last executing test programs:

2.311500077s ago: executing program 1 (id=1713):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
accept4(r0, 0x0, 0x0, 0x80000)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
preadv(r1, &(0x7f0000002500)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/155, 0x9b}, {&(0x7f0000002400)=""/243, 0xf3}], 0x4, 0x3, 0x9)
close(0x3)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'rose0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0)

2.114501283s ago: executing program 1 (id=1717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)="a85faa91a18f2d49f8a2107aa73b944ac5dd2d8f924b060b9b778c21ce70b45008428d43e8c2c1e6710fec8635c330917cc3d711263c78dfcc5e892696337e7e11337926bee130f41486670af4077a136a740f8872670222b1bef7ed7f773806ff1b4dee10861afc80c38cd3c1a29ed0d2c870966988936620669d46cdee359b97cfa9cff24b1ac097dc2495e63daacb6985368b7d64ff1f0943fd3edfbdab", 0x9f}, {&(0x7f0000000980)="51b97556e94642e8bd", 0x9}], 0x2, 0x0, 0x0, 0xc4}, 0x20000000) (async)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x3, 0x31, 0xffffffffffffffff, 0xf983e000) (async, rerun: 32)
close(r2) (async, rerun: 32)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x83}]}, 0x10) (async)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) (async)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
close(r0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async)
r5 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2}}, 0x2e)
r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00c5150d14a5345394092a000000", @ANYRES16=r7, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000808000c00a60a0000"], 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) (async)
r9 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), r10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x44, r11, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc800}, 0x40)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0)
recvmmsg(r9, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/4085, 0xff5}, {0x0}], 0x2}}], 0x1, 0x140, 0x0)

1.924283345s ago: executing program 1 (id=1720):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xfffffffffffffdf1)
sendto$inet(r1, 0x0, 0x0, 0x20000090, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000080)=0x4000004, 0x4)
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0xffffffff)

1.920256638s ago: executing program 1 (id=1721):
socket$nl_rdma(0x10, 0x3, 0x14)
unshare(0x22020400) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x5, 0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x100}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200001d4}, 0x8840)
r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r3) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@ifindex, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="2f0000001800000004000000", @ANYRES32=r0], 0x20) (async)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0xb2ea5b7151cb3261, &(0x7f0000000080)=0x1, 0x4) (async)
r6 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x2, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c)
r7 = socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x15, 0x2, 0x7)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r8, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
syz_emit_ethernet(0x6e, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "bb9b69de4386bf2ae6a3b321505c68cd"}, @md5sig={0x1d, 0x12, "c52a2d43d2c85500"}]}}}}}}}}, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x20000040)
r10 = socket$nl_route(0x10, 0x3, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) (async)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x46951}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x50}}, 0x2000000)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030428bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e0000000000000280060001000200000008000500", @ANYRES32=r11, @ANYBLOB="ffc0ad2b9b759a40542d2c9d848b507fd4ea3761f0c3aee962c1e9115aa364749e353a8999cef643342ff43f331442ce6fee1d9f1444320403c8f95ab380ed782265322aa9892550c3a36609b8f8bfb9701ace4ee560654cd1434eb04401a1fe2e2f1ed7e8680d6b2d77d7eeeecddc128f26ff1a1c0bd9ab675c4efcbe8cbe0987d44ad5243f6547b37f29f9fcc7a71ed3e4f33575958f08383e8ce9e11b65d127f68354932ba8a33801370428f8cc20c2a28ef3ebe75da1eb"], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r9], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.771157337s ago: executing program 1 (id=1724):
r0 = socket(0x10, 0x80002, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
unshare(0x6a040000) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x379080, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0xaee6, 0x0, 0x0, 0x40f00, 0x6f}, 0x94) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) (async)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r2, 0x0, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x40000)
syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async)
sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async)
recvfrom(r3, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0)
sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0)

1.521427576s ago: executing program 2 (id=1730):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000340)=0x2, 0x4)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000040)='\x00', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)="d2a534b308", 0x5}], 0x1}}], 0x2, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0xfffffffc, 0x0, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x80, 0x0}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000c0000000400000001000004010000000a0000000300000000000000000000000000000105000000200000020000000000000003000000000200000002000000000000000061002e2e61610061005f"], 0x0, 0x64}, 0x28)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
r2 = socket$kcm(0x10, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0x14, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x80}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)
write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="563f00001800599c6d0eab170004000523c93da35ef4a16a3fcdf41c7d"], 0xfe33)
getpid()

1.411418674s ago: executing program 2 (id=1732):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008004}, 0x40000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="fee7dd3f6bb9dcea5c993ed53bc5cfdd0bc171fdf15e03fa", 0x18)
r3 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000004}], 0x1, 0x40080)
readv(r3, &(0x7f0000000300)=[{&(0x7f0000000200)=""/38, 0x26}], 0x1)

1.304200362s ago: executing program 2 (id=1735):
sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000)
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={<r1=>r0})
ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={<r2=>r1})
r3 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}, 0xfd}], 0x1, 0x41, 0x0)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x3f7, 0x8, 0x70bd2d, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000380)={<r4=>r3, 0x401, 0x4, 0x6})
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0xc400300}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x48005)

1.210150873s ago: executing program 4 (id=1736):
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0x9, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) (async)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 32)
close(0x4) (rerun: 32)
r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18200, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32)
r3 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0xe6, 0xfc, 0x0, 0x62, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x40, 0x10, 0x4, 0xb23}}) (async)
socket$inet6(0xa, 0x2, 0x0) (async)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) (async)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @empty, 0x400}, 0x1c)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="30df250000000000000000000000000065e400006ea6d041b1d17dcee3d739750d7dc1ec3bbfce2076e31369af44f7dbc0bb4f13fff4285e6c7b84271c7f68f397dd9d92d1c49a79af5c5edafc11b372c8d064efdad4806eb5bc3ddf703fd4fad5def08677116b91a06b814fd28c610cb1357c8c877fe9fe5d53464081a4283488ab535436fe20bb3cc20850f2f1", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b00000000000800040000050000"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @local}, 0x2, 0x0, 0x4}}, 0x2e)
r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x240000b4) (async)
socket$pppl2tp(0x18, 0x1, 0x1)

1.19011008s ago: executing program 2 (id=1738):
unshare(0x8000400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x3, {{0x42, 0x20004006}}}, 0x10)
bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10)
bind$tipc(r2, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={r0, 0x108, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000600), 0x50, 0x10, &(0x7f0000000640), &(0x7f0000000840), 0x8, 0x36, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)

1.052475542s ago: executing program 2 (id=1739):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}]}, &(0x7f0000000480)=0x10)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r2, 0x84, 0x83, &(0x7f00000002c0)="a102000004008000", 0x8)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = getpid()
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r6, 0x0, 0x0}, 0x10)
r7 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
r8 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x20000000}], 0x1, 0x40800)
r9 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r9, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0x100007})
sendmmsg$inet(r7, &(0x7f0000002580)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000640)="80220ebd910ac0089289bf7c00bca5962c5bfb1a716ddd4cb96d929560efb333276dafb955", 0x25}, {&(0x7f00000002c0)="c5feaad002b474cb445c105793ac31043a4a6d9136f100b15c698e05d9a7f48773c3abaa067fc4519b13d66280447d4f963718f208f2ad650dad5d5a4865683f38e37fa4e4a73ae8987df1fd506f637df8e2347b7639f0aada640e8b719fb9c14ad514ed72a31b902c381727c4678ff674c54f44c0480afff63af04314340ecaabd6d77de9d90ed937033c437f9445b9c1fa27e63ac28ca38cff1af01aebe7cf1be1a6562ac1a1c75a048f65507f96e9cf2c22656b4a0508520062433fac688a81df5776178b1c11d301c671e83dc345cb49ea889db2be71f89850a23c458c5b1f2fe01ced979d6689767db9ef50ed842f", 0xf1}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0), 0x1000000000000320}}], 0x2, 0x4000810)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r1, 0x6}, &(0x7f0000000240)=0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3)
sendmmsg$inet(r7, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000003d40)=[{&(0x7f0000002b00)="9bb6070844984ef2b734ee2b740e32647974b7cfb8150605a2c635efcbc832fa56569acc96052ed730ec4473a0af21e1f7881620a9062897d734a7dac3c85d6973f29880e626e5e231b1b4edd98b9363876048487f344b980de2c6f0806915a8bb26e264035f0a378fe6662cfd45296d1cc391c761c06d689dd572f822269ffc2625c6d2a6d4228a91b303f6b9d8b45a6a9f8c7b49ec5bc49acd786101e2308bbaee6d51d8c582fe4bfedd220cae98dc1a86cbe3b3d03636b5c1c2951d9b0f18503ac03e3f52a34b9be308d86ced9df5c42e152849ff5ad87e599f2fd3af561520a835d3222667cb80625d2058ea5dcec77b644cb4927e43838cb632b09b823885e5729f163bdc6ab9725aa575d034c67d1985e0d1ac60f597a2747c3d6d6a366b9ab1f791d0ef4196371671865ad407d3d21586847479d116ebcd97848f0d846b4995eeb5aeed68a3b391c9b3005d6ab1ba83b799a7b1fc0cfbd5f17b87636f1fb152d26fd6e587c346ec7328af785abb3c79900f200031c65c088747256aa4e7375159", 0x184}], 0x1}}], 0x1, 0x42054)
setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendto$inet(r7, &(0x7f0000000580)="17", 0x59a, 0x1000806d, 0x0, 0x0)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), r3)

1.039359532s ago: executing program 4 (id=1740):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r2=>0x0)
unshare(0x2c020400)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="3608419b0c577741df3160523e7efbef9c1595a0adfa8838e1191f798097048bca0925958eecbca21a1bb8062f1362e7ebc5d2a0f3c982184b1f3702bd3e2d236719298fbb32ed961b03722d2bd0fa7c785465d480782bd507c374dd374bcd48d2e4e71a8e1dc7f8d818fd1a366988447842efc6ca118edcce8000675f62c3a7a252498b5454bb0e691868090022593ac5ebb519ff0e050b9209e644bc6f6820aa5aefa6fcf98705987c969b9af2bdfcc22b434b96b2b5ed860a708248b3e67b3c23b3c87e64ab53500d7e19b0a1114d13d94b4717abaeb9f04b0d1283185e7632f0fd92eef4ad75c648cbb792ff00"/268, @ANYRES64=r0, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x840)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
write$nci(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="62e7"], 0x11)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) (async)
unshare(0x2c020400) (async)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="3608419b0c577741df3160523e7efbef9c1595a0adfa8838e1191f798097048bca0925958eecbca21a1bb8062f1362e7ebc5d2a0f3c982184b1f3702bd3e2d236719298fbb32ed961b03722d2bd0fa7c785465d480782bd507c374dd374bcd48d2e4e71a8e1dc7f8d818fd1a366988447842efc6ca118edcce8000675f62c3a7a252498b5454bb0e691868090022593ac5ebb519ff0e050b9209e644bc6f6820aa5aefa6fcf98705987c969b9af2bdfcc22b434b96b2b5ed860a708248b3e67b3c23b3c87e64ab53500d7e19b0a1114d13d94b4717abaeb9f04b0d1283185e7632f0fd92eef4ad75c648cbb792ff00"/268, @ANYRES64=r0, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x840) (async)
syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async)
write$nci(r0, &(0x7f0000000a80)=ANY=[@ANYBLOB="62e7"], 0x11) (async)

1.038846327s ago: executing program 3 (id=1741):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async, rerun: 64)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a300000000008000340000000013400fda7726503000000000000000000020000000900010073797a300000000008000340000000010900020073797a3100000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) (async, rerun: 64)
r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async, rerun: 64)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r4, 0x7f}, &(0x7f00000006c0)=0x8) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x70, 0x0, 0x1, 0x401, 0x11, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) (async)
unshare(0x20400) (async)
r6 = socket$inet6(0xa, 0x2, 0x0) (async)
r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x0, @local}, 0x2}}, 0x26) (async)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x3c, r9, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x20}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7f}]}, 0x3c}}, 0x20)
pwritev(r6, 0x0, 0x0, 0x3f, 0x0) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

927.163648ms ago: executing program 3 (id=1743):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
getsockopt$sock_int(r1, 0x1, 0x5, 0x0, &(0x7f0000000280))
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000140)={0x3, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0xfb165b60812efe9e, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x18, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @private=0xa010102}}]}, 0x28}, 0x1, 0x7}, 0x0)

891.627079ms ago: executing program 4 (id=1744):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', <r3=>0x0})
r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f00000002000000c86873cd42f5e0b639b9b50000000080000008510000", @ANYRES32=0x1, @ANYBLOB="0100008000"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05000000020000000400"/28], 0x50)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', <r5=>0x0})
socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) (async)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000076000d0b0000000000007f000300000000000000308611a34b0b300eb2ffffffff594df8a5fa6baa3159339fb8a86317c8a4f2ceb78e6d5230f5032781bc37ffadd54a7444f8e1116d070879a25293bc832763a3e9d41e6a6b20a84e26dcd1"], 0x18}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYRES16=r4], 0x18}], 0x1, 0x0, 0x0, 0x94}, 0xb04) (async)
sendmsg$netlink(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYRES16=r4], 0x18}], 0x1, 0x0, 0x0, 0x94}, 0xb04)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
read(r8, &(0x7f0000000080)=""/38, 0x26)
epoll_create1(0x0) (async)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) (async)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014})
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001})
ppoll(&(0x7f0000000980)=[{r10, 0x1}], 0x1, 0x0, 0x0, 0x0) (async)
ppoll(&(0x7f0000000980)=[{r10, 0x1}], 0x1, 0x0, 0x0, 0x0)
epoll_wait(r10, 0x0, 0x0, 0xffffffff)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) (async)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]})
bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async)
bind$bt_hci(r11, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r11, &(0x7f0000000040)=ANY=[], 0x6)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000100003052abd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a8010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB="1f1d09"], 0x3c}}, 0x800)

811.849518ms ago: executing program 0 (id=1745):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={<r1=>0x0}, &(0x7f00000000c0)=0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={<r2=>r1, 0xa4}, &(0x7f0000000140)=0x8)
r3 = socket$netlink(0x10, 0x3, 0x8)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r3)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x1411, 0x2, 0x70bd2b, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r3)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x14) (async)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000400)={<r6=>r2, 0xc63}, &(0x7f0000000440)=0x8)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000480)={r6, @in6={{0xa, 0xffff, 0x3, @private1}}, [0x7, 0x7, 0x8, 0x100, 0xffffffff00000000, 0xe68, 0x100000000, 0x8, 0x10, 0x9, 0x2, 0x2, 0x6, 0x5, 0xfffffffffffffffd]}, &(0x7f0000000580)=0x100) (async)
r7 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, r8, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xc}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x643614fce40484d8}, 0x40)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000780)={"d75a3874ab32681abb8acbea3e3029a9", <r10=>0x0, 0x0, {0x9, 0x8}, {0x401, 0x1d32a718}, 0x2, [0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x1ff, 0xfffffffffffffff7, 0x8001, 0x5, 0x8, 0x81, 0x9833, 0x5, 0x3d80000000000000, 0x100000001, 0x9eac, 0xf]})
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r4, 0x5000943f, &(0x7f0000000880)={{r0}, r10, 0x2, @unused=[0x2, 0x4, 0x46, 0x1], @name="d185faebdaac8d0dc7b390b7edff55b2c5ea9dda30b9549bcda05ac789eceba5fbba9455703d12acdd09b114f5ef440cec44b51b12d62f5d19ec8e68a7448d6c967cfcb5d97196d9f2cba21fc8b0af16d6cf21bb1e16d56dcda68d9c564f3be2ce6c336b3fab38779a670b2bc5f0b14d80ceb7c27b99b8c2ca746dba0cde0eca47f11e67ae58c7e8bfdaa461574c17f347c12b2afbffde5eab407d2f569f493939d35d9e59c2ee8b41520f5f8680e319527c95eb8f662df788162a65e8f51a38092f8be610a847170450bfa5055235d4abf7ddd11d508f018fd9cd42231a633be6c4907bbc172b02cbc587460d353ffd55c70aeefbd27e2e2bf75a5d71459903b9ccbf0618f63811bb91f3da182ea4c5c38fcbde9096023d08f5a9af886b35c8c4b4455496dae8f2580bf20e367d1dcffd4635ceeecb997ab8be13c7dd74c2e9a2517b3e14b7673b1884ba26576b727dbbb567083effef49f7bb977ef6f7c6bab4c9f935e2fba17a6ad9a6cc236f414fc6b208c391bd421979879805aa013625b437f54bc19236b60ab1416428679d1a4a43acfe7c8c44ee2eefa87bbc90c1c226b0dbe7b4c7e91c8fd5e95ba0267632ec764d7dae1252047c2eba040c8ab3d2e069faf5334ca6ef2758ad0dce10500f0a2a0ed94413236c9363928afca5e9edc22d1816d4e2a78ae8c3dd1bfbf0bf9dc67975a6af2e11670d8a87b747efafbab94ee0cc742b90dc444d1c8876aa3aba70fdb9a7787099a9bb5bc69ebd71afc1027a272bcee59ece916788ba19e5d06eb31f6a4a82f0db15e934bc70605b5e9941db4a824b09d9ff58226339d624f419cee0e75c46658914fb3b6de6aef3704303b5a042b5cc0cb7fd8773857d4caa8ba551a429ee36976f1ac5a030b80f153d095b087900a36a20232a9c8ef5ef0d22696a520822f1f050a2981ae8a9b5d3349646f9856f126537bad00e712c6ca69791476bf9fd8a35b7c31d723fabdb09459e1fe18d29e789ec6c885a7ff5bed833a0972c758fec0f70649413baebddda98012891bd310cfbe34638c5e9d7149931aeed571416b24153cb66f234ba452af9712418ce699dba52ba1ce90e382a0902364f3a6f32a22319f36fb3047d90e243e9fbe3c950c0879dfa7a00ccf1f3455bb8df4c457b5ee72da75ea9acd57d20b732449b2661adf3a7da707ac9a5a059b4604bc94554c93705f6b37fd47f6f28aee68ee6ff537f7745a6ef16851552b934d3ce9431d8b70914ada637fbf1b3146f40eaa63a04d628f07a0dd4d7add6de12843e2af745991d22de36f17902b8d9af73e4a866bf892c09d55cbf71541b328ee9fe4f37845f5c5cf2524f0568f2265a618a7c4ef59f04a09069ea95afec2ad0f7a7e2724b6c000273058e04812be38d6b95e3ed08c6a21922a6f93b2188f725dbad270d4976fb2ad2efb3817998d6bfe189d40bdc00cfd128b4c1925a3177166fbea1c7e1bba237807421f698ecfcea6b31446ebcd8924a72a07c8115cea0ec6df8d527dc732c1b008d05fd72dbe00888d1f6202823e9d0f0857aa59c941be730a8ea4a55721501316228c2b9555a130340173e71e5a67c52133bf67eb92998ab9f365f70ed2932a06d8ed3f7c413bcaefbf9631776859b7c366051e0c121c78eab34292bdfeb1124367d34330c6f1fedcec175001e9976444170c89df7d1a88f5b41efcc499e284442436d65c55f35438a400404901759e466d7cd51137ecbac05b46b848c0e1e653199a2a4c529342bff21e316b58c232d109383f48e4d4cf7bd9d06def81644b23c8fa3f1f4bc8d6cd5329620afadb6fbe160dfed203068074d83d29512b892ee9af36d6e64761635514ccbae6ba70ebfdaf417b4711f9c8298a6d35acb49f7df865b675ef066a115ffb50734d8567353c576dd110b0c8ff5dfe60dd36a76b436e3b934eac68e8c0b497653e810c4cf1e1a7061ecc35791623db04ae094fe99eb0618b98661fc13948f68861ff88b23ada13980c63c20cc9bfa4075c2fea42df925e236ce0178540b29d295d71f86c6829e0023d58dc0d06bb714163e38239029c416ef37c6a6b737765b956e448f44185ac758c01ff93204d8bc18bb0da5c4001b61c8806582bfb65340b841ac7d892c3909477983d7ad7355f6667d34d86b5a1f89963ccd3ec131a0245d900b01eba171aee3be2382a68bbb0db7f67c0ca0084ae7c9d2147b92f3849b787299b249fcd82fa35998356ebe18c49737af6d1b134ddf754397ff8b326585ae9afce46c9dd8c17cf05515424e3c0cff7d2f0228630747f075e7cbed19caebc30da33b9f68f875146662dcfe4aac10580f8a4745444011094de9adc3c2a7ab6d2373df703a67872d87274e6a0b6ab745f94c138bb0b39eac5ba744a89e921b6998abce94b274cb7fcbe9e8a9fcf6742708ec20b828aa61b9782fa0c31182f585fbe4b476a365bb95a8605f52566dd5cb8397762fb1a72ebe1cd3dba82dfd3cd38f41a821fa616c428aa22d116aea7c6c982dbda1bfa96e3d54e9a3c57c35cbf78516aa1dadcae7278d0d75ce1c738ff1a72e34462de4de13a91e59c630ccc011480dd6f106df1739dd51e02898a7ef1f0581b8177b967bd46883cd606ddffbda4dc3d39b2ba7d1d30490e4f649d06b64a7b14196a82c7cb370ade3811781d32daf2be5fd0ac4e73511a650d23b9c9d80d5c6352a395c65e379dd79124f9777bfc3b799061f3957c57a6d862f5b697b05386d6abef695cfe61deec86369c171eb1e50bf67512790b0b767363a88859fefd30f5f05776ca8b6455975f3f2734a5c38cdbc3ed3990c4d7dd0c10200c2ccd61af97ea07dbb1e41f6a574f3e1bff3f4c30ebb24d1eb27f5fb3ca077a36e73fed2336fa247dc973b4302f6393b3c80548b1ff34040c0cd43ca14b90e7d904b0a30a8a6d3e2c3ba1fed34c5ac447709fe3536734da1f53c9e33a2505d9fece47c1eedd1d60c68a7979e6010967bd86030cc820ae45184def458403141b66445780e252f2dbbb53d0da0435215966d2efb70a89ce20856103bd6f3536f3d2439c9aabbccee47f18db9498c384356d615101a870f32026900bf7cae4c372a142eaf6e31d2ad54feae9a5d79f8b895e11715021dd90897b812c03c3230179f76c1ef1b2079236e99180698825550057348ad930eaec8fded800f182257c0a003cb59e77f12007fe4a259362a9383a9ac2fef4af96ab90805e8a669440f7f5e9805ed41d79a6cd77097839c40e53f09bfd70ca9a1c72116135b62252cacf330b0648941acd71ceaa17a46736bd8ca90731546efe41f4a399d5862804c861c1a1a438c96ac6625f4d0b459720e4b7e5bdbc073bec70fcb3779aa313acc717a81f845f95d8a24ca8dbfc232defb05ad76825bca8fb942dcf8a3dccb1b16116f89265ed52aa5efcac7e66aba5930b9843bfd3681d780acd2cd5f2a6a0b29b4d0eb45f61a91d29f8ac87e3e68424a0fb91626ee7b7341ccfe5426d2b32b417041890146bec643b48235136b826d1fb4479973a4701a011e83e755ce29ace85590eca3f41d73c938e82563d0faed9234a65718c28e1080863139d6a91dc7bc5aefec25b2675cb5b8604fd7eb069431a87941cf84243e003eec9467204fead37b6ec4a8afab1c09a63f8dbfc9a1bb9b1f9f677a0d9c56fdebabb6f7eef716346ed98d5d4a30406d859d0557df4f07f44068dc0e0f079a51d037101cc5af961386eeedced993a62d6957a8ceb5ee343005adb7014cd01851ca648a5b038c469709833ec18c8b73358d249fb3c2caffe1c356e69224940b9df290c004859d5daa8d5970207a556fa857b93b75f7c9cb1bc030a94b76c29d9cb6f10fa67396a8748bc51d5c9ffda1a26f87b3913473f67d5707afb7fdb6676326bcd8454e4275c08ff26cd23d4e2be7ef6674740f18b6e52cab6601b30ea583fb3b5125224da839c95fbb86c730c0e32ddb30e8710797c075f0d0043ab48435bd501961982839c44948f002bfa045b724ad85ac6db8d23f2480e20c5642b9cad1a42c0ecfe2c4125bc0a232d4f41c68fe6a8f58502522aab71885bc4c942aaa278da2eefe489417749e01e2fb50df34bea8a7a89f62f07b528faec5db82346e4e806a0431db1ae124355d1c8a8e7df06eb50504a176f71f629af653087b70937fc6c1f815421786fddd712a1ebb4072c2e761745df8aca828e9343193381c7f748f33e5a731953d964128ee44d34cc16644b1d1d85191ae21024779262eb7e47e682a905c4f8908ece02d0e8d275c562eeea34300a8722f44caf0a35314ced8b9bdc59edf1a426bb517f15c1c45e1450ec3ba908d6597b7f3df86a9023a728ce28101029c9c480802fef117c200f838b7f26385e40547ed0ce2bb9572daa1633a0b0254d61aa127d01024d62ac90bf2b3f607fd08bc74f9b9b3d865c1e574a2993840397618e17c99a43d3723a949e20b77658ef493793c91b56e850639511d205210c8f88a366be917385d70f78cdbaedc3f34a6ec763a808bb06ab9e08c689b24acf4fbb8aa65f8eff7408448e9f530851ea0471d3657eedaeb8031b90c10a9d3032624f40b329716b70dc53a6586d61d5ee9d4db619bea4e4275bf5d251625f19fb45e1fe99b325fc4d4059a6444081e1bed5a5c304d5fd37252a299c44ee7eef228e15d520088b5eb6af8c3bd2691f432bc68ab36029b5f62671fb9e197371d692d2636d9237d113c25a7a3dde21496133675921a9f0fb1b6eecd2a641ef59038b2c85ac6d7e079b5f8e39ec191caaf80126d8cffcdd33712d7e5d04c062e041b2a4bb0f63d587439a09681c9a17eca21b1400ed8576c6aa977eba8df073224d9fdb62d58c38582b72d264bf175caa6ff7e81caca5aebcc248e9f2ac25d80dbeb0e166affd2fa23be845ed5488ad32b7dfd1a1d62627d7dab44d5aef21183d2731de8dc35aaf6f0bce7d010edcbb9507ca38914705ec245db9390f9a9b40641218fc4efbc86d1486acd043c4d93cc2bf5402b563e4b3528b3cc4f752de40bca16312f71e22e2ad0fe910de30b8735496350208e057be9bde77fa2154231b5c5dad9edfde8cc43c34da73b6b7b48dbe8ef427eb7e5fb26c58a62545e875b4a3f266f85ff9b077f3dc044152981920c98d4385a3b890ba2d01c080db2767b4e8f4e602caff7b5e4c5932f1dc6165acae894a98fe368e91ddf1e3bda080eab2380ccbd4e8916da565e816b78e4e197fa96aabd03fe1b64a540172a07c7af2b80cdfbd59822f29a6b10a24f57ab1c755487d9f3cb8a63b886d388806ad378e2c31465f415fb9afb07bab4cfed1f90fe88e86067b06218c7606576c321212e0e1dc918742ebf7f5975faa34b8a1cd558904675c77b3a2a3d1181b323ae90a5e9b77820f1f9d6bc363b2c693815386b5e69296b5e4e66c9d10916502f4a1af4b55b396f88442cc19d91a1caacba089b194f13aeafb54f99d21b86390d046182a0397a9d4d616853175bea998ffdb9a3907a662c81ccb64cfbdbf29063deda786981fec0b695ad3b12c18d3b15cccad8086f814cb60b63b29314472cb3e9fe5e4d783416bbe06806e5fa5905c6dfb8eb234136b642506828268b0d4c4f96dc02d62832497217c9d5fbde5a39fbc8c85979da00df686298f0c6d17de7881fa4b24b7970b224a4c1c7bc2dbf731e023375f6ade5c6a602ed530766b032a078cc26c32361"})
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x1c, 0x0, 0x402, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48005}, 0x4000000) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x30, r8, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x81, 0x5c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x4f7}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004850}, 0x40000)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001a80)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}, 0x9, 0x2}, &(0x7f0000001b40)=0x90)
r11 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000001b80)={0x1, "b0"}, 0x2)
unshare(0x2000100)
r12 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000001bc0), 0x80000)
getpeername$l2tp6(r12, &(0x7f0000001c00)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001c40)=0x20) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001c80)={'wlan0\x00'}) (async)
ioctl$XFS_IOC_INUMBERS(r12, 0x80405880, &(0x7f0000001cc0)={{0x1, 0x0, 0x8, 0x4, 0x3}, [{0x4f88, 0x3, 0x0, 0x7}, {0x7, 0x1, 0x97}, {0x5, 0x10, 0x3, 0x4}, {0x9734, 0x3, 0x3, 0x7}, {0x6, 0x0, 0x4, 0xe9}, {0x0, 0x3ff, 0x8, 0xc9}]})
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFC_CMD_LLC_GET_PARAMS(r13, &(0x7f0000002000)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x78, 0x0, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0x1a, 0x14, '.-[)-\'}&:(^]${\'-@\x1f\\:&/'}, @NFC_ATTR_FIRMWARE_NAME={0xd, 0x14, 'mptcp_pm\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xa, 0x14, 'wlan0\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'nl80211\x00'}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x2000d035)

