last executing test programs:

3m41.56980214s ago: executing program 0 (id=1017):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0)
sendfile(r0, r1, 0x0, 0x8)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="480000001000010000000000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="4000000010800000280012800e0001006970366772657461700000001400028006000e"], 0x48}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = socket$kcm(0x21, 0x2, 0x2)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r7, 0x7, 0x0, 0x2})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x5, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@map=r9, r8, 0x5}, 0x10)
sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x40080)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r10, 0x0)
ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x80000008, 0x10003})
close(r7)
ioctl$SIOCGSTAMP(r6, 0x8906, 0x0)

3m40.804496707s ago: executing program 0 (id=1025):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010101020000000000000000020000000c001980"], 0x20}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7}}, 0x14}}, 0x2000004)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}, @IFLA_XFRM_LINK={0x8, 0x1, 0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, 0x0, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010101020000000000000000020000000c001980"], 0x20}}, 0x0) (async)
sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x1, 0x4, 0x201, 0x0, 0x0, {0x7}}, 0x14}}, 0x2000004) (async)

3m40.652756219s ago: executing program 0 (id=1028):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="f00000000000fcdbdf72e80000010000000000000000ecffffff00000000000000e4ffffff00000100040b6e4e21000200000000210000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d432000000640101010000000000000000000000000000000000000000000000000000000001000000000000000100000000000080fffffffffeffffff1000000000000000018000000000000043050000000000000400000000000000ffffffffffffff7f0b00000000000000fdffffffffffffff000000000e000000000000002cbd700000350000020000005000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2094) (async)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="f00000000000fcdbdf72e80000010000000000000000ecffffff00000000000000e4ffffff00000100040b6e4e21000200000000210000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="7f000001000000000000000000000000000004d432000000640101010000000000000000000000000000000000000000000000000000000001000000000000000100000000000080fffffffffeffffff1000000000000000018000000000000043050000000000000400000000000000ffffffffffffff7f0b00000000000000fdffffffffffffff000000000e000000000000002cbd700000350000020000005000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x2094)
sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="74000000010701030000000000000000030000040900010073797a3100000000540007800800024000000002080002400000b55a0800014000000001080001400000000108000240000000070800014000000006080001400000000808000240ffffdfda0800014000e000000806"], 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000004900010000000000000000000a000000000000eb00000000141001"], 0x3c}, 0x1, 0x0, 0x0, 0x800400d}, 0x8001)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050841)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48)

3m40.507601537s ago: executing program 0 (id=1032):
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x78}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0)
write$cgroup_type(r1, &(0x7f0000000280), 0x9)
r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f0000000c40), 0x12)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendto$llc(r4, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10)
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
sendmsg$TIPC_CMD_DISABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_pid(r2, &(0x7f0000000080), 0x12)
r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @broadcast}, 0x0)
sendmsg$unix(r5, &(0x7f0000000500)={&(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f00000001c0)="ffa55c0e52b83d3af94e6a7f3f5bb96868fea19bd602e195c799613180c73d3001", 0x21}, {&(0x7f0000000340)}, {&(0x7f0000000440)="8cb71b1f2d181363c0f98600590cb09816c5b998d6533a3a8368b4b1ecbb226c64e4661937cd3bfe80586fd587b4fd87138bbd66c193b1aee8ea8fc2e71f185af60c664d81ec66b9", 0x48}], 0x3, 0x0, 0x0, 0x4880}, 0x840)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05050000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a3000000000340000001c0a010100000000000000000100000008000940000000000900020073797a323a0000000900010073797a30"], 0xa8}}, 0x0)
syz_emit_ethernet(0xb2, &(0x7f0000000240)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @dev, {[@cipso={0x86, 0x46, 0x0, [{0x0, 0x2}, {0x0, 0x11, "6f03057a91f875ccf5bd5d0a5b319a"}, {0x0, 0x10, "6253659c41d7cea461f45f9d37fa"}, {0x0, 0x3, "91"}, {0x0, 0x12, "ccb3e82d2ea24a7b56eb3299d0d03ab6"}, {0x0, 0x8, "a33b7a6b9500"}]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {}, {@remote}, {@private}]}]}}}}}}}, 0x0)

3m39.554401653s ago: executing program 0 (id=1053):
close(0xffffffffffffffff)
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000052c0)={0x0, @default, @netrom={'nr', 0x0}, 0x743, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x10, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

3m39.33804647s ago: executing program 0 (id=1057):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2, 0xc, 0x4})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040)
close(0x3)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x100000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
close(0x3) (async)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2, 0xc, 0x4}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) (async)
close(0x3) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async)
listen(r1, 0x100000) (async)

3m24.278494573s ago: executing program 32 (id=1057):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2, 0xc, 0x4})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040)
close(0x3)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10)
listen(r1, 0x100000)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
close(0x3) (async)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000000)={{r0}, 0x2, 0xc, 0x4}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x14, 0x26, 0x9, 0x80001, 0x81, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x404c005}, 0x4000040) (async)
close(0x3) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) (async)
listen(r1, 0x100000) (async)

2m31.760992957s ago: executing program 2 (id=1721):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x20, &(0x7f0000000000)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x1, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x4, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2m31.662378148s ago: executing program 2 (id=1723):
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780000001ce0000001000017c100089078d1b21feb092f22bbab5c980f3f640428a15712796942025902437307b6760bacc328e31c0d1e698c2f71ab78cb987384f6146fb845f86dd92907acbbb95aa849e01e92aa28a75223110f717c765ad72db4f0f83f7cd4dbe1ebdf80517ff0882d6b959fef51206368a4cc72272e7f8a8f854eac461c4b45ff"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0xd, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c20000000180c200000008004500001c00000000001190780000001ce0000001000017c100089078d1b21feb092f22bbab5c980f3f640428a15712796942025902437307b6760bacc328e31c0d1e698c2f71ab78cb987384f6146fb845f86dd92907acbbb95aa849e01e92aa28a75223110f717c765ad72db4f0f83f7cd4dbe1ebdf80517ff0882d6b959fef51206368a4cc72272e7f8a8f854eac461c4b45ff"], 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newqdisc={0xf8, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xc8, 0x2, {{}, [@TCA_NETEM_LOSS={0x8c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x101, 0xfffffffc, 0x2, 0x5}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x80000001, 0x3, 0x1, 0x1ff}}, @NETEM_LOSS_GE={0xd, 0x2, {0x2, 0x3, 0x3, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7ff, 0x3, 0xfffeffff, 0xc5, 0x401}}, @NETEM_LOSS_GI={0x18, 0x1, {0xffff, 0xb1, 0x7fffffff, 0xde9, 0x42}}, @NETEM_LOSS_GI={0x18, 0x1, {0xc, 0x4, 0x1, 0x0, 0x1000}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0xf8}}, 0x0) (async)

2m31.606463053s ago: executing program 2 (id=1725):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
ioctl$int_in(r2, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
recvmsg$qrtr(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000880)=""/29, 0x1d}, {&(0x7f00000008c0)=""/150, 0x96}], 0x2}, 0x38, 0x2100)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x44005)
listen(r2, 0x0)
r5 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r5, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0)
accept4(r2, 0x0, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000340)='G', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)={0x104, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x31}}}}, [@NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="579bcf398bbbd75d32aa6077a886a74df3d0fcf02f399c3a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24cf4713299967bd15bf44cad1f4d266b29e2a4135a412b2"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7282cdb224050171ea757aea781d4160e9223cc0312d38d6"}]}, @NL80211_ATTR_REKEY_DATA={0x68, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="5f3b5d542091777612684837dbc0ec47ea67acb692453dd2"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5bd58c80a1143827"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="9811fc13340000000000005ab9594700"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="204183f74d05c885801d03a2488d3fd4"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="32c5877eef25cfd5a4dd14ad07749005"}]}, @NL80211_ATTR_REKEY_DATA={0x1c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b27375be03440892"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "00e200"}]}]}, 0x104}}, 0x4)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4801000042000100fffffffffddbdf250200000004003880100001800c00c8000200000000000000200104801c01"], 0x148}, 0x1, 0x0, 0x0, 0x8800}, 0x4040)
setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='vegas', 0x5)
shutdown(r1, 0xc7628cb6996d0d90)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0xd4, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@typed={0x4, 0xd7}, @nested={0xbc, 0x1, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid}, @nested={0xae, 0x4e, 0x0, 0x1, [@typed={0x8, 0x8e, 0x0, 0x0, @ipv4=@loopback}, @generic="e4189e6abcc542b13e7c294d279f5977e33dcb6a201436b584c1967a5cca39010ef64832944e1ed4896812a1c6b64b098eb29c8b9a9e2df47652635687546d32cc9c0468ab8ee68d2822a38c5b3fa333f212641946c8255a25722cab449acdcdc76eefd3c3fba0665d2117b07d597560628789705707b16b101e61810f616d23db1d75f6c14b3e88780d461788adfeb6091ec81beaf262be48e2", @typed={0x8, 0x139, 0x0, 0x0, @fd=r0}]}]}]}, 0xd4}}, 0xc000)

2m30.654260927s ago: executing program 2 (id=1742):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f00000012c0)) (async)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0xa, 0x4e22, 0x4, @local, 0x101}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000000c0)="8a978a060e1f42d87e31cc3ce23303630225320773613dc24af41a4ee457df2ef0fdae2b46ee467f7c4a3d28fb49c8d3554767fce669c7d336fd089963ca1e99716ee2260cd2c594801285909cb35cf9bbce247e917a4c538db7ea42ed0edc6b0a130cddc12dd639c563cd2970d0135ba1fb2e63bf1aeddac297ae3d13be333963ab076f8ae99a37e7ca689b05875dbd8efdaad529ef281df859815ffb64c2091f28c1cea9bb5660ec16518ca82b799e6ee8fb819e", 0xb5}, {&(0x7f0000000180)="327635ccd9487804edfef7f0491d11c5c023407929beb47a2f6526692ccebd0b1eb6f50f88693f34f6989e4cb036b6729300cdabb8c85d4b2b8958004badab2bfeec144b9df6d9a5592d5bd1fef08f3bc73a17a2070094e8e92f5dc676d9e9fdbbc9f64fce6955242f2ea232fea185838dec79311c35551523372971d58afd61b05a0f23bfbe93bf5f35cd20813407cf65e1e7bc9410ee8b91c46198d3c4d30163ba1c227a2f47ab5cf97e1624d9a10957e871783c2656efac5fd0da1aea33d6535419b54c4d8436a927b4d295ee5fb6db109464f237834f7e573be0937505ea0866c1", 0xe3}], 0x2, &(0x7f0000000480)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}, @flowinfo={{0x14, 0x29, 0xb, 0x400}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x1, 0x1, '\x00', [@ra={0x5, 0x2, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x1}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dstopts_2292={{0x48, 0x29, 0x4, {0x0, 0x5, '\x00', [@pad1, @calipso={0x7, 0x20, {0x0, 0x6, 0x2, 0x400, [0x8, 0x7, 0x7]}}, @enc_lim={0x4, 0x1, 0xfc}, @pad1]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x3b, 0xa, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x40, {0x0, 0xe, 0x7, 0x7f, [0xbd96, 0xffffffff, 0x7, 0x1, 0x3, 0x8, 0xffff]}}, @ra={0x5, 0x2, 0x40}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x33, 0x0, '\x00', [@pad1]}}}], 0x160}, 0x20008018)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x28e6, 0x50, 0x7, 0x0, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{r1}, &(0x7f0000000300), &(0x7f0000000440), 0x2}, 0x20) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)

2m30.314895223s ago: executing program 2 (id=1746):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000780)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000100000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000200000004"], 0xfc}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x25dfdbfb, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x1, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0xa0, 0x2e}, 0x3}, [@migrate={0x50, 0x11, [{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@rand_addr=' \x01\x00', 0x3c, 0x4, 0x0, 0x4, 0x8, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (fail_nth: 6)

2m30.313349684s ago: executing program 2 (id=1748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680040008800c00028008d7adc8460b6669df26d95a0200010000000000e5c4de82e841b66e2b0c31be0d90d567d82d03bcd0ccc04036f2adf9d5cd1370f6d7874baa975e2656b7268aef9f80d7b0a602237c9bfc598f1f45dfc61570e2d9903d57f4f12e80974b852f4d54d77a0afa7631382bbee643010a73f0bcfc05f8498798ff2af5258864a46b160f7fe63dbe435b3532a87a0766bb0384bc05693faa0fa23487186543b6805404dd851beca4b683a4cb44ce433773"], 0x38}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c000)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000026000100fdff0700000000000400000004000180366f72ba535f6ca70044a416cd564bf2fa1c5a1e8b1e31a19bd8ad09a138670be9d716218eee3f1b42788e0705e618eb6030b706"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
socket$nl_xfrm(0x10, 0x3, 0x6)

2m15.188634398s ago: executing program 33 (id=1748):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0x1f0, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe8}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2)
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff130000000a0013007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000000000900000000060015000200000014001680040008800c00028008d7adc8460b6669df26d95a0200010000000000e5c4de82e841b66e2b0c31be0d90d567d82d03bcd0ccc04036f2adf9d5cd1370f6d7874baa975e2656b7268aef9f80d7b0a602237c9bfc598f1f45dfc61570e2d9903d57f4f12e80974b852f4d54d77a0afa7631382bbee643010a73f0bcfc05f8498798ff2af5258864a46b160f7fe63dbe435b3532a87a0766bb0384bc05693faa0fa23487186543b6805404dd851beca4b683a4cb44ce433773"], 0x38}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0)
r6 = socket$netlink(0x10, 0x3, 0xb)
sendmsg$NL80211_CMD_DEL_TX_TS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x2004c000)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1800000026000100fdff0700000000000400000004000180366f72ba535f6ca70044a416cd564bf2fa1c5a1e8b1e31a19bd8ad09a138670be9d716218eee3f1b42788e0705e618eb6030b706"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
socket$nl_xfrm(0x10, 0x3, 0x6)

3.154196577s ago: executing program 3 (id=3890):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8)
r1 = socket$l2tp(0x2, 0x2, 0x73)
sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x60}}], 0x1, 0x40884)

3.017272965s ago: executing program 3 (id=3891):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x64, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="08010000000901080000000000000000010000060c00048008000140000000080c000480080001400000ffff080005400000001f0900010073797a300000000008000640000000010800064000000000b8000200060003400003000014000180080001000a01010208000200e00000012c00018014000300fe8000000000000000000000000000aa140004000000000000000000000000000000000014000180080001007f00000108000200ac1414340c0002"], 0x108}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001800090300000000000000000a808000fd00c8030000000008000400", @ANYRES32=r4, @ANYBLOB="0600150003000000100016800c0001"], 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10004044)
close(r2)
socket(0x10, 0x803, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="000000098504"})

2.737823355s ago: executing program 3 (id=3894):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000740)="5e000d001b71ecab36c7f263c06bddc65b99fb63499dd5c8ef68ff53e24127f1a538594685e48943f26ed6e8d84b02464cc13dd7cc64d3a5a334a763cad337436ce16682040000000000000041579f9e3959de3e9f8005da735613f1fc390f61811b62d69ee340f9f79e873b463b442399d8f632fd469049daa8994b59ebbeefa4859b11599cc05188d9a9f46af90a8264052857cffe0fb0e528cc079e26ab9a2f2094fafe18763cbc7ae174a9bf4b0bebf592861d", 0xb5, 0x40000, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [<r3=>0xffffffffffffffff]}}], 0x18}, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x65, &(0x7f0000000080)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x57, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x21, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0x2}, {0x0, 0x2}, {0x6, 0x2}]}]}}, "9ee547"}}}}}, 0x0)
socket(0x40000000015, 0x5, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r4)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="2da52abd7000fbdbdf2503000000080007000000000008000100000000003400", @ANYRES32], 0x98}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000)
ioctl$SIOCSIFHWADDR(r3, 0xff01, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x3}, @IFLA_BOND_DOWNDELAY={0x8, 0x15}]}}}]}, 0x44}}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)

2.528344812s ago: executing program 4 (id=3898):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
r1 = socket(0x2, 0x2, 0x0)
getsockopt$nfc_llcp(r1, 0x88, 0x68, 0x0, 0x20000000)
r2 = socket$kcm(0x2, 0xa, 0x2)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804)
r8 = socket(0x10, 0x3, 0x0)
sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0)
sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x800000000, 0x100000000, 0xff, 0xfffeffffffffffff, 0x4, 0xb, 0x2880040000000009, 0x1}, 0x0, 0x0, 0x0, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@base={0x16, 0x0, 0xb161, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r9, <r10=>0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r10, 0x0, &(0x7f0000001780)=""/4096}, 0x20)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r11 = socket(0x1d, 0x2, 0x6)
setsockopt$RDS_CANCEL_SENT_TO(r11, 0x6a, 0x1, 0x0, 0x0)
write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef)
r12 = socket$nl_route(0x10, 0x3, 0x0)
r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
getsockopt$sock_buf(r13, 0x1, 0x1c, 0x0, &(0x7f0000000140))
sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv6_getanyicast={0x14, 0x3e, 0x20, 0x70bd25, 0x25dfdbf7, {}, ["", "", ""]}, 0x14}}, 0x0)

1.895817585s ago: executing program 5 (id=3902):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}, 0x1, 0x0, 0x0, 0x2008c802}, 0x4000081)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@bridge_getlink={0x20, 0x12, 0x1, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0xc000, 0x8801}}, 0x20}, 0x1, 0x0, 0x0, 0x40811}, 0x0)

1.650027786s ago: executing program 5 (id=3904):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4)
read(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2)

1.594898016s ago: executing program 4 (id=3905):
syz_emit_ethernet(0x165, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, @remote, @val={@val={0x88a8, 0x5, 0x0, 0x2}, {0x8100, 0x2, 0x0, 0x1}}, {@ipv6={0x86dd, @gre_packet={0x3, 0x6, "0d5515", 0x127, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[@hopopts={0x2b, 0x2, '\x00', [@hao={0xc9, 0x10, @private1}]}, @srh={0x0, 0x6, 0x4, 0x3, 0xf7, 0x30, 0xffff, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0x73, 0x2, 0x4, 0x1, 0x0, 0x10, 0x6, [@remote]}], {{}, {0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7, 0x1, 0x1, 0x2, 0x2, 0x4}, 0x1, {0xfffffffe}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x8, 0x2, 0x0, 0x1, 0x2, 0x5a}, 0x2, {0x7, 0x2, 0x3, 0x5, 0x0, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4, "1e35af1e23be8ca949ecc3e35f2b432e67ea54d9fbc3a0a828edb7ea026f21cfd787f8a484821011a6e0e79a88c5438b8e62271dfef316e4589039f55dee30103f311fa4858f0bdc0b35bd04ffd43b3071727c665980235357f6ad86917654ec53d1c0c749b6df7e3dc0e8d817da167bb333d1"}}}}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x600}]}, 0x44}}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth0_vlan\x00', 0x10)
syz_emit_ethernet(0x110, &(0x7f0000000340)={@random="0b65df84f884", @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x1, 0x18, 0x102, 0x66, 0x0, 0x8, 0x21, 0x0, @broadcast, @local}, {{0x4e22, 0x4e21, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x0, "a49b33", 0x8, "da3218"}, "c94ed7896725a68d9c3eb8c9bfa6f0ec9fbfeaa09fe3131f098c5e092b1af5a07d91c4a07f88f8909a0a46ce9f04939141eb0d73424da110cca5d70dd3bd400ae86a096387d3a5f3fbab3e72ccbf77e7dbc9394e95d03f9e5c4e14108eb1a9cabc7f5c19380a4d829ad36beb665d73ff6e0b1a4cb82667bac7a8499328fe8859749e227d8c6091bc783873ef23c95ef87a0d29b223d2e949e3dbcf8ec4262847caa97a28f81b393fe4f29934d000c66e10c197e0dddfb1f7291dfb5880ef28ced210dae701a2d7d1b9c8d1f3696ccc4364411c62726d5cf2df5bf8f8f137"}}}}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @private=0xa010102}, 0x10)
sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0xb67753bd38c5345)
getpid()

