last executing test programs:

12m33.753281141s ago: executing program 2 (id=819):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000b00)=ANY=[@ANYBLOB="40030000190001002dbd700000000000ac1e0001000000000090eaea09fd7c8ed32a72e400000000000000ac1414aa0000000000c300000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x340}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c5610067f0200ff00000ec00000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000008000300090c10000000008003000000", 0x58}], 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000680000006800000002000000000000000000000d0a000000000000000700000604"], &(0x7f0000000f40)=""/4089, 0x82, 0xff9, 0x1}, 0x28)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff)
sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0xc040)
r4 = socket(0x10, 0x3, 0x0)
ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000400)={&(0x7f0000000380)=[{0x0, 0x0, 0x7, 0x5, 0x1, 0x0, 0x2, 0x5}, {0x2, 0x0, 0xfffffffffffffffc, 0x80000000, 0x9, 0x49e6, 0xc0000000, 0x7fffffffffffffff}], 0x2, 0x38, 0x0, 0x9})
setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e}, 0x10)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x24000080}, 0x40001)
sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000840)={0x64, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x4}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}]}]}, 0x64}}, 0x810)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000ac0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000900)={0x150, r3, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER={0x130, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x771}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb64}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xffffff7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6d13}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x26d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8b}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x4}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x24008090}, 0x90)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="02070009"], 0x10}}, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r5, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

12m33.459271993s ago: executing program 2 (id=823):
r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, &(0x7f0000000080)=0x80)
setsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f00000000c0)={@broadcast, @multicast2}, 0x8)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'veth1_virt_wifi\x00', 0x4000})
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4, 0x1, 0x3, 0x2, 0x0, 0xa17}, 0x20)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)=""/58, 0x3a}, &(0x7f0000000240)=0x40)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0xb, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_ETHER={0xa}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x7fff}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004049}, 0x80)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000003c0)=[@in6={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x5}], 0x1c)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0)
setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000400)=0x744e, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg1\x00', <r2=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6tnl0\x00', r2, 0x2f, 0x9, 0xf8, 0xfffffff7, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x7800, 0x7, 0x8}})
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000540)={<r3=>0x0, 0x9, 0x1, [0x5]}, &(0x7f0000000580)=0xa)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000005c0)={<r4=>r3, 0xf0, "4655e12adeefde3cbe0fbad7cacb183902015acfeb8ea262a2ab9495bd575258b6ca444b9e1c0277a2dce2fcd1d9359fe1cb8f690d2fa7d02f1884cf6392c9418dfe1d744f2a9762862cfe965650f5aa34a8326f82afa56f15527b6a23dcbdcb2a484e77e63527c375b9346a60fd8b137dc52fbf51b1a394d77fb873dacec2861a26ebcfed0befe727895373ab36267845003a09635600f15161288f6fae6a76217108bed4d73ebe13411c7131a88146fb5f51d5c41bcb63f724802c304dddec74b512f93091a6a343234b6bca38f4e38f88c8c97513074404c4354d15f944a5839620f31e899766352df1641c0a0c83"}, &(0x7f00000006c0)=0xf8)
syz_genetlink_get_family_id$nbd(&(0x7f0000000700), 0xffffffffffffffff)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@fallback=<r6=>r0, 0x2e, 0x1, 0x10000, &(0x7f00000007c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000009c0)={{0xffffffffffffffff, <r8=>0xffffffffffffffff}, &(0x7f0000000940), &(0x7f0000000980)}, 0x20)
r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, @val=@kprobe_multi=@syms={0x0, 0x1, &(0x7f0000000a40)=[&(0x7f0000000a00)='\xff\xff'], 0x0, 0x7}}, 0x30)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000900)={@map=r8, r5, 0x20, 0x2000, 0x0, @value=r9, @void, @void, @void, r7}, 0x20)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000ac0)={0x7, [0x5, 0x84c, 0x4, 0x9, 0x1, 0xf7f, 0x6]}, &(0x7f0000000b00)=0x12)
ioctl$FS_IOC_MEASURE_VERITY(r5, 0xc0046686, &(0x7f0000000b40)={0x2, 0x8a, "caadb0173c1661199e9a4b1b93d61c41e16eca22d69f2773eb524ad4296aee10ece56ee7e2c62164fc2508a7b9fce98608c69cebb0794b3ab94394bf9ab979e8de363557cb766f51b4bbd5987392cf36d5274fc8eabfab9d711f5497a09047cee32157eedce1c4fec5ad7537a9d317309467a2221d977eb4190eeb7a02264623ce2f51de63ae6d927d4d"})
r10 = socket$netlink(0x10, 0x3, 0xf)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000c40)=<r12=>0x0)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r11, &(0x7f0000000d40)={&(0x7f0000000c00), 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x4c, 0x0, 0x304, 0x70bd2a, 0x25dfdbfe, {}, [@NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x740}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0xb}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x2}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x341}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc002)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000d80)={r4, 0x9}, &(0x7f0000000dc0)=0x8)
getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000e00)={{{@in6=@private0, @in=@loopback}}, {{@in=@initdev}, 0x0, @in=@private}}, &(0x7f0000000f00)=0xe8)
ioctl$FS_IOC_FSSETXATTR(r10, 0x401c5820, &(0x7f0000000f40)={0x1000200, 0x2, 0x7, 0x1, 0xffffffff})
getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4)

12m33.083662326s ago: executing program 2 (id=827):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x1f8, 0x5, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "d38bffa66cab625b83d9568a4f5cfbde86b50760bfd3dfbc8e903efc5b276f31d3924119af467bdf2ac56f870224f722b34e1d2dde0d6a4c0d7db5a374421b6c31b813a2e8b44a26058d8d925fcf65eb2537c25ce9e37a02b0a2565f8f81a022d1aba84c5c3971ffa519dc61f0f5fbe14c7fd7246bccc84a9a521641a480ae6193dee48ef5c2119169789e9315a39aec7816303398036a826dad625496bff4a506c5a9ba8fcfd35d77e57f"}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffffffffffff6e5f}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bridge\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'netpci0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3c5d76c}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4ebd606}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x258}, 0x1, 0x0, 0x0, 0x44001}, 0x4040090) (async)
listen(r0, 0x0) (async)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.stat\x00', 0x0, 0x0)
getsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000140), &(0x7f0000000200)=0x4)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
listen(r3, 0x80000003)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) (async)
socket(0x15, 0x5, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {0x0, 0x200000}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x4, 0x40}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {0x0, 0x401}, {0x0, 0x7}, {0x80}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {0x0, 0xfffffffd}, {}, {0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x2000000}, {}, {}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0xfffffffa}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) (async, rerun: 32)
r6 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 32)
r7 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000015006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async)
bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async)
r8 = socket(0x15, 0x5, 0x0)
getsockopt(r8, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)

12m32.675157787s ago: executing program 2 (id=830):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000044c00000400000009"], 0x48) (async)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x81, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x4, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xb6, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0x10, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x3, 0x80000000, 0xfdffffff, 0x5a3, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008da0, 0x1fc, 0xc5c, 0xffffffff]}})
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) (async)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000)
ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000021c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x10800ff, r0}, 0x38) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000200)={0x3, [0x8, 0x4, 0x7]}, &(0x7f0000000240)=0xa) (async)
r4 = socket$kcm(0x29, 0x2, 0x0)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x40)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x16, &(0x7f0000000040)="e1", 0x1) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$netlink(0x10, 0x3, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a80), r5) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_DISASSOCIATE(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002abdefc5867000fbdbdf452800000074d5e9f1c0b0277811", @ANYRES32=r9, @ANYBLOB="0a000600505050505050000004005f00"], 0x2c}, 0x1, 0x0, 0x0, 0x60}, 0x14)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r7)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="300000007eca7818baabdf316e4bd747233f6fbf1fe14c59836e1ee974b45cbc47e6c62a5e43fb8f7f218e43f620096594c794e9522df4ede27ec7bceb95701f7b2232e650f9a6725687e8955fbe0e8f4bf231610fd2fb34ff32849b77190e6481082001b6657b45ad30a9a0a13449acc950d50ac9a7f892ed5cb9ff648b1ac480498625ef97edb90d4aa4389ec58fff388056623e7071a67437d9de96e3", @ANYRES16=r10, @ANYBLOB="01002bbd70000000000036000000080001007063690011000200303030303a30303a31302e3000000000"], 0x30}, 0x1, 0x0, 0x0, 0x4004011}, 0x200428c0) (async)
r11 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r11, 0x107, 0xe, &(0x7f0000000000)=0xd938, 0x4) (async)
socket$netlink(0x10, 0x3, 0x4)

12m32.38140895s ago: executing program 2 (id=833):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00'})
write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

12m32.271849501s ago: executing program 2 (id=834):
sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000100)=@llc={0x1a, 0x3e, 0x0, 0x5a, 0x67, 0xff, @remote}, 0xfffffe97, 0x0}}], 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x30)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x7c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000001}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x13}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000)
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000080))
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000100)=@llc={0x1a, 0x3e, 0x0, 0x5a, 0x67, 0xff, @remote}, 0xfffffe97, 0x0}}], 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$inet(0x2, 0x3, 0x30) (async)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x7c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000001}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x13}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) (async)
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000080)) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)

12m17.151521571s ago: executing program 32 (id=834):
sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000100)=@llc={0x1a, 0x3e, 0x0, 0x5a, 0x67, 0xff, @remote}, 0xfffffe97, 0x0}}], 0x1, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r2=>0x0})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r3 = socket$inet(0x2, 0x3, 0x30)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x7c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000001}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x13}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000)
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000080))
socket$phonet_pipe(0x23, 0x5, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{&(0x7f0000000100)=@llc={0x1a, 0x3e, 0x0, 0x5a, 0x67, 0xff, @remote}, 0xfffffe97, 0x0}}], 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) (async)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async)
socket$inet(0x2, 0x3, 0x30) (async)
sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x7c, 0x1, 0x7, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x8000000000000001}, @NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x13}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10000}]}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7f}, @NFACCT_FLAGS={0x8}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000) (async)
getsockopt$inet_mreqsrc(r3, 0x0, 0x53, 0x0, &(0x7f0000000080)) (async)
socket$phonet_pipe(0x23, 0x5, 0x2) (async)

10.723216382s ago: executing program 1 (id=5974):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe880000000000000000000000000001ac1414aa000000000000000000000000000107944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8881}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="f000000018000100feffffff0001ca0000000000000000000000ffffac14140000010001071c4e2300050200a00004000000426043635f997a13639589f0bf80581824178ee9e8ad7d57aaa7b420f96cfcc576a0c41bfab73a7e42a4be8848c471b1e892d3da3674f6f614e7b43eac1fb54390a104b592ef1d29e956fa20344502dc", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414250000000000000000000000000000000000000000adce000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000002cbd700000350000020001002000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f00000001c0)={0x0, 0x0, 0xc, 0x0, 0x4}, 0xc)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x3f, r6, {0xc, 0xffe0}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TC={0x5}]}}]}, 0x44}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48)
read(r5, &(0x7f0000000180)=""/56, 0x38)
write(0xffffffffffffffff, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(0xffffffffffffffff, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000e1aed48bcb5340c04bdcddf18b00070a01020000006a46a8ac61a8ba3081"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4040)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2a, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b708000000000008638af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_icmp(0x2, 0x2, 0x1)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e22, 0x8c90, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80000000}}}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)

9.68902294s ago: executing program 1 (id=5987):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x6020400)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r6, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r7, &(0x7f0000000180)}, 0x20)
mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0xfffff000)
mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x100000c, 0x13, r3, 0x2000)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0f000000100037040100"/20, @ANYRES32=r2, @ANYBLOB="890606000000100000001c00", @ANYRES32=r3, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r8 = socket(0x400000000010, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x68, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_META={0x24, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x9]}, @TCA_EM_META_HDR={0xffffffffffffff7b, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0xe, &(0x7f0000000140)={&(0x7f0000000000)=@dellink={0x64, 0x11, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, 0x0, 0x100}, [@IFLA_XDP={0x34, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FD={0x8, 0x1, r3}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}]}, @IFLA_OPERSTATE={0x5, 0x10, 0xbb}, @IFLA_MTU={0x8, 0x4, 0x8001}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x800)

9.308928325s ago: executing program 1 (id=5989):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
unshare(0x22020600)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x8d, &(0x7f0000000240)=""/141}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
unshare(0x20000)
mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r1, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
write$cgroup_pid(r3, &(0x7f00000000c0), 0x12)
pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000080)=0x100001, 0x4)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)

8.275128132s ago: executing program 1 (id=5996):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000080)=0x5d)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x8, 0xa, @l2={'ib', 0x3a, 'ip6gre0\x00'}}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4805}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000200)={0x23, 0x8000, 0x7f, 0x5, <r5=>r4}, &(0x7f0000000240)=0x10)
setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000003c0)={r4, 0xa6ee, 0x1000, "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"}, 0x1008)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)={<r7=>r5, 0x75, "d40f61fe557c0038c4c57d99126e0e492d698ce0ebe4831d5ed3cbdbe3b51674887b4f5b16d843e83e3eb4702d62a73894083812e04335c2a958d9f21d59f36ff12d335368e490127f8c824906023682361b99e6129bd9f55a2e7c0dc37422788f8a83eca5e4e4a54f77b98c92a94ec0e2416af719"}, &(0x7f0000001700)=0x7d)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001740)={r7, @in6={{0xa, 0x4e22, 0x5, @empty, 0x3}}, [0x8, 0x9, 0x10000, 0x6, 0x2, 0x0, 0x6, 0x10001, 0x100, 0x2, 0x4, 0x8000, 0x5, 0x45c, 0x1]}, &(0x7f0000001840)=0x100)
sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f00000016c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001680)={&(0x7f0000001400)={0x248, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fe}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x8d}, 0x9}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xc, @loopback, 0xf}}}}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x74b}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xe56}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xef5c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x160, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "8227079520acc09fd1b814291f284ef23d51d874"}}, @TIPC_NLA_NODE_ID={0xfd, 0x3, "c798dabcfc45443b0d93d27263be5634731190041cef52ccef40ea38f9bcf9bfb4990952ad6b43d063d4a6ab399acef900d34f2fd304db2f751635e408b6d5b6d56152bb5da3cdbbf10053958e63007f5a04d0644760f4c944d3a16195542a15b71bc050457ae0dcd4a95a5ff2fa59cb3c4514d56e2df5b12a8ac52496c6b3b2aa1ebe403e9379a31921a645ad09bde131bd408fff0735fd7274e83fb204dea1237885d447fdb693d9965d6f30c40edaeb867099eceeda534df553d716c39c7cd4db84beb518b97adc18598ed71873f2cad96f4772a301912ebbca020f8faa3658ad290ac6f3153b1d841e00351f9b61a6fcc696f9f03cffea"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x20000000}, 0xc)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x10000000, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe}, 0x90)

8.137160285s ago: executing program 1 (id=5999):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async)
r0 = socket$alg(0x26, 0x5, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000380)={<r1=>0x0, <r2=>0x0})
ppoll(&(0x7f0000000340)=[{r0, 0x5010}, {r0, 0x8403}, {r0, 0x100}, {r0, 0x3400}, {r0, 0x1180}, {0xffffffffffffffff, 0x80a0}, {r0, 0x1001}, {r0, 0x404}], 0x8, &(0x7f00000003c0)={r1, r2+60000000}, &(0x7f0000000400)={[0x4]}, 0x8)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000047c0000040042801400018006000600050a000008001c00", @ANYRES32=0x0, @ANYBLOB="040008"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async)
r4 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x71c6}], 0x18}, 0x2c000044) (async)
sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async)
recvmsg$unix(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r6=>0xffffffffffffffff]}}], 0x18}, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0xff06, 0x0) (async)
setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000440)=0x1, 0x4) (async)
recvmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x200bac}, {{0x0, 0x0, &(0x7f0000000200), 0x24}, 0x4}], 0x2, 0x60, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'lo\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x10000, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x69, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5, 0xfffffffa, 0xa, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="151c001280092307000000000000000a53000100626f815c5a6300000c0002882500110001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) (async)
r11 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000240)=0x10)
r12 = accept$phonet_pipe(r11, &(0x7f0000000280), &(0x7f0000000040)=0x10)
preadv(r12, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/183, 0xb7}, {&(0x7f0000000140)=""/100, 0x64}], 0x2, 0xd2c0, 0x7) (async)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r13}, &(0x7f0000000600), &(0x7f0000000640)='%ps    \x00'}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r13}, &(0x7f0000000180), &(0x7f0000000200), 0x8}, 0x20) (async)
ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000300))

8.027928364s ago: executing program 1 (id=6000):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='X\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYBLOB="150c0000000000001c00128009000100766c616e000000000c00028006000100"], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000)
r1 = socket$pptp(0x18, 0x1, 0x2)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000040000100feffffffffdbdf25017c0c00000042800c00018006000600800a00001c00020018001780140001"], 0x40}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x0, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x4f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x40000)
setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x2, 0x4, 0xe, 0x5, 0x5, 0x0, 0xb7, 0x4, 0x2, 0x8, 0x4, 0xf9}, 0xe)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={<r4=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000080)={r4, 0x3}, 0x8)
syz_emit_ethernet(0x86, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x78, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local, {[@end]}}, @redirect={0x4, 0x2, 0x0, @multicast2, {0x16, 0x4, 0x0, 0x4, 0x0, 0x64, 0x0, 0x1, 0x11, 0x7, @empty, @dev={0xac, 0x14, 0x14, 0x15}, {[@cipso={0x86, 0x6, 0x3}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x40000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x800}, {@multicast2}, {@rand_addr=0x80, 0x4}, {@private=0xa010102, 0x1}]}]}}}}}}}, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x4}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xfe2c, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

6.01310222s ago: executing program 5 (id=6021):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r2, 0x0, &(0x7f0000001700)=""/4096}, 0x20) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000080)=0x1, 0x4) (async)
close(r1) (async)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071124c000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1de0000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r5, 0x0) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={<r6=>0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @in6={0xa, 0x4e20, 0x2, @loopback, 0x3}]}, &(0x7f0000000180)=0x10)
r7 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$sock_SIOCOUTQ(r7, 0x5411, &(0x7f00000010c0)) (async)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000000c0)={r6, 0x2001, 0x9, 0xd5, 0x0, 0x2}, 0x14) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003700)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa82c00000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000007c2c0380100000800c00018006000100d1ff0000d4060080480001801400028008000180fffffffd08000340000000033000028008000180ffffffff08000180fffffffc08000180ffffffff08000340000000010900020073797a300000000089000640b80d1868322c68556ea351084de75a8ee4d686e60a0efa53bfd499e92a740ae8d05d16a05df3701e0fa9f8f0af87f400041d5f037b82cbbaf54dbcbba280ad1ab3ec3e30af7ebb205b0e5e7e71a14e5ec3333ef9d4aa95917ec4ec4d30058cab865ff6e147b8a9a61a2162281b6477a5fbd1fa9b64c42a78d994f24bf68839752574478d1a00000030000b802c0001800a0001006c696d69740000001c000280080003400000000a08000440000000000800044000000001"], 0x2cd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

5.484963633s ago: executing program 5 (id=6024):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x4, 0x0, 0x8000}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x40)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_to_batadv\x00', <r2=>0x0})
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)

5.20182044s ago: executing program 4 (id=6028):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000001c0)={'syztnl1\x00', <r2=>0x0, 0x40, 0x7800, 0x9, 0x101, {{0x40, 0x4, 0x0, 0x0, 0x100, 0x65, 0x0, 0x8, 0x29, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0xb, 0xd4, [@local, @local]}, @cipso={0x86, 0x16, 0x2, [{0x4, 0x10, "ea737c6733233622cd54964ecf06"}]}, @lsrr={0x83, 0xb, 0x84, [@dev={0xac, 0x14, 0x14, 0x21}, @broadcast]}, @end, @cipso={0x86, 0x45, 0x1, [{0x7, 0x5, "5b969e"}, {0x7, 0x10, "36cde3c40fb1d17fd30a7c28de55"}, {0x2, 0xf, "0b85e669a9e76000b7c6b24af7"}, {0x6, 0x11, "a1ac958ea45c7aea5c924e7ac78628"}, {0x7, 0xa, "f4306d4bbef19117"}]}, @cipso={0x86, 0x3e, 0x3, [{0x7, 0xb, "534f39a8d61915ee94"}, {0x1, 0xf, "d91e2562cfc7b71918daca93f8"}, {0x1, 0x3, "d4"}, {0x7, 0xf, "7d597876abab9f49f4706d8a60"}, {0x0, 0x6, "67b7c95b"}, {0x0, 0x4, "e51c"}, {0x2, 0x2}]}, @timestamp_prespec={0x44, 0x3c, 0xce, 0x3, 0xb, [{@rand_addr=0x64010100, 0xc}, {@private=0xa010100, 0x3}, {@empty, 0x9}, {@private=0xa010101, 0x10}, {@remote, 0x5}, {@multicast2, 0x77}, {@private=0xa010100, 0x3}]}]}}}}})
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdb0c}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000580)={{{@in=@remote, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000680)=0xe8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000006c0)={<r7=>0x0}, &(0x7f0000000700)=0xc)
ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000f28c0)={{0x0, 0xa, 0x6, 0x7fffffffffffffff, 0xae8e, 0x9, 0xd024, 0x2000001, 0x5, 0x8000, 0x6, 0x0, 0x800, 0x6}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f00000001c0)=0x6, 0x4)
recvmmsg(r9, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x4032bd}], 0x40001ec, 0x2, 0x0)
sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000080)='hZ', 0x2}], 0x1}}], 0x1, 0x4040081)
r10 = socket(0x10, 0x3, 0x0)
write(r10, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14)
recvmmsg(r10, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000780)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000001200)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="5f82f2b87e9cdb67204e595c269f150d05812bd7081611b3bddc5460e211ba96b2f7d50a2bcf2afc99557e1fe038fd46d740aff15be513e66612e6b6eb7e7141be44d04aa36b3d7d9d4184648ed896581ae8839626f65cb99318952f57d465add22181dcd247563f135981439fcf59866372", @ANYRES32=r7, @ANYBLOB="00000073006300fdc0c80169aaa53bf604dab1d5f233939ffbf251591b5ac097433ad68212eef4cbad28fdbf8ec64734804ad9e204f7946d6a1e182bcca19b6c0de450f40f1d6bf751cb856ed74482ffff1992e62141061df8da9f0ca88e16996c0d9ca9de34750a8cc55d08096307f3d509bd4ddca6005300bb804d8c52af5aa3543fd54b15a8dd0ce0a1a0ec60fd7a844c244a081f0225e16ea2040057804d1ae06d342d820bc4967748364ba4aa33fbe4f992372af7dd9c901d3206070400888008006900", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="9bb77d08004500ffffffff0c0013008100"/28], 0x7bc}, 0x1, 0x0, 0x0, 0x880}, 0x804)
setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000340)={{{@in=@remote, @in=@private=0xa010100, 0x4e20, 0x6, 0x4e22, 0x2, 0x2, 0x20, 0x20, 0x3b, r2, r6}, {0x9, 0x74b, 0x5, 0x100000000, 0x0, 0x4, 0x1a2268a3, 0x1}, {0x5, 0x8, 0xa2, 0x80000001}, 0xfffffeee, 0x6e6bbe, 0x1, 0x1, 0x3, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x80000000, 0x2b}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x3503, 0x1, 0x2, 0x2, 0x8, 0x10000, 0xe00000}}, 0xe8)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x140d, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x36b3c6ffafb53114}, 0x20040000)

3.537422259s ago: executing program 5 (id=6030):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
r1 = socket$kcm(0x21, 0x2, 0x2) (rerun: 64)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000090900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001"], 0x118}}, 0x0)

3.535779467s ago: executing program 4 (id=6032):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000080))
ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000100)=0xffff0000)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20)

3.231559381s ago: executing program 4 (id=6033):
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[@rights={{0x10}}], 0x10}, 0xc0011122)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

3.216013575s ago: executing program 5 (id=6034):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6c, @loopback, 0x0, 0x0, 'wrr\x00', 0x0, 0x4001000, 0x4e}, 0x2c)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1100000042000000080000000300000000000000", @ANYRES32=0x1, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000080000000000e5ffffffffffffff000000fb000000000000"], 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1400000036200000", @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="d5b1eca492f909740690bd0f8913c6131ac9e2a839f47bf9d9ea2dae699f15023c1801edeee13f22893ecaf3fcb52f55948a10a34a94c4514f94dc6224be7074534ffefb71af32ae229a3f838362f62f5baf255015f23d8f388afbeb176ad1490137fc80abe33f900293a3816f4d942ecf7c7c2723c9b0f30e6160efed575e29d20bd574dc8c748d51f4654644d8f2663f485c303191b48fd7219536a00e4909ee5817d2986f4e53fa577667275c39e04085b074d6cd88363c03d56715fcabbb165e77a27b", @ANYRES64=0x0], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000cb5239a01b5b902367fd5ec1a64e367acb74c7e00c2f2bd72b3a0be2ea96caa37fb3469e8505342e47fc8929a6a015"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000440)="0703330d6490fd097b41b4458a4528d641aca67b7f2473a5f55d439fdabc1af74fad437c7e3f3f56c7db6340e36df6e4e30554e801830664f623dad3e910805b0848243c7c3f484683e1f449730afd61a1042d302f0fe1b6aec7cc62a346ee32b6e098d2ace765c1c03aa202bb8dee", &(0x7f0000000400)=@udp6=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r1, &(0x7f0000000080)="e4211d7d8ff8a3f31cd660d1a58a7d", &(0x7f0000000780)=@udp6=r2, 0x4}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x34, 0x0, 0x0, 0x0, 0x20149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff80fe, 0x8}, 0x50)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f00000004c0), 0x48, 0x820b, 0x0)

3.051747194s ago: executing program 4 (id=6035):
r0 = socket(0x2b, 0x0, 0x9)
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00')
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x1407, 0x300, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4050)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000180)={@broadcast, @remote, <r3=>0x0}, &(0x7f00000001c0)=0xc)
ioctl$OCFS2_IOC_REFLINK(r2, 0x40186f04, &(0x7f0000000280)={&(0x7f0000000200)='\\#k(*:)-\'\x00', &(0x7f0000000240)='syz1\x00', 0x60})
r4 = accept4$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, &(0x7f0000000300)=0x10, 0x800)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000340)=0xfffffffb, 0x4)
writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000380)="29a5f473c7d0eb5ae20975dc867068b15bab0ed42285057e6f8d8f01e90db39755f4c18812fbcef05bd4560b3b7462b37cd956439940bc53ff21279b6709d3d2a550a06cbae080b7b10b66f91d5914", 0x4f}, {&(0x7f0000000400)="83a3b9ba4939871a540ab2c542e8bc1a667777bc37015893d3c89ea811ae3b3eeb6b93952df60ca736275b1bda25e1f52a51efa97bee4edc8e15b8d4f8081f16a57cfb14132d7efe309527637d46bcc4619147c6754a3ffed22df455973319ec363efba0d49406546d4d84407858b2f30fcf6ed596d69eededb613dee97f67a9cd3795f7e2fa1a385371a349e5374652dbde4161c9d989b1d62361bedc9cee430684349774ec6fedbcaa5ba88124ecee5dae9c0c", 0xb4}, {&(0x7f00000004c0)="51fc7927cc2249e37d0efd5d78f853c2716cdc7514fb74ade6470cf72c44d53dbf791adf6f3fe17030fb91ab68607c3b1d45a9b6e4a4d9e49917b88c993a1adb1eb023969f3c2e1060e3f046ec824979befea0fb32bb4201dbf4f1bea20fb9851a6c6a99252af7d1c58b085cb03b47b5af11c412b83ef167c94fe5d0a0aeec6580b0a357fb8f0a7b1218d5d088ec35ff822525ab806b", 0x96}, {&(0x7f0000000580)="5bcdf01ad3f2a31af3f123", 0xb}], 0x4)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000600))
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xf8, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7f, 0x3c}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xaf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x279}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfffffffd}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x187}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x10cc}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x24000084)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x38, 0x7, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000804)
ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000900)={0x3, 0xbf, "cb10990dd891fd351da643bc9a5f3ec12ffcc4b72e2db0e725f90663a7ddb461b47131dd4d5154e2779a8261a7cfcdbeb0b2b7e959de953e0dc5c0389bb95b3f0576743b03d600f73c6db897f3d9757962becbe05d17c15aa00f0db6410885b4e9d819ef29c00b58deb8c6530e2ecff9a41bb05db0f9bf84e58d99c39b72a740817961dc5bbbe1c3676462991b166ee79698234f39509fac72a57277df0de8f1b915b01822b98e41b21f21d2cae7877b7bcd9534679aa4fb63c892428aab91"})
r6 = socket$key(0xf, 0x3, 0x2)
unshare(0x40000000)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000a00)={<r7=>0xffffffffffffffff})
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000a80)={'veth1_vlan\x00', 0x200})
ioctl$XFS_IOC_COMMIT_RANGE(r6, 0x40585883, &(0x7f0000000ac0)={r7, 0x0, 0x7fffffffffffffff, 0x2, 0x7, 0x1, [0x3, 0xffffffffffff0000, 0xc, 0x3d086ce6, 0xd, 0x400]})
ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000d00)={0x1, 0x3, 0x1000, 0xb7, &(0x7f0000000b40)="cbc0bfa6502ce269e9cef7089deea7f6c417db5752f1e7af0eb431d9163aee92ceda0c886049ab0ff7a339af4d5d144001224c85a9f47e18410445ba021cbceb1250467e920a163e589bded961dcd82282013a36005e0690d8ee9eb7f4280e938c4dfe694c08e95208ee9ec54d8232ae51694e085a2cb176675741ea2113e84b30487413e1d3aa610c3b2e0667a5075faf9d36879d78a4254dfbac211262c851c75d5444dde64f476dc9d69a9d145f4923ad9590ec20ea", 0xf8, 0x0, &(0x7f0000000c00)="cd4ce56f7d82c98616d983917d9112799829a0aeef31670140bce4fa91761fbe139301487624ce1c216a7ba5350c99e4bb6eee1f8233b7c2af1563271b4ac977b5be2f1dd48ee73fd18e8cbdded13dec231c646421aac9a6f11678340fe59a0c887c1274ae73065e24b4e94f2704565170cb3954fb1d8e93923bb61030d009fe07e08c02bec8b133ff99d7fdd7f5b2c466ec8acfda6d9ec93a9f5c2749230419d37a92bd1bdd99f73c3d0d005643fd9085919069a17152582d5c810e62896116a4e0ced3361b866b5878c865848f2e2eaa4f19f10d8d66e1a6240da15890eea5fec9790fe588d8117991437f3b0b8ab094c73881495feaea"})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000002080)={'erspan0\x00', &(0x7f0000001f80)={'syztnl2\x00', <r8=>r3, 0x8000, 0x7, 0x1, 0x9, {{0x2f, 0x4, 0x3, 0x17, 0xbc, 0x64, 0x0, 0x5, 0x29, 0x0, @local, @rand_addr=0x64010101, {[@cipso={0x86, 0xd, 0x2, [{0x5, 0x7, "178501df2a"}]}, @timestamp_prespec={0x44, 0x2c, 0x95, 0x3, 0x9, [{@multicast2}, {@multicast2, 0x1a}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@private=0xa010100, 0x3}, {@multicast1}]}, @rr={0x7, 0x1b, 0x13, [@empty, @rand_addr=0x64010101, @multicast1, @multicast1, @broadcast, @remote]}, @timestamp={0x44, 0x14, 0xd3, 0x0, 0x0, [0x1c00000, 0x9, 0x3, 0xffff7af8]}, @timestamp_addr={0x44, 0x1c, 0xd9, 0x1, 0x9, [{@private=0xa010102, 0x9}, {@remote, 0x9}, {@empty, 0x3ff}]}, @lsrr={0x83, 0xb, 0xd3, [@local, @broadcast]}, @timestamp_prespec={0x44, 0x14, 0xd, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffc}, {@loopback, 0x9}]}, @ra={0x94, 0x4}]}}}}})
sendmmsg$inet(r6, &(0x7f0000002280)=[{{&(0x7f0000000d80)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000dc0)="bb7e74288ce05aa5bb23d4317e1c5bfbc951c695ffc7f9ce7c81b6dc4ac4f3f4964005e1f305137997a01d4a3c1f709c9c205d97d583eef9710373afa9f2b40b8987d53fc3eb1d88b32c7a7f24102b70d1332481ece37e7f126d4f71f5f7", 0x5e}, {&(0x7f0000000e40)="544d487a040bf4a5856ef09fde1ec9b060dcaf3294036e6151c06d223aca1f1c560011f837c9146ca0528a87a62d5e708acc3f9132f2fb2171683ab3e0f4744f8f2ff4b064f72e6a9ccc7ffc6f4c5fe08da52d1d5a2d9bc5f23de214383ed2f1026d467ec59474e8ac6bd6dd1fddac5f392f23e0b02bcd7e60a55131688a13487af04a0f13fa296888ef4615d5ace954f9977ece9baf8ba58f37d9345782addb20e4fbf1c9f4bf08ecab1db81a41c4719c511f89991c88ab23c8db902eba918367c96abb4dc3", 0xc6}, {&(0x7f0000000f40)="e37e2e112248387327542961ceea1335b47d935fcd052d884147f5d07bbc455673f0327378cbe40d1952d0d564b6b153db69b08b126b2db62db6f80ca1921213b6c695c413989242fa835513e9c66393a5f12356a1cedf1388f8fafc0cb82d916f94fb097a9bada913dee23624ed30d0057435504c1f75e9bfdb242b3f7b7833e517aeba3f192938de57f807b568fa", 0x8f}, {&(0x7f0000001000)="9c8a03de9a979ed6fd2759357b52f5fcabc66c3e6cc800443b3189fa61737c46437be9184cbb617847e4c9ff47111dc12ecb5fc750557b468e0ca480baf8f291b8682eda45d607fa082fb1546c74636ef5bbc2db26a385688b20f79e0f21deb8aa1efce8e97e3da9af783e1b512432ae64693f3423c6e6047645fe576d28102cdd18fccfd7cdf0b915164010a0bbbcb996f33293bd7703a2e474ed46537ac45de983d1344a5935a6332b7a20d9868559850b86dbbdf34c2d7ef1da1e13c8f0018a89b8a9d99723ee", 0xc8}, {&(0x7f0000001100)="816680dde11093f23eef3daa5d7be9f57ebca0411987b014032383e8d6ca00bfd719aa4f298560c01d52996aabbfa3aa51e9c7a4db0e25e3056d7681585b04fb5aee699490a7bb54b33f7747d06a0196bb863cbf173675e588946dd9f97c0545f69bb4fd03ec70d959a218fbf2aa39e0ea70b04bd1a12340ae56804a2caa863b0f1c8777ee0104c70e67ea0325", 0x8d}], 0x5, &(0x7f0000001240)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x972}}], 0x80}}, {{&(0x7f00000012c0)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000001300)}, {&(0x7f0000001340)="4bbe54c5a1e6a0d895f11119a10db3a172f56bd833f533ff977c782b4743d09b78bf3f4fb32643a26216873f9d0942865e077b4197caadf7471e13acd1f11c00eb4c4f5753a0b61bfe7141de981fc63085a02ef7a53bd52f91738cff7cf9113cd6b8ac2eb6702bf41400b597cced", 0x6e}, {&(0x7f00000013c0)="63b86135bc649f8e3a9f21bd754768f9d66c45ca5fee935bb7e6498a34c6c76f41cd77bac34cf6d0ba20b1119331a74cbc2fa0f275c6a028335338904e4262f41f1deab5581e56c7f98ce03c69e734d8", 0x50}, {&(0x7f0000001440)="ee36b20d50147904e262a505c0014cae6b46c93ca5023d1271fa7cdfd72535b81af652c8c03b37c1a018178291e90224d98dcd99b8a52f76b6cddd2a599f02bcf0295fd3ee278d30644728d16954ee051a0e5a03468aacd4f5c7b1390afe1563", 0x60}, {&(0x7f00000014c0)="11b7419b741330c20e4527377d6a044a7651c67fc674c0", 0x17}, {&(0x7f0000001500)="d44d799905f3be2325370f7ca8be0cba01629068f35c73d5946573715696cad36a141b3ef8b5998d7af65e33c65247e20ae4264e8ff7b14d9a0c3c7389e120adce55927f498554a018c358ca970c6a56823ff9c631e0cc756c4bd9877a727125eb2ac3f577648d0f576b35b43517197d16bcee780b2016caae941455e2e8ad0eb3c3c83b9e20c232d51e6f", 0x8b}], 0x6, &(0x7f0000001640)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xca, 0x3, 0x6, [{@multicast2, 0x8}]}, @timestamp_prespec={0x44, 0x4c, 0xee, 0x3, 0xa, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x9}, {@multicast1, 0xb986}, {@private=0xa010100, 0x9}, {@loopback, 0x4}, {@private=0xa010102}, {@loopback, 0x5}, {@multicast2, 0x8}, {@local, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1b}}]}]}}}, @ip_retopts={{0xd4, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xa4, 0x3, 0x8, [{@remote, 0x9}, {@broadcast, 0x7fff}]}, @generic={0x89, 0x10, "a20461ca06215a974c923159c7d4"}, @cipso={0x86, 0x14, 0x3, [{0x6, 0x3, "cc"}, {0x1, 0xb, "f8b7a6d9939a7c4dde"}]}, @generic={0x7, 0x7, "1153e2cffe"}, @end, @timestamp={0x44, 0xc, 0xd1, 0x0, 0x4, [0x400, 0x3]}, @lsrr={0x83, 0x13, 0xb1, [@broadcast, @multicast2, @broadcast, @broadcast]}, @rr={0x7, 0x13, 0xb, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x5, 0x3, 0xe, [{@multicast1, 0x5}, {@private=0xa010101, 0xfffffff3}, {@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x9}, {@loopback, 0x5}, {@rand_addr=0x64010100, 0x7}, {@broadcast}]}, @rr={0x7, 0x13, 0x6e, [@remote, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x2c}, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast2}}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x58, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x2c, 0x0, 0x7, [0x5, 0x0, 0x6, 0x9]}, @generic={0x86, 0x10, "f250eb64f2aac3423d07f452fa1a"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x17, 0x32, [@private=0xa010102, @multicast2, @remote, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0xd6, [@broadcast]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @rand_addr=0x64010102}}}], 0x228}}, {{&(0x7f0000001880)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000001bc0)=[{&(0x7f00000018c0)="8118343b1f480bb4d8f55a61765cf0d3dc316721b0ba75cf5ab2b81ff114c6b7f8", 0x21}, {&(0x7f0000001900)="3191d2a81e3027d5e782cff2392cdc9b369d5b8b85ececa1ee4be7572bf7156badb0fa2c177212d2264820ea0d2f7b04781754a332a8602d4297180f41b6c596e0b2b50e3fe8729143ca8387ff3a4b437728ce9b3c267fe67e48394f3f571a49eeb8c94047f4bad8ab9758e3ebd642e9713ff9fe3f5a31832254b2ce8aa2e325885511bf60c11ead4a53e8540922a9ace03399d7bea46e8192c0007b3916369c900f4c1376524e9d2634b1", 0xab}, {&(0x7f00000019c0)="cd016ffa2472381653b6c283d768928d5572a90cea4f1036128fbc914db49db12f5615806c006218286564dc0044940396d80830bbb955104257112945a1a0c879366582801c7aedefdf01b40beda4d30e4c4ec394b4c9d3c547c9620ec53c39180e291adb004cc1eece8acfd51266c7b69267e3526f94790adc16451e6b77113474c952d52cbe3d4b4e00c84e33e248345511ba3dc02d96bdd5ac5d99044b36c47d7cb2a5e252abdd72", 0xaa}, {&(0x7f0000001a80)="3840ff6b80492a59900e2e5f207c0ac7845390c19931a693186f0bd0c4e02b4bbfeeca420b16be", 0x27}, {&(0x7f0000001ac0)="a09018c370a63c3fe2b664ae9fd7707975a3317f56656465c4c577df3e36a1ac61", 0x21}, {&(0x7f0000001b00)="15708d2db3cfa601a4b63e501517ea352fb6d164bcf838184e9639e7dabf4506ade7c91256cf937a9d5ee56947789986acb3c157c76c6ae52dffce26d139f019c811703d8e8f43591585b370a5a444ae667614c55c81631aaf928782d38231e9f693d3aece95823ee62df132be1309b63f4875109901ed8318291058b45b23d9cec781c1100a74604e0f1d3e8be533eca166a084ab4c54bdd507ae22189fc1abf09b2a654969e50f8689", 0xaa}], 0x6}}, {{&(0x7f0000001c40)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000001f40)=[{&(0x7f0000001c80)="641c9aa11ea4b6de7cfbcf4d6c6361f37c68fb6e4a2bd2aa8a82ddf70d001659ee69cebb236b629f2482cdd3afdb7fe7f20578961764ad1658ec06e6fc02dd649fb0083d9faeda72c82c47dd42e365afe547fcbe5ecbe4fd330beec2828e12a2a8", 0x61}, {&(0x7f0000001d00)="77114dd693195de29ab97c726bf67b57e98c5dbfa688f4c2ec6e00bce300744d9d7e05be729452ccb119444a87742b1f53a529fc05be43ca785f8398be925ef15e3e21ca9ed58944b5c05e266003413e8e29353e27454dd09a03f3e52640ef166ef0198c28801abf00d9", 0x6a}, {&(0x7f0000001d80)="57e812a51b08642e81e3f75d31430668fee2b1d63df1819c12f7a176b7dd40fe7396b8a8a43a536c382d7f11f83850cbda640b10e94ea78502470b94c9b93a291aaf028571134a5887d8e5928aced904b0ddc5c11f5890e7d6d1debf5c34f8a223bee075602c8f35e257793049e0ca1db782f448bc47ffc1365edec8233b1d640a315167", 0x84}, {&(0x7f0000001e40)="a0274dc3e70968b93fa6e12e64f2e4540803cfcfeecd4d006cebb2bd28e48d6f762331205240f6bc54215b2af6c0fcd7344aba731851d36580a977538cd320b11fd18efde221a771fe561a2dc30ae47a121ca878f92f31e754b7ca7640f57708a45d1b90f29c8a717d2f97bbdcec0e9f859fded37c4dc44aad93aad4446ebe3f5d62713388114a50eb139b42282ace780ad3c5915dd3460863ea62fc6068c574551e43e1970a8a8b0e93f5d49ed6956d117f41e3be5a6d49eaccc8e7243afaa75ce02620d95c4b7a4b338f0f51948f52d63ebac487f82a538450059a9ac8ce7ba987987dce5a879942", 0xe9}], 0x4, &(0x7f00000020c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010102, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x100}}, @ip_ttl={{0x14, 0x0, 0x2, 0x417}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_retopts={{0x108, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x75, [@dev={0xac, 0x14, 0x14, 0x11}, @local, @private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @local]}, @lsrr={0x83, 0xf, 0x8b, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1]}, @generic={0x83, 0x2}, @cipso={0x86, 0x5a, 0x2, [{0x1, 0x12, "23c9c0bc65371cb5b38ad6c1656e5695"}, {0x0, 0x10, "710b73995c9131cc29acfded2834"}, {0x6, 0xe, "9aaa2938443ca3e26e766f5f"}, {0x6, 0x7, "eb3cd4627d"}, {0x7, 0x11, "89d182c019be38aa1802ac6286070f"}, {0x2, 0xc, "6e8073446c2ff9753aa7"}]}, @timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0x1, [{@multicast1, 0x1}]}, @timestamp_prespec={0x44, 0x44, 0x5c, 0x3, 0x6, [{@multicast2, 0x5}, {@local, 0x401}, {@empty, 0x7}, {@remote, 0x40}, {@private=0xa010102, 0x9}, {@multicast2, 0x2c}, {@remote, 0x400}, {@broadcast, 0x80}]}, @lsrr={0x83, 0x1b, 0xd, [@broadcast, @private=0xa010102, @empty, @broadcast, @multicast2, @local]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x1a8}}], 0x4, 0x8000)
r9 = accept4(r5, 0x0, &(0x7f0000002380), 0x80800)
setsockopt$inet_icmp_ICMP_FILTER(r4, 0x1, 0x1, &(0x7f00000023c0)={0xd}, 0x4)
socket$inet6(0xa, 0x800, 0x6)
sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f00000024c0)={&(0x7f0000002400), 0xc, &(0x7f0000002480)={&(0x7f0000002440)={0x24, 0x0, 0xb, 0x201, 0x0, 0x0, {0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000002500)={r7, r7}, 0xc)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000025c0)={'syztnl1\x00', &(0x7f0000002540)={'ip6_vti0\x00', r3, 0x4, 0x0, 0xa6, 0x4, 0x25, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8, 0x7f, 0x401}})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r9, 0x84, 0x1a, &(0x7f0000002600)={0x0, 0x11, "ffa60a9c0320b07dc2997427cdd5a7c3ed"}, &(0x7f0000002640)=0x19)

2.797735847s ago: executing program 3 (id=6036):
sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$sock_cred(r0, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) (async)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000180), 0x2ae, 0x0)

2.554710675s ago: executing program 3 (id=6037):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="d800000018007b18e00212ba0d8105040a0a9100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6fd4007100a007a290457f0189b316277ce06bbace8017cbec4c2fe5a7cef4090000001fb791643a5ee4b01602b2a10800ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x20008000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0, <r3=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x4, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94)

2.303978708s ago: executing program 3 (id=6038):
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00')
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x40, r3, 0x1, 0xfffbff7c, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0xfffffffffffffef6, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x0, 0x3, 0x7}, {0x0, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0xffffffffffffff0f, 0x1, 0xffffffffffffffff}]}, 0x40}}, 0x4080)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1b2}, @map_fd={0x18, 0x8, 0x1, 0x0, r5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x2, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000380)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0x9, 0x400, 0xa}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000400)=[{0x2, 0x3, 0xd, 0xc}, {0x1, 0x5, 0x4, 0xa}, {0x2, 0x1, 0x9, 0x6}, {0x3, 0x5, 0xc}, {0x5, 0x3, 0x9, 0x8}, {0x4, 0x8001, 0xb, 0x9}, {0x4, 0x5, 0x2, 0x71c3febe66f87100}, {0x5, 0x5, 0x1}, {0x3, 0x3, 0x5, 0x4}, {0x5, 0x1, 0x6, 0x7}], 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r10, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44)

2.208228221s ago: executing program 5 (id=6040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffff750, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001c80)={'syztnl1\x00', &(0x7f0000001c00)={'ip6gre0\x00', <r3=>0x0, 0x4, 0x8, 0xc7, 0xc, 0x60, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x40, 0x80, 0x8, 0xfffffffc}})
sendmsg$inet(r2, &(0x7f0000001d80)={0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000a80)="b7e5c0b308d95b3ddf8308691281eed2c2248b4c9cf5301cc7e26b8aff7a8790dab6ddcb8560aa6975dfdf8d54a4e664a816761227476228972042fbbe9180bbc88a82673556438514e36c09993ea5cec2f500628f7d110aedb7e254199e9c851149da0f1d05617a976745a4f173b884e9dfe74bbae33ec24c87f59f8f9679a281cc506d24a50f061da7f01ca22b44b3cff7d30f59a5f7d588b574e00cd987792468262e6c822e5a9ba37a2208057709e924d91e15c69ae1a70da598834799bf2aa940da5b8cfddcd7cc855ebc29d717bc4c5823475b79b965de567c8bc1b95725a1795e25d82a72d83110974495e9efe2", 0xf1}, {&(0x7f0000000bc0)="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", 0x1000}], 0x2, &(0x7f0000001cc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @remote}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@end, @generic={0x7, 0x6, "2637ab0f"}, @timestamp={0x44, 0x10, 0xcb, 0x0, 0x5, [0x8, 0x6, 0x8]}, @ssrr={0x89, 0xf, 0x2c, [@loopback, @broadcast, @loopback]}, @cipso={0x86, 0x41, 0x3, [{0x7, 0xf, "05d4f9354cd4c0f68955328223"}, {0x2, 0x10, "2aa423b1297eb491327e9870a09d"}, {0x2, 0xe, "6b0699c9e0b595a4c6d447fd"}, {0x7, 0xe, "397a711d0ca0115fbbe017e0"}]}]}}}, @ip_retopts={{0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0xc0}, 0x4004041) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000020000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r6=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5}, 0x90) (async)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x74, 0x0, 0x8}, {}, {}, {}, {0x0, 0xfe, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x5973599c}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x20, 0xcd, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5, 0x1}, {}, {0x0, 0x0, 0xfd, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {0x4, 0x0, 0x0, 0x2}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {0x800}, {}, {0x20, 0x6}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {0x0, 0x4b}, {}, {}, {0x0, 0x0, 0xe2}, {0x4}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0xfc}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x2}, {0x0, 0xb}, {0x4}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) (async)
r8 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'bond0\x00', <r9=>0x0})
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r9}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r10, r9, 0x25, 0x0, @void}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x17, 0x1f, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @alu={0x4, 0x0, 0x3, 0xa, 0x2, 0x80, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @ldst={0x2, 0x2, 0x0, 0x8, 0x9, 0x10, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x8, 0x88, &(0x7f00000005c0)=""/136, 0x41100, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x6, 0x81, 0x101}, 0x10, r6, r10, 0xa, 0x0, &(0x7f00000006c0)=[{0x3, 0x1, 0x0, 0x1}, {0x10000, 0x4, 0x6, 0x7}, {0x3, 0x5, 0x10, 0x7}, {0x2, 0x3, 0x6, 0x3}, {0x4, 0x5, 0x9, 0x9}, {0x0, 0x5, 0x8, 0x4}, {0x0, 0x4, 0x4, 0x5}, {0x2, 0x4, 0x7, 0x2}, {0x2, 0x4, 0x7, 0x7}, {0x1, 0x2, 0xd, 0x5}], 0x10, 0x101}, 0x94) (async)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x8, 0x1}, 0x10, r6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
r13 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r13, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64)
socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x800) (async)
sendmsg$NFT_BATCH(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) (async, rerun: 64)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f00000000c0)={0x44, 0x1, 0x2, 0xd93a5a4bce636df, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000085}, 0x24020090) (async, rerun: 64)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="840000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000540012800c0001006d6163766c616e004400028040000800"], 0x84}}, 0x0)

1.792392798s ago: executing program 3 (id=6041):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000380), 0x88800, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe(&(0x7f0000000440)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, 0x2)
socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="17200000212000004c0012800c0001006d6163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r1], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000)
r2 = socket(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0)
readv(r0, &(0x7f0000002640)=[{&(0x7f00000000c0)=""/168, 0xa8}, {0x0}], 0x2)

1.677560079s ago: executing program 5 (id=6042):
unshare(0x66000080)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
syz_emit_ethernet(0x56, &(0x7f0000000140)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @broadcast, @void, {@canfd={0xd, {{0x0, 0x1, 0x0, 0x1}, 0x25, 0x2, 0x0, 0x0, "1aa4818e5871f01f44db3cfa105f6f14c3249620dbcaa188c31cce915469b6403616986030d743e3b651f271304177fb52fd5324feeba7a979518a82b0d8eda5"}}}}, &(0x7f00000002c0)={0x0, 0x1, [0x4c7, 0x9, 0x9dc, 0x92]})
r1 = socket$packet(0x11, 0x2, 0x300) (async)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x4a)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0x3253, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a486dd", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) (async)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x202400, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x4000}) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x29, 0xd, 0xb48c, {0x2, @usr_ip6_spec={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1000, 0x82, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xde0, 0x2db, [0x800, 0x386a]}, @udp_ip4_spec={@remote, @empty, 0x4e20, 0x4e21, 0x4}, {0x0, @link_local, 0xa0d, 0x3, [0x6, 0x800]}, 0x3, 0xffff}}})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000740)={'pim6reg1\x00', 0x400})
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0xf1, 0x5006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x4}, 0x50) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', <r5=>0x0})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES64=r5], 0x20}}, 0x44800)

1.635810411s ago: executing program 0 (id=6043):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000000000000800010038fc5eb25367f752f7466fdd68076dc88b7a714b5cb0691409bb58faa1571c2a8cc400c2e51bb78e60ddeb9edd20acd35a710c6b6e12a264fe8160982f2154b9faad657b8f7ffdc428d8a60426a757998318d2dbf63f2507e18acb4ae2212465ff81e888263fc4386f04d8c022c9c4ee59ba875342c06f16cfac21b62929a45e12e1bc5d62ffdedad8e8e7b31e4880a7fc32d07d7dc4d2abc9cffcdc69b82fb3d45d861ea90e5d63ab00f80200d49b333c8b4bee1acc1d3c5584114e7e6225b2be7f582273920b", @ANYRES32=0x0, @ANYBLOB="08000800000000000800020001000000"], 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r2=>0x0})
r3 = socket$inet_icmp(0x2, 0x2, 0x1)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000300)={0xd, 0xfffffffc, 0x6}, 0xc)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="08010000e9f469a0ad56a4f7b1de2d005d2ed491eb735c2ccbdec6d0f0160b1a84dee90926108c126eea00e75dea0ce138451ccba2fc8a1f0ac1bd92de2978c4c50a1f56077c521c464e678b5b31ea629d863f4ca98804599787579a9f7c92305012a299f052f66d5f081048ab2219bcb78dba2d6b0b04256a77a3922bbc6e2f693fdbc5b914393d2c0ccd61bd83c348f27b05a2557683ffa7a519ce19363ebf273a7f9612fff9c1b8942a5b35884c8afa369b7250b9a0006fe35041cf372f63ea803cae3ae0e1f1964185036d2b67d67c47e918103fb3aa202cd9873f752393dda31fe03355f5094ff2483ea27e35279db24d58be9dbf2cee41924f", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf256500000008000300", @ANYRES32=r2, @ANYBLOB="ec0003800c00008008000300ff7f0000dc000080d5000200eb8bd333bc645fc2db9bb1e3e706be7c7fcba0d74a5d0aad477c068a79d84ba75e51e630641a1fe89c132363def21c2d91960063ba8d08955aff8a817136cbfea0fe257506c44da1d70a363ede7f2a24a9cd096ce85d1badc2fcf962c16bf643f9fc9b19766e91764a2a953c790434275c96dc6baf6e6332c75f375df8c64b72e14d171c804acbc0ffde1ad21aeb9a1ee5f7045547e5049fe73dd6a3e8291597dd01fd912a3aa83dd8387272dec818882f31f94e9033311903beea6834172199651c4b4d779279f5293f09b3dc07a92887000000"], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x20000480)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000000000000800010038fc5eb25367f752f7466fdd68076dc88b7a714b5cb0691409bb58faa1571c2a8cc400c2e51bb78e60ddeb9edd20acd35a710c6b6e12a264fe8160982f2154b9faad657b8f7ffdc428d8a60426a757998318d2dbf63f2507e18acb4ae2212465ff81e888263fc4386f04d8c022c9c4ee59ba875342c06f16cfac21b62929a45e12e1bc5d62ffdedad8e8e7b31e4880a7fc32d07d7dc4d2abc9cffcdc69b82fb3d45d861ea90e5d63ab00f80200d49b333c8b4bee1acc1d3c5584114e7e6225b2be7f582273920b", @ANYRES32=0x0, @ANYBLOB="08000800000000000800020001000000"], 0x2c}}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000300)={0xd, 0xfffffffc, 0x6}, 0xc) (async)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00032dbd7000fbdbdf256500000008000300", @ANYRES32=r2, @ANYBLOB="ec0003800c00008008000300ff7f0000dc000080d5000200eb8bd333bc645fc2db9bb1e3e706be7c7fcba0d74a5d0aad477c068a79d84ba75e51e630641a1fe89c132363def21c2d91960063ba8d08955aff8a817136cbfea0fe257506c44da1d70a363ede7f2a24a9cd096ce85d1badc2fcf962c16bf643f9fc9b19766e91764a2a953c790434275c96dc6baf6e6332c75f375df8c64b72e14d171c804acbc0ffde1ad21aeb9a1ee5f7045547e5049fe73dd6a3e8291597dd01fd912a3aa83dd8387272dec818882f31f94e9033311903beea6834172199651c4b4d779279f5293f09b3dc07a92887000000"], 0x108}, 0x1, 0x0, 0x0, 0x8000}, 0x20000480) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000)=0x6, 0x4) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c400000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) (async)

1.588586216s ago: executing program 3 (id=6044):
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}, {0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0)
pipe(&(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'pimreg0\x00'})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58)
r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0x70, 0xb8, 0x0, {0xff0f000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'team0\x00', 'netpci0\x00', {}, {}, 0x0, 0x1}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840)
unshare(0x22020600)
write$nci(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="410404"], 0x7)
r9 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040)
sendmsg$RDMA_NLDEV_CMD_GET(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x38}}, 0x0)
recvmsg(r0, &(0x7f0000001600)={0x0, 0xff9d, &(0x7f0000000080)=[{&(0x7f0000000280)=""/54, 0x36}], 0x1}, 0x40010022)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r10, 0x1, 0x21, &(0x7f00000006c0)=0x7baf14b8, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r12)
ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0))

1.425545579s ago: executing program 0 (id=6045):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2688634c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffda) (async)
socket$packet(0x11, 0x3, 0x300)

1.397840388s ago: executing program 0 (id=6046):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x10, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x5, 0x0, 0x7}, {0x8, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x1, 0x0, 0x3}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000400, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x6a7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8000000, 0x1, 0x0, 0x4, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0xb, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xffffffc3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x6, 0xfffffffe, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffe, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x9, 0x5, 0x2, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x7, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x9, 0x4, 0xfd, 0xfffffffa, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x80007f, 0x0, 0x8, 0x2, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x1000004, 0x7, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xffdffff7, 0x0, 0x4, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0x10000, 0x5, 0x1, 0x0, 0x2, 0x6, 0x1, 0x6, 0xe5a, 0x4, 0x2, 0x81, 0xd44, 0x10, 0x10000006, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x85, 0x8, 0xba, 0x2, 0xc9, 0x2, 0x6, 0x6, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x20000001, 0x2, 0xf, 0x24b9, 0x39, 0xe01, 0x1, 0x6430, 0xb, 0x8, 0x4000, 0x3, 0x7eb6, 0x3, 0x0, 0x203, 0x4, 0x9, 0xff, 0xa, 0x6, 0xf9, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0x0, 0x5, 0x2, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x2, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0xc, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0xfffffffe, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x80a, 0xffe, 0x33, 0x3f7, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1.240575244s ago: executing program 0 (id=6047):
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async, rerun: 32)
close(0xffffffffffffffff) (async, rerun: 32)
r2 = socket$kcm(0x29, 0x5, 0x0) (async, rerun: 32)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async)
r4 = socket$kcm(0x29, 0x5, 0x0)
sendmsg$kcm(r4, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (rerun: 64)
sendfile(r2, r4, 0x0, 0x8f92)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) (async, rerun: 32)
sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) (rerun: 32)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) (async, rerun: 64)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) (rerun: 64)
r8 = accept4(r7, 0x0, 0x0, 0x80800)
sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async)
recvmsg(r8, &(0x7f00000005c0)={0x0, 0xf0, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/68, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x44}, 0x0) (async)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f)
connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async)
sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) (async, rerun: 32)
recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000)

1.117726278s ago: executing program 0 (id=6048):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x2e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffff04ffffffea657668115981000e0008060001080006040001bbbbbbbbbbbb64010102aaaaaaaaaabb05000101bd50607f4aa93517d659f4a6b6dabc3917326cc4814490558933e58c99e31ee961841f17eaa17dbd8680ea38b4d0e2fad9ea753df2f8b859597b6f98b0beb12f7aec0d94ed45312447da3c4164848a76728d0c757ae0eeb2f60f5716422d294aba5479c2aa6291c5967e0b910fc2a057334727c2997b3983b82c27f940d633bb8effa6d1fa305edf16fc77e1f7030ca196fc038f2eb07fa49fa2c4e98cb1e9aea4c52babf2847a75ef7e499d07f6f7419e2dac97ac80eb06e134f2e68b2fbb5318dc"], 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
accept$inet6(r2, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000000010000001c00018006001f000200000008e40300ac14141c0800060003000000"], 0x30}}, 0x0)
r8 = socket$inet6(0xa, 0x3, 0x8)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x24}}, 0x0)
connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0x803, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4fb00200305b010014000300677265746170300000000000000000001c0016801800018014000b"], 0x58}, 0x1, 0x0, 0x0, 0x40080d0}, 0x0)

482.352676ms ago: executing program 3 (id=6049):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x6c, @loopback, 0x0, 0x0, 'wrr\x00', 0x0, 0x4001000, 0x4e}, 0x2c)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000680)=ANY=[@ANYBLOB="1100000042000000080000000300000000000000", @ANYRES32=0x1, @ANYBLOB="8000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000080000000000e5ffffffffffffff000000fb000000000000"], 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1400000036200000", @ANYRES32, @ANYBLOB, @ANYRES32=r1, @ANYBLOB="d5b1eca492f909740690bd0f8913c6131ac9e2a839f47bf9d9ea2dae699f15023c1801edeee13f22893ecaf3fcb52f55948a10a34a94c4514f94dc6224be7074534ffefb71af32ae229a3f838362f62f5baf255015f23d8f388afbeb176ad1490137fc80abe33f900293a3816f4d942ecf7c7c2723c9b0f30e6160efed575e29d20bd574dc8c748d51f4654644d8f2663f485c303191b48fd7219536a00e4909ee5817d2986f4e53fa577667275c39e04085b074d6cd88363c03d56715fcabbb165e77a27b", @ANYRES64=0x0], 0x20)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000cb5239a01b5b902367fd5ec1a64e367acb74c7e00c2f2bd72b3a0be2ea96caa37fb3469e8505342e47fc8929a6a015"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000440)="0703330d6490fd097b41b4458a4528d641aca67b7f2473a5f55d439fdabc1af74fad437c7e3f3f56c7db6340e36df6e4e30554e801830664f623dad3e910805b0848243c7c3f484683e1f449730afd61a1042d302f0fe1b6aec7cc62a346ee32b6e098d2ace765c1c03aa202bb8dee", &(0x7f0000000400)=@udp6=r2}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r1, &(0x7f0000000080)="e4211d7d8ff8a3f31cd660d1a58a7d", &(0x7f0000000780)=@udp6=r2, 0x4}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x34, 0x0, 0x0, 0x0, 0x20149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff80fe, 0x8}, 0x50)
r3 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(r3, &(0x7f00000004c0), 0x48, 0x820b, 0x0)

326.708056ms ago: executing program 4 (id=6050):
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0x2, "4f6fb4d1af0f724e6118ecfbac0200843af29708e2355d0e7ea0c543011a00", 0xfffffffc, 0x4, 0x81, 0x8}, 0x3c)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
r1 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x3, 0x0, 0x0, 0x1, 0xff8, 0x4}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r2, 0x8b32, &(0x7f0000000040))
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x1000, 0x1000, 0x0, 0x3}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, 0x0, 0x0)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004, 0x11, r1, 0x180000000)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xfffffffffffffd76, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)

2.313497ms ago: executing program 4 (id=6051):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"})
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ife={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x1, 0x800, 0x3}, 0x1}}, @TCA_IFE_METALST={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x48850)
r8 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000004000000000000000a000000911185000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)

0s ago: executing program 0 (id=6052):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0)
socket$kcm(0x29, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0)
r2 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840)
sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)=@newtfilter={0x70, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x44, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth1_to_team\x00'}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xffc, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}, @TCA_U32_LINK={0x8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004884}, 0x24040084)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000002f000000d4030000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x1, 0xc3, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCX25GCAUSEDIAG(r1, 0x89e6, &(0x7f0000000100)={0x9, 0x7c})
socket$packet(0x11, 0x3, 0x300)
bind$packet(r1, &(0x7f00000001c0)={0x11, 0xf5, 0x0, 0x1, 0xc5, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r5, 0x6, 0x21, 0x0, 0x0)
r6 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
connect$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
listen(r6, 0x4)
recvmmsg(r6, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x0, 0x0)
write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef)

kernel console output (not intermixed with test programs):

ted]: syz.1.4279 (pid 24075) Use of struct sctp_assoc_value in delayed_ack socket option.
[  715.176289][T24075] Use struct sctp_sack_info instead
[  715.220726][T24071] bond2: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms
[  715.235337][T24071] bond2: entered promiscuous mode
[  715.241809][T24071] 8021q: adding VLAN 0 to HW filter on device bond2
[  715.349681][T24091] FAULT_INJECTION: forcing a failure.
[  715.349681][T24091] name failslab, interval 1, probability 0, space 0, times 0
[  715.369462][T24091] CPU: 1 UID: 0 PID: 24091 Comm: syz.4.4280 Not tainted syzkaller #0 PREEMPT(full) 
[  715.369488][T24091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  715.369499][T24091] Call Trace:
[  715.369507][T24091]  <TASK>
[  715.369515][T24091]  dump_stack_lvl+0xe8/0x150
[  715.369540][T24091]  should_fail_ex+0x412/0x560
[  715.369567][T24091]  should_failslab+0xa8/0x100
[  715.369595][T24091]  __kmalloc_cache_noprof+0x88/0x660
[  715.369621][T24091]  ? call_usermodehelper_setup+0x8e/0x270
[  715.369645][T24091]  call_usermodehelper_setup+0x8e/0x270
[  715.369661][T24091]  ? __pfx_free_modprobe_argv+0x10/0x10
[  715.369688][T24091]  __request_module+0x3ba/0x630
[  715.369715][T24091]  ? __pfx___request_module+0x10/0x10
[  715.369752][T24091]  ? security_capable+0x7e/0x2c0
[  715.369779][T24091]  ? dev_load+0x21/0x1f0
[  715.369801][T24091]  dev_load+0x190/0x1f0
[  715.369824][T24091]  dev_ioctl+0x680/0x1150
[  715.369851][T24091]  sock_do_ioctl+0x23e/0x320
[  715.369875][T24091]  ? __pfx_sock_do_ioctl+0x10/0x10
[  715.369892][T24091]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  715.369927][T24091]  sock_ioctl+0x5c6/0x7f0
[  715.369949][T24091]  ? __pfx_sock_ioctl+0x10/0x10
[  715.369969][T24091]  ? __fget_files+0x2a/0x420
[  715.369990][T24091]  ? __fget_files+0x3a0/0x420
[  715.370009][T24091]  ? __fget_files+0x2a/0x420
[  715.370033][T24091]  ? bpf_lsm_file_ioctl+0x9/0x20
[  715.370059][T24091]  ? __pfx_sock_ioctl+0x10/0x10
[  715.370078][T24091]  __se_sys_ioctl+0xfc/0x170
[  715.370104][T24091]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.370124][T24091]  do_syscall_64+0x15f/0xf80
[  715.370147][T24091]  ? trace_irq_disable+0x3b/0x140
[  715.370172][T24091]  ? clear_bhb_loop+0x40/0x90
[  715.370194][T24091]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  715.370213][T24091] RIP: 0033:0x7f5aae79cdd9
[  715.370233][T24091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  715.370249][T24091] RSP: 002b:00007f5aaf6ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  715.370268][T24091] RAX: ffffffffffffffda RBX: 00007f5aaea15fa0 RCX: 00007f5aae79cdd9
[  715.370280][T24091] RDX: 00002000000000c0 RSI: 0000000000008929 RDI: 0000000000000004
[  715.370291][T24091] RBP: 00007f5aaf6ba090 R08: 0000000000000000 R09: 0000000000000000
[  715.370301][T24091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  715.370310][T24091] R13: 00007f5aaea16038 R14: 00007f5aaea15fa0 R15: 00007ffde3480648
[  715.370336][T24091]  </TASK>
[  715.822387][T24109] netlink: 'syz.0.4283': attribute type 1 has an invalid length.
[  715.899432][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  715.906778][    C0] bridge0: topology change detected, propagating
[  715.930877][T24109] 8021q: adding VLAN 0 to HW filter on device bond6
[  716.044209][T24115] 
: renamed from bond0
[  716.375296][T24137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  717.581247][T24224] lo speed is unknown, defaulting to 1000
[  717.928468][T24244] batadv0: entered promiscuous mode
[  717.947904][T24244] batadv0: left promiscuous mode
[  718.001112][T24249] netlink: 'syz.3.4326': attribute type 4 has an invalid length.
[  718.139902][T24255] pim6reg: entered allmulticast mode
[  718.503763][T24278] __nla_validate_parse: 34 callbacks suppressed
[  718.503791][T24278] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4337'.
[  718.522737][T24280] netlink: 'syz.5.4335': attribute type 8 has an invalid length.
[  718.534512][T24278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4337'.
[  718.617852][T24286] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4330'.
[  718.868816][T24278] vlan0: entered allmulticast mode
[  718.881864][T24278] gretap0: entered allmulticast mode
[  719.122621][T24305] IPVS: length: 528 != 736
[  719.259587][T24312] sctp: [Deprecated]: syz.0.4342 (pid 24312) Use of int in maxseg socket option.
[  719.259587][T24312] Use struct sctp_assoc_value instead
[  719.298001][T24313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4345'.
[  719.379089][T24316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4343'.
[  719.680580][T24323] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4347'.
[  719.737861][T21373] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  720.605119][T24351] netlink: 'syz.0.4353': attribute type 1 has an invalid length.
[  720.928681][T24367] xt_CT: No such helper "netbios-ns"
[  720.944302][T24367] tipc: Started in network mode
[  720.953709][T24367] tipc: Node identity 00000000000003000000000000000001, cluster identity 4711
[  720.962910][T24367] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  721.021855][T24370] netlink: 'syz.0.4358': attribute type 2 has an invalid length.
[  721.043264][T24370] netlink: 'syz.0.4358': attribute type 2 has an invalid length.
[  721.099302][T24370] lo speed is unknown, defaulting to 1000
[  721.128458][T24379] netlink: 'syz.3.4360': attribute type 1 has an invalid length.
[  721.170717][T24379] bond7: entered promiscuous mode
[  721.177025][T24379] 8021q: adding VLAN 0 to HW filter on device bond7
[  721.221130][T24384] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4361'.
[  721.328576][T24391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4362'.
[  721.340557][T24386] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma?
[  721.355122][T24381] bond7: (slave veth3): making interface the new active one
[  721.378036][T24381] veth3: entered promiscuous mode
[  721.390100][T24381] bond7: (slave veth3): Enslaving as an active interface with an up link
[  721.567319][T24388] lo speed is unknown, defaulting to 1000
[  721.594873][T24384] lo speed is unknown, defaulting to 1000
[  721.656941][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  721.791481][T24408] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4366'.
[  721.813769][T24408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4366'.
[  721.833577][T24398] tap0: tun_chr_ioctl cmd 1074025677
[  721.841655][T24398] tap0: linktype set to 778
[  721.955992][T24408] netlink: 'syz.4.4366': attribute type 2 has an invalid length.
[  722.000078][T24408] netlink: 'syz.4.4366': attribute type 2 has an invalid length.
[  722.049410][T24408] macsec1: entered promiscuous mode
[  722.639675][T24445] x_tables: duplicate underflow at hook 1
[  723.052495][T24459] netlink: 'syz.0.4376': attribute type 3 has an invalid length.
[  723.443544][T24489] tipc: Started in network mode
[  723.452230][T24489] tipc: Node identity 4a468cf090d3, cluster identity 4711
[  723.482217][T24489] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  723.507787][T24494] syzkaller0: entered promiscuous mode
[  723.513888][T24494] syzkaller0: entered allmulticast mode
[  723.548875][T24489] tipc: Resetting bearer <eth:syzkaller0>
[  723.611033][T24488] tipc: Resetting bearer <eth:syzkaller0>
[  723.705300][T24488] tipc: Disabling bearer <eth:syzkaller0>
[  723.907758][T24518] __nla_validate_parse: 3 callbacks suppressed
[  723.907779][T24518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4395'.
[  723.935102][T24522] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4397'.
[  724.188839][T24536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4401'.
[  725.132350][T24571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4408'.
[  725.156431][T24571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4408'.
[  725.949561][T24580] netlink: 'syz.3.4410': attribute type 4 has an invalid length.
[  725.958218][T24575] lo speed is unknown, defaulting to 1000
[  726.207032][T24577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4409'.
[  726.393744][T24596] netlink: 'syz.1.4413': attribute type 10 has an invalid length.
[  726.448193][T24596] 8021q: adding VLAN 0 to HW filter on device team0
[  726.564726][T24609] nbd: must specify at least one socket
[  726.966751][T24624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4422'.
[  727.124341][T24634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4424'.
[  727.252626][T24636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4425'.
[  727.780449][T24673] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4434'.
[  727.781404][T24685] IPv6: addrconf: prefix option has invalid lifetime
[  727.916893][T24697] xfrm0: entered promiscuous mode
[  727.922174][T24697] xfrm0: entered allmulticast mode
[  728.046152][T24706] netlink: 'syz.1.4445': attribute type 7 has an invalid length.
[  728.046262][T24707] netlink: 'syz.1.4445': attribute type 7 has an invalid length.
[  729.012068][T24775] __nla_validate_parse: 7 callbacks suppressed
[  729.012087][T24775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4466'.
[  729.074484][T24780] syzkaller0: entered promiscuous mode
[  729.086818][T24780] syzkaller0: entered allmulticast mode
[  729.140176][T24780] lo speed is unknown, defaulting to 1000
[  729.224307][T24787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4469'.
[  729.348690][T21373] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  729.497987][T24803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  729.543993][T24780] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  729.593499][T24780] netlink: 'syz.5.4467': attribute type 33 has an invalid length.
[  729.633581][T24780] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4467'.
[  729.647242][T24780] `: renamed from team0
[  729.749227][T24811] lo speed is unknown, defaulting to 1000
[  729.783275][T24806] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4474'.
[  729.911201][T24821] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4474'.
[  729.941841][T24820] team0: No ports can be present during mode change
[  730.042299][T24817] lo speed is unknown, defaulting to 1000
[  730.137393][T24826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4480'.
[  730.203347][T24826] digital: digital_start_poll: Unknown protocol
[  730.731517][T24855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4485'.
[  730.746980][T24855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4485'.
[  730.756657][T24855] veth1_macvtap: left promiscuous mode
[  731.015997][T24865] netlink: 'syz.3.4488': attribute type 7 has an invalid length.
[  731.018941][T24861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4487'.
[  731.031480][T24865] bridge_slave_0: entered promiscuous mode
[  731.051200][T24861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4487'.
[  733.112945][T24826] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  733.562104][T24877] bond2: (slave veth5): Releasing backup interface
[  734.415476][T24941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4512'.
[  734.604255][T24949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4514'.
[  734.899410][T24960] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4519'.
[  735.369087][T24972] xt_TPROXY: Can be used only with -p tcp or -p udp
[  735.548311][T24979] syzkaller1: entered allmulticast mode
[  736.173404][T25030] IPv6: NLM_F_REPLACE set, but no existing node found!
[  736.396203][T25045] xt_hashlimit: overflow, try lower: 6/0
[  736.472598][T25043] lo speed is unknown, defaulting to 1000
[  736.488968][T25053] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4548'.
[  736.564350][T25053] ip6gre3: entered promiscuous mode
[  736.583012][T25053] ip6gre3: entered allmulticast mode
[  736.598444][T20487] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  736.617115][T20487] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  736.626611][T16911] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  736.838157][T25069] hma(����kX�: entered promiscuous mode
[  737.018160][ T7526] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  737.060109][T25081] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4554'.
[  737.083259][T25081] netlink: 'syz.0.4554': attribute type 4 has an invalid length.
[  737.129812][ T7526] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  737.154471][T25080] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  737.315216][T25093] netlink: 'syz.0.4558': attribute type 1 has an invalid length.
[  737.352829][T25093] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  737.385373][T25093] netlink: 'syz.0.4558': attribute type 1 has an invalid length.
[  737.485989][T25100] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address
[  737.500902][T25093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4558'.
[  737.549469][T25100] bond7: (slave vxcan3): Error -95 calling set_mac_address
[  737.633937][T25110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4560'.
[  737.724542][T25093] bond7: (slave bridge3): Enslaving as an active interface with a down link
[  737.962653][T25120] syzkaller0: entered promiscuous mode
[  737.979340][T25120] syzkaller0: entered allmulticast mode
[  738.160159][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4566'.
[  738.197957][T25138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4566'.
[  738.578504][T25166] netlink: 'syz.0.4572': attribute type 1 has an invalid length.
[  738.623761][T25166] bond8: entered promiscuous mode
[  738.631689][T25166] 8021q: adding VLAN 0 to HW filter on device bond8
[  738.668767][T25166] bond8: (slave bridge4): making interface the new active one
[  738.676672][T25166] bridge4: entered promiscuous mode
[  738.695140][T25166] bond8: (slave bridge4): Enslaving as an active interface with an up link
[  738.843805][T25170] lo speed is unknown, defaulting to 1000
[  738.862433][T25178] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma?
[  738.866240][T25179] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4578'.
[  738.899880][T25176] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  738.911852][T25176] gretap1: entered promiscuous mode
[  738.919059][T25176] gretap1: entered allmulticast mode
[  738.937785][T21373] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  739.520565][T25221] __nla_validate_parse: 5 callbacks suppressed
[  739.520584][T25221] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4581'.
[  739.628929][T25225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4587'.
[  739.663245][T25225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4587'.
[  739.726132][T25225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4587'.
[  739.869256][T25203] netlink: 'syz.5.4582': attribute type 6 has an invalid length.
[  739.874466][T25232] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4588'.
[  739.886742][T25203] netlink: 14585 bytes leftover after parsing attributes in process `syz.5.4582'.
[  740.021329][T25238] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4590'.
[  740.034988][T25240] netlink: 160 bytes leftover after parsing attributes in process `syz.1.4592'.
[  740.064801][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4592'.
[  740.074838][T25240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4592'.
[  740.159065][T25240] smbdirect: ib_dev[syz2] removed
[  740.185397][T25243] netlink: 'syz.4.4593': attribute type 1 has an invalid length.
[  740.296503][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  740.349944][T25243] 8021q: adding VLAN 0 to HW filter on device bond0
[  740.451181][T25261] xt_CT: You must specify a L4 protocol and not use inversions on it
[  740.634803][T25263] syzkaller0: entered promiscuous mode
[  743.572498][T25284] ip6erspan0: entered promiscuous mode
[  743.583330][T25284] ip6erspan0: entered allmulticast mode
[  743.594622][T25288] tap0: tun_chr_ioctl cmd 1074025676
[  743.600084][T25288] tap0: owner set to 0
[  743.883414][T25311] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20002
[  744.294903][T25323] netlink: 'syz.5.4612': attribute type 1 has an invalid length.
[  744.309383][T25335] x_tables: duplicate entry at hook 3
[  744.473769][T25347] netlink: 'syz.1.4618': attribute type 1 has an invalid length.
[  747.268029][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  747.901626][    C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  747.962860][T25323] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  748.331340][T25379] __nla_validate_parse: 9 callbacks suppressed
[  748.331358][T25379] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4626'.
[  748.381629][T25383] openvswitch: netlink: Actions may not be safe on all matching packets
[  748.537365][T21373] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  748.604342][T25399] xt_hashlimit: size too large, truncated to 1048576
[  748.664595][T25404] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4633'.
[  748.712964][T25404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4633'.
[  748.742296][T25408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4637'.
[  748.928052][T25413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4638'.
[  748.965053][T25416] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'.
[  749.784871][T25459] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4650'.
[  749.810232][T25459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4650'.
[  750.100469][T25468] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4653'.
[  750.137230][T19132] Bluetooth: hci4: command 0x0405 tx timeout
[  750.353337][T25475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4654'.
[  751.044831][T25495] netlink: 'syz.5.4659': attribute type 1 has an invalid length.
[  751.170487][T25495] bond3: entered promiscuous mode
[  751.175739][T25503] netlink: 'syz.0.4661': attribute type 2 has an invalid length.
[  751.201058][T25495] 8021q: adding VLAN 0 to HW filter on device bond3
[  751.225107][T25506] netlink: 'syz.1.4662': attribute type 10 has an invalid length.
[  751.276596][T25507] netlink: 'syz.1.4662': attribute type 10 has an invalid length.
[  751.285944][T25506] team0: Failed to send options change via netlink (err -105)
[  751.296087][T25506] team0: Port device dummy0 added
[  751.317448][T25495] bond3: entered allmulticast mode
[  751.409585][T25507] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  751.478186][T25507] team0: Failed to send options change via netlink (err -105)
[  751.498219][T25507] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  751.519624][T25507] team0: Port device dummy0 removed
[  751.769727][T25522] vlan2: entered promiscuous mode
[  751.800619][T25522] gretap0: entered promiscuous mode
[  751.817174][T25522] vlan2: entered allmulticast mode
[  751.846983][T25522] gretap0: entered allmulticast mode
[  752.680534][T25546] syz_tun: entered allmulticast mode
[  752.700282][T25546] netlink: 'syz.0.4672': attribute type 1 has an invalid length.
[  752.730830][T25546] gretap4: entered allmulticast mode
[  752.792089][T25545] syz_tun: left allmulticast mode
[  752.955326][T25554] netlink: 'syz.0.4674': attribute type 61 has an invalid length.
[  753.389975][T25574] __nla_validate_parse: 9 callbacks suppressed
[  753.389994][T25574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4679'.
[  753.426788][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4680'.
[  753.583773][T25579] netlink: 'syz.0.4681': attribute type 4 has an invalid length.
[  753.601219][T25579] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4681'.
[  753.842170][T25598] netlink: 'syz.3.4686': attribute type 3 has an invalid length.
[  753.854137][T25598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4686'.
[  753.995062][T25604] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4688'.
[  754.118502][T25609] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4690'.
[  754.309907][T25620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4689'.
[  754.471127][T25624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4694'.
[  754.745426][T25633] batadv_slave_0: entered promiscuous mode
[  754.792715][T25633] batadv_slave_0: left promiscuous mode
[  755.061142][T25649] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4699'.
[  755.161220][T25655] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  755.220420][T25661] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4706'.
[  755.236011][T25661] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  755.532418][T10793] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.563820][T10793] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.598610][T10793] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.706643][T10793] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  755.719230][T25693] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  756.080891][T25654] Bluetooth: hci3: Opcode 0x0401 failed: -4
[  756.095012][T25707] netlink: 'syz.0.4715': attribute type 3 has an invalid length.
[  756.119606][T25711] bond4: option mode: invalid value (254)
[  756.140818][T25711] bond4 (unregistering): Released all slaves
[  757.098371][T25749] vlan2: entered promiscuous mode
[  757.116856][T25749] geneve1: entered promiscuous mode
[  757.134820][T25749] vlan2: entered allmulticast mode
[  757.154290][T25749] geneve1: entered allmulticast mode
[  757.177727][   T50] Bluetooth: hci3: command 0x0405 tx timeout
[  757.203116][T25757] netlink: 'syz.4.4729': attribute type 1 has an invalid length.
[  758.632769][T25807] netlink: 'syz.1.4740': attribute type 8 has an invalid length.
[  759.018015][T25823] geneve3: entered allmulticast mode
[  759.041948][T25827] netlink: 'syz.1.4746': attribute type 10 has an invalid length.
[  759.068677][T10793] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20001 - 0
[  759.070963][T25827] __nla_validate_parse: 11 callbacks suppressed
[  759.070979][T25827] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4746'.
[  759.106387][T10793] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20001 - 0
[  759.115321][T25824] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4744'.
[  759.160380][T25830] netlink: 288 bytes leftover after parsing attributes in process `syz.4.4745'.
[  759.238097][T10793] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20001 - 0
[  759.259155][T10793] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20001 - 0
[  759.453985][T25847] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  759.486948][T25848] IPVS: set_ctl: invalid protocol: 11 10.1.1.0:20000
[  759.573005][T25863] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4748'.
[  759.583627][T25864] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode
[  759.624577][T25863] openvswitch: netlink: Message has 2 unknown bytes.
[  759.630463][T25864] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode
[  759.688700][T25869] tunl0: mtu less than device minimum
[  759.742208][T25864] xt_hashlimit: max too large, truncated to 1048576
[  760.585066][T25900] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4758'.
[  760.901453][T25921] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  761.045844][T25900] bridge0: port 1(bridge_slave_0) entered disabled state
[  761.509670][T25900] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  761.534356][T25900] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  761.815621][T20487] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  761.872672][T25936] vlan1: entered allmulticast mode
[  761.885437][T25936] bond0: entered allmulticast mode
[  761.895590][T25936] bond_slave_0: entered allmulticast mode
[  761.902534][T25936] bond_slave_1: entered allmulticast mode
[  761.917808][T20487] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  761.934617][T20487] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  761.952634][T25940] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4767'.
[  761.962271][T25941] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4767'.
[  761.978352][T20487] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  761.989876][T25939] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.4767'.
[  762.084263][T25946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4770'.
[  762.137414][T25956] netlink: 'syz.5.4769': attribute type 3 has an invalid length.
[  762.169482][T25954] vlan5: entered promiscuous mode
[  762.187466][T25954] gretap0: entered promiscuous mode
[  762.262723][T25958] bond4: entered promiscuous mode
[  762.283566][T25958] bond4: entered allmulticast mode
[  762.299220][T25960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4772'.
[  762.406796][T25964] netlink: 'syz.0.4772': attribute type 10 has an invalid length.
[  762.434450][T25960] 8021q: adding VLAN 0 to HW filter on device bond9
[  762.444968][T25962] 8021q: adding VLAN 0 to HW filter on device bond0
[  762.465115][T25962] bond9: (slave bond0): Enslaving as an active interface with an up link
[  762.526019][T25964] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  762.688724][T25977] netlink: 'syz.1.4777': attribute type 2 has an invalid length.
[  762.935809][T25992] sctp: [Deprecated]: syz.1.4784 (pid 25992) Use of int in max_burst socket option.
[  762.935809][T25992] Use struct sctp_assoc_value instead
[  763.540375][T26022] sch_tbf: burst 32855 is lower than device lo mtu (11337746) !
[  763.628015][T26028] netlink: 'syz.3.4791': attribute type 1 has an invalid length.
[  764.619237][T26048] bond5 (unregistering): Released all slaves
[  766.262483][T26006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  766.995068][T26102] bond5: option lacp_active: mode dependency failed, not supported in mode balance-alb(6)
[  767.007422][T26102] bond5 (unregistering): Released all slaves
[  767.129821][T26107] __nla_validate_parse: 2 callbacks suppressed
[  767.129835][T26107] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4813'.
[  767.233119][T26110] netlink: 'syz.1.4814': attribute type 1 has an invalid length.
[  767.255113][T26110] 8021q: adding VLAN 0 to HW filter on device bond5
[  767.273803][T26110] bond5: (slave ip6gretap1): making interface the new active one
[  767.284473][T26110] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  767.296769][T26109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4814'.
[  767.629993][T26129] vxcan2: entered allmulticast mode
[  769.400790][T26057] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  769.639465][T26149] netlink: 'syz.1.4825': attribute type 1 has an invalid length.
[  769.665789][T26149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.690182][T26150] netlink: 276 bytes leftover after parsing attributes in process `syz.3.4822'.
[  769.714396][T26149] netlink: 'syz.1.4825': attribute type 1 has an invalid length.
[  769.761596][T26149] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  769.818195][T26134] Bluetooth: hci3: command 0x0405 tx timeout
[  769.916221][T26170] netlink: 'syz.4.4827': attribute type 1 has an invalid length.
[  770.007373][T26170] bond5: entered promiscuous mode
[  770.012985][T26170] 8021q: adding VLAN 0 to HW filter on device bond5
[  770.027639][T26173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4827'.
[  770.037479][T26173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4827'.
[  770.128887][T26170] veth7: entered promiscuous mode
[  770.144739][T26170] veth7: entered allmulticast mode
[  770.158240][T26170] bond5: (slave veth7): Enslaving as a backup interface with a down link
[  770.171783][T26186] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.4832'.
[  770.197348][T26175] syzkaller0: entered promiscuous mode
[  770.204187][T26175] syzkaller0: entered allmulticast mode
[  770.279944][T26175] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  770.306210][T26174] tipc: Resetting bearer <eth:syzkaller0>
[  770.348245][T26174] tipc: Disabling bearer <eth:syzkaller0>
[  770.717676][T26207] netlink: 676 bytes leftover after parsing attributes in process `syz.1.4838'.
[  770.914420][T26219] syzkaller1: entered promiscuous mode
[  770.921413][T26219] syzkaller1: entered allmulticast mode
[  775.056053][T26278] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  775.118295][T26294] netlink: 'syz.4.4855': attribute type 1 has an invalid length.
[  775.273097][T26299] netlink: 'syz.4.4858': attribute type 10 has an invalid length.
[  775.295932][T26300] netlink: 'syz.4.4858': attribute type 10 has an invalid length.
[  775.367926][T26299] team0 (unregistering): Port device team_slave_0 removed
[  775.389784][T26299] team0 (unregistering): Port device team_slave_1 removed
[  775.490849][T26317] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4859'.
[  775.580235][T26321] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4862'.
[  775.649491][T26322] bond4: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms
[  775.655218][T26327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4864'.
[  775.673399][T26322] bond4: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms
[  775.842209][T26331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4865'.
[  775.932536][T26347] IPVS: ip_vs_add_dest(): server weight less than zero
[  776.144757][T26363] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.4875'.
[  776.344440][T26380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4880'.
[  776.353842][T26379] gre0: Master is either lo or non-ether device
[  776.504236][T26389] tipc: Started in network mode
[  776.514791][T26389] tipc: Node identity fff50000000000000000000000000001, cluster identity 4711
[  776.534381][T26389] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  776.799338][T26407] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4888'.
[  776.848151][T26407] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4888'.
[  777.108694][T26420] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4890'.
[  777.312307][T26426] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4892'.
[  777.585352][T26442] pimreg: tun_chr_ioctl cmd 1074025677
[  777.596678][T26442] pimreg: linktype set to 823
[  777.671009][T26448] openvswitch: netlink: IP tunnel dst address not specified
[  777.683040][T26449] openvswitch: netlink: IP tunnel dst address not specified
[  777.730399][T26448] netlink: 'syz.4.4898': attribute type 2 has an invalid length.
[  778.627711][T26518] syzkaller1: entered promiscuous mode
[  778.633469][T26518] syzkaller1: entered allmulticast mode
[  778.771913][T26527] batadv_slave_1: entered promiscuous mode
[  778.789388][T26526] batadv_slave_1: left promiscuous mode
[  779.162423][T26555] syzkaller1: entered promiscuous mode
[  779.178101][T26555] syzkaller1: entered allmulticast mode
[  779.229492][T26567] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  779.230579][T26557] bond6 (unregistering): Released all slaves
[  779.265787][T26567] netlink: 'syz.4.4933': attribute type 4 has an invalid length.
[  779.289098][T26567] netlink: 'syz.4.4933': attribute type 8 has an invalid length.
[  779.342339][T26569] netlink: 'syz.4.4933': attribute type 4 has an invalid length.
[  779.357392][T26569] netlink: 'syz.4.4933': attribute type 8 has an invalid length.
[  779.523506][T26580] netlink: 'syz.5.4938': attribute type 1 has an invalid length.
[  779.661404][T26580] bond5: entered promiscuous mode
[  779.667706][T26580] 8021q: adding VLAN 0 to HW filter on device bond5
[  779.711633][T26586] 8021q: adding VLAN 0 to HW filter on device bond5
[  779.718931][T26586] bond5: (slave vti0): The slave device specified does not support setting the MAC address
[  779.739230][T26586] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode
[  779.769998][T26586] bond5: (slave vti0): making interface the new active one
[  779.781785][T26594] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  779.796062][T26586] vti0: entered promiscuous mode
[  779.812269][T26586] bond5: (slave vti0): Enslaving as an active interface with an up link
[  779.908890][T26581] bridge0: left promiscuous mode
[  779.914935][T26581] 8021q: adding VLAN 0 to HW filter on device bond0
[  779.973078][T26581] 8021q: adding VLAN 0 to HW filter on device team0
[  780.002880][T26581] 8021q: adding VLAN 0 to HW filter on device batadv0
[  780.069300][T26581] batman_adv: batadv0: Interface activated: batadv_slave_0
[  780.080900][T26581] batman_adv: batadv0: Interface activated: batadv_slave_1
[  780.094432][T26581] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  780.110480][T26581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  780.147904][T26581] veth1_macvtap: left promiscuous mode
[  780.163792][T26581] veth0_macvtap: left promiscuous mode
[  780.183911][T26581] veth0_macvtap: entered promiscuous mode
[  780.201011][T26581] veth1_macvtap: entered promiscuous mode
[  780.241811][T26581] 8021q: adding VLAN 0 to HW filter on device bond1
[  780.250193][T26581] 8021q: adding VLAN 0 to HW filter on device bond2
[  780.262811][T26581] 8021q: adding VLAN 0 to HW filter on device eth0
[  780.271060][T26581] 8021q: adding VLAN 0 to HW filter on device eth1
[  780.279376][T26581] 8021q: adding VLAN 0 to HW filter on device eth2
[  780.288522][T26581] 8021q: adding VLAN 0 to HW filter on device eth3
[  780.298269][T26581] 8021q: adding VLAN 0 to HW filter on device bond3
[  780.322439][T26581] 8021q: adding VLAN 0 to HW filter on device bond4
[  780.332489][ T5782] bridge0: entered promiscuous mode
[  780.341431][T24649] bridge0: port 1(bridge_slave_0) entered blocking state
[  780.348614][T24649] bridge0: port 1(bridge_slave_0) entered forwarding state
[  780.381347][T16827] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  780.407411][T16827] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  780.417237][T16827] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  780.426210][T16827] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  780.444192][T16827] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  780.455276][T16827] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  780.463949][T16827] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  780.473461][T16827] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  780.551246][T16821] ip6_tunnel:  xmit: Local address not yet configured!
[  780.670784][T16821] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  780.681344][T16821] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  780.689788][T16821] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  780.707057][T21372] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  780.957510][T21372] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  780.980847][T26642] 8021q: VLANs not supported on vcan0
[  781.012713][T26643] __nla_validate_parse: 13 callbacks suppressed
[  781.012731][T26643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4952'.
[  781.101048][T26645] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4953'.
[  781.133918][T26645] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4953'.
[  781.165254][T26645] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  781.178397][T21373] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  781.263077][T26652] vlan3: entered promiscuous mode
[  781.277248][T26652] team0: entered promiscuous mode
[  781.564441][T26670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4960'.
[  781.627012][T26674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'.
[  781.667356][T26670] syzkaller0: entered promiscuous mode
[  781.674205][T26670] syzkaller0: entered allmulticast mode
[  781.786120][T26675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4962'.
[  782.110579][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4970'.
[  782.452829][T26726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4978'.
[  782.496085][T26724] can: request_module (can-proto-3) failed.
[  782.582936][T26726] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  782.866767][T26751] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  782.982546][T26755] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  783.017888][T26761] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4985'.
[  783.401897][T26783] netlink: 'syz.0.4991': attribute type 8 has an invalid length.
[  783.619785][T26797] netlink: 'syz.5.4998': attribute type 3 has an invalid length.
[  783.642547][T26797] xt_CT: You must specify a L4 protocol and not use inversions on it
[  783.684303][T26799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4999'.
[  783.713851][T26793] syzkaller0: entered promiscuous mode
[  783.737947][T26793] syzkaller0: entered allmulticast mode
[  783.957616][T26812] netlink: 'syz.3.5003': attribute type 1 has an invalid length.
[  784.154100][T26822] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  784.170826][T26822] syzkaller0: entered promiscuous mode
[  784.182682][T26822] syzkaller0: entered allmulticast mode
[  784.210079][T26822] netem: change failed
[  784.272557][T26837] netlink: 'syz.5.5005': attribute type 1 has an invalid length.
[  784.286631][T26837] netlink: 'syz.5.5005': attribute type 2 has an invalid length.
[  784.306230][T26837] netlink: 'syz.5.5005': attribute type 2 has an invalid length.
[  784.336487][T26837] netlink: 'syz.5.5005': attribute type 2 has an invalid length.
[  784.356484][T26837] netlink: 'syz.5.5005': attribute type 1 has an invalid length.
[  784.370595][T26837] netlink: 'syz.5.5005': attribute type 2 has an invalid length.
[  784.536563][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  784.696615][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  784.776941][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  784.879568][T26869] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  784.951281][T26820] tipc: Resetting bearer <eth:syzkaller0>
[  784.984916][T26820] tipc: Disabling bearer <eth:syzkaller0>
[  785.127974][T26879] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  785.159948][T26881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  785.381926][T26892] syzkaller1: entered allmulticast mode
[  785.859078][T26918] netlink: 'syz.0.5029': attribute type 5 has an invalid length.
[  786.727523][T26968] team0: Mode changed to "activebackup"
[  786.747673][T24653] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  786.766556][T24653] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  786.785533][T26955] syzkaller0: entered promiscuous mode
[  786.806911][T26955] syzkaller0: entered allmulticast mode
[  786.850931][T24653] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  786.866532][T24653] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  786.948123][T26983] __nla_validate_parse: 8 callbacks suppressed
[  786.948154][T26983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5044'.
[  787.024651][T26982] 8021q: adding VLAN 0 to HW filter on device bond0
[  787.037052][T26982] 8021q: adding VLAN 0 to HW filter on device team0
[  787.051823][T26982] 8021q: adding VLAN 0 to HW filter on device batadv0
[  787.100757][   T12] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  787.115051][ T5731] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  787.148406][T26982] batadv_slave_0: left promiscuous mode
[  787.156223][T26982] xfrm0: left promiscuous mode
[  787.164116][T26982] xfrm0: left allmulticast mode
[  787.179900][T26982] veth1_vlan: left promiscuous mode
[  787.187407][T26982] veth0_vlan: left promiscuous mode
[  787.193732][T26982] veth0_vlan: entered promiscuous mode
[  787.206229][T26982] veth1_vlan: entered promiscuous mode
[  787.232058][T26982] veth1_macvtap: left promiscuous mode
[  787.239886][T26982] veth0_macvtap: left promiscuous mode
[  787.249618][T26982] veth0_macvtap: entered promiscuous mode
[  787.257095][T26982] veth1_macvtap: entered promiscuous mode
[  787.627890][T26999] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5047'.
[  792.697142][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  792.705891][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  792.714949][T16821] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  792.727073][T21373] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  793.042444][T26982] gretap2: refused to change device tx_queue_len
[  793.050294][T26982] A link change request failed with some changes committed already. Interface gretap2 may have been left with an inconsistent configuration, please check.
[  793.067974][T26982] syz.0.5042 (26982) used greatest stack depth: 15272 bytes left
[  793.117211][T26983] ip6tnl1: entered allmulticast mode
[  793.234280][T26988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5043'.
[  793.295196][T24652] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  793.327646][T24652] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  793.347383][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  793.547512][T21372] syz1: Port: 1 Link ACTIVE
[  793.548257][T27008] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5049'.
[  793.604500][T27009] netlink: 300 bytes leftover after parsing attributes in process `syz.0.5049'.
[  793.641076][T24652] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  793.674264][T24652] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  793.708963][T24652] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  793.736632][T24652] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  793.766051][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'.
[  793.791987][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'.
[  793.821112][T24652] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  793.840705][T24652] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  793.876666][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'.
[  793.903231][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'.
[  793.944368][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'.
[  793.974150][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'.
[  794.015907][T27015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5051'.
[  794.170135][T27026] sctp: [Deprecated]: syz.0.5053 (pid 27026) Use of int in maxseg socket option.
[  794.170135][T27026] Use struct sctp_assoc_value instead
[  794.491040][T27041] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  794.894388][T27062] validate_nla: 2 callbacks suppressed
[  794.894406][T27062] netlink: 'syz.0.5062': attribute type 4 has an invalid length.
[  794.961591][T27066] netlink: 'syz.0.5062': attribute type 4 has an invalid length.
[  795.023174][T27064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  795.238283][T27076] netlink: zone id is out of range
[  795.286025][T27076] netlink: zone id is out of range
[  795.309117][T27076] netlink: zone id is out of range
[  795.346505][T27076] netlink: zone id is out of range
[  795.351791][T27076] netlink: zone id is out of range
[  795.364189][T27076] netlink: zone id is out of range
[  796.257407][   T29] audit: type=1800 audit(1778376108.085:10): pid=27115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5076" name="memory.events" dev="tmpfs" ino=2008 res=0 errno=0
[  796.770069][T27142] geneve1: entered promiscuous mode
[  797.830063][ T7526] net_ratelimit: 340 callbacks suppressed
[  797.830081][ T7526] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  797.912104][T27185] netlink: ct family unspecified
[  797.938746][T27185] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  798.458039][    C0] ip6_tunnel:  xmit: Local address not yet configured!
[  799.592286][T27223] netlink: 'syz.4.5110': attribute type 4 has an invalid length.
[  799.712344][T27219] netlink: 'syz.4.5110': attribute type 4 has an invalid length.
[  800.224278][T27242] netlink: 'syz.1.5116': attribute type 1 has an invalid length.
[  800.278589][T27244] __nla_validate_parse: 56 callbacks suppressed
[  800.278608][T27244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5117'.
[  800.354427][T27242] 8021q: adding VLAN 0 to HW filter on device bond6
[  800.403097][T27254] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5119'.
[  800.476550][T27250] macvlan0: entered promiscuous mode
[  800.482387][T27250] macvlan0: entered allmulticast mode
[  800.493659][T27250] bond6: (slave macvlan0): Opening slave failed
[  800.508758][T27255] netlink: 'syz.1.5116': attribute type 10 has an invalid length.
[  800.830737][T27271] openvswitch: netlink: Actions may not be safe on all matching packets
[  800.864692][T27271] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5123'.
[  800.969029][T27282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5126'.
[  801.002071][T27280] xt_TCPMSS: Only works on TCP SYN packets
[  801.065739][T27275] bridge_slave_0: left allmulticast mode
[  801.076591][T27275] bridge_slave_0: left promiscuous mode
[  801.089999][T27275] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.146054][T27275] bond0: (slave bond_slave_0): Releasing backup interface
[  801.183386][T27275] bond_slave_0: left allmulticast mode
[  801.218456][T27275] bond0: (slave bond_slave_1): Releasing backup interface
[  801.243845][T27275] bond_slave_1: left allmulticast mode
[  801.278841][T27275] team0: Port device team_slave_0 removed
[  801.305818][T27275] team0: Port device team_slave_1 removed
[  801.341336][T27275] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  801.354265][T27275] batman_adv: batadv0: Removing interface: batadv_slave_0
[  801.364337][T27275] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  801.383609][T27275] batman_adv: batadv0: Removing interface: batadv_slave_1
[  801.407950][T27275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  801.533085][T27296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5130'.
[  801.586887][T27304] netlink: 'syz.1.5132': attribute type 1 has an invalid length.
[  801.668241][T27304] bond7: entered promiscuous mode
[  801.677790][T27304] 8021q: adding VLAN 0 to HW filter on device bond7
[  801.723613][T27310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  801.918597][T27321] netlink: 'syz.5.5135': attribute type 16 has an invalid length.
[  801.981863][T27321] netlink: 'syz.5.5135': attribute type 17 has an invalid length.
[  802.032600][T24652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  802.061451][T24652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  802.079065][T27319] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5137'.
[  802.108858][T27330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  802.210701][T27321] 8021q: adding VLAN 0 to HW filter on device `
[  802.269502][T27321] 8021q: adding VLAN 0 to HW filter on device batadv0
[  802.367271][T27321] hsr_slave_0: left allmulticast mode
[  802.376005][T27321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  802.387861][T27321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  802.406176][T27321] veth1_macvtap: left promiscuous mode
[  802.413704][T27321] veth0_macvtap: left promiscuous mode
[  802.421523][T27321] veth0_macvtap: entered promiscuous mode
[  802.430134][T27321] veth1_macvtap: entered promiscuous mode
[  802.441663][T27321] geneve1: left promiscuous mode
[  802.459977][T27321] 8021q: adding VLAN 0 to HW filter on device bond1
[  802.470125][T27321] 8021q: adding VLAN 0 to HW filter on device eth0
[  802.480835][T27321] 8021q: adding VLAN 0 to HW filter on device eth1
[  802.491110][T27321] 8021q: adding VLAN 0 to HW filter on device eth2
[  802.501747][T27321] 8021q: adding VLAN 0 to HW filter on device eth3
[  802.516051][T27321] bond2: left promiscuous mode
[  802.525164][T27321] 8021q: adding VLAN 0 to HW filter on device bond2
[  802.552828][T27321] ip6erspan0: left promiscuous mode
[  802.564309][T27321] ip6erspan0: left allmulticast mode
[  802.578982][T27321] bond3: left promiscuous mode
[  802.583801][T27321] bond3: left allmulticast mode
[  802.617556][T27321] 8021q: adding VLAN 0 to HW filter on device bond3
[  802.642913][T27321] 8021q: adding VLAN 0 to HW filter on device bond4
[  802.654887][T27321] bond5: left promiscuous mode
[  802.661180][T27321] vti0: left promiscuous mode
[  802.667571][T27321] 8021q: adding VLAN 0 to HW filter on device bond5
[  802.682323][T27321] ip6tnl1: left allmulticast mode
[  802.737971][T16827] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  802.746977][T16827] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  802.850362][T27336] netlink: 'syz.5.5140': attribute type 1 has an invalid length.
[  802.875470][T16827] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  802.889237][T16827] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  802.922890][T27347] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[  802.927750][T27336] bond6: entered promiscuous mode
[  802.937438][T27336] 8021q: adding VLAN 0 to HW filter on device bond6
[  802.974339][T27336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5140'.
[  802.983758][T27336] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5140'.
[  803.079130][T27351] Unsupported ieee802154 address type: 0
[  803.580174][ T7528] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  803.642885][T27376] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5150'.
[  803.741265][T27383] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5151'.
[  803.783030][T27371] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  804.633330][T27407] netlink: 'syz.0.5157': attribute type 4 has an invalid length.
[  804.697610][T27414] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  804.780336][T27414] tipc: Started in network mode
[  804.785417][T27414] tipc: Node identity 080211, cluster identity 4711
[  804.799499][T27414] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  804.818112][T27417] mac80211_hwsim hwsim50 syzkaller0: left promiscuous mode
[  804.841185][T27417] mac80211_hwsim hwsim50 syzkaller0: left allmulticast mode
[  805.001170][T27425] netlink: 'syz.5.5161': attribute type 1 has an invalid length.
[  805.035311][T27425] netlink: 'syz.5.5161': attribute type 4 has an invalid length.
[  805.120297][T27427] syzkaller0: mtu less than device minimum
[  805.445856][T27447] __nla_validate_parse: 6 callbacks suppressed
[  805.445878][T27447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5167'.
[  805.854729][T27465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5171'.
[  805.917066][ T7526] tipc: Node number set to 134353152
[  806.818317][T27494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5178'.
[  806.969775][T27502] tipc: New replicast peer: 255.255.255.255
[  806.986897][T27502] tipc: Enabled bearer <udp:syz2>, priority 5
[  807.015366][T27501] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  807.076072][T27501] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  807.321041][T27514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5182'.
[  807.354453][T27514] netlink: 'syz.1.5182': attribute type 39 has an invalid length.
[  807.486690][T27514] hsr_slave_0 (unregistering): left promiscuous mode
[  807.632527][T27531] netlink: 'syz.5.5185': attribute type 13 has an invalid length.
[  807.655498][T27531] netlink: 'syz.5.5185': attribute type 17 has an invalid length.
[  807.867931][T27542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5187'.
[  808.668173][T27531] ip6gretap0: refused to change device tx_queue_len
[  808.682200][T27531] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  808.707285][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  808.714803][T16824] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  808.714927][T16824] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  808.764337][T16911] tipc: Node number set to 769
[  808.800029][T16824] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  808.835447][T16824] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  808.940405][T27383] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[  809.154301][T27586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5196'.
[  809.336730][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  809.343720][T16911] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  809.431622][T27605] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20003
[  811.258439][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  811.920721][T27578] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  812.378174][T27659] syz_tun: entered allmulticast mode
[  812.423152][T27658] syz_tun: left allmulticast mode
[  812.657089][T27670] netlink: 'syz.5.5210': attribute type 1 has an invalid length.
[  812.851318][T27670] 8021q: adding VLAN 0 to HW filter on device bond7
[  813.340811][T27704] netlink: 'syz.5.5217': attribute type 13 has an invalid length.
[  815.098841][T21372] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  815.195147][T27775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5236'.
[  815.347850][T27779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5238'.
[  815.377728][T27779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5238'.
[  815.586141][T27799] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  816.068579][T27825] syzkaller0: entered promiscuous mode
[  816.078735][T27825] syzkaller0: entered allmulticast mode
[  816.357139][T27862] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5252'.
[  816.541580][T27869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5253'.
[  820.032196][T27843] batadv_slave_0: entered promiscuous mode
[  820.039078][T27852] batadv_slave_0: left promiscuous mode
[  820.045084][T27825] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  820.117954][T27876] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5254'.
[  820.169887][T27878] netlink: 'syz.5.5255': attribute type 4 has an invalid length.
[  820.179289][T27878] netlink: 240 bytes leftover after parsing attributes in process `syz.5.5255'.
[  820.217725][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  820.879126][T27857] bond4: left promiscuous mode
[  820.884058][T27857] ip6gretap1: left promiscuous mode
[  820.891942][T27857] ip6gretap1: left allmulticast mode
[  820.898056][T27857] bridge2: left allmulticast mode
[  820.903674][T27857] bond8: left promiscuous mode
[  820.909082][T27857] bridge4: left promiscuous mode
[  820.914308][T27857] vlan2: left promiscuous mode
[  820.919731][T27857] geneve1: left promiscuous mode
[  820.924770][T27857] vlan2: left allmulticast mode
[  820.930641][T27857] geneve1: left allmulticast mode
[  820.973931][T27824] tipc: Resetting bearer <eth:syzkaller0>
[  821.002783][T27824] tipc: Disabling bearer <eth:syzkaller0>
[  821.030093][T16911] syz1: Port: 1 Link DOWN
[  821.036220][T24653] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  821.055938][T24653] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  821.072640][T24653] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  821.098109][T24653] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  821.143105][T24653] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  821.157030][T24653] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  821.163825][T27901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5258'.
[  821.180429][T24653] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  821.210641][T24653] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  822.004976][T27948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5270'.
[  822.109713][T27955] netlink: 'syz.3.5273': attribute type 1 has an invalid length.
[  822.134173][T27911] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5261'.
[  822.200141][T27955] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR
[  822.465042][T27973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5275'.
[  822.552337][T27972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5276'.
[  823.821228][T28008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5286'.
[  823.846646][T28008] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5286'.
[  823.865162][T28008] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5286'.
[  823.911948][T28014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  824.021870][T28024] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5291'.
[  824.067613][T28024] tipc: Failed to remove unknown binding: 66,0,0/769:2610001722/2610001723
[  824.148038][T28024] tipc: Failed to remove unknown binding: 66,0,0/769:2610001722/2610001723
[  824.305501][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5292'.
[  824.551130][T28050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  824.558431][T28050] IPv6: NLM_F_CREATE should be set when creating new route
[  824.565698][T28050] IPv6: NLM_F_CREATE should be set when creating new route
[  826.399375][T28158] __nla_validate_parse: 2 callbacks suppressed
[  826.399393][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  826.457863][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  826.495324][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  826.537329][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  826.541719][T28164] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5324'.
[  826.592687][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  826.646751][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  826.703953][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  826.730269][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  826.774436][T28158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5323'.
[  826.785728][T28178] IPVS: Unknown mcast interface: bridge_slave_0
[  827.005282][T28186] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  827.193756][T28198] openvswitch: netlink: IP tunnel TTL not specified.
[  827.275446][T28201] gretap0: entered promiscuous mode
[  827.509487][T28228] tap0: tun_chr_ioctl cmd 1074025677
[  827.527712][T28228] tap0: linktype set to 0
[  827.542902][T28231] netlink: 'syz.5.5337': attribute type 1 has an invalid length.
[  827.816034][T28245] vxcan2: entered allmulticast mode
[  828.005544][T28258] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 4
[  828.228676][T28265] block nbd1: not configured, cannot reconfigure
[  828.480257][T28282] netlink: 'syz.4.5354': attribute type 1 has an invalid length.
[  828.514916][T28284] netlink: 'syz.4.5354': attribute type 1 has an invalid length.
[  829.016671][T28318] 8021q: adding VLAN 0 to HW filter on device ipvlan0
[  829.059381][T28319] 8021q: adding VLAN 0 to HW filter on device ipvlan1
[  829.421196][T28334] openvswitch: netlink: IPv4 tun info is not correct
[  829.691532][T28345] bond8 (unregistering): Released all slaves
[  830.099406][T28380] xfrm0: Caught tx_queue_len zero misconfig
[  830.105601][T28380] netem: change failed
[  830.472291][T28398] netlink: 'syz.0.5383': attribute type 13 has an invalid length.
[  830.494893][T28398] netlink: 'syz.0.5383': attribute type 17 has an invalid length.
[  830.607194][T28398] 8021q: adding VLAN 0 to HW filter on device bond0
[  830.630429][T28398] 8021q: adding VLAN 0 to HW filter on device team0
[  830.664154][T28398] 8021q: adding VLAN 0 to HW filter on device batadv0
[  830.771048][T16821] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  830.782076][T27882] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  830.875084][T28398] veth1_vlan: left promiscuous mode
[  830.894809][T28398] veth0_vlan: left promiscuous mode
[  830.919401][T28398] veth0_vlan: entered promiscuous mode
[  830.940668][T28398] veth1_vlan: entered promiscuous mode
[  830.968007][T28398] veth1_macvtap: left promiscuous mode
[  830.982685][T28398] veth0_macvtap: left promiscuous mode
[  830.999211][T28398] veth0_macvtap: entered promiscuous mode
[  831.012680][T28398] veth1_macvtap: entered promiscuous mode
[  831.482605][T28425] FAULT_INJECTION: forcing a failure.
[  831.482605][T28425] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  831.528750][T28425] CPU: 0 UID: 0 PID: 28425 Comm: syz.4.5389 Not tainted syzkaller #0 PREEMPT(full) 
[  831.528775][T28425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  831.528786][T28425] Call Trace:
[  831.528794][T28425]  <TASK>
[  831.528801][T28425]  dump_stack_lvl+0xe8/0x150
[  831.528827][T28425]  should_fail_ex+0x412/0x560
[  831.528855][T28425]  _copy_from_iter+0x1d3/0x1670
[  831.528881][T28425]  ? rcu_is_watching+0x15/0xb0
[  831.528905][T28425]  ? __pfx__copy_from_iter+0x10/0x10
[  831.528932][T28425]  ? netlink_sendmsg+0x650/0xb40
[  831.528954][T28425]  ? skb_put+0x11b/0x210
[  831.528980][T28425]  netlink_sendmsg+0x6c0/0xb40
[  831.529011][T28425]  ? __pfx_netlink_sendmsg+0x10/0x10
[  831.529037][T28425]  ? aa_sock_msg_perm+0xf1/0x1b0
[  831.529059][T28425]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  831.529083][T28425]  ____sys_sendmsg+0x972/0x9f0
[  831.529105][T28425]  ? __might_fault+0xaf/0x130
[  831.529132][T28425]  ? __pfx_____sys_sendmsg+0x10/0x10
[  831.529163][T28425]  ? import_iovec+0x73/0xa0
[  831.529188][T28425]  ___sys_sendmsg+0x2a5/0x360
[  831.529210][T28425]  ? __lock_acquire+0x6b5/0x2cf0
[  831.529229][T28425]  ? __pfx____sys_sendmsg+0x10/0x10
[  831.529277][T28425]  ? __fget_files+0x2a/0x420
[  831.529298][T28425]  ? __fget_files+0x3a0/0x420
[  831.529330][T28425]  __x64_sys_sendmsg+0x1bd/0x2a0
[  831.529359][T28425]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  831.529398][T28425]  ? __pfx_ksys_write+0x10/0x10
[  831.529431][T28425]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.529452][T28425]  do_syscall_64+0x15f/0xf80
[  831.529470][T28425]  ? trace_irq_disable+0x3b/0x140
[  831.529496][T28425]  ? clear_bhb_loop+0x40/0x90
[  831.529518][T28425]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  831.529534][T28425] RIP: 0033:0x7f5aae79cdd9
[  831.529550][T28425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  831.529564][T28425] RSP: 002b:00007f5aaf6ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  831.529580][T28425] RAX: ffffffffffffffda RBX: 00007f5aaea15fa0 RCX: 00007f5aae79cdd9
[  831.529592][T28425] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000020
[  831.529602][T28425] RBP: 00007f5aaf6ba090 R08: 0000000000000000 R09: 0000000000000000
[  831.529611][T28425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  831.529621][T28425] R13: 00007f5aaea16038 R14: 00007f5aaea15fa0 R15: 00007ffde3480648
[  831.529648][T28425]  </TASK>
[  832.320314][T28398] gretap2: refused to change device tx_queue_len
[  832.375052][T28398] A link change request failed with some changes committed already. Interface gretap2 may have been left with an inconsistent configuration, please check.
[  832.665120][T10791] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  832.689537][T10791] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  832.725019][T20480] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  832.744269][T20480] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  832.773715][T18643] syz1: Port: 1 Link ACTIVE
[  832.799730][ T3320] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  832.828584][T20480] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  832.853405][T20480] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  832.890068][T20480] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  832.919472][T20480] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  832.967978][T28472] __nla_validate_parse: 132 callbacks suppressed
[  832.967995][T28472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5397'.
[  833.067973][T28472] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5397'.
[  833.257424][T28477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5398'.
[  833.319985][T28480] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  833.366018][T28480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5399'.
[  833.495182][T28490] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5401'.
[  833.587405][T28490] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5401'.
[  833.643092][T28494] netlink: 'syz.3.5404': attribute type 13 has an invalid length.
[  833.659589][T28494] netlink: 'syz.3.5404': attribute type 17 has an invalid length.
[  834.175454][T28508] FAULT_INJECTION: forcing a failure.
[  834.175454][T28508] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  834.207942][T28508] CPU: 1 UID: 0 PID: 28508 Comm: syz.0.5406 Not tainted syzkaller #0 PREEMPT(full) 
[  834.207969][T28508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  834.207981][T28508] Call Trace:
[  834.207989][T28508]  <TASK>
[  834.207997][T28508]  dump_stack_lvl+0xe8/0x150
[  834.208026][T28508]  should_fail_ex+0x412/0x560
[  834.208055][T28508]  _copy_from_iter+0x1d3/0x1670
[  834.208083][T28508]  ? rcu_is_watching+0x15/0xb0
[  834.208111][T28508]  ? __pfx__copy_from_iter+0x10/0x10
[  834.208143][T28508]  ? netlink_sendmsg+0x650/0xb40
[  834.208169][T28508]  ? skb_put+0x11b/0x210
[  834.208197][T28508]  netlink_sendmsg+0x6c0/0xb40
[  834.208230][T28508]  ? __pfx_netlink_sendmsg+0x10/0x10
[  834.208259][T28508]  ? aa_sock_msg_perm+0xf1/0x1b0
[  834.208285][T28508]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  834.208313][T28508]  ____sys_sendmsg+0x972/0x9f0
[  834.208339][T28508]  ? __might_fault+0xaf/0x130
[  834.208368][T28508]  ? __pfx_____sys_sendmsg+0x10/0x10
[  834.208403][T28508]  ? import_iovec+0x73/0xa0
[  834.208432][T28508]  ___sys_sendmsg+0x2a5/0x360
[  834.208457][T28508]  ? __lock_acquire+0x6b5/0x2cf0
[  834.208481][T28508]  ? __pfx____sys_sendmsg+0x10/0x10
[  834.208551][T28508]  ? __fget_files+0x2a/0x420
[  834.208573][T28508]  ? __fget_files+0x3a0/0x420
[  834.208604][T28508]  __x64_sys_sendmsg+0x1bd/0x2a0
[  834.208633][T28508]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  834.208669][T28508]  ? __pfx_ksys_write+0x10/0x10
[  834.208704][T28508]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.208725][T28508]  do_syscall_64+0x15f/0xf80
[  834.208742][T28508]  ? trace_irq_disable+0x3b/0x140
[  834.208767][T28508]  ? clear_bhb_loop+0x40/0x90
[  834.208789][T28508]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  834.208807][T28508] RIP: 0033:0x7fdadf99cdd9
[  834.208826][T28508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  834.208841][T28508] RSP: 002b:00007fdae0802028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  834.208862][T28508] RAX: ffffffffffffffda RBX: 00007fdadfc15fa0 RCX: 00007fdadf99cdd9
[  834.208875][T28508] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000020
[  834.208887][T28508] RBP: 00007fdae0802090 R08: 0000000000000000 R09: 0000000000000000
[  834.208899][T28508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  834.208910][T28508] R13: 00007fdadfc16038 R14: 00007fdadfc15fa0 R15: 00007ffd61809678
[  834.208941][T28508]  </TASK>
[  834.782713][T28494] syz_tun: refused to change device tx_queue_len
[  834.800951][T28494] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  835.203047][T28510] syzkaller0: entered promiscuous mode
[  835.214599][T28510] syzkaller0: entered allmulticast mode
[  835.547064][T28543] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5413'.
[  835.898940][T20480] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  836.199623][T28553] netlink: 716 bytes leftover after parsing attributes in process `syz.5.5415'.
[  836.219397][ T5782] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  836.221691][T28553] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5415'.
[  836.857126][    C1] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  837.017168][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  838.362033][T28563] IPv6: NLM_F_CREATE should be specified when creating new route
[  838.877431][T28567] xt_hashlimit: size too large, truncated to 1048576
[  838.884279][T28567] xt_hashlimit: max too large, truncated to 1048576
[  839.258033][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5418'.
[  841.289848][T16911] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  841.348959][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  842.150961][T28533] mac80211_hwsim hwsim50 syzkaller0: entered promiscuous mode
[  842.158848][T28533] mac80211_hwsim hwsim50 syzkaller0: entered allmulticast mode
[  842.167941][T28533] tipc: Resetting bearer <eth:syzkaller0>
[  842.420347][T28581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5419'.
[  842.533791][T28583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5421'.
[  842.842636][T28592] sctp: [Deprecated]: syz.4.5424 (pid 28592) Use of struct sctp_assoc_value in delayed_ack socket option.
[  842.842636][T28592] Use struct sctp_sack_info instead
[  842.919712][T28594] veth1_macvtap: left promiscuous mode
[  842.950296][T28594] macsec0: entered promiscuous mode
[  842.955672][T28594] macsec0: entered allmulticast mode
[  843.256777][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[  843.635217][T28617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5433'.
[  844.039033][T28626] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  845.009665][T28657] netlink: 'syz.3.5444': attribute type 3 has an invalid length.
[  845.324855][T28658] udevd[28658]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory
[  845.823200][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  846.652042][T28679] netlink: 'syz.3.5450': attribute type 2 has an invalid length.
[  846.713202][T28682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5450'.
[  846.755660][T28679] netlink: 'syz.3.5450': attribute type 2 has an invalid length.
[  846.804141][T28682] netlink: 66 bytes leftover after parsing attributes in process `syz.3.5450'.
[  847.134279][T28646] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5441'.
[  847.150128][T18643] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  847.761442][T28694] netlink: 364 bytes leftover after parsing attributes in process `syz.4.5453'.
[  848.208105][T28714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5457'.
[  848.227143][T28714] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5457'.
[  848.242135][T28714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5457'.
[  848.253689][T28714] netlink: 348 bytes leftover after parsing attributes in process `syz.1.5457'.
[  848.294327][T28719] netlink: 'syz.4.5460': attribute type 62 has an invalid length.
[  848.343118][T28719] : entered promiscuous mode
[  848.376958][    C1] ip6_tunnel:  xmit: Local address not yet configured!
[  848.676196][T28734] IPv6: sit1: Disabled Multicast RS
[  848.947699][T28740] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  848.961339][T28740] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.325710][T28761] netlink: 'syz.1.5471': attribute type 1 has an invalid length.
[  849.349379][T28740] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  849.360856][T28740] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.425701][T28761] bond8: entered promiscuous mode
[  849.434120][T28761] 8021q: adding VLAN 0 to HW filter on device bond8
[  849.447461][T28753] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5469'.
[  849.519919][T28740] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  849.549329][T28740] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  849.898194][T28740] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  849.908033][T26134] Bluetooth: hci4: command 0x0405 tx timeout
[  849.961883][T28740] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  850.017369][T28778] netlink: 'syz.1.5476': attribute type 39 has an invalid length.
[  850.269932][T28789] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5478'.
[  850.302379][T28789] netlink: 'syz.4.5478': attribute type 1 has an invalid length.
[  850.422665][T16821] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  850.439704][T16821] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  850.625052][T16821] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  850.635097][T16821] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  850.663028][T24649] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  850.680143][T24649] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  850.796091][T24649] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  850.814980][T24649] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  850.838147][T28805] syzkaller0: entered promiscuous mode
[  850.852424][T28805] syzkaller0: entered allmulticast mode
[  851.036120][T28819] netlink: 'syz.1.5487': attribute type 10 has an invalid length.
[  851.174933][T28819] team0: Port device dummy0 added
[  851.495370][T28820] syzkaller0: entered promiscuous mode
[  851.512602][T28820] syzkaller0: entered allmulticast mode
[  851.663048][T28848] netlink: 'syz.1.5492': attribute type 1 has an invalid length.
[  852.865412][ T5731] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  857.814402][T26134] block nbd2: Receive control failed (result -32)
[  857.840275][T19132] block nbd2: Receive control failed (result -32)
[  857.980667][T21373] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  858.111025][T28906] bond9: option resend_igmp: invalid value (2878)
[  858.118320][T28906] bond9: option resend_igmp: allowed values 0 - 255