810.334856ms ago: executing program 3 (id=1746):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0xd0fb6000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0)
close(r0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (rerun: 64)
r6 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x65, 0x3, 0x10001, 0x35, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8, 0x8000, 0x81, 0xef}}) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) (async, rerun: 64)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) (rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r7=>0xffffffffffffffff})
getsockopt$sock_int(r7, 0x1, 0x22, 0x0, &(0x7f0000000040)) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_INGRESS={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) (async)
vmsplice(r8, &(0x7f0000002880)=[{&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="0d330edadbcfba6463bc82db9430efd6368a9688e240b0d19be4befd529aec6c405bea1cd137e892898b9bdd4e32a453dd251422ab1cd8167e18eda067c574d58d5a15ae257fa25ccee69e638b98a811c0764e1e3bc76b83e94a830cdc858fce2d523bdd1c4a873458a051f62e729ae71a134de0c1d368c342f0decf9524ac76091c042cc0e95944baccd2a55d97abf5841e2445e0ddc5947f229f54dfb6d1d9bda1db4c4c73f0fb4fb69dfb7e60d9e02a66e73aab66a9469c08a4b76269eb58039d84bb", 0xc4}], 0x2, 0x6)
recvfrom(r2, &(0x7f0000004000)=""/4112, 0xfffffffffffffedc, 0x2080, 0x0, 0x0)

710.870666ms ago: executing program 3 (id=1747):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c000280"], 0x24}}, 0x0)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000540))
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000040000000900000008"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18150000", @ANYRES32=r4, @ANYBLOB="0000000000000000ffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000085000000050000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x15)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0e00010002"], 0x8)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r7, &(0x7f0000000200), 0x806000)
mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, 0xffffffffffffffff, 0x100000000)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYRES16=r8, @ANYRES32, @ANYRESDEC=r5], 0x48}, 0x1, 0x0, 0x0, 0x24004000}, 0x18080)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x10008080}, 0x4000800)
sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

664.599715ms ago: executing program 0 (id=1748):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@private1, <r0=>0x0}, &(0x7f0000000080)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x23c, 0x24, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x7, 0x5322e52dd82b6d92}, {0xd, 0xffe0}, {0xffe5, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x9}}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xc, 0x13, 0x8, 0xfff, 0x1, 0x5, 0x81, 0x9}}, {0x16, 0x2, [0x401, 0x7ff, 0xff, 0x1, 0x355, 0x8, 0x0, 0x3ff, 0x3]}}, {{0x1c, 0x1, {0x2, 0x3f, 0x9, 0x5, 0x0, 0x6, 0x0, 0x4}}, {0xc, 0x2, [0x1, 0xff37, 0x5, 0x6]}}, {{0x1c, 0x1, {0x81, 0x0, 0xaed5, 0x50, 0x1, 0x1, 0x9, 0x2}}, {0x8, 0x2, [0x75aa, 0x5]}}, {{0x1c, 0x1, {0x7, 0x6, 0x1, 0x401, 0x2, 0xf, 0x1ff, 0x5}}, {0xe, 0x2, [0x9, 0x4, 0xf6, 0x8, 0x100]}}]}, @TCA_STAB={0x14c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x65, 0x6, 0x5, 0x1, 0x3, 0xff, 0x1}}, {0x6, 0x2, [0xd]}}, {{0x1c, 0x1, {0x80, 0x0, 0x100, 0x6, 0x1, 0x80000001, 0x8, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x7f, 0xe, 0x6, 0x8, 0x0, 0x1, 0xfffffffc, 0x9}}, {0x16, 0x2, [0xd114, 0x2, 0x4100, 0x0, 0xa4, 0xb, 0x8a, 0x6, 0x4]}}, {{0x1c, 0x1, {0x7, 0x2, 0x66, 0x3ff, 0x2, 0x6, 0x4, 0x4}}, {0xc, 0x2, [0xa, 0x34, 0x2, 0x9]}}, {{0x1c, 0x1, {0x2, 0x9, 0xa, 0x8, 0x2, 0x7, 0x8000, 0x3}}, {0xa, 0x2, [0x6, 0x0, 0x7]}}, {{0x1c, 0x1, {0x1, 0x8, 0x6, 0xdd, 0x1, 0x401, 0x0, 0x6}}, {0x10, 0x2, [0x4, 0x2, 0x4, 0x10, 0x0, 0x101]}}, {{0x1c, 0x1, {0x0, 0x2, 0xa3, 0x8, 0x1, 0x40, 0x8001, 0x5}}, {0xe, 0x2, [0x4, 0xe90, 0x3, 0x7, 0xc70]}}, {{0x1c, 0x1, {0x1, 0x0, 0x6, 0x7d83, 0x2, 0x100, 0xd2, 0x1}}, {0x6, 0x2, [0x1]}}]}, @TCA_RATE={0x6, 0x5, {0x83, 0x33}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x4814}, 0x4008885) (async)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup/syz1\x00', 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x0, 0x0)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0xfd5e}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @alu={0x4, 0x1, 0xd, 0xa, 0x9, 0x0, 0x4}, @map_val={0x18, 0x2, 0x2, 0x0, r2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x7d, '\x00', r0, 0x25, r2, 0x8, &(0x7f0000000500)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x1, 0x8, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, r2, r2, r2]}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@fallback=<r4=>r2, 0xb, 0x1, 0x7, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0], <r5=>0x0}, 0x40)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000007c0)={@ifindex=r0, r3, 0x2a, 0x8, 0x0, @void, @value=r2, @void, @void, r5}, 0x20) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000800), 0xffffffffffffffff) (async)
ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000000a40)=<r6=>0x0) (async)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000fc0)={0x0, <r7=>0x0}, &(0x7f0000001000)=0xc)
sendmsg$netlink(r2, &(0x7f00000014c0)={&(0x7f0000000840)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001480)=[{&(0x7f0000000880)={0x1a4, 0x11, 0x10, 0x70bd2b, 0x25dfdbfc, "", [@typed={0x8, 0x23, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x18a, 0x44, 0x0, 0x1, [@generic="7b5522b4c6e2ae8bad9447db7378484ef40ce039c1b52d7166a37554e74d1680ebac5d06de08fc70d0d4eac66c8f7ca21f3571b67f637a8b356e188fdd6c2a6912d36006fc909ae476c840b4545d6e25633daacfffbdce7a0f0585b2a06b1cc6df56ddfd14578c10e3fd5fee575f7a677173667d9aedc9a718a3c3a797b94e5775398fee419a507ac87586834cdf6502e4e167aea519d2a46b352a25a5af", @generic="e947c2c8ca1f78c786fed2a7883d050c1bbcc60a7d63509d8d9ff3c001a0f871054b5f0b61feb487b013a9ba6ca6325f52c23ada67a20b17f79376e59f1bdc2389f90df31829de05c86097728ae22c718bc9a864a606ee58e10d9585900fd67cc3d3eea7152119ff6dbbfbd097099646e025fbde629c60b70f40c5f521b0c376bb87b70a81e4e657be2f01491eb6ef896033b00f9aa8c74542a9f6ce0db8388f38bb51ec7d3b0b7e3e0cb144c3ad3600f431bb652ad85f77bcde753f", @nested={0x4, 0x119}, @nested={0x4, 0xcd}, @nested={0x4, 0x10e}, @nested={0x4, 0x135}, @nested={0x4, 0x133}, @generic="d747d31f43e5c5768b75109055a684d456a41be2e0f9afe7"]}]}, 0x1a4}, {&(0x7f0000000a80)={0x540, 0x39, 0x20, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x28, 0x87, 0x0, 0x0, @binary="cd3dc29fd1c292f04f1949fb4ff14474e28142c44deed3e4abeb42d536de775a25d48abe"}, @typed={0x100, 0x72, 0x0, 0x0, @binary="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"}, @nested={0x3ea, 0x5f, 0x0, 0x1, [@generic="9a2ab60124929ce29b186e8ee7c5ac269371ae995b7fd76c028641aa03f46541005b610281d4eae8b79f938a7d1147402fafb7be840c561d00585f5b02b9e8e70cf650e32ccfb6069241e4429087ca7ec0d8ea7d3d501d49a709b11e875a3a746e9534838d739e", @generic="b3192f2b94d6798508f051e79940e843b3a1a96c8dd288725fe51b388af1fe06638779ca3939f923daac32", @typed={0x8, 0xdd, 0x0, 0x0, @ipv4=@multicast1}, @typed={0xa0, 0x14d, 0x0, 0x0, @binary="3008c0ad599a47ba71909a45d05422303154a28cf3244f0a4b8eba736eee72c8adee3de2db5f8c7804ee02dd627f5eefa78e19a223bc665c726a9cc9a9cb1c91c9c7de8ef614584c5df7e3d3e34d47686936ac95190d6df39a33e10eea85548d12bd4abcb34829fb8da4f1a0b84642fd9648521cc0f236dbd3669941763ec51831f91c3d6091f29fd6e50316af35a673773568541d770e2711e35997"}, @generic="19b684fe1959e0df16f9c929c11d48f102948a19b17afdad78f351c817313ee2bd429d43fa3168539807b4e6b0b5ad3792557c2da0968a64427665d69ce1c683a120a215d5199d8b4b4f080253efd631df8ca5687b9093c1e617a2a525fc6d135978a2e50dab117ac35468fdef3a46e1f9e274338a4f8354e1fa295045bc01155fe5bda8139c351d4729411624ff16ab1cb8c6a95a7a6bd0d2043ca73a3e87ea21f1f904d36284ef1ca7f35d0161a217ebff22d0f0af08aaf4a36221a28c379649cc5e6516bee15e2f0baae5988fdb4539c6ea16ee5e641d9617240c3ad8225854373c49455d92d799d9e8", @typed={0x8, 0xf0, 0x0, 0x0, @pid=r6}, @generic="51392fde8051afb51b7e737bf994e1984f050e9d2827fcc84ad57c85e5f6d80ac1343347ff43f8a5fcb33d3d81bf53793a33be7fd3842ce45f1b97bb6077bd35f8e3806b882d9865b8456d4151e149e696805efb5e4c7e52f8cee3df2fbfab564483c74dcee63819903884180f8894b1096a7276cf5bfa3c7aa06aed22e36d03e6656da3326e2f07f8b76ea73928477aac79e0e456b2e98407ad2149ec06901caf84490712400dc45f9e1be8ed3508fa326963c5459a6a8b6240a3f0c5f78551d3e0da233cf1ae70614d9cd19df91dad457d18281426768ef24d66faf99682fce1673cfa78f3a2a6b7c82fa142a4058940fd2fca12ef4bde", @typed={0x8, 0xbd, 0x0, 0x0, @fd=r2}, @generic="0330b9827d0b0e83eb92c97aaa42bf70143340d7de2f98572b5e1a5ed89cb16ebefc23bbf03cbb51", @generic="35987be1b654ecb666c6f16f9b139c4b9354f643742fd08dbc81bee3fc36f08747f246985c660b7ba3662e8782f28678fef84fa646d730f8d6dd9526400aeb11e06982e4d18cccf5394a5e41fdc7f2fdfc90c7dfe3e052f87f4fca69078e45474449a58402bdaf3b7b3750dd596c8abe2d7a17c89338eb912c8c8ac2ddc2a9f84eb8d6da617050eb2443411362453a7824"]}, @generic="153d4153e940c0e0e5044aa57e94c612b41d1cc3f19ad1efbe81"]}, 0x540}, {&(0x7f0000001040)={0x11c, 0x2f, 0x1, 0x70bd27, 0x25dfdbff, "", [@nested={0x104, 0xed, 0x0, 0x1, [@nested={0x4, 0x7e}, @generic="115951474ad5a8b7d90f5f558738407ab00187ed8e67a75fbc6a734a47a7f49af24178d72c633a9d3e2274c2906a4980bcd5176f687116f7529beb89a85dc0860dbaeec27d889f3c6270ba1356fbec13f36c", @generic="19824048cdcc2b2bcd09029812c86e404ee4b6dd1dbf21524c1f6f737d1cc0d04c1ee15bab5e9a4457102e77324ad590bcddadfd8f12c6539ff92211b8afd9b7b908112648faa7c3f897e8700f5110aca8e211dff05af270f9e59c2eaeb38a32a034b59f5a79a34481871923a7c18c722e10edfd011426ceef5a2eca96a4d5f083d942899e1b0c0d71c7bc8045cdd39b6e024027a3468ed30c9d9ad8d08f1d2ec8576f423a8a05bb09b5"]}, @typed={0x8, 0x4c, 0x0, 0x0, @uid=r7}]}, 0x11c}, {&(0x7f0000001180)={0x2f0, 0x39, 0x20, 0x70bd29, 0x25dfdbfb, "", [@nested={0x1e5, 0x112, 0x0, 0x1, [@generic="833e44c3eeb961df3e911c3eda544703497f22e0ce4796d2cb428bc36883c5775adcfa3c8a274e89fa3e54643816d1837c31bfd4140e09b2e660e318", @generic="df72d79e208d6bd11491ed5b2f81c51703d0f495eb79d1ce436050", @typed={0x8, 0x93, 0x0, 0x0, @u32=0x4}, @generic="5cfbbd894c94c3c2e7bf66322ffa6fac7b7c309cc47c7e3e5af63d00d6e48dae50d1ba7359938104d2d6096b927fa7ef105fafb15359523254f79f9e534743238f7d93bcba170105b7dfbe31e1dbec33", @generic="ed117ef85d291fd046f68b860b96cff87d1394cf6cb289734be787882942681af33d306d48e191efef7cc028a06b76e1490f79bd6a72aa2c9213aa32d99f31ccfca8001b36a0716c80b30b801f19ee0630c7d2e366f79cceb3f097e26489b0fcffdd59df776806871183cdca7852cf2b2533c5504584311be97b3cb72b909c516ec29ea681647e588a6fbb785281a17313320ec327c8eb2c58224cdb1dad0a64546541aea94275", @typed={0x4, 0x39}, @generic="450590aadf74676954e51434dfd5a5ac17307cc89b11f870db1982b2066c78092e623e0caf6770e8a6475771cf2b7d4a2e80a7ca68c1d89c54faf64c8e870f639953cf385fa59bab72f376b0c45a5f908f7766758b5c8c6bf79ca1aaa6ea6a9e4c137ec5dfe57a15a8f63aa2e4a2157d2b5e1ac6415c7cdc4c79555358ab6fc28dfc3cd9782271"]}, @generic="c76be439500868893b3fe38b20f1aa26a31d7ee26e3292b7f4819ebf5a262567924b7f095bc0fbfc33aa05d039c686c2c36d9b0a4cddd4d9793cb86065d170de99c46cadfa14ad4a", @generic="2ee8", @nested={0x45, 0xfa, 0x0, 0x1, [@nested={0x4, 0x91}, @typed={0x4, 0x2b}, @generic="c18ff641ab323d4cfb0bb81f0929dcfcbceb7e1b622e5ba6263d68f31de7c53688c5478d98", @typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@mcast2}]}, @nested={0x10, 0x148, 0x0, 0x1, [@nested={0x4, 0x6d}, @typed={0x8, 0x85, 0x0, 0x0, @u32=0x6bfc4e2e}]}, @generic="cf3c0bf3961150d90ba95192dfab7dcef84c9de438383979fc197acd440d7622bd6d3cbec97895b6ce0fa071f4f2acf3b3e51c79d095333972b9772bfcb02aa358170ea7af569ab93840b440c2f01d2ea48a793d2a"]}, 0x2f0}], 0x4, 0x0, 0x0, 0x800}, 0x8000) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001500)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$EXT4_IOC_SWAP_BOOT(r8, 0x6611)
r9 = socket(0x1f, 0x800, 0x30)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000001540)={'syzkaller0\x00'}) (async, rerun: 64)
ioctl$XFS_IOC_BULKSTAT(r9, 0x8040587f, &(0x7f0000001940)={{0xc, 0x1, 0x5, 0x8000, 0x8}, &(0x7f0000001580)=[{}, {}, {}, {}, {}]}) (async, rerun: 64)
getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f00000019c0)={<r10=>0x0, 0x1}, &(0x7f0000001a00)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r9, 0x84, 0x6d, &(0x7f0000001a40)={<r11=>r10, 0x92, "b288a06cffb9d48fa709c1b4242c04994b2486fc5b8ba994a0a9211f4371ec9d6f8ac0513d1406268b50310bc905ec007c01108c07b555d97531dfab662f28f05610ba32cf7d83330ce206b1d4e25ee7ac5abb7bb7093e1d108be031484513c83c86cc4433c31306386a16b091a3052461e5011091784f3ce18f9bb246605158c56dd57d474eb6b51de9d6f6b22a798118ba"}, &(0x7f0000001b00)=0x9a) (async)
bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001b40)={0x9, <r12=>0x0}, 0x8)
r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001b80)={r12, 0x9, 0x18}, 0xc)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001bc0)={0x1b, 0x0, 0x0, 0x9, 0x0, r13, 0x3, '\x00', 0x0, r4, 0x1, 0x2, 0x3}, 0x50) (async, rerun: 64)
r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000001c80), r2) (rerun: 64)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x24, r14, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x24040014)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001e00)={'syztnl1\x00', &(0x7f0000001d80)={'sit0\x00', 0x0, 0x8, 0x7, 0xe1c7, 0x7478, {{0xa, 0x4, 0x0, 0x11, 0x28, 0x67, 0x0, 0xb, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @timestamp={0x44, 0x10, 0xb0, 0x0, 0xc, [0x3, 0x3, 0xffffffff]}]}}}}}) (async, rerun: 64)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000001e80)={r11, 0x10, &(0x7f0000001e40)=[@in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000001ec0)=0x10) (async, rerun: 64)
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0x4010942a, &(0x7f0000001f00)={0x0, 0x4}) (async)
epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r4, &(0x7f0000001f40)={0x30002000}) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
socketpair(0x3, 0x800, 0x8, &(0x7f0000001f80)={<r15=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_CONTEXT(r15, 0x84, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0x8)