1.515103452s ago: executing program 5 (id=3907):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x4008000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004)
r1 = socket$packet(0x11, 0x3, 0x300)
socket(0x10, 0x803, 0x0) (async)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r3, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) (async)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14)
sendto$packet(r1, &(0x7f0000000400)="05", 0x5ac, 0x8c1, &(0x7f0000000200)={0x11, 0x86dd, r4, 0x1, 0x8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00', <r5=>0x0})
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000240)={@broadcast, @loopback, <r6=>0x0}, &(0x7f0000000280)=0xc)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r7=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010010000000ffdbdf2500000000", @ANYRES32=r10, @ANYBLOB="20000000280e0400280012800b0001006d61637365630000180002800500030008"], 0x48}, 0x1, 0x0, 0x0, 0x24008001}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x3, 0x0, 0xb6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x0, 0x8000, 0x3ff, 0xd72}}) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000380)={'ip6gre0\x00', <r11=>0x0, 0x29, 0x6, 0x3, 0x0, 0xb6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x0, 0x8000, 0x3ff, 0xd72}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x20, 0x40, 0x5, 0x2, {{0x25, 0x4, 0x0, 0x3, 0x94, 0x66, 0x0, 0x80, 0x4, 0x0, @broadcast, @private=0xa010101, {[@timestamp_prespec={0x44, 0x14, 0xc, 0x3, 0x4, [{@empty, 0x800}, {@empty, 0x7}]}, @generic={0x83, 0x3, '\r'}, @generic={0x82, 0x5, "c74749"}, @timestamp_prespec={0x44, 0x2c, 0x3d, 0x3, 0x5, [{@multicast2, 0x9}, {@broadcast, 0x1}, {@multicast2, 0xffffffff}, {@loopback, 0x7d1}, {@multicast2, 0x7}]}, @rr={0x7, 0x13, 0x31, [@local, @private=0xa010102, @empty, @rand_addr=0x64010102]}, @noop, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x7, 0xf, "5bf78a19b7d8b068d8c777b14c"}, {0x1, 0x3, "82"}]}, @lsrr={0x83, 0xb, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', <r12=>0x0, 0x20, 0x40, 0x5, 0x2, {{0x25, 0x4, 0x0, 0x3, 0x94, 0x66, 0x0, 0x80, 0x4, 0x0, @broadcast, @private=0xa010101, {[@timestamp_prespec={0x44, 0x14, 0xc, 0x3, 0x4, [{@empty, 0x800}, {@empty, 0x7}]}, @generic={0x83, 0x3, '\r'}, @generic={0x82, 0x5, "c74749"}, @timestamp_prespec={0x44, 0x2c, 0x3d, 0x3, 0x5, [{@multicast2, 0x9}, {@broadcast, 0x1}, {@multicast2, 0xffffffff}, {@loopback, 0x7d1}, {@multicast2, 0x7}]}, @rr={0x7, 0x13, 0x31, [@local, @private=0xa010102, @empty, @rand_addr=0x64010102]}, @noop, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x7, 0xf, "5bf78a19b7d8b068d8c777b14c"}, {0x1, 0x3, "82"}]}, @lsrr={0x83, 0xb, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty]}, @end]}}}}})
r13 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r14 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r15=>0x0})
sendmsg$nl_route_sched(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r15, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}}, 0x8000)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'tunl0\x00', 0x0, 0x10, 0x20, 0x5, 0x4bac, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x65, 0x0, 0x7, 0x2, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x54, 0x78, 0x1, 0x1, [{@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x101}, {@multicast2, 0x10000}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0x52, 0x3, 0x4, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x80000000}, {@local, 0x200}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000640)={'tunl0\x00', <r16=>0x0, 0x10, 0x20, 0x5, 0x4bac, {{0x21, 0x4, 0x0, 0x5, 0x84, 0x65, 0x0, 0x7, 0x2, 0x0, @multicast1, @empty, {[@timestamp_addr={0x44, 0x54, 0x78, 0x1, 0x1, [{@loopback, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@broadcast, 0x101}, {@multicast2, 0x10000}, {@local, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local}, {@rand_addr=0x64010100, 0x1}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x1}]}, @timestamp_prespec={0x44, 0x1c, 0x52, 0x3, 0x4, [{@broadcast, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x80000000}, {@local, 0x200}]}]}}}}})
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)={0x18c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7accff6915facd90}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) (async)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000007c0)={&(0x7f0000000980)={0x18c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7accff6915facd90}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, <r17=>0xffffffffffffffff}, 0x4)
r18 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8fffdffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r17, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r18, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578f830e9000000", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.433848135s ago: executing program 4 (id=3908):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x18, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x4008084) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x7, 0x301}, 0x14}}, 0x10) (async)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) (async)
sendmmsg$inet6(r4, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1599f2cf63c07bdab7a126a9b7c3", 0xe}], 0x1}}], 0x1, 0x58054)

1.399730452s ago: executing program 4 (id=3910):
r0 = socket(0x40000000015, 0x805, 0x40000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x3, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4041)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {0xd, 0xc}, {0x8}}}, 0x24}}, 0x20048054)
sendmsg$nl_route(r2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="28f4e37b9a1a777c2328dc9f2d5ede26eac15f1f4178cb80eeb8bd8d093b9888fc17220780dda3450e8e82762c50f46b954d45bb0a20a389016bcf5bc15eaaf3cf15af6ee1374a4e34ebe4c9afb81c15c6a85e7878ad3da597d3fb3799ebba15bcc62003f6"], 0x2c}}, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r7 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r7, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2001, 0x0)
sendmsg$nl_route(r1, 0x0, 0x880)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_subtree(r8, 0x0, 0x2, 0x0)
write$cgroup_subtree(r9, 0x0, 0x5)
getsockopt(r0, 0x114, 0x271b, 0x0, 0x0)

1.13001315s ago: executing program 5 (id=3912):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8005ac}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) (async)
r2 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r2, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='gretap0\x00', 0x10) (async)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
r3 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) (async)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102000000e318946c000a0000000c0019800800010094fb"], 0x30}}, 0x0)

1.029788027s ago: executing program 5 (id=3913):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
syz_emit_ethernet(0x1a4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0)
r1 = socket(0x23, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
syz_80211_inject_frame(&(0x7f0000000000), 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x6, 0x0, 0x0) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x6, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffbf, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0x4}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xe}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0x8}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x800)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r5, 0x0)
r6 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f0000000340), 0x4)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0) (async)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2b, 0x801, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) (async)
sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd2b, 0x801, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
close(0x3)

917.09273ms ago: executing program 4 (id=3915):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r4=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f00000003c0)={<r5=>r4, @in={{0x2, 0x4e21, @multicast2}}, [0xfffffffffffffff9, 0xd, 0x1, 0x5, 0x1, 0x7, 0x0, 0x2, 0x29, 0xfffffffffffffffe, 0x700, 0x8000000000000000, 0x19c, 0x9, 0x100000000000]}, &(0x7f0000000100)=0x100)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={r5, 0x4}, 0x8)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000740)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
sendmsg$rds(r7, 0x0, 0x40800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8e5db34", @ANYRES32=r6, @ANYBLOB="b2a53eb2fb46c46061e09791ef04003c800400a1800700480040240000040042800400678008000900f68c7c6640509f1bec03a124b53e769b9a034dca0711b230b24232ee86ff0a9447fd709cde843bb7b6dfe554dc340ad7be5ab2c1dc82ca60bb1ddefeda86ce736b2e25efc0c7fbcb6f1811f96e4bca161cd90c78", @ANYRES32=r1, @ANYBLOB="e59356880028e40597a735adf838328332247f4706b9561fbd51cfff43b9cbfac4b80792f39ec43b3bcea71e8942d9c5053b4fb05117514c7181e381c6e2e35209fc27a676c1797ae7e29ce94cdcd3cf83e699b345db6cd13c6c2783642cd2e93983ded97fced3b2dfd3ed877360143c34813572f855786a095f8c47a65789717a4540654182c8b05d5c4827fdd5556b28d9b6fa0a0a8f8a8ca1e744e3391e6bd2f2f7853da9dff92f8b3b9b53c249537136cc4e8908a875accf4fd7284a2b169de03e89ba866769d2c784e90ca0557d5adc58615632837fc29203d77f2740201783916758b36e33a87bd9e37aa3aeed76985b0e1fe61bdf37db84568176ef00ecaf1e9ebdc31c28c5a7731d44f288aa5d277708a4c4444f065730df92258ae46db8ec0ccd269bb4b54a5ea1e5e565ab57a8b622508fafbc919d56719447ea810969aa1dc9653012317153447e7fb7ca68e9db1137b14c7d87f4027418042fad38683869eb6a5c740bc343f262dc94fc0d6b642f4b35802371c9feafe8c85058aa151a605379fb6fee07706c1005f44bc5f00185a066af68e1938e9c50e194de137623461ee3bb274628ee64c310d4136f5343d50800ee8004004b8097b0a8838aa811f745d44c00952e3397f25d1f0478c6166888580c5cf47735f2c555358dae1c14cf13400dc95c00dabf5fa76d464e16fb0e63826d3e7e1a990ab73f234c343d2a5bea1a64ef58c5026a99b14580b898179a1031b7a830eb37b326673fbc81cef4d39794fc109af531bff37978950522379ef3b01b6ecfd32e7783050cdf17ba47a0cd1605aacc7ea89bcfff9011be30e97f00ba1881bb1ebe86cdf5ba08682e24286ecf7b4b85567a593749390b4ed57859e977044d6039dfa1a41b96fde11a5cdfc2f703981387c76ec6add29e6fed4383376479284f95bc00b050e24aca820f8dcc3d42dfa7c54e26305ce9058775968924368a0b5476b2987c0ddadab9df43787cb1b4045b99f40df0ab877d66626dae02fba039c3217efe07485b0034d35b4b04e2312015ebf5e1702801de5e238476d917e50983340b77409d6866d336aead83dc5f5923c53da78c1ffcc213678b70e249351dd6147a139bb23c17da2d140837d0710b4e36b7ce9770ef029d4f717776b448e2a7584f88977b20026f7a78069ce4bed31b27a2a4c9a334e3344a9c552805c3470834d60280f0d73099aaa645032c3eb901872f04e2d972cd706130ea02d201ee6b8a9bfd9109f73fe899944abbe90b4f395f63122d8d5116"], 0x4c4}, 0x1, 0x0, 0x0, 0x810}, 0x40800)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="a0000000110009050000000000000000cba935e281ede730457b7445e7300cbff115f265b9ebf9a6a7f067bf60f34b4f620fc7b3be858d1b89363e52081d6d1934a443e7ac8eb2271f0d1cdd988f6b3f57eb218618fdca00d138b1789a20149190d631511847a803000001005ab61f218a66b934b7160471e984e5f5d6ad7eff4305326d0affb3be3f0bf08fc949402f059090ce6bf0007718a6968a12e72128"], 0xa0}], 0x1}, 0x0)

659.971666ms ago: executing program 6 (id=3916):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x40, 0x0, 0x2, 0xa7ee14d5e68c8ffa, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x200}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040800}, 0x1)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5400f5ff050a0b0400000000000000000200000528000480240001800b0001006578746864720000140002800500020007000000080001400000000e0900010073797a30000000440a00020073797a32000000001400a86c16e4b5694f7f0000000000000700000a6d992ca74a0ac84b452d68823fa3623646a7625b7428d83011e9e6dd26c833919fbaff4a1045a0368e739f7ec6cdc8ce4b5c93e9211ff286b0c73084e76f150e6f4e254f52b8da1393bb8f013197cd6793178d19a80ebf226d0ba929b9c51c16a6dbd161eb0bbdfa57158358f093eadbcfbcf4dddae4323fcc2b8923e4d14827d1d3c78efeb926fec76ae87366578d0a307add4f3051772e8ca80b6ea359118ba160873e16816c8d3aea6416c749cf73"], 0x7c}, 0x1, 0x0, 0x0, 0x4850}, 0x0)

573.525096ms ago: executing program 1 (id=3917):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x4)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0xa, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl(r2, 0x8b2c, &(0x7f0000000040))
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x794, @loopback, 0x6}}, 0x1000, 0x3}, &(0x7f00000001c0)=0x90)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x8880)

481.269765ms ago: executing program 6 (id=3918):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write(r2, &(0x7f0000000680)="4eded3380304", 0x6)
splice(r2, &(0x7f0000000040), r1, 0x0, 0x800000000ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b4050000000000006110780000000000630122000000000095000000000000008f6a138c9e4eb32e71d7754e127d8d87525e8d57dc3c002fa721249c4cdfd87788947190b59b5af99eaaecbf2ba57aa6ffd750ffd3bef751c89264a6a9ec3b188b69dc1b6a12211cbf01e697342cf987ca2161e2a58904", @ANYRES32], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2=0x10}, 0x94)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000004700)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)=ANY=[@ANYBLOB='7\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05042bbd7000fedbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', <r7=>0x0})
r8 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x1030, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1004, 0x2, [@TCA_BPF_NAME={0xffe, 0x7, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}]}}]}, 0x1030}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r10=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000100)={'ip_vti0\x00', <r11=>0x0, 0x7, 0x0, 0xc28, 0x6fa1, {{0xb, 0x4, 0x2, 0x26, 0x2c, 0x66, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @empty, {[@noop, @ra={0x94, 0x4}, @cipso={0x86, 0x12, 0x0, [{0x5, 0xc, "6e6f7c71789775878109"}]}]}}}}})
r12 = accept4$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000b40)=0x1c, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000002500)=@filter={'filter\x00', 0xe, 0x4, 0x640, 0xffffffff, 0x0, 0x430, 0xe8, 0xffffffff, 0xffffffff, 0x570, 0x570, 0x570, 0xffffffff, 0x4, &(0x7f0000000b80), {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x27}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xffffff00, 0xffffffff], [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 'hsr0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x11, 0xfb, 0x6}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x18, "b1b4b0d616750015570623e95c6e61337904be28f0fcebac7c23e5ec9582"}}}, {{@ipv6={@loopback, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xff000000, 0xff000000, 0x7f800000], 'hsr0\x00', 'team_slave_0\x00', {0xff}, {}, 0x62, 0x2, 0x2, 0x1}, 0x0, 0x320, 0x348, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x0, 0x1, [0x3, 0x27, 0x7, 0x1, 0x3, 0x8001, 0x3, 0x9, 0x5, 0xfffa, 0x2, 0x81, 0x101, 0x6, 0x2, 0x8], 0x10}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x3e, 0x0, [{0x68, 0x3, 0x6e, 0x8001}, {0xef7a, 0x2, 0x9, 0x4}, {0x2, 0x81, 0xc, 0x2}, {0x2, 0xa, 0x3, 0x6}, {0x4, 0x81, 0x8, 0x3}, {0x2, 0x2, 0xa1, 0x6}, {0x8, 0x1, 0x1, 0x10001}, {0x2, 0x5, 0xb9, 0x1}, {0x5, 0x8, 0x3, 0x40}, {0x5, 0x68, 0x8, 0x3}, {0x7, 0x81, 0x8, 0x1}, {0x1, 0x8, 0xca, 0x9}, {0x9, 0xf, 0x4, 0x305d7728}, {0xe81, 0xcd, 0x8}, {0x5, 0x4, 0x4, 0x7b}, {0x0, 0xc, 0x9, 0xdc}, {0x1, 0xd6, 0x6b, 0x8001}, {0x200, 0x18, 0x5, 0x231}, {0x5, 0x2, 0x4, 0x7ed43b85}, {0xfffe, 0x81, 0x8, 0x2}, {0x7f, 0x3, 0x10, 0xffff}, {0x1d9, 0x7, 0x40, 0x4}, {0x8000, 0xfc, 0x1, 0x8}, {0x9, 0x7c, 0x8, 0x9}, {0x5, 0xd, 0xc6, 0x3c80}, {0x7, 0x4, 0x6, 0xfffffffc}, {0x8001, 0x5, 0x5, 0xb}, {0x4, 0x1, 0x85, 0x8}, {0x8, 0x3a, 0xfb}, {0x6, 0x0, 0xff, 0x3}, {0x9, 0x2, 0x6, 0x10001}, {0x5, 0x7b, 0x4, 0xb4f}, {0xb2, 0x8, 0xf, 0x75ce}, {0xfff, 0x7a, 0x38, 0x100}, {0x7, 0x7f, 0x9, 0x9}, {0x89, 0x0, 0x6}, {0x0, 0x5, 0x3, 0x1}, {0xb792, 0x5, 0xe, 0x5}, {0x4b63, 0x94, 0x8, 0x7}, {0x1, 0x0, 0x43, 0x100}, {0x1ff, 0x40, 0x9, 0xd766}, {0x58, 0xe, 0x9, 0x6}, {0x6, 0x6, 0x40, 0x1b}, {0x800, 0xe, 0x1, 0x2}, {0x0, 0x8, 0x5, 0xcdb}, {0xfffd, 0xb, 0xb, 0x5}, {0x95, 0xfd, 0x6, 0xfffffffb}, {0x7, 0xe, 0x9, 0x3}, {0xffaf, 0x8, 0x10, 0xac}, {0x8, 0x7, 0x14, 0xfff}, {0x0, 0x3, 0xbf, 0xe}, {0x5, 0xff, 0x81, 0x3}, {0x400, 0x0, 0xa6, 0x8001}, {0x7fff, 0x7, 0x62, 0x5}, {0x0, 0xe, 0x2, 0x200}, {0x8, 0x1, 0xff, 0x1757}, {0x3ff, 0x5, 0x2, 0x2}, {0x2, 0x5, 0xe, 0x2}, {0x2, 0x2, 0x40, 0x7fff}, {0x5, 0x9, 0x3, 0x1b}, {0xff7f, 0x4, 0x9, 0x936}, {0x4, 0x1, 0x0, 0x2}, {0xdb, 0x19, 0x7, 0x989}, {0x6, 0x6, 0x4, 0x3}], {0x7a14}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x80a, 0x4, 0x1, [0x100, 0x8cf, 0x7, 0x6, 0x0, 0x3, 0xb49, 0x2, 0x800, 0x7, 0x3, 0xfff, 0x7, 0x800, 0x1, 0x9], 0x7}}, @common=@eui64={{0x28}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x4}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6a0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', <r13=>0x0})
r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r14)
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x3c, r15, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r16 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000300)={'bond0\x00', <r17=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r17, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0x8}]}}]}, 0x38}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6gre0\x00', <r18=>0x0, 0x29, 0x3, 0x1, 0x4, 0xa, @empty, @mcast1, 0x700, 0x8, 0x80000001, 0x7f}})
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x590, r5, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x228, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x262}}, {0x8, 0x6, r9}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x2, 0xf7, 0x3, 0x1}, {0x7, 0x0, 0x1, 0x79}, {0x64c, 0x8, 0x2, 0x18}, {0xfffb, 0xc, 0x8}, {0x6, 0x6, 0x7, 0x9}, {0x4, 0x80, 0x4, 0x7cb9}, {0x7, 0x4, 0x1}, {0x10, 0x77, 0x8, 0xe0000}, {0xfff, 0x3, 0x9b, 0x6}, {0x5, 0xc, 0x40, 0x2}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}]}}, {{0x8, 0x1, r13}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x35}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0xa, 0xff, 0x5, 0x2}, {0x5b9d, 0x8, 0x3, 0x8}, {0x3, 0x20, 0x2, 0x840}, {0x9, 0x40, 0xa5, 0x8}, {0xd002, 0x6, 0x1, 0x9}, {0xa3e4, 0x6, 0x2, 0x7}, {0x488c, 0x17, 0x1, 0x3}, {0x2, 0x80, 0x1, 0xe17}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8}}}]}}]}, 0x590}, 0x1, 0x0, 0x0, 0x800}, 0x4000)

