last executing test programs:

2m28.819992453s ago: executing program 0 (id=2808):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000380)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000380)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0xffffffffffffffff, 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (async)

2m28.63269438s ago: executing program 0 (id=2809):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89f2, &(0x7f0000000900)={'tunl0\x00', @random="e000230c1100"})
r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e)
openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000140)={<r4=>0x0, <r5=>0x0})
ppoll(&(0x7f0000000140), 0x0, &(0x7f0000000180)={r4, r5+60000000}, &(0x7f00000001c0)={[0x4]}, 0x8)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockname(r6, 0x0, &(0x7f0000000000))
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4)
ioctl$sock_proto_private(r3, 0x89e3, &(0x7f0000001080))

2m27.663833612s ago: executing program 0 (id=2817):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
recvfrom$inet(r0, &(0x7f00000000c0)=""/255, 0xff, 0x40002042, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0)
read(r3, &(0x7f0000000480)=""/126, 0x7e)
sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@updsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x5c}, {@in6=@loopback, 0x0, 0x33}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0xffffffffffffffff}, {0x0, 0xfffffffffffffffd, 0x8}, {}, 0x0, 0x0, 0x2, 0x4, 0x80}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}, @tfcpad={0x8, 0x16, 0x7ff}]}, 0x144}, 0x1, 0x0, 0x0, 0x20004001}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000340)=@gettaction={0xcc, 0x32, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb56}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}]}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfa}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x3}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0x200440c4}, 0x4000)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bc7000fcdbcf256b00000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x20004000)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x63}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x5b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2002c014)
sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r4, 0x2, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x88c1}, 0x80)

2m27.437930357s ago: executing program 0 (id=2820):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x0, 0x3, 0x4, 0xa1}], {0x95, 0x0, 0xb}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x4f)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x0, 0x2, 0x0, 0x4, 0x1, 0x109, [{0x4, 0x4, 0x1}, {0xe, 0x5, 0x9}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e]}}, &(0x7f0000000f40)=""/4079, 0x42, 0xfef, 0x8}, 0x28)
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, 0xfffffffffffffffc, &(0x7f00000002c0)=0x60)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80100040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x80000000, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x4, 0x1, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x7, 0x0, 0x400, 0x9, 0x6, 0x0, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a6, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0xff, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x95d6a000)
r9 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x6, 0xfffe}, {0x20, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0)
r11 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r11, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000004000000000000000000000f0300000047676ed25a63d038000000000000000f01000000de00615f00"], 0x0, 0x38, 0x0, 0x0, 0xffffffff}, 0x28)

2m26.461695632s ago: executing program 0 (id=2834):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300) (async)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r5)
sendmmsg(r5, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="bc", 0x1}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="10"], 0x10}}], 0x1, 0x440440c4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101})
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
socket(0x400000000010, 0x3, 0x0) (async)
r9 = socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x5, 0x0)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) (async)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x5, 0xa}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0xfd, 0x81, 0xfffff031}]}, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0)

2m25.376521626s ago: executing program 0 (id=2840):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0xe}, 0x94)
socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c25}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
socket(0x1, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "ac46d45ff26aaebb", "5ea43708bcf9424c8c0d984053102ac9", "349ba811", "7a3ba57cff9ba362"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180), 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r4, 0x0, 0x20000000002)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x208, @loopback, 0x7dab}, 0x1c)
r6 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r6, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0)
sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

2m10.230544494s ago: executing program 32 (id=2840):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0xe}, 0x94)
socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0x0, 0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c25}, 0x94)
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
socket(0x1, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
getsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x304}, "ac46d45ff26aaebb", "5ea43708bcf9424c8c0d984053102ac9", "349ba811", "7a3ba57cff9ba362"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000180), 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a)
sendfile(r3, r4, 0x0, 0x20000000002)
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e20, 0x208, @loopback, 0x7dab}, 0x1c)
r6 = socket(0x840000000002, 0x3, 0xff)
connect$inet(r6, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)
ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0)
sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94)

4.428928349s ago: executing program 4 (id=3504):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019640)=ANY=[@ANYBLOB="ebffffff050605000000000000000000010008083ade1866fb0d9324d12b000001000700c2878f39ff5aa512c9c4a6e06fdf5a59969171a4b68c8ea634e7d2bb26e90fef0cd1a450354991e3dcd2eb2dab0def3c639da944b7ae2255f882c246b2a4d84da030c9a781aa9cbc7478dfe8fef9ac988a9eed8693795e041db240790863abda59be2a056c858d3d7e9dca3f12186f26a3dc100e7ea324b1ad9aa88794aedaa48e3d88f7df66f2c75be1dbd7808bcb8bf6d290618c7c6d0a49160de0366ff375b18ce1a5e415d3b9a072fae37e737a8d18591e3750"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x10})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f00000000c0)=0x800, 0x4)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c)
write$tun(r3, &(0x7f0000019580)=ANY=[@ANYBLOB="016f0800010027000000270000004500002c00000000008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6962fc0831b986b40e10a2b174bcca847866a506163a12b2e6964626d261b3082237454ccd37e825200c53f038816be85934db29088ec95e0525634e9f8347fcabf330c3fc0851ee5ca85cdb0568cb0c7187ddc5048285c07615fecb0572360a660f866beb31a5506997363b0f2c8ea48fddf35e33802db31d11ab7eb5e289efa1a6d21992db5e4e"], 0x3a)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfff}], 0x1c)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10)
r8 = accept4(r7, 0x0, 0x0, 0x800)
sendmsg$MPTCP_PM_CMD_ANNOUNCE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000009c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="00012dbd7000ffdbdf25080e00003800068008000700", @ANYRES32=0x0, @ANYBLOB="14000400fc02000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="08000600040000000500020003000000540001801400040000000000000000000000ffffe000000114000400ff02000000000000000000000000000114000400fe8000000000000000000000000000aa14000400000000000000000000000000000000010400018004000680040001800400068005000500080000001800018014000400fe8000000000000000000000000000bb0800040001000100"], 0xd8}, 0x1, 0x0, 0x0, 0x20000100}, 0x1)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x20)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000340)={'team0\x00', 0x800})
getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f00000000c0))
r9 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r9, 0x200000000114, 0x271c, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)
getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000370429bd7000ffffffff00000000", @ANYRES32=r10, @ANYBLOB="0b120500000000002c0012366506657461700800001800028014000700ff010000000000000085ebcd00000000"], 0x4c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010)
sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.466301083s ago: executing program 3 (id=3517):
r0 = socket$kcm(0x29, 0x5, 0x0)
recvmsg$kcm(r0, &(0x7f00000011c0)={&(0x7f0000000000)=@un=@abs, 0x80, &(0x7f0000001080)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1, &(0x7f00000010c0)=""/217, 0xd9}, 0x1) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001300)={'syztnl0\x00', &(0x7f0000001280)={'gretap0\x00', <r1=>0x0, 0x3b095e848aff6be0, 0x8027, 0x9, 0x6, {{0xa, 0x4, 0x0, 0x28, 0x28, 0x67, 0x0, 0x2, 0x29, 0x0, @loopback, @broadcast, {[@lsrr={0x83, 0x13, 0x8, [@private=0xa010101, @private=0xa010101, @multicast2, @multicast2]}]}}}}}) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000001340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xab, 0xab, 0x5, [@const={0xe, 0x0, 0x0, 0xa, 0x2}, @struct={0x2, 0x1, 0x0, 0x4, 0x0, 0x101, [{0x6, 0x5, 0xfffffff9}]}, @type_tag={0x5, 0x0, 0x0, 0x12, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x5, 0x2}}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @datasec={0xd, 0x5, 0x0, 0xf, 0x3, [{0x5, 0x7, 0x8000}, {0x5, 0x7, 0x1}, {0x1, 0x12, 0x8}, {0x2, 0xfffffff2, 0x4}, {0x4, 0x7f, 0x80}], "43d1fd"}]}, {0x0, [0x5f, 0x0, 0x2e]}}, &(0x7f0000001440)=""/26, 0xc9, 0x1a, 0x0, 0x10001}, 0x28) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{0x1, <r3=>0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)}, 0x20) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001580)=@bloom_filter={0x1e, 0x8, 0x7, 0x0, 0x2200, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0xf}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{0x1, <r5=>0xffffffffffffffff}, &(0x7f0000001600), &(0x7f0000001640)}, 0x20)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x11, 0x6, &(0x7f0000001200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x263e, 0x0, 0x0, 0x0, 0x2}, [@exit, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}]}, &(0x7f0000001240)='syzkaller\x00', 0x63, 0x0, 0x0, 0x41000, 0x2e, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000016c0)=[r3, 0xffffffffffffffff, r4, r5, 0x1], &(0x7f0000001700)=[{0x1, 0x5, 0xb, 0x8}, {0x0, 0x2, 0xb, 0x12}, {0x3, 0x1, 0xc, 0x5}, {0x2, 0x3, 0xd, 0x8}, {0x0, 0x4, 0xd, 0x6}, {0x0, 0x4, 0x9, 0x2}], 0x10, 0x5}, 0x94)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000001840)={<r8=>0x0, 0xa9, 0x10001, 0x1})
ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000001c40)={r8, 0x7, 0x1, [0xf7, 0x3, 0x9, 0x5, 0x5], [0x7ff, 0x5, 0x5, 0x100, 0xffffffffffff3989, 0x8, 0x7, 0xfffffffffffffff9, 0x0, 0x3ff, 0x8, 0x5, 0xffffffffffffffff, 0x4, 0x0, 0xa9d, 0x5, 0x0, 0x3, 0x6, 0xe8940000000000, 0x1, 0x9, 0xa, 0x8, 0xfffffffffffffffc, 0x9, 0x4, 0x5, 0x2, 0x6, 0x8, 0x1, 0x10001, 0x4, 0x1, 0x5, 0x43, 0x806a, 0xec, 0xcaa, 0x100000001, 0xace9, 0x6, 0x6, 0x8, 0x7, 0x4, 0x5, 0x1, 0x6, 0x4, 0xb4dc, 0x6, 0xddb, 0x7f, 0x6, 0x6, 0x2, 0x100000000, 0x40, 0x53, 0xffffffffb0fde7b3, 0x7, 0xf9, 0x8, 0xfffffffffffffffc, 0x40, 0x6, 0x5, 0x5, 0x0, 0x8, 0x0, 0x9, 0x101, 0xa, 0x6, 0x6, 0xfffffffffffffff7, 0x6, 0x5, 0x4, 0x9af0, 0x0, 0x6d, 0x5, 0x4, 0x2, 0x1, 0xffff, 0x1, 0xc, 0x7ff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xc, 0x2, 0x9, 0x0, 0x6, 0x38, 0xa352, 0x4, 0x100, 0x2, 0x350, 0x0, 0x100, 0xd2, 0x800, 0x100, 0x5, 0x200, 0x10, 0x1, 0x2, 0x20]})
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000002080), 0xc801b91a809f73f7, 0x0)
ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f00000020c0)) (async)
ioctl$PPPIOCSMRU(r6, 0x40047452, &(0x7f0000002100)=0x2) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0xac, 0x2, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x5f, 0x6, "2d32e6e34b1af02d18d4584b222ad39525f2ce013272ba21291ec237d9bd20ebe301636c8b778a8ed1dd46acbdcc7f62a49742a2feeb11ecd3985964a57d2db015597169c08b7e4f8bab5a8ceeddbbcd1733d6acc4593e1d467f45"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002480)={&(0x7f0000002380)={0xd8, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x34, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5257012f}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x14fd9952}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x271ea321}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5e95d837}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x18d6de7b}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffff6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40000}, 0x880) (async)
r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002740)={0x3, 0x4, 0x4, 0xa, 0x0, r5, 0x81, '\x00', r1, r2}, 0x50) (async)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000027c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0x5, '\x00', r1, r2, 0x5, 0x0, 0x2}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000028c0)=@bpf_tracing={0x1a, 0x10, &(0x7f0000002500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4b}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002580)='GPL\x00', 0x401, 0xf2, &(0x7f00000025c0)=""/242, 0x40f00, 0x6a, '\x00', 0x0, 0x4, r2, 0x8, &(0x7f00000026c0)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000002700)={0x3, 0x10, 0xfff, 0x80000000}, 0x10, 0x6e47, r6, 0x0, &(0x7f0000002840)=[r11, r12, r4, r5, r4, r3], &(0x7f0000002880), 0x10, 0x81}, 0x94) (async)
setsockopt$sock_int(r7, 0x1, 0x22, &(0x7f0000002980)=0x2800000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000002ac0)={'vxcan0\x00', <r13=>0x0}) (async)
r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002cc0)={&(0x7f0000002b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x7, [@var={0x4, 0x0, 0x0, 0xe, 0x5, 0x2}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1}, @decl_tag={0xf, 0x0, 0x0, 0x11, 0x2, 0x4}, @enum={0x6, 0x2, 0x0, 0x6, 0x4, [{0x0, 0x1}, {0x5, 0x320c}]}, @ptr={0xf, 0x0, 0x0, 0x2, 0x2}, @func={0xa, 0x0, 0x0, 0xc, 0x5}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x8, 0x4}, {0x6, 0x5}, {0x4, 0x4}, {0x2, 0x3}, {0xa, 0x3}, {0xd, 0x4}, {0x8, 0x1}, {0x9}, {0x2, 0x3}]}]}, {0x0, [0x2e, 0x30, 0x30, 0x5f, 0x2e]}}, &(0x7f0000002c00)=""/131, 0xd7, 0x83, 0x0, 0xa}, 0x28)
r15 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d40)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0xffffffffffffffff, 0x3, '\x00', r1, r2, 0x3, 0x3}, 0x50)
r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002dc0)={0xffffffffffffffff, 0x6}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000002e80)={0x6, 0x4, &(0x7f00000029c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x60}]}, &(0x7f0000002a00)='syzkaller\x00', 0xd, 0x68, &(0x7f0000002a40)=""/104, 0x40f00, 0x6a, '\x00', r13, @fallback=0xb, r14, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002d00)={0x0, 0xd, 0x5, 0x3}, 0x10, 0x0, r2, 0x1, &(0x7f0000002e00)=[r15, r16], &(0x7f0000002e40)=[{0x0, 0x5, 0x10, 0x6}], 0x10, 0xca47}, 0x94) (async)
r17 = socket$rds(0x15, 0x5, 0x0)
connect$rds(r17, &(0x7f0000002f40)={0x2, 0x4e21, @empty}, 0x10) (async)
r18 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r18, 0x89f2, &(0x7f0000003000)={'gretap0\x00', &(0x7f0000002f80)={'syztnl1\x00', r1, 0x700, 0x7800, 0x2, 0x1, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x67, 0x0, 0x3, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x13, 0x74, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}})

3.400031289s ago: executing program 4 (id=3519):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c0, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x890, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x394, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xf8, 0x6, 0x1, 0x0, "85490e095c6017b9cbd4002527ee6a41a8cbf071da015abc1c008456a3ccf029b7ccb472974656c89c9f6f5396dd56fb917bd06db10c154f4e3bf35ec3398b13f3b3d749706da948947ca7aedf56565f91668adbeb7d3d77a972a1ad26962dfa4a854478fc5f6bfb5429f199875e2dd76713bc2fc365103b4b9e8c692fbfeaaebe65707117eef91fc61f82939bd389bd154d1f206d7b33948241aa1a0f5f2ca015cf64fcc4860f72044742ad3117820895f1cdce371a02da2e0d262f0dcf1e8fa4a3c8e634c241d6238f883979dba8f86d73dc0643f2ad5fde10b5988ff0b2fc4e06295cdad1ca1bb33aeaf1512afa182beaa93c"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x1c, 0x6, 0x1, 0x0, "cfaa87597dd0816ef3b8b6b275efed5ffa05fec6ae2782f4"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x244, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "7bc1f3d9a2c2dfea63cdfef4415f2829373cbc1c6520a19a6a9f27610eab1cde87d2833a1c6001e0bcf28ba063e6340b393ff9f55e8f4405e0e02fab612b8765fa61c6f79b448ea262feb9a21476d885abb68b9aa0bf226c381d89d8e38254500f394d13c37e68abc28b3fc031e97a870968a239df5d"}, @NFTA_DATA_VALUE={0x9a, 0x1, "0f748c4681c9548f8d5cc4b439d7e28f8baf5a072b383a6a5a25de6846d0742cb9b9069d16fb9f83608dcf351f59dfb99f8f2998b7d21a0026ef16c360baeb1d2510435e92568f29e25d3c80378ecbedc16e580c6236ecbfad56a18d1858053fcf5af882c3ef1a43f5ea78531b841ef1860473edee45ccfb598aa9a49aea70bc7c849e2999200f135a8c530cae651f0abb3439d84230"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "7b70efd55efeeb9b99bf10925f1cf4a8c5a9955c64a16af6ba45c571c31be5739b07ee78828d56428f"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x338, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6b, 0x6, 0x1, 0x0, "5f46fa5f66afb7d23d0e08047686b35b2ad9c7122cc1308bcc6abec73aef11405b1a8ad8cfb7828264d8c1a203c8178951a1f1994893c5b309281e670eb762c8efa1d7db12bd215f7ce98eac16077079b9aed9915953033ef6d330588ee4808b93e0f2f2bac777"}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_DATA={0x28c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xae, 0x1, "6db5a3226b04d1a2017fc3953dcccb175dc6f02c3c9f2bb1188e25267e50af6f3e65a0219573bd78dad06ef84dd7ea2b05a03c48d2c567397611b37b75d2611a71fbe30f8d26c3adc7df8f20c30c1ec22e24c43e18022d628c6e99fbc0c2c1db3d078e37a3eab29284a7e7905580f10392754d8b4fdd9e34689e880c8560f51fdbd8bf2dcb8bd292572b16d4fdb0b7deb23563ded78ef3f564f1dd196c9edffb7fe89fa3ba89bf81cbae"}, @NFTA_DATA_VALUE={0xa5, 0x1, "9e043b357320d461de95885c2e4cb1581a8561bcabc4a3fc2a57c6db0f303c22f1686095c81b81d1066749ad22171016f94381d5d678e2b2c17afba9b76881b5d7ed8d46d06ed1e632daf552e35e8af7173d6fc820b246b912c0b836daa80cc6613ff2b22a707a57555daa9c5c4ff98c48e9925aeb04da1ac359e93fb1562066f1c1c978e23777858f632110e9e71f7ef1b8a964663ad31e9c3e01545350e51e3b"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "451c925eef49179254b8f9024cfe705121a0c444c8"}]}, {0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x60, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x13}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x671}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "c11597dcb49313d1c200bac78da19233c776d7f898d217b226c65c6efa6791865a3ac66b8f0b4325fc4dcc2907929b0568758a2cee09d57d8d2d2ef0bb09a0ed84dccb979cf09e93aaf5395372192c23b294dc4cf147e287dce6f6ecfa4566f5faf9f8e702aac15eb47e1c42b2"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x944}}, 0x40000)

3.351073807s ago: executing program 3 (id=3520):
unshare(0xc040480)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x6, 0x31, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ac00000095"], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}})
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r1, 0x1000) (async)
getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000a6000000850000000e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94)
r3 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(r3, 0x29, 0x37, &(0x7f0000000200)=ANY=[], 0x8) (async, rerun: 32)
setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async, rerun: 32)
sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async)
sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000500)=@in6={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xdfe1}, 0x80, 0x0}, 0x40) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) (rerun: 32)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000040)={@cgroup=r6, r6, 0x2f}, 0x20) (async, rerun: 64)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r6, 0x2f, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1, 0x0, 0x0, 0x0, &(0x7f0000003680)}, 0x40) (async, rerun: 64)
sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xd24}, {0x0, 0x4000}, {0x0, 0x21}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3.34513818s ago: executing program 5 (id=3521):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
bind$llc(r1, &(0x7f0000000400)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x50, 0x30, 0x48b, 0x70bd26, 0x22000, {}, [{0x3c, 0x1, [@m_ctinfo={0x38, 0x402, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x100}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x48195)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c0001800600060065580000080002"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)

3.249803737s ago: executing program 4 (id=3522):
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100fdfffffffeffffff1d00000008000300", @ANYRES32=r5, @ANYBLOB='0\x00/'], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x11, 0x4, 0x4, 0x8}, 0x50)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x40, 0x107, 0xfffffffa, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xc, 0x1c, 0x0, 0x0, @u64=0x5}]}, @nested={0x4, 0x2}]}, 0x34}}, 0xc000)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x5bfddf52a8fa8e87, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x2}, [@FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2c}}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0x1}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40800}, 0x4008040)
syz_emit_ethernet(0x3ce, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9203983afffe8000000000000000000000000000bbff0200000000000000000000000000010401000000000000000100000100050200000000000000008600907800ff0bdb00000000000000001f0aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af030200010000000500000000260004e39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c41bc943afcb04619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc237ae0e9f6a1afd6a3ed5304d642081ba42399907ccd0a562db212baa39eb8164e240069f604d3a05fecf894222a141123167f010000000000000090aa235a6706030b17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f0032107b8a3e10090cf6164000000020000000000000000000000ffff008879e66485201a0015ca837c7357a0274500f70000000000000000000000145e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c0005d5170000dce9674a36da018dff09e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"], 0x0)
sendmsg$nl_route(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f00000007c0)=@can_delroute={0x54, 0x19, 0x100, 0x70bd2b, 0x25dfdbfb, {0x1d, 0x1, 0x1}, [@CGW_MOD_XOR={0x15, 0x3, {{{0x0, 0x0, 0x1}, 0x8, 0x6, 0x0, 0x0, "0729c6c576d557ef"}, 0x3}}, @CGW_SRC_IF={0x8, 0x9, r6}, @CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "a942086107415dcc"}}}, @CGW_LIM_HOPS={0x5, 0xd, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c044}, 0x4008000)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x503, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21110, 0x31}}, 0x20}, 0x1, 0x0, 0x0, 0x4040810}, 0x0)

3.130454909s ago: executing program 5 (id=3525):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$igmp(0x2, 0x3, 0x2) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) (async)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
socket(0x2a, 0x2, 0x7f)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x4000c00)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) (async)
ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x1) (async)
r5 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000dc0)=@bpf_tracing={0x1a, 0x25, &(0x7f0000000e80)=ANY=[@ANYBLOB="18000000778c0000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000083000000bf0900000000000095000000000000001812000095155b6d5ac59043055dc70fa7eb152635f220084d6bb7dcaa451311a3d19f4a03c3a498ec81680cd9e82c84c673385b7cf4d29cbbc18e078d41000000000000000000000000000000007287df8df04774dd18497cd900a41c737caf1b6b5df98a68d96245aafcf06abb86651b11", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000009500000000000000b7080000000000007b8af8ff00000000b7080000e90000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000027810600fcffffff80f4810007000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000780)='syzkaller\x00', 0xfffffff7, 0x25, &(0x7f0000000840)=""/37, 0x40f00, 0x40, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0x1, 0x0, 0x400}, 0x10, 0x181bf, 0xffffffffffffffff, 0xa, &(0x7f0000000cc0)=[0xffffffffffffffff], &(0x7f0000000d00)=[{0x0, 0x4, 0x0, 0xbce961cafe543375}, {0x5, 0x1, 0xf, 0x5}, {0x0, 0x2, 0x2, 0x3}, {0x3, 0x2, 0x10, 0xc}, {0x0, 0x2, 0x5, 0x3}, {0x2, 0x4, 0x5, 0x8}, {0x4, 0x4, 0x6, 0x2}, {0x5, 0x6, 0x6, 0xb}, {0x4, 0x5, 0x10, 0x5}, {0x5, 0x3, 0x1, 0xa}], 0x10, 0x4}, 0x94) (async)
bind$alg(r5, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) (async)
r6 = accept4(r5, 0x0, 0x0, 0x0)
recvmmsg(r6, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000940)=[{0x0}, {&(0x7f0000000ac0)=""/127, 0x7f}], 0x2}, 0x9}], 0x2, 0x10000, 0x0) (async)
writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x9}}, ["", "", "", "", ""]}, 0x24}}, 0x11) (async)
setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000000c0)=0xa0000000, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000002840)={&(0x7f0000000040)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4040840)
recvmmsg(r1, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x20, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000000900010073797a310000000028000480240001800b000100736f636b657400001400167d08fff7400000001708000140000000020900020073797a32000000001400000011002f076d5021140100000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)

2.983228933s ago: executing program 3 (id=3526):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25047c00000400c280180009801400ff801000461523000080"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

2.832669885s ago: executing program 4 (id=3527):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x4, 0xfffffffe}]}, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x8, 0x3, 0x10000, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$qrtr(r3, &(0x7f00000000c0)={0x2a, 0x4, 0x7ffe}, 0xc)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000100)="cee39c40a8de6c9cf87ebf47a4b10bfa4d217551275363d9969177ea65621d3586a40d8920de0d43778605047adfa5f47749ed602c0a8f147d68c525b8540776699f61c9ea3c8531c2c0f0dccc3a9e81b49562dbc7c2ce82429ec75526de1a3feaeb4c358544e4601657f3054d8bb6fc2e1de2793eb4d2eaa8eef5e83a5e66d5ec70673b5afcada67072bd031c1a9c0c44c4cc7cd159a1d733987ff72b3d837c92f8ca57795905ed087cb0ebeea2d3fc19a96f9035186250420c6419779988382a1bffcb7cc977f7ad3f22996554", &(0x7f0000000200)=""/216, &(0x7f0000000300)="2c3abd28c9efad72c4836075a3772190c691c1dfe73a08348a498cc1d73b27253c191b4be2188855226ed68dcbd2f01c066f8f6ce8e9c21121ba81289e5f46c3b876f8bab395d2cdcdc7da7f23a3e346c831c708e8f9af3005d45a19deed3d1149b051da99ab63915b1f0d70f084caffd2d49426ad3554afadb13df2013fc5fa333c464b5f7232ff29e6c13be944514dc83e147d7532ef42ccd09976fdd177ce3a2c8dfcafcaebe8b53d6851", &(0x7f00000003c0)="242cc7f34ba1c7cb657dbeed6fa647e28721cd14621dab6f8aa5876ee4ede93f54f4884114f20414287f8fa0ee502380fe5e113ab101a1e67c183a772c439545e68f66933ef87d32d62ed9fd5ce807d64546c733f26dd0558a0a6ceed73ba2447efc3b4a8685efe9643b1b18d02f82a28b50d5e5bf587a5166", 0x4ee, 0x1}, 0x38)
ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000480))
r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='blkio.bfq.empty_time\x00', 0x0, 0x0)
ioctl$NS_GET_NSTYPE(r4, 0xb703, 0x0)
ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000500)=0xb274)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000580)={0x4, &(0x7f0000000540)=[{0x3, 0x0, 0x7, 0x71}, {0x2, 0x31, 0x4e, 0x8}, {0xa680, 0x1, 0x2, 0x6}, {0x9, 0x5, 0xf, 0x80}]}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e23, 0x8, @mcast2, 0x7ff}}, 0x72a2, 0x5}, 0x90)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000680)=r4, 0x4)
setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x4e21, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, {0xa, 0x4e20, 0x9, @private1, 0x9}, 0x1, {[0xe, 0xaf4, 0xfffffff9, 0x4, 0x5300000, 0x1, 0x9fb8, 0x5]}}, 0x5c)
r5 = accept$packet(r0, &(0x7f0000000740)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000780)=0x14)
setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000007c0)=@req3={0x7, 0x10000, 0x10001, 0x7, 0x9, 0x7, 0xab}, 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0xfffffffc, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xc}, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x1, @remote}, @in6={0xa, 0x4e23, 0x101, @mcast1, 0xa2}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0x7, @mcast2, 0x32}, @in6={0xa, 0x4e23, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}], 0xb0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001ac0)={r4, 0x0, 0x1000, 0xa1, &(0x7f00000008c0)="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", &(0x7f00000018c0)=""/161, 0x9, 0x0, 0x58, 0x8b, &(0x7f0000001980)="b6efb9d20c8c828e1148b8ebe3bbbbccb9d2341016e44d6e4ec0f8d818321042c04716e443402f1ee769ba7f7c08f02e61bc10b94aa6de2b70c8ef7caaec9128b2b53893ab10edbace654ed426e4c9b19aaed0b06e427de0", &(0x7f0000001a00)="b87aac0c61157b37d135c5d4b52f98910101e418a35213ce03a854a828b04fa77bd338f5111cc0e82485e018b46f5e9425388db8bceaa0bf881324c1329283e4ad031d2e0e13fb86c7634ccf3c320dc751e5b1cf53ea0161b62ebac851ac31640e16050c64629920c283e014f4c06292cd1f5d676d857c33781688a81b0571baa141300a72603c0fa2d4a8", 0x6, 0x0, 0x3}, 0x50)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001b40), r2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001bc0), r4)
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000001cc0)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x58, r8, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x10)
r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000001d40), r1)
sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x6400223}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x20, r9, 0x300, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4004)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000001e40)=0x10000, 0x4)
r10 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r10, &(0x7f0000001e80)={0xa, 0x4e20, 0x4, @mcast1, 0xff}, 0x1c)
getsockopt$IP_SET_OP_GET_BYINDEX(r2, 0x1, 0x53, &(0x7f0000001ec0)={0x7, 0x7, 0xffffffffffffffff}, &(0x7f0000001f00)=0x28)
socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$FIONCLEX(r7, 0x5450)

2.830912965s ago: executing program 5 (id=3528):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x2, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000400007012bbd7000fedbdf25047c00000400c280180009801400ff801000461523000080"], 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

2.698105686s ago: executing program 4 (id=3530):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
r0 = socket(0x40000000015, 0x5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0)
preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000280)=""/241, 0xf1}], 0x1, 0x0, 0x0)
ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000000)={r0})
bind$alg(r0, &(0x7f0000000680)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-ce\x00'}, 0x58)
connect$inet(r0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000005c0)={&(0x7f0000000180)="ff4497eeac52a6162219dd8f9a70321b2336a65eee7a7267f564045d3c222e9951c5713f6f5f6f3396c1eec5d5281dd68fd88835c8af55764f44296256a4b4a997b59d9b8dac91a3700d829d9b59a272458957d237c383d2716dec860af4eef06dfb1ee3a28ab7d5827f58da2f286f50c7654ebdb81d786fcfcc52470459d0dd7b9789220791f668af720e9923ff782c8104c55958d4bbad293b0f474737f1d6454db8e300dcb09f738b481ebd110a3d6190abefb7fb20c6f558d622f8700969b51ad91dd5153bf5da420fe15f663a435f66ec73f32e1fb878a6d5", &(0x7f0000000380)=""/106, &(0x7f0000000400)="74ce6302a16de7bddbb7d4c48916dce9465c4bb074e970aa072e64029414d2b672f99d91783f701ef98e251bdacdb9a3049b6fd84b2d7ccd8c841636410a72ad2c31553f5ed103c49f8fd1a71fe385fb5467cd98cfeafdd4f3706f3fadc751aa2dc7748e58c0599ef9a500cfef0e28504d2d0422d08294d12d753c3ceeb7e99bba7bf0c5d14fa1af1786aa2c33138ea657d4225a0c", &(0x7f00000004c0)="c0ff596cbe261eb940a364f7f47ced75f16ec5b68885f0efc6cf3f66e6a36fbf133d0831536d1939570f43b17d3ef2fad9eeaf70109bac8f6c8e4c11387eb8d1ef10d7dc46b16bce2ef6770ea1a75a6d3f8d08d1304e7775362265d4c3124362aee019dee15b401f224983ae1939a56ff26d47c45b12386cacd4528b67e5ebe786369ce12ec925f798285598f18d9f387f22106c825a6e1a62d989ee66d4517fa1f182c135b12777c7685a3e69af010d561061645657dc72cad80614ba7601bc5ce484e333dd6f73b238f958cd65d80b12e6aa3ed5010402e87ec676a1a7a375dac4cfe2", 0x5, r2}, 0x38)
sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x800, 0x70bd25, 0x25dfdbfd, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2}, 0x40091)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180200000100000800000000040000008500000053000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x18, &(0x7f0000000280)=ANY=[@ANYRES8=r0, @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fcff00008500000086000000bf0900000000000055090100000000809500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b70300007b0d0000850000007f0000004500f4fffcffffffbf91000000000000b702000001000000850000008500008d480000000000000095", @ANYRES64=r4, @ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x7, 0xff1, &(0x7f0000000cc0)=""/4081, 0x41000, 0xfdd39369840dd32a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb, @value=r2}, 0x94)

2.690958194s ago: executing program 3 (id=3531):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) (async)
r1 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080fffffffe0000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00'}) (async)
r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={<r3=>0x0, 0x1000}, &(0x7f0000000100)=0x8)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000180)={r3, 0xa, 0xfff}, &(0x7f00000001c0)=0x10) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r4, 0x852ac000) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xfa, &(0x7f0000000f40)=""/250, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94)

2.431595812s ago: executing program 3 (id=3533):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r1, 0x89f5, &(0x7f0000000000))
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8)
sendto$inet6(r0, &(0x7f0000000140)="9f", 0x34000, 0x2000c094, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c)
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000810000041256000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24000041}, 0x0)

2.100065716s ago: executing program 5 (id=3537):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001440)={&(0x7f0000000040)={0x13c8, 0x15, 0x20, 0x70bd2b, 0x25dfdbfe, {0x3}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x8}, @generic="92f49cfcbce5d09e7c74842b1ca8c0bcb4200d5de122952aa38517c5664a3e169f62ae6f18a3cc5f0d481d06c4", @nested={0x114, 0x11f, 0x0, 0x1, [@generic="15fa641752177959fb1d0ace53c419e50440937a4aafaf70243268b4e42799a4f1bd4938b17500d02c2891303fe9ce512bb9ca049c73633bee1a889efaf6bf0745ab667ce7dca11a1585f446da4e3e6342b891dae8b33dddf48ae96927ddc897c4da7229a43dcc6d30a5efdafa0a970f62d272ba2427a43ad9be1037a0d751d5a36b6fc94132bc07d7473335c880c2fdcebe0dff61e42510b25b21ddf5162ac61339a0d79fb0e7b2636322d3efa031d5cab97161d5fab7719de3a42310db046771665585dadabe2af1e2522b946d41917a9a813a33", @generic="97332b8b6839c14ebbf91240c83795a25d1ee0918182d67d3364e3d360b1c73bc61588258fe2c97f4572121168321f0de543df7f7888dc8bfb7438"]}, @nested={0x241, 0x1a, 0x0, 0x1, [@nested={0x4, 0x61}, @generic="151ce97f2bbf83730f7f7096c1476151a1a4b7ac778b8a57d6328c9f64a123bcb38a40af263c564a6c550cd7a719c94d289b70d170f993c61ec48d2b0cf79ca736e7bfb8590958f3b53ecb34755be76f645585101c414164e65f4c2b1a8a4e5283032f59cdfc4a038699dc4cbb19c2177402bd3b1f4f05cfc6d5f39f284b2b0c8170115de218b6d982fdf75becd78130b0a9831ca09c94d31e814f25052fb9dddead75b3db3acdf1cd0a77e8d847bfcdba0e41b5", @generic="893784ab6035572fd53bce681db8a6541acbb61954862625b2637a1b7d58e0e4efa0e3f7f9d94029efcfaabbf61233cf8547f274d8a6902ed95e80f8e5bdacda35d50ce0cbb6a5bd8be3dbdf8d559fa2fb77bc443dd8681500589b33afe576fe9912722ee0ae6514c05ee9c2be70e2fed964d09194f6a952f8d1aeee57013eb5b0458a5fdb2b6c32af52692eeb1b20a904ea512c411033904098f431f869cf092820decffc745f29399b1e2089ac90a47d5301e7ea25104956982e69ab40a99d65180c8e23270a5726592d939823d38ce2c350bf5dc60614c2d15ce33a0120e5230a27edd255f66f9092821c3d41c841cfacdc", @nested={0x4, 0xc2}, @nested={0x4, 0xfe}, @typed={0x4, 0x1b}, @generic="f6e9756f3fbd688e067e2fd8ed432758fa7c1dec7c525397568d83881b09b5449160360040d1ecf2fa772a44a06c13d2bf53f9013219c53316cd09376b34ef660b47ddee1f558c344458959dd6bf5b3f9334bd7e0710963d3a6028fa546f912e9305d1fcd326a3020cbfa8b0100c7e86def346e71a700981cdf3158420c818d29909", @nested={0x4, 0x67}]}, @generic="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", @nested={0x8, 0x4b, 0x0, 0x1, [@nested={0x4, 0x13c}]}, @generic="61e6ddef1131", @nested={0x17, 0x102, 0x0, 0x1, [@nested={0x4, 0xd5}, @generic='OF8', @typed={0x4, 0x10}, @nested={0x4, 0x159}, @nested={0x4, 0x58}]}]}, 0x13c8}, 0x1, 0x0, 0x0, 0x804}, 0x50845)
sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001)
ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f00000015c0)=0x9)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x54, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'nr0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x40061)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001740), 0x400002, 0x0)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000017c0), r1)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000001880)={&(0x7f0000001780), 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r3, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x28, 0x7, 'system_u:object_r:sulogin_exec_t:s0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000)
bind$netlink(r0, &(0x7f00000018c0)={0x10, 0x0, 0x25dfdbfe, 0x4000000}, 0xc)
ioctl$SIOCGSKNS(r2, 0x894c, &(0x7f0000001900)={'ipvlan0\x00', 0x200})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000001980), r1)
sendmsg$NFC_CMD_LLC_SDREQ(r4, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x64, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_SDP={0x50, 0x13, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [{0xc, 0x1, 'ipvlan0\x00'}, {0x5, 0x1, '\\'}, {0x5, 0x1, '('}, {0xc, 0x1, 'ipvlan0\x00'}, {0xf, 0x1, 'NLBL_UNLBL\x00'}, {0x4}, {0xa, 0x1, '/**\\\xb2*'}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4000040)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), r0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001e00)={0xffffffffffffffff, 0xe0, &(0x7f0000001d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000001b40)=[0x0, 0x0, 0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f0000001b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001bc0)=[0x0, 0x0], 0x0, 0x21, &(0x7f0000001c00)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000001c40), &(0x7f0000001c80), 0x8, 0x94, 0x8, 0x8, &(0x7f0000001cc0)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001e40)={'vxcan0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001e80)={'wg0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001ec0)={'vxcan1\x00', <r10=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f80)={0xffffffffffffffff, 0x58, &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r11=>0x0}}, 0x10)
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000002100)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001fc0)={0xf4, r6, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf4}}, 0x0)
write$tun(r2, &(0x7f0000002140)={@void, @val={0x1, 0x1, 0x0, 0x2000, 0x7, 0x2}, @mpls={[{0x4}, {0x0, 0x0, 0x1}], @ipv6=@icmpv6={0x2, 0x6, "222488", 0x26f, 0x3a, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, {[@fragment={0x0, 0x0, 0xe, 0x1, 0x0, 0x11, 0x68}, @hopopts={0x32}, @srh={0x0, 0x6, 0x4, 0x3, 0x9, 0x0, 0x8, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local]}, @fragment={0x3c, 0x0, 0x9, 0x1, 0x0, 0x1e, 0x65}, @routing={0x8, 0x2, 0x1, 0x5, 0x0, [@mcast1]}, @hopopts={0x0, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @pad1, @enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x9}]}, @srh={0x5c, 0x0, 0x4, 0x0, 0x9, 0x8, 0x2017}], @ndisc_na={0x88, 0x0, 0x0, 0x81, '\x00', @private1, [{0x4, 0xc, "71dd6d8f9db35e5a16bc7f74acabdc24027b957740d0189e3c9df88a6c5180c842426048f19f286ee4b65d4d758686e72fe322eda2c4f73cad1c6511de90b79cf0bc0fea236b69a84647220a5940e72c9d24a46d4738d0b23479aafa60f64d05caf328"}, {0x22, 0x5, "4cc8c712308b1503b6fd084e42bb5809812f55a13d296622ba33fa380b743793f6fe5d4a8583ed78562f121f"}, {0x3, 0x10, "33a4d1b8a5886eee3763e215a6ea50f33fa72a839b4f47899302b44e983c40dabb0a8d264e9079bafed59a29056d470682e2cc9bd9fa91520dcb72209a283b16100d4e2a2b32f4862817b3fed4f76c84db414bae9a9073093575d6a62f53d5b22523ec437b1bbab129939bd7e310ca0b37199a71822adf78c6b91e22f837e89dda79308c"}, {0x1f, 0x15, "122be8d8d6c5a9b572bb6b22db2458b2ed0850da8fd6eeadd5f658e1ccc24ef70e069e597a5ee5de556f89346d2b586190972fcda58eb54922a62dc2e120fb5fd70ea3d834bbe496e463ec0d0374cc3554206220def5281706575dee57979bb32acd31da2dfa833448b2a59e65359c1d3f31934a051923e6ea9a7a6d7a18aa95473cf094a0fab00b5fff72f816cbfe32752508b36fc66ea7ce719f09d32606110fadd2605641d5924c261ec9"}]}}}}}, 0x2a9)
r12 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r12, 0x6, 0x1d, &(0x7f0000002400)={0x0, 0x9, 0x2, 0x0, 0xff}, 0x14)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000002540)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002500)={&(0x7f0000002480)={0x58, 0x7, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0xc1)
r13 = accept4$netrom(0xffffffffffffffff, &(0x7f0000002580)={{}, [@remote, @rose, @default, @default, @default, @rose, @bcast, @netrom]}, &(0x7f0000002600)=0x48, 0x800)
getsockopt$netrom_NETROM_N2(r13, 0x103, 0x3, &(0x7f0000002640)=0x3, &(0x7f0000002680)=0x4)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002700), r0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x2c, r14, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000)
openat$tun(0xffffffffffffff9c, &(0x7f0000002800), 0x80, 0x0)