592.158077ms ago: executing program 4 (id=1749):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000200)={{r0}, 0x7, 0x3, 0x2}) (async)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) (async)
socket$tipc(0x1e, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0)
socket$unix(0x1, 0x1, 0x0) (async, rerun: 64)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 64)
close(r3)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async, rerun: 32)
r4 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 32)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0) (async)
r7 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x5, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x3}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x694, 0x51, 0x8001}, {0x3, 0x8004, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x3, 0x3, 0x6, 0x3, 0x400000, 0xffffffff}, {0x685, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x7, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffa, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x40, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x8, 0x87, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x7}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x3215813f, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x6, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x4, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x2, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0x3, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0xb, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x80000009, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x0, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x9}, {0x7, 0xd, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x1, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0x800000b, 0xb, 0x2004}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x4}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0xd, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x4, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0xfff, 0xb8c, 0x6, 0x21761f6a, 0xfffffffe, 0x4}, {0xffd, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x3, 0x8, 0xfa2f}, {0x10, 0x5e20, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x1, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x9, 0x1, 0x7}, {0x20000002, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x20000006, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000, 0x0, 0xfffffff9}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x104, 0x78d, 0xffffcff9, 0x9}, {0x2001, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x3}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, 0x0, 0x10c}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000380)="da", 0x14}], 0x1}, 0x4000880) (async, rerun: 32)
socket$kcm(0x11, 0xa, 0x300) (async, rerun: 32)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000140), r5) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

520.260685ms ago: executing program 0 (id=1750):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0xc00, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff78, 0x1, 0x0}, &(0x7f0000000340)=0x88)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}], 0x1, 0x20000040)
writev(r1, &(0x7f0000001d80)=[{&(0x7f0000000180)="5cfc2b6553790dafb4261df41febef469ae1d78524775a8597dea0912512bb94c54ce9e1666bcf3ed138d034cce49ac5f59339c094d9c7568116e93ec3fb89f8f059a5d9a1411eb854eabd38d35f78318d7c4b1932b87e56b20dda96d31df7df6ea2917e6a7fa836fdc338209d64eecd2b35df592a39fb0352e2159481e8d0b22ce106f5fc996a68758108a9e9ccae7f1cd59b7e49de558a47707101548833d917df08cb5a63184c891bd263e681f0bc503b36008dfc9736a4c6dfdeebf40a96", 0xc0}, {0x0}, {&(0x7f0000001b00)="d0e5a776f0bcddc52c1c2874ff9b3a40837c14", 0x13}, {0x0}, {&(0x7f0000001c80)="178b14026a46be23fd7c9f9a9e34be4028cd4312afdae19dae70c9b2edf843eb0469ebad35dc8cb61f340ac48eb3187d5abaaad7a94fe5e2dbc73abae098dd330cef006bac06f16d9756c7b9f97d66c649e5d608301706c5", 0x58}], 0x5)
recvfrom$packet(r1, &(0x7f0000000a00)=""/236, 0xec, 0x10140, 0x0, 0x0) (async)
recvfrom$packet(r1, &(0x7f0000000a00)=""/236, 0xec, 0x10140, 0x0, 0x0)

393.792078ms ago: executing program 0 (id=1751):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB="050000000024f3154e5f3347a21200"/29, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000100"/28], 0x50)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x11, &(0x7f0000000840)=ANY=[@ANYBLOB="180000003008000000000000d506000018110000", @ANYRES32=r0, @ANYBLOB="0000000000080000b702000014000000b7030000000000000083000000bf090000000000550901000000000095000000000000001821000000000054acbcc4cfe3d332a63f46193b862b7a691c3f08444d4b97c1eb27f52934f57b6109a27211e961f966c6b591b37f0c81d100c820fca2a8f6b0a600e4cfe54bdba7cf914c40b3d568c4845f135553a6cf8a57319618344bbe022782063bfb82eff9c76c5439965f80aee5ab83ab4e2418535f07549acbe403ccfab6b671fd21705ecf2d3fd19b450b76d9e1aefb81f22131e10ac386b3541201039d8610c877d3b62cdfbf2e3fac4062ba85ecf2b03c9e8e86bd", @ANYRES32, @ANYBLOB="0000000003000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x18, 0x31, 0x2, 0x5, 0x0, 0x0, 0x25dfdbff, [@sadb_address={0x3, 0x5, 0x0, 0x20, 0x0, @in={0x2, 0x300, @broadcast}}]}, 0x28}}, 0x0) (async)
ioctl$int_out(r1, 0x0, &(0x7f00000007c0))
r2 = socket$inet(0x2, 0x3f79128290220a7f, 0x3)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000400}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x3c, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_LINKMODES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (async)
ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000800)={'ip6tnl0\x00', {0x2, 0x0, @local}})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r4=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000a80)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000ac0)=0x14)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x7c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x7f}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x7}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40004}, 0x8050) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', r4, 0x20, 0x80, 0x1, 0x5, {{0xf, 0x4, 0x1, 0x4, 0x3c, 0x68, 0x0, 0x9, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x24}, {[@rr={0x7, 0x27, 0xe1, [@loopback, @multicast1, @broadcast, @broadcast, @local, @broadcast, @broadcast, @loopback, @broadcast]}]}}}}})
r7 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
mkdirat$cgroup(r10, &(0x7f0000000080)='syz1\x00', 0x1ff) (async)
r11 = openat$cgroup(r10, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0)
mkdirat$cgroup(r11, &(0x7f0000000380)='syz1\x00', 0x1ff)
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r9) (async)
sendmmsg$alg(r9, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) (async)
recvmsg(r9, 0x0, 0x23)
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) (async)
sendmsg$GTP_CMD_GETPDP(r9, 0x0, 0x81)
socket$nl_route(0x10, 0x3, 0x0)

199.799085ms ago: executing program 4 (id=1752):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
sendfile(r2, r2, 0x0, 0x8) (async)
close(r2)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e80)=@newtaction={0xbc, 0x30, 0x1, 0x0, 0x25dfdbfe, {}, [{0xa8, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x78, 0x1, 0x0, 0x0, {{0x8}, {0x50, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}, @TCA_IFE_METALST={0x30, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x8, 0x3, @val=0xfffffffe}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x7, 0x3, @val=0xa53d}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}]}, {0x4, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8010}, 0xc0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) (async)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
socket$kcm(0x29, 0x2, 0x0) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000e8008000b0006000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async)
r8 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r8, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000180)="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", 0x1d2}], 0x2}, 0x4014)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0d00000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x48)
recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff})
sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12)
sendmsg$NFC_CMD_START_POLL(r12, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="0100230100003402000007000000080001"], 0x1c}}, 0x0)
recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
close(r10)

180.751466ms ago: executing program 0 (id=1753):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000280)={'veth1_to_bond\x00'})
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r2 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

179.235439ms ago: executing program 3 (id=1754):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002)
socket(0x10, 0x803, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40c0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffe5}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004805d}, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r1, 0x10040)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x4, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0)
accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10d0}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x48046}, 0x0)

120.044837ms ago: executing program 2 (id=1755):
sendmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000006780)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x11d0}}, {{&(0x7f0000003c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x200005, 0x2, 0x3, 0x1}}, 0x80, &(0x7f0000003d00), 0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="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"/528], 0x210}}, {{&(0x7f0000003f80)=@l2tp6={0xa, 0x0, 0xffb, @empty, 0x9, 0x2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004000)="9069c8b1ad9c75c0831b6f3d638017a30de699626c5d22ce72141b105963ee912340bf57a9699bc1c2e3720a5a3f94d0d579b7b4b189594cf273e5f0de0fb4ece40666062d0022b99c4f1b8047efbb020f8543c1c3f66910b5b80454b09ffc8f640dce7cc93537ea9f261eb67a41feea6b2f8198d06bfb511a23d59a9806faa92727896a7251b2cf91071491127f32b97eb82513cfcc935a1537114dc72122a3e51801d5978dfae0cfa5f7c2fed70bfff3d8771e1d2d6277649c64da7ffc20ce3004252390e811fe20a2d4d98a46b119a5dae072b2422deeb14c", 0xda}, {&(0x7f0000000980)="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", 0x117}, {&(0x7f0000004200)="cc9e891ea95ac8ed0a6dec3ca9412a2a7a2685e956b2a55558e52c676055f06045cd87bd87bd204bb68b9145599ac104c7330f696d20194e3815306a86d25924529acbce6c3b62ef4d05d325b5d76c", 0x4f}, {&(0x7f0000004280)="1282d36bfb3b7f987f7422ce9396609c76f6aa2ace584b1b1c007b532b3d06fab499462916ec6e4e6435704d213a8eed48cbc0ac7f01c01e8674a5a1d9646776eeea9ccc2587a52fac69dcd25be1d7d4cc14a9071fb0a5125d9c7e8788df07d6c1aa9940ca534517d0d6183ed8aa7e99d2ab7c57083962ea770c8962f8e5ec632fc820e2c656", 0x86}, {&(0x7f0000000600)="4b8bd4fa8961ecabf22ae3b3cd7043ed7a2f27e615e688f90981645bc3c1faf55a01f86ea00bcffcd10caf20643264ddd76d18f017dfb879a401bec29e5452b76c7f202286589c956c7830f291e2d1b6bb3d374efba63ad695dd8a6ab92fafbfb88ef755215bf2dd1c4661f2ac1e3fd9fa3c8c6d5b691a2b5a487873d3a24b09e2a76b77759485e8b40cab71465b80858eacffbb8f1074018cf21be301b454f014048148d29e4086ee8e7c883f0dff1067728df49715c75c375b6fffe2cde4aadf5c1e32aa0606c9758943ce7170260ca08080e5b90298054b02f442b7e1db", 0xdf}, {&(0x7f0000000ac0)="c83860afc7d6a1701a16d47b40a4f58504892945c810422e0957576c2bdafb957678a00d2b4c3d5b538e548feabf63b1f79c18c59b4e32cae94410fe7ead91d15b8d25a07f6de06f5ab9168388a7f0b24d7b9b7464fd60c75904c6fe2df68ab9b0fd761f37457a379f66af7848f1247e719a96997e03589ffc35c2da5bc5de8034e965e519d8eb7288dc2f86e2f28ff8ea71084681041fdc6de2cf6e92e710ee9a6f1674b29b044982189731898abe10147b7aabf70cad2d925ddcb24550793279bf", 0xc2}, {&(0x7f0000004480)="4675cdc76b0cd6885be02b7827394dc8eebf9b21e5705471a12c6c600997", 0x1e}], 0x7, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0], 0x1a0}}, {{&(0x7f0000004700)=@generic={0x28, "5d771866b1ee067f7f11250b02dae223ece629dfa7807502e8f1edb996b2c5cd5a2f8e1ff4bea1ec95a42842400d0a2d32e89eb53ed6f3dfd76bb9b976eba9d0b892a55f2d42410938ab297590c59d65d8e594773c7ac7e925ba04786f8258e99e5cf51da4a4a8d2ef53fe0c6e34f5bb038c5d4cf81fc18b7d3da16184be"}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000000940)="7b8a69eaeca61bc1f0041df93ec4a31271bf57ff3dcc472d900d2e62da6ddef96857c84a211e6cd207e6919363a5d6a273841a0b9a80167085a4fb2446faa0", 0x3f}, {&(0x7f00000047c0)="75b920644aa26ebb5ebd9a0910d92a675dfb93e5547abfe5698b55873e3e729f13e3ab93cbd401eba356b23a91c7940ae80f611b023b877354bcb16d0905663591dd4fbb1a08382afd2f5007e9b9114cf4a39d15bed0c233127eae9963d2cbdb2128c54fe99f01b3ebc6462a3c4852a4ec995b0365eeb334e05816e7ae3aee5cd0267e47b834e4f825c31c5ff5fecb556a9349d7eb41d87eb91d0e16177fe9a0010665498ac1cb7ed92b8fdba58b17705e6e63b620958d690a9483cd942ab3d2f787d18c2130046364c491b2808e1ebf33da3c1055ae5998df3c2ed5c5c055f42e451adb953e68f6d24e4d35f4e91f0dd018a2ea", 0xf4}, {&(0x7f0000000440)="37c414ead78ce9a85b2525c070b1134bdf9cbf0e146de4c35ac14068ff85e02c80e934c63c645c7f8fa0e0c0a9de301f9702c755d374eb0fb01303bd20be001f44d517b394ee8cc3592f9b5d6694cfae50d823e564a8b0b232965a050cb980f454989adf219b3d0decf98d854ecee3be5bdf7824c6d5aea57a24e75ccc9673af01593206ac3aecd1591860a43dff4c1fc6cbe466ebd88c3c05d904e723c66d7951dcc92194785bb0b95c1fad7e29cf03857db9568797aaa7bcb95b19c561a2e138b6c3f7a18079079cf0654826f4d36bf164206baa1e1c9da4c3e5e9101c12ac62dde65c705d93958357142267c3c6", 0xef}, {&(0x7f0000004980)="fdf743b261dd09f440f627691504ef573743587e43a785bf69c480d5124b0308c76c6b4a698a30d75e3d46dba6f00c347d2457e0bc60003d13e73acb3f1f364414136a02000000000000000eaeeb4ebbedaa2a118d00", 0x56}, {&(0x7f00000001c0)}, {&(0x7f0000004ac0)="802cd10a4d89a7a45df9ffd22bbf2a55300f766dc60bd24992db53d8f638f644458ad1c107bb686d6f6e4e69f69297b6f28a1f76a65aa63ab0431f16712bd4cbb429947223233626f44a14fe29124af83c445b2c9354dcfed62162f597ab8d8816de9792354282eb321959298b76de7874b04dada3e8", 0x76}], 0x6, &(0x7f0000004bc0)=ANY=[], 0x1448}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f00000060c0)="00eeefaf8123221a1e19cd79076797defb1762750b9049966adc8cc2ea5343905d3e1e04049628e48ad4bc80d7fbb2b1542d79cef4a285f9835bc8ac658205077f9576a97bba8ffdea68a0cffc28c2cbc2c0f12a2a4f69539edd02b7e11072b7dce8db4d66535c75d8ecb2dbf6d91903ad4b6974a8251ff1d1f6dcd94fa107eaa25578afc413846bad763ff5ca7dcc356c6a61ff01ef5517b35a3758902c661d7bdf6bb1ef29cf99fb8445c8de16d9b2782ba5cdb537271b3465f1bc394256c8a33decdf62d958d0c330ec55b019a404c58e9d1cc0e59d1363c3e576dc6d", 0xde}, {&(0x7f00000061c0)="374f8cd59ae59035ebcf8034c432509616a7a860dbd74f7930b859f89b4d32e56b13", 0x22}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x138}}, {{&(0x7f0000006300)=@ll={0x11, 0x11, 0x0, 0x1, 0x2, 0x6, @broadcast}, 0x80, &(0x7f00000065c0)}}], 0x6, 0x804)
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a0707070000002bbd7000fddbdf2505001a00ac1414bbddffffffffffffff00000000fe80000000000000000000000000000c260014ca"], 0x38}}, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x2, 0x5, {{0x1b, 0x4, 0x2, 0x1b, 0x6c, 0x68, 0x0, 0x80, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@noop, @timestamp={0x44, 0x24, 0x3d, 0x0, 0x9, [0x7, 0xa3a, 0x4, 0x0, 0x6, 0x8, 0x5, 0x3]}, @timestamp_addr={0x44, 0x14, 0xd4, 0x1, 0xa, [{@private=0xa010102, 0x9}, {@multicast2, 0x2a}]}, @rr={0x7, 0x7, 0xd6, [@multicast1]}, @noop, @end, @generic={0x86, 0x12, "484cfce182adcfaf7bd92ac00a8595dc"}, @rr={0x7, 0x3, 0xa3}, @noop]}}}}})
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB="4400000010000104000800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000c000000000005000d0001000000"], 0x44}}, 0x0)
getsockname$unix(0xffffffffffffffff, &(0x7f00000008c0)=@abs, &(0x7f0000000540)=0xfffffffffffffe5e)
socket(0x10, 0x803, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$pppoe(0x18, 0x1, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0)
r6 = accept4$alg(r5, 0x0, 0x0, 0x800)
sendmsg$alg(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000004c0)="3a82188912", 0x5}, {&(0x7f00000005c0)="f422a321c2", 0x5}], 0x2, 0x0, 0x0, 0x4008080}, 0x20044081)
connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x240008c1}, 0x4000000)
connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x5, @remote, 'gre0\x00'}}, 0xfffffcde)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
socket$kcm(0x2, 0x3, 0x2)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', <r8=>0x0, 0x0, 0x700, 0x7ff, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x2000, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @loopback}}}})
r9 = socket$inet6(0xa, 0x3, 0x2)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000005c00)=ANY=[@ANYBLOB="1e00000000000000ff000000ac00000090280000", @ANYRES32, @ANYBLOB="0400000000000000000000050000000000000000", @ANYRES32=r8, @ANYRES32, @ANYBLOB="0000000003000000020000000f00"/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000005c80)={&(0x7f00000002c0)="b0dad7d80cfc1f70c0b8cdfd511ebfa874f5bdc2d0d9f348d0e19eb960bc5ea76fd22dc0b8069910348c60fcbf3623cfc4c00fccf538317edf7fa4a1d5b19964a7cddc6757b279dbac92067be3de9cb31c99a134a3ed7b6d93b1975250c6ec060096a223a537af9a28f2052b4444c2599392563db91aa3185beb97d95efb7038d34ea7911e6783a188a3622bb95b4defdcc41649cb1bf553f3148e0cdb1b9b753428587813dc061567fa5835c6de8e3016433ae90148b42508acd67b612395ddeb84ac68d03668dbce902dd638a8fbcddcc14d59af46ffdbd5c9bab281491ec7cb73ad3111a5f2e6f6c0bd35b6a61c4075bb", &(0x7f00000003c0)=""/80, &(0x7f0000004bc0)="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", &(0x7f0000005bc0)="fdea2ccc5470e34c9e89c34c61daaa195965219b7aa339604ee35a153bfd48e0082dfe5040cb16d01d41c9023b1a41516605089f2eeafe70b308cf1c051115", 0xffffff97, r10}, 0x38)
connect$inet6(r9, &(0x7f0000000240)={0xa, 0x4e25, 0x400, @empty, 0x100007}, 0x1c)
sendmmsg(r9, &(0x7f00000092c0), 0x4ff, 0x0)

119.374115ms ago: executing program 0 (id=1756):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x840)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef)
write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000e80)=@ethtool_perm_addr={0x4b, 0x44}})

28.511952ms ago: executing program 1 (id=1757):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000380)=ANY=[@ANYBLOB="68020000000501040000000000000000030000065402010002000000000200000909f4e015812c"], 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async)
syz_emit_ethernet(0x1be, &(0x7f0000000640)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x188, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment, @hopopts={0x0, 0x29, '\x00', [@ra, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @generic={0x0, 0x4d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028de"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x32, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379"}, @calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}]}]}}}}}}}, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x10000, 0x4) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) (async)
r3 = socket$netlink(0x10, 0x3, 0x8)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'netpci0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async)
getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68)
preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/26, 0x1a}], 0x1, 0x8, 0x2)

14.441334ms ago: executing program 4 (id=1758):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000001800)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000001780)=0x4, 0x0}, 0x20) (async)
mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x2000008, 0x12, r0, 0x31c42000) (async, rerun: 64)
socket$packet(0x11, 0x3, 0x300) (async, rerun: 64)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000580)={r3, 0xffffffffffffffff, 0x7}, 0x14)
ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000000)) (async)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x21, 0x5}, 0x4) (async)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) (async)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000004000000850000006100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000bc02000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x4e68, 0x10}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x19, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@jmp={0x5, 0x0, 0x6, 0x5, 0xa, 0x18, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0xb7b, 0x0, 0x0, 0x61980, 0xc, '\x00', r6, 0x0, r0, 0x8, &(0x7f00000005c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x3, 0x6, 0x8, 0xfffff2da}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000680)=[r1, r7, r0, r1, r8, r0, r0, r2], &(0x7f00000006c0)=[{0x5, 0x3, 0xe}, {0x2, 0x1, 0xa, 0x1}, {0x4, 0x2, 0x0, 0x9}, {0x3, 0x1, 0x1, 0xc}, {0x5, 0x3, 0x1, 0x1}, {0x4, 0x4, 0x3, 0xc}, {0x5, 0x1, 0xc, 0x3}], 0x10, 0xf}, 0x94)

0s ago: executing program 3 (id=1759):
r0 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f00000000c0)={0x0, @aes128, 0x0, @desc4})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020001ffffffff000000000000f3008500aa00270000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000009b0000009500000000000000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