476.870331ms ago: executing program 1 (id=3919):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0)
bind$ax25(r0, &(0x7f0000000080)={{0x3, @bcast, 0x1}, [@null, @bcast, @default, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast]}, 0x48) (async)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) (async)
r2 = accept4(r0, &(0x7f0000000000)=@in={0x2, 0x0, @remote}, &(0x7f0000000100)=0x80, 0x80000) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="00e88acf9c211908c3bd8ad1a2caf570ae67d1eabecd77ce6901a60c4ad3517a2da7dd870e96b6acad27ab5d98ecf61539ec342ec1798dda33f1df66039032fc1c06aa5ff88740b328e4882b5c3d96cf11d3a5e05f7f937bb19da29efed7", @ANYRES16=r1, @ANYBLOB="000127bd700002dcdf256a00000008000300", @ANYRES32=r3, @ANYBLOB="0500d20006000000"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x74241d70d5e5d82e) (async)
r4 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f00000005c0)={0x4, {{0x2, 0x4e20, @remote}}, {{0x2, 0x4e20, @multicast1}}}, 0x108)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r6, 0x84, 0x65, &(0x7f0000000800)=[@in={0x2, 0x4e22, @multicast2}], 0x10) (async)
syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async)
syz_emit_ethernet(0x42, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00072f00fc000000000000000000000000000000ff0200"], 0x0) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r10, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}, {{&(0x7f00000001c0)={0xa, 0x4e22, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x6, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="140000000000000029000f000000000000"], 0x18}}], 0x2, 0x4001)
r11 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0)
sendmsg$kcm(r2, &(0x7f00000007c0)={&(0x7f0000000700)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x0, 0x0, 0x1, 0x3, {0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000001900)="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", 0x1009}], 0x1}, 0x20044800) (async)
connect$ax25(r11, &(0x7f0000000540)={{0x3, @bcast, 0x7}, [@default, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x40, r5, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x1}, @NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x101}, @NL80211_MESHCONF_FORWARDING={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040050}, 0x2c000040) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r12=>0x0})
sendmsg$NL80211_CMD_LEAVE_OCB(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000840)={0x1c, r1, 0x4, 0x70bd2a, 0x25dbdbff, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

421.620468ms ago: executing program 1 (id=3920):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000000), 0x12)
ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000})
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x773c1000)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

348.93908ms ago: executing program 3 (id=3921):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x8, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0)

348.280411ms ago: executing program 6 (id=3922):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e00)=ANY=[@ANYBLOB="6916be0000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90de36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c73596f860221156437f4d6b76ecc4b35bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804dbd99ccefb7c09269dd2c5ca93125e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d309d8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc882d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd61dfb3de7f503d58ac8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0d74d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc4511183096eff3188a288c408b10285e7ec75f826e9b08a82cde1f4470545eebc71440623752e87ecc689b7fec2f667e22705b4660b2ef936cce446244bb48f8c7d062ea4a955facf6c2957cfb3c3ee9229efab5b72a5c5266eb493c7c3b08a91971692d9673cb9df620a8240d4f94b9fafd8e2bf0f9cedd1e08f4f10fd8f25f3169ed878624adccb5572cb918e0e3ba7e4ac0967aa65241903509778e63bebf00107524f858d7d48ef9e2c112c75d732344dc0a9bc506172d5a45e3bcb203862307c24c20fe1ffe6b5a43dbc1b20156161b5f59ab9955f2a6fbc64f547a671ded4896d8c4bac78f23e15c8e6cb72599d27607e5a1ad434cdee73d026e5dd14d9824202052181dda714fff7dc43444bc948541f641ac8215a5dae7fa8a50897b916a856aedcdf16be8736b33823ab7b2f1c77554bf2c36e412fcdc2c7c2bf0499ed5dfe84db2d7d3bb802f47dd2ebb7945e09f542d464dfbd2c70a90ab36ebd331a6549fa16f2e83a06c512c83eec56b5b94040d31da56e021a48c8651ebf3e1f8931a6d18150f1d76d07e7d8ecacbed15e9c2a50e610f1d0b523083b182cde6cf655ddd45409400c23fb89eba0db0ab4eee055a60a6ac7fea75703e8e4d737bfabae0fc3c1406b6b454ba694673a69b1782eb0052c2a4e251c8f96c7bcab1845dc347ded7fb207fd19f2bea2e496d63613af735b8e8376658ce4b43a09b53846f0a0218661d917e39bcd79063128f4c5c570b6214db8ed5e1255d48725ad8dc0d3c5aafafb47095dc1f3572650e4b3d0540cec5340638d325897dc3ecc721634875abc32f6ea1c28bf579013269924fc1388f42741b45e99bf7b77322210cf699b2590a33f51f95c572b12156910e926f184d2a309caeef8c206093ee3ab2aec16959da2425"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffe3d}, 0x48) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00000002030300002000000000000000000010080001000100000028b31e585e9dc761c904ca5bd3f3b4f7895e1869f97aac1ebabe87a3286c87c952351f497ad2309e7f06e0073856b66e49b83be99dbbf2322b6435eed3dd7f06337df4c42e"], 0x1c}}, 0x0) (async)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf", 0x45}], 0x3}], 0x1, 0x40800) (async)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) (async)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) (async, rerun: 64)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r7=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r7, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async, rerun: 32)
r8 = socket(0x10, 0x803, 0x0) (rerun: 32)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
unshare(0x8040480)
pipe(&(0x7f0000000040)={<r10=>0xffffffffffffffff})
ioctl$sock_inet_sctp_SIOCINQ(r10, 0x5760, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r11 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001214010000002fab3ec0000000000000080003000000000008004f000000005d4f77cd2fcaa12d4c7a00200001000000000008004b0013000000"], 0x30}}, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

346.773448ms ago: executing program 3 (id=3923):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$int_in(r2, 0x5421, &(0x7f0000000680)=0xffffffff7fffffff)
accept(r2, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
recvmsg(r3, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x4e20, 0x0, 0xd, 0x40, 0x0, 0x11, 0x0, 0xee01}, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}, 0x0, 0x6e6bb6}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8012000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x32, 0x10}, 0x20)
setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'sit0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x68, &(0x7f0000005a40)={@multicast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "75e700", 0x32, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a3579e", 0x0, 0x2c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [], "6be2"}}}}}}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1f}, @NFTA_META_DREG={0x8}]}}}]}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @dup_ipv4={{}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x6}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_ADDR={0x0, 0x1, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x0, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb6}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x6, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r7, 0xe8, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

304.230647ms ago: executing program 1 (id=3924):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)
r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000804)

268.869712ms ago: executing program 6 (id=3925):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10, 0x800)
setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000000), 0x4)
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="10000000", @ANYRES16, @ANYBLOB="200027bd7000fcdbdf252100000044002d800500040000000000050001000400000008000200"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

169.229623ms ago: executing program 6 (id=3926):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be)
sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c)
socket$xdp(0x2c, 0x3, 0x0)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000000000000001, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x1101000, 0x0, 0x2, 0x2}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\a\"\x00', @ANYRES16=r5, @ANYBLOB="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"], 0x738}}, 0x4000041)

168.597686ms ago: executing program 3 (id=3927):
r0 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 32)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x4000) (async, rerun: 32)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r7 = socket$l2tp(0x2, 0x2, 0x73) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r8, 0x0) (async)
getsockopt$EBT_SO_GET_INIT_ENTRIES(r7, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x0, [0x3f, 0x1, 0x7, 0x32c2, 0x1000, 0x1], 0x0, 0x0, 0x0}, &(0x7f0000000200)=0x78)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x5, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x3, 0x2, 0xf, 0x6, 0x7, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0x3, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async)
r12 = socket$netlink(0x10, 0x3, 0x0) (async)
r13 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r13, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r14, 0x308, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004}, 0x1)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)

167.524637ms ago: executing program 1 (id=3928):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000))
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r1, &(0x7f0000001f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x5}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@rdma_dest={0x18, 0x114, 0x2, {0x3, 0xddc0}}], 0x18}, 0x0)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0xfffffffe}, {}]})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x12}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0)

113.281275ms ago: executing program 6 (id=3929):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="80010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff00000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="37f101d274f39f0dffdf4783ca16dd497fc31e4265f19dfcd9aa2ccd25a4a49df894858cc7e2460f0c495410ca485b6d7d068000a06064c1777716acfca8847f9b1c54854d61c97db3ab6cc6759e33173e589b842601fa4b1bc5e5fbf68ae5f276b1819e607a9b50b1b91d88d5648db6f027c955a95934ccb798a84675838ae8274e3fda01878c325392cf544adfe9fb810ef1e47a69cb83466217778619920922ee283ad82971512b224b67821a67977708fdc01ff1ce347d1589a3348b7844b984cdee95b984", 0xc7)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000001000)=ANY=[@ANYBLOB="80010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000ffff00000000000000006c000000fe8000000000000000000000000000bb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480001007467723136302d67656e65726963000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480003"], 0x180}}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="37f101d274f39f0dffdf4783ca16dd497fc31e4265f19dfcd9aa2ccd25a4a49df894858cc7e2460f0c495410ca485b6d7d068000a06064c1777716acfca8847f9b1c54854d61c97db3ab6cc6759e33173e589b842601fa4b1bc5e5fbf68ae5f276b1819e607a9b50b1b91d88d5648db6f027c955a95934ccb798a84675838ae8274e3fda01878c325392cf544adfe9fb810ef1e47a69cb83466217778619920922ee283ad82971512b224b67821a67977708fdc01ff1ce347d1589a3348b7844b984cdee95b984", 0xc7) (async)

59.293507ms ago: executing program 1 (id=3930):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0) (async, rerun: 32)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async, rerun: 64)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=@newtaction={0x58, 0x30, 0x1, 0x0, 0x0, {}, [{0x44, 0x1, [@m_skbedit={0x40, 0x1, 0x0, 0x0, {{0xc}, {0xfffffffffffffe8c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x58}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c2) (rerun: 32)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f0000000100)={0x80, 0x100, 0x2, 0x0, 0x0, [{{r4}, 0x7fffffffffffffff}, {{r4}, 0x3}]}) (async)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a010800000000000000000100000b0900030073797a32000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006d61746368000000240002800c000300b07346e358c219250b0001006367726f75700000080002"], 0xd4}}, 0x0) (async)
r5 = socket$inet6(0xa, 0x5, 0x8)
listen(r5, 0x1cf4)

1.958612ms ago: executing program 4 (id=3931):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x42000, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x8, 0x8, 0x9}, [@NDA_DST_MAC={0xa, 0x1, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000045}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x207)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r2 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000e80)={&(0x7f0000000800)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071041f000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)

0s ago: executing program 5 (id=3932):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
recvmmsg(r0, &(0x7f0000007000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000000)=0x60)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f00000002c0)=0x3, 0x4)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x1, 0x49, &(0x7f0000000040)=r4, 0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r6, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x88, r7, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffaa1a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffa}]}, @TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x11b8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xca0c6171}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe700}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10002}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

kernel console output (not intermixed with test programs):

