last executing test programs:

2m0.712837207s ago: executing program 0 (id=4001):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
sendmmsg$alg(r2, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x13, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_delrule={0x30, 0x18, 0xc961a4b31a2c6a35, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @private0}]}, 0x30}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0], 0x110}, 0x1, 0x0, 0x0, 0x4040050}, 0x0)

2m0.561150299s ago: executing program 0 (id=4003):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @loopback, 0x15, 0x0, 'wlc\x00', 0x39, 0x6, 0x1f}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="b70200001a140000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000002b000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e6185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfd8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f659cb132b803000000661d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94)
r2 = socket(0xa, 0x1, 0x0)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x6, @private1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108)
setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0)
r5 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x1a0000010})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000080)={0x2010})
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000180)={0x2, 0x14, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0)
recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x20008004)
r8 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'rose0\x00'})
getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000540), &(0x7f0000000600)=0x68)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8=r7, @ANYRES64=r6, @ANYRES16], 0x60}, 0x1, 0x0, 0x0, 0x2000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet6_tcp_buf(r0, 0x6, 0xd, &(0x7f0000000080)='>', 0x1)
setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x2000000)
r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="070000000000000000000000000000000000000098e065b770a255e326af4f7a514f28abbf31f98eaf8d7cd931a2a7da48a1697fde8b69504c8dc2603361e75ae9f340182527ab32c29da11ca5aca9851970705cd05aec524599c5263dd835886f4a97577029da52a69927be3c65152402a9f5e466896ca11c8a17e11cb6abbf54679b96b315724ec4efb649cac500009e3a4ec1bfc45f040ffb97e3bf017c9d489fb63be8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r9, 0x0)

2m0.038831628s ago: executing program 0 (id=4010):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="850000008c00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xbe}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a40)='GPL\x00', 0x6, 0x14, &(0x7f0000000a80)=""/20, 0x41100, 0x5, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x1, 0x0, 0x7fff, 0x400000}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', <r3=>0x0})
r4 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000380))
ioctl$XFS_IOC_FSGROWFSDATA(r4, 0x4010586e, &(0x7f0000000500)={0xe, 0x8})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r0, r3, 0x25, 0x4, @void}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
bind$inet6(r5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x6, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffb}, @generic={0x34, 0x6, 0x3, 0x1ff, 0x18c1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xf7, &(0x7f0000000080)=""/247, 0x41000, 0x39, '\x00', r3, 0x0, r5, 0x8, &(0x7f0000000180)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x9, 0x6, 0x72}, 0x10, 0x24b8d, 0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000200)=[{0x1, 0x5, 0xf, 0x8}, {0x1, 0x5, 0xd, 0x1}, {0x4, 0x1, 0xe, 0xc}, {0x2, 0x1, 0x8, 0x9}, {0x3, 0x3, 0x8, 0x9}, {0x2, 0x1, 0x6, 0x3}], 0x10, 0x401}, 0x94)

1m59.597471417s ago: executing program 0 (id=4018):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), r0)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001700000048000680440006"], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socket$kcm(0x10, 0x2, 0x10)
write$tun(r4, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x5c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "4c5ea56c3a455d4636377e02a7ba975bef793cac0b88efef", "9bebe9b43ebc49021793eb932af832d269285141cb114a8c19bfadaced61a2aa"}}}}, 0x6a)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x628, 0xf0, 0x2f8, 0xffffffff, 0xf0, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00', {}, {}, 0x0, 0x0, 0x1}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7", 0xf)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8044)
sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x20000080)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001140), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r6=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fdfffffb00000000010000000c0005001700000000000000100007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c0002000000100000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001f40), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002000)={&(0x7f0000001200)=ANY=[@ANYBLOB="3b4b4a4f3e95150bd9d4998eaefc2b0db3fcda471fc6d23ec57ac47a67ce54ad0113e9d95af436b0ef18368e996cf28fbc6ae32897bfc1677e25f244b2a9d0a0fe3a0aa10e6dc37464f412204a9bac7160a00d7b9b800817bbfc2799cbd51c05f93b843bd5e29235b7ea81d5e350d219c99008c0a6943b1b56dd4818e76a3bacf934392fdab810594fc16cf62a7df076d392052563d7ef09621b9c195c068a64af6f882bd24597ef6469fde0e7064a252602fbf24dcc21ab2fe98b827359a6053d7511808f8db4ed1db4b0570d63f3908794bd0ddd16bccce81320c9bf0ff37c0ab530420e3eb44e16b82897039193e9fe13f49fdc4e8fc5b561b765a190e534c9085f46203173e0b252e854f54defeb9cc8d1008f15f20bfb4dae334a2a", @ANYRES16=r7, @ANYBLOB="08002bbd7000fedbdf250100000008000c000300000008000200050000001400060020010000000000000000000000000001080002000500000008000c0003000000"], 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x20040800)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r8=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', <r9=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x78, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x5555555555540204}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
r10 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r10, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4)
setsockopt$TIPC_CONN_TIMEOUT(r10, 0x10f, 0x82, &(0x7f0000000100)=0x6, 0x4)

1m59.290820198s ago: executing program 0 (id=4019):
r0 = epoll_create1(0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00')
mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, 0x0)
epoll_create1(0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) (async)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async)
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async)
syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') (async)
mkdirat$cgroup(r3, &(0x7f0000000000)='syz0\x00', 0x1ff) (async)
ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, 0x0) (async)

1m59.166734217s ago: executing program 0 (id=4023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000040a0107000000000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
r3 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000100)={'c', ' *:* ', 'wm\x00'}, 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)

1m44.117399519s ago: executing program 32 (id=4023):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000040a0107000000000000000001"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000020)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000001c0), 0x12)
r3 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r3, &(0x7f0000000100)={'c', ' *:* ', 'wm\x00'}, 0x9)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0)

6.232423352s ago: executing program 1 (id=5259):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xfffffcf1, @private1, 0x8001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x5e23, 0xffffffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="78b875449d", 0x5}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="900100"], 0x190}}], 0x2, 0x42) (async)
shutdown(r0, 0x1)
setsockopt(r0, 0xa0, 0x82, &(0x7f00000002c0)="1ae305e112000000", 0xfffffffffffffeb3)

6.01295072s ago: executing program 1 (id=5263):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
splice(r0, 0x0, r1, 0x0, 0x6, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r2 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r2, &(0x7f0000000040), 0x10)
listen(r2, 0x0)
r3 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r3, &(0x7f0000000080), 0x10)
r4 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0)
setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8)
sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r1, 0x0)
openat$cgroup_ro(r1, &(0x7f0000000040)='rdma.current\x00', 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040013000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000100066000200000000001800000000003e0000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8feffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

6.009092322s ago: executing program 3 (id=5264):
pipe(&(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x111001, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
r6 = socket(0x11, 0x3, 0x7)
bind$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r9=>0x0})
socket(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r10, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r10, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000003000000", 0xfdd0}], 0x1}, 0x4005)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r13=>0xffffffffffffffff, <r14=>0xffffffffffffffff})
sendmsg$inet(r14, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r13, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r15=>0xffffffffffffffff, <r16=>0xffffffffffffffff})
sendmsg$inet(r16, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r15, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)

5.654344991s ago: executing program 3 (id=5269):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0)
preadv(r0, &(0x7f0000000040)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x100000000000010e, 0x80004, 0x9)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180), &(0x7f0000000100)=0x4)
sendmsg$IPSET_CMD_SWAP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4002481}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, 0x6, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4024800}, 0x80000)

5.57302981s ago: executing program 3 (id=5270):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x4, 0x0, 0x4a}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2a}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48841}, 0x2000c010) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010)
close(0x4)
setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x4, 0x4)

5.458960201s ago: executing program 3 (id=5273):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x1, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x48000)
sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x24, 0x17, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x20004450)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000)
sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
socket(0x10, 0x803, 0x0)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0x64, 0xd99d}}]}]}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCBRDELBR(r8, 0x89a2, &(0x7f0000000000)='bridge0\x00')
sendto$packet(r4, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000040000000800000040"], 0x50)
socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)

5.288776099s ago: executing program 2 (id=5276):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94)
r1 = socket$inet6(0xa, 0x3, 0x3)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'veth1_to_hsr\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={0xffffffffffffffff, r2, 0x25, 0x10, @val=@netfilter={0x7, 0x1, 0x9}}, 0x20)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x3c}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRESHEX=r5], 0x44}}, 0x10000000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYRESHEX=r5], 0x44}}, 0x10000000)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESHEX=0x0, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c000380040003800400010022d3c7a8d0ab790d858ee17969436b56b7c67afb1faf15a470719bcfdec72e37a2d2eb939d86fd54f31cbf", @ANYRES8=0x0, @ANYRES64=r5, @ANYBLOB="5906f393c7518fe098cb7781ab4a682b702859633a1a7a1c645007e10ba723c6ab27c0677f0bda1a9825007f618c5e5cbf2f8b9d2b22baad26f2658c857998c191f44b3579d0daf9df4d97cf9515a06c9ff7bd0f72387f8a77127aab517a9bd2dc8ee1e915cfbe0208ebb87c9e33e9263d2a4c6a6261e804c6e82607", @ANYRESOCT, @ANYRESDEC], 0x38}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001720c002b8008000100", @ANYRES32=r0, @ANYBLOB="c1f944b1a8b2f331970a4aa9c7f722353ae460360f2992a9b0b8dc57fb6d3ad6dd6e40fe79460a9b440bdd1a3693b3a1ba8d28e399c5e5dd15771ab532fae8ae1d4f006f1add92bf5a7332a3ab130ae19825c3750b6c27ffcd0a37e6db786a44983d3e09291fb612f516410f16e889124ebb2ca114f34e21f7662e70af575ca22866b9b2edcde344906cc951a4dd87e71185"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001720c002b8008000100", @ANYRES32=r0, @ANYBLOB="c1f944b1a8b2f331970a4aa9c7f722353ae460360f2992a9b0b8dc57fb6d3ad6dd6e40fe79460a9b440bdd1a3693b3a1ba8d28e399c5e5dd15771ab532fae8ae1d4f006f1add92bf5a7332a3ab130ae19825c3750b6c27ffcd0a37e6db786a44983d3e09291fb612f516410f16e889124ebb2ca114f34e21f7662e70af575ca22866b9b2edcde344906cc951a4dd87e71185"], 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x0)
bpf$LINK_DETACH(0x22, &(0x7f00000000c0)=r3, 0x4)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) (async)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000740)) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000740)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=<r12=>0x0)
sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000700), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000225bd7000fedbdf251200000008000100", @ANYRES32=r11, @ANYBLOB="08001500c000000008000100", @ANYRES32=r12, @ANYBLOB="06dc1500c10000000800150002003d8cb755805aba26058e"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r7], &(0x7f0000003ff6)='GPL\x00', 0xa7ea7c2, 0xc9, &(0x7f0000000080)=""/201, 0x41000, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
socket$inet_udp(0x2, 0x2, 0x0) (async)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x41, &(0x7f0000000100)=0x31e, 0x4) (async)
setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x41, &(0x7f0000000100)=0x31e, 0x4)
setsockopt$SO_TIMESTAMPING(r13, 0x1, 0x25, &(0x7f0000000040)=0x488a, 0x4)
socket$inet6_sctp(0xa, 0xd, 0x84)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x8, 0x20, 0xffff29b3, 0x7, {{0x17, 0x4, 0x3, 0x5, 0x5c, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast1, {[@noop, @timestamp_addr={0x44, 0x4, 0xce, 0x1, 0x8}, @timestamp_prespec={0x44, 0x2c, 0x49, 0x3, 0x9, [{@empty, 0x10001}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x6}, {@rand_addr=0x64010101, 0x5}, {@local, 0x1}, {@remote, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x1e, 0x1, 0xf, [{@local, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x5}]}]}}}}}) (async)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000980)={'syztnl0\x00', 0x0, 0x8, 0x20, 0xffff29b3, 0x7, {{0x17, 0x4, 0x3, 0x5, 0x5c, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @multicast1, {[@noop, @timestamp_addr={0x44, 0x4, 0xce, 0x1, 0x8}, @timestamp_prespec={0x44, 0x2c, 0x49, 0x3, 0x9, [{@empty, 0x10001}, {@dev={0xac, 0x14, 0x14, 0xe}, 0x6}, {@rand_addr=0x64010101, 0x5}, {@local, 0x1}, {@remote, 0x2}]}, @timestamp_addr={0x44, 0x14, 0x1e, 0x1, 0xf, [{@local, 0x401}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0x5}]}]}}}}})
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0)
r14 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000680)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r14, 0x10e, 0xc, &(0x7f0000000680)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
sendmsg$nl_route(r14, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000004)

5.288209086s ago: executing program 3 (id=5277):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$tun(r2, &(0x7f0000000800)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x30, r2, 0x8)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)
mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0xe, 0x12, r3, 0x952de000)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@fwd={0xe}, @typedef={0x6, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x30]}}, 0x0, 0x42}, 0x28)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, r4, 0x1, 0x3}, 0x48)
r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
recvmsg(0xffffffffffffffff, 0x0, 0x400002e1)
sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000016709c54fa16d0355c"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0)

5.177633409s ago: executing program 5 (id=5278):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, <r3=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r1}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000008000000e27f000001", @ANYRESOCT=r1, @ANYBLOB="bd671ae9ff7a68d651654e05175fa6b7be1b090149f2b49f81e693505587a63220b294f0a256cd81533537521c28b13aac0132763a535c07f6bf186fb86072b285f26053375cfb3f6043798ef728f6b15b090048bc399e72fc3a8606c6945b755f8d7d4d4b946a9d00f94216621e163435c2bef5cfc6123ba252a90b9b5d15303bda1e1e9b69af1bb389069d5738224fe55f78ab9e58bde69e0db5397fac7b817cafa199b6ff", @ANYRESHEX=r3, @ANYBLOB="a4e8ae1756b59819429c483dafee01ff5ca80d77f47a2abfeb", @ANYRES64=r0], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r4, &(0x7f0000000a80), 0x0}, 0x20)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a802040000000080000000014000200fe8000000000000000000000000000bb150001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x0)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e0000006600816657bb97c9269de9aaec8488040f0000004cb9cca7480ef402000000e305000a00000200000000", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) (async)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000240), &(0x7f00000002c0)=r1}, 0x20) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000008000000e27f000001", @ANYRESOCT=r1, @ANYBLOB="bd671ae9ff7a68d651654e05175fa6b7be1b090149f2b49f81e693505587a63220b294f0a256cd81533537521c28b13aac0132763a535c07f6bf186fb86072b285f26053375cfb3f6043798ef728f6b15b090048bc399e72fc3a8606c6945b755f8d7d4d4b946a9d00f94216621e163435c2bef5cfc6123ba252a90b9b5d15303bda1e1e9b69af1bb389069d5738224fe55f78ab9e58bde69e0db5397fac7b817cafa199b6ff", @ANYRESHEX=r3, @ANYBLOB="a4e8ae1756b59819429c483dafee01ff5ca80d77f47a2abfeb", @ANYRES64=r0], 0x48) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b80)={r4, &(0x7f0000000a80), 0x0}, 0x20) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a802040000000080000000014000200fe8000000000000000000000000000bb150001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) (async)
sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x0) (async)

5.121167807s ago: executing program 5 (id=5279):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r4, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080) (async)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4080)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0xd5}, 0x4000000)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000380)="a513", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f00000014c0)="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", 0x2ea}], 0x1}}], 0x2, 0x42054)
sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0)
r8 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000003c0)={0xbe, 0xf, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim, @jumbo={0xc2, 0x4, 0x3}, @generic={0x7, 0x5d, "1eb0f541559ff00b7b8270cc8535c7d8ddf45368365a0b903ea517da35cfd59b3ec45b353fd88972eba589df5d49d0f47e4313aad5edcb31de466e9904ded27fa97861ee24b4fd8e0d9c7f91f7adef073609304d63fce9bcd90ac26b74"}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x88)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0xb, 0x4, 0xe, 0x88110, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50)
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r11=>0xffffffffffffffff, <r12=>0xffffffffffffffff})
close(0x3) (async)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x6, 0x4, 0x400, 0xf, 0x0, 0x1}, 0x50)
r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r11, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4)
sendmsg$unix(r12, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

4.868334408s ago: executing program 4 (id=5280):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x438, 0x358, 0x1b0, 0xffffffff, 0x358, 0x0, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x178, 0x1b0, 0x48, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@mcast2, [0xff, 0xff, 0xff], 0x4e20, 0x5c, 0x8, 0x4e21, 0x8, 0x2}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv4=@loopback, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x30c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0xae, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@ip={@loopback, @loopback, 0xff, 0xff, 'gretap0\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x32, 0x2, 0x56}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x84, 0x0, 0x2}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id=0x64, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300005500000085000000d000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94)
recvmmsg(r0, &(0x7f0000001f40)=[{{&(0x7f0000000080)=@pppol2tpin6, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000980)=""/200, 0xc8}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/44, 0x2c}, {&(0x7f0000001ac0)=""/250, 0xfa}, {&(0x7f0000001bc0)=""/220, 0xdc}, {&(0x7f0000001cc0)=""/11, 0xb}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/209, 0xd1}], 0x8}, 0x9}], 0x1, 0x43, &(0x7f0000001f80))
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x27, 0xe40, 0x0, &(0x7f0000000640)="f8ad48cc02cb29dcc8007f5b86dd", 0x0, 0x3ad9, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x54, 0x18, 0x1, 0x70bd29, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x80, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