2.016514012s ago: executing program 1 (id=3538):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400140002000000000000000000000300000000050000000200000005000000000000000000000b020000000000"], 0x0, 0x3e, 0x0, 0x8}, 0x28)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x5, 0x70bd25, 0x25dfdaf9, {0x0, 0x0, 0x0, r2, 0x18002, 0x1011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x5}]}}}]}, 0x3c}, 0x1, 0x5000000, 0x0, 0xe0001}, 0x240000d0) (async)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x1)
ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000080))

1.703957342s ago: executing program 5 (id=3540):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x840000000002, 0x3, 0x100)
getsockopt$inet6_mreq(r1, 0x29, 0x15, 0x0, 0x0)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r2, &(0x7f0000000440), 0x10)
listen(r2, 0xfffffffe)
r3 = accept4$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x1, 0x2, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbffffff000000000000000085000000bc000000850000005000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000100)="76502b57833b817d00e5a441665b", 0x0, 0x433, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x9}, 0x50)
recvfrom$unix(r3, &(0x7f00000001c0)=""/236, 0x26, 0x10120, 0x0, 0x0)
recvmmsg$unix(r3, &(0x7f00000001c0)=[{{&(0x7f0000000340), 0x6e, &(0x7f0000001680)=[{&(0x7f0000000480)=""/165, 0xa5}, {&(0x7f0000000040)=""/63, 0x3f}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/172, 0xac}, {&(0x7f0000001600)=""/104, 0x68}], 0x5}}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000001880)=@base={0xa, 0x4, 0x8000, 0x5c, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001700)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000)
getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, &(0x7f0000000440))
r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r7 = socket(0x40000000015, 0x5, 0x0)
getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, 0x0, 0x0)
connect$unix(r7, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$sock_ifreq(r6, 0x8991, &(0x7f0000000000)={'bond0\x00', @ifru_names='rose0\x00'})
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x12, 0xffffffffffffffff, 0xe0434000)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r0, 0x0, 0x0, 0x0)

1.685788845s ago: executing program 1 (id=3541):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x14}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400c0}, 0x240048c8)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x9, 0x5, "99609449a7"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}}, 0x0)
listen(r0, 0x3)
pipe(&(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0)
close(0x4)
splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0)
r7 = epoll_create(0x40)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000100)={0x21})
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x14}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400c0}, 0x240048c8) (async)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async)
bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000300)={0x48, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x9, 0x5, "99609449a7"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}}, 0x0) (async)
listen(r0, 0x3) (async)
pipe(&(0x7f0000000040)) (async)
vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async)
splice(r5, 0x0, r4, 0x0, 0x10000008ebc, 0x0) (async)
close(0x4) (async)
splice(r3, 0x0, r6, 0x0, 0x25a5, 0x0) (async)
epoll_create(0x40) (async)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000100)={0x21}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)

1.659429988s ago: executing program 4 (id=3543):
unshare(0x20020480)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000010101000000000000000007000004080008000000000804001980"], 0x20}, 0x1, 0x0, 0x0, 0x24008880}, 0x804c8c0)
r2 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x3, 0x0, 0x4}, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)
recvmsg$kcm(r1, &(0x7f0000000480)={&(0x7f0000000180)=@rc={0x1f, @none}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/61, 0x3d}, {&(0x7f0000000240)=""/78, 0x4e}, {&(0x7f0000000300)=""/154, 0x9a}], 0x3, &(0x7f0000000400)=""/111, 0x6f}, 0x40000120)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x82)
ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000140)={0x21, 0x1})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0)
tee(r5, r5, 0x100000001, 0x6)
syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000004c0)={'sit0\x00', <r9=>0x0})
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETOFFLOAD(r10, 0x400454c9, 0xba98575a95aeb71d)
r11 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r11, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r9, 0x1, 0x3, 0x6, @remote}, 0x14)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

1.520646081s ago: executing program 1 (id=3545):
socket$nl_route(0x10, 0x3, 0x0) (async)
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="4c01000010000100000000000000000000000000000000000000000000000080fe800000000000bb0000fff7202a8deb63d8014d000001000000003b100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd70000000000002000001000000000000000008001f0004000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="02000000"], 0x14c}}, 0x4810) (async)
sendmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000003880)="89f2748df609b6843da7cbab865fa94bd35b4686978f39583d4c44c26afd1568aca8bb8237968d957260ef17e93b130a89eeef945a1ed19978d687c5752106dce67ed08ce04bb295f4d9314b84400deb3eb10902812b38d856975bc2e851edd4bfc6bff8ebac830c9bcffa7cc3821e656bae439c7eed4873acb7676732fc9d03b2079a337ac687560dac01438b9d3b169ee91641cbf581ea43072bc2630ebf13db4c2a29be149f7b1f1685c2697b5fbec5269d83a8fb4d73b806a66078fedc48736024525ddd010e5ffad25f58ae37ee090709e8355044c76217626e2d32a30b7be91b7408b895301a0338c87df3068f603dd31c25b5e98285f8def31245c87ab85c9de5f89e", 0x106}], 0x1}}], 0x1, 0x20000) (async)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async)
r6 = socket$packet(0x11, 0x2, 0x300) (async)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8, <r9=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r7}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x16, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x10c, r0, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x8000, 0x6]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x3, 0x10, 0x3600]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x0, 0x1, 0x9]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x917}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x4b}], @NL80211_ATTR_FRAME={0x4a, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @random="9fb668294aed", {0xd, 0x2}}, 0x1040, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @void, @val={0x2d, 0x1a, {0x2, 0x0, 0x1, 0x0, {0x0, 0x2, 0x0, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x1, 0x7, 0x45}}}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008802) (async)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000004c0)={r1, 0x6, 0x5, 0x86c2})
r13 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), r13)

1.32443322s ago: executing program 3 (id=3547):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x44084)
unshare(0x68040200)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x4e, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
socket(0x840000000002, 0x3, 0xff)
sendmmsg(r1, 0x0, 0x0, 0x9200000000000000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1)
r3 = socket$nl_route(0x10, 0x3, 0x0)
tee(r3, r3, 0x1ce, 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r3, @ANYRES32=0x0, @ANYBLOB="2804070010180000140003006272696467655f736c6176655f31000008000a00", @ANYRESDEC=r0, @ANYBLOB="0500000000040000", @ANYRES32=r0, @ANYBLOB, @ANYRES16=r3, @ANYRES64, @ANYRES8=r3], 0x48}}, 0x0)

1.215724741s ago: executing program 1 (id=3548):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
sendmsg$can_bcm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0)
sendmsg$can_bcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=r4], 0x48}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x24}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'C'}]}, @NFTA_RANGE_TO_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0)
r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3)
getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x49801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}}, 0x0)
sendto$packet(r1, &(0x7f0000000600)="05d936277c6f5422007f83477ca1b2f8e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40890, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @multicast}, 0x14)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0)
r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x7, 0x1e, 0x401, 0x180a0, r0, 0x3a0, '\x00', r6, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0xb, @value=r7, @void, @value=r8}, 0x50)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=ANY=[@ANYBLOB="1808000000000000000000000200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000ae8900000000000007080000f8ffffffbf8400000000000007040000f0ffffffc70200000800000018260000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf980000000000005608f8ffffff00008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
close(0x4)

979.833595ms ago: executing program 2 (id=3551):
socket$nl_generic(0x10, 0x3, 0x10) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB="0000000200000000000000000000007951000000", @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x48)
openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async)
r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0)
openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) (async)
r3 = openat$cgroup(r2, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x1000000000000002, 0x0)
setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x161)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001a80)={r1, &(0x7f00000018c0), 0x0}, 0x20)

783.424881ms ago: executing program 5 (id=3552):
bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
socket$unix(0x1, 0x1, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$kcm(0x11, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x3d, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000a30900000000000068315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"/265, @ANYRES16, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000002800038024000380200001801100020073636865645f737769746368000000000800010006000000"], 0x54}}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4044040}, 0x40090)
r5 = socket(0x40000000015, 0x5, 0x0)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r1, 0x49196000)
close(r5)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c)
r7 = socket$kcm(0xa, 0x2, 0x0)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44)
setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000001340)={{0x84, @broadcast, 0x4e24, 0x3, 'lc\x00', 0xc, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0xffffffff, 0x12d5c, 0x1294b}}, 0x44)
sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000000)=@req={0x0, 0xdd9, 0x6, 0x80200}, 0x10)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r11=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r11, 0x25, 0x0, @val=@tcx}, 0x1c)
r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb0100180000000000000098000000980000000a00000004df000001000013000000000b000000000000008f5e00000d0000000000000801000000070000000100008505000000100000000500000002000000070000000000001201000000000000000100000d00000000030000000400000007000000040000850200000007000000000a00000004000000ff0100000c00000001000000000000800000000000000000060000000030305f61305f610000"], &(0x7f0000000380)=""/73, 0xba, 0x49, 0x0, 0x3}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x5, 0x0, r6, 0x9, '\x00', r11, r12, 0x4}, 0x50)

676.253011ms ago: executing program 2 (id=3553):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000020000000000000000600000d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000090000000000000000000000090000000000000000000000090200000000"], 0x0, 0x96}, 0x28) (async)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009600000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async)
socket(0x10, 0x3, 0x0) (async)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r1) (async)
r2 = socket$kcm(0x29, 0x5, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) (async)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, 0x0, 0x0) (async)
write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=<r5=>0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES8=r5, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x40088c0) (async)
sendfile(r2, r3, 0x0, 0xffffffff000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
epoll_create1(0x0) (async)
r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x10000000000, 0x3, 0xfffffffffffffffd, 0x2, 0x80, 0x1, 0x9}, 0x0, &(0x7f00000002c0)={0x3fd, 0xfffffffffffffffe, 0x8, 0x7, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001300310329bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="044602000160040008000c1bd225f7ffffffff0425bf589c51a281d9", @ANYRES32=0x0, @ANYBLOB="050027002600000005002700ff000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008810}, 0x20040850)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) (async)
write$rfkill(r7, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8)

586.542515ms ago: executing program 2 (id=3554):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0)
sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x100, r1, 0xe701ac47a3d23ecd, 0x0, 0x10002, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000010}, 0x8800)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008004}, 0x40001)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b040000000000000000020000006c00048018000180080001006f7366000c000280080001400000000424000180090001006d6574610000000014000280080002400000000c08000340000000046c0001800a0001006c696d69740000001c0002800c00014000000000000000640c0002400000000000000001090001"], 0xc0}}, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300050018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
r5 = socket(0x10, 0x2, 0x0)
sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, 0x0, 0x4, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1, 0x6, @udp='udp:syz1\x00'}}}, [""]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x24008814)

581.256422ms ago: executing program 1 (id=3555):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000000000020000008001e00ff01ed0006001d004e220000"], 0x2c}}, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

325.255676ms ago: executing program 2 (id=3556):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c4, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x894, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}]}, {0x398, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xf8, 0x6, 0x1, 0x0, "85490e095c6017b9cbd4002527ee6a41a8cbf071da015abc1c008456a3ccf029b7ccb472974656c89c9f6f5396dd56fb917bd06db10c154f4e3bf35ec3398b13f3b3d749706da948947ca7aedf56565f91668adbeb7d3d77a972a1ad26962dfa4a854478fc5f6bfb5429f199875e2dd76713bc2fc365103b4b9e8c692fbfeaaebe65707117eef91fc61f82939bd389bd154d1f206d7b33948241aa1a0f5f2ca015cf64fcc4860f72044742ad3117820895f1cdce371a02da2e0d262f0dcf1e8fa4a3c8e634c241d6238f883979dba8f86d73dc0643f2ad5fde10b5988ff0b2fc4e06295cdad1ca1bb33aeaf1512afa182beaa93c"}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x1e, 0x6, 0x1, 0x0, "cfaa87597dd0816ef3b8b6b275efed5ffa05fec6ae2782f4b4bc"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x244, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "7bc1f3d9a2c2dfea63cdfef4415f2829373cbc1c6520a19a6a9f27610eab1cde87d2833a1c6001e0bcf28ba063e6340b393ff9f55e8f4405e0e02fab612b8765fa61c6f79b448ea262feb9a21476d885abb68b9aa0bf226c381d89d8e38254500f394d13c37e68abc28b3fc031e97a870968a239df5d"}, @NFTA_DATA_VALUE={0x9a, 0x1, "0f748c4681c9548f8d5cc4b439d7e28f8baf5a072b383a6a5a25de6846d0742cb9b9069d16fb9f83608dcf351f59dfb99f8f2998b7d21a0026ef16c360baeb1d2510435e92568f29e25d3c80378ecbedc16e580c6236ecbfad56a18d1858053fcf5af882c3ef1a43f5ea78531b841ef1860473edee45ccfb598aa9a49aea70bc7c849e2999200f135a8c530cae651f0abb3439d84230"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "7b70efd55efeeb9b99bf10925f1cf4a8c5a9955c64a16af6ba45c571c31be5739b07ee78828d56428f"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x338, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x6b, 0x6, 0x1, 0x0, "5f46fa5f66afb7d23d0e08047686b35b2ad9c7122cc1308bcc6abec73aef11405b1a8ad8cfb7828264d8c1a203c8178951a1f1994893c5b309281e670eb762c8efa1d7db12bd215f7ce98eac16077079b9aed9915953033ef6d330588ee4808b93e0f2f2bac777"}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, @NFTA_SET_ELEM_DATA={0x28c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x7}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xae, 0x1, "6db5a3226b04d1a2017fc3953dcccb175dc6f02c3c9f2bb1188e25267e50af6f3e65a0219573bd78dad06ef84dd7ea2b05a03c48d2c567397611b37b75d2611a71fbe30f8d26c3adc7df8f20c30c1ec22e24c43e18022d628c6e99fbc0c2c1db3d078e37a3eab29284a7e7905580f10392754d8b4fdd9e34689e880c8560f51fdbd8bf2dcb8bd292572b16d4fdb0b7deb23563ded78ef3f564f1dd196c9edffb7fe89fa3ba89bf81cbae"}, @NFTA_DATA_VALUE={0xa5, 0x1, "9e043b357320d461de95885c2e4cb1581a8561bcabc4a3fc2a57c6db0f303c22f1686095c81b81d1066749ad22171016f94381d5d678e2b2c17afba9b76881b5d7ed8d46d06ed1e632daf552e35e8af7173d6fc820b246b912c0b836daa80cc6613ff2b22a707a57555daa9c5c4ff98c48e9925aeb04da1ac359e93fb1562066f1c1c978e23777858f632110e9e71f7ef1b8a964663ad31e9c3e01545350e51e3b"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "451c925eef49179254b8f9024cfe705121a0c444c8"}]}, {0x1a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x60, 0x7, 0x0, 0x1, @nat={{0x8}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x13}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_PROTO_MAX={0x8}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x17}]}}}, @NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x671}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_KEY_END={0x78, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x71, 0x1, "c11597dcb49313d1c200bac78da19233c776d7f898d217b226c65c6efa6791865a3ac66b8f0b4325fc4dcc2907929b0568758a2cee09d57d8d2d2ef0bb09a0ed84dccb979cf09e93aaf5395372192c23b294dc4cf147e287dce6f6ecfa4566f5faf9f8e702aac15eb47e1c42b2"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x84}}}, 0x948}}, 0x40000)

321.105377ms ago: executing program 1 (id=3557):
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000800)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r2=>0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], <r3=>0x0, 0x9d, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000280), &(0x7f0000000300), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000000340)}}, 0x10)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000100000000000000", @ANYRES32=0x1, @ANYBLOB="06000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000040000000400"/28], 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_lsm={0x1d, 0x3, &(0x7f0000000980)=ANY=[@ANYBLOB="850000000200cb1495d516a4000018480000f8ffffff0000"], &(0x7f00000009c0)='GPL\x00', 0xc0ab, 0xa9, &(0x7f0000000a00)=""/169, 0x41100, 0xc, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x5, 0xe, 0x33f3f34f, 0x4}, 0x10, r3, 0x0, 0x4, &(0x7f0000000b40)=[r4, r4, r4], &(0x7f0000000b80)=[{0x0, 0x2, 0xc, 0xb}, {0x3, 0x5, 0x4, 0x3}, {0x2, 0x5, 0x1, 0x2}, {0x5, 0x2, 0xb, 0x9}], 0x10, 0x5}, 0x94)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000bc0)=0xffffffffffffffff, 0x4)
r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00'}, 0x18)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r6, 0x35, 0x0, 0x6, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000180)=[0x0, 0x0], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], <r7=>0x0}, 0x40)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="30000000eb4b1e9991d601000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES64=r7], 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB="370600", @ANYRES32, @ANYRES64=r7], 0x20)
r8 = bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000dc0)=ANY=[@ANYRES32=r8, @ANYRES32, @ANYBLOB='$\x00\x00\x00\x00 \x00\x00', @ANYRES32, @ANYRES32, @ANYBLOB="d3afce95856941c7febc731e557e467d12ad8abdd0d252ec15f6b0d0274200ba11d9ba43ce00cecaf8ad5800fd924be55eea81b2a401180fd391e723d5a759407a9ac062f56cfb004434005bbdd902b9c64df129de5179f0039805ebc9a3c63e137000e95a67dc71226114a1a344cb82a83292def791e17a21f1816d885208540a1a40bc3310148ec0", @ANYRES64=r7], 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@map=r4, 0xffffffffffffffff, 0x1a, 0x36, 0xffffffffffffffff, @void, @void, @void, @value=r1, r7}, 0x20)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11}})
ioctl(r10, 0x8b1a, &(0x7f0000000040))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local})
bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], &(0x7f00000002c0)='GPL\x00', 0x80, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01191800"], 0x0, 0x44}, 0x28)
ioctl$TUNSETGROUP(r9, 0x400454ce, 0xee01)
setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0x0, 0xe8, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'ip6gre0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x7, 0x6a}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

245.028444ms ago: executing program 2 (id=3558):
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_opts(r1, 0x0, 0x5, &(0x7f00000007c0)="dd", 0x1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$igmp(0x2, 0x3, 0x2)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1=0xe00005a8}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="0f024a3bb690944e3de505d3fced17aab3fc6219c223664b375536c43567b24217e7515b6bcc37c8ebc93e44706d388af11f89fff5df3f3c79372812dc95f7b1ca96c12eed232568f7f9b84cdbd6ababb6ca215ace17674ec1a8a30fc08a9a897aea8220c07207c0e46eaa8c6bdd844de199c51e5083a17f977bed486827cba2971472aa5a2ccac93df1be76a576f791f9778e8342e35eea79baa2da394b8f0ae40682d3742748724a2d0d37a2c0b553f44ba8f211424765f8fc7ed0f78991b14b279f736883abe88d1ea836732a28bea1b3f719361b672e68a1839eedc67915707fcede", 0xe4}, {&(0x7f0000000a00)="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", 0x4c5}], 0x2, &(0x7f0000000040)=[@ip_retopts={{0x30, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0x66, 0x3, 0x9, [{@local, 0x1}, {@multicast2, 0xdcd}, {@local, 0x57}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x2b}}}}], 0x50}, 0x0)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x7, 0x7, 0x7fff, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7800, 0x7800, 0x8, 0x2}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', <r6=>0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x401}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x9}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048011}, 0x20000011)
syz_emit_ethernet(0x6e, &(0x7f0000000400)={@local, @random="8f0300", @void, {@mpls_mc={0x8848, {[], @ipv4=@icmp={{0x5, 0x4, 0x2, 0x33, 0x60, 0x66, 0x0, 0xf8, 0x1, 0x0, @multicast1, @multicast1}, @dest_unreach={0x3, 0x7, 0x0, 0x0, 0xf6, 0xff4e, {0x11, 0x4, 0x3, 0x10, 0x3, 0x66, 0x1, 0x15, 0x1, 0x86, @remote, @multicast2, {[@noop, @noop, @end, @end, @timestamp_addr={0x44, 0x2c, 0xcb, 0x1, 0xc, [{@empty, 0x6}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10bf724c}, {@multicast2, 0x2}, {@private=0xa010102, 0x10001}]}]}}}}}}}}, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000a9c000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xd4fa3000)

0s ago: executing program 2 (id=3559):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES32=r0], 0x0, 0x8000007, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0xcf)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$inet(0x2, 0x1, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060)
setsockopt$sock_int(r1, 0x1, 0x1e, &(0x7f0000000100)=0xffffffffffffff40, 0x4)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0)
getsockopt$ax25_int(r4, 0x101, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', <r5=>0x0})
connect$can_bcm(r1, &(0x7f0000000180)={0x1d, r5}, 0x10)
r6 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r6, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_udp_int(r7, 0x11, 0x67, 0x0, &(0x7f0000000080))
bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
sendmsg$tipc(r6, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x0)
setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
listen(r2, 0x0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000d1000000800000000000000000000000dd30ecfb82486e5d20d7fd7d6d127f9a0dfd89be2b65c43700f31266a81692b51a651eb1a355405e01b370695a70d67ee47fcea65b445ac94d5930de11e9b64c1076d797b2947a3ca1b297063c9dca1fb17aec340e9eba1b1b9f8004a402238c4aa70c77b58cb85be0fa7774bee8c0a5de95215a429e19a7674b3528e10bcf07a09429f29c139552e9"], 0x48)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r10}, 0xc)

kernel console output (not intermixed with test programs):