][T13215] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  284.115730][T13222] netlink: 'syz.3.2095': attribute type 11 has an invalid length.
[  284.121766][T13223] netlink: 'syz.3.2095': attribute type 11 has an invalid length.
[  284.121871][T13215] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[  284.224207][T13226] netdevsim netdevsim5: Direct firmware load for . failed with error -2
[  284.261782][T13226] netdevsim netdevsim5: Falling back to sysfs fallback for: .
[  284.477280][T13248] x_tables: duplicate entry at hook 3
[  284.525323][T13248] __nla_validate_parse: 10 callbacks suppressed
[  284.525344][T13248] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2103'.
[  284.664573][T13257] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2108'.
[  284.688518][T13258] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2107'.
[  284.739898][T13258] syzkaller0: entered promiscuous mode
[  284.749869][T13258] syzkaller0: entered allmulticast mode
[  285.049905][T13275] syzkaller1: entered promiscuous mode
[  285.055505][T13275] syzkaller1: entered allmulticast mode
[  285.105727][T13279] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  285.140045][T13282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2116'.
[  285.158030][T13282] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2116'.
[  285.177715][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2116'.
[  285.229358][ T5829] Bluetooth: hci6: command tx timeout
[  285.385280][T13291] syzkaller1: entered promiscuous mode
[  285.396918][T13291] syzkaller1: entered allmulticast mode
[  285.592987][T13308] xt_l2tp: missing protocol rule (udp|l2tpip)
[  285.651127][T13312] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  285.687147][T13312] tipc: Resetting bearer <eth:syzkaller0>
[  286.026522][T13337] netlink: 'syz.1.2133': attribute type 1 has an invalid length.
[  286.378599][T13367] netlink: 'syz.5.2142': attribute type 10 has an invalid length.
[  286.468589][T13367] team0 (unregistering): Port device team_slave_0 removed
[  286.475768][T13376] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2145'.
[  286.490550][T13376] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2145'.
[  286.511989][T13367] team0 (unregistering): Port device team_slave_1 removed
[  286.679262][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2146'.
[  286.723393][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2146'.
[  287.102927][T13411] team0: No ports can be present during mode change
[  287.125985][T13411] bridge0: entered promiscuous mode
[  287.133860][T13411] bridge0: entered allmulticast mode
[  287.142651][T13411] team0: Port device bridge0 added
[  287.317067][ T5829] Bluetooth: hci6: command tx timeout
[  288.094239][T13451] veth0: entered promiscuous mode
[  288.101033][T13451] veth0: left promiscuous mode
[  288.656948][T13507] openvswitch: netlink: Flow key attr not present in new flow.
[  288.739779][T13512] syz_tun: entered allmulticast mode
[  288.759168][T13512] dvmrp8: entered allmulticast mode
[  288.766241][T13512] dvmrp8: left allmulticast mode
[  288.830873][T13511] syz_tun: left allmulticast mode
[  288.920834][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  288.928768][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  288.937766][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  288.997186][   T11] block nbd0: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 210 seconds
[  289.008460][   T11] block nbd0: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 210 seconds
[  289.020040][   T11] block nbd0: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 210 seconds
[  289.047105][   T11] block nbd0: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 210 seconds
[  289.099903][T13520] infiniband syz2: set down
[  289.104460][   T24] ip6_vti0 speed is unknown, defaulting to 1000
[  289.111455][T13520] infiniband syz2: added ip6_vti0
[  289.141398][T13520] RDS/IB: syz2: added
[  289.146781][T13520] smc: adding ib device syz2 with port count 1
[  289.153448][T13520] smc:    ib device syz2 port 1 has no pnetid
[  289.159838][ T8634] ip6_vti0 speed is unknown, defaulting to 1000
[  289.167147][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  289.293528][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  289.419123][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  289.543062][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  289.667901][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  289.785694][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  289.901775][T13520] ip6_vti0 speed is unknown, defaulting to 1000
[  290.267417][ T1101] block nbd3: Possible stuck request ffff8880258f0000: control (read@0,1024B). Runtime 90 seconds
[  290.278234][ T1101] block nbd3: Possible stuck request ffff8880258f0200: control (read@1024,1024B). Runtime 90 seconds
[  290.289761][ T1101] block nbd3: Possible stuck request ffff8880258f0400: control (read@2048,1024B). Runtime 90 seconds
[  290.301437][ T1101] block nbd3: Possible stuck request ffff8880258f0600: control (read@3072,1024B). Runtime 90 seconds
[  291.394405][T13496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  291.557326][T13533] __nla_validate_parse: 11 callbacks suppressed
[  291.557347][T13533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2189'.
[  291.753370][T13533] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2189'.
[  291.773138][T13533] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2189'.
[  291.783629][T13533] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2189'.
[  291.950171][T13555] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2199'.
[  291.964439][T13562] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2198'.
[  291.981639][T13561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2200'.
[  292.140630][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'.
[  292.227510][T13582] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2206'.
[  292.574866][T13600] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  292.584001][T13600] tipc: Resetting bearer <eth:syzkaller0>
[  292.602704][T13599] tipc: Disabling bearer <eth:syzkaller0>
[  292.684629][T13605] geneve2: entered promiscuous mode
[  292.714463][T13607] netlink: 'syz.5.2216': attribute type 1 has an invalid length.
[  292.725891][T13607] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2216'.
[  293.112844][T13636] netlink: 'syz.5.2225': attribute type 13 has an invalid length.
[  293.174601][T13641] netlink: 'syz.5.2225': attribute type 1 has an invalid length.
[  294.250420][T13699] openvswitch: netlink: Flow actions attr not present in new flow.
[  294.259681][T13700] openvswitch: netlink: Flow actions attr not present in new flow.
[  294.479276][T13712] netlink: 'syz.5.2252': attribute type 1 has an invalid length.
[  294.493915][T13712] netlink: 'syz.5.2252': attribute type 1 has an invalid length.
[  294.876950][T13739] IPVS: set_ctl: invalid protocol: 47 172.20.20.63:20001
[  295.165136][T13754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.195922][T13754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.215006][T13754] bond0 (unregistering): Released all slaves
[  295.426436][T13771] batman_adv: batadv0: Adding interface: dummy0
[  295.456201][T13771] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.505959][T13771] batman_adv: batadv0: Interface activated: dummy0
[  295.541548][T13777] netlink: 'syz.1.2274': attribute type 1 has an invalid length.
[  295.568667][T13783] lo: Caught tx_queue_len zero misconfig
[  295.811999][T13798] bridge0: the hash_elasticity option has been deprecated and is always 16
[  295.990553][T13808] syzkaller1: entered promiscuous mode
[  296.002355][T13808] syzkaller1: entered allmulticast mode
[  296.216338][T13824] netlink: 'syz.4.2288': attribute type 1 has an invalid length.
[  296.227520][T13824] netlink: 'syz.4.2288': attribute type 11 has an invalid length.
[  296.677640][T13854] __nla_validate_parse: 22 callbacks suppressed
[  296.677657][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'.
[  296.694542][T13854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2301'.
[  297.139092][T13888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2312'.
[  297.246816][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2312'.
[  297.285600][T13912] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2316'.
[  297.528209][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2319'.
[  297.543313][T13919] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  297.573289][T13921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2320'.
[  297.732769][T13935] 
: renamed from bond0 (while UP)
[  297.840867][T13945] nbd: must specify a size in bytes for the device
[  298.068264][T13963] netlink: 'syz.3.2334': attribute type 5 has an invalid length.
[  298.244961][T13974] netlink: 'syz.4.2337': attribute type 1 has an invalid length.
[  298.379923][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'.
[  298.389574][T13974] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2337'.
[  298.398852][T13974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'.
[  298.458064][T13985] rdma_op ffff88807acb71f0 conn xmit_rdma 0000000000000000
[  298.619795][T13992] veth11: entered promiscuous mode
[  298.642053][T13977] netlink: 'syz.4.2337': attribute type 29 has an invalid length.
[  298.777671][T13974] netlink: 'syz.4.2337': attribute type 29 has an invalid length.
[  298.888662][T14016] netlink: 'syz.1.2349': attribute type 1 has an invalid length.
[  299.869465][   T11] block nbd2: Possible stuck request ffff888025890000: control (read@0,1024B). Runtime 180 seconds
[  299.880477][   T11] block nbd2: Possible stuck request ffff888025890200: control (read@1024,1024B). Runtime 180 seconds
[  299.893132][   T11] block nbd2: Possible stuck request ffff888025890400: control (read@2048,1024B). Runtime 180 seconds
[  299.904611][   T11] block nbd2: Possible stuck request ffff888025890600: control (read@3072,1024B). Runtime 180 seconds
[  300.427932][T14117] openvswitch: netlink: Tunnel attr 32 out of range max 16
[  300.505192][T14124] netlink: 'syz.1.2383': attribute type 1 has an invalid length.
[  301.943661][T14211] __nla_validate_parse: 13 callbacks suppressed
[  301.943681][T14211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2409'.
[  302.025075][T14211] vlan4: entered allmulticast mode
[  302.034595][T14211] bridge6: entered allmulticast mode
[  302.282523][T14228] netlink: 9 bytes leftover after parsing attributes in process `syz.6.2417'.
[  302.312690][T14228] gretap0: entered promiscuous mode
[  302.338925][T14228] gretap0: left promiscuous mode
[  302.361881][T14236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2420'.
[  302.459230][T14228] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  302.494488][ T5938] ip6_vti0 speed is unknown, defaulting to 1000
[  302.502214][T14248] gretap0: entered promiscuous mode
[  302.504612][ T5938] syz2: Port: 1 Link ACTIVE
[  302.534449][ T5900] ip6_vti0 speed is unknown, defaulting to 1000
[  302.813979][T14270] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2429'.
[  302.872205][T14271] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2429'.
[  303.083218][T14291] netlink: 'syz.1.2436': attribute type 7 has an invalid length.
[  303.105622][T14291] netlink: 'syz.1.2436': attribute type 7 has an invalid length.
[  303.199017][T14294] xt_hashlimit: size too large, truncated to 1048576
[  303.270490][T14303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2438'.
[  303.340789][T14306] syz_tun: entered allmulticast mode
[  303.544428][T14304] syz_tun: left allmulticast mode
[  303.821583][T14338] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2449'.
[  303.869857][T14342] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  303.900291][T14343] syz.6.2451: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  303.919217][T14338] hsr_slave_0: left promiscuous mode
[  303.921273][T14343] CPU: 1 UID: 0 PID: 14343 Comm: syz.6.2451 Not tainted syzkaller #0 PREEMPT(full) 
[  303.921299][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  303.921312][T14343] Call Trace:
[  303.921319][T14343]  <TASK>
[  303.921327][T14343]  dump_stack_lvl+0xe8/0x150
[  303.921356][T14343]  warn_alloc+0x249/0x340
[  303.921377][T14343]  ? stack_trace_save+0xa9/0x100
[  303.921404][T14343]  ? __pfx_warn_alloc+0x10/0x10
[  303.921430][T14343]  ? kasan_save_track+0x4f/0x80
[  303.921447][T14343]  ? kasan_save_track+0x3e/0x80
[  303.921462][T14343]  ? __kasan_kmalloc+0x93/0xb0
[  303.921479][T14343]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  303.921496][T14343]  ? xskq_create+0x56/0x170
[  303.921513][T14343]  ? xsk_setsockopt+0x54c/0x990
[  303.921536][T14343]  ? do_sock_setsockopt+0x17c/0x1b0
[  303.921558][T14343]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  303.921579][T14343]  ? do_syscall_64+0xe2/0xf80
[  303.921602][T14343]  __vmalloc_node_range_noprof+0x132/0x1730
[  303.921651][T14343]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  303.921677][T14343]  ? __kasan_kmalloc+0x93/0xb0
[  303.921701][T14343]  vmalloc_user_noprof+0xad/0xe0
[  303.921719][T14343]  ? xskq_create+0xbf/0x170
[  303.921737][T14343]  xskq_create+0xbf/0x170
[  303.921757][T14343]  xsk_init_queue+0xad/0x110
[  303.921785][T14343]  xsk_setsockopt+0x54c/0x990
[  303.921814][T14343]  ? __pfx_xsk_setsockopt+0x10/0x10
[  303.921839][T14343]  ? __pfx_aa_sk_perm+0x10/0x10
[  303.921864][T14343]  ? aa_sock_opt_perm+0xff/0x1a0
[  303.921889][T14343]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  303.921909][T14343]  ? __pfx_xsk_setsockopt+0x10/0x10
[  303.921936][T14343]  do_sock_setsockopt+0x17c/0x1b0
[  303.921973][T14343]  __x64_sys_setsockopt+0x13d/0x1b0
[  303.922001][T14343]  do_syscall_64+0xe2/0xf80
[  303.922020][T14343]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.922038][T14343]  ? trace_irq_disable+0x37/0x100
[  303.922056][T14343]  ? clear_bhb_loop+0x60/0xb0
[  303.922077][T14343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  303.922095][T14343] RIP: 0033:0x7f2d6f19aeb9
[  303.922112][T14343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  303.922128][T14343] RSP: 002b:00007f2d70039028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  303.922149][T14343] RAX: ffffffffffffffda RBX: 00007f2d6f415fa0 RCX: 00007f2d6f19aeb9
[  303.922163][T14343] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  303.922175][T14343] RBP: 00007f2d6f208c1f R08: 0000000000000004 R09: 0000000000000000
[  303.922187][T14343] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  303.922199][T14343] R13: 00007f2d6f416038 R14: 00007f2d6f415fa0 R15: 00007ffce596bfe8
[  303.922229][T14343]  </TASK>
[  303.922236][T14343] Mem-Info:
[  304.202847][T14338] hsr_slave_1: left promiscuous mode
[  304.208405][T14343] active_anon:7019 inactive_anon:0 isolated_anon:0
[  304.208405][T14343]  active_file:3274 inactive_file:40015 isolated_file:0
[  304.208405][T14343]  unevictable:768 dirty:185 writeback:0
[  304.208405][T14343]  slab_reclaimable:11840 slab_unreclaimable:110953
[  304.208405][T14343]  mapped:39620 shmem:1351 pagetables:1479
[  304.208405][T14343]  sec_pagetables:0 bounce:0
[  304.208405][T14343]  kernel_misc_reclaimable:0
[  304.208405][T14343]  free:1285063 free_pcp:15075 free_cma:0
[  304.256160][T14343] Node 0 active_anon:28076kB inactive_anon:0kB active_file:13096kB inactive_file:159856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:158480kB dirty:740kB writeback:0kB shmem:3868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14316kB pagetables:5772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  304.297086][T14343] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  304.327586][T14343] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  304.359138][T14343] lowmem_reserve[]: 0 2494 2495 2495 2495
[  304.365035][T14343] Node 0 DMA32 free:1244584kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28076kB inactive_anon:0kB active_file:13096kB inactive_file:159856kB unevictable:1536kB writepending:740kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:41084kB local_pcp:20112kB free_cma:0kB
[  304.404399][T14343] lowmem_reserve[]: 0 0 1 1 1
[  304.409688][T14343] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  304.463607][T14343] lowmem_reserve[]: 0 0 0 0 0
[  304.486995][T14343] Node 1 Normal free:3880308kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19284kB local_pcp:6016kB free_cma:0kB
[  304.567269][T14343] lowmem_reserve[]: 0 0 0 0 0
[  304.583553][T14343] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  304.609057][T14363] xt_hashlimit: size too large, truncated to 1048576
[  304.629112][T14343] Node 0 DMA32: 4379*4kB (UME) 2863*8kB (UME) 1050*16kB (UME) 114*32kB (UME) 13*64kB (UME) 8*128kB (UM) 4*256kB (UE) 1*512kB (U) 5*1024kB (UM) 8*2048kB (UM) 283*4096kB (M) = 1244932kB
[  304.700119][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2458'.
[  304.732308][T14343] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  304.807727][T14343] Node 1 Normal: 183*4kB (U) 47*8kB (UME) 44*16kB (UME) 81*32kB (UME) 23*64kB (UME) 5*128kB (UM) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 944*4096kB (M) = 3880308kB
[  304.896017][T14343] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  304.947646][T14343] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  304.993076][   T60] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96
[  305.006019][T14343] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  305.049218][T14343] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  305.080668][T14343] 44636 total pagecache pages
[  305.092365][T14343] 0 pages in swap cache
[  305.100660][T14343] Free swap  = 124996kB
[  305.105440][T14395] sctp: [Deprecated]: syz.1.2459 (pid 14395) Use of int in max_burst socket option deprecated.
[  305.105440][T14395] Use struct sctp_assoc_value instead
[  305.123008][T14343] Total swap = 124996kB
[  305.128158][T14343] 2097051 pages RAM
[  305.132155][T14343] 0 pages HighMem/MovableOnly
[  305.141442][T14343] 426624 pages reserved
[  305.152937][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2460'.
[  305.166633][T14343] 0 pages cma reserved
[  305.492382][T14414] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2466'.
[  305.822764][T14424] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  305.838644][T14424] bond0 (unregistering): Released all slaves
[  305.901961][T14434] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22
[  305.926190][T14432] lo: Caught tx_queue_len zero misconfig
[  305.977182][T14434] netdevsim netdevsim4: Direct firmware load for . failed with error -22
[  306.000380][T14434] netdevsim netdevsim4: Falling back to sysfs fallback for: .
[  306.128341][T14452] tc_dump_action: action bad kind
[  306.256681][T14454] syzkaller0: entered promiscuous mode
[  306.263366][T14454] syzkaller0: entered allmulticast mode
[  306.372227][T14462] openvswitch: netlink: Geneve option length err (len 256, max 255).
[  306.546327][T14468] netlink: 'syz.6.2482': attribute type 21 has an invalid length.
[  307.003817][T14496] netlink: 'syz.1.2491': attribute type 1 has an invalid length.
[  307.033982][T14498] __nla_validate_parse: 5 callbacks suppressed
[  307.034000][T14498] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2493'.
[  307.086049][T14496] 8021q: adding VLAN 0 to HW filter on device bond8
[  307.351945][T14512] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2496'.
[  307.407584][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2498'.
[  307.579114][T14514] hsr_slave_0 (unregistering): left promiscuous mode
[  307.602341][T14522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2501'.
[  307.726644][T14531] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.744661][T14531] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.789858][T14540] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  307.812564][T14542] nbd: socks must be embedded in a SOCK_ITEM attr
[  307.867629][T14531] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.877727][T14531] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.959662][T14531] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  307.969923][T14531] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.056789][T14531] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  308.069777][T14531] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  308.209123][T14565] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2513'.
[  308.228314][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2513'.
[  308.336554][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2515'.
[  308.345883][ T8598] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  308.366929][ T8598] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  308.375309][T14577] bridge_slave_1: left allmulticast mode
[  308.397288][T14577] bridge_slave_1: left promiscuous mode
[  308.397339][T14573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2511'.
[  308.403100][T14577] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.423824][T14573] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2511'.
[  308.479347][ T8591] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  308.515915][ T8591] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  308.588772][T14586] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2518'.
[  308.608162][ T8591] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  308.619708][ T8591] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  308.643583][T14590] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  308.696411][   T50] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  308.705839][   T50] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  308.916027][T14599] smc: adding net device wlan0 with user defined pnetid SYZ0
[  309.121715][T14599] smc: removing net device wlan0 with user defined pnetid SYZ0
[  309.148317][T14617] netlink: 'syz.5.2528': attribute type 21 has an invalid length.
[  309.279323][T14619] bond6: (slave ip6gretap0): Releasing active interface
[  309.325949][T14617] netlink: 'syz.5.2528': attribute type 4 has an invalid length.
[  309.337306][T14617] netlink: 'syz.5.2528': attribute type 5 has an invalid length.
[  309.636635][T14644] xt_NFQUEUE: number of total queues is 0
[  309.664012][T14644] ip6tnl0: Caught tx_queue_len zero misconfig
[  309.851102][T14654] syzkaller0: entered promiscuous mode
[  309.859109][T14658] openvswitch: netlink: Flow actions attr not present in new flow.
[  309.877026][T14654] syzkaller0: entered allmulticast mode
[  310.707788][T14716] netlink: 'syz.4.2553': attribute type 11 has an invalid length.
[  310.727734][T14716] netlink: 'syz.4.2553': attribute type 11 has an invalid length.
[  311.049331][T14738] netlink: 'syz.6.2559': attribute type 33 has an invalid length.
[  311.095259][T14738] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  311.118519][T14738] bond1 (unregistering): Released all slaves
[  311.925807][T14811] netlink: 'syz.3.2581': attribute type 1 has an invalid length.
[  312.239334][T14831] netem: change failed
[  312.463593][T14834] netlink: 'syz.4.2587': attribute type 21 has an invalid length.
[  312.513911][T14834] __nla_validate_parse: 19 callbacks suppressed
[  312.513931][T14834] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2587'.
[  312.672226][   T11] block nbd1: Possible stuck request ffff888025878000: control (read@0,1024B). Runtime 210 seconds
[  312.683078][   T11] block nbd1: Possible stuck request ffff888025878200: control (read@1024,1024B). Runtime 210 seconds
[  312.694185][   T11] block nbd1: Possible stuck request ffff888025878400: control (read@2048,1024B). Runtime 210 seconds
[  312.705274][   T11] block nbd1: Possible stuck request ffff888025878600: control (read@3072,1024B). Runtime 210 seconds
[  312.761648][T14855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2594'.
[  312.841177][T14859] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2596'.
[  312.879872][T14864] netlink: 'syz.6.2595': attribute type 10 has an invalid length.
[  312.903304][T14864] team0: Device veth0_macvtap failed to register rx_handler
[  312.977973][T14870] IPVS: set_ctl: invalid protocol: 22 127.0.0.1:20003
[  313.029104][T14872] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2599'.
[  313.300480][T14900] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode
[  313.378070][T14905] pimreg: left allmulticast mode
[  313.430333][T14908] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2608'.
[  313.998238][T14936] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2618'.
[  314.083662][T14940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2619'.
[  314.131258][T14942] netlink: 'syz.6.2621': attribute type 21 has an invalid length.
[  314.157228][T14942] netlink: 128 bytes leftover after parsing attributes in process `syz.6.2621'.
[  314.173320][T14945] openvswitch: netlink: IP tunnel dst address not specified
[  314.176615][T14942] netlink: 'syz.6.2621': attribute type 5 has an invalid length.
[  314.185406][T14945] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  314.205086][T14942] netlink: 3 bytes leftover after parsing attributes in process `syz.6.2621'.
[  314.220620][T14947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2623'.
[  314.283862][T14949] syzkaller1: entered promiscuous mode
[  314.290254][T14949] syzkaller1: entered allmulticast mode
[  314.409499][T14955] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  314.471876][T14957] netlink: 'syz.6.2628': attribute type 1 has an invalid length.
[  314.645370][T14968] vcan0 (unregistering): left allmulticast mode
[  314.709202][T14976] syzkaller0: entered promiscuous mode
[  314.714696][T14976] syzkaller0: entered allmulticast mode
[  315.321207][T14973] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  316.516478][T15002] netlink: 'syz.3.2638': attribute type 1 has an invalid length.
[  316.524485][T15002] netlink: 'syz.3.2638': attribute type 3 has an invalid length.
[  316.572040][T15003] tipc: Resetting bearer <eth:syzkaller0>
[  317.386623][T15003] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  317.395713][T15003] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  317.697916][T15003] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[  317.704278][T15003] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[  317.764158][T15091] __nla_validate_parse: 14 callbacks suppressed
[  317.764175][T15091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'.
[  318.149251][ T5826] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  318.159753][ T5826] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  318.172523][ T5826] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  318.180640][ T5826] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  318.191202][ T5826] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  318.225018][ T5829] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  318.239963][ T5829] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  318.259687][ T5829] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  318.270233][ T5829] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  318.280577][ T5829] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  318.361268][T15114] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2667'.
[  318.405765][T15092] ip6_vti0 speed is unknown, defaulting to 1000
[  318.679691][T15131] xt_CT: No such helper "syz1"
[  318.836340][T15136] syzkaller1: entered promiscuous mode
[  318.849725][T15136] syzkaller1: entered allmulticast mode
[  318.883908][T15092] chnl_net:caif_netlink_parms(): no params data found
[  319.069972][   T11] block nbd0: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 240 seconds
[  319.081318][   T11] block nbd0: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 240 seconds
[  319.092487][   T11] block nbd0: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 240 seconds
[  319.106438][   T11] block nbd0: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 240 seconds
[  319.189564][T15153] x_tables: duplicate underflow at hook 1
[  319.274514][T15092] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.283345][T15092] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.302253][T15092] bridge_slave_0: entered allmulticast mode
[  319.319757][T15092] bridge_slave_0: entered promiscuous mode
[  319.331531][T15092] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.339219][T15092] bridge0: port 2(bridge_slave_1) entered disabled state
[  319.360970][T15092] bridge_slave_1: entered allmulticast mode
[  319.370270][T15092] bridge_slave_1: entered promiscuous mode
[  319.435354][T15156] netlink: 'syz.4.2681': attribute type 10 has an invalid length.
[  319.448835][T15092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.482588][T15092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.496655][T15156] syzkaller0: entered promiscuous mode
[  319.518486][T15156] syzkaller0: entered allmulticast mode
[  319.546207][T15170] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2687'.
[  319.565868][T15173] netlink: 512 bytes leftover after parsing attributes in process `syz.5.2688'.
[  319.581558][T15092] team0: Port device team_slave_0 added
[  319.598897][T15092] team0: Port device team_slave_1 added
[  319.712698][T15092] batman_adv: batadv0: Adding interface: batadv_slave_0
[  319.736983][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  319.787919][T15092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  319.818818][T15092] batman_adv: batadv0: Adding interface: batadv_slave_1
[  319.842287][T15092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  319.939126][T15092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.101218][T15092] hsr_slave_0: entered promiscuous mode
[  320.109222][T15092] hsr_slave_1: entered promiscuous mode
[  320.115701][T15092] debugfs: 'hsr0' already exists in 'hsr'
[  320.123726][T15092] Cannot create hsr debugfs directory
[  320.307799][T15211] netlink: 'syz.4.2699': attribute type 1 has an invalid length.
[  320.322450][T15210] netlink: 'syz.1.2697': attribute type 33 has an invalid length.
[  320.347163][ T5829] Bluetooth: hci7: command tx timeout
[  320.348019][T15211] 8021q: adding VLAN 0 to HW filter on device bond14
[  320.359630][   T25] block nbd3: Possible stuck request ffff8880258f0000: control (read@0,1024B). Runtime 120 seconds
[  320.370856][   T25] block nbd3: Possible stuck request ffff8880258f0200: control (read@1024,1024B). Runtime 120 seconds
[  320.382200][   T25] block nbd3: Possible stuck request ffff8880258f0400: control (read@2048,1024B). Runtime 120 seconds
[  320.393469][   T25] block nbd3: Possible stuck request ffff8880258f0600: control (read@3072,1024B). Runtime 120 seconds
[  320.548133][T15222] netlink: 'syz.4.2700': attribute type 5 has an invalid length.
[  320.583991][T15092] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.595249][T15092] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.634673][T15228] netlink: 'syz.4.2700': attribute type 5 has an invalid length.
[  320.701050][T15092] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.712271][T15092] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.781653][T15092] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.804613][T15092] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  320.878143][T15092] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  320.890743][T15240] netlink: 'syz.4.2707': attribute type 13 has an invalid length.
[  320.905644][T15092] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.195055][T15254] netlink: 'syz.5.2711': attribute type 9 has an invalid length.
[  321.223320][T15256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'.
[  321.225085][T15092] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  321.249784][T15092] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  321.267997][T15092] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  321.304446][T15092] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  321.431268][T15272] openvswitch: netlink: IP tunnel dst address not specified
[  321.437121][T15092] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.466142][T15092] 8021q: adding VLAN 0 to HW filter on device team0
[  321.482540][ T8591] bridge0: port 1(bridge_slave_0) entered blocking state
[  321.489852][ T8591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  321.520817][ T8591] bridge0: port 2(bridge_slave_1) entered blocking state
[  321.528072][ T8591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  321.583361][T15275] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2716'.
[  321.603698][T15275] Cannot find del_set index 4 as target
[  321.811515][T15290] netlink: 'syz.5.2718': attribute type 23 has an invalid length.
[  321.843395][T15092] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.930636][T15092] veth0_vlan: entered promiscuous mode
[  321.979608][T15092] veth1_vlan: entered promiscuous mode
[  322.013555][T15297] xt_hashlimit: size too large, truncated to 1048576
[  322.045704][T15092] veth0_macvtap: entered promiscuous mode
[  322.068326][T15300] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2720'.
[  322.071924][T15092] veth1_macvtap: entered promiscuous mode
[  322.109902][T15300] �: renamed from vxcan1 (while UP)
[  322.122421][T15092] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.174811][T15092] batman_adv: batadv0: Interface activated: batadv_slave_1
[  322.252453][   T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  322.301371][   T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  322.311453][   T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  322.332870][   T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  322.427238][ T5829] Bluetooth: hci7: command tx timeout
[  322.475988][ T8606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.499701][ T8606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  322.643644][ T8606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  322.671986][ T8606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.377719][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  323.394134][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  323.402810][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  323.411284][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  323.419084][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  323.562009][T15354] ip6_vti0 speed is unknown, defaulting to 1000
[  323.762468][ T5833] syz_tun (unregistering): left allmulticast mode
[  323.931052][T15372] syzkaller1: entered promiscuous mode
[  323.947492][T15372] syzkaller1: entered allmulticast mode
[  324.078394][T15377] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2738'.
[  324.349450][T15388] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[  324.387800][T15354] chnl_net:caif_netlink_parms(): no params data found
[  324.507863][ T5826] Bluetooth: hci7: command tx timeout
[  324.538449][T15394] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2743'.
[  324.585413][T15394] x_tables: unsorted entry at hook 1
[  324.714091][T15354] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.722106][T15354] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.730254][T15354] bridge_slave_0: entered allmulticast mode
[  324.738382][T15354] bridge_slave_0: entered promiscuous mode
[  324.754622][T15354] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.764845][T15354] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.773437][T15354] bridge_slave_1: entered allmulticast mode
[  324.781692][T15354] bridge_slave_1: entered promiscuous mode
[  324.814193][T15403] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2745'.
[  324.831216][T15354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  324.845988][T15354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.898122][T15354] team0: Port device team_slave_0 added
[  324.904348][T15409] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb
[  324.918110][T15409] tipc: Enabled bearer <udp:syz0>, priority 10
[  324.928848][T15354] team0: Port device team_slave_1 added
[  324.950124][T15406] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  324.985539][T15406] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  325.016014][T15354] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.035475][T15354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.070305][T15354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.103833][T15354] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.111936][T15354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  325.139852][T15354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.231384][T15354] hsr_slave_0: entered promiscuous mode
[  325.248135][T15354] hsr_slave_1: entered promiscuous mode
[  325.267127][T15354] debugfs: 'hsr0' already exists in 'hsr'
[  325.273077][T15354] Cannot create hsr debugfs directory
[  325.346334][T15416] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  325.423467][T15423] tunl0: entered promiscuous mode
[  325.428930][T15423] netlink: 'syz.4.2751': attribute type 3 has an invalid length.
[  325.437174][T15423] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2751'.
[  325.448084][T15423] netlink: 'syz.4.2751': attribute type 9 has an invalid length.
[  325.467196][ T5826] Bluetooth: hci1: command tx timeout
[  325.611479][T15354] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.800261][T15443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2757'.
[  325.814056][T15443] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2757'.
[  325.891574][T15354] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.015604][T15454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2762'.
[  326.031399][T15354] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.064571][T15457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2763'.
[  326.074723][ T5893] tipc: Node number set to 3156340194
[  326.186462][T15456] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2761'.
[  326.265686][T15354] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.344044][T15469] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2767'.
[  326.590903][ T5826] Bluetooth: hci7: command tx timeout
[  326.625147][T15487] netlink: 'syz.5.2771': attribute type 1 has an invalid length.
[  326.663412][T15354] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  326.710218][T15354] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  326.759702][T15354] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  326.798380][T15354] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  326.834916][T15500] team0: Device gtp0 is up. Set it down before adding it as a team port
[  327.016494][T15354] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.067674][T15354] 8021q: adding VLAN 0 to HW filter on device team0
[  327.093501][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  327.100682][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  327.136075][   T60] bridge0: port 2(bridge_slave_1) entered blocking state
[  327.143278][   T60] bridge0: port 2(bridge_slave_1) entered forwarding state
[  327.548457][ T5826] Bluetooth: hci1: command tx timeout
[  327.800905][T15354] 8021q: adding VLAN 0 to HW filter on device batadv0
[  328.114289][T15560] xt_TCPMSS: Only works on TCP SYN packets
[  328.207381][T15354] veth0_vlan: entered promiscuous mode
[  328.248901][T15354] veth1_vlan: entered promiscuous mode
[  328.336407][T15354] veth0_macvtap: entered promiscuous mode
[  328.352503][T15354] veth1_macvtap: entered promiscuous mode
[  328.372949][T15567] netlink: 'syz.6.2790': attribute type 1 has an invalid length.
[  328.387382][T15564] xt_limit: Overflow, try lower: 271964/0
[  328.445455][T15354] batman_adv: batadv0: Interface activated: batadv_slave_0
[  328.492874][T15354] batman_adv: batadv0: Interface activated: batadv_slave_1
[  328.520507][ T8591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  328.538543][ T8591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  328.581550][ T8591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  328.609003][ T8591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  328.810176][ T8598] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.847036][ T8598] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.856567][T15585] veth1_macvtap: left promiscuous mode
[  328.920776][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.937337][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  329.469342][T15617] __nla_validate_parse: 11 callbacks suppressed
[  329.469362][T15617] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2805'.
[  329.627094][ T5826] Bluetooth: hci1: command tx timeout
[  329.729497][T15630] ip6t_srh: unknown srh match flags  5F28
[  329.904520][T15640] netlink: 'syz.1.2810': attribute type 21 has an invalid length.
[  329.912859][T15640] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2810'.
[  329.923034][T15640] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2810'.
[  329.951034][   T11] block nbd2: Possible stuck request ffff888025890000: control (read@0,1024B). Runtime 210 seconds
[  329.962068][   T11] block nbd2: Possible stuck request ffff888025890200: control (read@1024,1024B). Runtime 210 seconds
[  329.973320][   T11] block nbd2: Possible stuck request ffff888025890400: control (read@2048,1024B). Runtime 210 seconds
[  329.987422][   T11] block nbd2: Possible stuck request ffff888025890600: control (read@3072,1024B). Runtime 210 seconds
[  330.117700][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2815'.
[  330.203901][T15657] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2813'.
[  330.223384][T15659] xt_hashlimit: size too large, truncated to 1048576
[  330.582946][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2821'.
[  330.796371][T15690] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2825'.
[  331.028707][T15704] netlink: 'syz.5.2830': attribute type 15 has an invalid length.
[  331.131467][T15711] netlink: 'syz.1.2833': attribute type 2 has an invalid length.
[  331.168170][T15711] �9: entered promiscuous mode
[  331.235331][T15719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  331.717516][ T5826] Bluetooth: hci1: command tx timeout
[  333.095438][T15653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  333.240804][T15730] netlink: 'syz.6.2838': attribute type 33 has an invalid length.
[  333.295908][T15740] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  333.331635][T15730] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  333.374172][T15730] bond1 (unregistering): Released all slaves
[  333.392515][T15753] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2841'.
[  333.634498][T15764] gtp2: entered allmulticast mode
[  333.688315][T15769] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.2846'.
[  333.824729][T15774] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2848'.
[  333.893808][T15784] veth0_to_hsr: Caught tx_queue_len zero misconfig
[  333.967247][T15783] netlink: 'syz.4.2850': attribute type 17 has an invalid length.
[  333.988158][T15778] netlink: 'syz.4.2850': attribute type 17 has an invalid length.
[  333.989647][T15790] syz.5.2854: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  334.008659][T15778] gretap0: entered promiscuous mode
[  334.024457][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.5.2854 Not tainted syzkaller #0 PREEMPT(full) 
[  334.024482][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  334.024494][T15790] Call Trace:
[  334.024501][T15790]  <TASK>
[  334.024508][T15790]  dump_stack_lvl+0xe8/0x150
[  334.024535][T15790]  warn_alloc+0x249/0x340
[  334.024555][T15790]  ? stack_trace_save+0xa9/0x100
[  334.024577][T15790]  ? __pfx_warn_alloc+0x10/0x10
[  334.024600][T15790]  ? kasan_save_track+0x4f/0x80
[  334.024615][T15790]  ? kasan_save_track+0x3e/0x80
[  334.024629][T15790]  ? __kasan_kmalloc+0x93/0xb0
[  334.024643][T15790]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  334.024658][T15790]  ? xskq_create+0x56/0x170
[  334.024683][T15790]  ? xsk_setsockopt+0x54c/0x990
[  334.024701][T15790]  ? do_sock_setsockopt+0x17c/0x1b0
[  334.024719][T15790]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  334.024738][T15790]  ? do_syscall_64+0xe2/0xf80
[  334.024759][T15790]  __vmalloc_node_range_noprof+0x132/0x1730
[  334.024805][T15790]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  334.024829][T15790]  ? __kasan_kmalloc+0x93/0xb0
[  334.024851][T15790]  vmalloc_user_noprof+0xad/0xe0
[  334.024868][T15790]  ? xskq_create+0xbf/0x170
[  334.024885][T15790]  xskq_create+0xbf/0x170
[  334.024905][T15790]  xsk_init_queue+0xad/0x110
[  334.024928][T15790]  xsk_setsockopt+0x54c/0x990
[  334.024953][T15790]  ? __pfx_xsk_setsockopt+0x10/0x10
[  334.024975][T15790]  ? __pfx_aa_sk_perm+0x10/0x10
[  334.024997][T15790]  ? aa_sock_opt_perm+0xff/0x1a0
[  334.025019][T15790]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  334.025037][T15790]  ? __pfx_xsk_setsockopt+0x10/0x10
[  334.025059][T15790]  do_sock_setsockopt+0x17c/0x1b0
[  334.025083][T15790]  __x64_sys_setsockopt+0x13d/0x1b0
[  334.025104][T15790]  do_syscall_64+0xe2/0xf80
[  334.025119][T15790]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.025133][T15790]  ? trace_irq_disable+0x37/0x100
[  334.025147][T15790]  ? clear_bhb_loop+0x60/0xb0
[  334.025164][T15790]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.025181][T15790] RIP: 0033:0x7f59b459aeb9
[  334.025194][T15790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  334.025207][T15790] RSP: 002b:00007f59b539b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  334.025226][T15790] RAX: ffffffffffffffda RBX: 00007f59b4815fa0 RCX: 00007f59b459aeb9
[  334.025239][T15790] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  334.025248][T15790] RBP: 00007f59b4608c1f R08: 0000000000000004 R09: 0000000000000000
[  334.025258][T15790] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  334.025268][T15790] R13: 00007f59b4816038 R14: 00007f59b4815fa0 R15: 00007ffc9e289d48
[  334.025298][T15790]  </TASK>
[  334.025306][T15790] Mem-Info:
[  334.305608][T15778] gretap0: left promiscuous mode
[  334.305652][T15790] active_anon:7156 inactive_anon:0 isolated_anon:0
[  334.305652][T15790]  active_file:3405 inactive_file:40032 isolated_file:0
[  334.305652][T15790]  unevictable:768 dirty:192 writeback:0
[  334.305652][T15790]  slab_reclaimable:12075 slab_unreclaimable:119183
[  334.305652][T15790]  mapped:39788 shmem:1351 pagetables:1520
[  334.305652][T15790]  sec_pagetables:0 bounce:0
[  334.305652][T15790]  kernel_misc_reclaimable:0
[  334.305652][T15790]  free:1277679 free_pcp:13365 free_cma:0
[  334.357189][T15790] Node 0 active_anon:28624kB inactive_anon:0kB active_file:13620kB inactive_file:159924kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:159152kB dirty:768kB writeback:0kB shmem:3868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15104kB pagetables:5936kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  334.394648][T15790] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  334.432047][T15783] gretap0: entered promiscuous mode
[  334.439349][T15783] gretap0: left promiscuous mode
[  334.447373][T15790] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  334.483504][T15790] lowmem_reserve[]: 0 2494 2495 2495 2495
[  334.490068][T15790] Node 0 DMA32 free:1215048kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28724kB inactive_anon:0kB active_file:13620kB inactive_file:159924kB unevictable:1536kB writepending:768kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:34312kB local_pcp:18652kB free_cma:0kB
[  334.528879][T15790] lowmem_reserve[]: 0 0 1 1 1
[  334.533651][T15790] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  334.565366][T15790] lowmem_reserve[]: 0 0 0 0 0
[  334.584629][T15790] Node 1 Normal free:3880308kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19312kB local_pcp:6016kB free_cma:0kB
[  334.626401][T15790] lowmem_reserve[]: 0 0 0 0 0
[  334.646410][T15790] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  334.665930][T15790] Node 0 DMA32: 4744*4kB (UME) 3617*8kB (UME) 1072*16kB (UME) 134*32kB (UM) 66*64kB (UME) 59*128kB (UME) 91*256kB (UM) 51*512kB (UM) 35*1024kB (UME) 22*2048kB (UME) 245*4096kB (M) = 1214952kB
[  334.693309][T15790] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  334.707493][T15790] Node 1 Normal: 183*4kB (U) 47*8kB (UME) 44*16kB (UME) 81*32kB (UME) 23*64kB (UME) 5*128kB (UM) 4*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 944*4096kB (M) = 3880308kB
[  334.730064][T15790] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  334.740591][T15790] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  334.761014][T15790] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  334.771628][T15790] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  334.804383][T15790] 44784 total pagecache pages
[  334.812828][T15790] 0 pages in swap cache
[  334.817502][T15790] Free swap  = 124996kB
[  334.821673][T15790] Total swap = 124996kB
[  334.825841][T15790] 2097051 pages RAM
[  334.830895][T15790] 0 pages HighMem/MovableOnly
[  334.835694][T15790] 426624 pages reserved
[  334.840924][T15790] 0 pages cma reserved
[  335.220593][T15833] ip6tnl0: Caught tx_queue_len zero misconfig
[  335.511399][T15854] netlink: 'syz.4.2873': attribute type 19 has an invalid length.
[  335.659464][T15869] veth0: entered promiscuous mode
[  335.695146][T15864] __nla_validate_parse: 4 callbacks suppressed
[  335.695165][T15864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2869'.
[  335.861215][T15879] rdma_rxe: rxe_newlink: failed to add lo
[  335.885431][T15882] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2876'.
[  336.114760][T15895] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2883'.
[  336.128057][T15895] nbd: must specify at least one socket
[  336.152788][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.191198][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.221788][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.280574][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.299890][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.322369][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.333900][T15905] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2885'.
[  336.348976][T15905] xt_hashlimit: size too large, truncated to 1048576
[  336.372722][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.384741][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.416440][T15899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  336.488171][T15919] tipc: Failed to obtain node identity
[  336.493805][T15919] tipc: Enabling of bearer <ib:gretap0> rejected, failed to enable media
[  336.860486][T15941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2895'.
[  337.371925][T15978] netlink: 'syz.4.2906': attribute type 11 has an invalid length.
[  337.381178][T15978] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2906'.
[  337.600641][T15991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2910'.
[  337.624189][T15991] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2910'.
[  337.800967][T16004] netlink: 'syz.1.2915': attribute type 1 has an invalid length.
[  337.809082][T16004] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2915'.
[  337.820603][T16004] netlink: 'syz.1.2915': attribute type 1 has an invalid length.
[  337.828530][T16004] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2915'.
[  337.988376][T16011] bridge0: port 2(bridge_slave_1) entered blocking state
[  337.995623][T16011] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.096597][T16013] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  338.120152][T16013] bond1 (unregistering): Released all slaves
[  338.129921][T16024] IPv6: NLM_F_CREATE should be specified when creating new route
[  338.141967][T16025] tipc: Enabled bearer <ib:virt_wifi0>, priority 10
[  338.150286][T16026] tipc: Enabling of bearer <ib:virt_wifi0> rejected, already enabled
[  338.630462][T16057] veth5: entered promiscuous mode
[  338.635810][T16057] veth5: entered allmulticast mode
[  338.833373][T16073] syzkaller0: entered promiscuous mode
[  338.850234][T16073] syzkaller0: entered allmulticast mode
[  339.102721][T16095] netlink: 'syz.6.2942': attribute type 1 has an invalid length.
[  339.211013][T16099] gretap0: entered promiscuous mode
[  339.609265][T16120] bond0: Caught tx_queue_len zero misconfig
[  339.685757][T16127] ip_vti0: entered promiscuous mode
[  339.847029][T16142] netlink: 'syz.4.2959': attribute type 1 has an invalid length.
[  339.975085][T16142] bond15: entered promiscuous mode
[  339.981764][T16142] 8021q: adding VLAN 0 to HW filter on device bond15
[  339.989302][T16146] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  340.424401][T16176] netlink: 'syz.5.2969': attribute type 11 has an invalid length.
[  340.448728][T16176] netlink: 'syz.5.2969': attribute type 11 has an invalid length.
[  340.548642][T16186] 8021q: adding VLAN 0 to HW filter on device bond16
[  340.620706][T16195] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  340.855684][T16201] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  340.868310][T16201] bond1 (unregistering): Released all slaves
[  341.153031][T16221] xt_policy: too many policy elements
[  341.282577][T16226] __nla_validate_parse: 20 callbacks suppressed
[  341.282595][T16226] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2984'.
[  341.346975][T16226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2984'.
[  341.436523][T16237] openvswitch: netlink: IP tunnel dst address not specified
[  341.521372][T16243] netlink: 'syz.5.2989': attribute type 1 has an invalid length.
[  341.523443][T16240] netlink: 'syz.1.2987': attribute type 11 has an invalid length.
[  341.557287][T16240] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2987'.
[  341.608297][   T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  341.637779][   T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  341.643485][T16251] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2990'.
[  341.655621][   T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  341.665150][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  341.673621][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  341.698982][T16243] bond0: entered promiscuous mode
[  341.701642][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2990'.
[  341.704604][T16243] 8021q: adding VLAN 0 to HW filter on device bond0
[  341.721926][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2989'.
[  341.793781][T16251] openvswitch: netlink: IP tunnel dst address not specified
[  341.883761][T16248] ip6_vti0 speed is unknown, defaulting to 1000
[  342.201268][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2998'.
[  342.212136][T16270] syzkaller0: entered promiscuous mode
[  342.227667][T16270] syzkaller0: entered allmulticast mode
[  342.285478][T16271] 8021q: adding VLAN 0 to HW filter on device bond1
[  342.313905][T16271] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2998'.
[  342.412387][T16275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3000'.
[  342.463052][T16278] block nbd3: NBD_DISCONNECT
[  342.477067][T16278] block nbd3: Send disconnect failed -32
[  342.489560][T16278] block nbd3: shutting down sockets
[  342.506760][    C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.516717][    C0] Buffer I/O error on dev nbd3, logical block 0, async page read
[  342.527078][ T5829] Bluetooth: hci1: command 0x0405 tx timeout
[  342.558253][    C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.567877][    C0] Buffer I/O error on dev nbd3, logical block 1, async page read
[  342.575704][    C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.585319][    C0] Buffer I/O error on dev nbd3, logical block 2, async page read
[  342.593145][    C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.602757][    C0] Buffer I/O error on dev nbd3, logical block 3, async page read
[  342.611980][ T9312] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.636087][ T9312] Buffer I/O error on dev nbd3, logical block 0, async page read
[  342.681406][T16291] netlink: 'syz.5.3004': attribute type 1 has an invalid length.
[  342.695825][ T9312] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.757082][T16292] netlink: 'syz.5.3004': attribute type 1 has an invalid length.
[  342.768636][ T9312] Buffer I/O error on dev nbd3, logical block 1, async page read
[  342.776488][ T9312] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.789157][   T11] block nbd1: Possible stuck request ffff888025878000: control (read@0,1024B). Runtime 240 seconds
[  342.800080][   T11] block nbd1: Possible stuck request ffff888025878200: control (read@1024,1024B). Runtime 240 seconds
[  342.811502][   T11] block nbd1: Possible stuck request ffff888025878400: control (read@2048,1024B). Runtime 240 seconds
[  342.822865][   T11] block nbd1: Possible stuck request ffff888025878600: control (read@3072,1024B). Runtime 240 seconds
[  342.834332][ T9312] Buffer I/O error on dev nbd3, logical block 2, async page read
[  342.842432][ T9312] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.852322][ T9312] Buffer I/O error on dev nbd3, logical block 3, async page read
[  342.860441][ T9312] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.862733][T16296] syzkaller0: entered promiscuous mode
[  342.870361][ T9312] Buffer I/O error on dev nbd3, logical block 0, async page read
[  342.870463][ T9312] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  342.870486][ T9312] Buffer I/O error on dev nbd3, logical block 1, async page read
[  342.871086][ T9312] ldm_validate_partition_table(): Disk read failed.
[  342.901568][T16296] syzkaller0: entered allmulticast mode
[  342.919457][ T9312] Dev nbd3: unable to read RDB block 0
[  342.925511][ T9312]  nbd3: unable to read partition table
[  342.953360][ T9312] ldm_validate_partition_table(): Disk read failed.
[  342.968108][ T9312] Dev nbd3: unable to read RDB block 0
[  342.989338][ T9312]  nbd3: unable to read partition table
[  343.109812][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3007'.
[  343.161285][T16311] netlink: 'syz.5.3007': attribute type 5 has an invalid length.
[  343.248972][T16248] chnl_net:caif_netlink_parms(): no params data found
[  343.420516][T16319] xt_TCPMSS: Only works on TCP SYN packets
[  343.478549][T16321] bond1: option arp_all_targets: invalid value (18446744073709551613)
[  343.503522][T16321] bond1 (unregistering): Released all slaves
[  343.530859][T16323] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  343.636438][T16248] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.673118][T16248] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.682249][T16248] bridge_slave_0: entered allmulticast mode
[  343.691209][T16248] bridge_slave_0: entered promiscuous mode
[  343.707748][ T5829] Bluetooth: hci3: command tx timeout
[  343.727847][T16248] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.735109][T16248] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.742692][T16248] bridge_slave_1: entered allmulticast mode
[  343.750909][T16248] bridge_slave_1: entered promiscuous mode
[  343.854073][T16248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  343.962532][T16248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  343.980001][T16355] ip6t_srh: unknown srh invflags 4000
[  344.065419][T16248] team0: Port device team_slave_0 added
[  344.118648][T16248] team0: Port device team_slave_1 added
[  344.198269][T16248] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.227109][T16248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  344.271680][T16248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.311501][T16248] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.330180][T16248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  344.398270][T16248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.585081][T16248] hsr_slave_0: entered promiscuous mode
[  344.619876][T16248] hsr_slave_1: entered promiscuous mode
[  344.657798][T16248] debugfs: 'hsr0' already exists in 'hsr'
[  344.677043][T16248] Cannot create hsr debugfs directory
[  344.830278][T16395] pim6reg: entered allmulticast mode
[  345.218482][T16417] Bluetooth: MGMT ver 1.23
[  345.338988][T16422] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.451745][T16248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.464134][T16248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.474366][T16436] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  345.481989][T16248] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  345.511645][T16432] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  345.572336][T16439] netlink: 'syz.6.3047': attribute type 1 has an invalid length.
[  345.623519][T16248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.640489][T16248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.667049][T16248] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  345.788369][ T5829] Bluetooth: hci3: command tx timeout
[  345.802294][T16248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.835327][T16248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.863904][T16248] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  346.006720][T16248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  346.018824][T16248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.030888][T16248] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0
[  346.301995][T16434] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  346.387587][T16248] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  346.415024][T16248] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  346.463935][T16248] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  346.507402][T16248] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  346.643686][ T8634] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x1
[  346.686096][ T8634] hid-generic 0005:0C49:1012.0002: ignoring exceeding usage max
[  346.745004][ T8634] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x4
[  346.781131][ T8634] hid-generic 0005:0C49:1012.0002: unknown main item tag 0x5
[  346.800285][ T8634] hid-generic 0005:0C49:1012.0002: reserved main item tag 0xd
[  346.850132][ T8634] hid-generic 0005:0C49:1012.0002: item fetching failed at offset 31/106
[  346.888300][ T8634] hid-generic 0005:0C49:1012.0002: probe with driver hid-generic failed with error -22
[  346.921179][T16248] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.968206][T16248] 8021q: adding VLAN 0 to HW filter on device team0
[  346.998766][ T8606] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.005976][ T8606] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.049277][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.056571][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.220553][T16533] __nla_validate_parse: 11 callbacks suppressed
[  347.220571][T16533] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3073'.
[  347.393058][T16546] netlink: 'syz.3.3077': attribute type 3 has an invalid length.
[  347.424719][T16548] xt_hashlimit: overflow, try lower: 3/0
[  347.613295][T16248] 8021q: adding VLAN 0 to HW filter on device batadv0
[  347.876759][T16584] 
@0�: renamed from bond_slave_1 (while UP)
[  347.881387][ T5826] Bluetooth: hci3: command tx timeout
[  348.010634][T16248] veth0_vlan: entered promiscuous mode
[  348.042069][T16248] veth1_vlan: entered promiscuous mode
[  348.069857][T16248] veth0_macvtap: entered promiscuous mode
[  348.080360][T16248] veth1_macvtap: entered promiscuous mode
[  348.098803][T16248] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.118938][T16248] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.132937][   T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.143444][   T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.156524][   T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.172761][   T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.153203][   T11] block nbd0: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 270 seconds
[  349.164203][   T11] block nbd0: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 270 seconds
[  349.175329][   T11] block nbd0: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 270 seconds
[  349.186492][   T11] block nbd0: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 270 seconds
[  349.947209][ T5829] Bluetooth: hci3: command tx timeout
[  350.472027][T16551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  350.591942][ T8594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.637268][ T8594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.648714][T16595] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3089'.
[  350.687126][T16596] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3089'.
[  350.706010][T16593] bond1: option lp_interval: invalid value (0)
[  350.712887][T16593] bond1: option lp_interval: allowed values 1 - 2147483647
[  350.721762][T16593] bond1 (unregistering): Released all slaves
[  350.745518][T16595] 0��{X��: renamed from gretap0 (while UP)
[  350.758604][T16595] 0��{X��: entered allmulticast mode
[  350.773310][T16595] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  350.790523][T16596] 1��{X��: renamed from 
30��{X�� (while UP)
[  350.812010][T16596] A link change request failed with some changes committed already. Interface 
31��{X�� may have been left with an inconsistent configuration, please check.
[  350.840706][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3091'.
[  350.859672][ T8598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  350.860724][T16607] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3093'.
[  350.877051][ T8598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.887551][T16607] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3093'.
[  350.927731][T16610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3094'.
[  350.968019][T16610] hsr_slave_0: left promiscuous mode
[  350.976660][T16610] hsr_slave_1: left promiscuous mode
[  351.106344][T16612] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3093'.
[  351.115468][T16612] netlink: 11 bytes leftover after parsing attributes in process `syz.5.3093'.
[  351.142538][T16632] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  351.301317][T16636] syzkaller1: entered promiscuous mode
[  351.330110][T16642] netlink: 'syz.4.3100': attribute type 1 has an invalid length.
[  351.337787][T16646] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3102'.
[  351.347365][T16636] syzkaller1: entered allmulticast mode
[  351.591590][T16664] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.634784][T16664] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.651715][T16664] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.659661][T16664] batman_adv: batadv0: Removing interface: batadv_slave_1
[  352.279194][T16715] __nla_validate_parse: 6 callbacks suppressed
[  352.279214][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'.
[  352.298250][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3123'.
[  352.342415][T16715] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'.
[  352.380491][T16717] smc: adding net device wlan0 with user defined pnetid SYZ0
[  352.397000][T16715] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3123'.
[  352.500161][T16721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3125'.
[  352.523604][T16723] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3126'.
[  352.562100][T16723] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3126'.
[  352.583232][T16725] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3126'.
[  352.743089][T16735] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3129'.
[  352.791428][T16741] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3129'.
[  354.068465][T16816] netlink: 'syz.6.3149': attribute type 1 has an invalid length.
[  354.122782][T16816] 8021q: adding VLAN 0 to HW filter on device bond2
[  354.403579][T16824] bridge0: port 1(bridge_slave_0) entered disabled state
[  354.431562][T16824] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.438784][T16824] bridge0: port 1(bridge_slave_0) entered forwarding state
[  355.263471][    T9] IPVS: starting estimator thread 0...
[  355.387047][T16870] IPVS: using max 29 ests per chain, 69600 per kthread
[  355.434933][T16882] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.514243][T16886] veth0: entered promiscuous mode
[  355.785562][T16875] veth0: left promiscuous mode
[  355.939750][T16906] netlink: 'syz.4.3172': attribute type 1 has an invalid length.
[  356.065113][T16911] netlink: 'syz.3.3174': attribute type 7 has an invalid length.
[  356.225333][T16923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  356.471950][T16935] netlink: 'syz.4.3180': attribute type 1 has an invalid length.
[  356.480419][T16935] netlink: 'syz.4.3180': attribute type 2 has an invalid length.
[  356.490526][T16935] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.784250][T16950] netlink: 'syz.5.3187': attribute type 83 has an invalid length.
[  357.098694][T16975] netlink: 'syz.1.3195': attribute type 1 has an invalid length.
[  357.107089][T16975] netlink: 'syz.1.3195': attribute type 1 has an invalid length.
[  357.114961][T16975] netlink: 'syz.1.3195': attribute type 8 has an invalid length.
[  357.473583][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  357.490263][T16994] syzkaller1: entered promiscuous mode
[  357.500591][T16994] syzkaller1: entered allmulticast mode
[  357.927383][T17021] __nla_validate_parse: 36 callbacks suppressed
[  357.927401][T17021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3212'.
[  358.049949][T17033] netlink: 'syz.1.3214': attribute type 1 has an invalid length.
[  358.071274][T17028] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3217'.
[  358.113883][ T5900] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.150637][T17033] 8021q: adding VLAN 0 to HW filter on device bond1
[  358.203019][T17042] ip6t_srh: unknown srh match flags  4000
[  358.209838][T17037] bond1: (slave ip6gretap0): making interface the new active one
[  358.250389][T17037] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link
[  358.291467][T17039] veth1: entered promiscuous mode
[  358.309984][T17039] bond1: (slave veth1): Enslaving as an active interface with a down link
[  358.333285][T17050] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3220'.
[  358.363077][T17051] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  358.395246][T17033] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  358.415585][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3214'.
[  358.538490][T17050] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  358.549495][T17037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3214'.
[  358.819466][T17077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  358.892369][T17037] bond1 (unregistering): (slave ip6gretap0): Releasing active interface
[  358.905778][T17037] bond1 (unregistering): (slave veth1): Releasing active interface
[  358.915718][T17080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3228'.
[  358.925602][T17080] netlink: 'syz.5.3228': attribute type 7 has an invalid length.
[  358.927938][T17037] bond1 (unregistering): Released all slaves
[  358.934683][T17080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3228'.
[  358.955126][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3226'.
[  359.092871][T17084] netlink: 'syz.4.3229': attribute type 1 has an invalid length.
[  359.117603][T17089] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3230'.
[  359.180503][T17093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3230'.
[  359.697105][T17122] block nbd3: server does not support multiple connections per device.
[  359.705884][T17122] block nbd3: shutting down sockets
[  360.038044][   T11] block nbd2: Possible stuck request ffff888025890000: control (read@0,1024B). Runtime 240 seconds
[  360.049582][   T11] block nbd2: Possible stuck request ffff888025890200: control (read@1024,1024B). Runtime 240 seconds
[  360.060970][   T11] block nbd2: Possible stuck request ffff888025890400: control (read@2048,1024B). Runtime 240 seconds
[  360.075798][   T11] block nbd2: Possible stuck request ffff888025890600: control (read@3072,1024B). Runtime 240 seconds
[  361.751361][T17161] pim6reg1: entered promiscuous mode
[  361.769227][T17161] pim6reg1: entered allmulticast mode
[  362.267143][T17206] netlink: 'syz.1.3252': attribute type 11 has an invalid length.
[  362.341423][T17216] netlink: 'syz.4.3254': attribute type 4 has an invalid length.
[  362.414159][T17216] netlink: 'syz.4.3254': attribute type 9 has an invalid length.
[  362.446940][T17216] netlink: 'syz.4.3254': attribute type 6 has an invalid length.
[  362.558115][T17227] netlink: 'syz.3.3258': attribute type 1 has an invalid length.
[  362.732411][T17227] bond1: entered promiscuous mode
[  362.760941][T17227] bond1: entered allmulticast mode
[  362.773794][T17227] 8021q: adding VLAN 0 to HW filter on device bond1
[  362.813898][T17244] netlink: 'syz.1.3262': attribute type 21 has an invalid length.
[  363.053186][T17258] xt_hashlimit: size too large, truncated to 1048576
[  363.119105][T17259] netlink: 'syz.6.3264': attribute type 21 has an invalid length.
[  363.233605][   T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  363.256351][T17259] __nla_validate_parse: 10 callbacks suppressed
[  363.256370][T17259] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3264'.
[  363.294433][T17273] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  363.607932][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3269'.
[  364.027213][T17300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3276'.
[  364.251079][T17311] netlink: 'syz.1.3279': attribute type 3 has an invalid length.
[  364.388929][T17319] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3281'.
[  364.620675][T17335] syzkaller0: entered promiscuous mode
[  364.627129][T17335] syzkaller0: entered allmulticast mode
[  364.819804][T17345] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3292'.
[  364.981735][T17353] bond1: option lp_interval: invalid value (0)
[  364.988754][T17353] bond1: option lp_interval: allowed values 1 - 2147483647
[  365.001049][T17353] bond1 (unregistering): Released all slaves
[  365.492785][T17393] 
: renamed from bond0 (while UP)
[  365.551323][T17393] openvswitch: netlink: Flow key attribute not present in set flow.
[  365.631732][T17387] nbd: nbd0 already in use
[  366.025254][T17422] netlink: 'syz.4.3307': attribute type 1 has an invalid length.
[  366.059555][T17423] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  366.105630][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3306'.
[  366.867128][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  366.979619][T17481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3314'.
[  368.988123][   T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  369.190843][T17436] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  369.454174][T17509] vlan2: entered promiscuous mode
[  369.477019][T17509] bridge0: entered promiscuous mode
[  369.588433][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3321'.
[  369.946238][T17549] netlink: 'syz.5.3326': attribute type 10 has an invalid length.
[  370.431203][T17578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3333'.
[  372.394205][T17516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  372.403377][T17530] netlink: 'syz.3.3319': attribute type 11 has an invalid length.
[  372.412978][T17530] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3319'.
[  372.618672][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'.
[  372.818553][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3343'.
[  372.837581][   T11] block nbd1: Possible stuck request ffff888025878000: control (read@0,1024B). Runtime 270 seconds
[  372.848571][   T11] block nbd1: Possible stuck request ffff888025878200: control (read@1024,1024B). Runtime 270 seconds
[  372.865122][   T11] block nbd1: Possible stuck request ffff888025878400: control (read@2048,1024B). Runtime 270 seconds
[  372.876654][   T11] block nbd1: Possible stuck request ffff888025878600: control (read@3072,1024B). Runtime 270 seconds
[  372.928509][T17613] bond2: (slave veth5): Enslaving as an active interface with a down link
[  372.941160][T17620] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  372.952169][T17623] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3344'.
[  373.036194][T17603] bond2: (slave veth7): Enslaving as an active interface with a down link
[  373.453882][T17654] netlink: 288 bytes leftover after parsing attributes in process `syz.5.3353'.
[  373.589818][T17658] netlink: 'syz.1.3354': attribute type 10 has an invalid length.
[  373.639358][T17658] team0: Device ipvlan1 failed to register rx_handler
[  374.121424][T17687] netlink: 'syz.5.3361': attribute type 6 has an invalid length.
[  374.132543][T17687] netlink: 'syz.5.3361': attribute type 6 has an invalid length.
[  374.340289][T17693] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3363'.
[  374.443036][T17706] netlink: 'syz.3.3364': attribute type 1 has an invalid length.
[  374.492037][T17702] bond3 (unregistering): Released all slaves
[  374.519094][T17705] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3363'.
[  374.554636][T17709] openvswitch: netlink: IP tunnel dst address not specified
[  374.572556][T17714] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3364'.
[  374.751393][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  374.833448][T17722] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3369'.
[  375.061030][T17742] netlink: 'syz.6.3373': attribute type 10 has an invalid length.
[  375.108346][T17742] 8021q: adding VLAN 0 to HW filter on device team0
[  375.131163][T17742] 
: (slave team0): Enslaving as an active interface with an up link
[  375.172749][T17744] bond1: Unable to set up delay as MII monitoring is disabled
[  375.199045][T17751] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3376'.
[  375.230509][T17751] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3376'.
[  375.283700][T17744] bond1 (unregistering): Released all slaves
[  375.382923][T17759] netlink: 'syz.6.3379': attribute type 2 has an invalid length.
[  375.410691][T17759] : entered promiscuous mode
[  375.422979][T17762] macsec1: entered promiscuous mode
[  375.433730][T17761] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3381'.
[  375.529324][T17761] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3381'.
[  375.609524][T17769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3384'.
[  375.738571][T17777] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3386'.
[  376.051687][T17797] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  376.073370][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3392'.
[  376.082576][T17799] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3392'.
[  376.269755][T17809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3393'.
[  376.330678][T17797] bond1 (unregistering): Released all slaves
[  376.743265][T17829] sctp: [Deprecated]: syz.6.3401 (pid 17829) Use of int in max_burst socket option.
[  376.743265][T17829] Use struct sctp_assoc_value instead
[  376.812321][T17834] bond1: entered promiscuous mode
[  376.818531][T17834] bond1: entered allmulticast mode
[  376.824184][T17834] 8021q: adding VLAN 0 to HW filter on device bond1
[  377.085834][ T8590] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  377.108945][T17855] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.120901][ T8590] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  377.157727][ T8590] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  377.208717][ T8590] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  377.292191][T17870] netlink: 'syz.5.3410': attribute type 3 has an invalid length.
[  377.316635][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.319441][T17859] bond3: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[  377.338530][T17859] bond3: entered promiscuous mode
[  377.343593][T17859] bond3: entered allmulticast mode
[  377.349781][T17859] 8021q: adding VLAN 0 to HW filter on device bond3
[  377.362265][T17873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  377.371832][T17870] netlink: 'syz.5.3410': attribute type 1 has an invalid length.
[  377.380617][T17870] NCSI netlink: No device for ifindex 813332851
[  377.433587][T17856] veth1: entered promiscuous mode
[  377.439085][T17856] veth1: entered allmulticast mode
[  377.802401][T17897] veth0: entered promiscuous mode
[  377.810915][T17896] veth0: left promiscuous mode
[  378.152549][T17914] : entered promiscuous mode
[  378.540298][T17949] netlink: 'syz.1.3432': attribute type 1 has an invalid length.
[  378.667858][T17956] netlink: 'syz.3.3436': attribute type 7 has an invalid length.
[  378.702977][T17956] netlink: 'syz.3.3436': attribute type 8 has an invalid length.
[  378.870872][T17960] 8021q: adding VLAN 0 to HW filter on device batadv2
[  378.890577][T17960] team0: Failed to send port change of device batadv2 via netlink (err -105)
[  378.922806][T17960] team0: Failed to send options change via netlink (err -105)
[  378.934249][T17960] team0: Port device batadv2 added
[  379.229864][   T11] block nbd0: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 300 seconds
[  379.241190][   T11] block nbd0: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 300 seconds
[  379.252370][   T11] block nbd0: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 300 seconds
[  379.263578][   T11] block nbd0: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 300 seconds
[  379.313567][T17996] syzkaller0: entered promiscuous mode
[  379.350914][T17996] syzkaller0: entered allmulticast mode
[  379.590908][T18010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.740911][T18016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  379.932589][T18031] __nla_validate_parse: 76 callbacks suppressed
[  379.932610][T18031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3455'.
[  380.053163][T18036] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  380.137866][ T8598] tipc: Subscription rejected, illegal request
[  380.144538][T18047] IPVS: set_ctl: invalid protocol: 0 172.20.20.16:20002
[  380.295918][T18054] tipc: Started in network mode
[  380.304107][T18054] tipc: Node identity 0ad8e2e5da3d, cluster identity 4711
[  380.328628][T18054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  380.352181][T18054] syzkaller0: entered promiscuous mode
[  380.358224][T18054] syzkaller0: entered allmulticast mode
[  380.372560][T18054] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  380.381211][T18061] netlink: 'syz.1.3463': attribute type 17 has an invalid length.
[  380.389697][T18061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3463'.
[  380.389841][T18059] netlink: 'syz.1.3463': attribute type 17 has an invalid length.
[  380.408267][T18059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3463'.
[  380.438714][T18054] tipc: Resetting bearer <eth:syzkaller0>
[  380.445224][T18060] syzkaller0: entered promiscuous mode
[  380.451938][T18060] syzkaller0: entered allmulticast mode
[  380.460399][T18053] tipc: Resetting bearer <eth:syzkaller0>
[  380.467100][T18060] netlink: 'syz.4.3464': attribute type 10 has an invalid length.
[  380.484839][T18053] tipc: Disabling bearer <eth:syzkaller0>
[  380.497992][T18060] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[  380.512534][T18060] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  380.521109][ T8598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  380.679092][T18069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3467'.
[  380.731196][T18073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3469'.
[  381.185484][T18101] tipc: Started in network mode
[  381.198263][T18101] tipc: Node identity 16f20501dd62, cluster identity 4711
[  381.206199][T18101] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  381.326655][T18101] syzkaller0: entered promiscuous mode
[  381.333917][T18107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3479'.
[  381.343052][T18101] syzkaller0: entered allmulticast mode
[  381.349446][T18101] tipc: Resetting bearer <eth:syzkaller0>
[  381.391761][T18107] bridge_slave_1: left allmulticast mode
[  381.399328][T18107] bridge_slave_1: left promiscuous mode
[  381.405151][T18107] bridge0: port 2(bridge_slave_1) entered disabled state
[  381.417825][T18107] bridge_slave_0: left allmulticast mode
[  381.423510][T18107] bridge_slave_0: left promiscuous mode
[  381.429675][T18107] bridge0: port 1(bridge_slave_0) entered disabled state
[  381.535417][T18116] netlink: 'syz.5.3482': attribute type 11 has an invalid length.
[  381.600242][T18100] tipc: Resetting bearer <eth:syzkaller0>
[  381.630731][T18118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3483'.
[  383.260453][T18100] tipc: Disabling bearer <eth:syzkaller0>
[  383.279918][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3487'.
[  383.340099][ T5938] tipc: Node number set to 3415213313
[  383.419313][T18148] netlink: 232 bytes leftover after parsing attributes in process `syz.6.3490'.
[  383.552200][T18157] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  383.595634][T18159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3493'.
[  383.615659][T18163] tipc: Can't bind to reserved service type 1
[  383.676773][T18159] mac80211_hwsim hwsim36 wlan1: entered allmulticast mode
[  383.925319][T18175] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32)
[  386.269527][ T8598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  386.982339][T18190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  387.227885][T18262] netlink: 'syz.6.3519': attribute type 30 has an invalid length.
[  387.294020][T18266] ipt_rpfilter: unknown options
[  387.543069][T18289] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv_slave_1, syncid = 2, id = 0
[  387.645579][T18293] __nla_validate_parse: 5 callbacks suppressed
[  387.645599][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3526'.
[  387.661784][T18295] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  387.679210][T18293] Cannot find set identified by id 3 to match
[  387.680186][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3527'.
[  387.688954][T18293] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3526'.
[  387.726053][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3526'.
[  387.853482][T18301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3531'.
[  387.911607][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'.
[  387.923710][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3533'.
[  388.001282][T18304] erspan0: entered promiscuous mode
[  388.028712][T18311] FAULT_INJECTION: forcing a failure.
[  388.028712][T18311] name failslab, interval 1, probability 0, space 0, times 0
[  388.044626][T18311] CPU: 1 UID: 0 PID: 18311 Comm: syz.3.3536 Not tainted syzkaller #0 PREEMPT(full) 
[  388.044649][T18311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  388.044662][T18311] Call Trace:
[  388.044668][T18311]  <TASK>
[  388.044675][T18311]  dump_stack_lvl+0xe8/0x150
[  388.044701][T18311]  should_fail_ex+0x412/0x560
[  388.044725][T18311]  should_failslab+0xa8/0x100
[  388.044745][T18311]  __kmalloc_noprof+0xde/0x7e0
[  388.044761][T18311]  ? tomoyo_encode+0x28b/0x550
[  388.044786][T18311]  tomoyo_encode+0x28b/0x550
[  388.044811][T18311]  tomoyo_realpath_from_path+0x58d/0x5d0
[  388.044832][T18311]  ? tomoyo_domain+0xd7/0x130
[  388.044863][T18311]  ? tomoyo_path_number_perm+0x219/0x630
[  388.044881][T18311]  tomoyo_path_number_perm+0x246/0x630
[  388.044903][T18311]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  388.044920][T18311]  ? __lock_acquire+0x6b5/0x2cf0
[  388.044957][T18311]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  388.044996][T18311]  ? __fget_files+0x2a/0x420
[  388.045017][T18311]  ? __fget_files+0x2a/0x420
[  388.045032][T18311]  ? __fget_files+0x3a0/0x420
[  388.045048][T18311]  ? __fget_files+0x2a/0x420
[  388.045069][T18311]  security_file_ioctl+0xc3/0x2a0
[  388.045088][T18311]  __se_sys_ioctl+0x47/0x170
[  388.045111][T18311]  do_syscall_64+0xe2/0xf80
[  388.045127][T18311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.045142][T18311]  ? trace_irq_disable+0x37/0x100
[  388.045156][T18311]  ? clear_bhb_loop+0x60/0xb0
[  388.045176][T18311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  388.045198][T18311] RIP: 0033:0x7ff2c3d9aeb9
[  388.045213][T18311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  388.045227][T18311] RSP: 002b:00007ff2c4d1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  388.045245][T18311] RAX: ffffffffffffffda RBX: 00007ff2c4015fa0 RCX: 00007ff2c3d9aeb9
[  388.045257][T18311] RDX: 0000200000000000 RSI: 0000000000008b14 RDI: 0000000000000003
[  388.045267][T18311] RBP: 00007ff2c4d1b090 R08: 0000000000000000 R09: 0000000000000000
[  388.045277][T18311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  388.045287][T18311] R13: 00007ff2c4016038 R14: 00007ff2c4015fa0 R15: 00007fff9a7d6128
[  388.045316][T18311]  </TASK>
[  388.045334][T18311] ERROR: Out of memory at tomoyo_realpath_from_path.
[  388.283005][T18277] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  388.441484][T18325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3538'.
[  388.468971][T18325] sctp: [Deprecated]: syz.3.3538 (pid 18325) Use of struct sctp_assoc_value in delayed_ack socket option.
[  388.468971][T18325] Use struct sctp_sack_info instead
[  388.499687][T18327] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3537'.
[  388.814528][T18354] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3548'.
[  389.074333][T18369] netlink: 'syz.6.3552': attribute type 1 has an invalid length.
[  389.137159][T18375] netlink: 'syz.3.3554': attribute type 1 has an invalid length.
[  389.190399][T18380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  389.279883][ T1107] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  389.304919][ T1107] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  389.323732][ T1107] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  389.352351][ T1107] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  389.498787][T18392] netlink: 'syz.6.3559': attribute type 61 has an invalid length.
[  389.697814][T18442] netlink: 'syz.5.3564': attribute type 2 has an invalid length.
[  389.845691][T18451] bond3: Unable to set down delay as MII monitoring is disabled
[  389.890245][T18462] netlink: 'syz.4.3569': attribute type 2 has an invalid length.
[  389.920253][T18451] bond3 (unregistering): Released all slaves
[  390.015760][T18462] �9: entered promiscuous mode
[  390.111774][   T11] block nbd2: Possible stuck request ffff888025890000: control (read@0,1024B). Runtime 270 seconds
[  390.122805][   T11] block nbd2: Possible stuck request ffff888025890200: control (read@1024,1024B). Runtime 270 seconds
[  390.134181][   T11] block nbd2: Possible stuck request ffff888025890400: control (read@2048,1024B). Runtime 270 seconds
[  390.145677][T18479] tipc: Started in network mode
[  390.150716][T18479] tipc: Node identity , cluster identity 4711
[  390.156864][   T11] block nbd2: Possible stuck request ffff888025890600: control (read@3072,1024B). Runtime 270 seconds
[  390.157053][T18479] tipc: Failed to set node id, please configure manually
[  390.187889][T18479] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  390.209571][T18482] netlink: 'syz.3.3576': attribute type 28 has an invalid length.
[  390.224518][T18482] netlink: 'syz.3.3576': attribute type 3 has an invalid length.
[  390.487069][T18498] xt_CT: You must specify a L4 protocol and not use inversions on it
[  390.536307][T18503] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  390.796704][T18525] xt_CT: You must specify a L4 protocol and not use inversions on it
[  390.805312][T18521] netlink: 'syz.6.3588': attribute type 1 has an invalid length.
[  391.045492][T18538] netlink: 'syz.4.3593': attribute type 12 has an invalid length.
[  391.320019][T18560] ip6tnl0: entered promiscuous mode
[  391.389384][ T8590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  391.498072][T18541] 8021q: adding VLAN 0 to HW filter on device bond4
[  391.605405][T18552] bond4: (slave veth1): Enslaving as a backup interface with a down link
[  391.616660][T18547] tipc: Enabling of bearer <udp:syz0> rejected, already enabled
[  391.815099][T18574] syzkaller1: entered promiscuous mode
[  391.821970][T18574] syzkaller1: entered allmulticast mode
[  392.181856][T18615] tls_set_device_offload_rx: netdev not found
[  392.350367][T18619] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  392.473632][T18633] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  392.584797][T18635] validate_nla: 1 callbacks suppressed
[  392.584814][T18635] netlink: 'syz.5.3618': attribute type 1 has an invalid length.
[  392.627608][T18641] netlink: 'syz.6.3620': attribute type 13 has an invalid length.
[  392.627608][T18642] netlink: 'syz.6.3620': attribute type 13 has an invalid length.
[  392.899508][T18652] syzkaller1: entered promiscuous mode
[  392.905021][T18652] syzkaller1: entered allmulticast mode
[  392.987806][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.094117][T18664] __nla_validate_parse: 18 callbacks suppressed
[  393.094135][T18664] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3627'.
[  393.138825][T18664] vlan3: entered allmulticast mode
[  393.144116][T18664] erspan0: entered allmulticast mode
[  393.204774][T18662] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.248127][T18662] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.255311][T18662] bridge0: port 1(bridge_slave_0) entered forwarding state
[  393.260891][T18673] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3629'.
[  393.280721][T18673] netlink: 'syz.1.3629': attribute type 1 has an invalid length.
[  393.297004][T18673] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3629'.
[  393.311997][T18672] netlink: 88 bytes leftover after parsing attributes in process `syz.6.3630'.
[  393.461007][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3634'.
[  393.480668][T18635] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  393.491923][T18686] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3634'.
[  393.631250][T18695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3635'.
[  393.680076][T18699] netlink: 'syz.4.3637': attribute type 5 has an invalid length.
[  393.710669][T18698] netlink: 294 bytes leftover after parsing attributes in process `syz.1.3638'.
[  393.736391][T18698] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  393.820562][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3641'.
[  393.903001][T18710] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  393.947235][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.955757][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.992957][T18724] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2
[  394.011791][T18726] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3646'.
[  394.028943][T18710] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.080346][   T30] audit: type=1804 audit(1770351546.679:5): pid=18727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3646" name="/newroot/485/cgroup.controllers" dev="tmpfs" ino=2486 res=1 errno=0
[  394.113785][   T30] audit: type=1800 audit(1770351546.679:6): pid=18727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3646" name="cgroup.controllers" dev="tmpfs" ino=2486 res=0 errno=0
[  394.345267][T18742] bond1: Unable to set peer notification delay as MII monitoring is disabled
[  394.362226][T18742] bond1 (unregistering): Released all slaves
[  394.582149][T18755] netlink: 'syz.1.3655': attribute type 1 has an invalid length.
[  394.601477][T18753] gre1: entered promiscuous mode
[  394.606444][T18753] gre1: entered allmulticast mode
[  395.785639][T18824] gretap0: entered allmulticast mode
[  395.860094][T18827] netlink: 'syz.1.3673': attribute type 3 has an invalid length.
[  395.899487][T18827] netlink: 'syz.1.3673': attribute type 1 has an invalid length.
[  396.185612][T18837] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.298832][T18837] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.405023][T18861] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  396.436075][T18837] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.510180][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  396.580464][T18837] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.605606][T18873] syzkaller0: entered promiscuous mode
[  396.608350][T18877] netlink: 'syz.5.3685': attribute type 10 has an invalid length.
[  396.612005][T18873] syzkaller0: entered allmulticast mode
[  396.755521][ T8591] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  396.797231][T18435] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  396.864237][ T8588] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  396.895687][T18886] bridge: RTM_NEWNEIGH with invalid state 0x8
[  396.933492][ T8588] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  397.022173][T18892] Bluetooth: MGMT ver 1.23
[  397.118892][T18903] x_tables: duplicate underflow at hook 2
[  397.155602][ T8588] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  397.302242][T18910] syzkaller0: entered promiscuous mode
[  397.308119][T18910] syzkaller0: entered allmulticast mode
[  397.321532][T18910] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  397.444510][T18910] netlink: 'syz.1.3698': attribute type 10 has an invalid length.
[  397.472394][T18910] bridge0: port 3(team0) entered blocking state
[  397.488603][T18910] bridge0: port 3(team0) entered disabled state
[  397.510970][T18910] team0: entered allmulticast mode
[  397.516149][T18910] team_slave_0: entered allmulticast mode
[  397.544373][T18910] team_slave_1: entered allmulticast mode
[  397.559132][T18910] team0: entered promiscuous mode
[  397.564231][T18910] team_slave_0: entered promiscuous mode
[  397.571355][T18910] team_slave_1: entered promiscuous mode
[  397.578394][T18910] bridge0: port 3(team0) entered blocking state
[  397.584819][T18910] bridge0: port 3(team0) entered forwarding state
[  397.625641][T18938] netlink: 'syz.6.3706': attribute type 1 has an invalid length.
[  397.638603][T18938] block nbd0: reconnected socket
[  397.650301][ T5829] block nbd0: Receive control failed (result -32)
[  397.758672][   T60] bridge_slave_1: left allmulticast mode
[  397.764647][   T60] bridge_slave_1: left promiscuous mode
[  397.774434][   T60] bridge0: port 2(bridge_slave_1) entered disabled state
[  397.925496][   T60] bond7 (unregistering): (slave ip6gretap1): Releasing active interface
[  398.487902][   T60] 
 (unregistering): (slave bond_slave_0): Releasing backup interface
[  398.500423][   T60] 
 (unregistering): (slave bond_slave_1): Releasing backup interface
[  398.511490][   T60] 
 (unregistering): Released all slaves
[  398.618787][   T60] bond1 (unregistering): Released all slaves
[  398.729890][   T60] bond2 (unregistering): Released all slaves
[  398.742276][   T60] bond3 (unregistering): Released all slaves
[  398.851759][   T60] bond4 (unregistering): Released all slaves
[  398.958719][   T60] bond5 (unregistering): Released all slaves
[  399.058378][   T60] bond6 (unregistering): Released all slaves
[  399.071856][   T60] bond7 (unregistering): Released all slaves
[  399.088541][   T60] bond8 (unregistering): Released all slaves
[  399.199671][   T60] bond9 (unregistering): Released all slaves
[  399.306442][   T60] bond10 (unregistering): Released all slaves
[  399.319367][   T60] bond11 (unregistering): (slave bond12): Releasing backup interface
[  399.328537][   T60] bond11 (unregistering): Released all slaves
[  399.434400][   T60] bond12 (unregistering): Released all slaves
[  399.539303][   T60] bond13 (unregistering): Released all slaves
[  399.547296][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.560621][   T60] bond0 (unregistering): Released all slaves
[  399.670850][   T60] bond14 (unregistering): Released all slaves
[  399.771382][   T60] bond15 (unregistering): Released all slaves
[  399.876028][   T60] bond16 (unregistering): Released all slaves
[  400.049653][T18967] Unsupported ieee802154 address type: 0
[  400.071333][   T60] tipc: Left network mode
[  400.181121][T18967] __nla_validate_parse: 9 callbacks suppressed
[  400.181140][T18967] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3712'.
[  400.224671][T18978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3716'.
[  400.487308][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3720'.
[  400.732995][T19005] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3726'.
[  400.936686][T19011] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3729'.
[  400.956768][T19011] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3729'.
[  400.971357][T19011] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3729'.
[  400.983610][T19011] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3729'.
[  401.005009][T19011] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3729'.
[  401.072835][T19011] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3729'.
[  401.578051][T19060] IPv6: NLM_F_CREATE should be specified when creating new route
[  402.239544][T19092] netlink: 'syz.6.3749': attribute type 10 has an invalid length.
[  402.512569][   T60] team0 (unregistering): Port device team_slave_1 removed
[  402.562811][   T60] team0 (unregistering): Port device team_slave_0 removed
[  402.919406][ T8590] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  402.919512][   T11] block nbd1: Possible stuck request ffff888025878000: control (read@0,1024B). Runtime 300 seconds
[  402.938543][   T11] block nbd1: Possible stuck request ffff888025878200: control (read@1024,1024B). Runtime 300 seconds
[  402.950207][   T11] block nbd1: Possible stuck request ffff888025878400: control (read@2048,1024B). Runtime 300 seconds
[  402.961542][   T11] block nbd1: Possible stuck request ffff888025878600: control (read@3072,1024B). Runtime 300 seconds
[  403.866624][T19150] tipc: Started in network mode
[  403.877054][T19150] tipc: Node identity 9e33151f973f, cluster identity 4711
[  403.884331][T19150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  403.930652][T19159] syzkaller0: entered promiscuous mode
[  403.947961][T19159] syzkaller0: entered allmulticast mode
[  404.065970][T19159] tipc: Resetting bearer <eth:syzkaller0>
[  404.073948][T19170] xt_policy: neither incoming nor outgoing policy selected
[  404.104684][   T60] IPVS: stop unused estimator thread 0...
[  404.143773][T19174] xt_TCPMSS: Only works on TCP SYN packets
[  404.148733][T19147] tipc: Resetting bearer <eth:syzkaller0>
[  404.243341][T19147] tipc: Disabling bearer <eth:syzkaller0>
[  404.516525][T19197] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  404.661708][T19201] syzkaller0: entered promiscuous mode
[  404.668320][T19201] syzkaller0: entered allmulticast mode
[  405.358676][T19258] __nla_validate_parse: 38 callbacks suppressed
[  405.358694][T19258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3798'.
[  405.435355][T19265] netlink: 'syz.5.3800': attribute type 10 has an invalid length.
[  405.713187][T19281] netlink: 'syz.4.3806': attribute type 83 has an invalid length.
[  405.771819][T19280] netlink: set zone limit has 4 unknown bytes
[  405.935863][T19290] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3808'.
[  405.992601][T19293] netlink: 100 bytes leftover after parsing attributes in process `syz.5.3812'.
[  406.091596][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3813'.
[  406.192525][T19306] xt_CT: No such helper "snmp_trap"
[  406.678340][T19338] team0: Device batadv2 failed to change mtu
[  406.791518][T19349] netlink: 'syz.3.3819': attribute type 1 has an invalid length.
[  406.879891][T19353] netlink: 'syz.4.3821': attribute type 5 has an invalid length.
[  406.889178][T19355] dvmrp1: entered allmulticast mode
[  406.931731][T19353] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3821'.
[  407.055821][T19363] netlink: 'syz.6.3823': attribute type 3 has an invalid length.
[  407.140995][T19363] syzkaller0: entered promiscuous mode
[  407.146923][T19363] syzkaller0: entered allmulticast mode
[  407.155408][T19363] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3823'.
[  407.255317][T19369] ip6tnl0: left promiscuous mode
[  407.293239][T19369] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.300989][T19369] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.340235][T19369] batman_adv: batadv0: Interface deactivated: dummy0
[  407.398326][T19369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  407.430248][T19369] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  407.490118][T19369] geneve2: left promiscuous mode
[  407.506115][T19369] bond0: left promiscuous mode
[  407.516247][T19369] bond3: left promiscuous mode
[  407.547881][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3826'.
[  407.565543][T19371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3826'.
[  407.630418][T18398] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  407.646043][T18398] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.666996][T18398] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  407.675906][T18398] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.735538][T19391] syzkaller0: entered promiscuous mode
[  407.748237][T19391] syzkaller0: entered allmulticast mode
[  407.777240][T18398] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  407.789907][T18398] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.805245][T18398] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  407.821784][T18398] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  407.835327][T19396] netlink: 'syz.6.3832': attribute type 1 has an invalid length.
[  407.882767][T19403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3835'.
[  407.888614][T19396] bond0: entered promiscuous mode
[  407.897447][T19396] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.040321][T19413] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3838'.
[  408.315625][T19429] xt_hashlimit: size too large, truncated to 1048576
[  408.559459][T19447] gretap0: left promiscuous mode
[  408.683803][T19447] batman_adv: batadv0: Interface activated: dummy0
[  408.728870][T19447] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  409.042654][T19483] netlink: 'syz.1.3862': attribute type 1 has an invalid length.
[  409.312051][   T11] block nbd0: Possible stuck request ffff8880253c0000: control (read@0,1024B). Runtime 330 seconds
[  409.324424][   T11] block nbd0: Possible stuck request ffff8880253c0200: control (read@1024,1024B). Runtime 330 seconds
[  409.336095][   T11] block nbd0: Possible stuck request ffff8880253c0400: control (read@2048,1024B). Runtime 330 seconds
[  409.348310][   T56] block nbd0: Dead connection, failed to find a fallback
[  409.356704][   T56] block nbd0: shutting down sockets
[  409.363189][   T11] block nbd0: Possible stuck request ffff8880253c0600: control (read@3072,1024B). Runtime 330 seconds
[  409.374691][   T56] blk_print_req_error: 138 callbacks suppressed
[  409.374709][   T56] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.393471][   T56] buffer_io_error: 138 callbacks suppressed
[  409.393486][   T56] Buffer I/O error on dev nbd0, logical block 1, async page read
[  409.408459][   T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.418241][   T56] Buffer I/O error on dev nbd0, logical block 0, async page read
[  409.426308][   T56] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.435931][   T56] Buffer I/O error on dev nbd0, logical block 3, async page read
[  409.443978][   T56] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.453637][   T56] Buffer I/O error on dev nbd0, logical block 2, async page read
[  409.466472][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.480912][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read
[  409.488867][ T5842] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.499784][ T5842] Buffer I/O error on dev nbd0, logical block 1, async page read
[  409.508013][ T5842] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.517670][ T5842] Buffer I/O error on dev nbd0, logical block 2, async page read
[  409.525554][ T5842] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.535346][ T5842] Buffer I/O error on dev nbd0, logical block 3, async page read
[  409.543396][ T5842] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.553431][ T5842] Buffer I/O error on dev nbd0, logical block 0, async page read
[  409.561794][ T5842] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  409.571413][ T5842] Buffer I/O error on dev nbd0, logical block 1, async page read
[  409.579985][ T5842] ldm_validate_partition_table(): Disk read failed.
[  409.587232][ T5842] Dev nbd0: unable to read RDB block 0
[  409.593363][ T5842]  nbd0: unable to read partition table
[  409.600047][T19504] gretap0: entered promiscuous mode
[  409.610785][ T5842] ldm_validate_partition_table(): Disk read failed.
[  409.620087][ T5842] Dev nbd0: unable to read RDB block 0
[  409.627624][T19504] gretap0: left promiscuous mode
[  409.641787][ T5842]  nbd0: unable to read partition table
[  410.248772][T19547] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20002
[  410.319986][T19551] tunl0: Caught tx_queue_len zero misconfig
[  410.615001][T19574] ip6_vti0 speed is unknown, defaulting to 1000
[  410.837370][T19582] netlink: 'syz.3.3891': attribute type 1 has an invalid length.
[  410.854395][T19582] netlink: 'syz.3.3891': attribute type 1 has an invalid length.
[  410.863223][T19582] netlink: 'syz.3.3891': attribute type 1 has an invalid length.
[  410.872182][T19582] netlink: 'syz.3.3891': attribute type 2 has an invalid length.
[  410.890796][T19582] __nla_validate_parse: 13 callbacks suppressed
[  410.890812][T19582] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3891'.
[  410.964844][T19582] IPv6: NLM_F_CREATE should be specified when creating new route
[  411.030321][T19589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3893'.
[  411.143022][T19594] netlink: 'syz.3.3894': attribute type 2 has an invalid length.
[  411.152088][T19594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3894'.
[  411.180414][T19594] netlink: 'syz.3.3894': attribute type 21 has an invalid length.
[  411.241630][T19594] bond3: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  411.255820][T19601] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3896'.
[  411.309963][T19594] bond3 (unregistering): Released all slaves
[  411.358817][T19605] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3897'.
[  411.434988][T19597] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.448451][T19597] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.648199][T19619] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3898'.
[  411.753902][T19597] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  411.767777][T19597] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.827225][T19600] ip6_vti0 speed is unknown, defaulting to 1000
[  411.966625][T19628] can: request_module (can-proto-0) failed.
[  411.999145][T19597] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.020152][T19597] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.323443][T19597] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  412.356870][T19597] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  412.517552][T19659] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3907'.
[  412.579448][T19662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3910'.
[  412.697713][T19662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  412.715090][T19662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  412.724094][T19671] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3912'.
[  412.739493][T19662] bond0 (unregistering): Released all slaves
[  412.909064][ T8588] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  412.926135][ T8588] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  412.937222][T19683] netlink: 'syz.6.3914': attribute type 6 has an invalid length.
[  412.984096][T19677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  413.066096][T18435] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  413.079767][T18435] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  413.092886][T18435] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  413.101415][T18435] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  413.215620][ T8588] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  413.240600][ T8588] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  413.290417][T19689] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3917'.
[  413.790538][   T31] INFO: task syz.2.1748:12094 blocked for more than 143 seconds.
[  413.808896][   T31]       Not tainted syzkaller #0
[  413.813876][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  413.835463][   T31] task:syz.2.1748      state:D stack:24968 pid:12094 tgid:12093 ppid:5831   task_flags:0x400140 flags:0x00080002
[  413.860991][   T31] Call Trace:
[  413.871580][   T31]  <TASK>
[  413.891468][   T31]  __schedule+0x14ea/0x5050
[  413.941746][   T31]  ? __pfx___schedule+0x10/0x10
[  413.946746][   T31]  ? schedule+0x90/0x360
[  413.956101][   T31]  schedule+0x164/0x360
[  413.960808][   T31]  schedule_preempt_disabled+0x13/0x30
[  413.966286][   T31]  __mutex_lock+0x7fe/0x1300
[  413.971371][   T31]  ? __x64_sys_sendmsg+0x1bd/0x2a0
[  413.977449][   T31]  ? __mutex_lock+0x5ac/0x1300
[  413.982404][   T31]  ? nfsd_nl_version_set_doit+0xcd/0x7a0
[  413.988574][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  413.993644][   T31]  nfsd_nl_version_set_doit+0xcd/0x7a0
[  413.999515][   T31]  ? rcu_is_watching+0x15/0xb0
[  414.004436][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  414.010788][   T31]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  414.017400][   T31]  genl_family_rcv_msg_doit+0x22a/0x330
[  414.023315][   T31]  ? __asan_memcpy+0x40/0x70
[  414.028409][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  414.034670][   T31]  ? bpf_lsm_capable+0x9/0x20
[  414.039645][   T31]  ? security_capable+0x7e/0x2c0
[  414.044610][   T31]  genl_rcv_msg+0x61c/0x7a0
[  414.049357][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  414.054433][   T31]  ? __pfx_nfsd_nl_version_set_doit+0x10/0x10
[  414.060962][   T31]  netlink_rcv_skb+0x232/0x4b0
[  414.065779][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  414.071021][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  414.076345][   T31]  ? genl_rcv+0x19/0x40
[  414.080692][   T31]  ? down_read+0x272/0x2e0
[  414.085126][   T31]  ? genl_rcv+0xd/0x40
[  414.089589][   T31]  genl_rcv+0x28/0x40
[  414.093586][   T31]  netlink_unicast+0x80f/0x9b0
[  414.098453][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  414.103753][   T31]  ? __alloc_skb+0x193/0x390
[  414.108876][   T31]  ? netlink_sendmsg+0x650/0xb40
[  414.113831][   T31]  ? skb_put+0x11b/0x210
[  414.118536][   T31]  netlink_sendmsg+0x813/0xb40
[  414.123330][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  414.128819][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  414.133842][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  414.139328][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  414.144631][   T31]  ____sys_sendmsg+0xa68/0xad0
[  414.149847][   T31]  ? __might_fault+0xaf/0x130
[  414.154612][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  414.160117][   T31]  ? import_iovec+0x73/0xa0
[  414.164692][   T31]  ___sys_sendmsg+0x2a5/0x360
[  414.169577][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  414.174555][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  414.180056][   T31]  ? futex_wait+0x29a/0x380
[  414.184572][   T31]  ? __fget_files+0x2a/0x420
[  414.189399][   T31]  ? __fget_files+0x3a0/0x420
[  414.194097][   T31]  __x64_sys_sendmsg+0x1bd/0x2a0
[  414.199104][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  414.204578][   T31]  ? rcu_is_watching+0x15/0xb0
[  414.209758][   T31]  do_syscall_64+0xe2/0xf80
[  414.214292][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.220460][   T31]  ? clear_bhb_loop+0x60/0xb0
[  414.225170][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  414.232030][   T31] RIP: 0033:0x7fe216d9aeb9
[  414.236541][   T31] RSP: 002b:00007fe217d2a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  414.245426][   T31] RAX: ffffffffffffffda RBX: 00007fe217015fa0 RCX: 00007fe216d9aeb9
[  414.253592][   T31] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003
[  414.262151][   T31] RBP: 00007fe216e08c1f R08: 0000000000000000 R09: 0000000000000000
[  414.270665][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  414.278751][   T31] R13: 00007fe217016038 R14: 00007fe217015fa0 R15: 00007fff00487d88
[  414.287023][   T31]  </TASK>
[  414.290134][   T31] 
[  414.290134][   T31] Showing all locks held in the system:
[  414.299846][   T31] 1 lock held by khungtaskd/31:
[  414.304721][   T31]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  414.314826][   T31] 2 locks held by getty/5583:
[  414.319601][   T31]  #0: ffff88814e6dd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  414.329838][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  414.348506][   T31] 1 lock held by udevd/5824:
[  414.353135][   T31]  #0: ffff888025382358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  414.362661][   T31] 1 lock held by udevd/5843:
[  414.367509][   T31]  #0: ffff88802582b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  414.377151][   T31] 3 locks held by kworker/1:5/5893:
[  414.382350][   T31]  #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  414.393773][   T31]  #1: ffffc9000b647bc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  414.404922][   T31]  #2: ffffffff8e560b40 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580
[  414.415125][   T31] 3 locks held by kworker/0:5/5938:
[  414.420593][   T31]  #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  414.433125][   T31]  #1: ffffc9000b737bc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  414.446126][   T31]  #2: ffff88802789e240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x202/0x3d0
[  414.456553][   T31] 2 locks held by syz.0.1057/9677:
[  414.461730][   T31]  #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  414.470134][   T31]  #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x16c0
[  414.480834][   T31] 2 locks held by syz.2.1748/12094:
[  414.486046][   T31]  #0: ffffffff8fa1a230 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  414.494385][   T31]  #1: ffffffff8e8793e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0
[  414.504715][   T31] 3 locks held by kworker/u8:18/18398:
[  414.510693][   T31]  #0: ffff88802fa10148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  414.522433][   T31]  #1: ffffc9000ecbfbc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  414.536294][   T31]  #2: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  414.546092][   T31] 2 locks held by syz.3.3927/19719:
[  414.551463][   T31]  #0: ffffffff8f9ac188 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  414.560525][   T31]  #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  414.571817][   T31] 
[  414.574153][   T31] =============================================
[  414.574153][   T31] 
[  414.582800][   T31] NMI backtrace for cpu 1
[  414.582815][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  414.582833][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  414.582842][   T31] Call Trace:
[  414.582848][   T31]  <TASK>
[  414.582856][   T31]  dump_stack_lvl+0xe8/0x150
[  414.582880][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  414.582899][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  414.582923][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  414.582945][   T31]  sys_info+0x135/0x170
[  414.582959][   T31]  watchdog+0xf90/0xfe0
[  414.582979][   T31]  ? watchdog+0x209/0xfe0
[  414.582997][   T31]  kthread+0x726/0x8b0
[  414.583017][   T31]  ? __pfx_watchdog+0x10/0x10
[  414.583032][   T31]  ? __pfx_kthread+0x10/0x10
[  414.583052][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  414.583066][   T31]  ? __pfx_kthread+0x10/0x10
[  414.583085][   T31]  ret_from_fork+0x51b/0xa40
[  414.583103][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  414.583118][   T31]  ? __switch_to+0xc82/0x1410
[  414.583143][   T31]  ? __pfx_kthread+0x10/0x10
[  414.583162][   T31]  ret_from_fork_asm+0x1a/0x30
[  414.583197][   T31]  </TASK>
[  414.583205][   T31] Sending NMI from CPU 1 to CPUs 0:
[  414.705390][    C0] NMI backtrace for cpu 0
[  414.705406][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  414.705423][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  414.705431][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  414.705452][    C0] Code: a8 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 12 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  414.705466][    C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242
[  414.705479][    C0] RAX: 0000000000198a19 RBX: ffffffff8199570d RCX: 0000000080000001
[  414.705490][    C0] RDX: 0000000000000001 RSI: ffffffff8dcc99be RDI: ffffffff8c073a00
[  414.705500][    C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  414.705510][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef1b70
[  414.705521][    C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000
[  414.705531][    C0] FS:  0000000000000000(0000) GS:ffff8881256f5000(0000) knlGS:0000000000000000
[  414.705542][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  414.705552][    C0] CR2: 00007f6090fe4198 CR3: 000000007aff8000 CR4: 00000000003526f0
[  414.705566][    C0] Call Trace:
[  414.705572][    C0]  <TASK>
[  414.705578][    C0]  default_idle+0x9/0x20
[  414.705595][    C0]  default_idle_call+0x72/0xb0
[  414.705612][    C0]  do_idle+0x1bd/0x500
[  414.705626][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  414.705643][    C0]  ? __pfx_do_idle+0x10/0x10
[  414.705660][    C0]  cpu_startup_entry+0x43/0x60
[  414.705673][    C0]  rest_init+0x2de/0x300
[  414.705691][    C0]  start_kernel+0x380/0x3d0
[  414.705711][    C0]  x86_64_start_reservations+0x24/0x30
[  414.705726][    C0]  x86_64_start_kernel+0x143/0x1c0
[  414.705742][    C0]  common_startup_64+0x13e/0x147
[  414.705765][    C0]  </TASK>
[  414.888793][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  414.896001][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  414.905110][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  414.915162][   T31] Call Trace:
[  414.918454][   T31]  <TASK>
[  414.921402][   T31]  vpanic+0x1e0/0x670
[  414.925380][   T31]  panic+0xc5/0xd0
[  414.929088][   T31]  ? __pfx_panic+0x10/0x10
[  414.933501][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  414.938959][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  414.945133][   T31]  watchdog+0xfda/0xfe0
[  414.949287][   T31]  ? watchdog+0x209/0xfe0
[  414.953623][   T31]  kthread+0x726/0x8b0
[  414.957694][   T31]  ? __pfx_watchdog+0x10/0x10
[  414.962360][   T31]  ? __pfx_kthread+0x10/0x10
[  414.966939][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  414.972122][   T31]  ? __pfx_kthread+0x10/0x10
[  414.976707][   T31]  ret_from_fork+0x51b/0xa40
[  414.981286][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  414.986384][   T31]  ? __switch_to+0xc82/0x1410
[  414.991060][   T31]  ? __pfx_kthread+0x10/0x10
[  414.995637][   T31]  ret_from_fork_asm+0x1a/0x30
[  415.000410][   T31]  </TASK>
[  415.003937][   T31] Kernel Offset: disabled
[  415.008247][   T31] Rebooting in 86400 seconds..