4.866342536s ago: executing program 4 (id=5281):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async, rerun: 32)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) (rerun: 32)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400df00", @ANYRES16=r1, @ANYBLOB="000228bd7000fddbdf25120000000c009900000000005d00000006001200080000000c001180040006000400010006001200030000000600ab0001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000800}, 0x20040008) (async)
r2 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@nfc, &(0x7f0000000180)=0x80, 0x800) (async, rerun: 32)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0600000004000000032000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000004e7ecc08047a48b0e9519f6c"], 0x48) (rerun: 32)
bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000680)={r3, 0x0, 0x0, 0x1572e4e71c602e6b}, 0x20) (async)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001540)={0x3, 0x8200, 0x6, 0x1, <r4=>0x0}, &(0x7f0000001580)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001640)={r4, 0x68, &(0x7f00000015c0)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @private=0xa010100}, @in6={0xa, 0x4e22, 0x4, @mcast2, 0x3}, @in6={0xa, 0x4e22, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, @in={0x2, 0x4e22, @loopback}]}, &(0x7f0000001680)=0x10) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100e1ff0000000000000000850000008a00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) (async, rerun: 32)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000500)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0xe, 0xf9}, &(0x7f0000000000)=0x9c)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r9=>0x0})
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000001480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001440)={&(0x7f00000006c0)=@newtfilter={0xd58, 0x2c, 0x10, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0x9}, {0x3, 0xfff5}, {0x3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x50, 0x2, [@TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "226e3c2baa2425216bb71e3a52fcf5b5"}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast2}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}, @TCA_RATE={0x6, 0x5, {0x40, 0x94}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @filter_kind_options=@f_bpf={{0x8}, {0xcb8, 0x2, [@TCA_BPF_POLICE={0xc6c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x39}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x6, 0x4, 0xe30, 0x7, 0x4, 0x0, 0x6, 0xe2, 0x0, 0x9, 0x3, 0x0, 0x9, 0x7, 0xe, 0x6, 0xe9db, 0xc, 0x9, 0x4, 0x1000, 0xfffffffe, 0x89, 0xd, 0x2, 0x10000, 0x5, 0x3, 0x7, 0x80000000, 0x7, 0xffff, 0x6d, 0x2, 0x2, 0x2, 0x2, 0x80000000, 0x8, 0xc744, 0x3ff, 0x846, 0xfffffff9, 0x4, 0x6, 0x1, 0x10000, 0x1f25, 0x4, 0x8, 0x8, 0x92, 0x8, 0x3e8, 0x6, 0x1, 0x100, 0xbf, 0x8, 0x8001, 0x40d6, 0x3, 0x1, 0x5, 0x7fffffff, 0x7, 0x0, 0x2, 0x4, 0x7, 0x4b8, 0x1, 0x7, 0x0, 0x1, 0x7, 0x0, 0x3, 0x10000, 0x8, 0x8, 0x10001, 0x4, 0x4a621501, 0x1, 0x3, 0xf3, 0xcb07, 0x8, 0x4, 0x6, 0x660, 0x8000, 0x200, 0x5a1e, 0x1, 0x329, 0x40, 0x24000, 0x80, 0x2, 0x9, 0x603, 0x101, 0xc, 0x4, 0xfffffffb, 0x7, 0x2, 0x35, 0x3, 0x33, 0x1, 0xfffffff9, 0xd, 0x1, 0x0, 0x89, 0x10001, 0x6, 0xe, 0x0, 0x8, 0x761, 0xfffffff8, 0x80000000, 0x5, 0x4, 0x0, 0x6, 0xefd0, 0x7, 0x2, 0x2, 0x81, 0x1, 0xca, 0x44, 0xffff7784, 0x5, 0x4, 0x9, 0x8001, 0x1f76, 0x3, 0x4, 0x100, 0x6e, 0x2, 0x5a42, 0xa0c, 0xe7a, 0xe, 0x1, 0x86, 0x0, 0x7fffffff, 0xffff, 0x2, 0x0, 0x7, 0x3ff, 0x5, 0x621, 0xfffffffe, 0x4, 0x3, 0x8000, 0x8, 0x1, 0xd5b, 0x1, 0x1, 0x724, 0x69a6, 0x4, 0x8b5, 0x80000000, 0x401, 0x7a8, 0x100, 0xce, 0x2, 0x3, 0x1, 0x7, 0x7fffffff, 0xa, 0x900, 0xe, 0x8, 0x8, 0x6, 0x4, 0xb, 0x57, 0xd8c9820b, 0x10000000, 0x0, 0x1, 0x9, 0x2, 0x9, 0xf339, 0x6, 0x0, 0x9f, 0x8, 0x8, 0x1, 0x1, 0x1, 0x7, 0x10000, 0x271d, 0x9, 0xe5, 0xcb, 0x4, 0xd, 0x0, 0x10000000, 0x1, 0x80, 0x5, 0xe9, 0x401, 0x1af, 0xc000000, 0x2, 0x9, 0x928, 0xf64, 0xff, 0x8, 0x1, 0x9, 0x8, 0xfffffffa, 0x0, 0xff, 0x6, 0x9, 0x400, 0x200, 0x8, 0x2, 0x8, 0x10, 0x1, 0x1ff, 0x8, 0x0, 0x1, 0xfffffffe]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2945ddd8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xfffffca0, 0x2, 0x6, 0xe, 0x1ff, 0x556e, 0x9, 0x7fffffff, 0x81, 0x3ff, 0x0, 0x9, 0x6, 0x1, 0x6, 0x5, 0x2, 0xffffffff, 0x101, 0xe4fd, 0x9, 0x8db, 0xffffff80, 0x0, 0x80, 0x400, 0x1, 0x3, 0x80000001, 0x65d3, 0x4, 0x8, 0x579, 0x7, 0x401, 0x9, 0x2, 0x2, 0x0, 0xfffffff3, 0x7, 0x8, 0x10001, 0xffff8cf2, 0x2, 0xf, 0xb10, 0x5, 0xfff, 0x5, 0x1ff, 0x10001, 0xc, 0x1, 0x1, 0x9, 0x1000, 0x2, 0x7, 0x8, 0x6, 0x0, 0xfffffffe, 0x3, 0x4, 0x7, 0x1, 0x3ff, 0xa861, 0xc6, 0x7, 0x1, 0x7, 0x80000001, 0x5, 0x7, 0x7, 0x9, 0x7, 0x7, 0x2, 0x60b2, 0x3, 0x18d, 0xffffffff, 0x3, 0x81, 0xfd74, 0x5, 0xa4, 0x5c, 0xfffff001, 0x3, 0xe, 0x7, 0xe18, 0x33, 0x81, 0x4, 0x0, 0x400, 0x1, 0x6, 0xd4d, 0x0, 0x9, 0xfffffffd, 0xfffffff9, 0x1, 0x7f, 0x2, 0x1e6, 0x8, 0xe8, 0x7fffffff, 0x8, 0x3, 0x4, 0x53, 0x82d, 0x3, 0x4, 0x3, 0x8, 0x28000000, 0xfffffac6, 0x6, 0x3d52c9cd, 0x9e, 0x8, 0x9, 0xb0, 0x1, 0x1, 0x3, 0x83b, 0xfffffffc, 0x1, 0x4d0d, 0x3, 0x8, 0xfffffff1, 0xffff, 0x80000000, 0xf, 0x2, 0x2, 0xb970, 0x0, 0x3, 0x5, 0x9, 0xc2be, 0x0, 0x8, 0xffffffff, 0x4, 0x647, 0x722, 0x4, 0x1, 0xd0, 0x6, 0x4, 0x6d74, 0x7, 0xd, 0x29, 0x100, 0x4, 0x222b, 0xa1d, 0x9, 0x591e, 0x10001, 0x3, 0x7, 0x3, 0xd, 0x62, 0x7fffffff, 0x8e2f, 0x7, 0x0, 0x6, 0x8, 0x7fff, 0x5, 0x7, 0x2000000, 0x8, 0x9, 0xfffffffa, 0x3, 0x5, 0x2, 0x3, 0x8, 0x3, 0xc, 0xfffffff7, 0xb1, 0x48, 0x84, 0xe6, 0x0, 0x3, 0x6, 0x2, 0x797, 0x9, 0x6, 0xfffffc00, 0x6, 0x80000001, 0xdb52, 0x2, 0x4, 0x4, 0xafce, 0x0, 0x8, 0x453daff5, 0x80000000, 0x0, 0x8, 0x5, 0x8000, 0x5, 0x0, 0x401, 0x5, 0x9, 0x5, 0x1ffe000, 0x3, 0x2, 0xbcb, 0x0, 0x90, 0xfffffffa, 0x8, 0x9a, 0x14, 0x9, 0x1, 0x2, 0x2, 0x1, 0x6, 0x1, 0x6, 0x10, 0x1, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x2, 0x80000000, 0xfffffffe, {0x8, 0x2, 0x4, 0x6, 0x6, 0x3}, {0x5, 0x1, 0xb, 0x5, 0x2, 0x6}, 0x3, 0x8, 0x3ff}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x9, 0x7, 0x6, 0x1, 0x5, 0x9, 0xac, 0x7944, 0xb, 0x3, 0x5, 0x4, 0xfffffffc, 0x6, 0x2aa, 0x3, 0x401, 0x6b, 0x3, 0xc6f, 0xb, 0x3, 0x7, 0x800, 0x7, 0x3, 0x9, 0x2, 0x0, 0x7, 0x10000, 0x5, 0x0, 0x3, 0x7fff, 0x8001, 0x0, 0x6, 0x3, 0x8, 0x8000, 0xffffffff, 0x7ff, 0x5, 0x0, 0xa27, 0x7fff, 0x4, 0xc, 0x2ca2, 0x7, 0x7, 0x5f4, 0x6, 0x3, 0x509, 0x2, 0xa, 0x2, 0x7, 0x6, 0x4, 0x7fff, 0xba, 0x2, 0x7, 0x3, 0x20001, 0x8, 0x7ff, 0x7, 0xf, 0xb, 0x8001, 0x8, 0x4, 0xffffff6a, 0xa852, 0x10000, 0x16c2, 0x4, 0x2, 0xd7a, 0x80, 0x5, 0xfe55, 0x9, 0x1000, 0x1, 0x5, 0x6, 0x6, 0xf, 0x5, 0x62, 0xc34f, 0x7, 0x2, 0x7, 0xfffffffb, 0x6, 0x6, 0x8, 0x800, 0x2020, 0x6, 0x5, 0x3, 0x5, 0x400, 0x5, 0x3, 0x0, 0xfffff000, 0x80000001, 0x1aa, 0x2, 0x7fffffff, 0x7, 0xcb, 0xf2, 0x10, 0x7, 0x4082, 0x8000, 0x5, 0x80, 0xa, 0x4, 0x6, 0x0, 0x5, 0x7fff, 0x8, 0x3b, 0x6, 0x3, 0x48eb, 0x2800, 0x3, 0x3ee3, 0x200, 0x6, 0xfffffffa, 0x2ab, 0x8, 0xfff, 0x6, 0xa, 0x80000001, 0x5, 0x8, 0x6, 0x3, 0x2, 0x2, 0x10, 0xffffffff, 0xfffffff8, 0xa8, 0xaa9, 0x4, 0x0, 0x4, 0xff, 0x5a, 0x1, 0xb, 0x9, 0x400, 0x0, 0xfffffffc, 0x2, 0x9, 0x68, 0x3, 0x9, 0x0, 0xffffffff, 0x62f, 0x4dd87247, 0x8, 0x94, 0x0, 0x0, 0x8, 0x7, 0x3ff, 0x4, 0x1, 0x4, 0x6, 0x0, 0x0, 0xaa, 0xfffffc00, 0x5, 0x6, 0xb862, 0x0, 0x9, 0x956f, 0x401, 0x6, 0x5, 0x5, 0x9, 0x400, 0x3ff, 0x7, 0x3, 0x3, 0x8, 0x2, 0x4, 0x5, 0x40, 0x2a4, 0x7, 0x9, 0xfcf, 0x8, 0xfffff4d4, 0x2, 0x9, 0x7, 0x1, 0x8, 0x80, 0x5, 0x3, 0x1, 0x77242642, 0x10, 0xc, 0xa, 0x2, 0x1, 0x9, 0x8, 0x401, 0x8, 0x1000, 0xa, 0x10, 0x4000, 0x800, 0x7, 0xb, 0x400, 0x4, 0x1, 0xbcb, 0x8, 0x699]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xffff}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FLAGS={0x8}]}}, @TCA_RATE={0x6, 0x5, {0xb9, 0x2}}]}, 0xd58}, 0x1, 0x0, 0x0, 0x44}, 0x5) (async)
r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r5)
sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000001500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000014c0)={&(0x7f0000000580)={0xe8, r10, 0x800, 0xe, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xd}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xac}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc760}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0xe8}}, 0x4000000)

2.925798365s ago: executing program 1 (id=5282):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="bc", 0x1a000, 0x4, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @loopback, 0xffff7ffc}, 0x1c)
r4 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x6, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r5, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendto$packet(r2, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847689e7fd3f3fe7bf05ddc63ff512d4074687760a5fbd1fc97777a6e55123f04cc8437b15f4b2c6f5027dcea15b6658d", 0xfffffffffffffcaa, 0x408c4, 0x0, 0xffffffffffffff10)
ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000240)={0x0, 0x6, 0x5, 0x0, 0x0, [{{r1}, 0x6}, {{r0}, 0x2}, {{r1}, 0x72e}, {{r1}, 0xe}, {{r2}, 0xe}]})
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c000000000803000000000000000000070000060900010073797a30000000000600024005f5000005000300060000001c000480080008400000000008000440000000ef070003"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc880)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000000101010200000000000000000a0000000c001980080001008d070000440001802c00018014000300fd"], 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x24008850)

2.199819043s ago: executing program 3 (id=5283):
socket$nl_route(0x10, 0x3, 0x0)
socket$kcm(0x2, 0x5, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6(0x10, 0x2, 0x0)
sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0)
write(r0, &(0x7f0000000040)="1c00000021002551071c0165ff00fc020200000003100f000ee1000c", 0x1c)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001100210527bd7000fbdbdf25fc00000000000000b644bb179754ddc22432f8fb4a08900000000000000000000004d202"], 0x34}, 0x1, 0x0, 0x0, 0x4050}, 0x8000)
r1 = socket(0x1e, 0x4, 0x0)
syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="3800000040000100fcff0700fedbdf250100000004004780180001801100108008000200", @ANYRES32=0x0, @ANYBLOB="90a24b101d00000008000200", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008084)
sendto$inet6(r2, 0x0, 0x0, 0x24044013, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
bind(0xffffffffffffffff, &(0x7f00000002c0)=@caif=@dbg={0x25, 0xc, 0x1}, 0x80)
sendto$inet6(r2, &(0x7f0000000c80)="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", 0x1dc, 0xbcff, 0x0, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@empty, 0x1, 0x3, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@empty, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0x74a, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0xc801}, 0x10)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1)
sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, r6, 0x300, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050091}, 0x20040000)
sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, 0x0, 0x2, {0x1, 0x1, 0x4}}, 0x18, &(0x7f0000000200)={&(0x7f0000000140)="fa44ba9bc1838b8c2345945eabf5afbb83c4ef52e41c912bab3882bce802488db86150ff82357ae531e71a761ad2dbf5297fcbf41aabba3e73be840d3af1fd1a974d68c2b343b65270fcb53e2cbc9ecd", 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x4814)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r8 = accept4(r7, 0x0, 0x0, 0x80000)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x10, 0x800}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff}, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10)
recvmmsg(r8, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0)

2.096372158s ago: executing program 5 (id=5284):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001007379"], 0x7c}}, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETIFINDEX(r2, 0x400454da, 0x0)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="340100001700010027bd7000fedbdf25fc000000000000000000000000000004000004d4ff000000b40000010000000000000000000000e0000002000000000000000000000000fe8800000000000000000000000001014e210100202000030200e0203b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff020000000000000000000000000001fe8800000000000000000000000000014e2100094e2200830a0000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000000000000002bec00000000000005000000000000000a00000000000000d500000000000000060000000000000006000000000000000b000000000000000700000000000000a00000000000000009000000002000000000000000000002ba00000000000000020000030000000003000000010000000002000029bd70000c0008"], 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', <r4=>0x0})
setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000001c0)={0x1, 0x1, 0x1, r4, 0x6c}, 0xc)

2.093955206s ago: executing program 1 (id=5285):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x1, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x6c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1000}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x800}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff0000}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040}, 0x20000000)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000f0000000008"], 0x48}, 0x1, 0x0, 0x0, 0x200c4011}, 0x0)
r4 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x40}, 0x400ee00)
syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r3)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ip6erspan0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500200000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r5], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0)

2.091348348s ago: executing program 4 (id=5286):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000021c0)=ANY=[@ANYBLOB="b70200001000b15cbfa300000000000007030000f8ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b252a37ff7e0d45728fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73bf1bca1cbec7614c8c3c76411e61fef6a93da8914490b50bd837d068e9bf8f3348794a44115d163b5ff85629b0a3ad4023448140770de2e5f262b9a50afcc210b8d8ea24b6dd7d068b356f53afaf89acae30935ec92657e37bf0821cbe612ac2aa7baf4d21ab373ea4fea57d0d9ac418862e791df3d1d85bb780fbfa401e09e3745d70174dd9ab52cdcadfd3454916408810090a19fa1cf0df6aa714fbcffbb7d6c7f45237df3296867725fd2bdbcd2f7ab10fea0fe85ce1137e775e4c01a136aed7f1d0d192a95be64bab53144ff3efd87fcb6421483e6a1690408712913dfb10a88201340c96dfd745a84dc177dd7a598ec015daa56eb0924e01df353a9ad69d0a59e40203018c82e74f39f8c4cb8823f0bfdfe170549e305628625f50"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)

2.025162542s ago: executing program 2 (id=5287):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x121801, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x6f4, 0x3})

1.819805971s ago: executing program 4 (id=5288):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYRESOCT], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x4, 0x746, 0x3, 0x3, 0xf9, 0x8, 0xb}, 0xc)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x1}}, 0x10)
listen(r2, 0x3)
accept4(r2, 0x0, 0x0, 0x80000)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4)
sendmsg$tipc(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x48040)
connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044)
r5 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000280)={{{@in=@empty, @in=@local, 0x3, 0x72, 0x4e24, 0x10, 0x2, 0x20}, {0x0, 0x5, 0x2000000, 0x2, 0xfffffffffffffff6, 0x2000000, 0x1, 0xfffffffffffffffd}, {0x1000000000e, 0x800000000000, 0x3, 0xbfffffffffffff7f}, 0x1, 0x0, 0x1, 0x0, 0x3, 0x2}, {{@in=@multicast1, 0xffffffff, 0x2b}, 0xa, @in=@empty, 0x3504, 0x3, 0x0, 0x0, 0xffff8000, 0x6, 0x9}}, 0xe8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c)
sendmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000180)="fbecb183a9cffc0ee5d1d434a494db587414a63ef7fed2175c894997b4760cede524e40ae9a937434e1756f7b60d81a7da87fa2614c509b671a7bf8557275e807e7af1c65c1860dcd7b32c", 0x4b}, {&(0x7f0000000340)="36da21ba0be270a73a76b0b2c1b08b0aa7b634bde7b42b05fff77a1bd375fa61812e0a3df2dc7fea643e6cf5ef23233fe2b752a206d9be7865e37ef0b528cde3720d51a67f20caab530191c4", 0x4c}, {&(0x7f00000006c0)="8b3e97e66c34520fa8e2a370f6233f47fa505952ceaf6714d4030cf71b06d9c227e92f4a323b6ebf087032d4498fdc03e86e62f25a610270568c2c7147975019b3fa481fe21ab4ed149068e364b45ddd86efa6b28b42f1977be3937c8b1edf121d5defd4180ca936d2169e6734570a3e713fb30c4e18c13d66b17b808cad9e8c9af357cb504fbec0bf4cb07af24b4d49049ad0b80472ce7e307a5b4892afbe4edb5ec566ae52aac0ea58afb19188f9161d0a12fba2e42b9cdbeec498cebe3698e1bdd29ebfbe8237fc0e", 0xca}, {&(0x7f00000007c0)="259c1e0da026f141b18e0c546887d455a791e379a60024c5ad2fbb", 0x1b}, {&(0x7f0000000800)="f1f90ee8d3a476eafbc79faa69937cde26a691e03e6ceed21bf980b72b9f21463b3821266ad276f81429b7f50c09b18445106c2a77a8787e813e50cb0fdc2d4b67f07fed507e5fc76d", 0x49}, {&(0x7f0000000c00)="7f25cd96a5e8de01c3720eadae70abcf606a39a66c714306f2be45b395680cf663327f5b1f590a4b9273770c61e75a67b9211a387cd0646ff53d9b880502b50a83ee5ac90fe95bcd39f716f625b634d40ac1ab36169915060ba4fac920e64086d634feeec74c4568caa325b7bf381dff6805ffad258dfb99ead4956d0363cb743a31e744fdb58109136bb61ecdd9122bfa854bd64b9b374498b79f2b4c5d9f642180871eecc1f4c4edd399ae9d1b6db243415da8bd6188673025fc05818f2e544ae9", 0xc2}], 0x6}}], 0x1, 0x20000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)
r9 = socket(0x10, 0x803, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r11, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x10, 0x9, 0x4, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0x4, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084)
ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f0000000000))
ioctl$SIOCX25SCALLUSERDATA(r6, 0x89e5, &(0x7f0000000500)={0x3c, "596dd231ce3c32b6fc0efe46c0a10604750771df33fd6dacea8a4fbc6a79f3741d498ee3f65e9670056cd0602590aeda61ee4cd372207e7d8cbf12b7bb68b74919e7b9ffb044e4b0e96270d198c066f0a6eabcdf5cd34b6f29657d2356d8df65087132674e832c33099e122b41634e8e71ab8c7a0249b1cc35d464223c78ce18"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, 0x0, &(0x7f0000000280)='GPL\x00', 0x2, 0xda, &(0x7f00000005c0)=""/218}, 0x94)

1.752705218s ago: executing program 2 (id=5289):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x42082, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "06bad7bf0800b3138b68a1c6d8c072743072481db271c450"}]]}, 0x38}}, 0x0)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0)
ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000)
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x44, 0x6, 0x478, 0x2e8, 0xc0, 0xc0, 0x228, 0x2e8, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x3e0, 0x6, 0x0, {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0xff, 0x2}}}, {{@ip={@private=0xa010101, @multicast2, 0x0, 0xffffff00, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x11}, 0x0, 0x70, 0x70}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @empty, 0x5607d1016e8ee1dd, 0xffffff00, 'wlan0\x00', 'syz_tun\x00', {}, {}, 0xff, 0x0, 0x1a}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x6, 0x7, 0x6, 0x2, 0x1], 0x6, 0x5}, {0x1, [0x3, 0x4, 0x3, 0x4, 0x7], 0x4, 0x6}}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@addrtype={{0x30}, {0x0, 0xe48, 0x1, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d8)
ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110c230055)
close(0x3)

1.347923167s ago: executing program 2 (id=5290):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48141, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32)
r1 = socket$kcm(0x2, 0x3, 0x2) (rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000000030900020073797a31000000000900010073797a30000000000800054000000008080003400000000808020740000000290800064000000000440000000c0a01010000000000000000070040041800038014000080080003400000000208000280040001000900020073797a31000000000900010073797a3000000000140000001000010000000000000000000084000a"], 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
r3 = socket$netlink(0x10, 0x3, 0x15)
writev(r3, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035390000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e24, @rand_addr=0x64010145}, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @broadcast}, 0x149, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x11ff, 0x2}) (async, rerun: 32)
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) (rerun: 32)

1.313528063s ago: executing program 1 (id=5291):
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e30"], 0x58}}, 0x20008000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
splice(r1, 0x0, r2, 0x0, 0x8, 0x0)
r3 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r3, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x3, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000100)="9e91d93a92dc7c8fff658bb539e2a1485d4c9223a7dfe538a2e2fea2", 0x1c}, {&(0x7f0000000200)='\x00\x00\x00\x00\x00', 0x5}, {&(0x7f0000000140)="2bc4", 0x4b}], 0x4}, 0x20008b88)
sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000140)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xdd77}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000040)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x4)
write$tun(r4, &(0x7f0000000140)={@val, @void, @eth={@multicast, @local, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x3}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x2, 0x14, 0xe4, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback}}}}}}, 0x2e)
socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, 0x2, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88c}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10050}, 0x4)
r8 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r11, 0x1, 0x21, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16=r10, @ANYBLOB="010000000000000000000c000000480005800800010065756800070002"], 0x5c}}, 0x0)
recvmsg$unix(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfffffffffffffe78}], 0x1}, 0x20)
sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, 0x0, 0x0)

960.31516ms ago: executing program 5 (id=5292):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, 'X.'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000008c0)={0x84, @multicast2, 0x4e22, 0x1, 'lc\x00', 0x0, 0x10005, 0x204e}, 0x2c)
setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x483, &(0x7f0000000000)={0x20000000000084, @private=0xa010102, 0x1ffc, 0x200000001, 'fo\x00', 0x15, 0x821, 0x1}, 0x2c)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

720.43892ms ago: executing program 4 (id=5293):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00c1000000000000004aa35a0ef805316c00"/28], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="0b00000005000000070100000900000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20)
bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00', @ANYRES16, @ANYBLOB="010000140000000000", @ANYRES32], 0x40}}, 0x0)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
r7 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff)
getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=@delchain={0x24, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xfff3, 0xf}, {0xa, 0x18}}}, 0x24}, 0x1, 0x0, 0x0, 0x40044}, 0xc804)
sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044)

675.276813ms ago: executing program 2 (id=5294):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeffffffffffffff0400030000", @ANYRES32=0x0, @ANYBLOB="04000d80080005"], 0x24}, 0x1, 0x5502000000000000}, 0x0)
recvmmsg(r2, &(0x7f0000007000)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000040)=""/46, 0x2e}, {&(0x7f0000000100)=""/89, 0x59}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/189, 0xbd}, {&(0x7f0000001780)=""/139, 0x8b}, {&(0x7f0000001840)=""/181, 0xb5}, {&(0x7f0000001900)=""/50, 0x32}, {&(0x7f0000001940)=""/142, 0x8e}], 0x8, &(0x7f0000001a80)=""/89, 0x59}, 0x5}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001b00)=""/126, 0x7e}, {&(0x7f0000001b80)=""/61, 0x3d}], 0x2, &(0x7f0000001c00)=""/232, 0xe8}, 0x1}, {{&(0x7f0000001d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000030c0)=[{&(0x7f0000001d80)=""/252, 0xfc}, {&(0x7f0000001e80)=""/150, 0x96}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000002f40)=""/68, 0x44}, {&(0x7f0000002fc0)=""/79, 0x4f}, {&(0x7f0000003040)=""/126, 0x7e}], 0x6, &(0x7f0000003140)=""/74, 0x4a}, 0x8}, {{&(0x7f00000031c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003240)=""/112, 0x70}, {&(0x7f00000032c0)=""/50, 0x32}, {&(0x7f0000003300)=""/102, 0x66}, {&(0x7f0000003380)=""/9, 0x9}, {&(0x7f00000033c0)=""/202, 0xca}], 0x5, &(0x7f0000003540)=""/88, 0x58}, 0x1000}, {{&(0x7f00000035c0)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000004840)=[{&(0x7f0000003640)=""/4096, 0x1000}, {&(0x7f0000004640)=""/143, 0x8f}, {&(0x7f0000004700)=""/238, 0xee}, {&(0x7f0000004800)=""/61, 0x3d}], 0x4, &(0x7f0000004880)=""/135, 0x87}, 0x3}, {{&(0x7f0000004940)=@ax25={{0x3, @rose}, [@null, @remote, @bcast, @rose, @default, @bcast, @default, @netrom]}, 0x80, &(0x7f0000005f40)=[{&(0x7f00000049c0)=""/156, 0x9c}, {&(0x7f0000004a80)=""/4096, 0x1000}, {&(0x7f0000005a80)}, {&(0x7f0000005ac0)=""/215, 0xd7}, {&(0x7f0000005bc0)=""/104, 0x68}, {&(0x7f0000005c40)=""/99, 0x63}, {&(0x7f0000005cc0)=""/180, 0xb4}, {&(0x7f0000005d80)=""/191, 0xbf}, {&(0x7f0000005e40)=""/193, 0xc1}], 0x9, &(0x7f0000006000)=""/4096, 0x1000}, 0x7f}], 0x6, 0x10040, &(0x7f0000007180))
setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) (async)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)

480.570139ms ago: executing program 5 (id=5295):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="a8af5a679c76c0a561a06bda055e5448f81b3be8e8dbd374169a6aff45c8d9eeecceeeea63e4142afc0f62ae987b7e940ba93d454240467e60ed193e0848b2beb73e0a5dc590257ab15b3d568a803c5cf02eaa9453ec6c755f57c8b36088cf2f972025ab08000000072665d45d00407b20c1706b8b930355822878be39a63ca029933fa4ba3084750f655bd50b06f407efa5f1228d9dc52567823c112ac6ccb9bf7ab9f78e078e9697cadea72beb67ac806f738f7bf468d9237a3ab66adbcbb9f8a46277ee6ab71b2e146c9591590dcf57d3", @ANYRES16=r1, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff0000000000000000000000000000010500040001000000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000801)
r3 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, 0x0, 0x0)
r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000440)={'gretap0\x00', r6, 0x40, 0x700, 0x7, 0x7, {{0x1e, 0x4, 0x1, 0xc, 0x78, 0x67, 0x0, 0x9, 0x2f, 0x0, @empty, @loopback, {[@timestamp_prespec={0x44, 0x24, 0xa4, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc4}, {@dev={0xac, 0x14, 0x14, 0x25}, 0xffff7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@loopback, 0x3}]}, @rr={0x7, 0x27, 0xf7, [@loopback, @local, @loopback, @empty, @private=0xa010102, @multicast2, @rand_addr=0x64010101, @loopback, @multicast1]}, @lsrr={0x83, 0x17, 0xa3, [@rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008011}, 0x4880)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r10=>0x0})
r11 = socket$netlink(0x10, 0x3, 0x0)
r12 = socket(0x12, 0x6, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r12, 0x0, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r11, 0x0, 0x0)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c000000100003040000000000000000000000009fa7c53b10dd4ce5d6bf507ccecb9312e08e94b594bea5486beed63996e503650f1de3ff09237a26767f4e8298ece87c6663a51ab02a96a567baacdfed0407771f3d787ae3a431888f102cfbb82159dae6452edaecbbe59881bf9ede969cc654a36fe6492f8f0f1022af949943bf0f57", @ANYRES32=r11, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r13], 0x3c}}, 0x8000)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf251100000005001200dd00000008000300", @ANYRES32=r10, @ANYRES8=r5], 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x0)

256.15776ms ago: executing program 2 (id=5296):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x84000000}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1804}, 0x20050800)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', <r4=>0x0})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @remote, 0x73af}}, 0x0, 0x0, 0x8, 0x5b2, 0xf1, 0xffffffff}, 0x9c)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYRES16=r0, @ANYBLOB="01000000230800004800128009000100766c616e000000003800028006000100030000001c0004"], 0x70}, 0x1, 0x0, 0x0, 0x20048045}, 0x40001)
sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)

184.388187ms ago: executing program 4 (id=5297):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
sendmmsg$sock(r2, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001340)=[{0x0}, {&(0x7f00000001c0)="57dc1020f156100cccbfa1acb40576191da29a7518b7fa", 0x17}], 0x2}}], 0x1, 0x4000004)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r1)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000540)={<r6=>0x0, @broadcast, @local}, &(0x7f0000000580)=0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0x94, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x8800)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd700000100000010000000c00020009000000000000001c0007800c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r0, @ANYBLOB="0c00050022010000000000000d000a006c6973743a736574000000000c0006000100000020000000"], 0x64}}, 0x400400c)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000007000000000000000e000000050000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x93b5, 0xc, &(0x7f0000000300)=""/12, 0x0, 0x1, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x7, 0x1, 0xfff}, 0x10, 0x16eb7, 0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000380)=[{0x5, 0x2, 0xf, 0x7}, {0x3, 0x3, 0x1, 0xc}, {0x2, 0x5, 0x9, 0x1}, {0x1, 0x1, 0x6, 0x8}], 0x10, 0x5}, 0x94)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000480)=r7, 0x4)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000200)={0x38, r8, 0x200, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7d}, @void, @val={0xc, 0x99, {0x1, 0x18}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x68b57a3e}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x810)
setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000740)="4f8a0ac31d6820975281ad309af04739545dbb61d510b1bf848a669711cee5750ff718236d251fe8", 0x28)

146.778318ms ago: executing program 1 (id=5298):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="e000000010000b0500000000000200006f6d8864d22a3f2ffaa46c88bcbd0000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff282d2d2c"], 0xe0}], 0x1}, 0x0)

0s ago: executing program 5 (id=5299):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
r1 = socket$inet6_sctp(0xa, 0x801, 0x84)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000008203000000"], 0x0, 0x3e}, 0x28)
sendmmsg$inet6(r1, &(0x7f00000058c0)=[{{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0x3}, 0xae00000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x1, 0x5)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r2], 0x28}, 0x1, 0x0, 0x0, 0x2004a804}, 0x4)
shutdown(r1, 0x1)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000000)=@assoc_value, &(0x7f00000000c0)=0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040080)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0xf, 0x0, 0x0)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(r8, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @empty}, 0x80ad}, 0x1c)
r9 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4)
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @mcast2, 0x1}, 0x1c)
r10 = socket$unix(0x1, 0x1, 0x0)
socket$kcm(0x11, 0x3, 0x0)
close(0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000480)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

es in process `syz.3.3738'.
[  553.608218][T20958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3738'.
[  553.935513][T20979] netlink: 'syz.4.3744': attribute type 3 has an invalid length.
[  553.956026][T20981] netlink: 820 bytes leftover after parsing attributes in process `syz.4.3744'.
[  553.981564][T20981] netlink: 820 bytes leftover after parsing attributes in process `syz.4.3744'.
[  554.134675][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'.
[  554.143954][T20988] netlink: 'syz.4.3746': attribute type 30 has an invalid length.
[  554.169691][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  554.180812][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  554.201703][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  554.222229][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  554.225353][T20990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'.
[  554.271972][T20990] netlink: 'syz.4.3746': attribute type 30 has an invalid length.
[  554.723599][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'.
[  554.725378][T21010] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  554.761080][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'.
[  554.781581][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'.
[  554.791158][T20998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3750'.
[  555.116116][ T5631] block nbd5: Receive control failed (result -1)
[  558.548146][T21081] tc_dump_action: action bad kind
[  558.579438][T21081] tc_dump_action: action bad kind
[  558.706263][T21088] gretap0: entered promiscuous mode
[  558.718075][T21088] vlan2: entered promiscuous mode
[  558.752830][T21090] __nla_validate_parse: 89 callbacks suppressed
[  558.752852][T21090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3775'.
[  558.914509][T21098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3779'.
[  558.969059][T21103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3779'.
[  560.185224][T21147] netlink: 'syz.0.3792': attribute type 2 has an invalid length.
[  560.221604][T21147] netlink: 'syz.0.3792': attribute type 1 has an invalid length.
[  560.239750][T21147] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3792'.
[  560.284054][T21132] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  560.298853][T21132] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.357278][T21159] smc: removing ib device syz0
[  560.738566][T21159] smbdirect: ib_dev[syz0] removed
[  560.905007][T21132] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  560.915574][T21132] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.351404][T21180] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  561.419361][T21132] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  561.432484][T21184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3799'.
[  561.447310][T21132] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.528046][T21188] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3800'.
[  561.607800][T21185] syzkaller1: entered promiscuous mode
[  561.615412][T21185] syzkaller1: entered allmulticast mode
[  561.667395][T21132] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  561.678670][T21132] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  562.128347][T21199] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  562.131360][T21200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3802'.
[  562.248079][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  562.267016][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  562.314447][T21196] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3802'.
[  562.396568][ T6181] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  562.416732][ T6181] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  562.524399][ T6191] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  562.544372][ T6191] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  562.624155][T21215] netlink: 'syz.1.3807': attribute type 1 has an invalid length.
[  562.636547][ T6191] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  562.666246][ T6191] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  562.755223][ T6191] dummy0: left promiscuous mode
[  562.796413][T21217] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  562.829809][T21217] netlink: 'syz.0.3808': attribute type 2 has an invalid length.
[  562.847092][T21217] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3808'.
[  563.292862][T21236] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3812'.
[  563.519178][T21246] FAULT_INJECTION: forcing a failure.
[  563.519178][T21246] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  563.572140][T21246] CPU: 0 UID: 0 PID: 21246 Comm: syz.0.3816 Not tainted syzkaller #0 PREEMPT(full) 
[  563.572174][T21246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  563.572186][T21246] Call Trace:
[  563.572195][T21246]  <TASK>
[  563.572203][T21246]  dump_stack_lvl+0xe8/0x150
[  563.572235][T21246]  should_fail_ex+0x40c/0x560
[  563.572273][T21246]  _copy_from_user+0x2d/0xb0
[  563.572298][T21246]  bpf_test_init+0xd8/0x150
[  563.572411][T21246]  bpf_prog_test_run_skb+0x31e/0x2230
[  563.572455][T21246]  ? __fget_files+0x3a2/0x420
[  563.572479][T21246]  ? __fget_files+0x2a/0x420
[  563.572508][T21246]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  563.572531][T21246]  bpf_prog_test_run+0x2c5/0x340
[  563.572557][T21246]  __sys_bpf+0x643/0x950
[  563.572589][T21246]  ? __pfx___sys_bpf+0x10/0x10
[  563.572636][T21246]  ? ksys_write+0x242/0x270
[  563.572668][T21246]  ? __pfx_ksys_write+0x10/0x10
[  563.572703][T21246]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.572725][T21246]  __x64_sys_bpf+0x7c/0x90
[  563.572760][T21246]  do_syscall_64+0x174/0x580
[  563.572784][T21246]  ? trace_irq_disable+0x3b/0x140
[  563.572813][T21246]  ? clear_bhb_loop+0x40/0x90
[  563.572839][T21246]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  563.572859][T21246] RIP: 0033:0x7f6e8b59ce59
[  563.572879][T21246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  563.572897][T21246] RSP: 002b:00007f6e8c514028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  563.572920][T21246] RAX: ffffffffffffffda RBX: 00007f6e8b815fa0 RCX: 00007f6e8b59ce59
[  563.572935][T21246] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  563.572948][T21246] RBP: 00007f6e8c514090 R08: 0000000000000000 R09: 0000000000000000
[  563.572961][T21246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  563.572973][T21246] R13: 00007f6e8b816038 R14: 00007f6e8b815fa0 R15: 00007ffc7f4c7738
[  563.573007][T21246]  </TASK>
[  563.968221][T21237] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR
[  564.039370][T21236] bond2: entered promiscuous mode
[  564.114088][T21236] 8021q: adding VLAN 0 to HW filter on device bond2
[  564.230608][T21252] tc_dump_action: action bad kind
[  564.321612][T21261] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3818'.
[  564.630190][T21274] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) !
[  564.730950][T21274] syzkaller0: entered promiscuous mode
[  564.746074][T21274] syzkaller0: entered allmulticast mode
[  564.977971][T21291] syz.4.3825: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  564.994614][T21291] CPU: 0 UID: 0 PID: 21291 Comm: syz.4.3825 Not tainted syzkaller #0 PREEMPT(full) 
[  564.994642][T21291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  564.994653][T21291] Call Trace:
[  564.994661][T21291]  <TASK>
[  564.994669][T21291]  dump_stack_lvl+0xe8/0x150
[  564.994699][T21291]  warn_alloc+0x249/0x340
[  564.994738][T21291]  ? __pfx_stack_trace_save+0x10/0x10
[  564.994773][T21291]  ? __pfx_warn_alloc+0x10/0x10
[  564.994806][T21291]  ? __kasan_kmalloc+0x93/0xb0
[  564.994832][T21291]  ? __kmalloc_cache_noprof+0x318/0x660
[  564.994858][T21291]  ? xskq_create+0x56/0x170
[  564.994876][T21291]  ? xsk_init_queue+0x8a/0xe0
[  564.994903][T21291]  ? xsk_setsockopt+0x52a/0x960
[  564.994928][T21291]  ? do_sock_setsockopt+0x17c/0x1b0
[  564.994947][T21291]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  564.994970][T21291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.994997][T21291]  __vmalloc_node_range_noprof+0x12c/0x1730
[  564.995054][T21291]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  564.995088][T21291]  ? __kasan_kmalloc+0x93/0xb0
[  564.995124][T21291]  vmalloc_user_noprof+0xad/0xe0
[  564.995151][T21291]  ? xskq_create+0xbf/0x170
[  564.995172][T21291]  xskq_create+0xbf/0x170
[  564.995194][T21291]  xsk_init_queue+0x8a/0xe0
[  564.995226][T21291]  xsk_setsockopt+0x52a/0x960
[  564.995251][T21291]  ? __fget_files+0x2a/0x420
[  564.995274][T21291]  ? __pfx_xsk_setsockopt+0x10/0x10
[  564.995301][T21291]  ? __pfx_aa_sk_perm+0x10/0x10
[  564.995335][T21291]  ? aa_sock_opt_perm+0xff/0x1a0
[  564.995367][T21291]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  564.995392][T21291]  ? __pfx_xsk_setsockopt+0x10/0x10
[  564.995421][T21291]  do_sock_setsockopt+0x17c/0x1b0
[  564.995446][T21291]  __x64_sys_setsockopt+0x13d/0x1b0
[  564.995470][T21291]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.995492][T21291]  do_syscall_64+0x174/0x580
[  564.995513][T21291]  ? trace_irq_disable+0x3b/0x140
[  564.995541][T21291]  ? clear_bhb_loop+0x40/0x90
[  564.995566][T21291]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  564.995586][T21291] RIP: 0033:0x7f4ab519ce59
[  564.995607][T21291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  564.995624][T21291] RSP: 002b:00007f4ab60bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  564.995646][T21291] RAX: ffffffffffffffda RBX: 00007f4ab5415fa0 RCX: 00007f4ab519ce59
[  564.995662][T21291] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  564.995674][T21291] RBP: 00007f4ab5232d6f R08: 0000000000000004 R09: 0000000000000000
[  564.995686][T21291] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  564.995698][T21291] R13: 00007f4ab5416038 R14: 00007f4ab5415fa0 R15: 00007ffd4ad8e728
[  564.995741][T21291]  </TASK>
[  564.995791][T21291] Mem-Info:
[  565.106046][T21298] netlink: 'syz.1.3827': attribute type 142 has an invalid length.
[  565.108864][T21291] active_anon:7818 inactive_anon:0 isolated_anon:0
[  565.108864][T21291]  active_file:3622 inactive_file:40152 isolated_file:0
[  565.108864][T21291]  unevictable:768 dirty:128 writeback:0
[  565.108864][T21291]  slab_reclaimable:11845 slab_unreclaimable:129760
[  565.108864][T21291]  mapped:29811 shmem:1289 pagetables:1347
[  565.108864][T21291]  sec_pagetables:0 bounce:0
[  565.108864][T21291]  kernel_misc_reclaimable:0
[  565.108864][T21291]  free:1283972 free_pcp:9760 free_cma:0
[  565.118112][T21300] netlink: 'syz.1.3827': attribute type 142 has an invalid length.
[  565.122055][T21291] Node 0 active_anon:31272kB inactive_anon:0kB active_file:14488kB inactive_file:160404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119244kB dirty:512kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14848kB pagetables:5264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  565.122118][T21291] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  565.122171][T21291] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  565.122234][T21291] lowmem_reserve[]: 0 2493 2493 2493 2493
[  565.122282][T21291] Node 0 DMA32 free:1178752kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31272kB inactive_anon:0kB active_file:14488kB inactive_file:160404kB unevictable:1536kB writepending:512kB zspages:0kB present:3129332kB managed:2552904kB mlocked:0kB bounce:0kB free_pcp:38980kB local_pcp:18804kB free_cma:0kB
[  565.122346][T21291] lowmem_reserve[]: 0 0 0 0 0
[  565.481010][T21291] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  565.529193][T21291] lowmem_reserve[]: 0 0 0 0 0
[  565.534436][T21291] Node 1 Normal free:3941776kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  565.566572][T21291] lowmem_reserve[]: 0 0 0 0 0
[  565.589768][T21291] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  565.610280][T21291] Node 0 DMA32: 5026*4kB (UME) 4977*8kB (UME) 2377*16kB (UM) 398*32kB (UME) 518*64kB (UME) 450*128kB (UM) 269*256kB (UME) 160*512kB (UM) 115*1024kB (UME) 36*2048kB (UME) 155*4096kB (UM) = 1178592kB
[  565.631056][T21291] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  565.643036][T21291] Node 1 Normal: 0*4kB 4*8kB (UM) 11*16kB (UM) 6*32kB (UM) 10*64kB (UM) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 960*4096kB (M) = 3941776kB
[  565.661819][T21291] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  565.700099][T21309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3830'.
[  565.710279][   T30] audit: type=1800 audit(1781592611.108:18): pid=21311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3831" name="memory.events" dev="tmpfs" ino=748 res=0 errno=0
[  565.714133][T21291] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  565.751966][T21291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  565.773815][T21291] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  565.784790][T21291] 45059 total pagecache pages
[  565.801260][T21291] 0 pages in swap cache
[  565.807002][T21291] Free swap  = 124996kB
[  565.816229][T21291] Total swap = 124996kB
[  565.821568][ T6191] smbdirect: ib_dev[syz1] removed
[  565.821590][T21291] 2097051 pages RAM
[  565.837681][T21291] 0 pages HighMem/MovableOnly
[  565.842852][T21291] 427040 pages reserved
[  565.849641][T21291] 0 pages cma reserved
[  565.895680][T21318] ip6gre1: entered promiscuous mode
[  565.910456][T21318] ip6gre1: entered allmulticast mode
[  566.055959][T21318] block nbd6: server does not support multiple connections per device.
[  566.085610][T21318] block nbd6: shutting down sockets
[  566.122891][T21333] netlink: 'syz.3.3838': attribute type 1 has an invalid length.
[  566.397292][T21346] netlink: 'syz.1.3843': attribute type 2 has an invalid length.
[  566.425719][T21345] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3844'.
[  566.583616][T21358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3847'.
[  566.997576][T21364] netlink: 7076 bytes leftover after parsing attributes in process `syz.1.3849'.
[  567.013832][T21364] openvswitch: netlink: Flow key attr not present in new flow.
[  567.100081][T21379] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3851'.
[  567.234919][T21385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3853'.
[  567.479462][T21400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3856'.
[  567.748593][T21415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3860'.
[  567.832481][T21280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  568.117298][T21431] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3865'.
[  568.376960][T21446] sctp: [Deprecated]: syz.3.3869 (pid 21446) Use of int in max_burst socket option.
[  568.376960][T21446] Use struct sctp_assoc_value instead
[  569.134197][T21468] netlink: 'syz.4.3876': attribute type 4 has an invalid length.
[  569.296576][T21468] .`: renamed from bond0 (while UP)
[  569.805410][T21502] __nla_validate_parse: 7 callbacks suppressed
[  569.805433][T21502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3886'.
[  569.996892][T21513] x_tables: duplicate underflow at hook 1
[  570.192371][T21517] netlink: 'syz.3.3889': attribute type 1 has an invalid length.
[  571.138975][T21522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3890'.
[  572.391011][T21524] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3891'.
[  572.598209][T21517] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  572.793869][T21537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3893'.
[  572.819999][T21532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3894'.
[  572.854579][T21532] veth1_to_team: entered promiscuous mode
[  572.861776][T21532] gretap0: entered promiscuous mode
[  572.876092][T21532] hsr1: entered promiscuous mode
[  573.006005][T21554] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3899'.
[  573.038878][T21555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3899'.
[  573.064385][T21559] ref_tracker: memory allocation failure, unreliable refcount tracker.
[  573.112539][ T5618] IPVS: starting estimator thread 0...
[  573.162512][T21563] syzkaller0: entered promiscuous mode
[  573.179263][T21563] syzkaller0: entered allmulticast mode
[  573.198449][T21565] Cannot find add_set index 2 as target
[  573.212410][T21562] IPVS: using max 31 ests per chain, 74400 per kthread
[  573.262748][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3904'.
[  573.274644][T21567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3904'.
[  573.276834][T21565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3903'.
[  573.513717][T21581] netlink: 'syz.4.3909': attribute type 11 has an invalid length.
[  573.610839][T21581] bond0: down delay (5) is not a multiple of miimon (2), value rounded to 4 ms
[  573.620990][T21581] bond0: entered promiscuous mode
[  573.688388][T21590] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  573.775087][T21588] macvlan0: entered promiscuous mode
[  573.795897][T21588] macvlan0: entered allmulticast mode
[  573.805704][T21599] netlink: 'syz.4.3913': attribute type 27 has an invalid length.
[  573.823536][T21588] bond2: (slave macvlan0): Error -98 calling set_mac_address
[  574.056252][T21614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  575.198416][T21673] __nla_validate_parse: 9 callbacks suppressed
[  575.198438][T21673] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3930'.
[  575.458759][T21646] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  575.907049][T21699] netlink: 'syz.1.3936': attribute type 1 has an invalid length.
[  575.985556][T21706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3935'.
[  576.030649][T21710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3936'.
[  576.161245][T21692] hsr0: left promiscuous mode
[  576.259296][T21719] block nbd3: NBD_DISCONNECT
[  576.275773][T21719] block nbd3: Send disconnect failed -32
[  576.286334][T21719] block nbd3: shutting down sockets
[  576.328984][T21692] ip6gre1: left promiscuous mode
[  576.363433][T21718] nbd3: detected capacity change from 0 to 63
[  576.378797][ T5631] block nbd3: Receive control failed (result -104)
[  576.384518][T18920] block nbd3: Send control failed (result -32)
[  576.396222][T21692] bond1: left promiscuous mode
[  576.428366][T18920] block nbd3: Request send failed, requeueing
[  576.440999][T21692] 8021q: adding VLAN 0 to HW filter on device bond2
[  576.467635][ T1696] block nbd3: Dead connection, failed to find a fallback
[  576.480993][ T1696] block nbd3: shutting down sockets
[  576.488227][ T1696] blk_print_req_error: 27 callbacks suppressed
[  576.488258][ T1696] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  576.508063][ T1696] buffer_io_error: 27 callbacks suppressed
[  576.508081][ T1696] Buffer I/O error on dev nbd3, logical block 3, async page read
[  576.669976][T21699] bond6: entered promiscuous mode
[  576.690724][T21699] 8021q: adding VLAN 0 to HW filter on device bond6
[  576.718394][T21733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3941'.
[  576.816199][T21705] bond6: (slave bridge3): making interface the new active one
[  576.835818][T21705] bridge3: entered promiscuous mode
[  576.861640][T21705] bond6: (slave bridge3): Enslaving as an active interface with an up link
[  577.011823][T21756] IPv6: NLM_F_CREATE should be specified when creating new route
[  577.211706][T21765] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3945'.
[  578.062298][T21768] xt_CT: You must specify a L4 protocol and not use inversions on it
[  578.679467][ T6185] bond14 (unregistering): (slave bridge8): Releasing active interface
[  578.697645][ T6185] bond16 (unregistering): (slave bridge9): Releasing backup interface
[  578.707125][ T6185] bridge9 (unregistering): left promiscuous mode
[  578.713983][ T6185] bridge9 (unregistering): left allmulticast mode
[  578.732951][ T6185] bond0 (unregistering): Released all slaves
[  578.744026][ T6185] bond1 (unregistering): Released all slaves
[  578.759819][ T6185] bond2 (unregistering): Released all slaves
[  578.775493][ T6185] bond3 (unregistering): Released all slaves
[  578.801350][ T6185] bond4 (unregistering): Released all slaves
[  578.816746][ T6185] bond5 (unregistering): Released all slaves
[  578.831116][ T6185] bond6 (unregistering): Released all slaves
[  578.847006][ T6185] bond7 (unregistering): Released all slaves
[  578.861231][ T6185] bond8 (unregistering): Released all slaves
[  578.877344][ T6185] bond9 (unregistering): Released all slaves
[  578.904111][ T6185] bond10 (unregistering): Released all slaves
[  578.931168][ T6185] bond11 (unregistering): Released all slaves
[  578.946707][ T6185] bond12 (unregistering): (slave bond13): Releasing backup interface
[  578.958665][ T6185] bond12 (unregistering): Released all slaves
[  578.973672][ T6185] bond13 (unregistering): Released all slaves
[  578.989762][ T6185] bond14 (unregistering): Released all slaves
[  579.004970][ T6185] bond15 (unregistering): Released all slaves
[  579.035547][ T6185] bond16 (unregistering): Released all slaves
[  579.053670][ T6185] bond17 (unregistering): Released all slaves
[  579.067937][ T6185] bond18 (unregistering): Released all slaves
[  579.119703][T21738] geneve2: entered promiscuous mode
[  579.131951][T21738] geneve2: entered allmulticast mode
[  579.161140][T21772] sit0: entered promiscuous mode
[  579.191131][T21772] netlink: 'syz.1.3948': attribute type 1 has an invalid length.
[  579.204280][T21772] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3948'.
[  579.310662][ T6185] tipc: Disabling bearer <udp:syz1>
[  579.347829][ T6185] tipc: Left network mode
[  579.794980][T21791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3955'.
[  579.845389][T21796] veth0: entered promiscuous mode
[  579.885382][T21794] veth0: left promiscuous mode
[  580.562322][T21838] netlink: 'syz.3.3964': attribute type 1 has an invalid length.
[  580.570305][T21829] bond0: (slave ip6tnl0): refused to change device type
[  580.589583][T21832] macvlan1: entered allmulticast mode
[  580.598103][T21832] veth1_vlan: entered allmulticast mode
[  580.616871][T21832] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check.
[  580.658060][T21830] ip6erspan0: entered allmulticast mode
[  580.798493][T21842] hmac(sha2: entered promiscuous mode
[  580.864750][ T6185] hsr_slave_0: left promiscuous mode
[  580.875624][ T6185] hsr_slave_1: left promiscuous mode
[  581.214331][ T6185] team0 (unregistering): Port device veth1_to_hsr removed
[  581.884617][ T6185] IPVS: stop unused estimator thread 0...
[  582.069237][T21893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3977'.
[  582.087860][T21895] netlink: 'syz.4.3978': attribute type 1 has an invalid length.
[  582.106173][T21893] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3977'.
[  582.140554][T21893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3977'.
[  582.165516][T21904] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  582.177143][T21893] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3977'.
[  582.379349][T21918] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3985'.
[  582.486258][T21918] Set syz1 is full, maxelem 1029 reached
[  582.574246][T21926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3989'.
[  582.658601][T21932] netlink: 'syz.3.3989': attribute type 1 has an invalid length.
[  582.678263][T21925] bridge_slave_0: left allmulticast mode
[  582.692482][T21935] netlink: 'syz.4.3987': attribute type 3 has an invalid length.
[  582.693420][T21932] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3989'.
[  582.717596][T21925] bridge_slave_0: left promiscuous mode
[  582.722302][T21935] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3987'.
[  582.780879][T21925] bridge0: port 1(bridge_slave_0) entered disabled state
[  582.837668][T21925] bridge_slave_1: left allmulticast mode
[  582.849646][T21925] bridge_slave_1: left promiscuous mode
[  582.875143][T21925] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.923268][T21925] .`: (slave bond_slave_0): Releasing backup interface
[  582.957090][T21925] .`: (slave bond_slave_1): Releasing backup interface
[  582.978109][T21925] team0: Port device team_slave_0 removed
[  582.994124][T21925] team0: Port device team_slave_1 removed
[  583.007303][T21925] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  583.016995][T21925] batman_adv: batadv0: Removing interface: batadv_slave_0
[  583.030015][T21925] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  583.043840][T21925] batman_adv: batadv0: Removing interface: batadv_slave_1
[  583.069178][T21925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  583.204502][T21946] syzkaller0: entered promiscuous mode
[  583.230445][T21946] syzkaller0: entered allmulticast mode
[  583.257590][T21946] tipc: Started in network mode
[  583.274016][T21946] tipc: Node identity 82963503c7e7, cluster identity 4711
[  583.294183][T21946] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  583.381179][T21952] syzkaller0: mtu greater than device maximum
[  583.428599][T21945] tipc: Resetting bearer <eth:syzkaller0>
[  583.549140][T21980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  583.549478][T21945] tipc: Disabling bearer <eth:syzkaller0>
[  583.556469][T21980] IPv6: NLM_F_CREATE should be set when creating new route
[  583.556604][T21980] IPv6: NLM_F_CREATE should be set when creating new route
[  583.613482][T21985] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4002'.
[  583.642038][T21985] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4002'.
[  583.812974][T21991] ip6gre1: entered promiscuous mode
[  583.822345][T21991] ip6gre1: entered allmulticast mode
[  583.870630][T21996] bridge0: port 2(bridge_slave_1) entered disabled state
[  583.878474][T21996] bridge0: port 1(bridge_slave_0) entered disabled state
[  583.969714][T21993] bridge0: port 2(bridge_slave_1) entered blocking state
[  583.976993][T21993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  583.984611][T21993] bridge0: port 1(bridge_slave_0) entered blocking state
[  583.991813][T21993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  584.033018][T21993] bridge0: entered promiscuous mode
[  584.073931][T21993] bridge0: entered allmulticast mode
[  584.325620][T22023] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  584.352527][T22023] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  584.375130][T22022] netlink: 'syz.1.4014': attribute type 1 has an invalid length.
[  584.375338][T22023] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  584.581156][T22043] netlink: 'syz.0.4018': attribute type 6 has an invalid length.
[  584.603056][T22028] netlink: 'syz.1.4014': attribute type 3 has an invalid length.
[  584.638299][T22040] syzkaller0: entered promiscuous mode
[  584.667299][T22040] syzkaller0: entered allmulticast mode
[  584.716428][T22045] nbd6: detected capacity change from 0 to 2048
[  584.825307][ T5631] block nbd6: Receive control failed (result -104)
[  585.278222][T22073] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  585.278804][T22078] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  585.290822][ T5818] IPVS: starting estimator thread 0...
[  585.326254][T22077] FAULT_INJECTION: forcing a failure.
[  585.326254][T22077] name failslab, interval 1, probability 0, space 0, times 0
[  585.338994][T22077] CPU: 0 UID: 0 PID: 22077 Comm: syz.3.4025 Not tainted syzkaller #0 PREEMPT(full) 
[  585.339020][T22077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  585.339031][T22077] Call Trace:
[  585.339039][T22077]  <TASK>
[  585.339048][T22077]  dump_stack_lvl+0xe8/0x150
[  585.339077][T22077]  should_fail_ex+0x40c/0x560
[  585.339116][T22077]  should_failslab+0xa8/0x100
[  585.339148][T22077]  ? skb_clone+0x212/0x3a0
[  585.339238][T22077]  kmem_cache_alloc_noprof+0x87/0x650
[  585.339275][T22077]  skb_clone+0x212/0x3a0
[  585.339303][T22077]  bpf_clone_redirect+0x170/0x4b0
[  585.339403][T22077]  ? bpf_test_run+0x1d1/0x830
[  585.339427][T22077]  bpf_prog_3e1cbbed0c4acd81+0x5f/0x68
[  585.339452][T22077]  ? __kernel_text_address+0xd/0x30
[  585.339511][T22077]  ? __pfx___schedule+0x10/0x10
[  585.339532][T22077]  ? ktime_get+0x45/0x220
[  585.339577][T22077]  ? preempt_schedule_thunk+0x16/0x30
[  585.339607][T22077]  ? preempt_schedule_common+0x82/0xd0
[  585.339628][T22077]  ? bpf_test_run+0x1d1/0x830
[  585.339662][T22077]  ? bpf_test_timer_continue+0x10c/0x320
[  585.339689][T22077]  bpf_test_run+0x354/0x830
[  585.339733][T22077]  ? __pfx_bpf_test_run+0x10/0x10
[  585.339768][T22077]  ? trace_kmem_cache_alloc+0x29/0xe0
[  585.339797][T22077]  ? __kasan_krealloc+0xec/0x110
[  585.339834][T22077]  ? skb_dst_set+0x72/0x140
[  585.339859][T22077]  bpf_prog_test_run_skb+0xe35/0x2230
[  585.339903][T22077]  ? __fget_files+0x3a2/0x420
[  585.339927][T22077]  ? __fget_files+0x2a/0x420
[  585.339955][T22077]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  585.339977][T22077]  bpf_prog_test_run+0x2c5/0x340
[  585.340003][T22077]  __sys_bpf+0x643/0x950
[  585.340034][T22077]  ? __pfx___sys_bpf+0x10/0x10
[  585.340081][T22077]  ? ksys_write+0x242/0x270
[  585.340113][T22077]  ? __pfx_ksys_write+0x10/0x10
[  585.340144][T22077]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.340167][T22077]  __x64_sys_bpf+0x7c/0x90
[  585.340195][T22077]  do_syscall_64+0x174/0x580
[  585.340218][T22077]  ? trace_irq_disable+0x3b/0x140
[  585.340246][T22077]  ? clear_bhb_loop+0x40/0x90
[  585.340273][T22077]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  585.340293][T22077] RIP: 0033:0x7f8b5d99ce59
[  585.340312][T22077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  585.340330][T22077] RSP: 002b:00007f8b5e85a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  585.340354][T22077] RAX: ffffffffffffffda RBX: 00007f8b5dc15fa0 RCX: 00007f8b5d99ce59
[  585.340369][T22077] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  585.340383][T22077] RBP: 00007f8b5e85a090 R08: 0000000000000000 R09: 0000000000000000
[  585.340396][T22077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  585.340407][T22077] R13: 00007f8b5dc16038 R14: 00007f8b5dc15fa0 R15: 00007fff56e2dfa8
[  585.340446][T22077]  </TASK>
[  585.672917][T22075] IPVS: using max 27 ests per chain, 64800 per kthread
[  586.641444][T22147] netlink: 'syz.2.4044': attribute type 5 has an invalid length.
[  586.674448][T22144] RDS: rds_bind could not find a transport for ::20:0, load rds_tcp or rds_rdma?
[  586.689000][T22147] geneve2: entered promiscuous mode
[  586.697361][T22147] geneve2: entered allmulticast mode
[  586.707334][ T6181] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 53857 - 0
[  586.729511][ T6181] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 53857 - 0
[  586.778197][   T81] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 53857 - 0
[  586.794228][   T81] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 53857 - 0
[  586.907291][T22157] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  587.125847][T22178] FAULT_INJECTION: forcing a failure.
[  587.125847][T22178] name failslab, interval 1, probability 0, space 0, times 0
[  587.138572][T22178] CPU: 0 UID: 0 PID: 22178 Comm: syz.3.4053 Not tainted syzkaller #0 PREEMPT(full) 
[  587.138599][T22178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  587.138610][T22178] Call Trace:
[  587.138618][T22178]  <TASK>
[  587.138627][T22178]  dump_stack_lvl+0xe8/0x150
[  587.138658][T22178]  should_fail_ex+0x40c/0x560
[  587.138696][T22178]  should_failslab+0xa8/0x100
[  587.138726][T22178]  ? dst_alloc+0x105/0x170
[  587.138885][T22178]  kmem_cache_alloc_noprof+0x87/0x650
[  587.138911][T22178]  ? nf_hook+0xa1/0x3a0
[  587.138993][T22178]  dst_alloc+0x105/0x170
[  587.139015][T22178]  ? ip_check_mc_rcu+0x4be/0x670
[  587.139079][T22178]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  587.139137][T22178]  ? ip_route_output_key_hash+0xd8/0x2a0
[  587.139167][T22178]  ip_route_output_key_hash+0x18d/0x2a0
[  587.139206][T22178]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  587.139232][T22178]  ? __vlan_get_protocol_offset+0x349/0x3e0
[  587.139283][T22178]  ? __asan_memset+0x22/0x50
[  587.139313][T22178]  ip_route_output_flow+0x2a/0x150
[  587.139344][T22178]  ip_tunnel_xmit+0x6ce/0x2040
[  587.139393][T22178]  ? ip_tunnel_xmit+0x100/0x2040
[  587.139433][T22178]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  587.139468][T22178]  ? __pfx_gre_build_header+0x10/0x10
[  587.139536][T22178]  ? skb_network_protocol+0x23d/0x400
[  587.139576][T22178]  ? iptunnel_handle_offloads+0x2fd/0x630
[  587.139638][T22178]  ipgre_xmit+0x90a/0xcd0
[  587.139662][T22178]  ? unwind_get_return_address+0x4d/0x90
[  587.139708][T22178]  ? __pfx_ipgre_xmit+0x10/0x10
[  587.139746][T22178]  dev_hard_start_xmit+0x2cd/0x830
[  587.139788][T22178]  __dev_queue_xmit+0x1435/0x37f0
[  587.139811][T22178]  ? bpf_test_run+0x354/0x830
[  587.139830][T22178]  ? bpf_prog_test_run_skb+0xe35/0x2230
[  587.139865][T22178]  ? __dev_queue_xmit+0x29b/0x37f0
[  587.139902][T22178]  ? __pfx___dev_queue_xmit+0x10/0x10
[  587.139973][T22178]  __bpf_redirect+0xa76/0x1250
[  587.140022][T22178]  bpf_clone_redirect+0x319/0x4b0
[  587.140060][T22178]  ? bpf_test_run+0x1d1/0x830
[  587.140082][T22178]  bpf_prog_3e1cbbed0c4acd81+0x5f/0x68
[  587.140108][T22178]  ? __kernel_text_address+0xd/0x30
[  587.140151][T22178]  ? __pfx___schedule+0x10/0x10
[  587.140171][T22178]  ? ktime_get+0x45/0x220
[  587.140224][T22178]  ? preempt_schedule_thunk+0x16/0x30
[  587.140255][T22178]  ? preempt_schedule_common+0x82/0xd0
[  587.140277][T22178]  ? bpf_test_run+0x1d1/0x830
[  587.140303][T22178]  ? bpf_test_timer_continue+0x10c/0x320
[  587.140332][T22178]  bpf_test_run+0x354/0x830
[  587.140378][T22178]  ? __pfx_bpf_test_run+0x10/0x10
[  587.140414][T22178]  ? trace_kmem_cache_alloc+0x29/0xe0
[  587.140443][T22178]  ? __kasan_krealloc+0xec/0x110
[  587.140484][T22178]  ? skb_dst_set+0x72/0x140
[  587.140509][T22178]  bpf_prog_test_run_skb+0xe35/0x2230
[  587.140556][T22178]  ? __fget_files+0x3a2/0x420
[  587.140580][T22178]  ? __fget_files+0x2a/0x420
[  587.140611][T22178]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  587.140634][T22178]  bpf_prog_test_run+0x2c5/0x340
[  587.140659][T22178]  __sys_bpf+0x643/0x950
[  587.140691][T22178]  ? __pfx___sys_bpf+0x10/0x10
[  587.140738][T22178]  ? ksys_write+0x242/0x270
[  587.140768][T22178]  ? __pfx_ksys_write+0x10/0x10
[  587.140801][T22178]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.140824][T22178]  __x64_sys_bpf+0x7c/0x90
[  587.140851][T22178]  do_syscall_64+0x174/0x580
[  587.140873][T22178]  ? trace_irq_disable+0x3b/0x140
[  587.140901][T22178]  ? clear_bhb_loop+0x40/0x90
[  587.140926][T22178]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  587.140945][T22178] RIP: 0033:0x7f8b5d99ce59
[  587.140965][T22178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  587.140981][T22178] RSP: 002b:00007f8b5e85a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  587.141003][T22178] RAX: ffffffffffffffda RBX: 00007f8b5dc15fa0 RCX: 00007f8b5d99ce59
[  587.141017][T22178] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  587.141030][T22178] RBP: 00007f8b5e85a090 R08: 0000000000000000 R09: 0000000000000000
[  587.141042][T22178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  587.141053][T22178] R13: 00007f8b5dc16038 R14: 00007f8b5dc15fa0 R15: 00007fff56e2dfa8
[  587.141087][T22178]  </TASK>
[  587.654920][T22181] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  587.670368][T22181] __nla_validate_parse: 16 callbacks suppressed
[  587.670390][T22181] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4055'.
[  587.797032][T22191] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  587.852854][T22195] netlink: 320 bytes leftover after parsing attributes in process `syz.4.4059'.
[  587.954710][T22202] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4061'.
[  587.964269][T22202] netlink: 'syz.3.4061': attribute type 4 has an invalid length.
[  588.020631][T22206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4063'.
[  588.039858][T22206] geneve3: entered promiscuous mode
[  588.169190][T22211] netlink: 'syz.3.4064': attribute type 1 has an invalid length.
[  588.356293][T22222] netlink: 'syz.1.4069': attribute type 3 has an invalid length.
[  588.408345][T22227] netlink: 'syz.3.4070': attribute type 35 has an invalid length.
[  588.417836][T22222] veth1_vlan: left allmulticast mode
[  588.423457][T22222] macvlan1: left allmulticast mode
[  588.455006][T22228] unsupported nla_type 45091
[  588.470828][T22228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4068'.
[  588.721250][T22241] syzkaller0: entered promiscuous mode
[  588.737218][T22241] syzkaller0: entered allmulticast mode
[  588.748223][T22240] netlink: 'syz.2.4074': attribute type 2 has an invalid length.
[  588.771185][T22240] netlink: 'syz.2.4074': attribute type 1 has an invalid length.
[  588.779609][T22240] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4074'.
[  588.822950][T22249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4077'.
[  589.201146][T22270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4082'.
[  589.653908][T22288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4088'.
[  589.708522][T22291] IPVS: set_ctl: invalid protocol: 42 172.20.20.10:20000
[  589.798197][T22295] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4091'.
[  590.113666][T22305] netlink: 'syz.3.4096': attribute type 1 has an invalid length.
[  590.122796][T22305] netlink: 'syz.3.4096': attribute type 3 has an invalid length.
[  590.203090][T22310] IPVS: set_ctl: invalid protocol: 181 172.20.20.170:20003
[  590.379000][T22322] netlink: 'syz.3.4101': attribute type 8 has an invalid length.
[  590.399006][T22322] netlink: 'syz.3.4101': attribute type 9 has an invalid length.
[  590.608741][T22340] x_tables: duplicate underflow at hook 3
[  591.558091][T19305] udevd[19305]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[  592.069219][T22394] team0: Device wg0 is of different type
[  592.079128][T22394] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check.
[  592.225266][T22409] netlink: 'syz.1.4123': attribute type 61 has an invalid length.
[  592.233576][T22409] netlink: 'syz.1.4123': attribute type 105 has an invalid length.
[  592.362902][T22411] gretap2: entered promiscuous mode
[  592.757305][T22447] __nla_validate_parse: 13 callbacks suppressed
[  592.757328][T22447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4135'.
[  592.777146][T22448] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4134'.
[  592.935740][T22454] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4138'.
[  593.999881][T22495] netlink: 'syz.1.4147': attribute type 10 has an invalid length.
[  594.024621][T22495] openvswitch: netlink: Flow key attr not present in new flow.
[  594.357206][T22511] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4151'.
[  594.367253][T22511] openvswitch: netlink: Key type 769 is out of range max 32
[  594.380647][T22513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4150'.
[  595.023756][T22547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4162'.
[  595.193596][T22554] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4164'.
[  595.204896][T22554] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4164'.
[  595.317404][T22563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4166'.
[  595.327496][T22563] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4166'.
[  595.686247][ T5631] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  595.700501][T22480] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  595.972975][T22595] bond6: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1)
[  595.986324][T22595] bond6 (unregistering): Released all slaves
[  595.989224][T22589] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  596.401582][T22620] dummy0: entered allmulticast mode
[  598.807481][T22589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  599.289029][T22664] __nla_validate_parse: 5 callbacks suppressed
[  599.289051][T22664] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4190'.
[  599.562351][T22676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4194'.
[  599.640289][T22679] netlink: 'syz.1.4194': attribute type 3 has an invalid length.
[  599.658737][T22679] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4194'.
[  600.155223][T22704] netlink: 'syz.3.4202': attribute type 2 has an invalid length.
[  600.248197][T22707] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4202'.
[  600.379028][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  600.398900][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  600.412848][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  600.430233][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  600.440029][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  600.512501][T22713] syzkaller0: entered promiscuous mode
[  600.518413][T22713] syzkaller0: entered allmulticast mode
[  600.948561][T22737] netlink: 'syz.1.4209': attribute type 46 has an invalid length.
[  600.963934][T22727] syzkaller1: entered promiscuous mode
[  600.969545][T22727] syzkaller1: entered allmulticast mode
[  600.994469][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'.
[  601.007820][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'.
[  601.032929][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'.
[  601.120652][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'.
[  601.132279][T22736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4209'.
[  601.155050][T22747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4211'.
[  601.600047][T22756] FAULT_INJECTION: forcing a failure.
[  601.600047][T22756] name failslab, interval 1, probability 0, space 0, times 0
[  601.612732][T22756] CPU: 1 UID: 0 PID: 22756 Comm: syz.3.4213 Not tainted syzkaller #0 PREEMPT(full) 
[  601.612760][T22756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  601.612773][T22756] Call Trace:
[  601.612782][T22756]  <TASK>
[  601.612791][T22756]  dump_stack_lvl+0xe8/0x150
[  601.612822][T22756]  should_fail_ex+0x40c/0x560
[  601.612862][T22756]  should_failslab+0xa8/0x100
[  601.612894][T22756]  ? dst_alloc+0x105/0x170
[  601.612937][T22756]  kmem_cache_alloc_noprof+0x87/0x650
[  601.612963][T22756]  ? nf_hook+0xa1/0x3a0
[  601.612999][T22756]  dst_alloc+0x105/0x170
[  601.613023][T22756]  ? ip_check_mc_rcu+0x4be/0x670
[  601.613052][T22756]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  601.613093][T22756]  ? ip_route_output_key_hash+0xd8/0x2a0
[  601.613125][T22756]  ip_route_output_key_hash+0x18d/0x2a0
[  601.613159][T22756]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  601.613186][T22756]  ? __vlan_get_protocol_offset+0x349/0x3e0
[  601.613218][T22756]  ? __asan_memset+0x22/0x50
[  601.613251][T22756]  ip_route_output_flow+0x2a/0x150
[  601.613283][T22756]  ip_tunnel_xmit+0x6ce/0x2040
[  601.613314][T22756]  ? ip_tunnel_xmit+0x100/0x2040
[  601.613358][T22756]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  601.613394][T22756]  ? __pfx_gre_build_header+0x10/0x10
[  601.613425][T22756]  ? skb_network_protocol+0x23d/0x400
[  601.613448][T22756]  ? iptunnel_handle_offloads+0x2fd/0x630
[  601.613490][T22756]  ipgre_xmit+0x90a/0xcd0
[  601.613514][T22756]  ? unwind_get_return_address+0x4d/0x90
[  601.613547][T22756]  ? __pfx_ipgre_xmit+0x10/0x10
[  601.613586][T22756]  dev_hard_start_xmit+0x2cd/0x830
[  601.613630][T22756]  __dev_queue_xmit+0x1435/0x37f0
[  601.613652][T22756]  ? bpf_test_run+0x354/0x830
[  601.613673][T22756]  ? bpf_prog_test_run_skb+0xe35/0x2230
[  601.613709][T22756]  ? __dev_queue_xmit+0x29b/0x37f0
[  601.613745][T22756]  ? __pfx___dev_queue_xmit+0x10/0x10
[  601.613816][T22756]  __bpf_redirect+0xa76/0x1250
[  601.613861][T22756]  bpf_clone_redirect+0x319/0x4b0
[  601.613899][T22756]  ? bpf_test_run+0x1d1/0x830
[  601.613921][T22756]  bpf_prog_3e1cbbed0c4acd81+0x5f/0x68
[  601.613944][T22756]  ? __kernel_text_address+0xd/0x30
[  601.613971][T22756]  ? unwind_get_return_address+0x4d/0x90
[  601.613993][T22756]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  601.614021][T22756]  ? arch_stack_walk+0xfb/0x150
[  601.614087][T22756]  ? ktime_get+0x45/0x220
[  601.614122][T22756]  ? ktime_get+0x45/0x220
[  601.614152][T22756]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  601.614183][T22756]  ? lockdep_hardirqs_on+0x7a/0x110
[  601.614207][T22756]  ? ktime_get+0x45/0x220
[  601.614233][T22756]  ? seqcount_lockdep_reader_access+0xea/0x100
[  601.614262][T22756]  ? bpf_test_run+0x1d1/0x830
[  601.614288][T22756]  ? bpf_test_timer_continue+0x10c/0x320
[  601.614316][T22756]  bpf_test_run+0x354/0x830
[  601.614365][T22756]  ? __pfx_bpf_test_run+0x10/0x10
[  601.614400][T22756]  ? trace_kmem_cache_alloc+0x29/0xe0
[  601.614436][T22756]  ? __kasan_krealloc+0xec/0x110
[  601.614478][T22756]  ? skb_dst_set+0x72/0x140
[  601.614504][T22756]  bpf_prog_test_run_skb+0xe35/0x2230
[  601.614552][T22756]  ? __fget_files+0x3a2/0x420
[  601.614576][T22756]  ? __fget_files+0x2a/0x420
[  601.614608][T22756]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  601.614631][T22756]  bpf_prog_test_run+0x2c5/0x340
[  601.614658][T22756]  __sys_bpf+0x643/0x950
[  601.614692][T22756]  ? __pfx___sys_bpf+0x10/0x10
[  601.614738][T22756]  ? ksys_write+0x242/0x270
[  601.614770][T22756]  ? __pfx_ksys_write+0x10/0x10
[  601.614805][T22756]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.614828][T22756]  __x64_sys_bpf+0x7c/0x90
[  601.614858][T22756]  do_syscall_64+0x174/0x580
[  601.614880][T22756]  ? trace_irq_disable+0x3b/0x140
[  601.614910][T22756]  ? clear_bhb_loop+0x40/0x90
[  601.614936][T22756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  601.614957][T22756] RIP: 0033:0x7f8b5d99ce59
[  601.614978][T22756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  601.614994][T22756] RSP: 002b:00007f8b5e85a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  601.615018][T22756] RAX: ffffffffffffffda RBX: 00007f8b5dc15fa0 RCX: 00007f8b5d99ce59
[  601.615033][T22756] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  601.615047][T22756] RBP: 00007f8b5e85a090 R08: 0000000000000000 R09: 0000000000000000
[  601.615059][T22756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  601.615071][T22756] R13: 00007f8b5dc16038 R14: 00007f8b5dc15fa0 R15: 00007fff56e2dfa8
[  601.615108][T22756]  </TASK>
[  602.271563][T22767] xt_l2tp: v2 doesn't support IP mode
[  602.482319][ T5631] Bluetooth: hci3: command tx timeout
[  602.500108][T22711] bridge0: port 1(bridge_slave_0) entered blocking state
[  602.507484][T22711] bridge0: port 1(bridge_slave_0) entered disabled state
[  602.515088][T22711] bridge_slave_0: entered allmulticast mode
[  602.523153][T22711] bridge_slave_0: entered promiscuous mode
[  602.532392][T22711] bridge0: port 2(bridge_slave_1) entered blocking state
[  602.539666][T22711] bridge0: port 2(bridge_slave_1) entered disabled state
[  602.552211][T22711] bridge_slave_1: entered allmulticast mode
[  602.568946][T22711] bridge_slave_1: entered promiscuous mode
[  602.654735][T22711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  602.670631][T22711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.719509][T22711] team0: Port device team_slave_0 added
[  602.729197][T22711] team0: Port device team_slave_1 added
[  602.787078][T22711] batman_adv: batadv0: Adding interface: batadv_slave_0
[  602.798824][T22711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  602.826135][T22711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  602.842375][T22711] batman_adv: batadv0: Adding interface: batadv_slave_1
[  602.853672][T22711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  602.864051][T22791] IPVS: set_ctl: invalid protocol: 12 100.1.1.1:20003
[  602.889050][T22711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  602.933268][T22791] syz_tun: entered allmulticast mode
[  603.000584][T22791] IPVS: set_ctl: invalid protocol: 47 172.20.20.11:20004
[  603.019748][T22711] hsr_slave_0: entered promiscuous mode
[  603.034279][T22711] hsr_slave_1: entered promiscuous mode
[  603.056775][T22711] debugfs: 'hsr0' already exists in 'hsr'
[  603.081210][T22711] Cannot create hsr debugfs directory
[  603.100290][T22790] syz_tun: left allmulticast mode
[  603.165847][T22798] sctp: [Deprecated]: syz.2.4224 (pid 22798) Use of int in max_burst socket option.
[  603.165847][T22798] Use struct sctp_assoc_value instead
[  603.543521][T22819] IPVS: set_ctl: invalid protocol: 46 172.30.0.5:20003
[  603.651001][T22826] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  603.707473][T22823] tipc: Started in network mode
[  603.712463][T22823] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  603.720367][T22823] tipc: Enabled bearer <eth:vlan0>, priority 16
[  603.905992][T22833] bond3 (unregistering): Released all slaves
[  604.031341][T22711] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  604.044625][T22711] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  604.052965][T22711] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  604.076685][T22711] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  604.093587][T22711] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  604.141347][T22711] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  604.155422][T22711] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  604.175897][T22711] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  604.197384][T22856] netlink: 'syz.4.4239': attribute type 21 has an invalid length.
[  604.239686][T22856] netlink: 'syz.4.4239': attribute type 4 has an invalid length.
[  604.254382][T22856] netlink: 'syz.4.4239': attribute type 5 has an invalid length.
[  604.307501][T22868] sctp: [Deprecated]: syz.3.4240 (pid 22868) Use of int in maxseg socket option.
[  604.307501][T22868] Use struct sctp_assoc_value instead
[  604.416881][T22711] 8021q: adding VLAN 0 to HW filter on device bond0
[  604.502681][T22711] 8021q: adding VLAN 0 to HW filter on device team0
[  604.550892][   T81] bridge0: port 1(bridge_slave_0) entered blocking state
[  604.558152][   T81] bridge0: port 1(bridge_slave_0) entered forwarding state
[  604.562244][ T5631] Bluetooth: hci3: command tx timeout
[  604.834322][ T6181] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  604.844928][ T6181] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  604.854004][ T6181] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  604.863543][ T6181] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  604.886516][ T5818] tipc: Node number set to 10005162
[  604.894760][ T6181] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  604.906097][ T6181] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  604.916907][ T6185] bridge0: port 2(bridge_slave_1) entered blocking state
[  604.924062][ T6185] bridge0: port 2(bridge_slave_1) entered forwarding state
[  604.987484][ T6181] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  604.991364][T22888] __nla_validate_parse: 71 callbacks suppressed
[  604.991380][T22888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4245'.
[  605.004841][ T6181] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  605.250367][T22893] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4247'.
[  605.420674][T22904] macvtap1: entered allmulticast mode
[  605.433305][T22904] dummy0: entered allmulticast mode
[  605.488713][T22904] dummy0: left allmulticast mode
[  606.215097][T22934] netlink: 'syz.2.4258': attribute type 10 has an invalid length.
[  606.275889][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4259'.
[  606.360783][ T5733] IPVS: starting estimator thread 0...
[  606.407916][ T1696] block nbd3: Possible stuck request ffff888026e77000: control (read@0,1024B). Runtime 30 seconds
[  606.418825][ T1696] block nbd3: Possible stuck request ffff888026e771c0: control (read@1024,1024B). Runtime 30 seconds
[  606.432113][ T1696] block nbd3: Possible stuck request ffff888026e77380: control (read@2048,1024B). Runtime 30 seconds
[  606.464339][T22939] IPVS: using max 50 ests per chain, 120000 per kthread
[  606.622728][T22957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4263'.
[  606.642580][ T5631] Bluetooth: hci3: command tx timeout
[  606.707905][T22711] 8021q: adding VLAN 0 to HW filter on device batadv0
[  606.905080][T22975] bond3 (unregistering): Released all slaves
[  606.955822][T22982] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4269'.
[  606.996575][T22982] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  607.065222][T22978] bond3 (unregistering): Released all slaves
