811.389908][T26767]  add_disk_fwnode+0xfb/0x4b0
[  811.389930][T26767]  nbd_dev_add+0x733/0xb60
[  811.389952][T26767]  ? __pfx_nbd_dev_add+0x10/0x10
[  811.389978][T26767]  ? bpf_lsm_capable+0x9/0x20
[  811.389998][T26767]  ? security_capable+0x7e/0x2c0
[  811.390019][T26767]  ? radix_tree_lookup+0x25c/0x290
[  811.390096][T26767]  nbd_genl_connect+0x992/0x1c10
[  811.390118][T26767]  ? __pfx_nbd_genl_connect+0x10/0x10
[  811.390137][T26767]  ? rcu_is_watching+0x15/0xb0
[  811.390159][T26767]  ? trace_kmalloc+0x2a/0xf0
[  811.390179][T26767]  ? __kmalloc_noprof+0x396/0x720
[  811.390198][T26767]  ? __nla_parse+0x40/0x60
[  811.390217][T26767]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  811.390233][T26767]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  811.390257][T26767]  genl_family_rcv_msg_doit+0x233/0x340
[  811.390275][T26767]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  811.390303][T26767]  ? __lock_acquire+0x683/0x2cf0
[  811.390326][T26767]  genl_rcv_msg+0x614/0x7a0
[  811.390351][T26767]  ? __pfx_genl_rcv_msg+0x10/0x10
[  811.390373][T26767]  ? __pfx_nbd_genl_connect+0x10/0x10
[  811.390396][T26767]  netlink_rcv_skb+0x226/0x4a0
[  811.390415][T26767]  ? __pfx_genl_rcv_msg+0x10/0x10
[  811.390437][T26767]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  811.390461][T26767]  ? down_read+0x2be/0x330
[  811.390479][T26767]  genl_rcv+0x28/0x40
[  811.390499][T26767]  netlink_unicast+0x7bb/0x940
[  811.390520][T26767]  netlink_sendmsg+0x813/0xb40
[  811.390544][T26767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  811.390564][T26767]  ? aa_sock_msg_perm+0xf1/0x1b0
[  811.390587][T26767]  ? __pfx_netlink_sendmsg+0x10/0x10
[  811.390605][T26767]  sock_sendmsg_nosec+0x13a/0x180
[  811.390628][T26767]  ____sys_sendmsg+0x54e/0x850
[  811.390649][T26767]  ? __pfx_____sys_sendmsg+0x10/0x10
[  811.390670][T26767]  ? import_iovec+0x73/0xa0
[  811.390689][T26767]  ___sys_sendmsg+0x2a5/0x360
[  811.390706][T26767]  ? __lock_acquire+0x683/0x2cf0
[  811.390728][T26767]  ? __pfx____sys_sendmsg+0x10/0x10
[  811.390748][T26767]  ? futex_wake+0x51b/0x5f0
[  811.390783][T26767]  ? __fget_files+0x2a/0x420
[  811.390802][T26767]  ? __fget_files+0x3a2/0x420
[  811.390825][T26767]  __x64_sys_sendmsg+0x1b1/0x290
[  811.390844][T26767]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  811.390869][T26767]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.390886][T26767]  do_syscall_64+0x174/0x580
[  811.390902][T26767]  ? trace_irq_disable+0x3b/0x140
[  811.390922][T26767]  ? clear_bhb_loop+0x40/0x90
[  811.390939][T26767]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  811.390955][T26767] RIP: 0033:0x7f074779de59
[  811.390970][T26767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  811.390985][T26767] RSP: 002b:00007f07459f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  811.391002][T26767] RAX: ffffffffffffffda RBX: 00007f0747a25fa0 RCX: 00007f074779de59
[  811.391014][T26767] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 000000000000000a
[  811.391024][T26767] RBP: 00007f0747833e6f R08: 0000000000000000 R09: 0000000000000000
[  811.391034][T26767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  811.391044][T26767] R13: 00007f0747a26038 R14: 00007f0747a25fa0 R15: 00007fffc7be10f8
[  811.391062][T26767]  </TASK>
[  811.392097][T26769] lo speed is unknown, defaulting to 1000
[  812.030518][T25705] udevd[25705]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory