last executing test programs:

6m3.874992621s ago: executing program 2 (id=2818):
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000002003d5a2016af7abe8b884d81bbd07d94ad3d2d0175f3868fc6e6d26f8b151725886e0ee9c4139454d2d233bc338db0f04f21e93da5dffa0597284f79182a38c3502cd7e022445c215ea08e4ae6e1ec421aca"], 0x0, 0x1a, 0x0, 0xa}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) (async)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
socket$inet(0x2, 0x2, 0x2) (async)
r3 = socket$inet(0x2, 0x2, 0x2)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) (async)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0) (async)
setsockopt$inet_msfilter(r3, 0x0, 0x29, 0x0, 0x0)
r5 = socket$kcm(0x29, 0x5, 0x0)
connect(r0, &(0x7f0000000540)=@sco={0x1f, @none}, 0x80)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000003000000000000008000000018430000f9ffffff000000000000000075500400100000000822d4000080000018110000", @ANYRES32=0x1, @ANYBLOB="00000000000000001d010000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xe, 0x5, 0x9a1c}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x1, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x0, 0xc}], 0x10, 0x2}, 0x94)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000840)={r3, r6}) (async)
ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000840)={r3, r6})
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb664", 0xc2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}], 0x1}}], 0x2, 0x2090)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$inet(0x2, 0x4000000000000001, 0x0) (async)
socket$inet(0x2, 0x4000000000000001, 0x0)

6m3.53145947s ago: executing program 2 (id=2823):
r0 = socket(0x29, 0x2, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) (async)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50)

6m2.609923736s ago: executing program 2 (id=2835):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x10}}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0x1}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x7, 0xe, &(0x7f0000000d80)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
recvmmsg(r0, &(0x7f000000aa80), 0x0, 0x10000, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)

6m2.287704145s ago: executing program 2 (id=2839):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x14, &(0x7f0000000100)={0xa, 0x4e23, 0x3f89, @loopback}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYRES32=r6, @ANYBLOB="05002d0001000000080006"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x20000084)
sendmsg$FOU_CMD_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000014ca14b0100d67f2e497ecbdf072dabb887b08399f3787630f135c31b1ffafeb327b0e4e8e1580cfb5fc0518b210b01", @ANYRES16=r2, @ANYBLOB="0100fdffffff00000000260000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008005100000000000c008f00feffffffffffffff0c0090000000000000000000"], 0x54}}, 0x0)
gettid()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b80)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x0, 0x3d8, 0xd0, 0x3d8, 0x3d8, 0x4a8, 0x3d8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {}, {0x11}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, [0xffffff00], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'pim6reg1\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8)
getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0)

6m1.939053186s ago: executing program 2 (id=2840):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xb, 0x9}, 0x48) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x1e, 0x3, 0x0) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000100), 0x4) (async)
unshare(0x22020400) (async)
r5 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, 0x0, 0x78) (async)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f00000000c0), 0x4)
r6 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffd, 0x4000}, 0xfffffffffffffe31) (async)
r7 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, 0x0, 0x0) (async)
accept4(r8, 0x0, 0x0, 0x0) (async)
poll(&(0x7f0000000380)=[{r3, 0xc600}], 0x1, 0x4) (async)
ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}})
recvmsg(r2, &(0x7f0000004ac0)={0x0, 0x0, 0x0}, 0x4002) (async)
recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000002a00)=""/4106, 0x100a}, {0x0}], 0x2}, 0x100)
sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010018"], 0x1c}}, 0x0) (async)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) (async)
write(r1, &(0x7f0000000400)="5f78644a041d3aafb12673378982f9e815aa0978a0e2c6e20a98ac8181eefa4fd2e00624b73b7562d58032093361fc75559cb78ddfbf6b8a7e9867d509dcdebfba5404ed2b045b319f34a17cdeeb123e352e379515178482a139c14551ea881144e8eef10e0e92ef96bc8076fa4765f4531282b74393e09b278d9bc8df8ed6cf775adfe16241e46f6a069a7e8206325dab2405bb556a4da1705fe14ae71465", 0x9f) (async)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002e00090027bd70b8030000000400000004001d0004001f"], 0x1c}, 0x1, 0x0, 0x0, 0x20048010}, 0x4800) (async)
r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000140)={'netpci0\x00'})

6m1.802494644s ago: executing program 2 (id=2841):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
close(0x4)
close(r2)
recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x800, 0x70bd28, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x40}}, 0x855)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r4=>0x0, 0x4, 0x9, 0x5, 0x94, 0x2, @mcast2, @mcast2, 0x80, 0x7800, 0xffff, 0x8}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0xe, 0xffff}, {0x8, 0x10}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x28000600)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000440)={0xa, 0x4e24, 0x9, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3)
setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1, 0x0, 0x0, 0x48040}, 0x0)

5m46.619081061s ago: executing program 32 (id=2841):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x39b3)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
close(0x4)
close(r2)
recvmmsg(r0, &(0x7f0000005b80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/163, 0xa3}], 0x1}, 0x6}], 0x1, 0x21, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000280)=0x1, 0x4)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x800, 0x70bd28, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x3, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x12}}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x1}]}, 0x40}}, 0x855)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r4=>0x0, 0x4, 0x9, 0x5, 0x94, 0x2, @mcast2, @mcast2, 0x80, 0x7800, 0xffff, 0x8}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x2, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x8, 0xfff1}, {0xe, 0xffff}, {0x8, 0x10}}, [{0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0)
r5 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x28000600)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000440)={0xa, 0x4e24, 0x9, @empty, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3)
setsockopt$inet6_tcp_int(r6, 0x11a, 0x4, 0x0, 0x0)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1, 0x0, 0x0, 0x48040}, 0x0)

2m39.516333632s ago: executing program 4 (id=4103):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@private=0xa010100, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff1, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000008000071120a000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)

2m39.251730621s ago: executing program 4 (id=4104):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000480), 0x0, 0x40800)
r2 = epoll_create1(0x0)
r3 = socket(0x1, 0x80802, 0x0)
r4 = epoll_create1(0x0)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe)
connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
writev(r5, &(0x7f0000000280)=[{&(0x7f0000000000)="398b", 0x2}], 0x1)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0xa000000d})
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000000000), 0x4)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x4, 0x10, 0x4018, @vifc_lcl_ifindex, @multicast1}, 0x10)
setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0xa, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001})
epoll_pwait(r4, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
shutdown(r3, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1})
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000480)=0x7fffffff, 0xfffffec2)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x5, 0xffffff03)
sendto(r8, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r8, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4090, 0xffa}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000880)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f00000006c0)=""/191, 0xbf}}], 0x1, 0x40000001, &(0x7f0000000300))
setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
r9 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, 0x0}, 0x78)

2m38.104354036s ago: executing program 4 (id=4117):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000200000000000000704f460fe912000000008500000087000000180100002020742500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d00000009500"], &(0x7f0000000040)='GPL\x00'}, 0x94)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0xfffffffffffffed6, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f"], 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)
r3 = socket$inet(0x2, 0x800, 0xfffffffe)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'ip_vti0\x00'})
r4 = socket$kcm(0xf, 0x3, 0x2)
sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffe29, &(0x7f0000000000)=[{&(0x7f0000000040)="0600000000000000d5076445c8d260c9", 0x10}], 0x1}, 0x0)
r5 = socket$inet(0x2, 0x3, 0x1)
sendmsg$inet(r5, &(0x7f00000005c0)={&(0x7f0000000280)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast2}}}], 0x20}, 0x20048894)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m37.963843726s ago: executing program 4 (id=4120):
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r0 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@alg, &(0x7f0000000100)=0x80, 0x80000)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'gre0\x00', <r1=>0x0, 0x80, 0x10, 0x81, 0x3, {{0x34, 0x4, 0x1, 0x3e, 0xd0, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast1, @broadcast, {[@timestamp={0x44, 0x8, 0x19, 0x0, 0x9, [0x1]}, @timestamp_addr={0x44, 0x3c, 0xcb, 0x1, 0xb, [{@local, 0x4}, {@dev={0xac, 0x14, 0x14, 0x7}, 0xdb65}, {@broadcast, 0xbab}, {@local, 0x4}, {@loopback, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@private=0xa010102}]}, @ssrr={0x89, 0xb, 0x58, [@multicast2, @local]}, @timestamp_addr={0x44, 0x3c, 0x21, 0x1, 0xa, [{@multicast2, 0xc1e4}, {@broadcast, 0x10000}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x7}, {@local, 0x10}, {@loopback, 0x2}, {@multicast2, 0xc5}, {@multicast2, 0x26c}]}, @timestamp_prespec={0x44, 0x1c, 0xed, 0x3, 0x3, [{@multicast1, 0x4}, {@loopback, 0x6}, {@remote, 0x80}]}, @timestamp_prespec={0x44, 0x14, 0x96, 0x3, 0x4, [{@empty, 0x7f}, {@multicast2, 0x6}]}, @noop]}}}}})
getpeername(r0, &(0x7f00000002c0)=@sco={0x1f, @fixed}, &(0x7f0000000340)=0x80) (async)
getpeername(r0, &(0x7f00000002c0)=@sco={0x1f, @fixed}, &(0x7f0000000340)=0x80)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f00000003c0)=0x8)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00', <r2=>0x0})
r3 = socket(0x5, 0x5, 0x5)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000440)=""/226, &(0x7f0000000540)=0xe2) (async)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000440)=""/226, &(0x7f0000000540)=0xe2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@delchain={0x38, 0x65, 0x2, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x5, 0xc}, {0xffe4}, {0xc, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='pids.events\x00', 0x0, 0x0) (async)
r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='pids.events\x00', 0x0, 0x0)
sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000700)={0x1ac, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000000)
r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000980), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x78, r6, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffff7}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x14}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x851)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x3c, r7, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}]}, 0x3c}}, 0x24000000)
sendmsg$inet6(r0, &(0x7f0000002180)={&(0x7f0000000c00)={0xa, 0x4e21, 0x691e, @remote, 0xac}, 0x1c, &(0x7f0000002100)=[{&(0x7f0000000c40)="3221b77d138b8f7a6292d87471f8c8c6e470fdb392b8b5d2ccd9f2115affb995c4d29d7406fd2114f337f8f283e4f48206a58372f8095f979b2ecd710e937d26ff49c54795d4a20b54f6b414620454b20b023d8dea1a439ef350d745c97ef58c33a7a564b8ab6d709920b9e9c78ecac43485f38291b1c95f7ce641bab3f4901a9b8d3f064a2185d47005c6f359280520db28bdaed13bd2", 0x97}, {&(0x7f0000000d00)="ddcd9d0b372b76d5aec846b8a006d9d43a9152964295214945355eeb15152ece594d5582ef30e68f8f41da16d1ba013abf366903310303901cf5e1fb5c30e84b1b65b611916d47b41518d3bb70dabef1a43d714b4f4b11001321e9fe06e205db1a6426bcefa351686634c22ebe6aad72f1e517ac23f8880d523da2531be6b27a15ad2534c28994b236508faa3dc03c80eee8b045f8946d6254430cc8fccbdc16c112b7e38de2e17d", 0xa8}, {&(0x7f0000000dc0)="d04af3f727964228b8098d75a0641eadc2eb3d7d2c2811f940943dc1342e12fc6826e9911dd0efd7aaf3a1070330c0f67a6c8342c304fcf5d5a166f6732689b3c3827c2a19bf33bef437140ab0b508bdbc2eb259cafd0529756071e1e01e5e82aeaa45092d36a5a2a5a3eae42bc6ec1e8b5f4f0a79b03fdebe2c1c12164f3f70fa040917237e8cba2fef7f391f1567", 0x8f}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)="e6889233483fc125aad670d27295aacaa38e9524a8a856db5b125d287172e20e346493c5fb129eea9c438304de36c0f43cde189cff546700457dcf81db1f5df61f81f173464b81af6a6b174786b01f2c209e1099231da29e2d48c6695044c0fb684eb8b706d17f3e7f6b50732194496ab5b35be196ff55b731a22072cb2cdd9f", 0x80}, {&(0x7f0000000f40)="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", 0x1000}, {&(0x7f0000001f40)="5388b1ca9803fc84215d6cddbd9ee8674948c6fdffd7d3170299f29f4ea21f1d7f1acd8e6da7561913cf93a3ca484a591dafde178ba5bda952d2a35462aa7b5d91ce8b06291086118a047e434011cdba49e82a4f260b9873ee86124862f299cb512f5c2ced3dc496ba337dca0b5b653ac519cb1cecfed6ac022c64773f62342e17ba44cba0aef4cfeb916236e4ed4c83ea669248773cd67735674cfbb984e1c774b6ecd4f81dea", 0xa7}, {&(0x7f0000002000)="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", 0xfe}], 0x8}, 0x40804)
syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r5) (async)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002200), r5)
getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000002240)={<r9=>0x0, @multicast1, @local}, &(0x7f0000002280)=0xc)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000002680)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002640)={&(0x7f00000022c0)={0x358, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x310, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[%{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, 'source_mac_is_multicast\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'pids.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xc7\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, 'source_mac_is_multicast\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']-%\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'C\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'pids.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/(*\xf0[$#[T[:+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x358}, 0x1, 0x0, 0x0, 0xc851}, 0x64800) (async)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000002680)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002640)={&(0x7f00000022c0)={0x358, r8, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x310, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'gre0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffff000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[%{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, 'source_mac_is_multicast\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'pids.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xc7\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x160, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, 'source_mac_is_multicast\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']-%\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'C\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg0\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'netdevsim\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'pids.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80000001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'netdevsim'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/(*\xf0[$#[T[:+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x358}, 0x1, 0x0, 0x0, 0xc851}, 0x64800)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f00000027c0)={<r10=>r4, &(0x7f00000026c0)='\x00', 0x20002, &(0x7f0000002700)={@align=0x2, {0x6, 0x8, 0x5, 0x8}}, 0x3, &(0x7f0000002740), &(0x7f0000002780)=0x40})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000002880)={'syztnl1\x00', &(0x7f0000002800)={'ip6gre0\x00', r1, 0x2f, 0x6, 0x2, 0x9, 0x3, @local, @mcast2, 0x8000, 0xa7, 0xb, 0xffffffff}})
setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000028c0)=r5, 0x4)
sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002940)={0x58, 0xe, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x8044)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000002a40), r11)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002b00)={'syztnl2\x00', &(0x7f0000002a80)={'erspan0\x00', r2, 0x8, 0x8, 0x400, 0x7ff, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x67, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xf, 0x2a, [@multicast2, @local, @multicast2]}, @rr={0x7, 0x17, 0x8f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010101]}, @rr={0x7, 0x13, 0xf2, [@local, @empty, @local, @private=0xa010101]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000002b00)={'syztnl2\x00', &(0x7f0000002a80)={'erspan0\x00', r2, 0x8, 0x8, 0x400, 0x7ff, {{0x14, 0x4, 0x3, 0x1, 0x50, 0x67, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@lsrr={0x83, 0xf, 0x2a, [@multicast2, @local, @multicast2]}, @rr={0x7, 0x17, 0x8f, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, @remote, @dev={0xac, 0x14, 0x14, 0x15}, @private=0xa010101]}, @rr={0x7, 0x13, 0xf2, [@local, @empty, @local, @private=0xa010101]}]}}}}})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_FW_DOWNLOAD(r12, &(0x7f0000002d80)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x50, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x11, 0x14, '/(*\xf0[$#[T[:+\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '+@'}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0)

2m37.73977143s ago: executing program 4 (id=4124):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$netlink(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x1, 0x5, 0x1, 0x7fff}, {0x6, 0x40, 0x0, 0x80}, {0x7, 0x5, 0x6}]}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl2\x00', &(0x7f0000000580)={'tunl0\x00', <r3=>0x0, 0x10, 0x8, 0x401, 0x9, {{0x30, 0x4, 0x0, 0x4, 0xc0, 0x68, 0x0, 0x5, 0x4, 0x0, @broadcast, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x2c, 0x56, 0x3, 0x7, [{@loopback, 0x8}, {@private=0xa010102, 0x8}, {@broadcast, 0xb}, {@rand_addr=0x64010101, 0x9}, {@remote, 0xda}]}, @end, @cipso={0x86, 0xc, 0x3, [{0x2, 0x6, "72c4968c"}]}, @noop, @timestamp_addr={0x44, 0x24, 0x34, 0x1, 0x7, [{@dev={0xac, 0x14, 0x14, 0x26}, 0x800}, {@broadcast, 0x7}, {@empty, 0x2}, {@remote}]}, @timestamp_prespec={0x44, 0x4c, 0x9, 0x3, 0x3, [{@broadcast, 0x800}, {@private=0xa010101, 0x4}, {@broadcast, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10000}, {@remote, 0x5}, {@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010102, 0x3}, {@local, 0x5}, {@local, 0x2}]}]}}}}})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@getqdisc={0x3c, 0x26, 0x400, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xe}, {0xfff1}, {0xa7f6285dd7a3a1bb}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async, rerun: 32)
r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_PORT_SELF={0x28, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_PROFILE={0x9, 0x2, '-[&/\x00'}, @IFLA_PORT_PROFILE={0x7, 0x2, '{\'\x00'}, @IFLA_PORT_PROFILE={0x1, 0x2, '\x00'}]}, @IFLA_GROUP={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x4058805}, 0x4840)
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x400, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0xb, 0xb}, {0x8, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) (async)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$sock_ifreq(r5, 0x8923, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) (async)
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) (async)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x18}, 0x19}, 0x0) (async)
r7 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x101880, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000d80)=@o_path={&(0x7f0000000d40)='.\x00', 0x0, 0x4000, r7}, 0x18) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
socket$inet_sctp(0x2, 0x0, 0x84) (async, rerun: 32)
socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd295c877c"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0)
sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)={0x58, r9, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "010063f9fff977b6c104a22291ad654b6f3aa379"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24044045}, 0x4000004)
sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r9, 0x108, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000810)