[  607.417585][T22998] macvtap1: entered promiscuous mode
[  607.437200][T22998] macvtap1: entered allmulticast mode
[  607.455104][T22998] veth1_vlan: entered allmulticast mode
[  607.465266][T22711] veth0_vlan: entered promiscuous mode
[  607.465834][T23002] netlink: 92 bytes leftover after parsing attributes in process `syz.2.4273'.
[  607.509627][T23007] xt_hashlimit: max too large, truncated to 1048576
[  607.514236][T22711] veth1_vlan: entered promiscuous mode
[  607.519836][T23007] xt_ecn: cannot match TCP bits for non-tcp packets
[  607.605501][T22711] veth0_macvtap: entered promiscuous mode
[  607.620079][T22711] veth1_macvtap: entered promiscuous mode
[  607.666020][ T6183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.676475][T22711] batman_adv: batadv0: Interface activated: batadv_slave_0
[  607.690606][ T6183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.696221][T22711] batman_adv: batadv0: Interface activated: batadv_slave_1
[  607.730063][T23020] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  607.765721][ T6183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  607.781224][ T6183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  607.806921][ T6183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  607.829074][ T6183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  607.866599][ T6191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  607.876977][T23025] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4279'.
[  607.882191][ T6191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  607.889248][T23025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  608.062422][T23028] netlink: 'syz.4.4280': attribute type 11 has an invalid length.
[  608.077421][T23029] netlink: 'syz.4.4280': attribute type 11 has an invalid length.
[  608.115703][ T6191] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.135888][ T6191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.209377][   T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  608.230315][   T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  608.458878][T23039] FAULT_INJECTION: forcing a failure.
[  608.458878][T23039] name failslab, interval 1, probability 0, space 0, times 0
[  608.471619][T23039] CPU: 0 UID: 0 PID: 23039 Comm: syz.3.4284 Not tainted syzkaller #0 PREEMPT(full) 
[  608.471646][T23039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  608.471658][T23039] Call Trace:
[  608.471667][T23039]  <TASK>
[  608.471675][T23039]  dump_stack_lvl+0xe8/0x150
[  608.471709][T23039]  should_fail_ex+0x40c/0x560
[  608.471748][T23039]  should_failslab+0xa8/0x100
[  608.471781][T23039]  ? dst_alloc+0x105/0x170
[  608.471809][T23039]  kmem_cache_alloc_noprof+0x87/0x650
[  608.471839][T23039]  ? nf_hook+0xa1/0x3a0
[  608.471885][T23039]  dst_alloc+0x105/0x170
[  608.471907][T23039]  ? ip_check_mc_rcu+0x4be/0x670
[  608.471936][T23039]  ip_route_output_key_hash_rcu+0x14ac/0x2720
[  608.471977][T23039]  ? ip_route_output_key_hash+0xd8/0x2a0
[  608.472008][T23039]  ip_route_output_key_hash+0x18d/0x2a0
[  608.472041][T23039]  ? __pfx_ip_route_output_key_hash+0x10/0x10
[  608.472067][T23039]  ? __vlan_get_protocol_offset+0x349/0x3e0
[  608.472100][T23039]  ? __asan_memset+0x22/0x50
[  608.472130][T23039]  ip_route_output_flow+0x2a/0x150
[  608.472163][T23039]  ip_tunnel_xmit+0x6ce/0x2040
[  608.472194][T23039]  ? ip_tunnel_xmit+0x100/0x2040
[  608.472236][T23039]  ? __pfx_ip_tunnel_xmit+0x10/0x10
[  608.472270][T23039]  ? __pfx_gre_build_header+0x10/0x10
[  608.472294][T23039]  ? skb_network_protocol+0x23d/0x400
[  608.472316][T23039]  ? iptunnel_handle_offloads+0x2fd/0x630
[  608.472356][T23039]  ipgre_xmit+0x90a/0xcd0
[  608.472380][T23039]  ? unwind_get_return_address+0x4d/0x90
[  608.472417][T23039]  ? __pfx_ipgre_xmit+0x10/0x10
[  608.472457][T23039]  dev_hard_start_xmit+0x2cd/0x830
[  608.472502][T23039]  __dev_queue_xmit+0x1435/0x37f0
[  608.472526][T23039]  ? bpf_test_run+0x354/0x830
[  608.472548][T23039]  ? bpf_prog_test_run_skb+0xe35/0x2230
[  608.472584][T23039]  ? __dev_queue_xmit+0x29b/0x37f0
[  608.472621][T23039]  ? __pfx___dev_queue_xmit+0x10/0x10
[  608.472692][T23039]  __bpf_redirect+0xa76/0x1250
[  608.472738][T23039]  bpf_clone_redirect+0x319/0x4b0
[  608.472776][T23039]  ? bpf_test_run+0x1d1/0x830
[  608.472800][T23039]  bpf_prog_3e1cbbed0c4acd81+0x5f/0x68
[  608.472826][T23039]  ? __kernel_text_address+0xd/0x30
[  608.472880][T23039]  ? unwind_get_return_address+0x4d/0x90
[  608.472904][T23039]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  608.472935][T23039]  ? arch_stack_walk+0xfb/0x150
[  608.472969][T23039]  ? ktime_get+0x45/0x220
[  608.473007][T23039]  ? ktime_get+0x45/0x220
[  608.473040][T23039]  ? seqcount_lockdep_reader_access+0xa9/0x100
[  608.473071][T23039]  ? lockdep_hardirqs_on+0x7a/0x110
[  608.473098][T23039]  ? ktime_get+0x45/0x220
[  608.473125][T23039]  ? seqcount_lockdep_reader_access+0xea/0x100
[  608.473155][T23039]  ? bpf_test_run+0x1d1/0x830
[  608.473183][T23039]  ? bpf_test_timer_continue+0x10c/0x320
[  608.473213][T23039]  bpf_test_run+0x354/0x830
[  608.473263][T23039]  ? __pfx_bpf_test_run+0x10/0x10
[  608.473300][T23039]  ? trace_kmem_cache_alloc+0x29/0xe0
[  608.473331][T23039]  ? __kasan_krealloc+0xec/0x110
[  608.473372][T23039]  ? skb_dst_set+0x72/0x140
[  608.473400][T23039]  bpf_prog_test_run_skb+0xe35/0x2230
[  608.473449][T23039]  ? __fget_files+0x3a2/0x420
[  608.473476][T23039]  ? __fget_files+0x2a/0x420
[  608.473508][T23039]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[  608.473533][T23039]  bpf_prog_test_run+0x2c5/0x340
[  608.473562][T23039]  __sys_bpf+0x643/0x950
[  608.473595][T23039]  ? __pfx___sys_bpf+0x10/0x10
[  608.473646][T23039]  ? ksys_write+0x242/0x270
[  608.473680][T23039]  ? __pfx_ksys_write+0x10/0x10
[  608.473716][T23039]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.473741][T23039]  __x64_sys_bpf+0x7c/0x90
[  608.473771][T23039]  do_syscall_64+0x174/0x580
[  608.473794][T23039]  ? trace_irq_disable+0x3b/0x140
[  608.473825][T23039]  ? clear_bhb_loop+0x40/0x90
[  608.473860][T23039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.473882][T23039] RIP: 0033:0x7f8b5d99ce59
[  608.473903][T23039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  608.473921][T23039] RSP: 002b:00007f8b5e85a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  608.473944][T23039] RAX: ffffffffffffffda RBX: 00007f8b5dc15fa0 RCX: 00007f8b5d99ce59
[  608.473960][T23039] RDX: 0000000000000048 RSI: 0000200000000080 RDI: 000000000000000a
[  608.473974][T23039] RBP: 00007f8b5e85a090 R08: 0000000000000000 R09: 0000000000000000
[  608.473987][T23039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  608.474000][T23039] R13: 00007f8b5dc16038 R14: 00007f8b5dc15fa0 R15: 00007fff56e2dfa8
[  608.474038][T23039]  </TASK>
[  608.955305][ T5631] Bluetooth: hci3: command tx timeout
[  608.961657][T23042] pim6reg: entered allmulticast mode
[  609.224403][T23047] xt_TCPMSS: Only works on TCP SYN packets
[  609.274984][T23047] netlink: 'syz.1.4286': attribute type 1 has an invalid length.
[  609.318149][T23047] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4286'.
[  609.332575][T23057] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4289'.
[  609.364355][T23059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4290'.
[  609.671018][T23072] Bluetooth: MGMT ver 1.23
[  609.727362][T23072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  609.844887][ T6191] wlan1: Trigger new scan to find an IBSS to join
[  610.218081][T23089] netlink: 'syz.4.4299': attribute type 1 has an invalid length.
[  610.369193][T23102] __nla_validate_parse: 2 callbacks suppressed
[  610.369213][T23102] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4304'.
[  610.580773][T23111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4307'.
[  610.600113][T23114] netlink: 'syz.1.4308': attribute type 8 has an invalid length.
[  610.612779][T23111] netlink: 'syz.5.4307': attribute type 9 has an invalid length.
[  610.629940][T23115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4306'.
[  610.649336][   T81] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  610.671546][   T81] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  610.690914][   T81] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  610.715255][   T81] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  611.153384][T23142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4310'.
[  611.163040][T23140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4314'.
[  611.199863][T23140] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  611.288360][T23148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4315'.
[  611.609728][T23165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4317'.
[  611.720867][T23169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4321'.
[  611.815730][T23177] x_tables: duplicate underflow at hook 2
[  611.961301][T23170] veth5: entered allmulticast mode
[  611.993255][T23170] bond3: (slave veth5): Enslaving as an active interface with an up link
[  612.096909][T23195] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4325'.
[  612.263392][T23197] gre0: left promiscuous mode
[  612.279201][T23197] gre0: left allmulticast mode
[  612.303052][T23197] bond2: left promiscuous mode
[  612.330089][T23197] bond0: left promiscuous mode
[  612.446778][T23208] netlink: 'syz.3.4329': attribute type 1 has an invalid length.
[  612.569876][T23215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4330'.
[  612.585449][T23208] 8021q: adding VLAN 0 to HW filter on device bond6
[  612.625661][T23221] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  612.644323][T23210] 8021q: adding VLAN 0 to HW filter on device team0
[  612.671600][T23210] bond6: (slave team0): Enslaving as a backup interface with a down link
[  612.884212][  T159] wlan1: Trigger new scan to find an IBSS to join
[  612.900296][T23227] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  612.976806][T23227] syzkaller0: entered promiscuous mode
[  612.982493][T23227] syzkaller0: entered allmulticast mode
[  612.988898][T23227] tipc: Resetting bearer <eth:syzkaller0>
[  613.229088][ T6183] tipc: Resetting bearer <eth:syzkaller0>
[  613.248806][T23227] tipc: Resetting bearer <eth:syzkaller0>
[  613.339745][T23259] x_tables: duplicate underflow at hook 1
[  615.389121][ T1696] block nbd6: Possible stuck request ffff888026f70000: control (read@0,4096B). Runtime 30 seconds
[  615.681070][T23227] tipc: Disabling bearer <eth:syzkaller0>
[  615.698365][T23247] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  615.727041][T14434] tipc: Node number set to 1165047043
[  615.852162][ T6183] wlan1: Trigger new scan to find an IBSS to join
[  615.951485][T23283] __nla_validate_parse: 2 callbacks suppressed
[  615.951508][T23283] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4346'.
[  615.953349][T23285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4345'.
[  615.961130][T23279] netlink: 'syz.3.4348': attribute type 1 has an invalid length.
[  616.065831][T23279] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  616.272648][T23273] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  616.407442][T23301] netlink: 'syz.2.4350': attribute type 10 has an invalid length.
[  616.430483][T23273] bond8 (unregistering): Released all slaves
[  616.791199][ T6191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  616.928348][T23320] geneve5: entered promiscuous mode
[  617.147421][T23332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4359'.
[  617.172501][T23325] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4357'.
[  617.195173][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4361'.
[  617.264718][T23345] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4362'.
[  617.298803][T23347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4363'.
[  617.334600][T23349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4364'.
[  617.469473][T23349] 8021q: adding VLAN 0 to HW filter on device bond3
[  617.477106][T23354] team_slave_1: entered promiscuous mode
[  617.493012][T23360] netlink: 'syz.1.4368': attribute type 1 has an invalid length.
[  617.498563][T23354] bond3: (slave team_slave_1): Enslaving as an active interface with an up link
[  617.500915][T23360] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4368'.
[  617.535491][T23361] vti0: entered allmulticast mode
[  617.602826][T23363] sit0: left promiscuous mode
[  617.761037][T23363] bond3: left promiscuous mode
[  617.765908][T23363] bridge1: left promiscuous mode
[  617.773079][T23363] geneve2: left promiscuous mode
[  617.778043][T23363] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  617.867982][T23368] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  617.879516][T23368] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  617.892496][T23377] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4373'.
[  617.927331][   T30] audit: type=1804 audit(1781592663.328:19): pid=23377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4373" name="/newroot/199/cgroup.controllers" dev="tmpfs" ino=1028 res=1 errno=0
[  617.983175][   T30] audit: type=1800 audit(1781592663.358:20): pid=23377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4373" name="cgroup.controllers" dev="tmpfs" ino=1028 res=0 errno=0
[  618.030831][T23380] netlink: 'syz.2.4374': attribute type 20 has an invalid length.
[  618.061336][  T159] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  618.061459][T23380] netlink: 'syz.2.4374': attribute type 20 has an invalid length.
[  618.071007][  T159] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  618.102081][  T159] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  618.143101][  T159] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  618.825009][T23419] bond8: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  618.835710][T23419] bond8: entered promiscuous mode
[  618.841601][T23419] 8021q: adding VLAN 0 to HW filter on device bond8
[  618.956356][T23423] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  619.092539][T23422] tipc: Disabling bearer <eth:syzkaller0>
[  619.248952][T23434] netlink: 'syz.5.4390': attribute type 1 has an invalid length.
[  619.377976][T23440] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  619.487045][T23445] veth0: entered promiscuous mode
[  619.504250][T23445] bond0: entered promiscuous mode
[  619.516028][T23445] bond_slave_0: entered promiscuous mode
[  619.529917][T23445] bond_slave_1: entered promiscuous mode
[  619.649211][T23445] bond0: left promiscuous mode
[  619.675862][T23445] bond_slave_0: left promiscuous mode
[  619.683048][T23445] bond_slave_1: left promiscuous mode
[  619.691790][T23445] veth0: left promiscuous mode
[  619.744349][T23453] openvswitch: netlink: Missing valid actions attribute.
[  619.753512][T23453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  619.899537][T23459] netlink: 'syz.5.4398': attribute type 10 has an invalid length.
[  619.995838][T23460] netlink: 'syz.2.4399': attribute type 11 has an invalid length.
[  620.516433][T23493] bridge0: port 1(bridge_slave_0) entered disabled state
[  620.526903][T23493] bridge0: port 2(bridge_slave_1) entered disabled state
[  620.609516][T23494] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.616778][T23494] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.639276][T23493] netlink: 'syz.5.4407': attribute type 4 has an invalid length.
[  620.650205][T23494] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.657449][T23494] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.730530][T23493] .`: renamed from bond0 (while UP)
[  621.089618][T23482] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  621.159499][T23510] __nla_validate_parse: 13 callbacks suppressed
[  621.159521][T23510] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4410'.
[  621.219657][T23503] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4410'.
[  621.365376][T23516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4414'.
[  621.412410][T23516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4414'.
[  621.434233][T23516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4414'.
[  621.457669][T23516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4414'.
[  621.478712][T23516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4414'.
[  621.508953][T23516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4414'.
[  621.542303][T23516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4414'.
[  621.561958][T23516] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4414'.
[  621.718292][T23516] bridge0: port 2(bridge_slave_1) entered disabled state
[  621.725553][T23516] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.060559][T23536] netlink: 'syz.4.4419': attribute type 1 has an invalid length.
[  622.077747][T23535] netlink: 'syz.5.4421': attribute type 1 has an invalid length.
[  622.077948][T23536] netlink: 'syz.4.4419': attribute type 3 has an invalid length.
[  622.155213][T23537] bond4: option active_slave: mode dependency failed, not supported in mode balance-xor(2)
[  622.173485][T23537] bond4 (unregistering): Released all slaves
[  622.697823][T23577] netlink: 'syz.5.4431': attribute type 2 has an invalid length.
[  622.710376][T23574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  622.788787][T23574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  622.862669][T23574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  622.934188][T23584] sctp: [Deprecated]: syz.1.4434 (pid 23584) Use of int in max_burst socket option.
[  622.934188][T23584] Use struct sctp_assoc_value instead
[  623.199454][T23599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  623.256247][T23602] netlink: 'syz.5.4442': attribute type 21 has an invalid length.
[  623.434897][T23610] vlan0: entered promiscuous mode
[  623.449578][T23610] hsr0: entered promiscuous mode
[  623.458133][T23610] vlan0: entered allmulticast mode
[  623.464210][T23610] hsr0: entered allmulticast mode
[  623.469421][T23610] hsr_slave_0: entered allmulticast mode
[  623.476164][T23610] hsr_slave_1: entered allmulticast mode
[  623.605534][T23622] netlink: 'syz.5.4449': attribute type 5 has an invalid length.
[  623.972607][T23646] openvswitch: netlink: Invalid VLAN frame
[  624.165163][T23654] openvswitch: netlink: VXLAN extension 307 out of range max 1
[  624.537921][T23680] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  624.700034][T23683] xt_TPROXY: Can be used only with -p tcp or -p udp
[  625.987636][T23740] bond9: entered promiscuous mode
[  625.993639][T23740] 8021q: adding VLAN 0 to HW filter on device bond9
[  626.399113][T23772] __nla_validate_parse: 57 callbacks suppressed
[  626.399135][T23772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4489'.
[  626.435106][T23772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  626.557139][T23772] batman_adv: batadv0: Removing interface: batadv_slave_1
[  626.846457][T23789] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4494'.
[  627.193728][T23781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4492'.
[  628.074652][T23839] netlink: 'syz.5.4509': attribute type 11 has an invalid length.
[  628.147274][T23839] tipc: Started in network mode
[  628.161284][T23839] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  628.176773][T23839] tipc: Enabled bearer <udp:syz0>, priority 10
[  628.340457][T23851] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4512'.
[  628.376915][T23845] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  628.433002][T23855] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4513'.
[  628.485864][T23861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4514'.
[  628.530915][T23861] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4514'.
[  628.591499][T23863] syzkaller1: entered promiscuous mode
[  628.620716][T23863] syzkaller1: entered allmulticast mode
[  628.831057][   T30] audit: type=1800 audit(1781592674.218:21): pid=23877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4519" name="r" dev="tmpfs" ino=1164 res=0 errno=0
[  629.249005][   T30] audit: type=1800 audit(1781592674.648:22): pid=23893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4523" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=1730 res=0 errno=0
[  629.302916][ T5733] tipc: Node number set to 4269801488
[  629.416100][T23895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4524'.
[  629.548709][T23899] netlink: 'syz.1.4526': attribute type 3 has an invalid length.
[  629.570640][T23899] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4526'.
[  629.680734][T23905] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4528'.
[  630.298885][T23936] xt_bpf: check failed: parse error
[  630.623732][T23950] block nbd7: server does not support multiple connections per device.
[  630.643454][T23950] block nbd7: shutting down sockets
[  630.873724][T23962] syzkaller0: entered promiscuous mode
[  630.901575][T23962] syzkaller0: entered allmulticast mode
[  630.947066][T23961] syzkaller0: entered promiscuous mode
[  630.961397][T23961] syzkaller0: entered allmulticast mode
[  630.995515][T23962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  631.396921][T23992] syzkaller1: entered promiscuous mode
[  631.406299][T23992] syzkaller1: entered allmulticast mode
[  631.573313][T24001] __nla_validate_parse: 4 callbacks suppressed
[  631.573333][T24001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4551'.
[  631.757788][T24008] SET target dimension over the limit!
[  631.781563][T24007] netlink: 'syz.1.4556': attribute type 1 has an invalid length.
[  631.790424][T24008] netlink: 'syz.3.4554': attribute type 2 has an invalid length.
[  631.837405][T24007] 8021q: adding VLAN 0 to HW filter on device bond10
[  632.235436][T24030] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20001
[  632.873388][T24066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4572'.
[  632.991258][T24065] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4571'.
[  633.015839][T24062] bridge0: port 2(bridge_slave_1) entered disabled state
[  633.017658][T24071] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4573'.
[  633.023581][T24062] bridge0: port 1(bridge_slave_0) entered disabled state
[  633.244983][T24062] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  633.278160][T24062] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  633.517334][T24066] 8021q: adding VLAN 0 to HW filter on device bond7
[  633.617156][  T159] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  633.636200][  T159] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  633.657051][  T159] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  633.676493][  T159] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  633.691793][  T159] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  633.714844][  T159] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  633.745381][  T159] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  633.763692][  T159] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  633.876562][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4576'.
[  634.040302][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4580'.
[  634.093759][T24099] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4582'.
[  634.108823][T24095] syzkaller0: entered promiscuous mode
[  634.119690][T24095] syzkaller0: entered allmulticast mode
[  634.638594][T24114] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4586'.
[  634.778685][T24123] netlink: 'syz.3.4590': attribute type 19 has an invalid length.
[  634.790896][T24123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4590'.
[  634.807135][T24125] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.825612][T24125] netlink: 'syz.1.4589': attribute type 1 has an invalid length.
[  634.853032][T24125] netlink: 'syz.1.4589': attribute type 2 has an invalid length.
[  635.315324][T24151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4599'.
[  635.346578][T24152] netlink: 'syz.2.4600': attribute type 1 has an invalid length.
[  635.569457][T24152] bond4: entered promiscuous mode
[  635.591228][T24152] 8021q: adding VLAN 0 to HW filter on device bond4
[  635.724968][T24148] bond4: (slave bridge2): making interface the new active one
[  635.745926][T24148] bridge2: entered promiscuous mode
[  635.755052][T24148] bond4: (slave bridge2): Enslaving as an active interface with an up link
[  635.780290][T24152] tipc: Enabled bearer <udp:s>, priority 10
[  636.485740][ T1696] block nbd3: Possible stuck request ffff888026e77000: control (read@0,1024B). Runtime 60 seconds
[  636.496704][ T1696] block nbd3: Possible stuck request ffff888026e771c0: control (read@1024,1024B). Runtime 60 seconds
[  636.511002][ T1696] block nbd3: Possible stuck request ffff888026e77380: control (read@2048,1024B). Runtime 60 seconds
[  637.602131][   T51] Bluetooth: hci3: command 0x0405 tx timeout
[  637.879156][T24254] __nla_validate_parse: 6 callbacks suppressed
[  637.879176][T24254] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4627'.
[  637.924206][T24254] bridge_slave_0 (unregistering): left allmulticast mode
[  637.947611][T24254] bridge_slave_0 (unregistering): left promiscuous mode
[  637.979343][T24254] bridge0: port 1(bridge_slave_0) entered disabled state
[  638.140007][T24257] macvtap1: entered allmulticast mode
[  638.152492][T24257] dummy0: entered allmulticast mode
[  638.165952][T24257] dummy0: left allmulticast mode
[  638.549830][T24271] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4630'.
[  638.714787][T24274] bridge0: entered promiscuous mode
[  638.744485][T24274] bridge0: entered allmulticast mode
[  638.780960][T24275] netlink: 'syz.3.4631': attribute type 8 has an invalid length.
[  638.834265][T24277] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input8
[  639.541203][T24309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4638'.
[  639.559379][T24309] netlink: 'syz.3.4638': attribute type 7 has an invalid length.
[  639.577029][T24309] netlink: 'syz.3.4638': attribute type 8 has an invalid length.
[  639.585763][T24309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4638'.
[  640.328175][T24331] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4644'.
[  640.710255][T24347] netlink: 'syz.2.4647': attribute type 1 has an invalid length.
[  640.730826][T24347] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4647'.
[  641.090090][T24360] syzkaller1: entered promiscuous mode
[  641.123789][T24360] syzkaller1: entered allmulticast mode
[  641.221755][T24364] netlink: 'syz.2.4651': attribute type 5 has an invalid length.
[  641.242869][T24364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4651'.
[  641.256167][T24366] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4652'.
[  641.297534][T24364] ip6erspan0: entered promiscuous mode
[  641.313582][T24366] netlink: 'syz.3.4652': attribute type 3 has an invalid length.
[  641.321575][T24366] netlink: 'syz.3.4652': attribute type 3 has an invalid length.
[  641.341862][T24366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4652'.
[  641.883594][T24387] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4657'.
[  641.988834][T24393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  642.041077][T24392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  642.113167][T24387] syzkaller1: entered promiscuous mode
[  642.118807][T24387] syzkaller1: entered allmulticast mode
[  642.743124][T24414] xt_CT: You must specify a L4 protocol and not use inversions on it
[  642.999460][T24431] __nla_validate_parse: 2 callbacks suppressed
[  642.999482][T24431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4666'.
[  643.033843][T24431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4666'.
[  643.061190][T24431] netlink: 'syz.5.4666': attribute type 4 has an invalid length.
[  643.089443][T24210] Set syz1 is full, maxelem 65536 reached
[  643.101383][T24428] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4666'.
[  643.141533][T24428] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4666'.
[  643.165404][T24428] netlink: 'syz.5.4666': attribute type 4 has an invalid length.
[  643.367239][T24443] netlink: 27 bytes leftover after parsing attributes in process `syz.5.4670'.
[  643.426473][T24448] netlink: 'syz.4.4673': attribute type 49 has an invalid length.
[  643.678526][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4675'.
[  644.238859][T24486] vlan2: entered promiscuous mode
[  644.256517][T24486] vlan1: entered promiscuous mode
[  644.666395][T24468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  644.886396][T24527] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4687'.
[  644.924346][T24529] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4688'.
[  645.211606][T24550] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4694'.
[  645.292767][T24554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  645.434424][T24560] netlink: 27 bytes leftover after parsing attributes in process `syz.2.4697'.
[  645.451615][ T1696] block nbd6: Possible stuck request ffff888026f70000: control (read@0,4096B). Runtime 60 seconds
[  646.411047][T24593] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  646.471035][T24590] nbd1: detected capacity change from 0 to 63
[  646.529788][   T51] block nbd1: Receive control failed (result -32)
[  646.546987][T19305] block nbd1: Dead connection, failed to find a fallback
[  646.573974][T24603] bond4 (unregistering): Released all slaves
[  646.581782][T19305] block nbd1: shutting down sockets
[  646.599311][T19305] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.626489][T19305] Buffer I/O error on dev nbd1, logical block 0, async page read
[  646.644266][T19305] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.663693][T19305] Buffer I/O error on dev nbd1, logical block 1, async page read
[  646.672571][T19305] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.682975][T19305] Buffer I/O error on dev nbd1, logical block 2, async page read
[  646.700445][T19305] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.720517][T19305] Buffer I/O error on dev nbd1, logical block 3, async page read
[  646.759558][T19305] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.797522][T19305] Buffer I/O error on dev nbd1, logical block 0, async page read
[  646.840359][T19305] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.860299][T19305] Buffer I/O error on dev nbd1, logical block 1, async page read
[  646.894180][T19305] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  646.943915][T19305] Buffer I/O error on dev nbd1, logical block 2, async page read
[  646.971992][T24628] x_tables: duplicate underflow at hook 1
[  646.972036][T19305] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  647.000603][T24636] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  647.022156][T24635] netlink: 'syz.5.4714': attribute type 4 has an invalid length.
[  647.041572][T19305] Buffer I/O error on dev nbd1, logical block 3, async page read
[  647.072701][T19305] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  647.104580][T19305] Buffer I/O error on dev nbd1, logical block 0, async page read
[  647.116789][T24644] netlink: 'syz.5.4714': attribute type 4 has an invalid length.
[  647.143445][T19305] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  647.178149][T19305] Buffer I/O error on dev nbd1, logical block 1, async page read
[  647.218392][T19305] ldm_validate_partition_table(): Disk read failed.
[  647.276324][T19305] Dev nbd1: unable to read RDB block 0
[  647.278873][T24651] netlink: 'syz.1.4717': attribute type 4 has an invalid length.
[  647.314124][T19305]  nbd1: unable to read partition table
[  647.355310][T19305] ldm_validate_partition_table(): Disk read failed.
[  647.385670][T19305] Dev nbd1: unable to read RDB block 0
[  647.449652][T19305]  nbd1: unable to read partition table
[  647.604908][T24664] xt_CT: You must specify a L4 protocol and not use inversions on it
[  648.213661][T24686] bond8: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  648.284006][T24668] __nla_validate_parse: 6 callbacks suppressed
[  648.284026][T24668] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4721'.
[  648.286901][T24686] bond8 (unregistering): Released all slaves
[  648.348084][T24697] netlink: 620 bytes leftover after parsing attributes in process `syz.4.4727'.
[  648.370134][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4727'.
[  648.772148][T24701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4729'.
[  648.957100][T24714] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4730'.
[  649.158735][T24722] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4734'.
[  649.223128][T24722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4734'.
[  649.389528][T24735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4737'.
[  649.417403][T24731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4736'.
[  649.538294][T24745] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  649.560000][T24745] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.069015][ T5646] IPVS: starting estimator thread 0...
[  650.176141][T24768] IPVS: using max 27 ests per chain, 64800 per kthread
[  650.273702][T24779] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4749'.
[  650.291225][T24778] syzkaller0: entered promiscuous mode
[  650.299824][T24778] syzkaller0: entered allmulticast mode
[  650.311034][T24781] openvswitch: netlink: Message has 4 unknown bytes.
[  650.334282][T24778] simple: basic_1
[  650.338442][T24779] netlink: 'syz.5.4749': attribute type 5 has an invalid length.
[  650.367756][T24781] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  650.718827][T24794] syzkaller0: entered promiscuous mode
[  650.750561][T24794] syzkaller0: entered allmulticast mode
[  650.884166][T24807] 8021q: VLANs not supported on ip_vti0
[  650.938658][T24794] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  650.972701][T24791] tipc: Resetting bearer <eth:syzkaller0>
[  651.064688][T24791] tipc: Disabling bearer <eth:syzkaller0>
[  651.918896][T24873] vlan2: entered allmulticast mode
[  651.957526][T24873] bridge1: entered allmulticast mode
[  652.054334][T24892] Bluetooth: hci0: Opcode 0x0c1a failed: -22
[  652.099447][T24900] netlink: 'syz.1.4780': attribute type 15 has an invalid length.
[  652.425256][T24917] bond0 (unregistering): (slave vlan2): Releasing backup interface
[  652.448089][T24917] bond0 (unregistering): Released all slaves
[  652.469715][ T5646] dummy0: left promiscuous mode
[  652.573254][T24929] mac80211_hwsim hwsim47 »»»»»»: renamed from wlan0 (while UP)
[  652.717193][T24932] macsec1: entered allmulticast mode
[  652.724397][T24932] bond0: (slave macsec1): Error -34 calling dev_set_mtu
[  652.741148][T24937] netlink: 'syz.2.4791': attribute type 1 has an invalid length.
[  652.989622][T24944] netlink: 'syz.4.4794': attribute type 11 has an invalid length.
[  652.997704][T24939] bond5: (slave veth9): Enslaving as an active interface with a down link
[  653.035708][T24942] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  653.255321][T24954] 8021q: adding VLAN 0 to HW filter on device .`
[  653.282006][T24954] 8021q: adding VLAN 0 to HW filter on device team0
[  653.380392][T24954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  653.391129][T24954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  653.416172][T24954] veth1_vlan: left promiscuous mode
[  653.430804][T24954] veth0_vlan: left promiscuous mode
[  653.438125][T24954] veth0_vlan: entered promiscuous mode
[  653.448319][T24954] veth1_vlan: entered promiscuous mode
[  653.464158][T24954] veth1_macvtap: left promiscuous mode
[  653.465975][T24973] __nla_validate_parse: 11 callbacks suppressed
[  653.465992][T24973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4798'.
[  653.471275][T24954] veth0_macvtap: left promiscuous mode
[  653.493297][T24954] veth0_macvtap: entered promiscuous mode
[  653.500014][T24954] veth1_macvtap: entered promiscuous mode
[  653.512950][T24954] 8021q: adding VLAN 0 to HW filter on device bond1
[  653.527948][T24954] 8021q: adding VLAN 0 to HW filter on device eth0
[  653.537193][T24954] 8021q: adding VLAN 0 to HW filter on device eth1
[  653.545852][T24954] 8021q: adding VLAN 0 to HW filter on device eth2
[  653.554397][T24954] 8021q: adding VLAN 0 to HW filter on device eth3
[  653.562375][T24954] 8021q: adding VLAN 0 to HW filter on device bond2
[  653.570952][T24954] 8021q: adding VLAN 0 to HW filter on device bond0
[  653.609858][T24955] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  653.634688][T24957] macvtap2: entered promiscuous mode
[  653.640016][T24957] macvtap2: entered allmulticast mode
[  653.675574][T24958] mac80211_hwsim hwsim59 wlan0: entered promiscuous mode
[  653.684131][T24958] mac80211_hwsim hwsim59 wlan0: entered allmulticast mode
[  653.692834][T24961] syzkaller0: entered promiscuous mode
[  653.698707][T24961] syzkaller0: entered allmulticast mode
[  653.849384][T24971] tipc: Resetting bearer <eth:syzkaller0>
[  653.856106][   T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  653.873823][   T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.915691][T24948] tipc: Resetting bearer <eth:syzkaller0>
[  653.985882][T24948] tipc: Disabling bearer <eth:syzkaller0>
[  654.088984][   T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  654.106377][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  654.121685][   T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  654.139059][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  654.167856][   T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  654.177998][   T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  654.185331][T24992] netlink: 'syz.5.4802': attribute type 142 has an invalid length.
[  654.275619][T24997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4803'.
[  654.319505][T24998] netlink: 'syz.1.4803': attribute type 1 has an invalid length.
[  654.341746][T24998] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4803'.
[  654.357690][T24998] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4803'.
[  654.368003][T24998] netlink: 658 bytes leftover after parsing attributes in process `syz.1.4803'.
[  654.414541][T25009] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:24096
[  654.507925][T24997] hsr_slave_1 (unregistering): left promiscuous mode
[  655.433081][T25071] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4819'.
[  655.475891][T25075] netlink: 'syz.1.4820': attribute type 5 has an invalid length.
[  657.086905][T24990] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  657.298664][T25092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4823'.
[  657.307801][T25092] openvswitch: netlink: IPv4 frag type 127 is out of range max 2
[  657.312719][T25087] bridge0: port 1(dummy0) entered blocking state
[  657.328145][T25087] bridge0: port 1(dummy0) entered disabled state
[  657.336692][T25087] dummy0: entered allmulticast mode
[  657.348320][T25087] dummy0: entered promiscuous mode
[  657.356317][T25087] bridge0: port 1(dummy0) entered blocking state
[  657.362824][T25087] bridge0: port 1(dummy0) entered forwarding state
[  657.480099][T25103] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4827'.
[  657.547106][T25103] netlink: 'syz.5.4827': attribute type 1 has an invalid length.
[  657.754624][T25112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4830'.
[  657.773489][T25117] netlink: 'syz.5.4827': attribute type 3 has an invalid length.
[  657.808351][T25117] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4827'.
[  658.025901][T25109] 8021q: adding VLAN 0 to HW filter on device bond2
[  658.036275][T25109] bond1: (slave bond2): making interface the new active one
[  658.085679][T25109] bond1: (slave bond2): Enslaving as an active interface with an up link
[  658.241777][T25134] sctp: [Deprecated]: syz.4.4834 (pid 25134) Use of int in max_burst socket option deprecated.
[  658.241777][T25134] Use struct sctp_assoc_value instead
[  658.850719][T25167] netlink: 'syz.2.4843': attribute type 2 has an invalid length.
[  659.034049][T25173] netlink: 'syz.3.4844': attribute type 1 has an invalid length.
[  659.145550][T25177] __nla_validate_parse: 2 callbacks suppressed
[  659.145570][T25177] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.4847'.
[  659.147987][T25175] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  660.064725][T25214] netlink: 112 bytes leftover after parsing attributes in process `syz.3.4857'.
[  660.150314][T25216] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4858'.
[  660.174169][T25216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4858'.
[  660.454795][T25228] netlink: 'syz.2.4859': attribute type 1 has an invalid length.
[  660.525287][T25225] gretap1: entered allmulticast mode
[  660.818746][T25239] netlink: 'syz.2.4863': attribute type 23 has an invalid length.
[  660.901283][T25243] netlink: 'syz.1.4864': attribute type 4 has an invalid length.
[  660.941564][T25240] netlink: 'syz.1.4864': attribute type 4 has an invalid length.
[  661.109945][T25247] xt_cgroup: xt_cgroup: no path or classid specified
[  661.416312][T25268] netlink: 'syz.1.4870': attribute type 1 has an invalid length.
[  661.954798][T25293] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4879'.
[  661.968462][T25293] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4879'.
[  661.978900][T25293] netlink: 'syz.1.4879': attribute type 6 has an invalid length.
[  661.986800][T25293] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4879'.
[  662.125905][T25301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4882'.
[  662.135570][T25301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4882'.
[  662.200060][T25304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4882'.
[  664.118997][T25252] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  664.912814][T25345] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4895'.
[  664.994322][T25349] syzkaller0: entered promiscuous mode
[  664.999933][T25349] syzkaller0: entered allmulticast mode
[  665.307131][T25376] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4898'.
[  665.347001][T25376] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4898'.
[  665.515912][T25368] syzkaller1: entered promiscuous mode
[  665.544990][T25368] syzkaller1: entered allmulticast mode
[  665.661517][T25393] validate_nla: 1 callbacks suppressed
[  665.661539][T25393] netlink: 'syz.5.4903': attribute type 1 has an invalid length.
[  665.715894][T25393] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4903'.
[  665.739458][T25396] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.4903'.
[  666.037948][T25406] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4907'.
[  666.063896][T25406] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4907'.
[  666.079479][T25413] ip6tnl2: entered allmulticast mode
[  666.088417][   T37] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  666.107795][   T37] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  666.114477][T25415] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4910'.
[  666.115911][T14433] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  666.351469][ T5646] IPVS: starting estimator thread 0...
[  666.412089][T14433] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  666.452964][T25428] IPVS: using max 24 ests per chain, 57600 per kthread
[  666.566265][ T1696] block nbd3: Possible stuck request ffff888026e77000: control (read@0,1024B). Runtime 90 seconds
[  666.577076][ T1696] block nbd3: Possible stuck request ffff888026e771c0: control (read@1024,1024B). Runtime 90 seconds
[  666.589326][ T1696] block nbd3: Possible stuck request ffff888026e77380: control (read@2048,1024B). Runtime 90 seconds
[  666.710564][T25448] team0: Port device bridge2 added
[  666.778266][T25454] netlink: 6024 bytes leftover after parsing attributes in process `syz.2.4922'.
[  666.882821][ T5646] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  667.585268][T25477] netlink: 'syz.5.4929': attribute type 1 has an invalid length.
[  667.602481][T25477] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4929'.
[  667.826313][T25502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  667.879122][T25506] Bluetooth: MGMT ver 1.23
[  667.989102][T25508] bridge3: entered promiscuous mode
[  668.048480][T25512] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  668.639031][T25537] netlink: 'syz.4.4947': attribute type 1 has an invalid length.
[  669.257292][T25555] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  669.452704][T25567] netlink: 'syz.1.4955': attribute type 8 has an invalid length.
[  669.696584][T25583] unsupported nlmsg_type 40
[  669.826902][T25588] netlink: 'syz.2.4962': attribute type 1 has an invalid length.
[  669.919664][T25588] bond7: entered promiscuous mode
[  669.928283][T25588] 8021q: adding VLAN 0 to HW filter on device bond7
[  669.948930][T25593] vlan2: entered promiscuous mode
[  669.960092][T25593] bridge0: entered promiscuous mode
[  669.986118][T25588] __nla_validate_parse: 8 callbacks suppressed
[  669.986132][T25588] netlink: 180568 bytes leftover after parsing attributes in process `syz.2.4962'.
[  670.322098][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  670.580425][T25621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4972'.
[  670.587276][T25623] 8021q: adding VLAN 0 to HW filter on device batadv1
[  670.606101][T25623] team0: Port device batadv1 added
[  670.620473][T25624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4972'.
[  670.637370][T25629] netlink: 'syz.3.4974': attribute type 21 has an invalid length.
[  670.645461][T25629] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4974'.
[  670.660843][T25629] netlink: 'syz.3.4974': attribute type 5 has an invalid length.
[  670.668961][T25629] netlink: 'syz.3.4974': attribute type 6 has an invalid length.
[  670.683691][T25629] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4974'.
[  670.729931][T25632] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4971'.
[  670.830713][T25640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4977'.
[  670.839572][T25639] netlink: 'syz.3.4978': attribute type 12 has an invalid length.
[  671.230574][T25656] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4983'.
[  671.250920][T25656] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4983'.
[  671.260604][T25656] bridge0: port 2(bridge_slave_1) entered blocking state
[  671.267809][T25656] bridge0: port 2(bridge_slave_1) entered listening state
[  671.275136][T25656] bridge0: port 1(bridge_slave_0) entered blocking state
[  671.282310][T25656] bridge0: port 1(bridge_slave_0) entered listening state
[  671.291864][T25656] bridge0: left promiscuous mode
[  671.296926][T25656] bridge0: left allmulticast mode
[  671.304507][T25656] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4983'.
[  671.327476][T25656] bridge0: port 2(bridge_slave_1) entered disabled state
[  671.334720][T25656] bridge0: port 1(bridge_slave_0) entered disabled state
[  671.676346][T25676] bridge0: entered allmulticast mode
[  671.733889][T25674] netlink: 'syz.4.4989': attribute type 1 has an invalid length.
[  672.227932][   T30] audit: type=1804 audit(1781592717.628:23): pid=25701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4998" name="/newroot/338/cgroup.controllers" dev="tmpfs" ino=1752 res=1 errno=0
[  672.256116][   T30] audit: type=1800 audit(1781592717.628:24): pid=25701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4998" name="cgroup.controllers" dev="tmpfs" ino=1752 res=0 errno=0
[  673.371617][T25750] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  673.578584][ T6183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.588114][ T6183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.895463][   T30] audit: type=1800 audit(1781592719.298:25): pid=25775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5021" name="memory.events" dev="tmpfs" ino=1593 res=0 errno=0
[  675.525635][ T1696] block nbd6: Possible stuck request ffff888026f70000: control (read@0,4096B). Runtime 90 seconds
[  676.624276][T25758] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  676.881156][T25795] sctp: [Deprecated]: syz.2.5023 (pid 25795) Use of int in max_burst socket option deprecated.
[  676.881156][T25795] Use struct sctp_assoc_value instead
[  677.033893][T25801] __nla_validate_parse: 7 callbacks suppressed
[  677.033915][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5024'.
[  677.077990][T25801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5024'.
[  677.091536][T25801] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5024'.
[  677.101169][T25801] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5024'.
[  677.148381][T25814] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5031'.
[  677.385302][T25832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5034'.
[  677.408064][T25832] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5034'.
[  677.539834][T25835] can: request_module (can-proto-5) failed.
[  678.118854][T25851] netlink: 'syz.5.5040': attribute type 10 has an invalid length.
[  678.144074][T25851] team0 (unregistering): Port device team_slave_0 removed
[  678.175167][T25851] team0 (unregistering): Port device team_slave_1 removed
[  678.221333][T25851] team0 (unregistering): Port device batadv1 removed
[  678.290427][T25866] netlink: 'syz.1.5045': attribute type 15 has an invalid length.
[  678.397540][T25855] xt_hashlimit: size too large, truncated to 1048576
[  678.525725][T25855] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  678.723430][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  679.004558][T25888] tipc: Started in network mode
[  679.009797][T25888] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711
[  679.038448][T25888] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  679.294541][T25914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5057'.
[  679.376994][T25924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5060'.
[  679.484399][T25929] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5062'.
[  679.530319][T25929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  679.580968][T25929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  679.632974][T25929] bond0 (unregistering): Released all slaves
[  679.690505][T25939] geneve3: entered promiscuous mode
[  679.699682][ T6183] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  679.734923][ T6183] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  679.895537][T25940] bond0: option xmit_hash_policy: invalid value (10)
[  679.932647][T25940] bond0 (unregistering): Released all slaves
[  680.018744][ T6183] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  680.027928][ T6183] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  680.359468][T25982] netlink: 'syz.1.5075': attribute type 58 has an invalid length.
[  681.005245][T26012] netlink: 'syz.5.5083': attribute type 2 has an invalid length.
[  681.021022][T26012] netlink: 'syz.5.5083': attribute type 1 has an invalid length.
[  681.459627][T26033] xfrm0: entered allmulticast mode
[  681.926361][T26049] bridge0: port 2(bridge_slave_1) entered blocking state
[  681.933639][T26049] bridge0: port 2(bridge_slave_1) entered listening state
[  681.941095][T26049] bridge0: port 1(bridge_slave_0) entered blocking state
[  681.948376][T26049] bridge0: port 1(bridge_slave_0) entered listening state
[  681.969676][T26049] 8021q: adding VLAN 0 to HW filter on device team0
[  681.984195][T26049] 8021q: adding VLAN 0 to HW filter on device batadv0
[  682.069633][T26067] x_tables: duplicate underflow at hook 3
[  682.076835][T26049] 8021q: adding VLAN 0 to HW filter on device bond3
[  682.107985][T26049] 8021q: adding VLAN 0 to HW filter on device bond5
[  682.119145][T26049] 8021q: adding VLAN 0 to HW filter on device bond6
[  682.152320][ T5646] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  682.169396][ T6183] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  682.240719][ T6183] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex
[  682.269546][ T6183] bond5: (slave veth9): making interface the new active one
[  682.283929][ T6183] bond5: active interface up!
[  682.390237][T26079] __nla_validate_parse: 16 callbacks suppressed
[  682.390260][T26079] netlink: 51 bytes leftover after parsing attributes in process `syz.2.5095'.
[  682.722534][T14433] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  683.669971][T26094] mac80211_hwsim hwsim49 »»»»»»: renamed from wlan0 (while UP)
[  683.718494][T26099] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5099'.