[  858.130302][T28906] bond9 (unregistering): Released all slaves
[  858.519800][T28932] __nla_validate_parse: 6 callbacks suppressed
[  858.519820][T28932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5508'.
[  858.540670][T28931] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5510'.
[  858.612099][T28932] netlink: 'syz.3.5508': attribute type 1 has an invalid length.
[  858.665465][T28932] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5508'.
[  858.737889][T28945] netlink: 'syz.0.5512': attribute type 39 has an invalid length.
[  858.850409][T28948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5514'.
[  859.503519][T28959] netlink: 'syz.4.5515': attribute type 1 has an invalid length.
[  859.578790][T28962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5516'.
[  859.980356][T28990] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5519'.
[  860.013570][T28990] netlink: 'syz.4.5519': attribute type 1 has an invalid length.
[  860.157846][T29000] netlink: 'syz.1.5524': attribute type 1 has an invalid length.
[  860.211400][T29000] 8021q: adding VLAN 0 to HW filter on device bond9
[  860.248718][T29001] bond9: (slave veth5): Enslaving as an active interface with an up link
[  860.461276][T29014] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5527'.
[  860.543338][T28986] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  860.562467][T28986] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  860.659433][T28986] tipc: Resetting bearer <eth:syzkaller0>
[  860.756023][T28986] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  860.791780][T28986] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  860.900249][T28986] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  860.929834][T28986] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  861.048611][T29024] sctp: [Deprecated]: syz.0.5531 (pid 29024) Use of int in maxseg socket option.
[  861.048611][T29024] Use struct sctp_assoc_value instead
[  861.061971][T28986] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  861.079814][T28986] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  861.164554][T29026] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) !
[  862.466694][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  862.811776][T29060] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.5538'.
[  863.020160][ T5782] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  863.055892][T29071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5541'.
[  863.265643][T29082] netlink: 'syz.4.5541': attribute type 1 has an invalid length.
[  863.297970][T29082] netlink: 276 bytes leftover after parsing attributes in process `syz.4.5541'.
[  863.543325][T29089] netlink: 'syz.0.5544': attribute type 2 has an invalid length.
[  863.579499][T29089] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5544'.
[  863.859730][T29087] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  864.022212][T29107] netlink: 'syz.3.5548': attribute type 2 has an invalid length.
[  864.120251][T29107] netlink: 'syz.3.5548': attribute type 2 has an invalid length.
[  864.266690][T29121] veth1_macvtap: entered promiscuous mode
[  864.329291][T29121] macsec0: entered promiscuous mode
[  864.715830][T29121] veth1_macvtap: left promiscuous mode
[  865.277466][T29138] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  865.306572][T29138] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.370348][T29143] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5556'.
[  865.399982][T29143] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5556'.
[  865.437215][T29149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5558'.
[  865.491831][T29153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5558'.
[  865.556763][T29138] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  865.567861][T29138] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.785274][T29138] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  865.796954][T29138] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.814994][T29167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5564'.
[  866.009045][T29138] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  866.022464][T29138] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  866.065293][T29172] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5567'.
[  866.074834][T29172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5567'.
[  866.095142][T29177] netlink: 'syz.3.5568': attribute type 1 has an invalid length.
[  866.107787][T29172] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5567'.
[  866.132323][T29177] 8021q: adding VLAN 0 to HW filter on device bond9
[  866.132741][T29180] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5567'.
[  866.168172][T29177] bond9: (slave geneve3): making interface the new active one
[  866.178836][T29177] bond9: (slave geneve3): Enslaving as an active interface with an up link
[  866.204937][T16821] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  866.222393][T16821] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  866.277858][T16821] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  866.295601][T29185] netlink: 'syz.4.5569': attribute type 12 has an invalid length.
[  866.307655][T29185] netlink: 'syz.4.5569': attribute type 29 has an invalid length.
[  866.315579][T29185] netlink: 'syz.4.5569': attribute type 1 has an invalid length.
[  866.325703][T20480] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  866.384554][T20480] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  866.395408][T20480] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  866.526283][T24649] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  866.539707][T24649] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  866.635373][T24649] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  866.650880][T29194] sctp: [Deprecated]: syz.4.5572 (pid 29194) Use of struct sctp_assoc_value in delayed_ack socket option.
[  866.650880][T29194] Use struct sctp_sack_info instead
[  866.682864][T24649] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  866.710864][T29196] sctp: [Deprecated]: syz.4.5572 (pid 29196) Use of struct sctp_assoc_value in delayed_ack socket option.
[  866.710864][T29196] Use struct sctp_sack_info instead
[  866.817678][T16827] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  866.827144][T16827] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  867.081262][T29208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  867.360327][T29219] netlink: 'syz.1.5580': attribute type 1 has an invalid length.
[  867.400365][T29219] 8021q: adding VLAN 0 to HW filter on device bond10
[  867.518331][T29219] bond10: (slave syz_tun): Enslaving as a backup interface with an up link
[  867.675876][T29241] xt_l2tp: invalid flags combination: 8
[  867.694505][T29241] netlink: 'syz.5.5585': attribute type 1 has an invalid length.
[  867.752443][T29241] gre0: entered promiscuous mode
[  867.770612][T29241] gre0: entered allmulticast mode
[  867.799553][T29253] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  868.059007][T28974] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  868.282143][T29291] netlink: 'syz.3.5596': attribute type 1 has an invalid length.
[  868.357773][T29291] 8021q: adding VLAN 0 to HW filter on device bond10
[  868.395600][T29301] syzkaller0: entered promiscuous mode
[  868.407812][T29301] syzkaller0: entered allmulticast mode
[  868.519956][T29307] bond8: option arp_all_targets: invalid value (129)
[  868.531145][T29307] bond8 (unregistering): Released all slaves
[  868.570789][T29316] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  869.105369][T29355] __nla_validate_parse: 5 callbacks suppressed
[  869.105399][T29355] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5615'.
[  869.274702][T29341] nbd3: detected capacity change from 0 to 63
[  869.313158][T29367] syzkaller0: entered promiscuous mode
[  869.319401][T29367] syzkaller0: entered allmulticast mode
[  869.331202][T19132] block nbd3: Receive control failed (result -104)
[  869.343627][T26134] block nbd3: Receive control failed (result -32)
[  869.464549][T29372] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004
[  869.474047][T29372] netlink: 'syz.4.5624': attribute type 3 has an invalid length.
[  869.521353][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5623'.
[  869.546074][T29376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5623'.
[  869.574568][T29376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5623'.
[  869.594223][T29376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5623'.
[  869.799128][T29380] netlink: 'syz.0.5623': attribute type 4 has an invalid length.
[  869.868366][T29384] netlink: 'syz.0.5623': attribute type 4 has an invalid length.
[  870.038854][   T29] audit: type=1800 audit(1778376181.865:11): pid=29407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5632" name="memory.events" dev="tmpfs" ino=2660 res=0 errno=0
[  870.111301][T29407] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  870.149647][T29407] bond11 (unregistering): Released all slaves
[  870.220075][T29408] bond11: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  870.244496][T29408] bond11 (unregistering): Released all slaves
[  870.499739][T29429] netlink: 'syz.3.5637': attribute type 10 has an invalid length.
[  870.570847][T29431] netlink: 'syz.3.5637': attribute type 10 has an invalid length.
[  870.891705][T29456] netlink: 88 bytes leftover after parsing attributes in process `syz.1.5642'.
[  872.279082][T16821] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  872.304401][T16821] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  872.336826][T16821] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  872.341760][T29482] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  872.358404][T16821] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  872.408482][T16821] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  872.433294][T16821] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  872.462964][T16821] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  872.482084][T16821] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  872.550647][T29496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5651'.
[  872.852987][   T29] audit: type=1800 audit(1778376184.675:12): pid=29484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5647" name="memory.events" dev="tmpfs" ino=2681 res=0 errno=0
[  873.340789][ T7526] IPVS: wlc: UDP 127.0.0.1:20003 - no destination available
[  873.435239][T29528] xt_CT: You must specify a L4 protocol and not use inversions on it
[  873.447549][T29526] syzkaller0: entered promiscuous mode
[  873.453189][T29526] syzkaller0: entered allmulticast mode
[  874.648903][T29573] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5668'.
[  874.658437][T29573] netlink: 'syz.0.5668': attribute type 1 has an invalid length.
[  877.259558][T29562] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5666'.
[  877.655641][T29605] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  877.873364][T29618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.926537][T29623] netlink: 'syz.5.5680': attribute type 39 has an invalid length.
[  877.957865][T29621] gretap0: left promiscuous mode
[  878.842501][T29621] bridge0: left promiscuous mode
[  878.856066][T29621] 8021q: adding VLAN 0 to HW filter on device bond0
[  878.866903][T29621] 8021q: adding VLAN 0 to HW filter on device team0
[  878.886691][T29621] 8021q: adding VLAN 0 to HW filter on device batadv0
[  878.928882][T29621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  878.942646][T29621] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  879.114029][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  879.133860][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  879.144247][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  879.238227][T29656] syzkaller1: entered promiscuous mode
[  879.254421][T29656] syzkaller1: entered allmulticast mode
[  879.646420][T29670] bond10: option packets_per_slave: invalid value (5001287)
[  879.657529][T29670] bond10: option packets_per_slave: allowed values 0 - 65535
[  879.674955][T29670] bond10 (unregistering): Released all slaves
[  879.724540][T29650] infiniband syz2: set down
[  879.745104][T29650] infiniband syz2: added ip6_vti0
[  879.765583][T27882] ip6_vti0 speed is unknown, defaulting to 1000
[  879.781997][T29650] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  879.814116][T29650] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  879.849071][T29650] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  879.961384][T29650] RDS/IB: syz2: added
[  879.970552][T29650] smc: adding ib device syz2 with port count 1
[  879.972822][T29680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5695'.
[  879.985498][T29650] smc:    ib device syz2 port 1 has pnetid S (user defined)
[  880.097155][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  880.124713][T16861] ip6_vti0 speed is unknown, defaulting to 1000
[  880.143483][T29678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5695'.
[  880.270755][T29686] netlink: 'syz.0.5697': attribute type 8 has an invalid length.
[  880.275363][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5698'.
[  880.300105][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5698'.
[  880.331070][T29684] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5698'.
[  880.565957][T29695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5700'.
[  880.659752][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  881.169307][T29727] syz.3.5709 (29727) used obsolete PPPIOCDETACH ioctl
[  881.182989][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  881.312881][T29731] sctp: [Deprecated]: syz.3.5709 (pid 29731) Use of struct sctp_assoc_value in delayed_ack socket option.
[  881.312881][T29731] Use struct sctp_sack_info instead
[  881.391321][T29730] syzkaller0: entered promiscuous mode
[  881.397111][T29730] syzkaller0: entered allmulticast mode
[  881.408653][T29740] netlink: 4500 bytes leftover after parsing attributes in process `syz.5.5712'.
[  881.716233][T29754] netlink: 'syz.5.5716': attribute type 13 has an invalid length.
[  881.738313][T29754] netlink: 'syz.5.5716': attribute type 17 has an invalid length.
[  885.375134][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  885.457080][T29754] gre0: left promiscuous mode
[  885.466388][T29754] gre0: left allmulticast mode
[  885.622061][T29754] 8021q: adding VLAN 0 to HW filter on device `
[  885.652855][T29754] 8021q: adding VLAN 0 to HW filter on device batadv0
[  885.749236][T29754] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  885.760090][T29754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  885.778874][T29754] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  885.833273][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  886.163358][T29798] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5725'.
[  886.185088][T29799] netlink: 'syz.5.5726': attribute type 1 has an invalid length.
[  886.194575][T29799] netlink: 'syz.5.5726': attribute type 2 has an invalid length.
[  886.231898][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  886.497500][T29650] ip6_vti0 speed is unknown, defaulting to 1000
[  886.591082][T29806] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5729'.
[  886.655287][T29807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5728'.
[  887.157864][T29819] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  887.516238][T29828] sit2: entered promiscuous mode
[  887.551325][T29828] smc: ib device syz2 ibport 1 erased user defined pnetid S
[  887.665375][T29834] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.5737'.
[  887.704450][T29834] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  887.840430][T29840] ip6_vti0 speed is unknown, defaulting to 1000
[  887.862709][T29846] Bluetooth: MGMT ver 1.23
[  887.879419][T29846] netlink: 'syz.0.5741': attribute type 15 has an invalid length.
[  888.347631][T29864] tap0: tun_chr_ioctl cmd 2148553947
[  888.578993][T29868] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5748'.
[  888.599441][T29868] tipc: Invalid UDP bearer configuration
[  888.599500][T29868] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  889.378835][T29888] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5754'.
[  889.922826][T29900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5758'.
[  890.110683][T29915] netlink: 'syz.1.5760': attribute type 6 has an invalid length.
[  890.147264][T29915] netlink: 14589 bytes leftover after parsing attributes in process `syz.1.5760'.
[  890.215043][T29915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5760'.
[  890.382778][T29923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5761'.
[  890.870562][T29942] ip6_vti0 speed is unknown, defaulting to 1000
[  891.175561][T29958] __nla_validate_parse: 2 callbacks suppressed
[  891.175583][T29958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5770'.
[  891.199599][T29958] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5770'.
[  891.427099][T29962] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5773'.
[  891.685216][T29979] ipip1: entered promiscuous mode
[  892.017918][T29988] ip6_vti0 speed is unknown, defaulting to 1000
[  892.570241][T30012] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5784'.
[  892.695431][T30021] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5785'.
[  892.753887][T30021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5785'.
[  892.825636][T30026] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  892.832929][T30024] netlink: 'syz.5.5787': attribute type 1 has an invalid length.
[  893.070793][T30038] netlink: 'syz.0.5790': attribute type 1 has an invalid length.
[  893.157888][T30038] 8021q: adding VLAN 0 to HW filter on device bond10
[  893.183775][T30016] ip6_vti0 speed is unknown, defaulting to 1000
[  893.263912][T30041] vlan3: entered promiscuous mode
[  893.279499][T30041] bond10: entered promiscuous mode
[  893.285004][T30041] vlan3: entered allmulticast mode
[  893.304117][T30041] bond10: entered allmulticast mode
[  893.391980][T30038] bond10: (slave bridge7): making interface the new active one
[  893.405744][T30038] bridge7: entered promiscuous mode
[  893.419788][T30038] bridge7: entered allmulticast mode
[  893.439847][T30038] bond10: (slave bridge7): Enslaving as an active interface with an up link
[  893.941120][T30061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5793'.
[  894.102303][T30047] ip6_vti0 speed is unknown, defaulting to 1000
[  894.158328][T30062] sch_tbf: burst 88 is lower than device veth15 mtu (1514) !
[  894.568117][T30074] netlink: 'syz.1.5796': attribute type 13 has an invalid length.
[  894.584730][T30074] netlink: 'syz.1.5796': attribute type 12 has an invalid length.
[  894.767579][T30079] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.5798'.
[  894.788535][T30079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5798'.
[  894.801693][T30079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5798'.
[  895.291958][T30101] netlink: 'syz.4.5805': attribute type 1 has an invalid length.
[  895.343956][T30101] bond8: entered promiscuous mode
[  895.349456][T30101] 8021q: adding VLAN 0 to HW filter on device bond8
[  895.408490][T30101] bond8: (slave veth11): making interface the new active one
[  895.415963][T30101] veth11: entered promiscuous mode
[  895.429594][T30101] bond8: (slave veth11): Enslaving as an active interface with an up link
[  895.641623][T30118] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  895.747377][T30130] netlink: 'syz.3.5812': attribute type 163 has an invalid length.
[  895.843063][T30135] macsec0: left allmulticast mode
[  895.989193][T30144] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:0
[  896.377481][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  896.602582][T30162] __nla_validate_parse: 2 callbacks suppressed
[  896.602601][T30162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5821'.
[  896.802905][T30171] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  896.861289][T30171] bond9 (unregistering): Released all slaves
[  896.970769][T30182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5826'.
[  897.000087][T30182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5826'.
[  897.060746][T30185] siw: device registration error -23
[  897.191373][T30190] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5829'.
[  897.368494][T19132] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  897.385451][T19132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  897.402920][T19132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  897.407914][T30199] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.5831'.
[  897.427163][T19132] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  897.441152][T19132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  897.549315][T26134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  897.570114][T26134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  897.588400][T26134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  897.603051][T26134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  897.611504][T26134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  897.752720][T30206] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5832'.
[  897.833304][T30203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5832'.
[  898.832500][T30195] ip6_vti0 speed is unknown, defaulting to 1000
[  899.239241][T30240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  899.273294][T30195] bridge0: port 1(bridge_slave_0) entered blocking state
[  899.287246][T30195] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.306801][T30195] bridge_slave_0: entered allmulticast mode
[  899.322965][T30195] bridge_slave_0: entered promiscuous mode
[  899.353550][T30195] bridge0: port 2(bridge_slave_1) entered blocking state
[  899.385915][T30195] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.409049][T30195] bridge_slave_1: entered allmulticast mode
[  899.443477][T30195] bridge_slave_1: entered promiscuous mode
[  899.486871][T30279] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5841'.
[  899.580434][ T1735] block nbd3: Connection timed out, retrying (0/2 alive)
[  899.589324][ T1735] block nbd3: Connection timed out, retrying (0/2 alive)
[  899.597073][ T1735] block nbd3: Connection timed out, retrying (0/2 alive)
[  899.607222][T30279] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  899.607756][ T1735] block nbd3: Connection timed out, retrying (0/2 alive)
[  899.625063][ T1735] block nbd3: Dead connection, failed to find a fallback
[  899.641941][T30195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  899.658102][T19132] Bluetooth: hci2: command tx timeout
[  899.705604][T30195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  899.831939][T30195] team0: Port device team_slave_0 added
[  899.844282][T30195] team0: Port device team_slave_1 added
[  899.861924][T30294] IPVS: set_ctl: invalid protocol: 108 172.20.20.187:20000
[  899.883277][T30195] batman_adv: batadv0: Adding interface: batadv_slave_0
[  899.890739][T30195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  899.928687][T30195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  899.948406][T30195] batman_adv: batadv0: Adding interface: batadv_slave_1
[  899.965694][T30195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.021480][T30195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  900.142601][T30195] hsr_slave_0: entered promiscuous mode
[  900.154485][T30195] hsr_slave_1: entered promiscuous mode
[  900.162464][T30307] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  900.172497][T30195] debugfs: 'hsr0' already exists in 'hsr'
[  900.179994][T30307] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  900.189837][T30195] Cannot create hsr debugfs directory
[  900.366102][T30315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5853'.
[  900.638422][T30328] IPVS: set_ctl: invalid protocol: 46 172.30.1.1:20000
[  900.685766][T30329] IPVS: set_ctl: invalid protocol: 46 172.30.1.1:20000
[  900.770642][T30323] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5856'.
[  900.783993][T30195] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  900.821851][T30195] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  900.838910][T30195] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  900.868151][T30337] sctp: [Deprecated]: syz.1.5856 (pid 30337) Use of struct sctp_assoc_value in delayed_ack socket option.
[  900.868151][T30337] Use struct sctp_sack_info instead
[  900.880484][T30338] openvswitch: netlink: IPv4 tunnel dst address is zero
[  901.048101][T30195] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  901.058523][T30195] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.069018][T30195] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  901.135498][T30343] ip6_vti0 speed is unknown, defaulting to 1000
[  901.147563][T30347] netlink: 'syz.5.5861': attribute type 4 has an invalid length.
[  901.167963][T30195] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  901.193525][T30195] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.209461][T30351] netlink: 'syz.5.5861': attribute type 4 has an invalid length.
[  901.214934][T30195] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  901.325423][T30357] xfrm0: entered promiscuous mode
[  901.343408][T30357] xfrm0: entered allmulticast mode
[  901.482542][T30358] macsec0: left promiscuous mode
[  901.494644][T30358] vlan3: left promiscuous mode
[  901.502793][T30358] bond10: left promiscuous mode
[  901.508942][T30358] bridge7: left promiscuous mode
[  901.552019][T30195] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  901.586476][T30195] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.597652][T30195] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  901.737306][T19132] Bluetooth: hci2: command tx timeout
[  902.467222][T30195] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  902.501180][T30195] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  902.518491][T30195] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  902.545749][T30195] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  902.561365][T30195] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  902.591327][T30195] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  902.608110][T30385] ip6_vti0 speed is unknown, defaulting to 1000
[  902.610380][T30195] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  902.660392][T30195] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  902.779609][T30195] 8021q: adding VLAN 0 to HW filter on device bond0
[  902.831502][T30195] 8021q: adding VLAN 0 to HW filter on device team0
[  902.870811][T24653] bridge0: port 1(bridge_slave_0) entered blocking state
[  902.878051][T24653] bridge0: port 1(bridge_slave_0) entered forwarding state
[  902.935153][T16821] bridge0: port 2(bridge_slave_1) entered blocking state
[  902.942385][T16821] bridge0: port 2(bridge_slave_1) entered forwarding state
[  903.172891][T30430] __nla_validate_parse: 5 callbacks suppressed
[  903.172910][T30430] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5881'.
[  903.223010][T30430] sch_tbf: burst 0 is lower than device lo mtu (11337746) !
[  903.343976][T30443] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5884'.
[  903.353820][T30443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5884'.
[  903.378792][T30433] bond9: entered promiscuous mode
[  903.385179][T30433] 8021q: adding VLAN 0 to HW filter on device bond9
[  903.400154][T30444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5884'.
[  903.410653][T30433] bond9 (unregistering): Released all slaves
[  903.580591][T30448] netlink: 'syz.0.5885': attribute type 1 has an invalid length.
[  903.628841][T30448] ip6tnl2: entered allmulticast mode
[  903.829150][T19132] Bluetooth: hci2: command tx timeout
[  904.251230][T30195] 8021q: adding VLAN 0 to HW filter on device batadv0
[  904.313814][T30475] netlink: 'syz.1.5890': attribute type 2 has an invalid length.
[  904.444256][T30195] veth0_vlan: entered promiscuous mode
[  904.499309][T30195] veth1_vlan: entered promiscuous mode
[  904.526065][T30488] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  904.635277][T30195] veth0_macvtap: entered promiscuous mode
[  904.687473][T30499] netlink: 'syz.4.5896': attribute type 3 has an invalid length.
[  904.701450][T30195] veth1_macvtap: entered promiscuous mode
[  904.769476][T30507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5897'.
[  904.777144][T30195] batman_adv: batadv0: Interface activated: batadv_slave_0
[  904.803291][T30507] netlink: 204 bytes leftover after parsing attributes in process `syz.0.5897'.
[  904.827830][T30509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5898'.
[  904.833775][T30195] batman_adv: batadv0: Interface activated: batadv_slave_1
[  904.863287][T10791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  904.879605][T10791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  904.905893][T10791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  904.920714][T10791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  905.233325][ T3320] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.257903][ T3320] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.340002][T24653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  905.349266][T24653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  905.392301][T30529] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  905.399621][T30529] IPv6: NLM_F_CREATE should be set when creating new route
[  905.406935][T30529] IPv6: NLM_F_CREATE should be set when creating new route
[  905.414187][T30529] IPv6: NLM_F_CREATE should be set when creating new route
[  905.595029][T16869] IPVS: starting estimator thread 0...
[  905.609786][T30538] netlink: 'syz.3.5824': attribute type 1 has an invalid length.
[  905.628594][T30538] netlink: 'syz.3.5824': attribute type 2 has an invalid length.
[  905.686524][T30541] IPVS: using max 31 ests per chain, 74400 per kthread
[  905.897702][T19132] Bluetooth: hci2: command tx timeout
[  906.241324][T30561] syzkaller0: entered promiscuous mode
[  906.280171][T30561] syzkaller0: entered allmulticast mode
[  906.701078][T30578] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5912'.
[  906.714614][T30579] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5913'.
[  908.845420][T30547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  909.244324][T30598] netlink: 'syz.3.5916': attribute type 1 has an invalid length.
[  909.255836][T30598] netlink: 'syz.3.5916': attribute type 2 has an invalid length.
[  909.514553][T30624] syzkaller0: entered promiscuous mode
[  909.520699][T30624] syzkaller0: entered allmulticast mode
[  909.767910][T30643] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5929'.
[  909.780531][T30640] veth1_macvtap: entered promiscuous mode
[  909.805815][T30644] openvswitch: netlink: IP tunnel dst address not specified
[  909.969828][T30651] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5931'.
[  910.001269][T30650] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5932'.
[  913.758826][T30640] 8021q: adding VLAN 0 to HW filter on device bond1
[  913.766605][T30640] 8021q: adding VLAN 0 to HW filter on device bond2
[  913.912268][T30640] 8021q: adding VLAN 0 to HW filter on device bond3
[  913.922340][T30640] 8021q: adding VLAN 0 to HW filter on device bond4
[  913.931150][T30640] 8021q: adding VLAN 0 to HW filter on device bond5
[  913.948281][T30640] 8021q: adding VLAN 0 to HW filter on device bond6
[  913.961562][T30640] 8021q: adding VLAN 0 to HW filter on device bond7
[  913.971210][T30640] 8021q: adding VLAN 0 to HW filter on device bond8
[  913.980402][T30640] veth0_to_team: entered promiscuous mode
[  913.987603][T30640] 8021q: adding VLAN 0 to HW filter on device bond9
[  913.997464][T30640] mac80211_hwsim hwsim77 wlan0: entered promiscuous mode
[  914.011380][T30640] 8021q: adding VLAN 0 to HW filter on device eth0
[  914.021169][T30640] 8021q: adding VLAN 0 to HW filter on device eth1
[  914.029771][T30640] 8021q: adding VLAN 0 to HW filter on device eth2
[  914.039257][T30640] 8021q: adding VLAN 0 to HW filter on device eth3
[  914.083178][T30646] bond0: entered promiscuous mode
[  914.092287][T30646] batadv0: entered promiscuous mode
[  914.098862][T30646] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  914.119178][T30646] bond0: left promiscuous mode
[  914.130012][T30646] batadv0: left promiscuous mode
[  914.201019][T30641] ip6_vti0 speed is unknown, defaulting to 1000
[  914.358674][T30668] netlink: 'syz.0.5936': attribute type 1 has an invalid length.
[  914.578208][T30684] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5939'.
[  914.629981][T30685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5939'.
[  915.203846][T30693] syzkaller1: entered promiscuous mode
[  915.213928][T30693] syzkaller1: entered allmulticast mode
[  915.695764][T30722] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5949'.
[  915.750366][T30724] netlink: 'syz.0.5949': attribute type 5 has an invalid length.
[  916.138944][T30723] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5947'.
[  916.203782][T30730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5951'.
[  916.501115][T30745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5956'.
[  916.681355][T30749] netlink: 'syz.0.5957': attribute type 8 has an invalid length.
[  916.715231][T30749] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5957'.
[  917.147641][T30775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5964'.
[  917.418231][T30787] x_tables: duplicate underflow at hook 3
[  917.651054][T30799] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5973'.
[  917.739568][T30803] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5974'.
[  917.817774][T30810] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5976'.
[  918.006098][T30815] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5978'.
[  918.030319][T30817] tc_dump_action: action bad kind
[  918.282209][T30828] ip6_vti0 speed is unknown, defaulting to 1000
[  918.642713][T30847] netlink: 'syz.5.5986': attribute type 2 has an invalid length.
[  919.004295][T30833] ip6_vti0 speed is unknown, defaulting to 1000
[  919.228488][T30865] syzkaller0: entered promiscuous mode
[  919.239881][T30865] syzkaller0: entered allmulticast mode
[  919.535278][T30875] openvswitch: netlink: Flow key attribute not present in set flow.
[  920.203994][T30903] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  920.353856][T30908] netlink: 'syz.1.6000': attribute type 1 has an invalid length.
[  920.388168][T30908] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  920.731598][T30919] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  920.752295][T30917] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[  920.981010][T26134] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  920.997727][T26134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  921.008403][T26134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  921.023793][T26134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  921.033443][T26134] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  921.047206][T19131] bond10: (slave syz_tun): Removing an active aggregator
[  921.091918][T19131] bond10: (slave syz_tun): Releasing backup interface
[  921.289626][T30941] __nla_validate_parse: 4 callbacks suppressed
[  921.289646][T30941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6007'.
[  921.711996][T30963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6013'.
[  921.954896][T30978] netlink: 'syz.3.6016': attribute type 1 has an invalid length.
[  921.983140][T30978] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.6016'.
[  922.146272][T30984] netlink: 'syz.5.6018': attribute type 8 has an invalid length.
[  922.290846][T30986] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:0
[  922.299795][T30925] ip6_vti0 speed is unknown, defaulting to 1000
[  922.308100][T30963] FAULT_INJECTION: forcing a failure.
[  922.308100][T30963] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  922.347845][T30963] CPU: 1 UID: 0 PID: 30963 Comm: syz.4.6013 Not tainted syzkaller #0 PREEMPT(full) 
[  922.347869][T30963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  922.347880][T30963] Call Trace:
[  922.347889][T30963]  <TASK>
[  922.347897][T30963]  dump_stack_lvl+0xe8/0x150
[  922.347925][T30963]  should_fail_ex+0x412/0x560
[  922.347952][T30963]  _copy_from_user+0x2d/0xb0
[  922.347977][T30963]  do_ipt_get_ctl+0x314/0x1240
[  922.348005][T30963]  ? do_ip_getsockopt+0x131d/0x1d40
[  922.348022][T30963]  ? __pfx_do_ipt_get_ctl+0x10/0x10
[  922.348044][T30963]  ? do_ip_getsockopt+0x131d/0x1d40
[  922.348060][T30963]  ? __local_bh_enable_ip+0xd0/0x130
[  922.348079][T30963]  ? __mutex_trylock_common+0x158/0x260
[  922.348100][T30963]  ? __pfx___mutex_trylock_common+0x10/0x10
[  922.348121][T30963]  ? rcu_is_watching+0x15/0xb0
[  922.348139][T30963]  ? trace_contention_end+0x3d/0x140
[  922.348165][T30963]  ? nf_getsockopt+0x224/0x290
[  922.348185][T30963]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  922.348198][T30963]  ? nf_getsockopt+0x34/0x290
[  922.348214][T30963]  ? __pfx___mutex_lock+0x10/0x10
[  922.348228][T30963]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  922.348245][T30963]  ? __might_fault+0xaf/0x130
[  922.348272][T30963]  nf_getsockopt+0x26e/0x290
[  922.348294][T30963]  ip_getsockopt+0x19e/0x230
[  922.348318][T30963]  ? __pfx_ip_getsockopt+0x10/0x10
[  922.348340][T30963]  ? sock_common_getsockopt+0x2d/0xb0
[  922.348361][T30963]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  922.348380][T30963]  do_sock_getsockopt+0x51d/0x7e0
[  922.348406][T30963]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  922.348439][T30963]  ? __fget_files+0x3a0/0x420
[  922.348455][T30963]  ? __fget_files+0x2a/0x420
[  922.348476][T30963]  __x64_sys_getsockopt+0x1a4/0x240
[  922.348502][T30963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.348519][T30963]  do_syscall_64+0x15f/0xf80
[  922.348533][T30963]  ? trace_irq_disable+0x3b/0x140
[  922.348555][T30963]  ? clear_bhb_loop+0x40/0x90
[  922.348575][T30963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  922.348588][T30963] RIP: 0033:0x7f5aae79cdd9
[  922.348603][T30963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  922.348615][T30963] RSP: 002b:00007f5aaf6ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  922.348631][T30963] RAX: ffffffffffffffda RBX: 00007f5aaea15fa0 RCX: 00007f5aae79cdd9
[  922.348641][T30963] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004
[  922.348649][T30963] RBP: 00007f5aaf6ba090 R08: 0000200000000240 R09: 0000000000000000
[  922.348659][T30963] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001
[  922.348668][T30963] R13: 00007f5aaea16038 R14: 00007f5aaea15fa0 R15: 00007ffde3480648
[  922.348695][T30963]  </TASK>
[  922.794533][T31003] openvswitch: netlink: Actions may not be safe on all matching packets
[  922.887513][T31008] netlink: 'syz.5.6024': attribute type 8 has an invalid length.
[  922.908973][T20480] pimreg: left allmulticast mode
[  922.914071][T20480] dvmrp6: left allmulticast mode
[  923.022801][T31013] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6027'.
[  923.038319][T31014] x_tables: ip_tables: TCPMSS target: only valid for protocol 6
[  923.096584][T26134] Bluetooth: hci1: command tx timeout
[  923.207952][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6025'.
[  923.709075][T20480] bond5 (unregistering): (slave ip6gretap1): Releasing active interface
[  924.405778][T20480] bond0 (unregistering): Released all slaves
[  924.418187][T20480] bond1 (unregistering): Released all slaves
[  924.433779][T20480] bond2 (unregistering): Released all slaves
[  924.450712][T20480] bond3 (unregistering): (slave wireguard0): Releasing backup interface
[  924.460193][T20480] wireguard0: left promiscuous mode
[  924.467853][T20480] bond3 (unregistering): Released all slaves
[  924.481468][T20480] bond4 (unregistering): Released all slaves
[  924.495149][T20480] bond5 (unregistering): Released all slaves
[  924.511018][T20480] bond6 (unregistering): Released all slaves
[  924.527177][T20480] bond7 (unregistering): Released all slaves
[  924.544691][T20480] bond8 (unregistering): Released all slaves
[  924.563694][T20480] bond9 (unregistering): (slave veth5): Releasing backup interface
[  924.573668][T20480] bond9 (unregistering): Released all slaves
[  924.589130][T20480] bond10 (unregistering): Released all slaves
[  924.973680][T20480] m1Ie5n��: left promiscuous mode
[  925.163138][T20480] hma(����kX�: left promiscuous mode
[  925.192910][T26134] Bluetooth: hci1: command tx timeout
[  925.196867][T31054] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:0
[  925.458795][T20480] tipc: Left network mode
[  925.632749][T31056] ip6_vti0 speed is unknown, defaulting to 1000
[  926.150027][T31079] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6038'.
[  926.662063][ T5291] 8021q: adding VLAN 0 to HW filter on device eth5
[  926.743030][T31110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6043'.
[  926.773247][T31110] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6043'.
[  926.929959][T30925] bridge0: port 1(bridge_slave_0) entered blocking state
[  926.961159][T30925] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.975332][T30925] bridge_slave_0: entered allmulticast mode
[  926.983403][T30925] bridge_slave_0: entered promiscuous mode
[  926.992568][T30925] bridge0: port 2(bridge_slave_1) entered blocking state
[  927.000226][T30925] bridge0: port 2(bridge_slave_1) entered disabled state
[  927.007744][T30925] bridge_slave_1: entered allmulticast mode
[  927.025531][T30925] bridge_slave_1: entered promiscuous mode
[  927.205142][T31104] ip6_vti0 speed is unknown, defaulting to 1000
[  927.256960][T26134] Bluetooth: hci1: command tx timeout
[  927.388527][T30925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  927.428121][T30925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  927.474841][T31147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6048'.
[  927.593974][T31112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  927.716190][T30925] team0: Port device team_slave_0 added
[  927.764941][T30925] team0: Port device team_slave_1 added
[  927.914954][T31155] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:0
[  928.011491][T30925] batman_adv: batadv0: Adding interface: batadv_slave_0
[  928.019359][T30925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  928.053616][T30925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  928.149349][T31160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6050'.
[  928.157249][T30925] batman_adv: batadv0: Adding interface: batadv_slave_1
[  928.165504][T30925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  928.193084][T30925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  928.195041][T31160] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.6050'.
[  928.311020][T20480] ------------[ cut here ]------------
[  928.317693][T20480] err
[  928.317725][T20480] WARNING: net/wireless/core.c:207 at cfg80211_switch_netns+0x574/0x5a0, CPU#1: kworker/u8:27/20480
[  928.332054][T20480] Modules linked in:
[  928.337406][T20480] CPU: 1 UID: 0 PID: 20480 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) 
[  928.347702][T20480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  928.358492][T20480] Workqueue: netns cleanup_net
[  928.363301][T20480] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0
[  928.369986][T20480] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 b8 33 40 f7 eb 82 e8 d1 f8 d4 f6 e9 63 fe ff ff e8 c7 f8 d4 f6 e9 59 fe ff ff e8 bd f8 d4 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa
[  928.391216][T20480] RSP: 0000:ffffc9000386f8a0 EFLAGS: 00010293
[  928.397831][T20480] RAX: ffffffff8af0c6b3 RBX: ffff888048100e10 RCX: ffff88807d77bd80
[  928.407006][T20480] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000
[  928.415620][T20480] RBP: 00000000ffffffef R08: ffffffff9030dbf7 R09: 1ffffffff2061b7e
[  928.424858][T20480] R10: dffffc0000000000 R11: fffffbfff2061b7f R12: ffff888048100740
[  928.433045][T20480] R13: ffff8880283fc9a0 R14: dffffc0000000000 R15: ffff888048100928
[  928.441124][T20480] FS:  0000000000000000(0000) GS:ffff888125387000(0000) knlGS:0000000000000000
[  928.450387][T20480] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  928.457086][T20480] CR2: 0000200000000240 CR3: 0000000078de6000 CR4: 00000000003526f0
[  928.465522][T20480] Call Trace:
[  928.468873][T20480]  <TASK>
[  928.471809][T20480]  cfg80211_pernet_exit+0x92/0x120
[  928.477233][T20480]  ops_undo_list+0x49f/0x940
[  928.481868][T20480]  ? __pfx_ops_undo_list+0x10/0x10
[  928.487071][T20480]  ? idr_destroy+0x218/0x290
[  928.491685][T20480]  ? do_raw_spin_unlock+0xf5/0x210
[  928.497648][T20480]  cleanup_net+0x56b/0x800
[  928.502107][T20480]  ? __pfx_cleanup_net+0x10/0x10
[  928.507570][T20480]  ? process_scheduled_works+0xa70/0x1860
[  928.514105][T20480]  ? process_scheduled_works+0xa70/0x1860
[  928.520426][T20480]  process_scheduled_works+0xb5d/0x1860
[  928.526070][T20480]  ? __pfx_process_scheduled_works+0x10/0x10
[  928.532659][T20480]  ? assign_work+0x3d5/0x5e0
[  928.538271][T20480]  worker_thread+0xa53/0xfc0
[  928.543009][T20480]  kthread+0x388/0x470
[  928.547677][T20480]  ? __pfx_worker_thread+0x10/0x10
[  928.552814][T20480]  ? __pfx_kthread+0x10/0x10
[  928.558231][T20480]  ret_from_fork+0x514/0xb70
[  928.564705][T20480]  ? __pfx_ret_from_fork+0x10/0x10
[  928.570668][T20480]  ? __switch_to+0xc79/0x1410
[  928.575386][T20480]  ? __pfx_kthread+0x10/0x10
[  928.580590][T20480]  ret_from_fork_asm+0x1a/0x30
[  928.585421][T20480]  </TASK>
[  928.589012][T20480] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  928.596309][T20480] CPU: 1 UID: 0 PID: 20480 Comm: kworker/u8:27 Not tainted syzkaller #0 PREEMPT(full) 
[  928.606034][T20480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  928.616101][T20480] Workqueue: netns cleanup_net
[  928.620895][T20480] Call Trace:
[  928.624265][T20480]  <TASK>
[  928.627190][T20480]  vpanic+0x56c/0xa60
[  928.631174][T20480]  ? __pfx__printk+0x10/0x10
[  928.635770][T20480]  ? __pfx_vpanic+0x10/0x10
[  928.640268][T20480]  ? is_bpf_text_address+0x292/0x2b0
[  928.645545][T20480]  ? is_bpf_text_address+0x26/0x2b0
[  928.650759][T20480]  panic+0xc5/0xd0
[  928.654513][T20480]  ? __pfx_panic+0x10/0x10
[  928.658937][T20480]  ? ret_from_fork_asm+0x1a/0x30
[  928.663878][T20480]  __warn+0x315/0x4c0
[  928.667857][T20480]  ? cfg80211_switch_netns+0x574/0x5a0
[  928.673316][T20480]  ? cfg80211_switch_netns+0x574/0x5a0
[  928.678784][T20480]  __report_bug+0x29a/0x540
[  928.683299][T20480]  ? cfg80211_switch_netns+0x574/0x5a0
[  928.688853][T20480]  ? __pfx___report_bug+0x10/0x10
[  928.693894][T20480]  ? cfg80211_switch_netns+0x574/0x5a0
[  928.699348][T20480]  report_bug+0x16a/0x220
[  928.703674][T20480]  ? cfg80211_switch_netns+0x574/0x5a0
[  928.709127][T20480]  ? cfg80211_switch_netns+0x576/0x5a0
[  928.714589][T20480]  handle_bug+0x9c/0x200
[  928.718824][T20480]  exc_invalid_op+0x1a/0x50
[  928.723318][T20480]  asm_exc_invalid_op+0x1a/0x20
[  928.728158][T20480] RIP: 0010:cfg80211_switch_netns+0x574/0x5a0
[  928.734223][T20480] Code: e1 07 38 c1 7c 8c 4c 89 e7 e8 b8 33 40 f7 eb 82 e8 d1 f8 d4 f6 e9 63 fe ff ff e8 c7 f8 d4 f6 e9 59 fe ff ff e8 bd f8 d4 f6 90 <0f> 0b 90 e9 95 fd ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c b7 fa
[  928.753834][T20480] RSP: 0000:ffffc9000386f8a0 EFLAGS: 00010293
[  928.759906][T20480] RAX: ffffffff8af0c6b3 RBX: ffff888048100e10 RCX: ffff88807d77bd80
[  928.767878][T20480] RDX: 0000000000000000 RSI: 00000000ffffffef RDI: 0000000000000000
[  928.775842][T20480] RBP: 00000000ffffffef R08: ffffffff9030dbf7 R09: 1ffffffff2061b7e
[  928.783803][T20480] R10: dffffc0000000000 R11: fffffbfff2061b7f R12: ffff888048100740
[  928.791764][T20480] R13: ffff8880283fc9a0 R14: dffffc0000000000 R15: ffff888048100928
[  928.799739][T20480]  ? cfg80211_switch_netns+0x573/0x5a0
[  928.805215][T20480]  cfg80211_pernet_exit+0x92/0x120
[  928.810323][T20480]  ops_undo_list+0x49f/0x940
[  928.814913][T20480]  ? __pfx_ops_undo_list+0x10/0x10
[  928.820024][T20480]  ? idr_destroy+0x218/0x290
[  928.824610][T20480]  ? do_raw_spin_unlock+0xf5/0x210
[  928.829721][T20480]  cleanup_net+0x56b/0x800
[  928.834141][T20480]  ? __pfx_cleanup_net+0x10/0x10
[  928.839080][T20480]  ? process_scheduled_works+0xa70/0x1860
[  928.844790][T20480]  ? process_scheduled_works+0xa70/0x1860
[  928.850501][T20480]  process_scheduled_works+0xb5d/0x1860
[  928.856064][T20480]  ? __pfx_process_scheduled_works+0x10/0x10
[  928.862039][T20480]  ? assign_work+0x3d5/0x5e0
[  928.866626][T20480]  worker_thread+0xa53/0xfc0
[  928.871236][T20480]  kthread+0x388/0x470
[  928.875301][T20480]  ? __pfx_worker_thread+0x10/0x10
[  928.880399][T20480]  ? __pfx_kthread+0x10/0x10
[  928.884987][T20480]  ret_from_fork+0x514/0xb70
[  928.889571][T20480]  ? __pfx_ret_from_fork+0x10/0x10
[  928.894670][T20480]  ? __switch_to+0xc79/0x1410
[  928.899348][T20480]  ? __pfx_kthread+0x10/0x10
[  928.903934][T20480]  ret_from_fork_asm+0x1a/0x30
[  928.908708][T20480]  </TASK>
[  928.912072][T20480] Kernel Offset: disabled
[  928.916380][T20480] Rebooting in 86400 seconds..