th.
[   74.827561][ T6095] .`: renamed from bond0 (while UP)
[   74.893968][ T6102] netlink: 'syz.4.73': attribute type 11 has an invalid length.
[   75.188441][ T6125] Cannot find del_set index 0 as target
[   75.393651][ T6132] warning: `syz.4.79' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   75.771208][ T6154] : entered promiscuous mode
[   75.832149][ T6154] openvswitch: : Dropping previously announced user features
[   76.194982][ T6171] netlink: 'syz.4.91': attribute type 10 has an invalid length.
[   76.325928][ T6174] __nla_validate_parse: 43 callbacks suppressed
[   76.325952][ T6174] netlink: 64 bytes leftover after parsing attributes in process `syz.3.92'.
[   76.392219][ T6174] syzkaller1: entered promiscuous mode
[   76.406039][ T6174] syzkaller1: entered allmulticast mode
[   76.681976][ T6197] netlink: 'syz.3.97': attribute type 1 has an invalid length.
[   76.822456][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'.
[   77.021826][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.99'.
[   77.446709][ T6228] ieee802154 phy0 wpan0: encryption failed: -22
[   77.457993][ T6235] netlink: 56 bytes leftover after parsing attributes in process `syz.4.107'.
[   77.481820][ T6228] netlink: 'syz.2.106': attribute type 9 has an invalid length.
[   77.504868][ T6228] netlink: 'syz.2.106': attribute type 6 has an invalid length.
[   77.575792][ T6228] netlink: 'syz.2.106': attribute type 7 has an invalid length.
[   77.602945][ T6228] netlink: 'syz.2.106': attribute type 8 has an invalid length.
[   78.456244][ T6254] netlink: 68 bytes leftover after parsing attributes in process `syz.3.110'.
[   78.639039][ T6257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.111'.
[   78.650611][ T6257] netlink: 48 bytes leftover after parsing attributes in process `syz.1.111'.
[   79.849624][ T6203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   80.248858][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.121'.
[   80.272779][ T6310] ip6t_rpfilter: unknown options
[   80.336977][ T6313] netlink: 12 bytes leftover after parsing attributes in process `syz.4.125'.
[   80.556634][ T6326] syzkaller0: entered promiscuous mode
[   80.562366][ T6326] syzkaller0: entered allmulticast mode
[   80.781146][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.788574][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.838017][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   80.848874][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   80.900374][ T6012] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.911211][ T6012] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.923569][ T6012] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.932516][ T6012] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   80.971844][ T6341] netlink: 'syz.4.133': attribute type 7 has an invalid length.
[   80.983146][ T6342] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[   81.026130][ T6346] netlink: 12 bytes leftover after parsing attributes in process `syz.4.134'.
[   81.046874][ T6346] 8021q: adding VLAN 0 to HW filter on device bond1
[   81.060462][ T6346] gretap1: entered allmulticast mode
[   82.688705][ T6354] __nla_validate_parse: 1 callbacks suppressed
[   82.688719][ T6354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.137'.
[   82.947794][ T6268] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   83.152682][ T6362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.140'.
[   83.307685][ T6372] macvtap0: entered promiscuous mode
[   83.389153][ T6376] netlink: 20 bytes leftover after parsing attributes in process `syz.2.145'.
[   83.458436][ T6380] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode
[   83.469229][ T6380] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode
[   83.493303][ T6380] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   83.572088][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'.
[   83.598926][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.150'.
[   83.629935][ T6390] netlink: 'syz.0.149': attribute type 11 has an invalid length.
[   83.684351][ T6400] netlink: 48 bytes leftover after parsing attributes in process `syz.3.152'.
[   83.694661][ T6398] netlink: 2712 bytes leftover after parsing attributes in process `syz.4.151'.
[   83.726182][ T6395] bond1 (unregistering): Released all slaves
[   83.742258][ T6019] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   83.752318][ T6019] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   83.780920][ T6019] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   83.805869][ T6019] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   83.901908][ T6406] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[   83.940022][ T6408] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   84.042125][ T6422] trusted_key: syz.1.155 sent an empty control message without MSG_MORE.
[   84.057988][ T6423] netlink: 'syz.3.157': attribute type 1 has an invalid length.
[   84.158201][ T6434] netlink: 132 bytes leftover after parsing attributes in process `syz.4.159'.
[   84.226417][ T6436] xt_CT: You must specify a L4 protocol and not use inversions on it
[   84.237342][ T6436] 8021q: VLANs not supported on ip_vti0
[   84.309709][ T6443] netlink: 'syz.0.162': attribute type 1 has an invalid length.
[   84.770491][ T6412] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[   84.916347][ T6469] xt_bpf: check failed: parse error
[   84.930453][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'.
[   84.960338][ T6461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'.
[   85.022236][ T6472] lo speed is unknown, defaulting to 1000
[   85.063762][ T6472] lo speed is unknown, defaulting to 1000
[   85.113288][ T6472] lo speed is unknown, defaulting to 1000
[   85.451249][ T6514] openvswitch: netlink: IP tunnel dst address not specified
[   85.469830][ T6515] netlink: 'syz.0.180': attribute type 4 has an invalid length.
[   85.586459][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.628111][ T6522] veth1_macvtap: left promiscuous mode
[   85.746872][ T6472] infiniband syz1: set active
[   85.751682][ T5708] lo speed is unknown, defaulting to 1000
[   85.766465][ T6472] infiniband syz1: added lo
[   85.780994][ T6472] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[   85.806477][ T6472] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[   85.842806][ T6472] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[   85.864232][ T6472] RDS/IB: syz1: added
[   85.868339][ T6472] smc: adding ib device syz1 with port count 1
[   85.878025][ T6472] smc:    ib device syz1 port 1 has no pnetid
[   85.885137][ T5708] lo speed is unknown, defaulting to 1000
[   85.891948][ T6472] lo speed is unknown, defaulting to 1000
[   86.258294][ T6554] netlink: 'syz.1.192': attribute type 4 has an invalid length.
[   86.270260][ T6554] .`: renamed from bond0 (while UP)
[   86.283841][ T6472] lo speed is unknown, defaulting to 1000
[   86.284917][ T6554] openvswitch: netlink: Tunnel attr 138 out of range max 16
[   86.572080][ T6568] macvlan2: entered allmulticast mode
[   86.580621][ T6568] erspan0: entered allmulticast mode
[   86.598578][ T6569] netlink: 'syz.1.197': attribute type 13 has an invalid length.
[   86.620376][ T6569] netlink: 'syz.1.197': attribute type 17 has an invalid length.
[   86.636970][ T6472] lo speed is unknown, defaulting to 1000
[   86.757931][ T6569] 8021q: adding VLAN 0 to HW filter on device .`
[   86.895069][  T810] cfg80211: failed to load regulatory.db
[   86.915253][ T6592] netlink: 'syz.0.204': attribute type 1 has an invalid length.
[   87.008556][ T6472] lo speed is unknown, defaulting to 1000
[   87.060142][ T6592] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.235968][ T6598] syzkaller0: entered promiscuous mode
[   87.263808][ T6598] syzkaller0: entered allmulticast mode
[   87.318166][ T6472] lo speed is unknown, defaulting to 1000
[   87.499023][ T6611] 5�: entered promiscuous mode
[   87.609941][ T6616] sctp: [Deprecated]: syz.1.209 (pid 6616) Use of int in maxseg socket option.
[   87.609941][ T6616] Use struct sctp_assoc_value instead
[   87.697319][ T6626] __nla_validate_parse: 15 callbacks suppressed
[   87.697340][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'.
[   87.768909][ T6626] bond1: entered promiscuous mode
[   87.803741][ T6626] 8021q: adding VLAN 0 to HW filter on device bond1
[   87.881075][ T6636] syzkaller0: entered promiscuous mode
[   87.918531][ T6636] syzkaller0: entered allmulticast mode
[   87.967496][ T6640] syzkaller1: entered promiscuous mode
[   87.982847][ T6640] syzkaller1: entered allmulticast mode
[   88.070034][ T6653] netlink: 'syz.3.221': attribute type 2 has an invalid length.
[   88.184360][ T6658] : renamed from veth0_to_bond (while UP)
[   88.199517][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'.
[   88.231940][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'.
[   88.248526][ T6656] 8021q: adding VLAN 0 to HW filter on device bond2
[   88.315386][ T6661] bond2: Invalid ad_actor_system MAC address.
[   88.326550][ T6670] netlink: 'syz.1.226': attribute type 1 has an invalid length.
[   88.334299][ T6661] bond2: option ad_actor_system: invalid value (7)
[   88.343296][ T6661] bond2 (unregistering): Released all slaves
[   88.619929][ T6692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.232'.
[   88.638629][ T6694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'.
[   88.674245][ T6698] netlink: 'syz.1.232': attribute type 31 has an invalid length.
[   88.836703][ T6675] lo speed is unknown, defaulting to 1000
[   88.851040][ T6690] xfrm0: entered allmulticast mode
[   88.944434][ T6690] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[   89.061758][ T6708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.238'.
[  109.499039][ T6741] syzkaller0: entered promiscuous mode
[  109.510399][ T6741] syzkaller0: entered allmulticast mode
[  109.523243][ T6740] syzkaller0: entered promiscuous mode
[  109.531682][ T6740] syzkaller0: entered allmulticast mode
[  109.547659][ T6741] tipc: Started in network mode
[  109.556335][ T6741] tipc: Node identity 06fcdacb9245, cluster identity 4711
[  109.564375][ T6741] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.591774][ T6735] tipc: Resetting bearer <eth:syzkaller0>
[  109.625455][ T6735] tipc: Disabling bearer <eth:syzkaller0>
[  109.781395][ T6755] bridge_slave_0: left allmulticast mode
[  109.787866][ T6755] bridge_slave_0: left promiscuous mode
[  109.797475][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.810766][ T6760] netlink: 'syz.4.246': attribute type 10 has an invalid length.
[  109.826125][ T6755] bridge_slave_1: left allmulticast mode
[  109.850778][ T6755] bridge_slave_1: left promiscuous mode
[  109.860887][ T6760] netlink: 228 bytes leftover after parsing attributes in process `syz.4.246'.
[  109.872040][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.887775][ T6755] .`: (slave bond_slave_0): Releasing backup interface
[  109.912163][ T6755] .`: (slave bond_slave_1): Releasing backup interface
[  109.943143][ T6755] team0: Port device team_slave_0 removed
[  109.960431][ T6755] team0: Port device team_slave_1 removed
[  109.969509][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  109.978378][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_0
[  109.990382][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.011079][ T6755] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.031463][ T6755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  110.077616][ T6019] tipc: Subscription rejected, illegal request
[  110.192519][ T6010] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  110.234868][ T6010] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  110.253929][ T6010] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  110.291661][ T6010] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  110.346725][ T6794] ieee802154 phy0 wpan0: encryption failed: -22
[  110.386186][ T6798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  110.537940][ T6807] veth0_macvtap: left promiscuous mode
[  110.926594][ T5622] block nbd0: Receive control failed (result -32)
[  110.926594][ T5621] block nbd0: Receive control failed (result -32)
[  110.989729][ T6844] netlink: 'syz.1.263': attribute type 1 has an invalid length.
[  111.006994][ T6844] netlink: 112 bytes leftover after parsing attributes in process `syz.1.263'.
[  111.135815][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.266'.
[  111.146225][ T6851] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.151887][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.2.266'.
[  111.198341][ T6853] ip6gre1: entered promiscuous mode
[  111.224861][ T6853] ip6gre1: entered allmulticast mode
[  111.378514][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'.
[  111.522146][ T6878] netlink: 'syz.0.272': attribute type 1 has an invalid length.
[  111.625774][ T6891] netlink: 'syz.4.275': attribute type 1 has an invalid length.
[  111.645409][ T6878] 8021q: adding VLAN 0 to HW filter on device bond1
[  111.681289][ T6891] netlink: 'syz.4.275': attribute type 6 has an invalid length.
[  111.739842][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.275'.
[  111.808071][ T6891] netlink: 'syz.4.275': attribute type 3 has an invalid length.
[  111.874231][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'.
[  111.952358][ T6913] netlink: 'syz.1.280': attribute type 1 has an invalid length.
[  112.063884][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'.
[  112.306866][ T6937] lo speed is unknown, defaulting to 1000
[  112.775791][ T6969] Bluetooth: MGMT ver 1.23
[  112.871045][ T6970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.293'.
[  113.183575][ T6991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'.
[  113.398369][ T7006] netlink: 'syz.4.300': attribute type 9 has an invalid length.
[  113.429606][ T7006] netlink: 'syz.4.300': attribute type 1 has an invalid length.
[  113.511807][ T7001] veth1_macvtap: renamed from vlan0
[  113.701440][ T7024] openvswitch: netlink: IP tunnel dst address not specified
[  114.020621][ T5627] block nbd1: Receive control failed (result -32)
[  114.027355][ T5621] block nbd1: Receive control failed (result -32)
[  114.029107][ T5622] block nbd1: Receive control failed (result -32)
[  114.048164][ T7053] lo speed is unknown, defaulting to 1000
[  114.600643][ T5281] veth0_macvtap: entered promiscuous mode
[  114.957626][ T7096] __nla_validate_parse: 5 callbacks suppressed
[  114.957649][ T7096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.318'.
[  114.997546][ T7096] netlink: 580 bytes leftover after parsing attributes in process `syz.2.318'.
[  115.080817][ T7101] Bluetooth: MGMT ver 1.23
[  115.332296][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.2.319'.
[  115.362840][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.2.319'.
[  115.398740][ T7113] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.490837][ T7113] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.579928][ T7113] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.698269][ T7113] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.846684][ T6021] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  115.903159][ T6021] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  115.947313][ T6021] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  115.992371][ T6021] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  116.202704][ T7150] netlink: 24 bytes leftover after parsing attributes in process `syz.3.328'.
[  116.215673][ T7148] netlink: 'syz.4.329': attribute type 5 has an invalid length.
[  116.577441][ T7175] syzkaller1: entered promiscuous mode
[  116.593752][ T7175] syzkaller1: entered allmulticast mode
[  116.661374][ T7171] netlink: 'syz.3.332': attribute type 16 has an invalid length.
[  116.685853][ T7171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.332'.
[  116.705050][ T7179] netlink: 'syz.0.335': attribute type 1 has an invalid length.
[  116.834381][ T7186] netlink: 'syz.2.336': attribute type 1 has an invalid length.
[  117.003627][ T7186] bond1 (unregistering): Released all slaves
[  117.139016][ T7207] syzkaller0: entered promiscuous mode
[  117.162003][ T7207] syzkaller0: entered allmulticast mode
[  117.190946][ T7207] tipc: Started in network mode
[  117.214057][ T7207] tipc: Node identity 62206cf18b6, cluster identity 4711
[  117.241978][ T7207] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  117.278899][ T7207] tipc: Resetting bearer <eth:syzkaller0>
[  117.301679][ T7206] tipc: Resetting bearer <eth:syzkaller0>
[  117.339984][ T7206] tipc: Disabling bearer <eth:syzkaller0>
[  117.796416][ T7252] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'.
[  119.191935][ T7325] x_tables: duplicate underflow at hook 2
[  119.340313][ T7326] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001
[  119.489174][ T7302] syz.4.357 (7302) used greatest stack depth: 18680 bytes left
[  119.628453][ T7342] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  119.743467][ T7346] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.364'.
[  120.137907][ T7369] lo speed is unknown, defaulting to 1000
[  120.184383][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.3.372'.
[  120.310894][ T7381] 8021q: adding VLAN 0 to HW filter on device bond3
[  120.320096][ T7392] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  120.467910][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.375'.
[  120.507590][ T7397] netlink: 'syz.1.376': attribute type 1 has an invalid length.
[  120.524552][ T7397] netlink: 96 bytes leftover after parsing attributes in process `syz.1.376'.
[  120.543030][ T7397] netlink: 1 bytes leftover after parsing attributes in process `syz.1.376'.
[  120.555385][ T7397] netlink: 'syz.1.376': attribute type 1 has an invalid length.
[  120.911481][ T7411] lo speed is unknown, defaulting to 1000
[  120.954564][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'.
[  121.057140][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'.
[  121.125504][ T7435] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  121.240481][ T7403] lo speed is unknown, defaulting to 1000
[  121.507482][ T7462] tipc: Started in network mode
[  121.514142][ T7462] tipc: Node identity ac14140f, cluster identity 4711
[  121.522311][ T7462] tipc: New replicast peer: 255.255.255.255
[  121.536614][ T7462] tipc: Enabled bearer <udp:syz2>, priority 10
[  121.740556][ T7472] ipip0: entered promiscuous mode
[  122.137626][ T7487] netlink: 'syz.0.401': attribute type 1 has an invalid length.
[  122.336200][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.405'.
[  122.353890][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'.
[  122.365462][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.405'.
[  122.416521][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'.
[  122.454401][ T7513] --map-set only usable from mangle table
[  122.641060][ T7523] pim6reg: entered allmulticast mode
[  122.673986][    T9] tipc: Node number set to 2886997007
[  122.867120][ T5622] block nbd2: Receive control failed (result -1)
[  122.879420][ T7541] netlink: 'syz.0.420': attribute type 1 has an invalid length.
[  123.021549][ T7547] bond3: (slave veth3): Enslaving as an active interface with a down link
[  123.070969][ T7541] bond3: (slave veth5): Enslaving as an active interface with a down link
[  123.220652][ T7555] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  123.240707][ T7555] bond4 (unregistering): Released all slaves
[  123.324644][ T7561] batadv_slave_1: entered promiscuous mode
[  123.396637][ T7555] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  123.415377][ T7555] bond4 (unregistering): Released all slaves
[  123.441699][ T7561] batadv_slave_1: left promiscuous mode
[  123.452799][ T7581] IPVS: set_ctl: invalid protocol: 0 172.30.1.3:20001
[  123.490734][ T7555] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  123.502190][ T7555] bond4 (unregistering): Released all slaves
[  123.526938][ T7579] netlink: 'syz.1.428': attribute type 2 has an invalid length.
[  123.595865][ T7555] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  123.607137][ T7555] bond4 (unregistering): Released all slaves
[  123.689748][ T7555] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  123.700212][ T7555] bond4 (unregistering): Released all slaves
[  123.769258][ T7601] openvswitch: netlink: IP tunnel dst address not specified
[  123.800967][ T7555] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  123.810191][ T7603] netlink: 'syz.1.434': attribute type 21 has an invalid length.
[  123.830824][ T7603] IPv6: NLM_F_CREATE should be specified when creating new route
[  123.842991][ T7555] bond4 (unregistering): Released all slaves
[  123.855015][ T7603] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.862335][ T7603] IPv6: NLM_F_CREATE should be set when creating new route
[  123.869650][ T7603] IPv6: NLM_F_CREATE should be set when creating new route
[  123.876947][ T7603] IPv6: NLM_F_CREATE should be set when creating new route
[  123.879051][ T7607] netlink: 'syz.1.434': attribute type 21 has an invalid length.
[  123.897244][ T7607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  123.918775][ T7608] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  123.941253][ T7608] batman_adv: batadv0: Adding interface: gretap1
[  123.950043][ T7608] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  123.978158][ T7608] batman_adv: batadv0: Interface activated: gretap1
[  123.979389][ T7601] netlink: 'syz.2.435': attribute type 8 has an invalid length.
[  123.990321][ T7555] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  124.247321][ T7627] Bluetooth: MGMT ver 1.23
[  124.285827][ T7627] Bluetooth: hci1: expected 36 bytes, got 2 bytes
[  124.374347][ T7625] nbd3: detected capacity change from 0 to 63
[  124.382089][ T7626] netlink: 'syz.4.440': attribute type 1 has an invalid length.
[  124.394797][ T7636] block nbd3: NBD_DISCONNECT
[  124.421821][ T7636] block nbd3: Disconnected due to user request.
[  124.459531][ T7636] block nbd3: shutting down sockets
[  124.479321][    C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.488531][    C1] Buffer I/O error on dev nbd3, logical block 0, async page read
[  124.499342][    C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.508588][    C1] Buffer I/O error on dev nbd3, logical block 1, async page read
[  124.516416][    C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.525610][    C1] Buffer I/O error on dev nbd3, logical block 2, async page read
[  124.533417][    C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.542620][    C1] Buffer I/O error on dev nbd3, logical block 3, async page read
[  124.550602][ T6920] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.560805][ T6920] Buffer I/O error on dev nbd3, logical block 0, async page read
[  124.582629][ T6920] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.603255][ T6920] Buffer I/O error on dev nbd3, logical block 1, async page read
[  124.611208][ T6920] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.642023][ T6920] Buffer I/O error on dev nbd3, logical block 2, async page read
[  124.675978][ T6920] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.711930][ T6920] Buffer I/O error on dev nbd3, logical block 3, async page read
[  124.743032][ T6920] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.749478][ T7656] sctp: [Deprecated]: syz.2.447 (pid 7656) Use of int in max_burst socket option.
[  124.749478][ T7656] Use struct sctp_assoc_value instead
[  124.765598][ T6920] Buffer I/O error on dev nbd3, logical block 0, async page read
[  124.784187][ T6920] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  124.797838][ T6920] Buffer I/O error on dev nbd3, logical block 1, async page read
[  124.843448][ T6920] ldm_validate_partition_table(): Disk read failed.
[  124.863847][ T6920] Dev nbd3: unable to read RDB block 0
[  124.890240][ T6920]  nbd3: unable to read partition table
[  124.922340][ T7660] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  124.949764][ T6920] ldm_validate_partition_table(): Disk read failed.
[  124.970047][ T7664] netlink: 'syz.3.450': attribute type 14 has an invalid length.
[  124.978390][ T6920] Dev nbd3: unable to read RDB block 0
[  124.995196][ T6920]  nbd3: unable to read partition table
[  125.006064][ T7664] bond0: option xmit_hash_policy: invalid value (8)
[  125.050253][   T30] audit: type=1107 audit(1782057594.423:2): pid=7668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='G�w�g���"N[�^|����#{�����J���:8�������rq�\bc��0'6�]`�Sý|��AlgEފ��n�~�Gb3�����}�v\��_s\���'
[  125.093526][ T7667] syzkaller0: entered promiscuous mode
[  125.099099][ T7667] syzkaller0: entered allmulticast mode
[  125.282117][ T7680] vlan2: entered promiscuous mode
[  125.288132][ T7680] bridge0: entered promiscuous mode
[  125.318439][ T7682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  125.325785][ T7682] IPv6: NLM_F_CREATE should be set when creating new route
[  125.333111][ T7682] IPv6: NLM_F_CREATE should be set when creating new route
[  125.347231][ T7678] syzkaller0: entered promiscuous mode
[  125.368189][ T7678] syzkaller0: entered allmulticast mode
[  125.492005][ T7697] __nla_validate_parse: 13 callbacks suppressed
[  125.492030][ T7697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.458'.
[  125.577073][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'.
[  125.633083][ T7707] netlink: 68 bytes leftover after parsing attributes in process `syz.2.463'.
[  125.663951][ T7709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  125.948351][ T7720] bond4: entered allmulticast mode
[  125.962114][ T7725] sch_fq: defrate 4294967293 ignored.
[  125.971791][ T7731] netlink: 'syz.1.468': attribute type 1 has an invalid length.
[  126.005091][ T7720] macvlan2: entered promiscuous mode
[  126.018313][ T7720] macvlan2: entered allmulticast mode
[  126.029316][ T7720] bond4: entered promiscuous mode
[  126.036379][ T7720] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  126.050061][ T7720] bond4: left promiscuous mode
[  126.087324][ T7734] gretap0: entered promiscuous mode
[  126.099232][ T7734] macsec1: entered allmulticast mode
[  126.123127][ T7734] gretap0: entered allmulticast mode
[  126.161582][ T7734] gretap0: left allmulticast mode
[  126.180573][ T7734] gretap0: left promiscuous mode
[  126.286731][ T7746] bond0: (slave ip6tnl0): refused to change device type
[  126.317180][ T7746] ip6erspan0: entered allmulticast mode
[  126.539814][ T7754] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.828611][ T7768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.480'.
[  126.837957][ T7768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'.
[  126.877829][ T7770] netlink: 212380 bytes leftover after parsing attributes in process `syz.0.481'.
[  127.585539][ T7784] bond5 (unregistering): Released all slaves
[  127.981681][ T7807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'.
[  128.216863][ T7831] syz_tun: entered allmulticast mode
[  128.283938][ T7837] netlink: 'syz.1.497': attribute type 2 has an invalid length.
[  128.329416][ T7837] netlink: 'syz.1.497': attribute type 8 has an invalid length.
[  128.356639][ T7825] syz_tun: left allmulticast mode
[  128.362237][ T7837] netlink: 132 bytes leftover after parsing attributes in process `syz.1.497'.
[  128.663562][ T7860] netlink: 'syz.2.499': attribute type 29 has an invalid length.
[  128.897914][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'.
[  129.089021][ T7889] netlink: 128 bytes leftover after parsing attributes in process `syz.0.506'.
[  129.226624][ T7897] netlink: 'syz.2.508': attribute type 4 has an invalid length.
[  129.271621][ T5628] lo speed is unknown, defaulting to 1000
[  129.299661][ T5628] syz1: Port: 1 Link DOWN
[  129.318801][ T5708] lo speed is unknown, defaulting to 1000
[  129.809396][ T7936] netlink: zone id is out of range
[  129.821468][ T7936] netlink: get zone limit has 4 unknown bytes
[  130.305110][ T7966] lo speed is unknown, defaulting to 1000
[  130.430482][ T7964] bond4: entered promiscuous mode
[  130.441897][ T7964] bond4: entered allmulticast mode
[  130.569093][ T7976] syzkaller1: entered promiscuous mode
[  130.576552][ T7976] syzkaller1: entered allmulticast mode
[  130.613999][ T7978] netlink: 'syz.3.525': attribute type 1 has an invalid length.
[  130.632493][ T7976] syzkaller1: left promiscuous mode
[  130.650082][ T7976] syzkaller1: left allmulticast mode
[  130.781304][ T7978] bond5: entered promiscuous mode
[  130.820953][ T7978] 8021q: adding VLAN 0 to HW filter on device bond5
[  130.956787][ T6012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.979969][ T7999] xt_TCPMSS: Only works on TCP SYN packets
[  130.987981][ T6012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.132115][ T8004] __nla_validate_parse: 6 callbacks suppressed
[  131.132133][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.532'.
[  131.262075][ T8006] netlink: 32 bytes leftover after parsing attributes in process `syz.3.534'.
[  131.365488][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.534'.
[  131.389341][ T8006] netlink: 16 bytes leftover after parsing attributes in process `syz.3.534'.
[  131.477255][ T8017] netlink: 64 bytes leftover after parsing attributes in process `syz.2.535'.
[  131.771542][ T8041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.540'.
[  131.790113][ T8044] netlink: 32 bytes leftover after parsing attributes in process `syz.3.538'.
[  131.841689][ T8039] dummy0: entered allmulticast mode
[  131.880912][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'.
[  131.921501][ T8039] dummy0: left allmulticast mode
[  131.963097][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'.
[  132.019592][ T8058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.539'.
[  132.641453][ T8102] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check.
[  132.905676][ T5708] IPVS: starting estimator thread 0...
[  132.975461][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  133.013641][ T8122] IPVS: using max 36 ests per chain, 86400 per kthread
[  133.179109][ T8121] syzkaller0: entered promiscuous mode
[  133.204176][ T8121] syzkaller0: entered allmulticast mode
[  133.222262][ T8136] raw_sendmsg: syz.2.561 forgot to set AF_INET. Fix it!
[  133.586610][ T8167] ip6tnl1: entered allmulticast mode
[  133.596691][ T6014] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  133.817960][ T8186] syzkaller1: entered promiscuous mode
[  133.833923][ T8186] syzkaller1: entered allmulticast mode
[  133.869652][ T8197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  133.876971][ T8197] IPv6: NLM_F_CREATE should be set when creating new route
[  133.884326][ T8197] IPv6: NLM_F_CREATE should be set when creating new route
[  133.913493][ T8182] SET target dimension over the limit!
[  134.448718][ T8242] lo speed is unknown, defaulting to 1000
[  135.159374][ T8278] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  135.482521][ T8297] atomic_op ffff88803425b198 conn xmit_atomic 0000000000000000
[  135.580474][ T8303] syzkaller0: entered promiscuous mode
[  135.595320][ T8303] syzkaller0: entered allmulticast mode
[  135.662154][ T8309] netlink: 'syz.4.604': attribute type 15 has an invalid length.
[  135.719496][ T8308] netlink: 'syz.4.604': attribute type 1 has an invalid length.
[  136.096077][ T8339] x_tables: duplicate underflow at hook 2
[  136.104218][ T8340] syzkaller0: entered promiscuous mode
[  136.109818][ T8340] syzkaller0: entered allmulticast mode
[  136.350201][ T8349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  136.410331][ T8353] __nla_validate_parse: 24 callbacks suppressed
[  136.410351][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'.
[  136.548842][ T8358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'.
[  136.927210][ T8383] netlink: 'syz.3.624': attribute type 1 has an invalid length.
[  136.956748][ T8382] netlink: 'syz.3.624': attribute type 1 has an invalid length.
[  136.980979][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.624'.
[  137.068835][ T8383] 8021q: adding VLAN 0 to HW filter on device bond6
[  137.305574][ T8406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.631'.
[  137.335779][ T8406] netlink: 1 bytes leftover after parsing attributes in process `syz.0.631'.
[  137.559818][ T8432] pim6reg1: entered promiscuous mode
[  137.572603][ T8432] pim6reg1: entered allmulticast mode
[  137.589957][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  137.614857][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  137.653481][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  137.686271][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  137.711687][ T8433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'.
[  137.973868][ T8457] syzkaller0: entered promiscuous mode
[  137.979448][ T8457] syzkaller0: entered allmulticast mode
[  138.013400][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  138.550537][ T8511] ip6gre1: entered promiscuous mode
[  138.556618][ T8511] ip6gre1: entered allmulticast mode
[  138.573570][ T8516] netlink: 'syz.4.659': attribute type 2 has an invalid length.
[  138.584409][ T8516] x_tables: ip6_tables: mh match: only valid for protocol 135
[  138.675541][ T8417] nci: nci_ntf_packet: unknown ntf opcode 0x227
[  138.782110][ T8540] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20001
[  139.379119][ T8516] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  139.762348][ T8577] netlink: 'syz.2.675': attribute type 1 has an invalid length.
[  139.789854][ T8578] netlink: 'syz.2.675': attribute type 10 has an invalid length.
[  139.821099][ T8578] dummy0: entered promiscuous mode
[  139.993853][ T8590] netlink: 'syz.0.679': attribute type 29 has an invalid length.
[  140.148133][ T8598] lo speed is unknown, defaulting to 1000
[  140.215700][ T8609] sock: sock_timestamping_bind_phc: sock not bind to device
[  140.342287][ T8615] netlink: 'syz.0.686': attribute type 1 has an invalid length.
[  140.458381][ T8619] netlink: 'syz.4.688': attribute type 9 has an invalid length.
[  140.842102][ T5622] block nbd3: Receive control failed (result -32)
[  140.943031][ T8649] nbd: must specify a size in bytes for the device
[  141.403497][ T8649] block nbd4: server does not support multiple connections per device.
[  141.414467][ T8649] block nbd4: shutting down sockets
[  141.498664][ T8678] __nla_validate_parse: 29 callbacks suppressed
[  141.498685][ T8678] netlink: 28 bytes leftover after parsing attributes in process `syz.2.702'.
[  141.524612][ T8680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.703'.
[  141.864975][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'.
[  141.881927][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.708'.
[  142.282989][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'.
[  142.298216][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.722'.
[  142.307923][ T8746] netlink: 20 bytes leftover after parsing attributes in process `syz.3.718'.
[  142.340672][ T8751] netlink: 52 bytes leftover after parsing attributes in process `syz.4.722'.
[  142.361709][ T8741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.718'.
[  142.479056][ T8755] gre1: entered promiscuous mode
[  142.614301][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.4.726'.
[  142.881899][ T8787] validate_nla: 1 callbacks suppressed
[  142.881922][ T8787] netlink: 'syz.1.734': attribute type 1 has an invalid length.
[  142.970057][ T8794] netlink: 'syz.3.736': attribute type 13 has an invalid length.
[  142.984427][ T5622] Bluetooth: hci4: command 0x0405 tx timeout
[  143.107036][ T8798] 8021q: adding VLAN 0 to HW filter on device bond0
[  143.361988][ T8819] syzkaller1: entered promiscuous mode
[  143.383927][ T8819] syzkaller1: entered allmulticast mode
[  143.755784][ T8819] macvtap0: left promiscuous mode
[  143.806071][ T8819] batman_adv: batadv0: Interface deactivated: gretap1
[  143.814570][ T8819] bond4: left allmulticast mode
[  143.820045][ T8819] syzkaller1: left promiscuous mode
[  143.825916][ T8819] syzkaller1: left allmulticast mode
[  143.832763][ T8822] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  143.846824][ T8410] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.869820][ T8410] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.880756][ T8847] x_tables: ip6_tables: mh match: only valid for protocol 135
[  143.901747][ T8410] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.932745][ T8410] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.978381][ T8410] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  143.994083][ T8410] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.048945][ T8410] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  144.060318][ T8410] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  145.300970][ T8907] xt_TCPMSS: Only works on TCP SYN packets
[  145.436097][ T8914] syzkaller0: entered promiscuous mode
[  145.455373][ T8914] syzkaller0: entered allmulticast mode
[  145.578447][ T8930] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  145.612208][ T8923] 8021q: adding VLAN 0 to HW filter on device bond5
[  145.641583][ T8935] bond5: (slave veth9): Enslaving as an active interface with an up link
[  145.673845][ T8923] netlink: 'syz.0.773': attribute type 4 has an invalid length.
[  145.691637][ T8936] bond5: (slave veth11): Enslaving as an active interface with an up link
[  145.728010][ T8923] 8021q: adding VLAN 0 to HW filter on device batadv1
[  145.738384][ T8923] bond5: (slave batadv1): Enslaving as an active interface with an up link
[  145.780421][ T8940] lo speed is unknown, defaulting to 1000
[  145.802389][ T8945] netlink: 'syz.4.776': attribute type 5 has an invalid length.
[  145.837590][ T8945] netlink: 'syz.4.776': attribute type 8 has an invalid length.
[  145.890060][ T8945] geneve2: entered promiscuous mode
[  145.907357][ T8945] geneve2: entered allmulticast mode
[  145.928213][ T8414] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 45442 - 0
[  145.943013][ T8414] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 45442 - 0
[  145.957008][ T8414] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 45442 - 0
[  145.974827][ T8414] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 45442 - 0
[  146.693228][ T8977] __nla_validate_parse: 10 callbacks suppressed
[  146.693249][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.783'.
[  146.767457][ T8979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.787'.
[  146.898244][ T8988] netlink: 20 bytes leftover after parsing attributes in process `syz.2.790'.
[  146.951256][ T8995] netlink: 68 bytes leftover after parsing attributes in process `syz.0.789'.
[  146.996331][ T8997] netlink: 80 bytes leftover after parsing attributes in process `syz.4.794'.
[  147.053011][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  147.234446][ T9004] ieee802154 phy0 wpan0: encryption failed: -22
[  147.275095][ T9004] netlink: 'syz.1.796': attribute type 9 has an invalid length.
[  147.301734][ T9004] netlink: 'syz.1.796': attribute type 6 has an invalid length.
[  147.315674][ T9004] netlink: 'syz.1.796': attribute type 7 has an invalid length.
[  147.323604][ T9004] netlink: 'syz.1.796': attribute type 8 has an invalid length.
[  147.350424][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'.
[  147.380823][ T9013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.799'.
[  147.410294][ T9013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.799'.
[  147.447725][ T9013] netlink: 32 bytes leftover after parsing attributes in process `syz.2.799'.
[  148.116383][ T9024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.183401][ T9024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.285173][ T9041] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'.
[  148.318696][ T9024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.333842][ T9024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.423119][ T9042] netlink: 'syz.4.807': attribute type 1 has an invalid length.
[  148.438254][ T9024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.455878][ T9024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.499471][ T9046] syzkaller0: entered promiscuous mode
[  148.509776][ T9046] syzkaller0: entered allmulticast mode
[  148.531034][ T9024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  148.549848][ T9024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.570157][ T9034] Cannot find add_set index 1 as target
[  148.570157][ T9033] Cannot find add_set index 1 as target
[  148.588311][ T9046] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  148.628599][ T9050] 8021q: adding VLAN 0 to HW filter on device bond1
[  148.712968][ T8410] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  148.733128][ T8410] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  148.773116][ T6026] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  148.805235][ T6026] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  148.859156][ T6026] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  148.870099][ T6026] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  148.884133][ T9057] xt_CT: You must specify a L4 protocol and not use inversions on it
[  148.887798][ T6026] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  148.912575][ T6026] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.921524][ T9064] syzkaller0: entered promiscuous mode
[  148.927393][ T9064] syzkaller0: entered allmulticast mode
[  149.039084][ T9074] vlan2: entered allmulticast mode
[  149.044529][ T9074] bond0: entered allmulticast mode
[  149.049949][ T9074] bond_slave_0: entered allmulticast mode
[  149.056742][ T9074] bond_slave_1: entered allmulticast mode
[  149.210467][ T9085] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  149.242708][ T9085] netlink: 'syz.1.821': attribute type 1 has an invalid length.
[  149.878255][ T9133] bond2: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms
[  149.887567][ T9133] bond2: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  149.897098][ T9133] bond2: option primary: mode dependency failed, not supported in mode 802.3ad(4)
[  149.908145][ T9133] bond2 (unregistering): Released all slaves
[  149.951041][ T9139] netlink: 'syz.1.838': attribute type 1 has an invalid length.
[  150.145466][ T9150] syzkaller1: entered promiscuous mode
[  150.172998][ T9150] syzkaller1: entered allmulticast mode
[  151.001739][ T9166] syzkaller1: entered promiscuous mode
[  151.021979][ T9166] syzkaller1: entered allmulticast mode
[  151.029980][ T9169] netlink: 'syz.4.846': attribute type 62 has an invalid length.
[  151.424595][ T9200] lo speed is unknown, defaulting to 1000
[  151.437252][ T9207] ip6gre1: entered promiscuous mode
[  151.443309][ T9207] ip6gre1: entered allmulticast mode
[  151.645492][ T9219] syzkaller0: entered promiscuous mode
[  151.656843][ T9219] syzkaller0: entered allmulticast mode
[  151.956942][ T9233] tun0: tun_chr_ioctl cmd 1074812118
[  151.972061][ T9233] tun0: tun_chr_ioctl cmd 1074033169
[  152.066678][ T9243] __nla_validate_parse: 21 callbacks suppressed
[  152.066707][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.3.868'.
[  152.122482][ T9245] netlink: 'syz.1.869': attribute type 11 has an invalid length.
[  152.216789][ T8415] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.252302][ T8415] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.890962][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.881'.
[  152.959521][ T9298] xt_TCPMSS: Only works on TCP SYN packets
[  153.065574][ T9302] mac80211_hwsim hwsim8 wlan0: left promiscuous mode
[  153.072469][ T9302] mac80211_hwsim hwsim8 wlan0: left allmulticast mode
[  153.079535][ T9302] bond1: left promiscuous mode
[  153.092400][ T9302] bond4: left promiscuous mode
[  153.099118][ T9302] bond4: left allmulticast mode
[  153.104994][ T9302] bond5: left promiscuous mode
[  153.111539][ T9302] vlan2: left allmulticast mode
[  153.117143][ T9302] bond0: left allmulticast mode
[  153.122405][ T9302] bond_slave_0: left allmulticast mode
[  153.128618][ T9302] bond_slave_1: left allmulticast mode
[  153.243475][ T9325] netlink: 41 bytes leftover after parsing attributes in process `syz.4.886'.
[  153.278743][ T9325] netlink: 140 bytes leftover after parsing attributes in process `syz.4.886'.
[  153.330185][ T9328] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  153.368935][ T9325] netlink: 41 bytes leftover after parsing attributes in process `syz.4.886'.
[  153.471024][ T6003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.495322][ T6003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.523992][ T9341] openvswitch: netlink: Tunnel attr 333 out of range max 16
[  153.539318][ T9332] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.885'.
[  153.593624][ T9345] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  153.615262][ T9349] netlink: 'syz.3.891': attribute type 4 has an invalid length.
[  153.623773][ T9349] netlink: 152 bytes leftover after parsing attributes in process `syz.3.891'.
[  153.653951][ T9349] .`: renamed from bond0 (while UP)
[  153.806562][ T9358] netlink: 84 bytes leftover after parsing attributes in process `syz.3.893'.
[  154.248107][ T9382] bond2: entered promiscuous mode
[  154.452433][ T9403] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  154.638390][ T9413] netlink: 112 bytes leftover after parsing attributes in process `syz.2.906'.
[  154.830777][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.904'.
[  155.271787][   T30] audit: type=1800 audit(1782057624.643:3): pid=9423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.908" name="memory.events" dev="tmpfs" ino=945 res=0 errno=0
[  155.295709][ T9454] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  155.332589][ T9459] netlink: 'syz.4.917': attribute type 7 has an invalid length.
[  155.340718][ T9461] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  155.362324][ T9458] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  155.483433][ T9476] netlink: 'syz.4.921': attribute type 1 has an invalid length.
[  155.613690][ T9485] veth1_to_bond: entered allmulticast mode
[  155.679479][ T9489] GUP no longer grows the stack in syz.2.924 (9489): 200000003000-20000000a000 (200000001000)
[  155.700540][ T9489] CPU: 0 UID: 0 PID: 9489 Comm: syz.2.924 Not tainted syzkaller #0 PREEMPT(full) 
[  155.700574][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  155.700595][ T9489] Call Trace:
[  155.700608][ T9489]  <TASK>
[  155.700617][ T9489]  dump_stack_lvl+0xe8/0x150
[  155.700661][ T9489]  __get_user_pages+0x238c/0x2720
[  155.700685][ T9489]  ? __gup_longterm_locked+0xc3b/0x15c0
[  155.700722][ T9489]  __gup_longterm_locked+0xd52/0x15c0
[  155.700746][ T9489]  ? gup_fast_fallback+0xbc4/0x20d0
[  155.700770][ T9489]  ? rcu_is_watching+0x15/0xb0
[  155.700791][ T9489]  ? rcu_is_watching+0x15/0xb0
[  155.700814][ T9489]  gup_fast_fallback+0x1d82/0x20d0
[  155.700851][ T9489]  ? __pfx_gup_fast_fallback+0x10/0x10
[  155.700870][ T9489]  ? lock_release+0x4b/0x3c0
[  155.700909][ T9489]  ? is_valid_gup_args+0x11f/0x200
[  155.700932][ T9489]  ? get_user_pages_fast+0x4d/0xb0
[  155.700955][ T9489]  __iov_iter_get_pages_alloc+0x378/0xa40
[  155.700986][ T9489]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  155.701015][ T9489]  iov_iter_get_pages2+0x5e/0xa0
[  155.701041][ T9489]  __se_sys_vmsplice+0x7b5/0x1660
[  155.701075][ T9489]  ? __futex_hash+0x416/0x750
[  155.701114][ T9489]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  155.701140][ T9489]  ? __pfx_futex_wait+0x10/0x10
[  155.701169][ T9489]  ? fdget+0x148/0x1e0
[  155.701197][ T9489]  ? put_files_struct+0x24f/0x350
[  155.701218][ T9489]  ? 0xffffffffff600000
[  155.701333][ T9489]  ? rcu_is_watching+0x15/0xb0
[  155.701354][ T9489]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.701381][ T9489]  do_syscall_64+0x174/0x580
[  155.701409][ T9489]  ? trace_irq_disable+0x3b/0x140
[  155.701436][ T9489]  ? clear_bhb_loop+0x40/0x90
[  155.701458][ T9489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.701475][ T9489] RIP: 0033:0x7f216a59ce59
[  155.701490][ T9489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  155.701507][ T9489] RSP: 002b:00007f216b4c9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  155.701539][ T9489] RAX: ffffffffffffffda RBX: 00007f216a815fa0 RCX: 00007f216a59ce59
[  155.701554][ T9489] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000a
[  155.701567][ T9489] RBP: 00007f216a632e6f R08: 0000000000000000 R09: 0000000000000000
[  155.701580][ T9489] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  155.701592][ T9489] R13: 00007f216a816038 R14: 00007f216a815fa0 R15: 00007ffc86bc8178
[  155.701617][ T9489]  </TASK>
[  155.702440][ T9485] veth1_to_bond (unregistering): left allmulticast mode
[  155.982974][ T9485] .`: (slave bond_slave_1): Releasing backup interface
[  156.014603][ T6023] wlan1: Trigger new scan to find an IBSS to join
[  156.169889][ T9514] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  156.254059][ T9522] netlink: 'syz.2.931': attribute type 4 has an invalid length.
[  156.259336][ T9526] sch_fq: defrate 0 ignored.
[  157.025924][ T9595] xt_bpf: check failed: parse error
[  157.501807][ T9627] __nla_validate_parse: 7 callbacks suppressed
[  157.501827][ T9627] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.950'.
[  157.691969][ T9629] syzkaller1: entered promiscuous mode
[  157.698316][ T9629] syzkaller1: entered allmulticast mode
[  158.011820][ T9650] netlink: 'syz.1.955': attribute type 1 has an invalid length.
[  158.297258][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'.
[  158.510945][ T9686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.960'.
[  158.582232][ T9686] vxlan1: entered promiscuous mode
[  158.597362][ T9686] vxlan1: entered allmulticast mode
[  159.053256][ T8418] wlan1: Trigger new scan to find an IBSS to join
[  160.800047][ T9643] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  161.068386][ T9728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'.
[  161.287251][ T9732] geneve1: entered promiscuous mode
[  161.364836][ T9748] syzkaller1: entered promiscuous mode
[  161.386078][ T9748] syzkaller1: entered allmulticast mode
[  161.595734][ T9771] syzkaller0: entered promiscuous mode
[  161.601431][ T9771] syzkaller0: entered allmulticast mode
[  162.016945][ T6012] wlan1: Trigger new scan to find an IBSS to join
[  162.067616][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.4.985'.
[  162.080849][ T9789] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  162.178489][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.986'.
[  162.199226][ T9786] syzkaller0: entered promiscuous mode
[  162.206836][ T9786] syzkaller0: entered allmulticast mode
[  162.274973][ T9789] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  162.294458][ T9789] bond0 (unregistering): Released all slaves
[  162.534437][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.542021][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.750189][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  162.773996][ T9798] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  162.929078][ T6026] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.952175][ T6026] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  162.977076][ T6012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.043049][ T9854] netlink: 'syz.1.997': attribute type 1 has an invalid length.
[  163.070969][ T9851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.997'.
[  163.106861][ T6026] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.124638][ T6026] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  163.146301][ T9854] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  163.355231][ T9876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1001'.
[  163.587648][ T9899] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  163.648996][ T9900] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1009'.
[  163.791733][ T9904] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  163.919671][ T9916] netlink: 'syz.0.1013': attribute type 6 has an invalid length.
[  163.958208][ T9918] netlink: 'syz.3.1014': attribute type 1 has an invalid length.
[  163.976736][ T9918] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1014'.
[  164.107832][ T9927] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1017'.
[  164.185890][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1020'.
[  164.262165][ T9940] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  164.293660][ T9940] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1021'.
[  164.333036][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  164.370150][ T9945] netlink: 'syz.1.1022': attribute type 62 has an invalid length.
[  164.436607][ T5622] Bluetooth: hci4: link tx timeout
[  164.441859][ T5622] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  164.554836][ T9956] syz_tun: entered allmulticast mode
[  164.779948][ T9968] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'.
[  164.953780][ T9976] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  164.978147][ T9976] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1033'.
[  165.345949][ T9994] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1039'.
[  165.359177][ T9954] syz_tun: left allmulticast mode
[  165.517766][T10006] IPv6: NLM_F_CREATE should be specified when creating new route
[  165.540247][T10010] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  165.556521][T10013] FAULT_INJECTION: forcing a failure.
[  165.556521][T10013] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  165.572519][T10013] CPU: 0 UID: 0 PID: 10013 Comm: syz.2.1045 Not tainted syzkaller #0 PREEMPT(full) 
[  165.572557][T10013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  165.572570][T10013] Call Trace:
[  165.572577][T10013]  <TASK>
[  165.572585][T10013]  dump_stack_lvl+0xe8/0x150
[  165.572613][T10013]  should_fail_ex+0x40c/0x560
[  165.572636][T10013]  _copy_from_user+0x2d/0xb0
[  165.572664][T10013]  ___sys_sendmsg+0x1c6/0x360
[  165.572694][T10013]  ? rcu_is_watching+0x15/0xb0
[  165.572714][T10013]  ? get_pid_task+0x20/0x1f0
[  165.572733][T10013]  ? __pfx____sys_sendmsg+0x10/0x10
[  165.572766][T10013]  ? rcu_is_watching+0x15/0xb0
[  165.572800][T10013]  ? __fget_files+0x2a/0x420
[  165.572822][T10013]  ? __fget_files+0x3a2/0x420
[  165.572852][T10013]  __x64_sys_sendmsg+0x1b1/0x290
[  165.572882][T10013]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  165.572917][T10013]  ? rcu_is_watching+0x15/0xb0
[  165.572938][T10013]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.572959][T10013]  do_syscall_64+0x174/0x580
[  165.572985][T10013]  ? trace_irq_disable+0x3b/0x140
[  165.573012][T10013]  ? clear_bhb_loop+0x40/0x90
[  165.573034][T10013]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  165.573054][T10013] RIP: 0033:0x7f216a59ce59
[  165.573072][T10013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  165.573089][T10013] RSP: 002b:00007f216b4c9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.573111][T10013] RAX: ffffffffffffffda RBX: 00007f216a815fa0 RCX: 00007f216a59ce59
[  165.573125][T10013] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000006
[  165.573138][T10013] RBP: 00007f216b4c9090 R08: 0000000000000000 R09: 0000000000000000
[  165.573149][T10013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  165.573160][T10013] R13: 00007f216a816038 R14: 00007f216a815fa0 R15: 00007ffc86bc8178
[  165.573184][T10013]  </TASK>
[  166.139407][T10040] netlink: 'syz.1.1055': attribute type 23 has an invalid length.
[  166.147995][T10040] netlink: 'syz.1.1055': attribute type 21 has an invalid length.
[  166.156283][T10040] IPv6: NLM_F_CREATE should be specified when creating new route
[  166.354609][T10045] netlink: 'syz.1.1057': attribute type 21 has an invalid length.
[  166.372637][T10047] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  166.493700][ T5621] Bluetooth: hci4: command 0x0405 tx timeout
[  166.514196][T10052] netlink: 'syz.2.1060': attribute type 1 has an invalid length.
[  166.676996][T10067] xt_hashlimit: size too large, truncated to 1048576
[  167.328130][T10117] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  167.461630][T10125] syzkaller0: entered promiscuous mode
[  167.473314][T10125] syzkaller0: entered allmulticast mode
[  167.667023][T10130] lo speed is unknown, defaulting to 1000
[  168.085688][T10104] tipc: Disabling bearer <eth:syzkaller0>
[  168.268644][T10162] __nla_validate_parse: 24 callbacks suppressed
[  168.268664][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'.
[  168.285601][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1089'.
[  168.314851][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1088'.
[  168.954305][T10214] netlink: 'syz.0.1099': attribute type 1 has an invalid length.
[  168.970841][T10214] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1099'.
[  169.096762][T10219] netlink: 'syz.3.1100': attribute type 9 has an invalid length.
[  169.160945][T10226] netlink: 'syz.0.1101': attribute type 5 has an invalid length.
[  169.213246][T10226] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1101'.
[  169.329235][T10243] netlink: 'syz.0.1105': attribute type 1 has an invalid length.
[  169.367561][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'.
[  169.618635][T10261] netlink: 'syz.0.1112': attribute type 1 has an invalid length.
[  169.670516][T10263] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1113'.
[  169.768034][T10261] 8021q: adding VLAN 0 to HW filter on device bond7
[  169.779291][T10267] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1112'.
[  169.789653][T10261] bond6: (slave bond7): making interface the new active one
[  169.799460][T10261] bond6: (slave bond7): Enslaving as an active interface with an up link
[  169.957741][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1116'.
[  170.005680][T10292] FAULT_INJECTION: forcing a failure.
[  170.005680][T10292] name failslab, interval 1, probability 0, space 0, times 0
[  170.049476][T10292] CPU: 0 UID: 0 PID: 10292 Comm: syz.1.1121 Not tainted syzkaller #0 PREEMPT(full) 
[  170.049513][T10292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  170.049526][T10292] Call Trace:
[  170.049534][T10292]  <TASK>
[  170.049542][T10292]  dump_stack_lvl+0xe8/0x150
[  170.049569][T10292]  should_fail_ex+0x40c/0x560
[  170.049593][T10292]  should_failslab+0xa8/0x100
[  170.049624][T10292]  __kmalloc_noprof+0xe8/0x750
[  170.049651][T10292]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  170.049680][T10292]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  170.049709][T10292]  genl_family_rcv_msg_doit+0xda/0x340
[  170.049736][T10292]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  170.049764][T10292]  ? apparmor_capable+0x126/0x170
[  170.049790][T10292]  ? bpf_lsm_capable+0x9/0x20
[  170.049808][T10292]  ? security_capable+0x7e/0x2c0
[  170.049841][T10292]  genl_rcv_msg+0x614/0x7a0
[  170.049866][T10292]  ? __pfx_genl_rcv_msg+0x10/0x10
[  170.049887][T10292]  ? ref_tracker_free+0x689/0x830
[  170.049909][T10292]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  170.049934][T10292]  ? __pfx_ref_tracker_free+0x10/0x10
[  170.049962][T10292]  netlink_rcv_skb+0x226/0x4a0
[  170.049993][T10292]  ? __pfx_genl_rcv_msg+0x10/0x10
[  170.050020][T10292]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  170.050056][T10292]  ? down_read+0x2be/0x330
[  170.050084][T10292]  genl_rcv+0x28/0x40
[  170.050104][T10292]  netlink_unicast+0x7bb/0x940
[  170.050135][T10292]  netlink_sendmsg+0x813/0xb40
[  170.050182][T10292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.050213][T10292]  ? aa_sock_msg_perm+0xf1/0x1b0
[  170.050232][T10292]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  170.050254][T10292]  ? __pfx_netlink_sendmsg+0x10/0x10
[  170.050283][T10292]  ____sys_sendmsg+0x9b9/0xa20
[  170.050325][T10292]  ? __pfx_____sys_sendmsg+0x10/0x10
[  170.050354][T10292]  ? lock_release+0x4b/0x3c0
[  170.050383][T10292]  ? import_iovec+0x73/0xa0
[  170.050410][T10292]  ___sys_sendmsg+0x2a5/0x360
[  170.050438][T10292]  ? rcu_is_watching+0x15/0xb0
[  170.050457][T10292]  ? get_pid_task+0x20/0x1f0
[  170.050475][T10292]  ? __pfx____sys_sendmsg+0x10/0x10
[  170.050514][T10292]  ? rcu_is_watching+0x15/0xb0
[  170.050556][T10292]  ? __fget_files+0x2a/0x420
[  170.050578][T10292]  ? __fget_files+0x3a2/0x420
[  170.050606][T10292]  __x64_sys_sendmsg+0x1b1/0x290
[  170.050637][T10292]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  170.050674][T10292]  ? rcu_is_watching+0x15/0xb0
[  170.050695][T10292]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.050716][T10292]  do_syscall_64+0x174/0x580
[  170.050741][T10292]  ? trace_irq_disable+0x3b/0x140
[  170.050768][T10292]  ? clear_bhb_loop+0x40/0x90
[  170.050800][T10292]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  170.050820][T10292] RIP: 0033:0x7f890779ce59
[  170.050839][T10292] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  170.050856][T10292] RSP: 002b:00007f890858f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  170.050878][T10292] RAX: ffffffffffffffda RBX: 00007f8907a15fa0 RCX: 00007f890779ce59
[  170.050892][T10292] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000006
[  170.050905][T10292] RBP: 00007f890858f090 R08: 0000000000000000 R09: 0000000000000000
[  170.050917][T10292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  170.050928][T10292] R13: 00007f8907a16038 R14: 00007f8907a15fa0 R15: 00007ffc3efbf518
[  170.050952][T10292]  </TASK>
[  170.279081][T10292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1121'.
[  170.376851][T10295] sctp: [Deprecated]: syz.4.1124 (pid 10295) Use of struct sctp_assoc_value in delayed_ack socket option.
[  170.376851][T10295] Use struct sctp_sack_info instead
[  170.637680][T10307] bond2: option downdelay: invalid value (18446744073709551487)
[  170.670306][T10307] bond2: option downdelay: allowed values 0 - 2147483647
[  170.681717][T10307] bond2 (unregistering): Released all slaves
[  170.874722][T10325] 8021q: adding VLAN 0 to HW filter on device bond2
[  170.927801][T10324] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  170.987351][T10324] syzkaller0: entered promiscuous mode
[  170.993747][T10324] tipc: Resetting bearer <eth:syzkaller0>
[  171.006114][T10323] tipc: Resetting bearer <eth:syzkaller0>
[  171.088253][T10323] tipc: Disabling bearer <eth:syzkaller0>
[  171.201799][T10347] FAULT_INJECTION: forcing a failure.
[  171.201799][T10347] name failslab, interval 1, probability 0, space 0, times 0
[  171.217537][T10347] CPU: 1 UID: 0 PID: 10347 Comm: syz.1.1138 Not tainted syzkaller #0 PREEMPT(full) 
[  171.217565][T10347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  171.217577][T10347] Call Trace:
[  171.217584][T10347]  <TASK>
[  171.217592][T10347]  dump_stack_lvl+0xe8/0x150
[  171.217619][T10347]  should_fail_ex+0x40c/0x560
[  171.217644][T10347]  should_failslab+0xa8/0x100
[  171.217674][T10347]  ? ovs_flow_alloc+0x24/0x1f0
[  171.217692][T10347]  kmem_cache_alloc_noprof+0x87/0x650
[  171.217722][T10347]  ovs_flow_alloc+0x24/0x1f0
[  171.217745][T10347]  ovs_flow_cmd_new+0x2b9/0xe80
[  171.217768][T10347]  ? kasan_save_track+0x3e/0x80
[  171.217793][T10347]  ? kasan_save_free_info+0x40/0x50
[  171.217818][T10347]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  171.217870][T10347]  ? __nla_parse+0x40/0x60
[  171.217898][T10347]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  171.217924][T10347]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  171.217953][T10347]  genl_family_rcv_msg_doit+0x233/0x340
[  171.217981][T10347]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  171.218011][T10347]  ? bpf_lsm_capable+0x9/0x20
[  171.218028][T10347]  ? security_capable+0x7e/0x2c0
[  171.218061][T10347]  genl_rcv_msg+0x614/0x7a0
[  171.218086][T10347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.218106][T10347]  ? ref_tracker_free+0x689/0x830
[  171.218127][T10347]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  171.218150][T10347]  ? __pfx_ref_tracker_free+0x10/0x10
[  171.218173][T10347]  netlink_rcv_skb+0x226/0x4a0
[  171.218202][T10347]  ? __pfx_genl_rcv_msg+0x10/0x10
[  171.218226][T10347]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  171.218262][T10347]  ? down_read+0x2be/0x330
[  171.218292][T10347]  genl_rcv+0x28/0x40
[  171.218313][T10347]  netlink_unicast+0x7bb/0x940
[  171.218345][T10347]  netlink_sendmsg+0x813/0xb40
[  171.218388][T10347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.218420][T10347]  ? aa_sock_msg_perm+0xf1/0x1b0
[  171.218440][T10347]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  171.218464][T10347]  ? __pfx_netlink_sendmsg+0x10/0x10
[  171.218492][T10347]  ____sys_sendmsg+0x9b9/0xa20
[  171.218527][T10347]  ? __pfx_____sys_sendmsg+0x10/0x10
[  171.218555][T10347]  ? lock_release+0x4b/0x3c0
[  171.218585][T10347]  ? import_iovec+0x73/0xa0
[  171.218614][T10347]  ___sys_sendmsg+0x2a5/0x360
[  171.218641][T10347]  ? rcu_is_watching+0x15/0xb0
[  171.218660][T10347]  ? get_pid_task+0x20/0x1f0
[  171.218679][T10347]  ? __pfx____sys_sendmsg+0x10/0x10
[  171.218709][T10347]  ? rcu_is_watching+0x15/0xb0
[  171.218743][T10347]  ? __fget_files+0x2a/0x420
[  171.218765][T10347]  ? __fget_files+0x3a2/0x420
[  171.218792][T10347]  __x64_sys_sendmsg+0x1b1/0x290
[  171.218823][T10347]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  171.218859][T10347]  ? rcu_is_watching+0x15/0xb0
[  171.218881][T10347]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.218901][T10347]  do_syscall_64+0x174/0x580
[  171.218927][T10347]  ? trace_irq_disable+0x3b/0x140
[  171.218954][T10347]  ? clear_bhb_loop+0x40/0x90
[  171.218977][T10347]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.218996][T10347] RIP: 0033:0x7f890779ce59
[  171.219015][T10347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  171.219032][T10347] RSP: 002b:00007f890858f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  171.219054][T10347] RAX: ffffffffffffffda RBX: 00007f8907a15fa0 RCX: 00007f890779ce59
[  171.219069][T10347] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000006
[  171.219082][T10347] RBP: 00007f890858f090 R08: 0000000000000000 R09: 0000000000000000
[  171.219094][T10347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  171.219105][T10347] R13: 00007f8907a16038 R14: 00007f8907a15fa0 R15: 00007ffc3efbf518
[  171.219129][T10347]  </TASK>
[  171.856913][T10362] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  172.314676][T10392] bond0 (unregistering): Released all slaves
[  172.341293][T10402] FAULT_INJECTION: forcing a failure.
[  172.341293][T10402] name failslab, interval 1, probability 0, space 0, times 0
[  172.357108][T10402] CPU: 1 UID: 0 PID: 10402 Comm: syz.0.1152 Not tainted syzkaller #0 PREEMPT(full) 
[  172.357137][T10402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  172.357149][T10402] Call Trace:
[  172.357157][T10402]  <TASK>
[  172.357165][T10402]  dump_stack_lvl+0xe8/0x150
[  172.357192][T10402]  should_fail_ex+0x40c/0x560
[  172.357216][T10402]  should_failslab+0xa8/0x100
[  172.357247][T10402]  __kmalloc_cache_noprof+0x88/0x660
[  172.357283][T10402]  ? ovs_flow_cmd_new+0x356/0xe80
[  172.357310][T10402]  ovs_flow_cmd_new+0x356/0xe80
[  172.357340][T10402]  ? seqcount_lockdep_reader_access+0xd4/0x100
[  172.357373][T10402]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  172.357421][T10402]  ? __nla_parse+0x40/0x60
[  172.357446][T10402]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  172.357471][T10402]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  172.357499][T10402]  genl_family_rcv_msg_doit+0x233/0x340
[  172.357526][T10402]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  172.357563][T10402]  ? bpf_lsm_capable+0x9/0x20
[  172.357581][T10402]  ? security_capable+0x7e/0x2c0
[  172.357613][T10402]  genl_rcv_msg+0x614/0x7a0
[  172.357638][T10402]  ? __pfx_genl_rcv_msg+0x10/0x10
[  172.357659][T10402]  ? __pfx_ovs_flow_cmd_new+0x10/0x10
[  172.357683][T10402]  ? __netlink_lookup+0xc6/0x8b0
[  172.357703][T10402]  ? rcu_is_watching+0x15/0xb0
[  172.357728][T10402]  netlink_rcv_skb+0x226/0x4a0
[  172.357756][T10402]  ? __pfx_genl_rcv_msg+0x10/0x10
[  172.357778][T10402]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  172.357819][T10402]  ? down_read+0x2be/0x330
[  172.357849][T10402]  genl_rcv+0x28/0x40
[  172.357870][T10402]  netlink_unicast+0x7bb/0x940
[  172.357901][T10402]  netlink_sendmsg+0x813/0xb40
[  172.357935][T10402]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.357963][T10402]  ? aa_sock_msg_perm+0xf1/0x1b0
[  172.357983][T10402]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  172.358006][T10402]  ? __pfx_netlink_sendmsg+0x10/0x10
[  172.358035][T10402]  ____sys_sendmsg+0x9b9/0xa20
[  172.358067][T10402]  ? __pfx_____sys_sendmsg+0x10/0x10
[  172.358097][T10402]  ? lock_release+0x4b/0x3c0
[  172.358127][T10402]  ? import_iovec+0x73/0xa0
[  172.358155][T10402]  ___sys_sendmsg+0x2a5/0x360
[  172.358182][T10402]  ? rcu_is_watching+0x15/0xb0
[  172.358201][T10402]  ? get_pid_task+0x20/0x1f0
[  172.358220][T10402]  ? __pfx____sys_sendmsg+0x10/0x10
[  172.358251][T10402]  ? rcu_is_watching+0x15/0xb0
[  172.358284][T10402]  ? __fget_files+0x2a/0x420
[  172.358307][T10402]  ? __fget_files+0x3a2/0x420
[  172.358345][T10402]  __x64_sys_sendmsg+0x1b1/0x290
[  172.358375][T10402]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  172.358411][T10402]  ? rcu_is_watching+0x15/0xb0
[  172.358433][T10402]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.358454][T10402]  do_syscall_64+0x174/0x580
[  172.358481][T10402]  ? trace_irq_disable+0x3b/0x140
[  172.358507][T10402]  ? clear_bhb_loop+0x40/0x90
[  172.358529][T10402]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.358548][T10402] RIP: 0033:0x7f478f19ce59
[  172.358568][T10402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  172.358584][T10402] RSP: 002b:00007f479000f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  172.358606][T10402] RAX: ffffffffffffffda RBX: 00007f478f416090 RCX: 00007f478f19ce59
[  172.358621][T10402] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000006
[  172.358634][T10402] RBP: 00007f479000f090 R08: 0000000000000000 R09: 0000000000000000
[  172.358647][T10402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  172.358659][T10402] R13: 00007f478f416128 R14: 00007f478f416090 R15: 00007ffd7501e4c8
[  172.358682][T10402]  </TASK>
[  172.850609][T10410] ip6tnl2: entered allmulticast mode
[  172.860654][T10410] syzkaller0: entered promiscuous mode
[  172.866349][T10410] syzkaller0: entered allmulticast mode
[  173.019845][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.029906][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.054942][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.064289][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.073513][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.083015][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.092164][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.102107][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.111319][T10419] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.082204][T10444] __nla_validate_parse: 9 callbacks suppressed
[  174.082254][T10444] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1167'.
[  174.156036][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1167'.
[  174.166861][T10450] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1168'.
[  174.389611][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'.
[  174.456962][T10468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'.
[  174.494085][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1176'.
[  174.575873][T10478] SET target dimension over the limit!
[  174.706643][T10480] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'.
[  174.863378][T10494] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1186'.
[  175.127880][T10517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1193'.
[  175.178357][T10524] netlink: 'syz.0.1194': attribute type 83 has an invalid length.
[  175.280338][T10532] netlink: 'syz.1.1197': attribute type 1 has an invalid length.
[  175.450837][T10541] lo speed is unknown, defaulting to 1000
[  175.505897][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1200'.
[  175.997245][T10557] syzkaller0: entered promiscuous mode
[  176.008663][T10557] syzkaller0: entered allmulticast mode
[  176.036731][T10560] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  176.044524][T10560] syzkaller0: entered promiscuous mode
[  176.050981][T10560] syzkaller0: entered allmulticast mode
[  176.219658][T10567] netlink: 'syz.2.1205': attribute type 1 has an invalid length.
[  176.236676][T10568] tipc: Resetting bearer <eth:syzkaller0>
[  176.246910][T10560] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) !
[  176.362147][T10567] 8021q: adding VLAN 0 to HW filter on device bond4
[  176.391035][T10559] tipc: Resetting bearer <eth:syzkaller0>
[  176.430614][T10559] tipc: Disabling bearer <eth:syzkaller0>
[  176.505234][T10565] bond4: (slave veth0_to_bond): making interface the new active one
[  176.535025][T10565] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link
[  176.587718][T10576] bond4: entered promiscuous mode
[  176.625515][T10576] veth0_to_bond: entered promiscuous mode
[  176.633544][T10576] bond4: entered allmulticast mode
[  176.666205][T10576] veth0_to_bond: entered allmulticast mode
[  176.713965][T10567] macvlan0: entered promiscuous mode
[  176.721245][T10567] macvlan0: entered allmulticast mode
[  176.740306][T10567] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  176.765274][T10567] bond4: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond
[  176.808202][T10607] tipc: Failed to remove unknown binding: 66,0,0/0:3827732706/3827732708
[  176.843188][T10607] tipc: Failed to remove unknown binding: 66,0,0/0:3827732706/3827732707
[  176.869298][T10607] tipc: Failed to remove unknown binding: 66,0,0/0:3827732706/3827732708
[  176.892408][T10607] tipc: Failed to remove unknown binding: 66,0,0/0:3827732706/3827732707
[  177.533814][T10644] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1��^!�Y������
[  177.533814][T10644] 3�UH�5r�Bn���
[  177.626716][T10655] ip6gre2: entered promiscuous mode
[  177.635732][T10655] ip6gre2: entered allmulticast mode
[  177.769412][T10663] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  177.787939][T10663] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  177.805801][T10663] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  178.035162][T10661] IPVS: length: 36 != 24
[  178.331995][T10678] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.339554][T10678] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.482389][T10678] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.496448][T10678] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.657669][ T8415] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.689749][ T8415] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.702751][ T8415] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.721681][ T8415] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.778972][ T8415] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.807956][ T8415] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  178.968525][ T8415] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  178.992820][ T8415] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  179.216370][T10746] __nla_validate_parse: 10 callbacks suppressed
[  179.216390][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1248'.
[  179.348426][T10755] Bluetooth: MGMT ver 1.23
[  179.548949][T10772] syzkaller0: entered promiscuous mode
[  179.565205][T10772] syzkaller0: entered allmulticast mode
[  179.729467][T10790] bond8: option miimon: invalid value (18446744073709551607)
[  179.738804][T10790] bond8: option miimon: allowed values 0 - 2147483647
[  179.747574][T10790] bond8 (unregistering): Released all slaves
[  179.786505][T10792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'.
[  179.891856][T10792] bond8: option miimon: invalid value (18446744073709551607)
[  179.903434][T10792] bond8: option miimon: allowed values 0 - 2147483647
[  179.916938][T10792] bond8 (unregistering): Released all slaves
[  179.988733][T10806] vxcan1: entered promiscuous mode
[  180.001669][T10806] vxcan1: entered allmulticast mode
[  180.171144][T10825] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1262'.
[  180.209573][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1263'.
[  180.260224][T10830] gretap1: entered allmulticast mode
[  180.308771][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1264'.
[  180.454454][T10846] sysfs: cannot create duplicate filename '/class/ieee80211/1��^!�Y������
[  180.454454][T10846] 3�UH�5r�Bn���\'
[  180.473630][T10846] CPU: 0 UID: 0 PID: 10846 Comm: syz.3.1266 Not tainted syzkaller #0 PREEMPT(full) 
[  180.473671][T10846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  180.473685][T10846] Call Trace:
[  180.473693][T10846]  <TASK>
[  180.473702][T10846]  dump_stack_lvl+0xe8/0x150
[  180.473731][T10846]  sysfs_warn_dup+0x8e/0xa0
[  180.473756][T10846]  sysfs_do_create_link_sd+0xc0/0x110
[  180.473784][T10846]  device_add_class_symlinks+0x1cf/0x240
[  180.473809][T10846]  device_add+0x467/0xb80
[  180.473830][T10846]  wiphy_register+0x1fc8/0x2ff0
[  180.473865][T10846]  ? __pfx_wiphy_register+0x10/0x10
[  180.473889][T10846]  ? __pfx_netdev_run_todo+0x10/0x10
[  180.473910][T10846]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  180.473932][T10846]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  180.473961][T10846]  ieee80211_register_hw+0x3d3d/0x4a50
[  180.473996][T10846]  ? ieee80211_register_hw+0x1931/0x4a50
[  180.474038][T10846]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  180.474068][T10846]  ? __asan_memset+0x22/0x50
[  180.474091][T10846]  ? __hrtimer_setup+0x1b7/0x260
[  180.474114][T10846]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  180.474143][T10846]  mac80211_hwsim_new_radio+0x3238/0x5680
[  180.474186][T10846]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  180.474212][T10846]  ? kstrndup+0xbd/0x160
[  180.474232][T10846]  ? kstrndup+0xbd/0x160
[  180.474251][T10846]  hwsim_new_radio_nl+0xd8b/0xf90