2m37.36532885s ago: executing program 4 (id=4129):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
close(0x3) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x2000000007, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
sendmsg$inet6(r2, &(0x7f0000000740)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000004, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRESDEC=r2, @ANYRES64=r0, @ANYRES8=r4], 0x18}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5f, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x26e9affff64e7ce6) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r5, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

2m22.237162904s ago: executing program 33 (id=4129):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0) (async)
close(0x3) (async)
r2 = socket$l2tp6(0xa, 0x2, 0x73) (async)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@private1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000, 0x1000, 0x0, 0x9, 0x0, 0x5}, {0x0, 0x2000000007, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@multicast2, 0x0, 0x33}, 0x0, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@dev, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x0, 0x33}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async)
setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
sendmsg$inet6(r2, &(0x7f0000000740)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000004, @dev={0xfe, 0x80, '\x00', 0x40}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r4, @ANYRESDEC=r2, @ANYRES64=r0, @ANYRES8=r4], 0x18}, 0x0) (async)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x5f, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x26e9affff64e7ce6) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000009, 0x12, r5, 0x0)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

3.997881792s ago: executing program 1 (id=5313):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000035c0)=ANY=[@ANYBLOB="6c0000001000390428bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="80000000800404004c0012800b000100697036746e6c00003c000280140002000000000000000000000000000000000108001400ff01000014000300", @ANYRES8=r2, @ANYBLOB], 0x6c}, 0x1, 0x0, 0x0, 0x81}, 0x2000c8c0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}})
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000ff00000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x1002, &(0x7f0000000fc0)=""/4098, 0x41100, 0x24}, 0x94)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRES8=r0], 0xfdef)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r8, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r11, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860)
sendmsg$FOU_CMD_DEL(r9, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r8, 0x800, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_IFINDEX={0x8, 0xb, r11}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x44801)
sendmsg$FOU_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080)
sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r8, 0xb24, 0x70bd2a, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x10)

2.87797297s ago: executing program 6 (id=5322):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600000000000005000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.566824091s ago: executing program 1 (id=5326):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003ec0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x60, 0x3}]}]}, 0x24}}, 0x2000c004)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x80, 0x3, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x101}]}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe0}, 0x1, 0x0, 0x0, 0x2000001d}, 0xc0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000006c0)='ns/pid\x00')
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0))
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)
write$tun(r0, &(0x7f00000004c0)={@val, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0xe4, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @loopback}, "3eda35701bfb0bc2"}}}}}, 0x36)

2.516213903s ago: executing program 6 (id=5327):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000cfb7c36808c1faeae208fd7ea8fff8136e650fe53ac1e533134e0584fb16a4a60c6ea11059f8a0d6c1831e039e30adf30edb90a2ecf6aae3a5b8cd451b7532621d5fb6b769cda769da0d72b427e4922829f045343625439267913af1347c7975b24f202672d0cbf2ac571d8144ecc80f4f0e92a6033c319059f68be39a1ab4cfbba6193b69910ab4ba30becff02e218723f640a4fdd5fd0913609760c61d249ebcbe504bcc278a51", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea000000000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmsg$OSF_MSG_ADD(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r8], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000)

1.951746402s ago: executing program 1 (id=5331):
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c500008008000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2e"], 0xe0}], 0x1}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1e}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}, @FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)
writev(r0, &(0x7f0000000040), 0x2)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x1e, 0x1, 0x0)
setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000100)=0x1, 0x4)
shutdown(r3, 0x2)
syz_emit_ethernet(0x76, &(0x7f0000000080)={@link_local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb3e02", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "974367", 0x0, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [@dstopts={0x0, 0x1, '\x00', [@padn={0x1, 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}]}}}}}}}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r5=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f00000001c0)={r5, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f00000000c0)=0x84)
sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x13c, 0xa, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x8001}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}]}, @IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0xfffffffffffffffb}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0xffff0001}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x7}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_bond\x00'}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x80, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @remote}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)

1.950469109s ago: executing program 6 (id=5332):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x10, 0x21dc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000012000000000080654d970008"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94) (async)
r0 = socket$kcm(0xa, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, &(0x7f0000000000)={r0}) (async)
socket(0x40000000015, 0x5, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
close(r1) (async)
socket$key(0xf, 0x3, 0x2) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
close(0x4) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r2 = socket(0x200000000000011, 0x2, 0xd)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', <r3=>0x0}) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r4, 0x6, 0xa, 0x0, 0x0) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) (async)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, r3, 0x25, 0x0, @val=@tcx={@void, @value=r6}}, 0x1c) (async)
syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="0380c2000001bbbbbbbbbbbb0800450000000000000000019078ac1e0001ac1414aa030090781200183f250000000000000000010000ffffffff7f000001"], 0x0)

1.85951857s ago: executing program 1 (id=5334):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x41)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x13, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)

1.817237626s ago: executing program 3 (id=5335):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, 0x0, 0x30}], 0x1, 0x0)

1.674803228s ago: executing program 3 (id=5337):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600000000000012000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.553459224s ago: executing program 1 (id=5338):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000040000033000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="05"], 0x144}}, 0x0)

1.468005822s ago: executing program 5 (id=5339):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x16, 0x0, 0x6, 0x1}]}, 0x10)
sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0)
unshare(0x20000400)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000061186f000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg0\x00', 0x2})
ioctl$TUNSETPERSIST(r3, 0x400454c9, 0x1)
r4 = socket(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001b80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000013c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x34, r9, 0x401, 0x70bd2e, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0x34}}, 0x14008080)
ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0)
r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r11, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r12 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x2c, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e23, 0xbd7c, @remote, 0x2db}]}, &(0x7f0000000140)=0x10)
socket$kcm(0x10, 0x2, 0x0)

1.467290708s ago: executing program 3 (id=5340):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0)
close(0x3)
getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000380))
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3", 0x8}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3}], 0x1, 0x40800)
recvmsg$can_j1939(r1, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000600)=""/207, 0xcf}, {&(0x7f0000000700)=""/43, 0x2b}], 0x2}, 0x22)

1.368425658s ago: executing program 6 (id=5341):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) (async)
pwritev(r0, &(0x7f0000000f00)=[{&(0x7f0000000d80)="00214717a70700000000030640710a069d313ebb9b49", 0x16}], 0x1, 0x7, 0xfffffff9)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$inet_tcp_int(r1, 0x11e, 0x22, 0x0, &(0x7f0000000000)=0xa6f394ffb97383a0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x8}]}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000001, 0x5000}]}, @struct={0xe, 0x3, 0x0, 0x4, 0x0, 0x10, [{0xf, 0x1, 0x5}, {0x8005, 0x0, 0x1}, {0x0, 0x2, 0x41}]}, @union={0xd, 0x0, 0x0, 0x5, 0x0, 0x9}]}}, &(0x7f0000000f40)=""/4089, 0x7e, 0xff9, 0xb, 0x1}, 0x28) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x404a0c4}, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x2}]}}}]}, 0x44}}, 0x0) (async)
socket(0x2a, 0x4, 0x4) (async, rerun: 32)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32)

1.310782993s ago: executing program 1 (id=5342):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1032}]}}}]}, 0x40}}, 0x40800)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
pipe(&(0x7f00000001c0)={<r2=>0xffffffffffffffff})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0)
splice(r2, 0x0, r4, 0x0, 0x80, 0x6)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4)
r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0xc}, @jmp={0x5, 0x0, 0x0, 0x0, 0x9, 0xfffffffffffffff8, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x11, '\x00', r6, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x5, 0x9709, 0x6}, 0x10, 0x11321, r1, 0x0, &(0x7f0000000400)=[r7, r8], 0x0, 0x10, 0x12}, 0x94)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040080)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000080)=0x1e)

1.231931214s ago: executing program 3 (id=5343):
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
unshare(0x24060400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x1}]}}, 0x0, 0x18, 0x0, 0xa}, 0x28)
r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'sit0\x00', &(0x7f00000003c0)={'syztnl1\x00', <r4=>0x0, 0x700, 0x7, 0x200, 0x7, {{0x25, 0x4, 0x0, 0x29, 0x94, 0x67, 0x0, 0x0, 0x4, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x17, 0xae, [@local, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x7, 0x77, [@remote]}, @generic={0x44, 0xb, "f447b9912b59bc3b5b"}, @cipso={0x86, 0x15, 0x3, [{0x7, 0xf, "894dc9bc71f652e7b70b66e36e"}]}, @timestamp_prespec={0x44, 0x14, 0xad, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x3ff}, {@rand_addr=0x64010100, 0x3}]}, @lsrr={0x83, 0x17, 0x54, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x29}, @loopback, @local, @empty]}, @timestamp_prespec={0x44, 0xc, 0xbc, 0x3, 0x8, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff55}]}, @lsrr={0x83, 0xb, 0xdd, [@multicast1, @rand_addr=0x64010100]}]}}}}})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r4, 0x25, 0x0, @void}, 0x10)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvfrom$unix(r2, 0x0, 0x0, 0x40002122, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r1, 0x58, &(0x7f0000000600)}, 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000182000/0x4000)=nil, 0x4000, 0x0, 0x100010, r5, 0x60071000)
syz_emit_ethernet(0x12, &(0x7f0000000080)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@generic={0x8906}}}, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18001820000000000000000000000000183a00000200000000000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94)
writev(r6, &(0x7f00000006c0)=[{&(0x7f0000000000)="ba", 0x1}, {0x0}], 0x2)
pipe(&(0x7f0000000100))

1.158554178s ago: executing program 0 (id=5344):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000a80)={0x9, 0x5, {0x2, @struct={0xfe9}, 0x0, 0x8000000000000001, 0x7, 0xd3, 0x8000000000000001, 0xfffffffffffffffc, 0x46, @struct={0x6aa}, 0x99, 0x9, [0x2f, 0x7f, 0x3, 0x0, 0xe]}, {0x19e, @usage=0x4, <r3=>0x0, 0xfffffffffffff30f, 0x9, 0x6, 0x7fffffff, 0xffffffffffffffff, 0x50, @usage=0x3, 0x400, 0x0, [0x5, 0x2, 0x2, 0x7fff, 0x3, 0x9]}, {0x58, @usage, 0x0, 0x3, 0x1d6, 0x2, 0x8, 0x81, 0xc1, @usage=0x9c, 0x4, 0x7, [0x8000, 0x1, 0x1, 0x2, 0x8, 0x4]}, {0x3, 0x3, 0x3}})
ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f0000001300)={0x2, 0x1ff, @start={r3, 0x6a7e23183313a768, "7c43fa762cb5f67df18177e1e26d69cf64fd939a64e47a6c7532dec2965d72c09423247d269132374ae3a5b031a1c686371f93f9b7dfe43aeebc6366c2e4fb2959453cf5d7c091cebfcd583eaa8f0716ad2e2bd402a6fc1145362d6f3b69261a24b5055d929af082b8f5724ed1edad4197ef0424cf980d8dcbc746bdf71fcb5b948c97191db50262ada58afc6c0bdcc90e8496c5eaa34f71265fd913a665ff93d773ee80c85f14ff7c275f435d0c5c360ecf21fc1c38e45c49bf822df611da56c09e9abaa49fd95f2f345fb16e17cf62caccbda21f219cea6efdaf044f500c4c545e1027e699166e84eabf4f843ae990edf892f566a9a1b6a4ae39bd3b6ef89b50b5a90b2205861dc058ffe816e5001805a7e9eed271da5d83913d5a56b85cb3039e3cdfc2cf65d51cd849632f62448deb09e2130d8b82d4a356756b4ef2bd9b9ccc77e161adba4d0653d4f44671ff76ac312d8b9a8b6c666c80ae043c30976b4394126b9636a980c5d0b8b8f2ab0110c0e9e2c9b6a6403bc0ed6da08657280d0466515fd0041c03977240a3777ae79baeca716055ad2268721739f6e7a35706124c35ee060e7294a80a201e1e5bc1562a0e66698eccdc3db118cbbbb1850763eea111caf6b38e30b44df0002b59a7c80be9ceb572ac704b51fff53104f26ffc09e4aa4b9825cb89dfecb58440099501c2ec98e762da22637f57c7877ba9fb3f2c570a922e0a51c1ebf1cd5bbed92261d867cb3cfe3769ad4e17a1d13e756a4b3310a029b14c13c08e7e7f2d6e990883d4cebd7f06edc6b961b04a8d148d599f3b1c3a055450276dbeb205d3a6feaebd18b49d0ee9f4256c9b8e6c6cced5557cb9a7a75a4090085de8e4629071a5fffb69d72f765011a21fb2a3924e16646c9534e467095be9dd8b1e659d9e414dde602c985f083fb43e0abffad9038772a340e0eabf4821e67be236cb55e386efba05343e2138940220b8cad57a5b874476e60c306cf9047e4e953324669da85fc69f52f2c5e163034159f7fb0ae81ff6b43b55a302ec6a740e1df0dbfb623ce1bc7e81a0a995efe897f2e9b8ff5cea3f9d6c75b06d604677d99e8ade9a2594d8e00a0e4e5427cb13679b816e1fc36c9930e3ff732270dbd89799e1adc90fe90ed83417f1b3bf4b4d3681be3e83ce7e7be55de2e5f5a4181d5b4ba42000cec7fe1e4798cd12a0aef507cc1bf86f41419f99ff73c1c0c0136f12e5c59b778251ceed5a24a39679cb1aee8cee263eb848cd590299a5b6f146b5e6bef8fc07c2b15af1579e16f87495debd81e194d1ec91fee87b2da47ac1b6f902455e93ef1f7487e84f720e7559d38e4de862e4cf91131d5bfd9947a9b76e3e82e588838e6c07895436d0eefa22a044ba0e82a0c4edf4d16ccb05a35295e57f06d8cc389e816207926305c604589a8ddd813429d2e30594e7ceca", "a4617c40fd09d71db7ac96c87bdb19fb2c22b58bb655994cab9c3bceab1f184adb59431ce8726e4a1c14623cccce28941c4c23e998d7decd02580be119c13c4be516d7156e73c3c3d8137ca7497acc587f3a80dba26ba87c78c33e4b9fa36040abffb7f2bee9532d1b630072673ffdbef87d1c60fd676db6f7bc19216bc4cc47c5dfda7c0b6e53ac5251512ed15724bdde0d6f476f43891c4f0bfa2d73d91b4dc5bc4b7c33e76777ea40bc002fcbb363b6db669dd4caffbdf4c903a2f71968b6eadceb36ccc47541371218c4d5c9bdf9c8105e35891ad1a4d0731f881b37f8550b7ecfd973203f063ad332996465ac914a248ac6d3a53b25f30648734dc50f253e156f144c890c58d2bf991b0cebee23b2c419471577655e622e92a2f8e7d51e797bb7e8b01df342ab723b8ec171007c4e1cb33a17f35b8e41d150b7dfcfba92092b6a14c494391baebed78c81c3562c347d09c0ce6dcfad037580f158b6da13d059d90aba3d913c5458cd4d9af3ca2b54139b3961ddacc0c74b4700e589afd9968f16fe0dc67656c4d0f030121f841795fc6099bb8e3cd22838ae3313c7fc3dda3a5813686f12511a6e5293fb857ac942cc896775a229a916833f2fc2ef8bc7d2c8c12b384c4c518ce22427458d9234d0d868da5c0a7dbe0f9015b26a8cba04afaecf563190dc82ffc2cabe9f14ac8d34c9ffb16d440cd004224e603dde27638b4d6ae959c2c5b0acdc55ba81c31fe3b38cfed2f91c1b1f752ebd3362b6a35c6135aaa1caa3e46de7b6646391f20a756234893a88750ae814173e41321307e6fb55f58072b674bd96d434557de3275420e6ad9f3d96783fb0958ca1421073fb8db0bd06caa58b875a993dfccd72b2073685e5906054893dd88f27796cb33ea584973084abcf27c9d5298813cf0d1dcc25b978afd5ec9378aecfb10af24f6b6a2e6c11ce0c7e5114e5a4e0f8ade01f7b775b16fb7f10eb8a1458baf2365bc626c9fabf4750c9d0440d17f6a66ebfad8344ef28bf93a602440da60390ec12d45813ab557348b0b7cf1061bee60a8e4999111ff63f9abaac2c8ef9f03e97bb61724a80453299d5bcf710c1237d2cf041dd3ef1ea3eb45980ba79b07f4cd4ea7909bf9fc2ca966e5e52328df292fc20b06c6dc06a33bc9c48b5e0063f809a894816f3320dfc5bc87c45bb46b1a2a6dea5510b861bc826aedc68c3de47811b8d09666a90fbf9294aef4aff4ab1998d313426bfa7f8d27e2f03edb6ec3b36e3a3902c82ee6d95ad549635af131de8ea6d2f8cc238d24777065e699a25e067e389a026f78fcd3d440f074237855b33cd497b9fe7372cdf3cdc2b5489669638af88f3efd55066d038114c40e3e2a554e600861a3965332124fd8997905418db2f1e9843135bed368509fcc714fed715af712a6954734410028482df08be94d2ae07cc24d4"}, [0x5, 0x6, 0x7, 0xec, 0x4dee, 0x4, 0xef27, 0x6b165c2b, 0x2, 0xd8, 0x80000000, 0x4, 0x2, 0x4dd, 0x400, 0x100000000, 0x4, 0x3, 0x9, 0x8, 0x5d, 0x401, 0xffffffffffffffff, 0x400, 0x10001, 0xffffffffffffe0c9, 0xa880, 0x83, 0x2, 0x4, 0x10, 0x264, 0x6, 0xf, 0x9, 0x0, 0x2f, 0x7, 0x2, 0x2, 0x3, 0x6, 0x1, 0x8, 0x8000000000000000, 0x5, 0x79, 0xc69, 0x5, 0xff, 0x1, 0x8000000000000001, 0x0, 0x9, 0x7fff, 0x6183, 0x0, 0x7d, 0x3, 0x4, 0x5, 0x6, 0x40, 0x709]})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r7)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xcdd68600331fc8b7}, @TCA_TBF_PARMS={0x28, 0x1, {{0x10, 0x1, 0x0, 0x5, 0x0, 0x1}, {0x8, 0x2, 0xd, 0xf, 0x8, 0x7}, 0x0, 0x2, 0xde4}}, @TCA_TBF_PBURST={0x8, 0x7, 0x13de}, @TCA_TBF_RATE64={0xc, 0x4, 0x2ef0682d0c86cfd3}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000113cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0xdd86}], 0x2}, 0x5)

1.110750797s ago: executing program 5 (id=5345):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$sock_int(r1, 0x1, 0x23, 0x0, &(0x7f0000000180))
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0)

1.036209433s ago: executing program 6 (id=5346):
ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$unix(0x1, 0x1, 0x0)
sendmsg$unix(r1, &(0x7f0000002640)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000025c0)=[{&(0x7f00000004c0)="d94384d035893e185cf852ab6dd2d402a004d38c8e445970826167678880751e4b14f35a3fbb1e9ee74d041ec601ce12d0aba9f578c2dfb3aa95548f71bcf072d78d408c93618585e2e8bf1ae9d66d59fb79d03d164a542c56bea3abf7062fd27b87cda2aba323f05b4ddb5d9911e380c4f33cd967", 0x75}, {&(0x7f0000000540)="a1c8d8fbf157b16ff72a078a3b5249b2d2447d41244c3cf5296da0e1adc4f3840815e8aacdb4860dd6a60e", 0x2b}, {&(0x7f0000000580)="97e2acf3d66e45c2e6b27ef77a96ef3dc519fe4f007f143ddf1a3a0cfc1cf2578411f107d1aff6ab1580d7abaa7f6f885391df36cc26f2356943d7e85212cb2d624675d32082a7104d9fbdd4ffb0ba9ceacf559ecf144895182f86603d644a736ec4d5cd884ce7ddb49cb16bc1cb23ce760ada1781a02ddc2ec824ec921f277427f63e77e8076844d013aca7684573ebde39ade0ab528cf492a692aa229023090327e0ee5cf80a14729b6e", 0xab}, {&(0x7f0000000640)="8b53cbe95459adf3736f9bb2729738baa9e7fac42c8357f8f920f586d4ac896ebc38ad865810170cc6a18f86dd2271be154959d8e3b63c55740cb447b5f4f90107ee0cf5d590fa", 0x47}, {&(0x7f00000006c0)="6fcd9d0eb40da1f873cfdf851382f6359100bca85171fe8203bf08abc500dfcdf8aac14779337541460590df29e9d1a0afe6af282d4b4d570f3ddfbc64ae494c3bc0a4a285d5bfa371fc5fef8246456f98d9bdb67f4008362fba784e240e62d6b89c7f640e57af41b5681a2ecd87d5568121500a4b50d857f54b866d69278d9877965db0bed4060de05e5896c8c2d4f1ad2a34872070e0a5ea41093a803a34791c39c623ae2bc892a7d9b6605b976217265228f3aecfb3edb13dcf4aecba5a148a4bdef24c25d1ca6b28e1a6041bc647723bb64623c6ff02577c", 0xda}, {&(0x7f0000001540)="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", 0x1000}, {&(0x7f0000002540)="9b5ca11483b9a01195c64cdb8b650999a9e6ac5ede0a1d08cc0e9920be36672fc2e3e05c1c66e633f33faa8709323daf2f41282964806d78e88189da79223bd4d023cb9a32802558e0078e73df633a0a2585d9a9397d7c8a7d3ea26e7d28e14de4d7c4971c6b9bcd27e93c955c66adacb7bd1745f07a924d7e19d4", 0x7b}], 0x7, 0x0, 0x0, 0x44811}, 0x48810)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x4804)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000280)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_buf(r4, 0x6, 0x1f, 0x0, &(0x7f0000000300))
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000000a14000000110001"], 0x70}}, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4(r5, 0x0, 0x0, 0x800)
setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58)
r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r7, &(0x7f00000020c0)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000dc0)="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", 0x5da}, {0x0}], 0x2}}], 0x2, 0x8014)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)

939.235809ms ago: executing program 5 (id=5347):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0xa, 0x801, 0x84) (async)
r1 = socket$inet(0xa, 0x801, 0x84)
setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000300)={0x0, 0x7}, 0x8)
r2 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f00000000c0)=""/118, &(0x7f0000000140)=0x76)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="240000002e00090027bd7000fedbdf250400000010001a8004000480080001"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x84)
ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0)

880.603281ms ago: executing program 0 (id=5348):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x41)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x13, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0)

711.81653ms ago: executing program 5 (id=5349):
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x400000, &(0x7f0000000140)={@align=0x1c, {0x40, 0x8225, 0x8080e496, 0x200}}, 0x8, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x9})
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010002"], 0x3c}}, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x800}}, 0x40)

583.366921ms ago: executing program 5 (id=5350):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000080)={'bond0\x00', @ifru_settings={0x4, 0x9, @sync=&(0x7f00000000c0)={0x4, 0x7, 0xa}}})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000ffff2bbd7000bbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="582a0500231a0500340012800e00010069703665727370616e00000020000280060003003000f133140007001502000000000000000000000000000108000a00", @ANYRES32], 0x5c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080)
r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=<r5=>0x0)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r7, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x200000c2)
sendmsg$NL802154_CMD_SET_LBT_MODE(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x40050}, 0x8008004)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r10, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0xf9ffff00, 0x0, 0x0}, 0x108)
sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x10)
close(0x3)
r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r12=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r11, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}]}]}, 0x28}}, 0x8004014)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r13=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r3, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, r7, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x40, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x9}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x4c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1ff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xfff8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}]}, 0x120}, 0x1, 0x0, 0x0, 0x80}, 0xd0)

531.654538ms ago: executing program 0 (id=5351):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000081000101c0012800b00010062726964676500000c00028004001c"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xffffffffffffff32, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e6174"], 0xf0}}, 0x0)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff05000300050000000800020003"], 0x50}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002700)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf8, 0x4, 0x7, 0x8, 0x1, 0x400, 0xffffff54}}, {0x4}}]}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

424.783721ms ago: executing program 0 (id=5352):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000133000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000000000000000010000000090000000200000000000000000000000200010000000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="05"], 0x144}}, 0x0)

315.936684ms ago: executing program 5 (id=5353):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
sendmsg$can_bcm(r1, 0x0, 0x0)
ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_int(r2, &(0x7f0000001180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x27)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=ANY=[@ANYBLOB="a1d71ea57f18f74ce00c0154fb15ef773e631c42d58d095c50309c1faadee82049cf478afaa62b888bd04e7fbefcb909197de1b80236d570637ead2f4007920757fbadf65e32935b7da4d53a024fbe7508a12645ec7f066f838248c3a00f5b95419e70a215b9df4c24a5f616be32de660a0a3040ba61046d534e75b2180e4084ff6bd059f1340f965655569f01da76465197c813bbb15f7cba762e65bec5a607275886fdeb654998acdfdd1b245efd58f5", @ANYRESDEC=r1, @ANYRES8=r0, @ANYRES16=r1, @ANYBLOB="f7a4671adb91d88e26ac0dfaf84cf1f022066b1f37137b9f8fc8f1e314dabb2d36dfc125b68263f42078d8d805bbaaf5f2a5876cb2d47b10654e5b487c0499c89d6f2f6b1af1d0d1c29f170d3534bf5055d259c69838d388934c9797485dfbad4660b74dc0cf25a77d10bde52b6c12c6bb9bfed1efc71148f84197425604f67217bbe23bbcb12c4e91d9fb28b3e74891345ddd465b89f9c292e9c8348a4f6b978ddf95a404ea10d7d0896941aa73ec6019a023b52029c1c30b937400b76addf3cc5810587db6bde7104efe07afda79f820bdf11171ca0fcca0c0a4dad24302d727f3776f58902442fb12a29c323e8f6fa3143bace196b9b4885b9f0ead2ce441a01d1e2972c517d8fc804509e79502f73059d7b6f1edde82456c2a04b8e19014a50414cbea6cff303ff3fe7c2a70bffcc6785e1e"], 0x28}, 0x1, 0x0, 0x0, 0x44018}, 0x4000044)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x10001, 0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="2800000010000304f9fffffffedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0c980fb476e5000000002e0001e50000c258012a648503f989ea5584c5c89d694b09"], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4007}, 0x94)
socket$inet6_udp(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)='\'', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, 0x7}, 0x50)
syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r4)
connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
getpeername(r5, 0x0, &(0x7f0000000180))
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYRESHEX=r4], 0x7c}}, 0x44004000)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

294.924518ms ago: executing program 3 (id=5354):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10)
write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0xfffffffffffffe6d}, 0x48)
socket(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) (async)
write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40fe00000e", 0x24) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9}, 0xfffffffffffffe6d}, 0x48) (async)

158.11135ms ago: executing program 0 (id=5355):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005e0001002abd7000fddbdf2500000000", @ANYBLOB="02c3ff0097"], 0x1c}}, 0x4000)

83.856824ms ago: executing program 3 (id=5356):
setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6e5415445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d8b6d2ccd00"}, 0xd8)
r0 = socket$kcm(0x23, 0x5, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4)
listen(r0, 0x800)
socket(0x2, 0x80805, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000f1401000c0000003557bebd839fffdbdf250d0045006f70615f766e696300000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008014)
accept4(r0, 0x0, 0x0, 0x80000)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78)

68.550319ms ago: executing program 0 (id=5357):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x10}}, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{0x1}, &(0x7f0000000cc0), &(0x7f0000000d00)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x7, 0xe, &(0x7f0000000d80)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
recvmmsg(r0, &(0x7f000000aa80), 0x0, 0x10000, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r1 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000100))
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20000000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r4)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="a8010000", @ANYRES16=r5, @ANYBLOB="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"], 0x1a8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040)

0s ago: executing program 6 (id=5358):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) (async, rerun: 64)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 64)
mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000200)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])
mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8fbc0e6f77c18ed3, 0x11, r2, 0x1000)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000})

kernel console output (not intermixed with test programs):

 all slaves
[  560.703471][T22004] syzkaller1: entered allmulticast mode
[  560.962917][T22017] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4138'.
[  561.239922][T22031] bond0: (slave ip6tnl0): refused to change device type
[  561.262307][T22031] ip6erspan1: entered allmulticast mode
[  561.544506][T22037] netlink: 1244 bytes leftover after parsing attributes in process `syz.0.4143'.
[  562.394003][T22068] 8021q: adding VLAN 0 to HW filter on device bond4
[  562.416699][T22068] bridge0: port 3(bond4) entered blocking state
[  562.436118][T22068] bridge0: port 3(bond4) entered disabled state
[  562.442746][T22068] bond4: entered allmulticast mode
[  562.451387][T22068] bond4: entered promiscuous mode
[  563.277515][T22094] sock: sock_timestamping_bind_phc: sock not bind to device
[  563.308304][T22097] __nla_validate_parse: 1 callbacks suppressed
[  563.308321][T22097] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4159'.
[  563.532640][T22103] xfrm0 speed is unknown, defaulting to 1000
[  564.118621][T22136] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.4168'.
[  564.194930][T22140] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4168'.
[  564.314509][T22143] tipc: Started in network mode
[  564.323157][T22143] tipc: Node identity 5, cluster identity 4711
[  564.337159][T22143] tipc: Node number set to 5
[  564.338691][T22148] net_ratelimit: 1 callbacks suppressed
[  564.338706][T22148] netlink: zone id is out of range
[  564.369064][T22143] tipc: Cannot configure node identity twice
[  564.371478][T22148] netlink: zone id is out of range
[  564.406268][T22148] netlink: zone id is out of range
[  564.414171][T22148] netlink: zone id is out of range
[  564.431690][T22148] netlink: zone id is out of range
[  564.442950][T22148] netlink: zone id is out of range
[  564.451601][T22148] netlink: zone id is out of range
[  564.466433][T22155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.472934][T22148] netlink: zone id is out of range
[  564.476266][T22155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  564.864822][T22175] netlink: 'syz.0.4177': attribute type 1 has an invalid length.
[  565.034931][T22185] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.4181'.
[  565.192537][T22191] xfrm0 speed is unknown, defaulting to 1000
[  565.763123][T22199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4184'.
[  565.775043][T22199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4184'.
[  565.784924][T22199] netlink: 58 bytes leftover after parsing attributes in process `syz.0.4184'.
[  565.796047][T22198] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4184'.
[  567.806828][T11274] wlan1: Trigger new scan to find an IBSS to join
[  567.977785][T22208] bond2: entered allmulticast mode
[  567.988210][T22214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4188'.
[  568.023985][T22213] macvlan2: entered promiscuous mode
[  568.033886][T22213] macvlan2: entered allmulticast mode
[  568.049820][T22213] bond2: (slave macvlan2): Opening slave failed
[  568.690252][T22254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4198'.
[  568.862034][T22244] syzkaller0: entered promiscuous mode
[  568.882699][T22244] syzkaller0: entered allmulticast mode
[  568.889331][T22257] netlink: 'syz.0.4199': attribute type 4 has an invalid length.
[  568.939034][T22257] netlink: 'syz.0.4199': attribute type 4 has an invalid length.
[  569.021431][T22259] dummy0: entered promiscuous mode
[  569.033221][T22259] dummy0: left promiscuous mode
[  569.314988][T22275] debugfs: 'netdev:syzkaller0' already exists in 'phy59'
[  569.351558][T22282] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4208'.
[  569.369126][T22283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4206'.
[  569.540501][T22289] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  569.568716][T22289] net_ratelimit: 26 callbacks suppressed
[  569.568733][T22289] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  569.611937][T22290] netlink: 388 bytes leftover after parsing attributes in process `syz.3.4209'.
[  569.653499][T22292] batman_adv: batadv0: Adding interface: vlan4
[  569.673114][T22292] batman_adv: batadv0: The MTU of interface vlan4 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  569.709498][T22292] batman_adv: batadv0: Not using interface vlan4 (retrying later): interface not active
[  569.761287][T22299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4212'.
[  569.775451][T22299] netlink: 356 bytes leftover after parsing attributes in process `syz.1.4212'.
[  569.833139][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4215'.
[  569.846935][T22308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  569.860246][T22303] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  570.195066][T22322] bridge0: port 4(vlan2) entered blocking state
[  570.203046][T22322] bridge0: port 4(vlan2) entered disabled state
[  570.228207][T22322] vlan2: entered allmulticast mode
[  570.240196][T22322] geneve0: entered allmulticast mode
[  570.268278][T22322] vlan2: entered promiscuous mode
[  570.281381][T22322] geneve0: entered promiscuous mode
[  570.410179][T22331] xfrm0 speed is unknown, defaulting to 1000
[  570.777237][T22349] netlink: 'syz.0.4227': attribute type 1 has an invalid length.
[  570.802398][T22343] xfrm0 speed is unknown, defaulting to 1000
[  570.807544][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4227'.
[  570.837173][T22349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4227'.
[  570.847454][ T7981] wlan1: Trigger new scan to find an IBSS to join
[  571.025344][T22355] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4229'.
[  571.325726][T22368] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  571.428246][T22372] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode
[  571.452801][T22372] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode
[  571.485330][T22372] tipc: Resetting bearer <eth:syzkaller0>
[  571.700117][T22387] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  571.766874][ T7981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  571.903519][T22391] netlink: 'syz.5.4240': attribute type 1 has an invalid length.
[  571.932620][T22391] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  572.346532][ T5756] tipc: Node number set to 1454670296
[  572.575645][T22416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  572.584937][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  573.171085][T22435] netlink: 'syz.0.4249': attribute type 21 has an invalid length.
[  573.204103][T22435] netlink: 'syz.0.4249': attribute type 21 has an invalid length.
[  574.239038][T22483] netlink: 'syz.0.4257': attribute type 1 has an invalid length.
[  574.287933][T22487] __nla_validate_parse: 4 callbacks suppressed
[  574.287952][T22487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4258'.
[  574.321423][T22490] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4257'.
[  574.336054][T22487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'.
[  574.463018][T22483] 8021q: adding VLAN 0 to HW filter on device bond8
[  574.487119][T22506] netlink: 'syz.0.4257': attribute type 10 has an invalid length.
[  574.531769][T22497] batman_adv: batadv0: Interface deactivated: dummy0
[  574.565051][T22506] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4257'.
[  574.618635][T22497] batman_adv: batadv0: Removing interface: dummy0
[  574.635453][T22497] bond8: (slave dummy0): making interface the new active one
[  574.652885][T22497] bond8: (slave dummy0): Enslaving as an active interface with an up link
[  574.699007][T22506] dummy0: entered promiscuous mode
[  574.718307][T22506] bond8: (slave dummy0): Releasing active interface
[  574.879844][T22519] netlink: 'syz.1.4261': attribute type 1 has an invalid length.
[  574.941420][T22526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4263'.
[  574.981972][T22519] 8021q: adding VLAN 0 to HW filter on device bond3
[  575.002389][T22528] bond3: (slave dummy0): Enslaving as a backup interface with an up link
[  575.087381][T11290] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  575.291082][T22540] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4264'.
[  575.315984][  T153] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  575.343382][T22540] netlink: 'syz.3.4264': attribute type 2 has an invalid length.
[  575.367930][T18682] IPVS: starting estimator thread 0...
[  575.466757][T22556] IPVS: using max 31 ests per chain, 74400 per kthread
[  575.535463][T22564] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4270'.
[  575.563237][T22564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4270'.
[  575.584675][T22564] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4270'.
[  575.690081][T22567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4271'.
[  575.720459][T22568] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  575.734458][T22567] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  575.777501][T22574] netlink: 'syz.0.4273': attribute type 49 has an invalid length.
[  575.832482][ T5646] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  575.854040][ T5646] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  575.864665][ T5646] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  575.882063][ T5646] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  575.900138][ T5646] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  576.485527][T22618] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.494514][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  576.619141][T22577] xfrm0 speed is unknown, defaulting to 1000
[  576.624013][T22629] tap0: tun_chr_ioctl cmd 1074025677
[  576.638758][T22629] tap0: linktype set to 805
[  576.932694][T22642] IPv6: addrconf: prefix option has invalid lifetime
[  577.090598][T22649] xfrm0 speed is unknown, defaulting to 1000
[  577.780887][T22577] bridge0: port 1(bridge_slave_0) entered blocking state
[  577.802923][T22684] xt_TPROXY: Can be used only with -p tcp or -p udp
[  577.835087][T22577] bridge0: port 1(bridge_slave_0) entered disabled state
[  577.865146][T22690] SET target dimension over the limit!
[  577.889190][T22577] bridge_slave_0: entered allmulticast mode
[  577.918711][T22577] bridge_slave_0: entered promiscuous mode
[  577.969257][ T5646] Bluetooth: hci1: command tx timeout
[  578.145177][T22577] bridge0: port 2(bridge_slave_1) entered blocking state
[  578.181920][T22577] bridge0: port 2(bridge_slave_1) entered disabled state
[  578.235630][T22577] bridge_slave_1: entered allmulticast mode
[  578.250767][T22706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.272006][T22577] bridge_slave_1: entered promiscuous mode
[  578.274705][T22706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.318312][T22706] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  578.473087][T22577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  578.548988][T22577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  578.667048][T22577] team0: Port device team_slave_0 added
[  578.678311][T22577] team0: Port device team_slave_1 added
[  578.853434][T22728] ipvlan1: entered promiscuous mode
[  578.890466][T22728] ipvlan1: left promiscuous mode
[  578.919623][T22577] batman_adv: batadv0: Adding interface: batadv_slave_0
[  578.946010][T22577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  578.990221][T22577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  579.124879][T22744] block nbd3: Unsupported socket: should be TCP or UNIX.
[  579.141599][T22577] batman_adv: batadv0: Adding interface: batadv_slave_1
[  579.153493][T22749] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 3, id = 0
[  579.167733][T22577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  579.226918][T22577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  579.346602][T22577] hsr_slave_0: entered promiscuous mode
[  579.365451][T22577] hsr_slave_1: entered promiscuous mode
[  579.384796][T22577] debugfs: 'hsr0' already exists in 'hsr'
[  579.391865][T22577] Cannot create hsr debugfs directory
[  579.537620][T22754] netlink: 'syz.0.4319': attribute type 1 has an invalid length.
[  579.995562][T22762] __nla_validate_parse: 10 callbacks suppressed
[  579.995582][T22762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4322'.
[  580.046352][ T5646] Bluetooth: hci1: command tx timeout
[  580.214512][T22577] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  580.248961][T22776] netlink: 'syz.1.4326': attribute type 1 has an invalid length.
[  580.249371][T22577] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  580.274511][T22577] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  580.291503][T22577] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  580.358453][T22577] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  580.371575][T22577] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  580.417021][T22577] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  580.453225][T22577] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  580.790036][T22577] 8021q: adding VLAN 0 to HW filter on device bond0
[  580.860229][T22577] 8021q: adding VLAN 0 to HW filter on device team0
[  580.902203][   T84] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.909490][   T84] bridge0: port 1(bridge_slave_0) entered forwarding state
[  580.944619][T22804] sctp: [Deprecated]: syz.5.4331 (pid 22804) Use of int in max_burst socket option.
[  580.944619][T22804] Use struct sctp_assoc_value instead
[  580.995124][   T84] bridge0: port 2(bridge_slave_1) entered blocking state
[  581.002345][   T84] bridge0: port 2(bridge_slave_1) entered forwarding state
[  581.032930][T22807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4329'.
[  581.086829][T22807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4329'.
[  581.733327][T22836] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  581.810295][T22828] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  581.839525][T22828] bond5: (slave lo): Enslaving as an active interface with an up link
[  581.851042][T22828] net_ratelimit: 2 callbacks suppressed
[  581.851061][T22828] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  582.126202][ T5646] Bluetooth: hci1: command tx timeout
[  582.392194][T22577] 8021q: adding VLAN 0 to HW filter on device batadv0
[  582.763092][T22868] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  582.885060][T22875] bridge3: entered promiscuous mode
[  582.913571][T22875] bridge3: entered allmulticast mode
[  583.038756][T22577] veth0_vlan: entered promiscuous mode
[  583.092618][T22577] veth1_vlan: entered promiscuous mode
[  583.205571][T22885] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4351'.
[  583.211631][T22577] veth0_macvtap: entered promiscuous mode
[  583.235561][T22577] veth1_macvtap: entered promiscuous mode
[  583.323651][T22577] batman_adv: batadv0: Interface activated: batadv_slave_0
[  583.360197][T22892] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4354'.
[  583.384217][T22892] netlink: 47 bytes leftover after parsing attributes in process `syz.1.4354'.
[  583.388193][T22577] batman_adv: batadv0: Interface activated: batadv_slave_1
[  583.410269][T22892] netlink: 'syz.1.4354': attribute type 6 has an invalid length.
[  583.432330][T22892] netlink: 'syz.1.4354': attribute type 6 has an invalid length.
[  583.444758][   T84] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  583.456998][   T84] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  583.499721][   T84] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  583.537139][   T84] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  583.665523][T22900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4355'.
[  583.760098][   T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.780263][   T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  583.897908][ T7981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  583.914257][ T7981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  584.027600][T22910] bond0: (slave bridge0): Releasing backup interface
[  584.068517][T22910] bridge0: left promiscuous mode
[  584.092367][T22910] bridge0: port 2(bridge_slave_1) entered disabled state
[  584.101071][T22910] bridge0: port 1(bridge_slave_0) entered disabled state
[  584.150541][T22910] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  584.206548][ T5646] Bluetooth: hci1: command tx timeout
[  584.396349][T22926] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4269'.
[  584.422126][T22924] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4362'.
[  584.438883][T22926] netlink: 23 bytes leftover after parsing attributes in process `syz.6.4269'.
[  584.474811][T22926] netlink: 'syz.6.4269': attribute type 6 has an invalid length.
[  584.513787][T22926] netlink: 'syz.6.4269': attribute type 5 has an invalid length.
[  584.724297][T22935] sctp: [Deprecated]: syz.0.4367 (pid 22935) Use of int in maxseg socket option.
[  584.724297][T22935] Use struct sctp_assoc_value instead
[  585.278270][T22959] Cannot find add_set index 4 as target
[  586.106726][T22983] __nla_validate_parse: 2 callbacks suppressed
[  586.106745][T22983] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4377'.
[  586.183724][T22983] netlink: 148 bytes leftover after parsing attributes in process `syz.6.4377'.
[  586.405343][T23001] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4381'.
[  586.414832][T23004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4382'.
[  586.414859][T23004] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4382'.
[  586.414877][T23004] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4382'.
[  586.414894][T23004] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4382'.
[  586.458295][T23004] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  586.540749][T23009] xt_TCPMSS: Only works on TCP SYN packets
[  586.673069][T23009] netlink: 'syz.0.4382': attribute type 49 has an invalid length.
[  586.891765][T23009] ip6gretap0: entered promiscuous mode
[  586.902273][T23009] ip6gretap0: entered allmulticast mode
[  587.035233][T23018] bridge0: port 2(bridge_slave_1) entered disabled state
[  587.043072][T23018] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.199604][T23018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  587.212058][T23018] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  587.478643][T23047] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  587.515151][  T153] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  587.534532][  T153] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  587.555447][T23055] geneve2: entered promiscuous mode
[  587.563258][  T153] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.602057][  T153] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.620850][T23055] netlink: 49 bytes leftover after parsing attributes in process `syz.6.4388'.
[  587.651698][T23055] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4388'.
[  587.675628][T23055] netlink: 49 bytes leftover after parsing attributes in process `syz.6.4388'.
[  587.805982][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.813279][    C0] bridge0: topology change detected, propagating
[  587.821110][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.828367][    C0] bridge0: topology change detected, propagating
[  587.885955][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  587.971180][T23068] bond6: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  588.027983][T23068] bond6 (unregistering): Released all slaves
[  588.356611][T23091] netlink: 'syz.5.4399': attribute type 1 has an invalid length.
[  588.480639][T23100] netlink: 'syz.1.4401': attribute type 1 has an invalid length.
[  588.509393][T23106] netlink: 'syz.0.4402': attribute type 10 has an invalid length.
[  588.549445][T23106] bridge0: port 2(bridge_slave_1) entered blocking state
[  588.556718][T23106] bridge0: port 2(bridge_slave_1) entered forwarding state
[  588.564306][T23106] bridge0: port 1(bridge_slave_0) entered blocking state
[  588.571535][T23106] bridge0: port 1(bridge_slave_0) entered forwarding state
[  588.641840][T23106] bridge0: entered promiscuous mode
[  588.661397][T23114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.670122][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.689303][T23106] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  588.707969][T23114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.720401][ T6380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.757761][T23114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.800180][T23109] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.811256][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.825217][ T6380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  588.925857][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  589.078950][T23142] gre0: entered promiscuous mode
[  589.593040][T23164] netlink: 'syz.3.4416': attribute type 13 has an invalid length.
[  589.804827][T23174] vlan2: entered promiscuous mode
[  589.849307][T23174] bridge0: entered promiscuous mode
[  590.365639][T23202] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  590.374226][T23206] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  590.390570][T23206] IPVS: set_ctl: invalid protocol: 12 100.1.1.0:20003
[  590.473099][T23202] bond1 (unregistering): Released all slaves
[  590.674262][T23211] netlink: 'syz.5.4427': attribute type 10 has an invalid length.
[  591.040582][T23226] gretap0: refused to change device tx_queue_len
[  591.468638][T23235] __nla_validate_parse: 9 callbacks suppressed
[  591.468657][T23235] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4436'.
[  591.485620][T23235] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  591.494272][T23235] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4436'.
[  591.848387][T23268] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.4441'.
[  591.909113][T23274] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4443'.
[  592.338839][T23296] xt_hashlimit: size too large, truncated to 1048576
[  592.976985][T23323] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4459'.
[  593.085896][    C0] net_ratelimit: 4 callbacks suppressed
[  593.085913][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  593.142659][T23337] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4461'.
[  593.203998][T23337] policy can only be matched on NF_INET_PRE_ROUTING
[  593.204013][T23337] unable to load match
[  593.289166][T23347] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4463'.
[  593.431493][T23357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4466'.
[  593.577268][T23359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4467'.
[  593.617998][T23359] openvswitch: netlink: Flow key attr not present in new flow.
[  593.640765][  T810] IPVS: starting estimator thread 0...
[  593.662955][T23361] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4468'.
[  593.767641][T23362] IPVS: using max 34 ests per chain, 81600 per kthread
[  594.024838][T23381] netlink: 'syz.1.4471': attribute type 1 has an invalid length.
[  594.026085][T23373] nbd5: detected capacity change from 0 to 63
[  594.043560][T23376] block nbd5: NBD_DISCONNECT
[  594.051217][T23381] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  594.058883][T23376] block nbd5: Disconnected due to user request.
[  594.084979][T23376] block nbd5: shutting down sockets
[  594.090405][T21645] blk_print_req_error: 27 callbacks suppressed
[  594.090421][T21645] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  594.120517][T21645] buffer_io_error: 27 callbacks suppressed
[  594.120534][T21645] Buffer I/O error on dev nbd5, logical block 0, async page read
[  594.126560][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  594.204545][T23383] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  594.224193][   T11] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2
[  594.248577][   T11] Buffer I/O error on dev nbd5, logical block 1, async page read
[  594.257221][   T11] Buffer I/O error on dev nbd5, logical block 2, async page read
[  594.265619][   T11] Buffer I/O error on dev nbd5, logical block 3, async page read
[  594.278038][T21645] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  594.288068][T21645] Buffer I/O error on dev nbd5, logical block 0, async page read
[  594.296600][T21645] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  594.300616][T23383] macvlan2: left promiscuous mode
[  594.305647][T21645] Buffer I/O error on dev nbd5, logical block 1, async page read
[  594.305876][T21645] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  594.330434][T21645] Buffer I/O error on dev nbd5, logical block 2, async page read
[  594.338869][T21645] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  594.348702][T21645] Buffer I/O error on dev nbd5, logical block 3, async page read
[  594.349608][T23383] ip6gre2: left promiscuous mode
[  594.356676][T21645] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  594.372588][T21645] Buffer I/O error on dev nbd5, logical block 0, async page read
[  594.381331][T21645] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  594.391177][T21645] Buffer I/O error on dev nbd5, logical block 1, async page read
[  594.399824][T21645] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  594.409269][T21645] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  594.421001][T21645] ldm_validate_partition_table(): Disk read failed.
[  594.432268][T21645] Dev nbd5: unable to read RDB block 0
[  594.440309][T21645]  nbd5: unable to read partition table
[  594.453886][T21645] ldm_validate_partition_table(): Disk read failed.
[  594.462802][T21645] Dev nbd5: unable to read RDB block 0
[  594.471427][T23385] 8021q: VLANs not supported on ip_vti0
[  594.473110][T21645]  nbd5: unable to read partition table
[  594.527547][   T84] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  594.788943][T23400] nbd: must specify at least one socket
[  594.803834][T23405] netlink: 'syz.5.4480': attribute type 1 has an invalid length.
[  595.008856][T23420] netlink: 'syz.6.4481': attribute type 1 has an invalid length.
[  595.166037][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  595.230125][T23429] ip6gre2: entered promiscuous mode
[  595.246169][T23429] ip6gre2: entered allmulticast mode
[  595.355044][T23433] vlan2: entered promiscuous mode
[  595.363631][T23433] batadv0: entered promiscuous mode
[  595.401515][T23436] vlan2: entered promiscuous mode
[  595.633949][T23427] xfrm0 speed is unknown, defaulting to 1000
[  595.662659][T23447] netdevsim netdevsim6: Direct firmware load for  failed with error -2
[  595.715205][T23447] netdevsim netdevsim6: Falling back to sysfs fallback for: 
[  596.206447][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  596.263559][T23471] bond6: option min_links: invalid value (18446744073709551612)
[  596.273981][T23471] bond6: option min_links: allowed values 0 - 2147483647
[  596.282567][T23471] bond6 (unregistering): Released all slaves
[  597.062393][T23504] bond9: Unable to set peer notification delay as MII monitoring is disabled
[  597.094512][T23504] bond9 (unregistering): Released all slaves
[  597.148841][T23503] __nla_validate_parse: 11 callbacks suppressed
[  597.148873][T23503] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4507'.
[  597.205590][T23515] FAULT_INJECTION: forcing a failure.
[  597.205590][T23515] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  597.243439][T23515] CPU: 0 UID: 0 PID: 23515 Comm: syz.6.4509 Not tainted syzkaller #0 PREEMPT(full) 
[  597.243465][T23515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  597.243478][T23515] Call Trace:
[  597.243486][T23515]  <TASK>
[  597.243495][T23515]  dump_stack_lvl+0xe8/0x150
[  597.243522][T23515]  should_fail_ex+0x412/0x560
[  597.243547][T23515]  _copy_to_user+0x31/0xb0
[  597.243571][T23515]  simple_read_from_buffer+0xe1/0x170
[  597.243599][T23515]  proc_fail_nth_read+0x1bb/0x230
[  597.243627][T23515]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  597.243654][T23515]  ? rw_verify_area+0x2a6/0x4d0
[  597.243678][T23515]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  597.243703][T23515]  vfs_read+0x20c/0xa70
[  597.243737][T23515]  ? __pfx___mutex_lock+0x10/0x10
[  597.243760][T23515]  ? __pfx_vfs_read+0x10/0x10
[  597.243786][T23515]  ? __fget_files+0x2a/0x420
[  597.243812][T23515]  ? __fget_files+0x3a0/0x420
[  597.243832][T23515]  ? __fget_files+0x2a/0x420
[  597.243870][T23515]  ksys_read+0x150/0x270
[  597.243897][T23515]  ? __pfx_ksys_read+0x10/0x10
[  597.243930][T23515]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.243950][T23515]  do_syscall_64+0x174/0x580
[  597.243969][T23515]  ? trace_irq_disable+0x3b/0x140
[  597.243993][T23515]  ? clear_bhb_loop+0x40/0x90
[  597.244015][T23515]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  597.244032][T23515] RIP: 0033:0x7fe145b5d68e
[  597.244050][T23515] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  597.244064][T23515] RSP: 002b:00007fe146b00fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  597.244085][T23515] RAX: ffffffffffffffda RBX: 00007fe146b016c0 RCX: 00007fe145b5d68e
[  597.244098][T23515] RDX: 000000000000000f RSI: 00007fe146b010a0 RDI: 0000000000000004
[  597.244110][T23515] RBP: 00007fe146b01090 R08: 0000000000000000 R09: 0000000000000000
[  597.244121][T23515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  597.244133][T23515] R13: 00007fe145e16038 R14: 00007fe145e15fa0 R15: 00007fff5b005998
[  597.244164][T23515]  </TASK>
[  597.315260][T23522] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.315620][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.471227][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  597.585646][T23532] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4512'.
[  597.891315][T23545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4517'.
[  598.010361][T23545] netlink: 'syz.3.4517': attribute type 6 has an invalid length.
[  598.047370][T23545] netlink: 'syz.3.4517': attribute type 6 has an invalid length.
[  598.081205][T23545] netlink: 'syz.3.4517': attribute type 5 has an invalid length.
[  598.187186][T23560] netlink: 'syz.5.4520': attribute type 25 has an invalid length.
[  598.207756][T23560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4520'.
[  598.211139][T23561] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4519'.
[  598.279734][T23566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.289259][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.302279][T23560] netlink: 'syz.5.4520': attribute type 25 has an invalid length.
[  598.310933][T11274] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  598.333104][T11274] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  598.336007][T23560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4520'.
[  598.352631][T11274] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  598.353583][T23561] netlink: 'syz.1.4519': attribute type 1 has an invalid length.
[  598.371938][T11274] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  598.382746][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  598.387490][T23566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4521'.
[  598.496321][T23564] bridge0: port 2(bridge_slave_1) entered disabled state
[  598.563256][T23574] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  598.926268][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  598.981301][T23591] FAULT_INJECTION: forcing a failure.
[  598.981301][T23591] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  599.011198][T23591] CPU: 0 UID: 0 PID: 23591 Comm: syz.3.4528 Not tainted syzkaller #0 PREEMPT(full) 
[  599.011226][T23591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  599.011238][T23591] Call Trace:
[  599.011246][T23591]  <TASK>
[  599.011255][T23591]  dump_stack_lvl+0xe8/0x150
[  599.011282][T23591]  should_fail_ex+0x412/0x560
[  599.011309][T23591]  _copy_from_user+0x2d/0xb0
[  599.011333][T23591]  ___sys_sendmsg+0x1c6/0x360
[  599.011355][T23591]  ? __lock_acquire+0x6b5/0x2cf0
[  599.011379][T23591]  ? __pfx____sys_sendmsg+0x10/0x10
[  599.011436][T23591]  ? __fget_files+0x2a/0x420
[  599.011457][T23591]  ? __fget_files+0x3a0/0x420
[  599.011488][T23591]  __x64_sys_sendmsg+0x1bd/0x2a0
[  599.011512][T23591]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  599.011541][T23591]  ? __pfx_ksys_write+0x10/0x10
[  599.011574][T23591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.011592][T23591]  do_syscall_64+0x174/0x580
[  599.011611][T23591]  ? trace_irq_disable+0x3b/0x140
[  599.011637][T23591]  ? clear_bhb_loop+0x40/0x90
[  599.011661][T23591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  599.011679][T23591] RIP: 0033:0x7f2fa239ce59
[  599.011705][T23591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  599.011721][T23591] RSP: 002b:00007f2fa3215028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  599.011742][T23591] RAX: ffffffffffffffda RBX: 00007f2fa2615fa0 RCX: 00007f2fa239ce59
[  599.011756][T23591] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003
[  599.011767][T23591] RBP: 00007f2fa3215090 R08: 0000000000000000 R09: 0000000000000000
[  599.011779][T23591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  599.011791][T23591] R13: 00007f2fa2616038 R14: 00007f2fa2615fa0 R15: 00007ffd1145f428
[  599.011822][T23591]  </TASK>
[  599.226724][T21645] udevd[21645]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  599.405936][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  599.782272][T23611] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  599.902973][T23617] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  599.939656][T23609] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4533'.
[  599.957784][T23609] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4533'.
[  599.978035][T23609] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4533'.
[  600.424243][T23633] xfrm0 speed is unknown, defaulting to 1000
[  601.275404][T23665] netlink: 'syz.5.4547': attribute type 1 has an invalid length.
[  601.396666][T23670] bond3: (slave dummy0): Removing an active aggregator
[  601.413155][T23670] bond3: (slave dummy0): Releasing backup interface
[  601.722424][T23683] netlink: 'syz.6.4550': attribute type 3 has an invalid length.
[  601.738967][T23655] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  601.770792][T23655] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  601.782005][T23683] netlink: 'syz.6.4550': attribute type 1 has an invalid length.
[  601.800291][T23655] bond0 (unregistering): Released all slaves
[  601.826270][T23680] syzkaller1: tun_chr_ioctl cmd 1074025677
[  601.837149][T23680] syzkaller1: Refused to change device type
[  602.231651][T23704] netlink: 'syz.5.4553': attribute type 1 has an invalid length.
[  602.246889][T23704] netlink: 'syz.5.4553': attribute type 2 has an invalid length.
[  602.265343][T23704] netlink: 'syz.5.4553': attribute type 2 has an invalid length.
[  602.282020][T23704] netlink: 'syz.5.4553': attribute type 2 has an invalid length.
[  602.303294][T23704] netlink: 'syz.5.4553': attribute type 1 has an invalid length.
[  602.326797][T23704] netlink: 'syz.5.4553': attribute type 2 has an invalid length.
[  602.354812][T23711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.366725][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  602.383442][T23711] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.150241][T23709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  603.161006][ T5749] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  604.800015][T23686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  605.053312][T23754] FAULT_INJECTION: forcing a failure.
[  605.053312][T23754] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  605.094300][T23754] CPU: 0 UID: 0 PID: 23754 Comm: syz.6.4564 Not tainted syzkaller #0 PREEMPT(full) 
[  605.094326][T23754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  605.094338][T23754] Call Trace:
[  605.094347][T23754]  <TASK>
[  605.094356][T23754]  dump_stack_lvl+0xe8/0x150
[  605.094382][T23754]  should_fail_ex+0x412/0x560
[  605.094406][T23754]  _copy_from_iter+0x1d3/0x1670
[  605.094430][T23754]  ? rcu_is_watching+0x15/0xb0
[  605.094457][T23754]  ? __pfx__copy_from_iter+0x10/0x10
[  605.094484][T23754]  ? netlink_sendmsg+0x650/0xb40
[  605.094504][T23754]  ? skb_put+0x11b/0x210
[  605.094529][T23754]  netlink_sendmsg+0x6c0/0xb40
[  605.094559][T23754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  605.094580][T23754]  ? aa_sock_msg_perm+0xf1/0x1b0
[  605.094606][T23754]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  605.094641][T23754]  ____sys_sendmsg+0x972/0x9f0
[  605.094661][T23754]  ? __might_fault+0xaf/0x130
[  605.094691][T23754]  ? __pfx_____sys_sendmsg+0x10/0x10
[  605.094717][T23754]  ? import_iovec+0x73/0xa0
[  605.094741][T23754]  ___sys_sendmsg+0x2a5/0x360
[  605.094760][T23754]  ? __lock_acquire+0x6b5/0x2cf0
[  605.094784][T23754]  ? __pfx____sys_sendmsg+0x10/0x10
[  605.094838][T23754]  ? __fget_files+0x2a/0x420
[  605.094859][T23754]  ? __fget_files+0x3a0/0x420
[  605.094890][T23754]  __x64_sys_sendmsg+0x1bd/0x2a0
[  605.094914][T23754]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  605.094945][T23754]  ? __pfx_ksys_write+0x10/0x10
[  605.094976][T23754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.094995][T23754]  do_syscall_64+0x174/0x580
[  605.095013][T23754]  ? trace_irq_disable+0x3b/0x140
[  605.095037][T23754]  ? clear_bhb_loop+0x40/0x90
[  605.095059][T23754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  605.095076][T23754] RIP: 0033:0x7fe145b9ce59
[  605.095095][T23754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  605.095111][T23754] RSP: 002b:00007fe146b01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  605.095130][T23754] RAX: ffffffffffffffda RBX: 00007fe145e15fa0 RCX: 00007fe145b9ce59
[  605.095144][T23754] RDX: 0000000004000004 RSI: 0000200000000100 RDI: 0000000000000003
[  605.095156][T23754] RBP: 00007fe146b01090 R08: 0000000000000000 R09: 0000000000000000
[  605.095167][T23754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  605.095179][T23754] R13: 00007fe145e16038 R14: 00007fe145e15fa0 R15: 00007fff5b005998
[  605.095209][T23754]  </TASK>
[  605.362130][T23753] __nla_validate_parse: 74 callbacks suppressed
[  605.362147][T23753] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.4563'.
[  605.382436][T23753] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4563'.
[  605.444446][T23763] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4567'.
[  605.478151][T23763] 8021q: adding VLAN 0 to HW filter on device bond1
[  605.503168][T23763] bond1: (slave batadv1): Opening slave failed
[  605.774214][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4570'.
[  605.800950][T23773] batman_adv: batadv0: Removing interface: batadv_slave_0
[  605.845178][T23773] batman_adv: batadv0: Removing interface: batadv_slave_1
[  606.121021][T23792] xfrm0 speed is unknown, defaulting to 1000
[  606.133421][T23799] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4575'.
[  606.472649][T23809] FAULT_INJECTION: forcing a failure.
[  606.472649][T23809] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  606.491220][T23809] CPU: 1 UID: 0 PID: 23809 Comm: syz.6.4578 Not tainted syzkaller #0 PREEMPT(full) 
[  606.491246][T23809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  606.491257][T23809] Call Trace:
[  606.491265][T23809]  <TASK>
[  606.491273][T23809]  dump_stack_lvl+0xe8/0x150
[  606.491299][T23809]  should_fail_ex+0x412/0x560
[  606.491323][T23809]  _copy_to_user+0x31/0xb0
[  606.491348][T23809]  bpf_test_finish+0x1db/0x6b0
[  606.491379][T23809]  ? __pfx_bpf_test_finish+0x10/0x10
[  606.491406][T23809]  ? _copy_from_user+0x94/0xb0
[  606.491427][T23809]  ? bpf_test_init+0x113/0x150
[  606.491449][T23809]  bpf_prog_test_run_xdp+0x8fa/0x1160
[  606.491485][T23809]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  606.491512][T23809]  ? __fget_files+0x2a/0x420
[  606.491539][T23809]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[  606.491561][T23809]  bpf_prog_test_run+0x2c7/0x340
[  606.491594][T23809]  __sys_bpf+0x643/0x950
[  606.491622][T23809]  ? __pfx___sys_bpf+0x10/0x10
[  606.491660][T23809]  ? ksys_write+0x242/0x270
[  606.491686][T23809]  ? __pfx_ksys_write+0x10/0x10
[  606.491713][T23809]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.491734][T23809]  __x64_sys_bpf+0x7c/0x90
[  606.491757][T23809]  do_syscall_64+0x174/0x580
[  606.491777][T23809]  ? trace_irq_disable+0x3b/0x140
[  606.491801][T23809]  ? clear_bhb_loop+0x40/0x90
[  606.491824][T23809]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  606.491841][T23809] RIP: 0033:0x7fe145b9ce59
[  606.491859][T23809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  606.491874][T23809] RSP: 002b:00007fe146b01028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  606.491894][T23809] RAX: ffffffffffffffda RBX: 00007fe145e15fa0 RCX: 00007fe145b9ce59
[  606.491913][T23809] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a
[  606.491925][T23809] RBP: 00007fe146b01090 R08: 0000000000000000 R09: 0000000000000000
[  606.491936][T23809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  606.491946][T23809] R13: 00007fe145e16038 R14: 00007fe145e15fa0 R15: 00007fff5b005998
[  606.491974][T23809]  </TASK>
[  606.937992][T23825] netlink: 'syz.0.4582': attribute type 1 has an invalid length.
[  606.954737][T23823] net_ratelimit: 2 callbacks suppressed
[  606.954757][T23823] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  606.992767][T23823] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4583'.
[  607.034230][T23825] bond9: entered promiscuous mode
[  607.045035][T23825] 8021q: adding VLAN 0 to HW filter on device bond9
[  607.054347][T23827] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  607.083937][T23827] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  607.098927][T23837] netlink: 'syz.6.4583': attribute type 1 has an invalid length.
[  607.114764][T23827] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  607.123832][T23830] macvtap1: entered allmulticast mode
[  607.173102][T23837] ip6gre1: entered promiscuous mode
[  607.191681][T23807] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  607.194634][T23837] ip6gre1: entered allmulticast mode
[  607.228796][ T7981] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  607.251143][  T810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  607.259262][ T7981] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  607.355316][T23846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4586'.
[  607.380748][  T810] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  607.491228][T23850] netlink: 'syz.1.4589': attribute type 3 has an invalid length.
[  607.492156][T23849] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4588'.
[  607.508718][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4586'.
[  607.548599][T23849] batadv_slave_1: entered promiscuous mode
[  607.604724][ T5646] block nbd3: Receive control failed (result -32)
[  607.605418][ T5648] block nbd3: Receive control failed (result -32)
[  607.646398][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  607.820445][T23865] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4592'.
[  607.832513][T23856] netlink: 'syz.1.4591': attribute type 14 has an invalid length.
[  608.206283][ T5827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  608.293599][T23888] syzkaller0: entered promiscuous mode
[  608.301867][T23888] syzkaller0: entered allmulticast mode
[  608.334219][T23892] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  608.336408][ T5827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  608.876169][ T5827] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  608.940794][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  610.926026][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  611.162358][T23892] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR
[  611.168870][T23915] __nla_validate_parse: 2 callbacks suppressed
[  611.168892][T23915] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.4605'.
[  611.611119][T23937] netlink: 256 bytes leftover after parsing attributes in process `syz.6.4612'.
[  611.781015][T23955] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  611.842457][T23957] syzkaller1: entered promiscuous mode
[  611.854719][T23957] syzkaller1: entered allmulticast mode
[  611.988100][T23957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4617'.
[  612.092949][T23976] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4623'.
[  612.109834][T23957] 8021q: adding VLAN 0 to HW filter on device bond10
[  612.203667][T23978] netlink: 'syz.1.4621': attribute type 4 has an invalid length.
[  612.704790][T23982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  613.031238][T24028] xt_hashlimit: size too large, truncated to 1048576
[  613.054396][T24029] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  613.147085][  T153] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  613.164318][  T153] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  613.207695][  T153] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  613.219869][  T153] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  618.526087][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  624.296700][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  625.541003][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4636'.
[  625.585738][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4638'.
[  625.602947][T24052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4636'.
[  625.663207][T24047] xfrm0 speed is unknown, defaulting to 1000
[  625.671118][T24056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4640'.
[  625.720213][T24052] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4636'.
[  626.150433][T24077] Bluetooth: MGMT ver 1.23
[  626.723402][T24100] bond11: option min_links: invalid value (18446744073709551612)
[  626.732787][T24100] bond11: option min_links: allowed values 0 - 2147483647
[  626.750035][T24100] bond11 (unregistering): Released all slaves
[  626.963107][T24118] x_tables: ip_tables: osf match: only valid for protocol 6
[  627.204060][T24133] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4662'.
[  627.317322][T24141] netlink: 'syz.0.4664': attribute type 1 has an invalid length.
[  627.340012][T24141] netlink: 'syz.0.4664': attribute type 2 has an invalid length.
[  627.360737][T24141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4664'.
[  627.641842][T24161] batadv_slave_0: entered promiscuous mode
[  627.690303][T24161] bridge_slave_0: left allmulticast mode
[  627.706838][T24161] bridge0: port 1(bridge_slave_0) entered disabled state
[  627.782440][T24161] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  627.836544][T24160] batadv_slave_0: left promiscuous mode
[  627.844523][T24173] netlink: 'syz.0.4675': attribute type 1 has an invalid length.
[  627.900547][T24173] 8021q: adding VLAN 0 to HW filter on device bond11
[  627.994408][T24184] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4675'.
[  628.017298][T24184] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4675'.
[  628.094974][T24173] gretap2: entered promiscuous mode
[  628.108176][T24173] bond11: (slave gretap2): making interface the new active one
[  628.118230][T24173] bond11: (slave gretap2): Enslaving as an active interface with an up link
[  628.145882][ T6380] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.164719][ T6380] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.197306][T24191] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4681'.
[  628.210406][T24193] netlink: 'syz.1.4682': attribute type 1 has an invalid length.
[  628.234666][ T6380] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.339984][T24193] 8021q: adding VLAN 0 to HW filter on device bond6
[  628.352727][ T6380] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  628.375557][T24203] netlink: 'syz.3.4684': attribute type 6 has an invalid length.
[  628.470023][T24198] bond6: (slave veth5): Enslaving as an active interface with a down link
[  628.530102][T24201] bond6: (slave veth7): Enslaving as an active interface with a down link
[  628.587212][T24193] bond6: (slave bridge4): Enslaving as an active interface with a down link
[  628.760344][T24218] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  629.081957][T24236] tipc: Started in network mode
[  629.091348][T24239] IPv6: Can't replace route, no match found
[  629.093038][T24236] tipc: Node identity ae633819e305, cluster identity 4711
[  629.108918][   T29] audit: type=1800 audit(1780690634.501:14): pid=24238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4694" name="memory.events" dev="tmpfs" ino=1751 res=0 errno=0
[  629.113682][T24236] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  629.137285][T24239] IPv6: Can't replace route, no match found
[  629.174463][T24242] syzkaller0: entered promiscuous mode
[  629.198043][T24242] syzkaller0: entered allmulticast mode
[  629.306567][T24244] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check.
[  629.372258][T24236] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  629.544888][T24255] vcan0: tx drop: invalid da for name 0x00000000000000c7
[  629.693148][T24225] tipc: Resetting bearer <eth:syzkaller0>
[  629.772825][T24225] tipc: Disabling bearer <eth:syzkaller0>
[  629.827394][T24263] netlink: 'syz.0.4698': attribute type 1 has an invalid length.
[  630.584921][T24308] __nla_validate_parse: 9 callbacks suppressed
[  630.584942][T24308] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4709'.
[  630.932714][T24317] netlink: 'syz.3.4712': attribute type 1 has an invalid length.
[  631.101836][T24317] 8021q: adding VLAN 0 to HW filter on device bond5
[  631.181209][T24327] bond5: (slave erspan0): Enslaving as a backup interface with an up link
[  631.277393][ T7981] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  631.313533][T24344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4716'.
[  631.330857][T24336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4715'.
[  631.508702][ T7981] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  631.945174][T24360] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4719'.
[  631.999972][T24360] openvswitch: netlink: Flow key attr not present in new flow.
[  632.254685][T24376] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4722'.
[  632.284262][T24375] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4722'.
[  632.344495][T24379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4723'.
[  632.455391][T24384] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.489836][T24384] bridge0: port 2(bridge_slave_1) entered disabled state
[  632.904794][T24404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4729'.
[  633.208755][T24416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4734'.
[  633.219385][T24417] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4733'.
[  633.235436][T24417] netlink: 'syz.5.4733': attribute type 41 has an invalid length.
[  633.279755][T24416] team0: Port device team_slave_0 removed
[  633.441294][T24430] netdevsim netdevsim1: Firmware load for './file0/file0/..' refused, path contains '..' component
[  633.675460][T24444] syzkaller0: entered promiscuous mode
[  633.693412][T24444] syzkaller0: entered allmulticast mode
[  633.834123][T24453] netlink: 'syz.6.4746': attribute type 4 has an invalid length.
[  633.866146][T24450] xfrm0 speed is unknown, defaulting to 1000
[  634.524639][T24460] dvmrp0: entered allmulticast mode
[  634.604100][T24473] netlink: 'syz.0.4750': attribute type 1 has an invalid length.
[  635.101703][T24495] netlink: 'syz.3.4754': attribute type 9 has an invalid length.
[  635.130480][T24473] 8021q: adding VLAN 0 to HW filter on device bond12
[  635.212964][T24486] 8021q: adding VLAN 0 to HW filter on device batadv2
[  635.231775][T24486] bond12: (slave batadv2): making interface the new active one
[  635.244241][T24486] bond12: (slave batadv2): Enslaving as an active interface with an up link
[  635.285043][T24490] vlan4: entered promiscuous mode
[  635.298995][T24490] gretap0: entered promiscuous mode
[  635.341419][T24495] bond5: (slave erspan0): Removing an active aggregator
[  635.370803][T24495] bond5: (slave erspan0): Releasing backup interface
[  635.401834][T24495] bridge_slave_0: left allmulticast mode
[  635.413176][T24495] bridge_slave_0: left promiscuous mode
[  635.413794][T24507] netlink: 'syz.0.4756': attribute type 21 has an invalid length.
[  635.420431][T24495] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.442323][T24507] netlink: 'syz.0.4756': attribute type 22 has an invalid length.
[  635.455513][T24507] netlink: 'syz.0.4756': attribute type 23 has an invalid length.
[  635.467735][T24495] bridge_slave_1: left allmulticast mode
[  635.473530][T24495] bridge_slave_1: left promiscuous mode
[  635.477452][T24507] netlink: 'syz.0.4756': attribute type 25 has an invalid length.
[  635.481810][T24495] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.489734][T24507] netlink: 'syz.0.4756': attribute type 26 has an invalid length.
[  635.520590][T24495] team0: Port device team_slave_1 removed
[  635.527856][T24495] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  635.787908][T24519] syzkaller0: entered promiscuous mode
[  635.794088][T24519] syzkaller0: entered allmulticast mode
[  635.809963][T24526] netlink: 'syz.5.4761': attribute type 1 has an invalid length.
[  635.822463][T24519] tipc: Started in network mode
[  635.828296][T24519] tipc: Node identity 561e7924ec1a, cluster identity 4711
[  635.838143][T24519] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  636.024412][T24535] __nla_validate_parse: 11 callbacks suppressed
[  636.024425][T24535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4762'.
[  636.557540][T24532] tipc: Resetting bearer <eth:syzkaller0>
[  636.570216][T24518] tipc: Resetting bearer <eth:syzkaller0>
[  636.637167][T24518] tipc: Disabling bearer <eth:syzkaller0>
[  636.674145][T24541] xt_bpf: check failed: parse error
[  637.033946][T24561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4772'.
[  637.280612][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.311467][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.332025][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.352324][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.366497][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.392179][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.404776][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.432769][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.464566][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.490312][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.513346][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.528238][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.548171][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.559655][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.579956][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.590524][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.612456][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.623424][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.638242][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.668877][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.680675][T24591] syzkaller1: entered promiscuous mode
[  637.695320][T24591] syzkaller1: entered allmulticast mode
[  637.721644][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.810335][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.833292][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.909751][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  637.961107][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  638.028094][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  638.060574][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  638.092336][ T6373] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  638.119195][ T6373] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  638.189553][T24614] erspan0: entered promiscuous mode
[  638.215375][T24572] mac80211_hwsim hwsim54 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  638.238235][ T6373] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  638.257191][ T6373] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  638.509926][T24639] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4796'.
[  638.517486][T24634] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4795'.
[  638.543747][T24637] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4796'.
[  638.590276][T24637] ip6gre3: entered promiscuous mode
[  638.595620][T24637] ip6gre3: entered allmulticast mode
[  638.612746][T24637] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  638.656638][T24641] xt_CT: You must specify a L4 protocol and not use inversions on it
[  638.769635][T24652] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.4799'.
[  638.897759][ T6373] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  638.906796][ T6373] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  638.926862][  T810] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  639.378478][  T810] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  639.587378][T24697] Cannot find map_set index 4 as target
[  639.658918][ T5727] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  639.720159][T24704] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.730188][T24704] bridge0: entered allmulticast mode
[  639.757074][T24704] bridge_slave_1: left allmulticast mode
[  639.767151][T24704] bridge_slave_1: left promiscuous mode
[  639.778599][T24704] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.814930][T24707] netlink: 'syz.5.4816': attribute type 2 has an invalid length.
[  639.885395][T24711] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4819'.
[  640.115398][T24714] netlink: 'syz.6.4820': attribute type 8 has an invalid length.
[  640.145540][T24711] 8021q: adding VLAN 0 to HW filter on device team0
[  640.269292][T24711] bridge_slave_1: entered promiscuous mode
[  640.302532][T24711] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  640.348187][ T5749] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.456624][T24724] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4822'.
[  640.536470][ T5648] Bluetooth: hci1: link tx timeout
[  640.549050][ T5648] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  640.560997][ T5648] Bluetooth: hci1: link tx timeout
[  640.566963][ T5648] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  640.578732][T11274] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.587552][ T5727] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  640.598815][ T5648] Bluetooth: hci1: link tx timeout
[  640.605165][ T5648] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  640.614790][T24723] xfrm0 speed is unknown, defaulting to 1000
[  640.848633][T11280] wlan1: Trigger new scan to find an IBSS to join
[  640.950355][T24734] vlan3: entered promiscuous mode
[  641.471036][T24749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  641.537829][T24761] tipc: Enabled bearer <eth:ip6gre0>, priority 2
[  641.717436][T24749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  641.729853][T24770] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4835'.
[  641.775156][   T84] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  641.790476][   T84] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  641.973768][T24749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  642.011176][T24779] netlink: 'syz.6.4837': attribute type 13 has an invalid length.
[  642.032663][T24779] netlink: 140 bytes leftover after parsing attributes in process `syz.6.4837'.
[  642.140670][T24782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4838'.
[  642.194339][T24749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[  642.410830][T24795] netlink: 280 bytes leftover after parsing attributes in process `syz.6.4841'.
[  642.482709][T11290] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  642.595272][T11290] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  642.607404][ T5648] Bluetooth: hci1: command 0x0406 tx timeout
[  642.689460][   T10] tipc: Node number set to 3120855332
[  642.715769][ T7981] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  642.832885][ T7981] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  643.074144][T24811] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  643.100357][T24811] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  643.205057][T24820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4848'.
[  643.217102][T24814] vxcan2: entered allmulticast mode
[  643.249886][T11290] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  643.317390][T24814] vxcan2: entered allmulticast mode
[  643.373454][T24823] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4849'.
[  643.417173][T24823] netlink: 80 bytes leftover after parsing attributes in process `syz.5.4849'.
[  643.455081][T24814] vxcan2: entered allmulticast mode
[  643.475043][T24823] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4849'.
[  643.508569][T24823] nbd: socks must be embedded in a SOCK_ITEM attr
[  643.564941][T24814] vxcan2: entered allmulticast mode
[  643.676517][T24814] vxcan2: entered allmulticast mode
[  644.011226][T24850] netlink: 'syz.6.4854': attribute type 1 has an invalid length.
[  644.098332][T24855] netlink: 'syz.3.4855': attribute type 1 has an invalid length.
[  644.107343][T24855] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4855'.
[  644.109904][T24856] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4855'.
[  644.217892][T24853] bond2: (slave veth3): Enslaving as an active interface with a down link
[  644.330041][T24857] bond2: (slave veth5): Enslaving as an active interface with a down link
[  644.363129][T24850] 8021q: adding VLAN 0 to HW filter on device bond2
[  644.428001][T24865] veth7: entered promiscuous mode
[  644.579436][ T5295] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  645.486131][    C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  645.486151][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  645.603513][T24906] v: renamed from sit0 (while UP)
[  645.805418][T24926] openvswitch: netlink: Tunnel attr 78 out of range max 16
[  645.819242][T11290] wlan1: Trigger new scan to find an IBSS to join
[  645.885756][T24923] xt_CT: No such helper "syz1"
[  645.887893][T24930] netlink: 'syz.6.4873': attribute type 1 has an invalid length.
[  645.920928][T24930] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  646.471261][T24960] netlink: 'syz.5.4884': attribute type 2 has an invalid length.
[  646.672408][T24969] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  646.743951][T24976] __nla_validate_parse: 9 callbacks suppressed
[  646.743970][T24976] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4891'.
[  646.820428][T11290] wlan1: Creating new IBSS network, BSSID 6e:1b:fc:27:7a:7b
[  646.838869][T24978] dummy0: entered allmulticast mode
[  646.852686][T24980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4891'.
[  646.901230][T24969] IPVS: persistence engine module ip_vs_pe_À not found
[  646.983766][T24983] veth0_virt
ÿifi: renamed from ip6gretap0 (while UP)
[  647.008593][T24983] veth0_virt
ÿifi: refused to change device tx_queue_len
[  647.040196][T24983] A link change request failed with some changes committed already. Interface veth0_virt
ÿifi may have been left with an inconsistent configuration, please check.
[  647.103704][T24983] netlink: 165 bytes leftover after parsing attributes in process `syz.5.4892'.
[  647.208241][T24992] x_tables: duplicate underflow at hook 1
[  647.407637][T25020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4898'.
[  647.418259][T25020] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4898'.
[  647.468190][T25020] dvmrp1: tun_chr_ioctl cmd 1074025677
[  647.484145][T25020] dvmrp1: linktype set to 804
[  647.758367][T25037] syzkaller0: entered promiscuous mode
[  647.771388][T25037] syzkaller0: entered allmulticast mode
[  647.818960][T25034] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  647.849856][T25033] tipc: Resetting bearer <eth:syzkaller0>
[  647.903054][T25033] tipc: Disabling bearer <eth:syzkaller0>
[  648.142574][T25043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4904'.
[  648.796012][T25057] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4908'.
[  649.022293][   T29] audit: type=1800 audit(1780690654.421:15): pid=25059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.4909" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2033 res=0 errno=0
[  649.072198][T25069] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4912'.
[  649.187281][T25074] netlink: 'syz.3.4914': attribute type 10 has an invalid length.
[  649.601557][T25096] syzkaller1: entered promiscuous mode
[  649.609964][T25096] syzkaller1: entered allmulticast mode
[  649.642687][T25092] xfrm0 speed is unknown, defaulting to 1000
[  650.043311][T25114] netlink: 'syz.5.4922': attribute type 16 has an invalid length.
[  650.083597][T25114] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4922'.
[  650.526365][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  650.683123][T25139] netlink: 'syz.0.4930': attribute type 1 has an invalid length.
[  650.694424][T25139] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4930'.
[  651.084936][T25154] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  651.331437][T25157] syzkaller0: entered promiscuous mode
[  651.351324][T25157] syzkaller0: entered allmulticast mode
[  651.373160][T25161] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  651.617249][T25167] netlink: 'syz.5.4934': attribute type 16 has an invalid length.
[  651.630967][T25165] netlink: 'syz.5.4934': attribute type 16 has an invalid length.
[  651.681925][T25167] netlink: 'syz.5.4934': attribute type 17 has an invalid length.
[  651.690450][T25165] netlink: 'syz.5.4934': attribute type 17 has an invalid length.
[  651.889420][T25167] bridge_slave_0: left promiscuous mode
[  651.980900][T25167] macvlan2: left allmulticast mode
[  651.987873][T25167] erspan0: left allmulticast mode
[  651.995081][T25167] ip6gre2: left allmulticast mode
[  652.015681][T25167] 8021q: adding VLAN 0 to HW filter on device bond5
[  652.031311][T25167] 8021q: adding VLAN 0 to HW filter on device bond6
[  652.057780][T25167] ip6gre3: left promiscuous mode
[  652.062800][T25167] ip6gre3: left allmulticast mode
[  652.071810][T25167] 8021q: adding VLAN 0 to HW filter on device bond7
[  652.097528][T18681] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  652.138137][ T5756] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  652.859509][ T5756] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  653.086148][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  654.865473][T25184] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  654.973269][T25204] __nla_validate_parse: 3 callbacks suppressed
[  654.973290][T25204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4942'.
[  655.049710][T25206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4943'.
[  655.072105][T25206] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4943'.
[  655.092064][T25207] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4942'.
[  655.184108][T25199] batman_adv: batadv0: Interface deactivated: dummy0
[  655.351400][T25199] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  655.381199][T25199] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  656.129718][T25204] 8021q: adding VLAN 0 to HW filter on device bond6
[  656.139587][T25207] bond6: entered promiscuous mode
[  656.147268][T25207] bond6: entered allmulticast mode
[  656.188113][ T6371] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  656.211843][ T6371] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.230097][ T6371] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  656.262835][ T6371] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.297354][ T6371] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  656.326798][ T6371] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  656.529752][T25235] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4950'.
[  656.663105][T25239] erspan0: left promiscuous mode
[  656.739376][T25239] 8021q: adding VLAN 0 to HW filter on device bond0
[  656.754923][T25239] 8021q: adding VLAN 0 to HW filter on device team0
[  656.779107][T25239] batman_adv: batadv0: Interface activated: dummy0
[  656.798685][T25239] batadv0: mtu less than device minimum
[  656.814654][T25239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  656.826511][T25239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  656.838247][T25239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  656.850013][T25239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  656.861778][T25239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  656.873546][T25239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  656.885360][T25239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  656.897199][T25239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  656.908963][T25239] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  656.943107][T25239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  657.054542][T25239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  657.089964][T25239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  657.135189][T25239] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  657.176778][T25239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  657.211891][T25239] veth1_vlan: left promiscuous mode
[  657.249048][T25239] veth0_vlan: left promiscuous mode
[  657.255561][T25239] veth0_vlan: entered promiscuous mode
[  657.264374][T25249] netlink: 'syz.0.4955': attribute type 1 has an invalid length.
[  657.291829][T25239] veth1_vlan: entered promiscuous mode
[  657.331816][T25251] netlink: 'syz.3.4954': attribute type 1 has an invalid length.
[  657.350213][T25239] veth1_macvtap: left promiscuous mode
[  657.375201][T25239] veth0_macvtap: left promiscuous mode
[  657.385475][T25257] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4954'.
[  657.397270][T25239] veth0_macvtap: entered promiscuous mode
[  657.414805][T25239] veth1_macvtap: entered promiscuous mode
[  657.453472][T25239] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  657.464635][T25239] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  657.473858][T25239] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  657.493493][T25239] 8021q: adding VLAN 0 to HW filter on device bond1
[  657.509877][T25239] erspan0: entered promiscuous mode
[  657.519616][T25239] 8021q: adding VLAN 0 to HW filter on device bond2
[  657.528155][T25239] 8021q: adding VLAN 0 to HW filter on device bond3
[  657.541899][T25239] 8021q: adding VLAN 0 to HW filter on device bond4
[  657.555201][T25264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4956'.
[  657.565289][T25239] 8021q: adding VLAN 0 to HW filter on device bond5
[  657.577361][T25239] 8021q: adding VLAN 0 to HW filter on device bond6