[  683.748027][T26099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5099'.
[  683.757774][T26099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5099'.
[  684.267741][T26034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  684.663904][T26119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  684.697847][T26121] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5107'.
[  684.867482][T26130] netlink: 'syz.1.5109': attribute type 1 has an invalid length.
[  684.929912][T26137] netlink: 'syz.2.5110': attribute type 1 has an invalid length.
[  685.140389][T26130] 8021q: adding VLAN 0 to HW filter on device bond0
[  685.171146][T26131] bond0: (slave gretap2): making interface the new active one
[  685.181658][T26131] bond0: (slave gretap2): Enslaving as an active interface with an up link
[  685.239838][T26137] bond0: entered promiscuous mode
[  685.245469][T26137] 8021q: adding VLAN 0 to HW filter on device bond0
[  685.270175][T26139] macvtap0: entered allmulticast mode
[  685.298229][T26141] bond0: (slave bridge4): making interface the new active one
[  685.310729][T26141] bridge4: entered promiscuous mode
[  685.320238][T26141] bond0: (slave bridge4): Enslaving as an active interface with an up link
[  685.717447][T26167] gretap3: entered promiscuous mode
[  685.738164][T26167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5116'.
[  685.899582][T26175] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5118'.
[  685.923194][T26167] netlink: 'syz.3.5116': attribute type 1 has an invalid length.
[  685.930976][T26167] netlink: 'syz.3.5116': attribute type 2 has an invalid length.
[  686.033910][T26180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5120'.
[  686.309374][T26194] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma?
[  686.460760][T26194] can: request_module (can-proto-0) failed.
[  686.536031][T26205] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5127'.
[  686.562062][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  687.206758][T26250] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5134'.
[  687.221301][T26246] bond8: option all_slaves_active: invalid value (127)
[  687.244066][T26246] bond8 (unregistering): Released all slaves
[  687.366769][T26250] macsec1: entered promiscuous mode
[  687.378884][T26250] mac80211_hwsim hwsim72 wlan1: entered promiscuous mode
[  687.777800][T26267] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5141'.
[  687.827296][T26267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5141'.
[  687.984636][T24191] bridge0: entered promiscuous mode
[  688.140402][T26285] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9
[  690.047005][T26238] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  690.228972][T26291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5147'.
[  690.249536][T26291] netlink: 'syz.2.5147': attribute type 2 has an invalid length.
[  690.387717][T26307] netlink: 'syz.4.5154': attribute type 1 has an invalid length.
[  690.396370][T26307] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.5154'.
[  690.413938][T26307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  690.435693][T26311] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.5153'.
[  690.542304][T26315] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20000
[  690.788499][T26326] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5159'.
[  690.797881][T26329] netlink: 'syz.4.5160': attribute type 1 has an invalid length.
[  690.897877][T26329] 8021q: adding VLAN 0 to HW filter on device bond4
[  690.998171][T26330] bond4: (slave veth7): Enslaving as an active interface with a down link
[  691.235715][T26350] syzkaller0: Caught tx_queue_len zero misconfig
[  691.311445][T26353] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  691.331344][T26353] bridge0: port 2(bridge_slave_1) entered disabled state
[  691.338729][T26353] bridge0: port 1(bridge_slave_0) entered disabled state
[  691.839747][T26391] netlink: 'syz.4.5175': attribute type 1 has an invalid length.
[  692.206211][T26403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5178'.
[  692.301165][T26407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5179'.
[  692.584350][T26415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5181'.
[  692.610457][T26416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5182'.
[  692.689660][T26421] bond0: Unable to set down delay as MII monitoring is disabled
[  692.759823][T26425] xt_CT: You must specify a L4 protocol and not use inversions on it
[  692.875170][T26433] __nla_validate_parse: 2 callbacks suppressed
[  692.875192][T26433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5186'.
[  693.019677][T26433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5186'.
[  693.201675][T26444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5189'.
[  693.230273][T26444] nbd: must specify a size in bytes for the device
[  693.249560][T26449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5190'.
[  693.277436][T26449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5190'.
[  693.439303][T26457] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5192'.
[  693.542517][T26462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  693.718958][T26476] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5196'.
[  694.251755][T26488] SET target dimension over the limit!
[  694.458860][T26490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5201'.
[  694.472551][T26490] netlink: 'syz.2.5201': attribute type 7 has an invalid length.
[  694.480614][T26490] netlink: 'syz.2.5201': attribute type 8 has an invalid length.
[  694.483466][T26499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  694.499401][T26490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5201'.
[  694.512494][T26502] openvswitch: netlink: IP tunnel dst address not specified
[  694.722015][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  695.205916][T26531] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5212'.
[  695.362258][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  695.630289][   T30] audit: type=1804 audit(1781592741.028:26): pid=26556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5220" name="/newroot/386/cgroup.controllers" dev="tmpfs" ino=1999 res=1 errno=0
[  695.668772][   T30] audit: type=1800 audit(1781592741.028:27): pid=26556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5220" name="cgroup.controllers" dev="tmpfs" ino=1999 res=0 errno=0
[  695.694062][   T30] audit: type=1804 audit(1781592741.058:28): pid=26556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5220" name="/newroot/386/cgroup.controllers" dev="tmpfs" ino=1999 res=1 errno=0
[  695.730076][T26558] openvswitch: netlink: IP tunnel dst address not specified
[  695.843938][T26567] netlink: 'syz.4.5225': attribute type 3 has an invalid length.
[  696.189182][T26586] netlink: 'syz.1.5230': attribute type 13 has an invalid length.
[  696.228875][T26586] netlink: 'syz.1.5230': attribute type 17 has an invalid length.
[  696.488182][T26586] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  696.657596][ T1696] block nbd3: Possible stuck request ffff888026e77000: control (read@0,1024B). Runtime 120 seconds
[  696.670424][ T1696] block nbd3: Possible stuck request ffff888026e771c0: control (read@1024,1024B). Runtime 120 seconds
[  696.682302][ T1696] block nbd3: Possible stuck request ffff888026e77380: control (read@2048,1024B). Runtime 120 seconds
[  696.850521][T26606] hsr0: entered promiscuous mode
[  696.941430][T26613] netlink: 'syz.1.5238': attribute type 7 has an invalid length.
[  696.959335][T26613] netlink: 'syz.1.5238': attribute type 8 has an invalid length.
[  697.213242][T26630] batman_adv: batadv0: Removing interface: batadv_slave_0
[  697.497278][T26652] netlink: 'syz.5.5249': attribute type 1 has an invalid length.
[  697.538725][T26654] netlink: 'syz.3.5250': attribute type 10 has an invalid length.
[  697.652871][T26657] netlink: 'syz.4.5251': attribute type 10 has an invalid length.
[  698.004475][T26678] __nla_validate_parse: 7 callbacks suppressed
[  698.004497][T26678] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5260'.
[  698.024415][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5256'.
[  698.052385][T26668] syzkaller0: left promiscuous mode
[  698.060957][T26668] syzkaller0: left allmulticast mode
[  698.283468][T26691] veth3: entered allmulticast mode
[  698.585918][T26705] vlan2: entered promiscuous mode
[  698.739002][T26714] netlink: 'syz.5.5272': attribute type 4 has an invalid length.
[  698.769234][T26716] netlink: 'syz.5.5272': attribute type 4 has an invalid length.
[  698.787411][T26717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5273'.
[  698.934089][T26727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5276'.
[  698.943862][T26728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5276'.
[  698.984416][   T30] audit: type=1800 audit(1781592744.388:29): pid=26730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5277" name="memory.events" dev="tmpfs" ino=2460 res=0 errno=0
[  699.036443][T26736] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5278'.
[  701.379260][T26756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5282'.
[  701.388984][T26756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5282'.
[  701.926259][T26734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  702.034601][T26758] netlink: 'syz.3.5283': attribute type 4 has an invalid length.
[  702.048530][T26758] netlink: 17 bytes leftover after parsing attributes in process `syz.3.5283'.
[  702.078133][T26758] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  702.328647][T26775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5285'.
[  703.078503][T26794] syzkaller1: entered promiscuous mode
[  703.103485][T26794] syzkaller1: entered allmulticast mode
[  703.123499][T26796] __nla_validate_parse: 2 callbacks suppressed
[  703.123520][T26796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5291'.
[  703.387869][T24191] IPVS: starting estimator thread 0...
[  703.445975][T26818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5292'.
[  703.503957][T26817] IPVS: using max 24 ests per chain, 57600 per kthread
[  703.532704][T26818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5292'.
[  703.794798][T26823] bridge0: port 2(bridge_slave_1) entered blocking state
[  703.802097][T26823] bridge0: port 2(bridge_slave_1) entered listening state
[  703.809569][T26823] bridge0: port 1(bridge_slave_0) entered blocking state
[  703.816812][T26823] bridge0: port 1(bridge_slave_0) entered listening state
[  704.008575][T26835] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5295'.
[  704.163243][T26841] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  704.465072][T26847] 
[  704.467459][T26847] ======================================================
[  704.474592][T26847] WARNING: possible circular locking dependency detected
[  704.481732][T26847] syzkaller #0 Not tainted
[  704.486197][T26847] ------------------------------------------------------
[  704.493284][T26847] syz.4.5297/26847 is trying to acquire lock:
[  704.499422][T26847] ffff888026d30588 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480
[  704.508994][T26847] 
[  704.508994][T26847] but task is already holding lock:
[  704.516406][T26847] ffff888026d30060 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x194/0x480
[  704.526657][T26847] 
[  704.526657][T26847] which lock already depends on the new lock.
[  704.526657][T26847] 
[  704.537081][T26847] 
[  704.537081][T26847] the existing dependency chain (in reverse order) is:
[  704.546117][T26847] 
[  704.546117][T26847] -> #6 (&q->q_usage_counter(io)#56){++++}-{0:0}:
[  704.554819][T26847]        blk_alloc_queue+0x544/0x690
[  704.560145][T26847]        __blk_mq_alloc_disk+0x194/0x390
[  704.565809][T26847]        nbd_dev_add+0x494/0xb60
[  704.570838][T26847]        nbd_init+0x15f/0x1e0
[  704.575600][T26847]        do_one_initcall+0x250/0x870
[  704.580888][T26847]        do_initcall_level+0x10a/0x1a0
[  704.586383][T26847]        do_initcalls+0x59/0xa0
[  704.591232][T26847]        kernel_init_freeable+0x29d/0x3e0
[  704.596949][T26847]        kernel_init+0x1d/0x1d0
[  704.601818][T26847]        ret_from_fork+0x514/0xb70
[  704.606964][T26847]        ret_from_fork_asm+0x1a/0x30
[  704.612265][T26847] 
[  704.612265][T26847] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  704.619500][T26847]        fs_reclaim_acquire+0x71/0x100
[  704.624991][T26847]        kmem_cache_alloc_node_noprof+0x4a/0x680
[  704.631341][T26847]        __alloc_skb+0x1d7/0x7a0
[  704.636293][T26847]        __ip6_append_data+0x2ea3/0x4080
[  704.642014][T26847]        ip6_append_data+0x108/0x270
[  704.647305][T26847]        rawv6_sendmsg+0x1298/0x18c0
[  704.652653][T26847]        ____sys_sendmsg+0x853/0xa20
[  704.657938][T26847]        ___sys_sendmsg+0x2a5/0x360
[  704.663140][T26847]        __x64_sys_sendmsg+0x1bd/0x2a0
[  704.668599][T26847]        do_syscall_64+0x174/0x580
[  704.673713][T26847]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.680127][T26847] 
[  704.680127][T26847] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  704.687865][T26847]        lock_sock_nested+0x41/0x100
[  704.693158][T26847]        inet_shutdown+0x6a/0x390
[  704.698236][T26847]        nbd_mark_nsock_dead+0x2cb/0x550
[  704.703877][T26847]        recv_work+0x1cef/0x1e10
[  704.708825][T26847]        process_scheduled_works+0xa8e/0x14e0
[  704.714897][T26847]        worker_thread+0xa47/0xfb0
[  704.720045][T26847]        kthread+0x389/0x470
[  704.724668][T26847]        ret_from_fork+0x514/0xb70
[  704.729818][T26847]        ret_from_fork_asm+0x1a/0x30
[  704.735121][T26847] 
[  704.735121][T26847] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  704.742777][T26847]        __mutex_lock+0x19d/0x1590
[  704.747910][T26847]        nbd_queue_rq+0x373/0x1150
[  704.753035][T26847]        blk_mq_dispatch_rq_list+0x499/0x1990
[  704.759109][T26847]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  704.766030][T26847]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  704.772535][T26847]        blk_mq_run_hw_queue+0x348/0x4f0
[  704.778168][T26847]        blk_mq_dispatch_list+0xd11/0xe10
[  704.783891][T26847]        blk_mq_flush_plug_list+0x45f/0x540
[  704.789787][T26847]        __blk_flush_plug+0x3ed/0x4d0
[  704.795162][T26847]        __submit_bio+0x465/0x560
[  704.800190][T26847]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  704.806344][T26847]        block_read_full_folio+0x599/0x830
[  704.812170][T26847]        filemap_read_folio+0x12c/0x3a0
[  704.817726][T26847]        do_read_cache_folio+0x354/0x590
[  704.823367][T26847]        read_part_sector+0xb6/0x2b0
[  704.828714][T26847]        adfspart_check_ICS+0xb1/0x960
[  704.834172][T26847]        bdev_disk_changed+0x82b/0x1780
[  704.839717][T26847]        blkdev_get_whole+0x372/0x510
[  704.845118][T26847]        bdev_open+0x324/0xd70
[  704.849969][T26847]        blkdev_open+0x461/0x600
[  704.854910][T26847]        do_dentry_open+0x816/0x1380
[  704.860201][T26847]        vfs_open+0x3b/0x340
[  704.864789][T26847]        path_openat+0x2e3b/0x3890
[  704.869907][T26847]        do_file_open+0x23e/0x4a0
[  704.874937][T26847]        do_sys_openat2+0x113/0x200
[  704.880139][T26847]        __x64_sys_openat+0x138/0x170
[  704.885518][T26847]        do_syscall_64+0x174/0x580
[  704.890636][T26847]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.897048][T26847] 
[  704.897048][T26847] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  704.904264][T26847]        __mutex_lock+0x19d/0x1590
[  704.909384][T26847]        nbd_queue_rq+0xc1/0x1150
[  704.914417][T26847]        blk_mq_dispatch_rq_list+0x499/0x1990
[  704.920489][T26847]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  704.927347][T26847]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  704.933867][T26847]        blk_mq_run_hw_queue+0x348/0x4f0
[  704.939501][T26847]        blk_mq_dispatch_list+0xd11/0xe10
[  704.945226][T26847]        blk_mq_flush_plug_list+0x45f/0x540
[  704.951124][T26847]        __blk_flush_plug+0x3ed/0x4d0
[  704.956499][T26847]        __submit_bio+0x465/0x560
[  704.961533][T26847]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  704.967686][T26847]        block_read_full_folio+0x599/0x830
[  704.973496][T26847]        filemap_read_folio+0x12c/0x3a0
[  704.979053][T26847]        do_read_cache_folio+0x354/0x590
[  704.984711][T26847]        read_part_sector+0xb6/0x2b0
[  704.990029][T26847]        adfspart_check_ICS+0xb1/0x960
[  704.995503][T26847]        bdev_disk_changed+0x82b/0x1780
[  705.001061][T26847]        blkdev_get_whole+0x372/0x510
[  705.006448][T26847]        bdev_open+0x324/0xd70
[  705.011217][T26847]        blkdev_open+0x461/0x600
[  705.016159][T26847]        do_dentry_open+0x816/0x1380
[  705.021447][T26847]        vfs_open+0x3b/0x340
[  705.026036][T26847]        path_openat+0x2e3b/0x3890
[  705.031152][T26847]        do_file_open+0x23e/0x4a0
[  705.036183][T26847]        do_sys_openat2+0x113/0x200
[  705.041383][T26847]        __x64_sys_openat+0x138/0x170
[  705.046757][T26847]        do_syscall_64+0x174/0x580
[  705.051875][T26847]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.058298][T26847] 
[  705.058298][T26847] -> #1 (set->srcu){.+.+}-{0:0}:
[  705.065427][T26847]        __synchronize_srcu+0xc9/0x2f0
[  705.070889][T26847]        elevator_switch+0x1e8/0x7b0
[  705.076176][T26847]        elevator_change+0x2fa/0x480
[  705.081462][T26847]        elevator_set_default+0x375/0x440
[  705.087182][T26847]        blk_register_queue+0x3f3/0x4e0
[  705.092735][T26847]        __add_disk+0x6cb/0xe30
[  705.097591][T26847]        add_disk_fwnode+0xfb/0x4b0
[  705.102791][T26847]        nbd_dev_add+0x733/0xb60
[  705.107733][T26847]        nbd_init+0x15f/0x1e0
[  705.112414][T26847]        do_one_initcall+0x250/0x870
[  705.117702][T26847]        do_initcall_level+0x10a/0x1a0
[  705.123164][T26847]        do_initcalls+0x59/0xa0
[  705.128017][T26847]        kernel_init_freeable+0x29d/0x3e0
[  705.133739][T26847]        kernel_init+0x1d/0x1d0
[  705.138596][T26847]        ret_from_fork+0x514/0xb70
[  705.143708][T26847]        ret_from_fork_asm+0x1a/0x30
[  705.149006][T26847] 
[  705.149006][T26847] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  705.156829][T26847]        __lock_acquire+0x1520/0x2cd0
[  705.162205][T26847]        lock_acquire+0x106/0x350
[  705.167232][T26847]        __mutex_lock+0x19d/0x1590
[  705.172347][T26847]        elevator_change+0x1af/0x480
[  705.177636][T26847]        elevator_set_none+0xb5/0x140
[  705.183010][T26847]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  705.189342][T26847]        nbd_start_device+0x189/0xb30
[  705.194720][T26847]        nbd_genl_connect+0x1597/0x1c10
[  705.200279][T26847]        genl_family_rcv_msg_doit+0x233/0x340
[  705.206444][T26847]        genl_rcv_msg+0x614/0x7a0
[  705.211485][T26847]        netlink_rcv_skb+0x226/0x4a0
[  705.216779][T26847]        genl_rcv+0x28/0x40
[  705.221296][T26847]        netlink_unicast+0x7bb/0x940
[  705.226596][T26847]        netlink_sendmsg+0x813/0xb40
[  705.231892][T26847]        ____sys_sendmsg+0x9b9/0xa20
[  705.237185][T26847]        ___sys_sendmsg+0x2a5/0x360
[  705.242386][T26847]        __x64_sys_sendmsg+0x1bd/0x2a0
[  705.247845][T26847]        do_syscall_64+0x174/0x580
[  705.252964][T26847]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.259381][T26847] 
[  705.259381][T26847] other info that might help us debug this:
[  705.259381][T26847] 
[  705.269603][T26847] Chain exists of:
[  705.269603][T26847]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#56
[  705.269603][T26847] 
[  705.283394][T26847]  Possible unsafe locking scenario:
[  705.283394][T26847] 
[  705.290870][T26847]        CPU0                    CPU1
[  705.296258][T26847]        ----                    ----
[  705.301640][T26847]   lock(&q->q_usage_counter(io)#56);
[  705.307037][T26847]                                lock(fs_reclaim);
[  705.313540][T26847]                                lock(&q->q_usage_counter(io)#56);
[  705.321438][T26847]   lock(&q->elevator_lock);
[  705.326029][T26847] 
[  705.326029][T26847]  *** DEADLOCK ***
[  705.326029][T26847] 
[  705.334173][T26847] 6 locks held by syz.4.5297/26847:
[  705.339369][T26847]  #0: ffffffff8fe31888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  705.347606][T26847]  #1: ffffffff8fe316c0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  705.356578][T26847]  #2: ffff888026f329c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0
[  705.367985][T26847]  #3: ffff888026f328d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0
[  705.378957][T26847]  #4: ffff888026d30060 (&q->q_usage_counter(io)#56){++++}-{0:0}, at: elevator_change+0x194/0x480
[  705.389582][T26847]  #5: ffff888026d30098 (&q->q_usage_counter(queue)#40){+.+.}-{0:0}, at: elevator_change+0x194/0x480
[  705.400466][T26847] 
[  705.400466][T26847] stack backtrace:
[  705.406353][T26847] CPU: 1 UID: 0 PID: 26847 Comm: syz.4.5297 Not tainted syzkaller #0 PREEMPT(full) 
[  705.406374][T26847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  705.406385][T26847] Call Trace:
[  705.406392][T26847]  <TASK>
[  705.406401][T26847]  dump_stack_lvl+0xe8/0x150
[  705.406422][T26847]  print_circular_bug+0x2e1/0x300
[  705.406446][T26847]  check_noncircular+0x12e/0x150
[  705.406469][T26847]  __lock_acquire+0x1520/0x2cd0
[  705.406495][T26847]  ? elevator_change+0x1af/0x480
[  705.406513][T26847]  lock_acquire+0x106/0x350
[  705.406529][T26847]  ? elevator_change+0x1af/0x480
[  705.406552][T26847]  __mutex_lock+0x19d/0x1590
[  705.406572][T26847]  ? elevator_change+0x1af/0x480
[  705.406591][T26847]  ? rcu_is_watching+0x15/0xb0
[  705.406613][T26847]  ? elevator_change+0x1af/0x480
[  705.406631][T26847]  ? __pfx___mutex_lock+0x10/0x10
[  705.406650][T26847]  ? enable_work+0x17f/0x230
[  705.406670][T26847]  ? lockdep_hardirqs_on+0x7a/0x110
[  705.406691][T26847]  ? __cancel_work_sync+0xf7/0x110
[  705.406711][T26847]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  705.406735][T26847]  elevator_change+0x1af/0x480
[  705.406755][T26847]  elevator_set_none+0xb5/0x140
[  705.406774][T26847]  ? __pfx_elevator_set_none+0x10/0x10
[  705.406795][T26847]  ? xa_load+0x1db/0x210
[  705.406817][T26847]  blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  705.406845][T26847]  ? kernfs_add_one+0x480/0x5d0
[  705.406872][T26847]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  705.406899][T26847]  ? sysfs_add_file_mode_ns+0x258/0x300
[  705.406922][T26847]  nbd_start_device+0x189/0xb30
[  705.406949][T26847]  ? device_create_file+0xf4/0x1b0
[  705.407035][T26847]  nbd_genl_connect+0x1597/0x1c10
[  705.407062][T26847]  ? __pfx_nbd_genl_connect+0x10/0x10
[  705.407086][T26847]  ? rcu_is_watching+0x15/0xb0
[  705.407106][T26847]  ? trace_kmalloc+0x2a/0xf0
[  705.407131][T26847]  ? __nla_parse+0x40/0x60
[  705.407173][T26847]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  705.407198][T26847]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  705.407232][T26847]  genl_family_rcv_msg_doit+0x233/0x340
[  705.407259][T26847]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  705.407286][T26847]  ? __lock_acquire+0x683/0x2cd0
[  705.407307][T26847]  genl_rcv_msg+0x614/0x7a0
[  705.407333][T26847]  ? __pfx_genl_rcv_msg+0x10/0x10
[  705.407355][T26847]  ? __pfx_nbd_genl_connect+0x10/0x10
[  705.407383][T26847]  netlink_rcv_skb+0x226/0x4a0
[  705.407401][T26847]  ? __pfx_genl_rcv_msg+0x10/0x10
[  705.407424][T26847]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  705.407448][T26847]  ? down_read+0x270/0x2e0
[  705.407467][T26847]  ? genl_rcv+0xd/0x40
[  705.407489][T26847]  genl_rcv+0x28/0x40
[  705.407510][T26847]  netlink_unicast+0x7bb/0x940
[  705.407541][T26847]  netlink_sendmsg+0x813/0xb40
[  705.407563][T26847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.407583][T26847]  ? aa_sock_msg_perm+0xf1/0x1b0
[  705.407610][T26847]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  705.407633][T26847]  ? __pfx_netlink_sendmsg+0x10/0x10
[  705.407652][T26847]  ____sys_sendmsg+0x9b9/0xa20
[  705.407670][T26847]  ? __might_fault+0xaf/0x130
[  705.407694][T26847]  ? __pfx_____sys_sendmsg+0x10/0x10
[  705.407716][T26847]  ? import_iovec+0x73/0xa0
[  705.407755][T26847]  ___sys_sendmsg+0x2a5/0x360
[  705.407772][T26847]  ? __lock_acquire+0x683/0x2cd0
[  705.407791][T26847]  ? __pfx____sys_sendmsg+0x10/0x10
[  705.407811][T26847]  ? futex_wake+0x4d7/0x5b0
[  705.407854][T26847]  ? __fget_files+0x2a/0x420
[  705.407875][T26847]  ? __fget_files+0x3a2/0x420
[  705.407899][T26847]  __x64_sys_sendmsg+0x1bd/0x2a0
[  705.407918][T26847]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  705.407940][T26847]  ? rcu_is_watching+0x15/0xb0
[  705.407962][T26847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.407980][T26847]  do_syscall_64+0x174/0x580
[  705.407999][T26847]  ? trace_irq_disable+0x3b/0x140
[  705.408023][T26847]  ? clear_bhb_loop+0x40/0x90
[  705.408043][T26847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  705.408061][T26847] RIP: 0033:0x7f4ab519ce59
[  705.408079][T26847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  705.408095][T26847] RSP: 002b:00007f4ab607b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  705.408115][T26847] RAX: ffffffffffffffda RBX: 00007f4ab5416180 RCX: 00007f4ab519ce59
[  705.408128][T26847] RDX: 000000000400400c RSI: 0000200000001ac0 RDI: 0000000000000007
[  705.408140][T26847] RBP: 00007f4ab5232d6f R08: 0000000000000000 R09: 0000000000000000
[  705.408152][T26847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  705.408163][T26847] R13: 00007f4ab5416218 R14: 00007f4ab5416180 R15: 00007ffd4ad8e728
[  705.408183][T26847]  </TASK>
[  705.902089][ T1696] block nbd6: Possible stuck request ffff888026f70000: control (read@0,4096B). Runtime 120 seconds
[  705.971279][   T51] block nbd7: Receive control failed (result -32)
[  705.983220][   T51] block nbd7: Receive control failed (result -32)
[  709.214962][ T4995] udevd[4995]: worker [18920] /devices/virtual/block/nbd3 is taking a long time
[  709.224235][ T4995] udevd[4995]: worker [18921] /devices/virtual/block/nbd6 is taking a long time
[  712.642011][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!