[  180.474285][T10846]  genl_family_rcv_msg_doit+0x233/0x340
[  180.474314][T10846]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  180.474344][T10846]  ? bpf_lsm_capable+0x9/0x20
[  180.474360][T10846]  ? security_capable+0x7e/0x2c0
[  180.474393][T10846]  genl_rcv_msg+0x614/0x7a0
[  180.474419][T10846]  ? __pfx_genl_rcv_msg+0x10/0x10
[  180.474442][T10846]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  180.474472][T10846]  ? __netlink_lookup+0xc6/0x8b0
[  180.474489][T10846]  ? rcu_is_watching+0x15/0xb0
[  180.474515][T10846]  netlink_rcv_skb+0x226/0x4a0
[  180.474544][T10846]  ? __pfx_genl_rcv_msg+0x10/0x10
[  180.474566][T10846]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  180.474602][T10846]  ? down_read+0x2be/0x330
[  180.474633][T10846]  genl_rcv+0x28/0x40
[  180.474661][T10846]  netlink_unicast+0x7bb/0x940
[  180.474694][T10846]  netlink_sendmsg+0x813/0xb40
[  180.474729][T10846]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.474760][T10846]  ? aa_sock_msg_perm+0xf1/0x1b0
[  180.474781][T10846]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  180.474806][T10846]  ? __pfx_netlink_sendmsg+0x10/0x10
[  180.474836][T10846]  ____sys_sendmsg+0x9b9/0xa20
[  180.474870][T10846]  ? __pfx_____sys_sendmsg+0x10/0x10
[  180.474899][T10846]  ? lock_release+0x4b/0x3c0
[  180.474927][T10846]  ? import_iovec+0x73/0xa0
[  180.474953][T10846]  ___sys_sendmsg+0x2a5/0x360
[  180.474984][T10846]  ? __pfx____sys_sendmsg+0x10/0x10
[  180.475013][T10846]  ? futex_wake+0x51b/0x5f0
[  180.475054][T10846]  ? __pfx_do_futex+0x10/0x10
[  180.475078][T10846]  __x64_sys_sendmsg+0x1b1/0x290
[  180.475108][T10846]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  180.475143][T10846]  ? rcu_is_watching+0x15/0xb0
[  180.475164][T10846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.475184][T10846]  do_syscall_64+0x174/0x580
[  180.475210][T10846]  ? trace_irq_disable+0x3b/0x140
[  180.475237][T10846]  ? clear_bhb_loop+0x40/0x90
[  180.475258][T10846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  180.475278][T10846] RIP: 0033:0x7f93ddd9ce59
[  180.475297][T10846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.475313][T10846] RSP: 002b:00007f93debca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  180.475335][T10846] RAX: ffffffffffffffda RBX: 00007f93de015fa0 RCX: 00007f93ddd9ce59
[  180.475349][T10846] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000008
[  180.475361][T10846] RBP: 00007f93dde32e6f R08: 0000000000000000 R09: 0000000000000000
[  180.475373][T10846] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  180.475384][T10846] R13: 00007f93de016038 R14: 00007f93de015fa0 R15: 00007ffd6f648338
[  180.475408][T10846]  </TASK>
[  180.995926][T10854] syzkaller0: entered promiscuous mode
[  181.023031][T10854] syzkaller0: entered allmulticast mode
[  181.172252][T10869] netlink: 'syz.4.1269': attribute type 1 has an invalid length.
[  181.183628][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1269'.
[  181.332602][T10880] netlink: 'syz.0.1270': attribute type 1 has an invalid length.
[  181.374057][T10880] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1270'.
[  181.509735][T10891] netlink: 'syz.2.1273': attribute type 4 has an invalid length.
[  181.822097][T10917] �: renamed from dummy0
[  181.911656][T10927] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  182.043828][T10937] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004
[  182.072764][T10937] bond0: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  182.085922][T10937] bond0 (unregistering): Released all slaves
[  182.111351][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'.
[  183.532988][ T5622] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  184.282118][T10887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  184.291142][T10891] netlink: 'syz.2.1273': attribute type 1 has an invalid length.
[  184.302002][T10891] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1273'.
[  184.313355][T10891] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1273'.
[  184.347419][T10976] netlink: 'syz.4.1281': attribute type 4 has an invalid length.
[  184.362692][T10976] netlink: 'syz.4.1281': attribute type 4 has an invalid length.
[  184.381417][T10930] netlink: 840 bytes leftover after parsing attributes in process `syz.1.1278'.
[  184.642436][T10994] netlink: 'syz.3.1286': attribute type 11 has an invalid length.
[  184.707427][T10999] netlink: 'syz.0.1285': attribute type 322 has an invalid length.
[  184.883961][T11012] bridge_slave_0 (unregistering): left allmulticast mode
[  184.913543][T11012] bridge_slave_0 (unregistering): left promiscuous mode
[  184.932150][T11012] bridge0: port 1(bridge_slave_0) entered disabled state
[  185.015166][T11016] macvtap0: entered allmulticast mode
[  185.021502][T11016] dummy0: entered allmulticast mode
[  185.030039][T11016] dummy0: left allmulticast mode
[  185.360318][ T5281] veth0_vlan: left promiscuous mode
[  185.387586][T11045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1299'.
[  185.402239][ T5281] veth0_vlan: entered promiscuous mode
[  185.443869][T11040] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1300'.
[  185.458321][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1300'.
[  185.474275][T11045] bridge0: entered promiscuous mode
[  185.483315][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1299'.
[  186.046920][T11095] netlink: 'syz.0.1308': attribute type 1 has an invalid length.
[  186.062498][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1309'.
[  186.085151][T11095] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1308'.
[  186.108711][T11095] bond8: entered promiscuous mode
[  186.115054][T11095] bond8: entered allmulticast mode
[  186.120653][T11095] 8021q: adding VLAN 0 to HW filter on device bond8
[  186.463896][T11130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1314'.
[  186.604993][T11079] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  186.773845][T11146] net_ratelimit: 25 callbacks suppressed
[  186.773866][T11146] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  186.799058][T11143] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  186.967075][T11163] openvswitch: netlink: IP tunnel dst address not specified
[  186.994046][T11163] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.222454][T11184] netlink: 'syz.0.1327': attribute type 1 has an invalid length.
[  187.285457][T11182] sch_tbf: burst 88 is lower than device veth5 mtu (1514) !
[  187.354262][T11184] 8021q: adding VLAN 0 to HW filter on device bond9
[  187.399391][T11195] bond9: entered promiscuous mode
[  187.427261][T11195] bond9: entered allmulticast mode
[  187.506191][T11184] macvlan2: entered promiscuous mode
[  187.516309][T11184] macvlan2: entered allmulticast mode
[  187.523606][T11184] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  188.047850][T11239] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  188.080972][T11239] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  188.107810][T11241] bond0: option arp_validate: invalid value (55553)
[  188.107843][T11249] netlink: 'syz.3.1345': attribute type 1 has an invalid length.
[  188.154019][T11236] xt_CT: No such helper "snmp"
[  188.165148][T11249] bond0: entered promiscuous mode
[  188.176829][T11249] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.303422][T11262] SET target dimension over the limit!
[  188.505831][ T9829] IPVS: starting estimator thread 0...
[  188.613380][T11282] IPVS: using max 40 ests per chain, 96000 per kthread
[  188.646010][T11288] netlink: 'syz.4.1352': attribute type 4 has an invalid length.
[  188.694580][T11288] netlink: 'syz.4.1352': attribute type 4 has an invalid length.
[  188.922168][T11303] team0: Failed to send options change via netlink (err -105)
[  188.951616][T11303] team0: Failed to send port change of device team_slave_0 via netlink (err -105)
[  188.988236][T11303] team0: Port device team_slave_0 removed
[  189.474610][T11345] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  190.029657][T11353] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  191.373146][ T5627] Bluetooth: hci1: command 0x0406 tx timeout
[  191.374326][ T5632] Bluetooth: hci3: command 0x0406 tx timeout
[  191.379285][ T5629] Bluetooth: hci2: command 0x0406 tx timeout
[  191.915278][T11316] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  192.060458][T11367] __nla_validate_parse: 17 callbacks suppressed
[  192.060477][T11367] netlink: 840 bytes leftover after parsing attributes in process `syz.3.1371'.
[  192.221197][T11389] netlink: 'syz.2.1369': attribute type 3 has an invalid length.
[  192.468248][T11402] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  192.541077][T11409] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  193.008074][T11457] sit0: entered promiscuous mode
[  193.039406][T11457] netlink: 'syz.2.1385': attribute type 1 has an invalid length.
[  193.047969][T11457] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1385'.
[  194.138771][   T30] audit: type=1804 audit(1782057663.513:4): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1392" name="/newroot/288/memory.events" dev="tmpfs" ino=1494 res=1 errno=0
[  194.414510][ T1326] ieee802154 phy0 wpan0: encryption failed: -22
[  195.590199][T11432] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  195.735823][T11495] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1394'.
[  195.755433][T11495] netlink: 35 bytes leftover after parsing attributes in process `syz.2.1394'.
[  195.771140][T11498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  196.045083][T11514] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma?
[  196.534323][T11538] netlink: 'syz.1.1403': attribute type 1 has an invalid length.
[  196.843030][T11574] netlink: 'syz.3.1410': attribute type 27 has an invalid length.
[  196.889140][T11565] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1409'.
[  197.121347][T11592] netlink: 'syz.3.1415': attribute type 1 has an invalid length.
[  197.358064][T11607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1416'.
[  197.409314][T11609] x_tables: duplicate underflow at hook 3
[  197.679712][T11615] bridge0: port 3(veth0_virt_wifi) entered blocking state
[  197.708607][T11615] bridge0: port 3(veth0_virt_wifi) entered disabled state
[  197.732520][T11615] veth0_virt_wifi: entered allmulticast mode
[  197.749770][T11615] veth0_virt_wifi: entered promiscuous mode
[  197.785606][T11622] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'.
[  197.935001][T11625] bridge3: entered promiscuous mode
[  197.940439][T11625] bridge3: entered allmulticast mode
[  197.989088][T11631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1424'.
[  198.001613][T11625] erspan0: entered promiscuous mode
[  198.021762][T11631] openvswitch: netlink: Flow actions attr not present in new flow.
[  198.057388][T11631] netlink: 'syz.2.1424': attribute type 10 has an invalid length.
[  198.068618][ T8417] bond0: (slave bond_slave_0): interface is now down
[  198.076931][T11625] 8021q: adding VLAN 0 to HW filter on device bond0
[  198.096816][T11625] 8021q: adding VLAN 0 to HW filter on device team0
[  198.103712][ T8417] bond0: (slave bond_slave_0): interface is now down
[  198.126557][T11625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  198.136859][ T8417] bond0: (slave bond_slave_0): interface is now down
[  198.163148][ T8411] bond0: (slave bond_slave_0): interface is now down
[  198.183015][ T8411] bond0: (slave bond_slave_0): interface is now down
[  198.203026][ T8411] bond0: (slave bond_slave_0): interface is now down
[  198.240096][ T8410] bond0: (slave bond_slave_0): interface is now down
[  198.273081][ T8410] bond0: (slave bond_slave_0): interface is now down
[  198.288809][T11625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.303092][ T8410] bond0: (slave bond_slave_0): interface is now down
[  198.314898][T11625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.333383][ T8410] bond0: (slave bond_slave_0): interface is now down
[  198.354168][T11625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  198.375452][T11625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  198.384466][ T8410] bond0: (slave bond_slave_0): interface is now down
[  198.411711][T11625] veth1_vlan: left promiscuous mode
[  198.423572][ T8410] bond0: (slave bond_slave_0): interface is now down
[  198.431975][T11625] veth0_vlan: left promiscuous mode
[  198.438290][T11625] veth0_vlan: entered promiscuous mode
[  198.444434][ T8415] bond0: (slave bond_slave_0): interface is now down
[  198.452648][T11625] veth1_vlan: entered promiscuous mode
[  198.473817][ T6016] bond0: (slave bond_slave_0): interface is now down
[  198.500127][T11625] 8021q: adding VLAN 0 to HW filter on device eth0
[  198.503568][ T6016] bond0: (slave bond_slave_0): interface is now down
[  198.513911][T11625] 8021q: adding VLAN 0 to HW filter on device eth1
[  198.522611][T11625] 8021q: adding VLAN 0 to HW filter on device eth2
[  198.530986][T11625] 8021q: adding VLAN 0 to HW filter on device eth3
[  198.537649][ T6003] bond0: (slave bond_slave_0): interface is now down
[  198.553050][ T6016] bond0: (slave bond_slave_0): interface is now down
[  198.573062][ T6016] bond0: (slave bond_slave_0): interface is now down
[  198.590572][T11631] team0 (unregistering): Port device team_slave_0 removed
[  198.601664][T11631] team0 (unregistering): Port device team_slave_1 removed
[  198.603235][ T6016] bond0: (slave bond_slave_0): interface is now down
[  198.620428][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.627647][ T8417] bridge0: port 1(bridge_slave_0) entered listening state
[  198.635565][ T6003] bond0: (slave bond_slave_0): interface is now down
[  198.642525][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.649774][ T8417] bridge0: port 2(bridge_slave_1) entered listening state
[  198.663096][ T6003] bond0: (slave bond_slave_0): interface is now down
[  198.702925][ T8411] bond0: (slave bond_slave_0): interface is now down
[  198.733320][ T6012] bond0: (slave bond_slave_0): interface is now down
[  198.740580][ T6012] bond0: now running without any active interface!
[  198.768872][ T8410] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  198.790203][ T8410] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  198.815053][ T8410] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  198.823523][ T8410] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  198.833528][ T8410] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  198.841829][ T8410] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  198.852260][ T8410] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  198.861467][ T8410] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  198.896152][ T6003] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  198.923508][ T5628] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  198.932807][ T6003] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  198.967789][ T6003] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  198.985990][T11666] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1436'.
[  199.015603][T11663] netlink: 'syz.4.1435': attribute type 4 has an invalid length.
[  199.037508][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1437'.
[  199.047585][T11663] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1435'.
[  199.080485][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'.
[  199.105468][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'.
[  199.141184][T11676] netlink: 'syz.3.1439': attribute type 1 has an invalid length.
[  199.154439][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'.
[  199.208828][T11670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'.
[  199.229506][T11676] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode
[  199.260881][T11676] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode
[  199.328440][T11685] team1: entered promiscuous mode
[  199.344350][T11685] team1: entered allmulticast mode
[  199.356888][T11685] 8021q: adding VLAN 0 to HW filter on device team1
[  199.513502][ T9829] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  199.578086][T11706] netlink: 'syz.4.1443': attribute type 1 has an invalid length.
[  199.621571][T11682] veth7: entered allmulticast mode
[  199.854187][ T9829] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  200.248129][T11756] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  200.255877][T11756] syzkaller0: entered promiscuous mode
[  200.261492][T11756] syzkaller0: entered allmulticast mode
[  200.321602][T11756] tipc: Resetting bearer <eth:syzkaller0>
[  200.399256][T11754] tipc: Resetting bearer <eth:syzkaller0>
[  200.423119][T11754] tipc: Disabling bearer <eth:syzkaller0>
[  200.838111][T11798] syzkaller1: entered promiscuous mode
[  200.848092][T11798] syzkaller1: entered allmulticast mode
[  201.230239][T11829] netlink: 'syz.1.1471': attribute type 1 has an invalid length.
[  201.602104][T11856] lo speed is unknown, defaulting to 1000
[  202.539765][T11912] syzkaller0: entered promiscuous mode
[  202.570304][T11912] syzkaller0: entered allmulticast mode
[  202.599604][T11900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  202.661250][T11900] __nla_validate_parse: 28 callbacks suppressed
[  202.661270][T11900] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1488'.
[  202.684472][T11926] netlink: 'syz.0.1496': attribute type 2 has an invalid length.
[  202.703090][T11926] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1496'.
[  202.722629][T11927] netlink: 'syz.0.1496': attribute type 2 has an invalid length.
[  202.736111][T11906] tipc: Resetting bearer <eth:syzkaller0>
[  202.757737][T11931] netlink: 340 bytes leftover after parsing attributes in process `syz.1.1495'.
[  202.774398][T11927] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1496'.
[  202.793081][T11899] tipc: Resetting bearer <eth:syzkaller0>
[  202.813409][T11899] tipc: Disabling bearer <eth:syzkaller0>
[  202.862089][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1495'.
[  203.008507][T11945] netlink: 'syz.0.1499': attribute type 21 has an invalid length.
[  203.048148][T11945] netlink: 'syz.0.1499': attribute type 1 has an invalid length.
[  203.077235][T11945] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1499'.
[  203.126421][T11950] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  203.167722][T11950] batman_adv: batadv0: Adding interface: gretap2
[  203.189372][T11950] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  203.239619][T11950] batman_adv: batadv0: Interface activated: gretap2
[  203.242066][T11959] ieee802154 phy0 wpan0: encryption failed: -90
[  203.254215][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1494'.
[  203.270837][T11963] dvmrp1: tun_chr_ioctl cmd 1074025677
[  203.284836][T11963] dvmrp1: linktype set to 0
[  203.373176][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  203.380960][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  203.634288][T11990] netlink: 'syz.3.1511': attribute type 1 has an invalid length.
[  203.647543][T11988] syz_tun: entered allmulticast mode
[  203.672225][T11988] .`: entered promiscuous mode
[  203.727216][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'.
[  203.825092][T12006] syzkaller0: entered promiscuous mode
[  203.840762][T12006] syzkaller0: entered allmulticast mode
[  204.055508][T12021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1519'.
[  204.099166][T12025] netlink: 'syz.2.1520': attribute type 1 has an invalid length.
[  204.107804][T12025] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1520'.
[  204.312769][T12043] Can't find ip_set type hash:ip,por
[  204.521941][T12061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  204.915234][T12088] netlink: zone id is out of range
[  204.931221][T12088] netlink: get zone limit has 4 unknown bytes
[  204.954343][   T30] audit: type=1800 audit(1782057674.333:5): pid=12083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1536" name="memory.events" dev="tmpfs" ino=1579 res=0 errno=0
[  205.425502][T12118] netlink: 'syz.0.1545': attribute type 10 has an invalid length.
[  205.435825][ T5621] block nbd4: Receive control failed (result -32)
[  205.443105][ T4936] block nbd4: Receive control failed (result -32)
[  205.817932][T12151] openvswitch: netlink: IPv4 tun info is not correct
[  205.831661][T12153] ip6t_rpfilter: unknown options
[  206.004558][T12167] netlink: 'syz.3.1562': attribute type 9 has an invalid length.
[  206.072795][T12167] macvlan2: entered promiscuous mode
[  206.102007][T12167] erspan0: entered promiscuous mode
[  206.113762][T12167] macvlan2: entered allmulticast mode
[  206.135404][T12167] erspan0: entered allmulticast mode
[  206.258117][T12167] netlink: 'syz.3.1562': attribute type 16 has an invalid length.
[  206.624526][T12201] bridge_slave_0: left allmulticast mode
[  206.639097][T12201] bridge_slave_0: left promiscuous mode
[  206.647836][T12201] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.672789][T12201] bridge_slave_1: left allmulticast mode
[  206.707960][T12201] bridge_slave_1: left promiscuous mode
[  206.733114][T12201] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.829241][T12201] .`: (slave bond_slave_0): Releasing backup interface
[  206.865624][T12201] team0: Port device team_slave_0 removed
[  206.905502][T12201] team0: Port device team_slave_1 removed
[  206.917846][T12201] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.932260][T12201] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.959190][T12201] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.967262][T12201] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.980156][T12201] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  206.981571][T12218] netlink: 'syz.4.1574': attribute type 1 has an invalid length.
[  207.030128][T12213] bond11: option tlb_dynamic_lb: invalid value (5)
[  207.039350][T12213] bond11 (unregistering): Released all slaves
[  207.085519][T12209] team0: Port device xfrm0 added
[  207.099514][T12214] tipc: Enabled bearer <eth:team0>, priority 0
[  207.136412][T12218] bond3: entered promiscuous mode
[  207.142300][T12218] 8021q: adding VLAN 0 to HW filter on device bond3
[  207.163813][T12220] ipvlan2: entered allmulticast mode
[  207.178753][T12220] bond3: entered allmulticast mode
[  207.244897][T12223] bond3: (slave bridge5): making interface the new active one
[  207.252620][T12223] bridge5: entered promiscuous mode
[  207.259789][T12223] bridge5: entered allmulticast mode
[  207.273015][T12223] bond3: (slave bridge5): Enslaving as an active interface with an up link
[  207.578855][T12255] sit0: left promiscuous mode
[  207.623818][ T9829] IPVS: starting estimator thread 0...
[  207.635804][T12255] bridge0: left promiscuous mode
[  207.654894][T12266] netlink: 'syz.3.1583': attribute type 10 has an invalid length.
[  207.672357][T12255] 8021q: adding VLAN 0 to HW filter on device bond0
[  207.682588][T12255] dummy0: left promiscuous mode
[  207.700210][T12255] 8021q: adding VLAN 0 to HW filter on device batadv0
[  207.709305][T12270] netlink: 'syz.3.1583': attribute type 10 has an invalid length.
[  207.725450][T12265] IPVS: using max 37 ests per chain, 88800 per kthread
[  207.805049][T12255] batman_adv: batadv0: Interface activated: batadv_slave_0
[  207.836618][T12255] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.861004][T12255] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  207.871607][T12255] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.900795][T12255] veth1_macvtap: left promiscuous mode
[  207.914625][T12255] veth1_macvtap: entered promiscuous mode
[  207.945117][T12255] ip6gre1: left promiscuous mode
[  207.967581][T12255] ipip0: left promiscuous mode
[  207.975214][T12255] 8021q: adding VLAN 0 to HW filter on device bond1
[  207.990082][T12255] veth0_to_team: entered promiscuous mode
[  208.002594][T12255] 8021q: adding VLAN 0 to HW filter on device eth0
[  208.012158][T12255] 8021q: adding VLAN 0 to HW filter on device eth1
[  208.021743][T12255] 8021q: adding VLAN 0 to HW filter on device eth2
[  208.031620][T12255] 8021q: adding VLAN 0 to HW filter on device eth3
[  208.041667][T12255] bond2: left promiscuous mode
[  208.047063][T12255] 8021q: adding VLAN 0 to HW filter on device bond2
[  208.068799][T12255] 8021q: adding VLAN 0 to HW filter on device bond3
[  208.078283][T12255] bond4: left promiscuous mode
[  208.083873][T12255] veth0_to_bond: left promiscuous mode
[  208.090492][T12255] 8021q: adding VLAN 0 to HW filter on device bond4
[  208.106813][ T5731] lo speed is unknown, defaulting to 1000
[  208.116892][ T5731] syz1: Port: 1 Link ACTIVE
[  208.135541][T12266] team0: Failed to send options change via netlink (err -105)
[  208.158713][T12266] team0: Port device dummy0 added
[  208.166328][T12269] __nla_validate_parse: 74 callbacks suppressed
[  208.166349][T12269] netlink: 212924 bytes leftover after parsing attributes in process `syz.0.1582'.
[  208.202215][ T6010] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.209443][ T6010] bridge0: port 2(bridge_slave_1) entered forwarding state
[  208.268558][T12270] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  208.281045][T12270] team0: Failed to send options change via netlink (err -105)
[  208.295037][T12270] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  208.311490][T12270] team0: Port device dummy0 removed
[  208.321476][T12270] .`: (slave dummy0): Enslaving as an active interface with an up link
[  208.343213][ T6012] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  208.358237][ T6012] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  208.372926][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1586'.
[  208.391177][T12278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1586'.
[  208.419297][T12278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1586'.
[  208.428617][T12278] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1586'.
[  208.439251][T12279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1586'.
[  208.449302][T12279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1586'.
[  208.460265][T12279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1586'.
[  208.472432][T12279] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1586'.
[  208.484745][ T9843] tipc: Node number set to 24302495
[  208.484745][ T5731] lo speed is unknown, defaulting to 1000
[  208.507421][ T6012] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  208.531540][ T6012] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  208.555494][T12296] x_tables: duplicate underflow at hook 1
[  208.567029][ T6012] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  208.611395][ T6012] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  208.618969][T12299] x_tables: duplicate underflow at hook 2
[  208.967113][T12290] tipc: Resetting bearer <eth:team0>
[  209.185469][T12290] batman_adv: batadv0: Interface deactivated: gretap2
[  209.257324][ T6012] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  209.286645][ T6012] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.305093][ T6012] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.330507][ T6012] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.347486][T12309] netlink: 'syz.0.1594': attribute type 1 has an invalid length.
[  209.400870][ T6012] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.423246][ T6012] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  209.439756][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1594'.
[  209.473970][T12309] 8021q: adding VLAN 0 to HW filter on device bond11
[  209.501475][ T8411] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  209.936897][T12345] tc_dump_action: action bad kind
[  210.077238][T12360] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  210.077831][ T5716] IPVS: starting estimator thread 0...
[  210.192922][T12371] IPVS: using max 40 ests per chain, 96000 per kthread
[  210.893243][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.901652][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.910123][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  210.918526][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.334710][    C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured!
[  212.342505][    C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured!
[  212.653355][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.661958][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  212.670544][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.125005][T12386] netlink: 'syz.4.1609': attribute type 21 has an invalid length.
[  213.165920][T12386] netlink: 'syz.4.1609': attribute type 5 has an invalid length.
[  213.200215][T12386] netlink: 'syz.4.1609': attribute type 6 has an invalid length.
[  213.213010][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  213.233311][T12386] __nla_validate_parse: 9 callbacks suppressed
[  213.233329][T12386] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1609'.
[  213.290570][T12403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1613'.
[  213.435169][T12414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'.
[  213.468708][T12416] netlink: 'syz.2.1615': attribute type 1 has an invalid length.
[  213.490928][T12414] macvtap1: entered promiscuous mode
[  213.511416][T12414] erspan0: entered promiscuous mode
[  213.529694][T12424] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1616'.
[  213.550347][T12414] macvtap1: entered allmulticast mode
[  213.563176][T12414] erspan0: entered allmulticast mode
[  213.588005][T12429] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1616'.
[  213.695953][T12424] erspan0: left allmulticast mode
[  213.711497][T12424] erspan0: left promiscuous mode
[  213.730934][T12424] macvtap1: left promiscuous mode
[  213.746823][T12424] macvtap1: left allmulticast mode
[  213.978390][T12448] xt_CT: You must specify a L4 protocol and not use inversions on it
[  214.050817][T12458] netlink: 'syz.0.1626': attribute type 3 has an invalid length.
[  214.231356][T12469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1628'.
[  214.281148][T12471] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1629'.
[  214.328370][T12471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1629'.
[  214.530496][T12483] sch_fq: defrate 8 ignored.
[  214.702604][T12497] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode
[  214.729213][T12497] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  214.744449][T12499] openvswitch: netlink: IPv4 tun info is not correct
[  214.763306][T12497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'.
[  215.334686][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1640'.
[  216.093155][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.101719][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.110315][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.118862][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.173272][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.182011][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  216.190652][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.466969][T12500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  218.275154][T12638] syzkaller0: entered promiscuous mode
[  218.291138][T12638] syzkaller0: entered allmulticast mode
[  218.399542][T12622] 8021q: adding VLAN 0 to HW filter on device .`
[  218.418026][T12622] 8021q: adding VLAN 0 to HW filter on device team0
[  218.430890][T12622] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.500051][T12622] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  218.511536][T12622] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  218.527263][T12622] veth1_vlan: left promiscuous mode
[  218.533934][T12622] veth0_vlan: left promiscuous mode
[  218.540008][T12622] veth0_vlan: entered promiscuous mode
[  218.548883][T12622] veth1_vlan: entered promiscuous mode
[  218.565774][T12622] veth1_macvtap: left promiscuous mode
[  218.594669][T12622] veth0_macvtap: left promiscuous mode
[  218.611060][T12622] veth0_macvtap: entered promiscuous mode
[  218.620807][T12622] veth1_macvtap: entered promiscuous mode
[  218.639287][T12622] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.660400][T12622] 8021q: adding VLAN 0 to HW filter on device bond1
[  218.670089][T12622] 8021q: adding VLAN 0 to HW filter on device bond2
[  218.680470][T12622] 8021q: adding VLAN 0 to HW filter on device bond3
[  218.696745][T12622] batman_adv: batadv0: Interface activated: gretap1
[  218.716926][T12622] 8021q: adding VLAN 0 to HW filter on device bond4
[  218.772720][T12622] 8021q: adding VLAN 0 to HW filter on device bond6
[  218.792595][T12622] 8021q: adding VLAN 0 to HW filter on device eth0
[  218.804138][T12622] 8021q: adding VLAN 0 to HW filter on device eth1
[  218.812721][T12622] 8021q: adding VLAN 0 to HW filter on device eth2
[  218.821483][T12622] 8021q: adding VLAN 0 to HW filter on device eth3
[  218.829758][T12622] 8021q: adding VLAN 0 to HW filter on device bond9
[  218.837731][T12622] 8021q: adding VLAN 0 to HW filter on device bond10
[  218.846741][T12622] 8021q: adding VLAN 0 to HW filter on device bond12
[  218.863144][T12671] netlink: 'syz.1.1674': attribute type 4 has an invalid length.
[  218.864146][T12670] netlink: 'syz.1.1674': attribute type 4 has an invalid length.
[  218.911829][ T8411] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  218.921330][ T8411] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.930475][ T8411] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  218.939182][ T8411] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.948030][ T8411] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  218.958846][ T8411] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.973289][ T5999] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  218.982546][ T5999] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  218.991542][ T5999] bond3: (slave veth3): making interface the new active one
[  219.000519][ T5999] bond3: active interface up!
[  219.067420][ T8411] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  219.102503][ T8411] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.142209][T12676] __nla_validate_parse: 5 callbacks suppressed
[  219.142229][T12676] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1677'.
[  219.157701][T12674] vlan3: entered promiscuous mode
[  219.176133][T12678] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  219.216804][T12678] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20000
[  219.363441][T12684] bond4: option tlb_dynamic_lb: invalid value (115)
[  219.381201][T12684] bond4 (unregistering): Released all slaves
[  219.472042][T12694] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  219.491069][T12663] infiniband uyz0: set active
[  219.502092][T12694] syzkaller0: entered promiscuous mode
[  219.513438][T12663] infiniband uyz0: added bridge_slave_1
[  219.525453][T12694] syzkaller0: entered allmulticast mode
[  219.570330][T12663] smbdirect: ib_dev[uyz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  219.585894][T12663] smbdirect: ib_dev[uyz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  219.603594][T12663] smbdirect: ib_dev[uyz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  219.626144][T12698] tipc: Resetting bearer <eth:syzkaller0>
[  219.635708][T12663] RDS/IB: uyz0: added
[  219.644154][T12663] smc: adding ib device uyz0 with port count 1
[  219.668546][T12693] tipc: Resetting bearer <eth:syzkaller0>
[  219.676726][T12663] smc:    ib device uyz0 port 1 has no pnetid
[  219.697675][T12693] tipc: Disabling bearer <eth:syzkaller0>
[  219.726914][T12709] netlink: 'syz.4.1686': attribute type 1 has an invalid length.
[  219.767031][T12712] netlink: 'syz.3.1687': attribute type 3 has an invalid length.
[  219.878013][T12709] bond4: (slave bridge6): Enslaving as a backup interface with an up link
[  219.912606][T12718] macvlan3: entered promiscuous mode
[  219.933631][T12718] macvlan3: entered allmulticast mode
[  219.951647][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1689'.
[  219.964416][T12718] bond4: entered promiscuous mode
[  219.973325][T12718] bridge6: entered promiscuous mode
[  219.979460][T12718] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  219.988537][T12718] bond4: left promiscuous mode
[  219.993908][T12718] bridge6: left promiscuous mode
[  220.032636][T12725] 8021q: VLANs not supported on ip6_vti0
[  220.128802][T12728] openvswitch: netlink: IP tunnel dst address not specified
[  220.493254][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.025140][T12786] netlink: 'syz.0.1707': attribute type 1 has an invalid length.
[  221.077085][T12786] gretap2: entered allmulticast mode
[  221.092633][T12786] bond14: (slave gretap2): making interface the new active one
[  221.097383][T12795] xt_CT: You must specify a L4 protocol and not use inversions on it
[  221.108514][T12786] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  221.133140][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.141677][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.150181][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.158674][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.199240][T12799] syzkaller0: entered promiscuous mode
[  221.215943][T12799] syzkaller0: entered allmulticast mode
[  221.292985][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  221.321965][T12809] gretap0: entered promiscuous mode
[  221.328200][T12809] macsec1: entered allmulticast mode
[  221.333825][T12809] gretap0: entered allmulticast mode
[  221.341898][T12809] gretap0: left allmulticast mode
[  221.348268][T12809] gretap0: left promiscuous mode
[  221.712677][T12843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1721'.
[  221.930199][T12851] lo speed is unknown, defaulting to 1000
[  222.055301][T12865] netlink: 'syz.4.1728': attribute type 1 has an invalid length.
[  222.087895][T12867] netlink: 16058 bytes leftover after parsing attributes in process `syz.2.1730'.
[  222.118679][T12865] bond5: entered promiscuous mode
[  222.135076][T12865] 8021q: adding VLAN 0 to HW filter on device bond5
[  222.309127][T12877] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1735'.
[  222.592460][T12896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.609412][T12896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.623287][T12896] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.652197][T12900] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR
[  222.762375][T12920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1744'.
[  222.816329][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1746'.
[  222.895631][T12936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1747'.
[  223.262346][T12954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1751'.
[  223.432411][T12963] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1752'.
[  223.496788][T12963] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  223.640971][    C1] ==================================================================
[  223.649131][    C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30
[  223.657159][    C1] Read of size 2 at addr ffff888178b520f4 by task syz.0.1756/12973
[  223.665095][    C1] 
[  223.667473][    C1] CPU: 1 UID: 0 PID: 12973 Comm: syz.0.1756 Not tainted syzkaller #0 PREEMPT(full) 
[  223.667498][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  223.667511][    C1] Call Trace:
[  223.667519][    C1]  <IRQ>
[  223.667529][    C1]  dump_stack_lvl+0xe8/0x150
[  223.667559][    C1]  print_address_description+0x55/0x1e0
[  223.667580][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  223.667609][    C1]  print_report+0x58/0x70
[  223.667626][    C1]  kasan_report+0x117/0x150
[  223.667653][    C1]  ? dev_hard_start_xmit+0x7c7/0x830
[  223.667685][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  223.667708][    C1]  qdisc_pkt_len_segs_init+0x7f7/0xa30
[  223.667734][    C1]  __netif_receive_skb_core+0x13aa/0x30b0
[  223.667757][    C1]  ? lock_release+0x4b/0x3c0
[  223.667790][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  223.667821][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  223.667852][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  223.667874][    C1]  ? unwind_get_return_address+0x4d/0x90
[  223.667898][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  223.667922][    C1]  ? arch_stack_walk+0xfb/0x150
[  223.667952][    C1]  ? unwind_next_frame+0x8f/0x2550
[  223.667979][    C1]  __netif_receive_skb_list_core+0x24d/0x830
[  223.668008][    C1]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  223.668060][    C1]  ? unwind_next_frame+0x1baf/0x2550
[  223.668088][    C1]  netif_receive_skb_list_internal+0x995/0xcf0
[  223.668115][    C1]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  223.668137][    C1]  ? rcu_is_watching+0x15/0xb0
[  223.668158][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  223.668179][    C1]  ? lock_release+0x4b/0x3c0
[  223.668208][    C1]  ? __css_rstat_updated+0x235/0x540
[  223.668241][    C1]  ? __pfx___css_rstat_updated+0x10/0x10
[  223.668272][    C1]  napi_complete_done+0x299/0x730
[  223.668297][    C1]  ? __pfx_napi_complete_done+0x10/0x10
[  223.668319][    C1]  ? rcu_is_watching+0x15/0xb0
[  223.668341][    C1]  ? gro_receive_skb+0x70e/0xc30
[  223.668368][    C1]  gro_cell_poll+0x5ab/0x5d0
[  223.668398][    C1]  ? gro_cell_poll+0x175/0x5d0
[  223.668425][    C1]  __napi_poll+0xaa/0x330
[  223.668449][    C1]  net_rx_action+0x61d/0xf50
[  223.668481][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  223.668505][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  223.668536][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  223.668566][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  223.668598][    C1]  ? sched_clock+0x3f/0x60
[  223.668634][    C1]  handle_softirqs+0x225/0x840
[  223.668664][    C1]  ? do_softirq+0x76/0xd0
[  223.668691][    C1]  ? tun_rx_batched+0x185/0x790
[  223.668718][    C1]  do_softirq+0x76/0xd0
[  223.668743][    C1]  </IRQ>
[  223.668750][    C1]  <TASK>
[  223.668758][    C1]  __local_bh_enable_ip+0xf8/0x130
[  223.668783][    C1]  ? tun_rx_batched+0x185/0x790
[  223.668808][    C1]  tun_rx_batched+0x616/0x790
[  223.668837][    C1]  ? __pfx_tun_rx_batched+0x10/0x10
[  223.668862][    C1]  ? tun_get_user+0x26ca/0x4350
[  223.668887][    C1]  ? rcu_is_watching+0x15/0xb0
[  223.668907][    C1]  ? lock_acquire+0x5f/0x350
[  223.668935][    C1]  ? tun_get_user+0x2373/0x4350
[  223.668959][    C1]  ? rcu_is_watching+0x15/0xb0
[  223.668979][    C1]  ? trace_irq_enable+0x3b/0x140
[  223.669008][    C1]  tun_get_user+0x2b04/0x4350
[  223.669033][    C1]  ? rcu_is_watching+0x15/0xb0
[  223.669058][    C1]  ? lock_release+0x4b/0x3c0
[  223.669085][    C1]  ? lock_release+0x4b/0x3c0
[  223.669113][    C1]  ? tun_get_user+0x26ca/0x4350
[  223.669140][    C1]  ? aa_file_perm+0x4ed/0x15f0
[  223.669161][    C1]  ? __pfx_tun_get_user+0x10/0x10
[  223.669186][    C1]  ? __futex_wait+0x358/0x400
[  223.669215][    C1]  ? __pfx___futex_wait+0x10/0x10
[  223.669243][    C1]  ? ref_tracker_alloc+0x341/0x4b0
[  223.669267][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  223.669291][    C1]  ? tun_get+0x1c/0x2f0
[  223.669314][    C1]  ? tun_get+0x1c/0x2f0
[  223.669336][    C1]  ? rcu_is_watching+0x15/0xb0
[  223.669354][    C1]  ? tun_get+0x1c/0x2f0
[  223.669376][    C1]  ? lock_release+0x4b/0x3c0
[  223.669404][    C1]  ? apparmor_file_permission+0x1f4/0x300
[  223.669431][    C1]  ? tun_get+0x1c/0x2f0
[  223.669456][    C1]  tun_chr_write_iter+0x113/0x200
[  223.669488][    C1]  vfs_write+0x612/0xba0
[  223.669521][    C1]  ? __pfx_vfs_write+0x10/0x10
[  223.669556][    C1]  ? __fget_files+0x2a/0x420
[  223.669583][    C1]  ksys_write+0x150/0x270
[  223.669619][    C1]  ? __pfx_ksys_write+0x10/0x10
[  223.669646][    C1]  ? rcu_is_watching+0x15/0xb0
[  223.669667][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.669688][    C1]  do_syscall_64+0x174/0x580
[  223.669714][    C1]  ? trace_irq_disable+0x3b/0x140
[  223.669740][    C1]  ? clear_bhb_loop+0x40/0x90
[  223.669762][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  223.669782][    C1] RIP: 0033:0x7f478f19ce59
[  223.669800][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  223.669818][    C1] RSP: 002b:00007f4790030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  223.669842][    C1] RAX: ffffffffffffffda RBX: 00007f478f415fa0 RCX: 00007f478f19ce59
[  223.669859][    C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000006
[  223.669873][    C1] RBP: 00007f478f232e6f R08: 0000000000000000 R09: 0000000000000000
[  223.669886][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  223.669897][    C1] R13: 00007f478f416038 R14: 00007f478f415fa0 R15: 00007ffd7501e4c8
[  223.669921][    C1]  </TASK>
[  223.669929][    C1] 
[  224.201346][    C1] The buggy address belongs to the physical page:
[  224.207870][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x178b52
[  224.216748][    C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  224.223974][    C1] raw: 057ff00000000000 ffffea0005e2d488 ffffea0005e2d488 0000000000000000
[  224.232581][    C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  224.241180][    C1] page dumped because: kasan: bad access detected
[  224.247631][    C1] page_owner info is not present (never set?)
[  224.254838][    C1] 
[  224.257179][    C1] Memory state around the buggy address:
[  224.262821][    C1]  ffff888178b51f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.270926][    C1]  ffff888178b52000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.279009][    C1] >ffff888178b52080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.287124][    C1]                                                              ^
[  224.294895][    C1]  ffff888178b52100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.302974][    C1]  ffff888178b52180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  224.311048][    C1] ==================================================================
[  224.319216][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  224.326461][    C1] CPU: 1 UID: 0 PID: 12973 Comm: syz.0.1756 Not tainted syzkaller #0 PREEMPT(full) 
[  224.335893][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  224.345979][    C1] Call Trace:
[  224.349286][    C1]  <IRQ>
[  224.352150][    C1]  vpanic+0x56c/0xa60
[  224.356162][    C1]  ? rcu_is_watching+0x15/0xb0
[  224.360945][    C1]  ? __pfx_vpanic+0x10/0x10
[  224.365467][    C1]  ? rcu_is_watching+0x15/0xb0
[  224.370250][    C1]  panic+0xc5/0xd0
[  224.373994][    C1]  ? __pfx_panic+0x10/0x10
[  224.378430][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  224.384079][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  224.389734][    C1]  check_panic_on_warn+0x89/0xb0
[  224.394685][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  224.400334][    C1]  end_report+0x73/0x170
[  224.404603][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  224.410246][    C1]  kasan_report+0x128/0x150
[  224.414776][    C1]  ? dev_hard_start_xmit+0x7c7/0x830
[  224.420096][    C1]  ? qdisc_pkt_len_segs_init+0x7f7/0xa30
[  224.425752][    C1]  qdisc_pkt_len_segs_init+0x7f7/0xa30
[  224.431232][    C1]  __netif_receive_skb_core+0x13aa/0x30b0
[  224.436970][    C1]  ? lock_release+0x4b/0x3c0
[  224.441586][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  224.446893][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  224.452113][    C1]  ? __pfx___netif_receive_skb_core+0x10/0x10
[  224.458191][    C1]  ? unwind_get_return_address+0x4d/0x90
[  224.463839][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  224.470011][    C1]  ? arch_stack_walk+0xfb/0x150
[  224.474884][    C1]  ? unwind_next_frame+0x8f/0x2550
[  224.480021][    C1]  __netif_receive_skb_list_core+0x24d/0x830
[  224.486026][    C1]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[  224.492552][    C1]  ? unwind_next_frame+0x1baf/0x2550
[  224.497866][    C1]  netif_receive_skb_list_internal+0x995/0xcf0
[  224.504058][    C1]  ? netif_receive_skb_list_internal+0x501/0xcf0
[  224.510414][    C1]  ? rcu_is_watching+0x15/0xb0
[  224.515198][    C1]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[  224.521980][    C1]  ? lock_release+0x4b/0x3c0
[  224.526598][    C1]  ? __css_rstat_updated+0x235/0x540
[  224.531913][    C1]  ? __pfx___css_rstat_updated+0x10/0x10
[  224.537605][    C1]  napi_complete_done+0x299/0x730
[  224.542657][    C1]  ? __pfx_napi_complete_done+0x10/0x10
[  224.548223][    C1]  ? rcu_is_watching+0x15/0xb0
[  224.553000][    C1]  ? gro_receive_skb+0x70e/0xc30
[  224.557960][    C1]  gro_cell_poll+0x5ab/0x5d0
[  224.562572][    C1]  ? gro_cell_poll+0x175/0x5d0
[  224.567357][    C1]  __napi_poll+0xaa/0x330
[  224.571723][    C1]  net_rx_action+0x61d/0xf50
[  224.576338][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  224.581478][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  224.586702][    C1]  ? __pfx_sched_clock_cpu+0x10/0x10
[  224.592011][    C1]  ? kvm_sched_clock_read+0x11/0x20
[  224.597230][    C1]  ? sched_clock+0x3f/0x60
[  224.601677][    C1]  handle_softirqs+0x225/0x840
[  224.606467][    C1]  ? do_softirq+0x76/0xd0
[  224.610819][    C1]  ? tun_rx_batched+0x185/0x790
[  224.615690][    C1]  do_softirq+0x76/0xd0
[  224.619864][    C1]  </IRQ>
[  224.622810][    C1]  <TASK>
[  224.625759][    C1]  __local_bh_enable_ip+0xf8/0x130
[  224.630888][    C1]  ? tun_rx_batched+0x185/0x790
[  224.635759][    C1]  tun_rx_batched+0x616/0x790
[  224.640460][    C1]  ? __pfx_tun_rx_batched+0x10/0x10
[  224.645677][    C1]  ? tun_get_user+0x26ca/0x4350
[  224.650542][    C1]  ? rcu_is_watching+0x15/0xb0
[  224.655323][    C1]  ? lock_acquire+0x5f/0x350
[  224.660029][    C1]  ? tun_get_user+0x2373/0x4350
[  224.664898][    C1]  ? rcu_is_watching+0x15/0xb0
[  224.669677][    C1]  ? trace_irq_enable+0x3b/0x140
[  224.674631][    C1]  tun_get_user+0x2b04/0x4350
[  224.679327][    C1]  ? rcu_is_watching+0x15/0xb0
[  224.684106][    C1]  ? lock_release+0x4b/0x3c0
[  224.688723][    C1]  ? lock_release+0x4b/0x3c0
[  224.693373][    C1]  ? tun_get_user+0x26ca/0x4350
[  224.698253][    C1]  ? aa_file_perm+0x4ed/0x15f0
[  224.703031][    C1]  ? __pfx_tun_get_user+0x10/0x10
[  224.708082][    C1]  ? __futex_wait+0x358/0x400
[  224.712789][    C1]  ? __pfx___futex_wait+0x10/0x10
[  224.717836][    C1]  ? ref_tracker_alloc+0x341/0x4b0
[  224.722975][    C1]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  224.728463][    C1]  ? tun_get+0x1c/0x2f0
[  224.732638][    C1]  ? tun_get+0x1c/0x2f0
[  224.736817][    C1]  ? rcu_is_watching+0x15/0xb0
[  224.741598][    C1]  ? tun_get+0x1c/0x2f0
[  224.745773][    C1]  ? lock_release+0x4b/0x3c0
[  224.750397][    C1]  ? apparmor_file_permission+0x1f4/0x300
[  224.756183][    C1]  ? tun_get+0x1c/0x2f0
[  224.760361][    C1]  tun_chr_write_iter+0x113/0x200
[  224.765405][    C1]  vfs_write+0x612/0xba0
[  224.769676][    C1]  ? __pfx_vfs_write+0x10/0x10
[  224.774464][    C1]  ? __fget_files+0x2a/0x420
[  224.779077][    C1]  ksys_write+0x150/0x270
[  224.783428][    C1]  ? __pfx_ksys_write+0x10/0x10
[  224.788312][    C1]  ? rcu_is_watching+0x15/0xb0
[  224.793095][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.799190][    C1]  do_syscall_64+0x174/0x580
[  224.803847][    C1]  ? trace_irq_disable+0x3b/0x140
[  224.808917][    C1]  ? clear_bhb_loop+0x40/0x90
[  224.813628][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  224.819557][    C1] RIP: 0033:0x7f478f19ce59
[  224.824001][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  224.843814][    C1] RSP: 002b:00007f4790030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  224.852303][    C1] RAX: ffffffffffffffda RBX: 00007f478f415fa0 RCX: 00007f478f19ce59
[  224.860301][    C1] RDX: 000000000000fdef RSI: 0000200000000440 RDI: 0000000000000006
[  224.868296][    C1] RBP: 00007f478f232e6f R08: 0000000000000000 R09: 0000000000000000
[  224.876381][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  224.884371][    C1] R13: 00007f478f416038 R14: 00007f478f415fa0 R15: 00007ffd7501e4c8
[  224.892375][    C1]  </TASK>
[  224.896016][    C1] Kernel Offset: disabled
[  224.900347][    C1] Rebooting in 86400 seconds..