[  657.609943][T25239] 8021q: adding VLAN 0 to HW filter on device bond7
[  657.735528][T25249] bond13: entered promiscuous mode
[  657.749197][T25249] 8021q: adding VLAN 0 to HW filter on device bond13
[  657.818870][T25257] 8021q: adding VLAN 0 to HW filter on device bond7
[  657.832339][T11284] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  657.842110][T11284] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  657.964114][T11284] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  658.013155][T11284] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  658.054783][T25279] netlink: 'syz.0.4960': attribute type 4 has an invalid length.
[  658.064142][T11291] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  658.090983][T11291] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  658.100709][T25281] netlink: 'syz.0.4960': attribute type 4 has an invalid length.
[  658.156216][T25288] netlink: 'syz.1.4962': attribute type 1 has an invalid length.
[  658.168194][T25280] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  658.230863][T25290] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4962'.
[  658.282989][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  658.314552][ T5756] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  658.330107][   T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  658.363889][   T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  658.386623][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4965'.
[  658.387107][ T5749] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  658.409276][   T13] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  658.499709][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  658.504410][T25300] tipc: Resetting bearer <eth:ip6gre0>
[  658.545086][T25300] tipc: Resetting bearer <eth:ip6gre0>
[  658.841404][T25324] Unsupported ieee802154 address type: 0
[  659.004596][T25332] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  659.034097][T25332] syzkaller0: entered promiscuous mode
[  659.047431][T25332] syzkaller0: entered allmulticast mode
[  659.080895][T25332] tipc: Resetting bearer <eth:syzkaller0>
[  659.102021][ T5749] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  659.138501][T25330] tipc: Resetting bearer <eth:syzkaller0>
[  659.230454][T25330] tipc: Disabling bearer <eth:syzkaller0>
[  659.258383][ T5749] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  659.277401][ T5749] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  659.420328][T25350] bond7: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  659.446868][T25350] bond7 (unregistering): Released all slaves
[  659.493028][T25345] xfrm0 speed is unknown, defaulting to 1000
[  659.604567][T25362] bond3: entered promiscuous mode
[  659.638525][T25368] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4980'.
[  659.646325][T25362] bond3: entered allmulticast mode
[  659.658567][T25362] 8021q: adding VLAN 0 to HW filter on device bond3
[  659.835560][T25372] dvmrp0: entered allmulticast mode
[  659.995490][T25371] xfrm0 speed is unknown, defaulting to 1000
[  660.048021][T25385] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4986'.
[  660.102023][T25390] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4986'.
[  660.178698][T25392] sctp: [Deprecated]: syz.1.4987 (pid 25392) Use of struct sctp_assoc_value in delayed_ack socket option.
[  660.178698][T25392] Use struct sctp_sack_info instead
[  660.224903][T25385] hsr_slave_1 (unregistering): left promiscuous mode
[  660.264092][T25396] sctp: [Deprecated]: syz.1.4987 (pid 25396) Use of struct sctp_assoc_value in delayed_ack socket option.
[  660.264092][T25396] Use struct sctp_sack_info instead
[  660.817793][T25414] netlink: 'syz.6.4992': attribute type 1 has an invalid length.
[  660.832263][T25414] netlink: 224 bytes leftover after parsing attributes in process `syz.6.4992'.
[  660.841536][T25420] bond0: Device is already in use.
[  660.847099][T25419] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4994'.
[  661.017838][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4996'.
[  661.028749][T25427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4996'.
[  661.299584][T25436] netlink: 'syz.1.4998': attribute type 2 has an invalid length.
[  661.320906][T25436] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4998'.
[  661.457056][T25441] SET target dimension over the limit!
[  661.908432][T25464] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5003'.
[  662.073801][T25463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5004'.
[  662.227157][   T13] net_ratelimit: 68 callbacks suppressed
[  662.227175][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  662.247766][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  662.766415][T11284] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  662.781030][T11284] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  662.829858][T25439] kthread_run failed with err -4
[  662.960560][T25456] xfrm0 speed is unknown, defaulting to 1000
[  663.007941][T25479] IPVS: set_ctl: invalid protocol: 94 100.1.1.1:20000
[  663.041015][T25480] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5008'.
[  663.055360][T25484] SET target dimension over the limit!
[  663.306832][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  663.322119][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  663.719679][T25514] lo speed is unknown, defaulting to 1000
[  663.782862][T25514] lo speed is unknown, defaulting to 1000
[  663.809551][T25514] lo speed is unknown, defaulting to 1000
[  663.866742][ T6371] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  663.881673][ T6371] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  664.002008][T25530] syzkaller1: entered promiscuous mode
[  664.012045][T25530] syzkaller1: entered allmulticast mode
[  664.408300][ T6371] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  664.423429][ T6371] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  664.438409][T25514] infiniband syz0: set down
[  664.444244][T18681] lo speed is unknown, defaulting to 1000
[  664.447794][T25514] infiniband syz0: added lo
[  664.552318][T25514] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  664.579621][T25514] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  664.603965][T25514] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  664.694950][T25514] RDS/IB: syz0: added
[  664.709140][T25514] smc: adding ib device syz0 with port count 1
[  664.723193][T25514] smc:    ib device syz0 port 1 has pnetid S (user defined)
[  664.743996][ T5727] lo speed is unknown, defaulting to 1000
[  664.752745][T25514] lo speed is unknown, defaulting to 1000
[  665.012511][T25567] xfrm0 speed is unknown, defaulting to 1000
[  665.091978][T25514] lo speed is unknown, defaulting to 1000
[  665.339173][T25569] __nla_validate_parse: 9 callbacks suppressed
[  665.339192][T25569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5035'.
[  665.418942][T25572] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5035'.
[  665.483682][T25567] lo speed is unknown, defaulting to 1000
[  665.717368][T25514] lo speed is unknown, defaulting to 1000
[  666.028370][T25589] netlink: 'syz.0.5039': attribute type 1 has an invalid length.
[  666.128757][T25592] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5039'.
[  666.199866][T25589] bond14: entered promiscuous mode
[  666.217295][T25589] 8021q: adding VLAN 0 to HW filter on device bond14
[  666.312862][T25594] bond14: (slave bridge7): making interface the new active one
[  666.334554][T25594] bridge7: entered promiscuous mode
[  666.354932][T25594] bond14: (slave bridge7): Enslaving as an active interface with an up link
[  666.405725][T25514] lo speed is unknown, defaulting to 1000
[  666.794247][T25614] macsec1: entered promiscuous mode
[  666.806957][T25614] vlan0: entered promiscuous mode
[  666.834682][T25614] vlan0: left promiscuous mode
[  667.152592][T25514] lo speed is unknown, defaulting to 1000
[  667.496581][T11284] net_ratelimit: 11 callbacks suppressed
[  667.496600][T11284] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  667.516956][T11284] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  667.682880][T25514] lo speed is unknown, defaulting to 1000
[  667.805998][    C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed
[  667.806015][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  668.047048][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  668.061942][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  668.175001][T25657] ip6tnl1: entered promiscuous mode
[  668.193338][T25658] netlink: 'syz.0.5058': attribute type 1 has an invalid length.
[  668.197241][T25514] lo speed is unknown, defaulting to 1000
[  668.283218][T25650] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5057'.
[  668.502918][T25514] lo speed is unknown, defaulting to 1000
[  668.616545][T11284] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  668.631531][T11284] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  668.632431][T25514] lo speed is unknown, defaulting to 1000
[  668.766481][T25514] lo speed is unknown, defaulting to 1000
[  669.157036][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  669.171888][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  669.696015][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  669.710616][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  671.016337][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  671.647394][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  672.796337][   T36] net_ratelimit: 10 callbacks suppressed
[  672.796357][   T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  672.816866][   T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  673.336486][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  673.350937][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  673.866095][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  673.881135][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  674.406595][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  674.421140][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  674.936282][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  674.951062][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  678.026380][   T13] net_ratelimit: 10 callbacks suppressed
[  678.026401][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  678.047086][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  678.566652][   T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  678.581025][   T36] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  679.096562][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  679.111027][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  679.327107][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  679.626790][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  679.641398][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  680.177169][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  680.191832][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  682.686362][ T5646] Bluetooth: hci2: command 0x0405 tx timeout
[  683.267031][T11282] net_ratelimit: 10 callbacks suppressed
[  683.267051][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  683.288048][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  683.558027][T25680] batadv_slave_0: entered promiscuous mode
[  683.559747][T25677] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5062'.
[  683.602094][T25677] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5062'.
[  683.808039][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  683.823700][T11265] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  684.177152][T25715] netlink: 212320 bytes leftover after parsing attributes in process `syz.3.5072'.
[  684.261465][T25719] syzkaller1: entered promiscuous mode
[  684.269605][T25719] syzkaller1: entered allmulticast mode
[  684.302375][T25719] xt_hashlimit: overflow, try lower: 9/9223372036854775808
[  684.343279][T25728] Cannot find map_set index 4 as target
[  684.378092][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  684.392529][T11282] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  684.463090][T25735] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c)
[  684.966684][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  684.981698][   T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  685.546454][T11291] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  687.251268][T25669] batadv_slave_0: left promiscuous mode
[  687.551429][T25763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5078'.
[  687.646627][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  687.682868][T25767] netlink: 136 bytes leftover after parsing attributes in process `syz.3.5080'.
[  687.702307][T25767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5080'.
[  687.744183][T25767] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5080'.
[  687.804114][T25774] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5082'.
[  687.921489][T25782] netlink: 'syz.0.5084': attribute type 6 has an invalid length.
[  687.928569][T25781] netlink: 27 bytes leftover after parsing attributes in process `syz.5.5085'.
[  688.077822][T25777] syzkaller0: entered promiscuous mode
[  688.083405][T25777] syzkaller0: entered allmulticast mode
[  688.203969][T25798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5087'.
[  688.338592][T25776] syzkaller0: delete flow: hash 1339129152 index 1
[  688.617119][T25014] net_ratelimit: 11 callbacks suppressed
[  688.617139][T25014] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  688.637926][T25014] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  688.932032][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  689.159224][T25014] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  689.174408][T25014] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  689.707500][T25008] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  689.722560][T25008] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  690.246397][T25008] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  690.261248][T25008] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  690.790588][T25008] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  690.805527][T25008] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  691.702843][T25813] xfrm0 speed is unknown, defaulting to 1000
[  691.720122][T25813] lo speed is unknown, defaulting to 1000
[  691.728612][T25819] __nla_validate_parse: 3 callbacks suppressed
[  691.728631][T25819] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5095'.
[  692.030161][T25843] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5100'.
[  692.068917][   T29] audit: type=1804 audit(1780690697.471:16): pid=25843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.5100" name="/newroot/442/cgroup.controllers" dev="tmpfs" ino=2294 res=1 errno=0
[  692.118780][T25847] syzkaller1: entered promiscuous mode
[  692.146192][T25847] syzkaller1: entered allmulticast mode
[  692.153034][   T29] audit: type=1800 audit(1780690697.471:17): pid=25843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5100" name="cgroup.controllers" dev="tmpfs" ino=2294 res=0 errno=0
[  692.187245][T25851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5102'.
[  692.246872][   T29] audit: type=1804 audit(1780690697.501:18): pid=25843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5100" name="/newroot/442/cgroup.controllers" dev="tmpfs" ino=2294 res=1 errno=0
[  692.413167][T25858] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5105'.
[  692.660932][T25876] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5111'.
[  692.702419][T25876] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5111'.
[  692.978805][T25890] netlink: 'syz.0.5115': attribute type 1 has an invalid length.
[  693.864871][T25910] x_tables: duplicate underflow at hook 2
[  693.885997][T24999] net_ratelimit: 12 callbacks suppressed
[  693.886015][T24999] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  693.908018][T24999] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  693.962192][T25914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5120'.
[  694.045266][T25914] netlink: 312 bytes leftover after parsing attributes in process `syz.5.5120'.
[  694.470920][T11283] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  694.486791][T11283] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  694.516607][T25934] netlink: 'syz.0.5126': attribute type 1 has an invalid length.
[  694.579805][T25934] bond15: entered promiscuous mode
[  694.585622][T25934] 8021q: adding VLAN 0 to HW filter on device bond15
[  694.668222][T25934] 8021q: adding VLAN 0 to HW filter on device bond15
[  694.700960][T25934] bond15: (slave gre2): The slave device specified does not support setting the MAC address
[  694.717796][T25952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5133'.
[  694.729181][T25934] bond15: (slave gre2): Setting fail_over_mac to active for active-backup mode
[  694.748424][T25934] bond15: (slave gre2): making interface the new active one
[  694.756460][T25934] gre2: entered promiscuous mode
[  694.762737][T25934] bond15: (slave gre2): Enslaving as an active interface with an up link
[  694.809246][T25952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5133'.
[  694.840630][T25956] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a
[  694.872302][T11281] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  694.891857][T11281] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  694.914360][T11281] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  694.949486][T11281] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  695.036519][T11281] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  695.050954][T11281] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  695.298424][T25989] netlink: 'syz.3.5143': attribute type 18 has an invalid length.
[  695.376897][T25994] xt_hashlimit: size too large, truncated to 1048576
[  695.384083][T25994] xt_hashlimit: invalid interval
[  695.449882][T25981] 8021q: adding VLAN 0 to HW filter on device bond2
[  695.462896][T25981] 8021q: adding VLAN 0 to HW filter on device bond4
[  695.476490][T25981] 8021q: adding VLAN 0 to HW filter on device bond5
[  695.539042][T11281] bridge0: port 2(bridge_slave_1) entered blocking state
[  695.546277][T11281] bridge0: port 2(bridge_slave_1) entered forwarding state
[  695.616993][T11281] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  695.632079][T11281] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  695.691216][T25000] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  695.773693][ T6379] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  695.797766][ T6379] bond6: (slave veth7): link status definitely up, 10000 Mbps full duplex
[  695.819332][ T6379] bond6: (slave veth5): making interface the new active one
[  695.849103][ T6379] bond6: active interface up!
[  695.862345][T26008] xt_nfacct: accounting object `syz0' does not exist
[  695.929786][T26008] xt_nfacct: accounting object `syz0' does not exist
[  695.985069][T26008] xt_nfacct: accounting object `syz0' does not exist
[  696.022528][T26008] xt_nfacct: accounting object `syz0' does not exist
[  696.044566][T26008] xt_nfacct: accounting object `syz0' does not exist
[  696.063753][T26008] xt_nfacct: accounting object `syz0' does not exist
[  696.079731][T26008] xt_nfacct: accounting object `syz0' does not exist
[  696.099520][T26008] xt_nfacct: accounting object `syz0' does not exist
[  696.118042][T26008] xt_nfacct: accounting object `syz0' does not exist
[  696.138234][T26008] xt_nfacct: accounting object `syz0' does not exist
[  696.166740][T24999] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  696.900471][T26033] syzkaller0: entered promiscuous mode
[  696.914047][   T29] audit: type=1804 audit(1780690702.311:19): pid=26036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.5154" name="/newroot/160/cgroup.controllers" dev="tmpfs" ino=834 res=1 errno=0
[  696.946454][T26033] syzkaller0: entered allmulticast mode
[  697.000729][   T29] audit: type=1800 audit(1780690702.311:20): pid=26036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5154" name="cgroup.controllers" dev="tmpfs" ino=834 res=0 errno=0
[  697.066558][   T29] audit: type=1804 audit(1780690702.341:21): pid=26036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.5154" name="/newroot/160/cgroup.controllers" dev="tmpfs" ino=834 res=1 errno=0
[  697.174164][T26044] __nla_validate_parse: 9 callbacks suppressed
[  697.174184][T26044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5155'.
[  697.249413][T26049] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5158'.
[  697.437566][T26044] 8021q: adding VLAN 0 to HW filter on device bond9
[  697.841001][   T29] audit: type=1804 audit(1780690703.241:22): pid=26084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5166" name="/newroot/421/cgroup.controllers" dev="tmpfs" ino=2183 res=1 errno=0
[  697.879680][   T29] audit: type=1800 audit(1780690703.241:23): pid=26084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5166" name="cgroup.controllers" dev="tmpfs" ino=2183 res=0 errno=0
[  697.886416][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  698.020642][T26093] netlink: 'syz.3.5167': attribute type 13 has an invalid length.
[  698.051999][T26093] netlink: 'syz.3.5167': attribute type 17 has an invalid length.
[  698.211652][T26085] tipc: Resetting bearer <eth:syzkaller0>
[  698.281055][T26093] gre0: left promiscuous mode
[  698.312832][T26093] gre0: left allmulticast mode
[  698.373157][T26115] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5173'.
[  698.427668][T26093] 8021q: adding VLAN 0 to HW filter on device team0
[  698.491859][T26093] veth1_vlan: left promiscuous mode
[  698.499065][T26093] veth0_vlan: left promiscuous mode
[  698.504967][T26093] veth0_vlan: entered promiscuous mode
[  698.515057][T26093] veth1_vlan: entered promiscuous mode
[  698.535280][T26093] veth0_macvtap: left promiscuous mode
[  698.542932][T26093] veth0_macvtap: entered promiscuous mode
[  698.560576][T26093] bridge0: port 4(vlan2) entered blocking state
[  698.566982][T26093] bridge0: port 4(vlan2) entered forwarding state
[  698.580747][T26093] bond1: left promiscuous mode
[  698.585536][T26093] bond2: left promiscuous mode
[  698.592017][T26093] 8021q: adding VLAN 0 to HW filter on device bond1
[  698.600460][T26093] 8021q: adding VLAN 0 to HW filter on device bond2
[  698.614290][T26093] 8021q: adding VLAN 0 to HW filter on device bond3
[  698.627890][T26093] veth5: left allmulticast mode
[  698.634640][T26093] 8021q: adding VLAN 0 to HW filter on device bond4
[  698.647229][T26093] mac80211_hwsim hwsim58 syzkaller0: left promiscuous mode
[  698.654567][T26093] mac80211_hwsim hwsim58 syzkaller0: left allmulticast mode
[  698.675071][T26093] 8021q: adding VLAN 0 to HW filter on device bond0
[  698.684861][T26093] 8021q: adding VLAN 0 to HW filter on device bond5
[  698.701685][T26093] 8021q: adding VLAN 0 to HW filter on device eth0
[  698.718860][T26093] 8021q: adding VLAN 0 to HW filter on device eth1
[  698.731499][T26093] 8021q: adding VLAN 0 to HW filter on device eth2
[  698.743745][T26093] 8021q: adding VLAN 0 to HW filter on device eth3
[  698.757460][T26093] veth7: left promiscuous mode
[  698.763020][T26093] bond6: left promiscuous mode
[  698.768888][T26093] bond6: left allmulticast mode
[  698.775782][T26093] 8021q: adding VLAN 0 to HW filter on device bond6
[  698.783818][T26093] 8021q: adding VLAN 0 to HW filter on device bond7
[  698.840334][T24999] netdevsim netdevsim3 eth0: set [0, 1] type 1 family 0 port 4352 - 0
[  698.855161][T24999] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  698.864486][T24999] netdevsim netdevsim3 eth1: set [0, 1] type 1 family 0 port 4352 - 0
[  698.875513][T24999] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  698.885011][T18681] lo speed is unknown, defaulting to 1000
[  698.892601][T18681] syz0: Port: 1 Link ACTIVE
[  698.930344][T24999] netdevsim netdevsim3 eth2: set [0, 1] type 1 family 0 port 4352 - 0
[  698.943538][T24999] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  698.961397][T24999] netdevsim netdevsim3 eth3: set [0, 1] type 1 family 0 port 4352 - 0
[  698.980074][T24999] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  699.005043][   T43] lo speed is unknown, defaulting to 1000
[  699.032384][T26127] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5176'.
[  699.117158][T26124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5175'.
[  699.151139][T26130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5177'.
[  699.248760][ T6379] net_ratelimit: 12 callbacks suppressed
[  699.248778][ T6379] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  699.269493][ T6379] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  699.806441][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  699.843131][T26163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5185'.
[  699.856944][T11281] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  699.871903][T11281] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  700.291369][T25000] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  700.396896][T26171] netlink: 'syz.5.5187': attribute type 21 has an invalid length.
[  700.407155][T25000] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  700.422066][T25000] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  700.571594][T26183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5189'.
[  700.661736][T26185] netlink: 'syz.0.5190': attribute type 1 has an invalid length.
[  700.665530][T26176] xfrm0 speed is unknown, defaulting to 1000
[  700.699150][T26176] lo speed is unknown, defaulting to 1000
[  700.848998][T26185] bond16: entered promiscuous mode
[  700.873645][T26185] bond16: entered allmulticast mode
[  700.903063][T26185] 8021q: adding VLAN 0 to HW filter on device bond16
[  700.961414][T26196] erspan1: entered allmulticast mode
[  701.019296][T26196] bond16: (slave erspan1): making interface the new active one
[  701.028537][   T76] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  701.035959][T26196] erspan1: entered promiscuous mode
[  701.042970][   T76] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  701.076428][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5193'.
[  701.085492][T26196] bond16: (slave erspan1): Enslaving as an active interface with an up link
[  701.111539][T26200] syz.0.5190 (26200) used obsolete PPPIOCDETACH ioctl
[  701.121359][T26208] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5193'.
[  701.180617][T26205] team0: Port device team_slave_0 removed
[  701.523842][T26214] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  701.531302][T26214] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  701.603354][T26214] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  701.611074][T26214] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  701.611485][ T6379] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  701.634333][ T6379] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  701.793325][T26214] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  701.812565][T26214] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  701.925751][T26214] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  701.933882][T26214] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  701.951236][T26214] tipc: Resetting bearer <eth:syzkaller0>
[  701.994245][T26214] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  702.004211][T26214] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  703.461174][T26175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  703.474693][T26202] netlink: 'syz.6.5193': attribute type 2 has an invalid length.
[  703.635464][T26225] ip6tnl4: entered allmulticast mode
[  704.040249][T26247] netlink: 'syz.5.5204': attribute type 1 has an invalid length.
[  704.046055][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  704.220894][T26266] __nla_validate_parse: 1 callbacks suppressed
[  704.220935][T26266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5208'.
[  704.716997][ T6379] net_ratelimit: 10 callbacks suppressed
[  704.717015][ T6379] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  704.737726][ T6379] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  704.901094][T26302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5214'.
[  705.134462][T26318] team0: No ports can be present during mode change
[  705.279661][   T76] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  705.295408][   T76] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  705.352342][T26325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5224'.
[  705.362462][T26324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5224'.
[  705.592458][T26336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5226'.
[  705.615125][T26336] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5226'.
[  705.829300][T11283] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  705.840935][T26355] openvswitch: netlink: Unknown nsh attribute 0
[  705.843724][T11283] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01
[  705.855639][T26355] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.095312][T26362] syzkaller0: entered promiscuous mode
[  706.117685][T26362] syzkaller0: entered allmulticast mode
[  706.397868][T26383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  706.426550][T25000] batman_adv: batadv0: Local translation table size (68) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a
[  706.482141][T26386] netlink: 'syz.0.5242': attribute type 9 has an invalid length.
[  706.541307][T26386] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.5242'.
[  706.636807][T26389] bond10: Removing last ns target with arp_interval on
[  706.647692][T26396] netlink: 'syz.5.5243': attribute type 10 has an invalid length.
[  706.684940][T26396] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5243'.
[  706.733233][T26396] dummy0: entered promiscuous mode
[  706.739324][T26396] dummy0: entered allmulticast mode
[  706.744991][T26396] batman_adv: batadv0: Interface deactivated: dummy0
[  706.752340][T26396] batman_adv: batadv0: Removing interface: dummy0
[  706.787119][T26400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5244'.
[  707.012012][T26406] bond11: entered allmulticast mode
[  707.375136][T26419] bond12: option lacp_rate: mode dependency failed, not supported in mode active-backup(1)
[  707.390384][T26419] bond12 (unregistering): Released all slaves
[  707.677083][T26438] netlink: 'syz.5.5254': attribute type 13 has an invalid length.
[  707.819515][T26454] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5258'.
[  707.918131][   T43] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  708.037704][ T5756] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  708.136307][    C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  708.446510][  T810] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  708.927244][ T5756] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  708.999236][T26500] 8021q: adding VLAN 0 to HW filter on device batadv1
[  709.033625][T26500] team0: Port device batadv1 added
[  709.087432][T26495] xfrm0 speed is unknown, defaulting to 1000
[  709.129086][T26495] lo speed is unknown, defaulting to 1000
[  709.420595][T26506] bridge0: port 3(bond0) entered disabled state
[  709.427917][T26506] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.435544][T26506] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.619284][T26506] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  709.650451][T26506] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  709.781720][T26510] netlink: 'syz.5.5272': attribute type 3 has an invalid length.
[  710.263405][T11283] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  710.280217][T11283] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.321818][T26510] __nla_validate_parse: 5 callbacks suppressed
[  710.321837][T26510] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5272'.
[  710.323277][T11283] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  710.351299][T11283] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.384421][T26517] net_ratelimit: 2 callbacks suppressed
[  710.384438][T26517] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  710.405013][T11283] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  710.416508][T11283] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.463457][T11283] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  710.481015][T11283] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  710.552319][T26522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5275'.
[  710.571947][T26524] netlink: 'syz.1.5276': attribute type 1 has an invalid length.
[  710.580650][T26524] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5276'.
[  710.646611][T26522] 8021q: adding VLAN 0 to HW filter on device bond4
[  710.730638][T26524] netlink: 'syz.1.5276': attribute type 10 has an invalid length.
[  710.801358][T26526] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5275'.
[  710.805698][T26531] netlink: 'syz.1.5276': attribute type 10 has an invalid length.
[  710.826573][T26532] netlink: 'syz.5.5278': attribute type 40 has an invalid length.
[  710.884243][T26524] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  710.960261][T26524] team0: Port device netdevsim1 added
[  711.042965][T26531] team0: Port device netdevsim1 removed
[  711.089258][T26531] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  711.137830][T26531] netdevsim netdevsim1 netdevsim1: entered promiscuous mode
[  711.155665][T26531] netdevsim netdevsim1 netdevsim1: entered allmulticast mode
[  711.175579][T26531] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  711.557485][T26556] netlink: 'syz.1.5282': attribute type 1 has an invalid length.
[  711.581659][T26556] netlink: 'syz.1.5282': attribute type 2 has an invalid length.
[  711.763648][T26556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5282'.
[  711.862687][T26556] netlink: 'syz.1.5282': attribute type 21 has an invalid length.
[  711.966241][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  712.073368][T26581] netlink: 'syz.5.5286': attribute type 2 has an invalid length.
[  712.751894][T26609] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5298'.
[  712.857752][T26617] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[  712.861867][T26614] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  712.881337][T26602] xfrm0 speed is unknown, defaulting to 1000
[  712.909719][T26602] lo speed is unknown, defaulting to 1000
[  712.919809][T26613] syzkaller0: entered promiscuous mode
[  712.954965][T26613] syzkaller0: entered allmulticast mode
[  712.982767][T26625] tipc: Resetting bearer <eth:syzkaller0>
[  713.028464][T26611] tipc: Resetting bearer <eth:syzkaller0>
[  713.093523][T26611] tipc: Disabling bearer <eth:syzkaller0>
[  713.186596][T26635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5303'.
[  713.520098][ T5648] block nbd5: Receive control failed (result -32)
[  713.905080][T26667] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5313'.
[  714.055637][T26658] syzkaller0: entered promiscuous mode
[  714.067166][T26658] syzkaller0: entered allmulticast mode
[  714.070999][T26673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5313'.
[  714.156814][T26668] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5315'.
[  714.760147][T26673] bridge_slave_1 (unregistering): left allmulticast mode
[  714.768416][T26673] bridge_slave_1 (unregistering): left promiscuous mode
[  714.775522][T26673] bridge0: port 2(bridge_slave_1) entered disabled state
[  715.239951][T26704] 8021q: adding VLAN 0 to HW filter on device bond8
[  715.267131][T26704] bridge0: port 1(bond8) entered blocking state
[  715.294353][T26704] bridge0: port 1(bond8) entered disabled state
[  715.328376][T26704] bond8: entered allmulticast mode
[  715.338427][T26719] __nla_validate_parse: 1 callbacks suppressed
[  715.338445][T26719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5326'.
[  715.370243][T26704] bond8: entered promiscuous mode
[  715.396958][T26704] bridge0: port 1(bond8) entered blocking state
[  715.403413][T26704] bridge0: port 1(bond8) entered forwarding state
[  715.741060][T26732] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5330'.
[  715.771673][T26735] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.5331'.
[  716.062732][T11280] bridge0: port 1(bond8) entered disabled state
[  716.078699][T26749] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5336'.
[  716.343521][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5339'.
[  716.383398][T26761] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5339'.
[  716.473438][T26761] pim6reg0: tun_chr_ioctl cmd 1074812118
[  716.602445][T26777] syzkaller0: entered promiscuous mode
[  716.620088][T26777] syzkaller0: entered allmulticast mode
[  716.669101][T26779] netlink: 136 bytes leftover after parsing attributes in process `syz.5.5345'.
[  716.676341][T26781] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5346'.
[  716.686798][T26779] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  716.704945][T26781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5346'.
[  716.997394][T26789] netlink: 'syz.5.5349': attribute type 1 has an invalid length.
[  717.054639][T26789] bond13: entered promiscuous mode
[  717.060449][T26789] bond13: entered allmulticast mode
[  717.067430][T26789] 8021q: adding VLAN 0 to HW filter on device bond13
[  717.155015][T26793] ip6erspan0: entered allmulticast mode
[  717.518788][T26811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5353'.
[  717.734105][   T30] INFO: task syz.4.4129:21988 blocked for more than 143 seconds.
[  717.755459][   T30]       Not tainted syzkaller #0
[  717.770773][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  717.784388][   T30] task:syz.4.4129      state:D stack:25848 pid:21988 tgid:21987 ppid:16869  task_flags:0x400140 flags:0x00080002
[  717.801477][   T30] Call Trace:
[  717.806323][   T30]  <TASK>
[  717.810679][   T30]  __schedule+0x1821/0x5740
[  717.817431][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  717.822730][   T30]  ? __pfx___schedule+0x10/0x10
[  717.828511][   T30]  ? schedule+0x90/0x360
[  717.832874][   T30]  schedule+0x164/0x360
[  717.837612][   T30]  schedule_preempt_disabled+0x13/0x30
[  717.843290][   T30]  __mutex_lock+0x7f7/0x1550
[  717.848747][   T30]  ? __mutex_lock+0x608/0x1550
[  717.853829][   T30]  ? nfsd_nl_version_set_doit+0xcd/0x7a0
[  717.860508][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  717.865741][   T30]  nfsd_nl_version_set_doit+0xcd/0x7a0
[  717.879264][   T30]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  717.885784][   T30]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  717.894453][   T30]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  717.901487][   T30]  genl_family_rcv_msg_doit+0x22a/0x330
[  717.907580][   T30]  ? __asan_memcpy+0x40/0x70
[  717.912338][   T30]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  717.918917][   T30]  ? bpf_lsm_capable+0x9/0x20
[  717.923692][   T30]  ? security_capable+0x7e/0x2c0
[  717.929399][   T30]  genl_rcv_msg+0x61c/0x7a0
[  717.933939][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  717.939433][   T30]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  717.945508][   T30]  ? __pfx_ref_tracker_free+0x10/0x10
[  717.951602][   T30]  netlink_rcv_skb+0x232/0x4b0
[  717.956823][   T30]  ? __pfx_genl_rcv_msg+0x10/0x10
[  717.961851][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  717.968037][   T30]  ? down_read+0x270/0x2e0
[  717.972560][   T30]  ? genl_rcv+0xd/0x40
[  717.977097][   T30]  genl_rcv+0x28/0x40
[  717.981080][   T30]  netlink_unicast+0x75c/0x8e0
[  717.986191][   T30]  netlink_sendmsg+0x813/0xb40
[  717.991008][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  717.996569][   T30]  ? aa_sock_msg_perm+0xf1/0x1b0
[  718.001668][   T30]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  718.007281][   T30]  ____sys_sendmsg+0x972/0x9f0
[  718.012165][   T30]  ? __might_fault+0xaf/0x130
[  718.017455][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  718.022760][   T30]  ? import_iovec+0x73/0xa0
[  718.027935][   T30]  ___sys_sendmsg+0x2a5/0x360
[  718.032628][   T30]  ? __lock_acquire+0x6b5/0x2cf0
[  718.038071][   T30]  ? __pfx____sys_sendmsg+0x10/0x10
[  718.043274][   T30]  ? futex_wait+0x2a2/0x390
[  718.048681][   T30]  ? __fget_files+0x2a/0x420
[  718.053311][   T30]  ? __fget_files+0x3a0/0x420
[  718.058461][   T30]  __x64_sys_sendmsg+0x1bd/0x2a0
[  718.063402][   T30]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  718.069489][   T30]  ? rcu_is_watching+0x15/0xb0
[  718.074336][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.080957][   T30]  do_syscall_64+0x174/0x580
[  718.085598][   T30]  ? clear_bhb_loop+0x40/0x90
[  718.090907][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.097403][   T30] RIP: 0033:0x7f64a3d9ce59
[  718.101838][   T30] RSP: 002b:00007f64a4cc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  718.110797][   T30] RAX: ffffffffffffffda RBX: 00007f64a4015fa0 RCX: 00007f64a3d9ce59
[  718.119330][   T30] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000006
[  718.128096][   T30] RBP: 00007f64a3e32d6f R08: 0000000000000000 R09: 0000000000000000
[  718.136612][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  718.144590][   T30] R13: 00007f64a4016038 R14: 00007f64a4015fa0 R15: 00007ffc46a85178
[  718.153153][   T30]  </TASK>
[  718.156732][   T30] 
[  718.156732][   T30] Showing all locks held in the system:
[  718.164469][   T30] 1 lock held by khungtaskd/30:
[  718.186449][   T30]  #0: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  718.205138][   T30] 3 locks held by udevd/5000:
[  718.210932][   T30] 2 locks held by getty/5387:
[  718.215659][   T30]  #0: ffff888031eaa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  718.226948][   T30]  #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0
[  718.237665][   T30] 5 locks held by kworker/u8:13/6377:
[  718.243058][   T30] 2 locks held by syz.2.2841/16890:
[  718.248973][   T30]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  718.257688][   T30]  #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670
[  718.268429][   T30] 2 locks held by syz.4.4129/21988:
[  718.273639][   T30]  #0: ffffffff8fe3a248 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  718.282096][   T30]  #1: ffffffff8ec8b2c0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0
[  718.292489][   T30] 1 lock held by syz.1.5342/26766:
[  718.297766][   T30]  #0: ffff888052ee4460 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330
[  718.307209][   T30] 1 lock held by syz.1.5342/26767:
[  718.312347][   T30]  #0: ffff888052ee4460 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x40/0x6b0
[  718.322543][   T30] 2 locks held by syz.3.5356/26817:
[  718.328442][   T30]  #0: ffffffff8fdc9d00 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  718.337971][   T30]  #1: ffffffff8e962f28 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  718.349399][   T30] 
[  718.351771][   T30] =============================================
[  718.351771][   T30] 
[  718.360807][   T30] NMI backtrace for cpu 0
[  718.360824][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  718.360845][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  718.360856][   T30] Call Trace:
[  718.360863][   T30]  <TASK>
[  718.360872][   T30]  dump_stack_lvl+0xe8/0x150
[  718.360919][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  718.361025][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  718.361058][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  718.361084][   T30]  sys_info+0x135/0x170
[  718.361137][   T30]  watchdog+0xfd3/0x1030
[  718.361170][   T30]  ? watchdog+0x1c9/0x1030
[  718.361200][   T30]  kthread+0x389/0x470
[  718.361233][   T30]  ? __pfx_watchdog+0x10/0x10
[  718.361255][   T30]  ? __pfx_kthread+0x10/0x10
[  718.361279][   T30]  ret_from_fork+0x514/0xb70
[  718.361314][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  718.361333][   T30]  ? __switch_to+0xc79/0x1410
[  718.361360][   T30]  ? __pfx_kthread+0x10/0x10
[  718.361384][   T30]  ret_from_fork_asm+0x1a/0x30
[  718.361424][   T30]  </TASK>
[  718.361432][   T30] Sending NMI from CPU 0 to CPUs 1:
[  718.477695][    C1] NMI backtrace for cpu 1
[  718.477713][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  718.477731][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  718.477741][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  718.477764][    C1] Code: 0b 7d 02 e9 c3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 b1 1f 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  718.477778][    C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246
[  718.477792][    C1] RAX: 0000000000217859 RBX: ffffffff819a845a RCX: 0000000080000001
[  718.477804][    C1] RDX: 0000000000000001 RSI: ffffffff8dfaf9f9 RDI: ffffffff8c28b9e0
[  718.477815][    C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b
[  718.477827][    C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001
[  718.477838][    C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000
[  718.477849][    C1] FS:  0000000000000000(0000) GS:ffff88812538b000(0000) knlGS:0000000000000000
[  718.477862][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  718.477873][    C1] CR2: 00007f08b77ea2f8 CR3: 00000000256be000 CR4: 00000000003526f0
[  718.477887][    C1] Call Trace:
[  718.477900][    C1]  <TASK>
[  718.477906][    C1]  default_idle+0x9/0x20
[  718.477925][    C1]  default_idle_call+0x72/0xb0
[  718.477944][    C1]  do_idle+0x36a/0x5f0
[  718.477961][    C1]  ? asm_sysvec_call_function_single+0x1a/0x20
[  718.477982][    C1]  ? __pfx_do_idle+0x10/0x10
[  718.478004][    C1]  cpu_startup_entry+0x43/0x60
[  718.478021][    C1]  start_secondary+0x101/0x110
[  718.478036][    C1]  common_startup_64+0x13e/0x147
[  718.478064][    C1]  </TASK>
[  718.649302][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  718.656180][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  718.665316][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  718.675362][   T30] Call Trace:
[  718.678639][   T30]  <TASK>
[  718.681566][   T30]  vpanic+0x56c/0xa60
[  718.685538][   T30]  ? __pfx___schedule+0x10/0x10
[  718.690384][   T30]  ? __pfx_vpanic+0x10/0x10
[  718.694881][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  718.701134][   T30]  panic+0xc5/0xd0
[  718.704848][   T30]  ? __pfx_panic+0x10/0x10
[  718.709258][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  718.714637][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  718.720785][   T30]  watchdog+0x102c/0x1030
[  718.725123][   T30]  ? watchdog+0x1c9/0x1030
[  718.729542][   T30]  kthread+0x389/0x470
[  718.733613][   T30]  ? __pfx_watchdog+0x10/0x10
[  718.738287][   T30]  ? __pfx_kthread+0x10/0x10
[  718.742872][   T30]  ret_from_fork+0x514/0xb70
[  718.747456][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  718.752555][   T30]  ? __switch_to+0xc79/0x1410
[  718.757225][   T30]  ? __pfx_kthread+0x10/0x10
[  718.761815][   T30]  ret_from_fork_asm+0x1a/0x30
[  718.766583][   T30]  </TASK>
[  718.769861][   T30] Kernel Offset: disabled
[  718.774176][   T30] Rebooting in 86400 seconds..