[  437.095246][T14542] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  437.148218][T14542] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  437.489270][T14542] macsec1: left promiscuous mode
[  437.523752][T14542] hsr1: left promiscuous mode
[  437.537448][T14542] hsr1: left allmulticast mode
[  437.542387][T14542] batadv0: left allmulticast mode
[  437.573862][T14542] veth7: left promiscuous mode
[  437.593040][T14542] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  437.602923][T14542] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  437.611311][T14542] ip6gre1: left promiscuous mode
[  437.617304][T14542] ip6gre1: left allmulticast mode
[  437.630068][T14542] bridge0: left promiscuous mode
[  437.635562][T14542] macsec0: left promiscuous mode
[  437.645211][T14542] vlan2: left allmulticast mode
[  437.650437][T14542] veth0_to_bond: left allmulticast mode
[  437.657800][   T10] lo speed is unknown, defaulting to 1000
[  437.664804][   T10] syz2: Port: 1 Link DOWN
[  437.684086][T14573] batadv_slave_1: entered promiscuous mode
[  437.822199][T12292] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.830647][T12292] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  437.854467][T12292] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.864544][T12292] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  437.894187][T12292] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.932962][T12292] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  437.941537][T12292] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  437.973114][T12292] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  437.992728][T14575] batadv_slave_1: left promiscuous mode
[  438.099195][T14582] lo speed is unknown, defaulting to 1000
[  438.151904][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  438.159986][    C1] lec:lec_tx_timeout: lec0
[  438.164670][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  438.182798][T14589] lo speed is unknown, defaulting to 1000
[  438.188785][T14582] wg1 speed is unknown, defaulting to 1000
[  438.256147][T14589] wg1 speed is unknown, defaulting to 1000
[  438.971300][T14618] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2057'.
[  439.053602][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2062'.
[  439.104443][T14622] gretap5: entered promiscuous mode
[  439.251474][T14629] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  439.272780][T14629] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  439.280268][T14629] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  439.944609][T14654] __nla_validate_parse: 1 callbacks suppressed
[  439.944631][T14654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2070'.
[  440.138493][T14656] lo speed is unknown, defaulting to 1000
[  440.146311][T14656] wg1 speed is unknown, defaulting to 1000
[  440.508947][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'.
[  440.796604][T14679] dummy0: entered allmulticast mode
[  441.315615][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'.
[  441.326009][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2084'.
[  441.338632][T14704] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2083'.
[  441.758363][T14722] bond2 (unregistering): Released all slaves
[  441.821373][T14727] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2088'.
[  441.833776][T14730] netlink: 'syz.4.2090': attribute type 101 has an invalid length.
[  441.844058][T14730] netlink: 'syz.4.2090': attribute type 7 has an invalid length.
[  441.869697][T14727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2088'.
[  441.897893][T14727] hsr_slave_0: left promiscuous mode
[  441.917894][T14727] hsr_slave_1: left promiscuous mode
[  442.152537][T14736] bond2: option ad_select: invalid value (34)
[  442.160934][T14736] bond2 (unregistering): Released all slaves
[  442.265178][T14749] netlink: 'syz.2.2095': attribute type 1 has an invalid length.
[  442.313352][T14752] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2096'.
[  442.343474][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'.
[  442.353363][T14752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2096'.
[  442.363032][T14752] netlink: 'syz.3.2096': attribute type 6 has an invalid length.
[  442.371354][T14752] netlink: 'syz.3.2096': attribute type 5 has an invalid length.
[  442.380576][T14752] netlink: 'syz.3.2096': attribute type 6 has an invalid length.
[  442.388782][T14752] netlink: 'syz.3.2096': attribute type 5 has an invalid length.
[  442.414745][T14752] netlink: 'syz.3.2096': attribute type 21 has an invalid length.
[  442.432038][T14752] IPv6: NLM_F_CREATE should be specified when creating new route
[  443.174532][T14783] lo speed is unknown, defaulting to 1000
[  443.181982][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  443.190066][    C1] lec:lec_tx_timeout: lec0
[  443.195096][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  443.201619][T14783] wg1 speed is unknown, defaulting to 1000
[  443.461500][T14797] netlink: 'syz.3.2105': attribute type 16 has an invalid length.
[  443.473254][T14798] netlink: 'syz.3.2105': attribute type 16 has an invalid length.
[  444.356088][T14797] 8021q: adding VLAN 0 to HW filter on device team0
[  444.367183][T14797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  444.398015][T14798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  444.443790][   T24] lo speed is unknown, defaulting to 1000
[  444.472543][   T24] syz2: Port: 1 Link ACTIVE
[  444.629898][T14814] batadv0: mtu less than device minimum
[  445.338704][ T1300] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[  445.348354][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  445.355581][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  445.525180][T14845] ip6gre3: entered allmulticast mode
[  445.553749][T14845] __nla_validate_parse: 10 callbacks suppressed
[  445.553770][T14845] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2119'.
[  445.575043][T14845] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2119'.
[  445.585613][T14845] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2119'.
[  445.818449][T14861] delete_channel: no stack
[  445.970705][T14867] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2124'.
[  445.982770][T14867] xt_limit: Overflow, try lower: 271964/0
[  446.000677][T14775] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  446.023215][T14860] delete_channel: no stack
[  446.270596][T14871] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  446.347164][T14879] lo speed is unknown, defaulting to 1000
[  446.574566][T14895] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2132'.
[  446.810120][T14918] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2137'.
[  447.637961][T14945] lo speed is unknown, defaulting to 1000
[  447.831039][T14958] lo: Caught tx_queue_len zero misconfig
[  447.838583][T14958] netem: unknown loss type 0
[  447.856857][T14961] validate_nla: 10 callbacks suppressed
[  447.856879][T14961] netlink: 'syz.0.2148': attribute type 1 has an invalid length.
[  447.875057][T14958] netem: change failed
[  447.879987][T14960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2149'.
[  447.918922][T14961] bond6: entered promiscuous mode
[  447.944442][T14961] 8021q: adding VLAN 0 to HW filter on device bond6
[  448.007835][T14968] IPVS: length: 132 != 8
[  448.032156][T14958] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  448.062836][T14958] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  448.092010][T14958] bond6: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode
[  448.201875][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  448.209977][    C1] lec:lec_tx_timeout: lec0
[  448.215100][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  448.249337][T14968] pimreg: entered allmulticast mode
[  448.346825][T14967] pimreg: left allmulticast mode
[  448.817017][T14982] lo speed is unknown, defaulting to 1000
[  448.894491][T14993] netlink: 'syz.0.2154': attribute type 1 has an invalid length.
[  448.934256][T14993] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2154'.
[  449.004768][T15008] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20001
[  449.365979][T15022] netlink: 'syz.4.2163': attribute type 1 has an invalid length.
[  449.413858][T15022] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2163'.
[  449.447514][T15022] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[  449.734793][T15037] bond3: option arp_all_targets: invalid value (129)
[  449.754687][T15037] bond3 (unregistering): Released all slaves
[  449.928167][T15045] netlink: 21356 bytes leftover after parsing attributes in process `syz.1.2169'.
[  449.986697][T15047] lo speed is unknown, defaulting to 1000
[  450.516555][T15074] netlink: 'syz.3.2175': attribute type 32 has an invalid length.
[  450.684250][T15076] netlink: 'syz.3.2177': attribute type 61 has an invalid length.
[  451.113695][T15091] vlan2: entered promiscuous mode
[  451.118891][T15091] dummy0: entered promiscuous mode
[  451.219875][T15097] netlink: 'syz.3.2183': attribute type 15 has an invalid length.
[  451.254557][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'.
[  451.322164][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2183'.
[  451.336251][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2183'.
[  451.358633][T15097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2183'.
[  451.377270][T15097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2183'.
[  451.403284][T15103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2185'.
[  451.454521][T15103] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2185'.
[  451.575193][T15111] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  451.640754][T15114] nbd: must specify a device to reconfigure
[  451.663568][T15114] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2190'.
[  451.698517][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2190'.
[  451.817393][T15121] x_tables: ip_tables: ah match: only valid for protocol 51
[  452.034525][T15134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2196'.
[  452.066133][T15130] team0 (unregistering): Port device team_slave_0 removed
[  452.097086][T15130] team0 (unregistering): Port device team_slave_1 removed
[  452.118592][T15130] team0 (unregistering): Port device bridge3 removed
[  452.744196][T15171] x_tables: duplicate entry at hook 2
[  453.221894][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  453.230049][    C1] lec:lec_tx_timeout: lec0
[  453.234834][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  453.859188][T15215] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000
[  454.169765][T15226] netlink: 'syz.1.2221': attribute type 8 has an invalid length.
[  454.293471][T15233] sctp: [Deprecated]: syz.2.2222 (pid 15233) Use of struct sctp_assoc_value in delayed_ack socket option.
[  454.293471][T15233] Use struct sctp_sack_info instead
[  454.447734][T15245] netlink: ct family unspecified
[  454.453055][T15245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.478983][T15245] netlink: ct family unspecified
[  454.492916][T15245] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  454.611783][T15255] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4)
[  454.909255][T15272] bond0: Caught tx_queue_len zero misconfig
[  454.967034][T15275] ieee802154 phy0 wpan0: encryption failed: -22
[  454.981636][T15275] netlink: 'syz.1.2234': attribute type 2 has an invalid length.
[  454.994035][T15275] ieee802154 phy0 wpan0: encryption failed: -22
[  455.146678][T15278] lo speed is unknown, defaulting to 1000
[  455.794064][T15292] netlink: 'syz.0.2239': attribute type 21 has an invalid length.
[  456.094923][   T30] audit: type=1800 audit(1770268675.118:11): pid=15317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2245" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2340 res=0 errno=0
[  456.711609][T15338] openvswitch: netlink: Flow actions attr not present in new flow.
[  458.772236][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  459.011924][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms
[  459.019994][    C1] lec:lec_tx_timeout: lec0
[  459.024743][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  464.052227][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms
[  464.060288][    C1] lec:lec_tx_timeout: lec0
[  464.065076][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  469.071958][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  469.080038][    C1] lec:lec_tx_timeout: lec0
[  469.084736][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  474.091971][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  474.100208][    C1] lec:lec_tx_timeout: lec0
[  474.104842][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  479.121940][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  479.130123][    C1] lec:lec_tx_timeout: lec0
[  479.134955][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  484.141913][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  484.150089][    C1] lec:lec_tx_timeout: lec0
[  484.154964][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  489.162032][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  489.170170][    C1] lec:lec_tx_timeout: lec0
[  489.174917][    C1] lec:lec_start_xmit: lec0:No lecd attached
[  494.182030][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  494.190181][    C1] lec:lec_tx_timeout: lec0
[  506.775751][ T1300] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[  506.784876][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  506.791214][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  506.799272][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  512.051907][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms
[  512.059997][    C1] lec:lec_tx_timeout: lec0
[  513.432555][T11087] lec:lec_start_xmit: lec0:No lecd attached
[  519.011944][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5580 ms
[  519.020022][    C1] lec:lec_tx_timeout: lec0
[  527.252123][    C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  561.767203][T15382] __nla_validate_parse: 10 callbacks suppressed
[  561.767225][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'.
[  561.790353][T15380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2261'.
[  561.801557][T15380] ip6gretap0: entered promiscuous mode
[  561.805232][T15385] netlink: 'syz.4.2263': attribute type 13 has an invalid length.
[  561.826029][T15382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'.
[  561.942030][ T5899] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  562.026112][T15385] xt_TCPMSS: Only works on TCP SYN packets
[  562.042540][T15389] lo speed is unknown, defaulting to 1000
[  562.378543][T15411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2270'.
[  563.012379][ T5899] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!
[  563.237401][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2277'.
[  563.285547][T15445] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2278'.
[  563.424012][T15450] siw: device registration error -23
[  563.659071][T15466] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2285'.
[  563.710658][T15465] bond5: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  563.725126][T15465] bond5 (unregistering): Released all slaves
[  563.811031][T15471] vlan0: entered allmulticast mode
[  563.824743][T15471] team0: entered allmulticast mode
[  563.840386][T15471] team_slave_0: entered allmulticast mode
[  563.873481][T15471] team_slave_1: entered allmulticast mode
[  563.885834][T15471] dummy0: entered allmulticast mode
[  563.895216][T15479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2288'.
[  564.176745][T15492] bond7: option ad_actor_sys_prio: invalid value (0)
[  564.210876][T15492] bond7: option ad_actor_sys_prio: allowed values 1 - 65535
[  564.226582][T15492] bond7 (unregistering): Released all slaves
[  564.260298][T15494] syzkaller0: entered promiscuous mode
[  564.266451][T15494] syzkaller0: entered allmulticast mode
[  564.435611][T15508] lo speed is unknown, defaulting to 1000
[  564.819772][T15524] lo speed is unknown, defaulting to 1000
[  564.917951][T15532] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2305'.
[  566.347259][T15576] netlink: 'syz.0.2316': attribute type 2 has an invalid length.
[  566.363905][T15576] : entered promiscuous mode
[  566.413468][T15578] netlink: 'syz.4.2318': attribute type 1 has an invalid length.
[  566.661444][T15578] 8021q: adding VLAN 0 to HW filter on device bond5
[  567.166094][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2321'.
[  567.438541][T15602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2321'.
[  567.764870][T15612] x_tables: ip_tables: icmp match: only valid for protocol 1
[  567.883569][T15616] mac80211_hwsim hwsim10 syzkaller0: Caught tx_queue_len zero misconfig
[  567.924572][T15619] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20002
[  568.218751][ T1300] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[  568.228138][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  568.235459][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  568.244987][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  568.494717][T15653] netlink: 'syz.1.2335': attribute type 2 has an invalid length.
[  568.778880][T15668] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2338'.
[  568.949980][T15683] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2341'.
[  568.977690][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2342'.
[  569.004588][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2342'.
[  569.308017][T15707] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2348'.
[  569.327430][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2347'.
[  569.359491][T15707] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2348'.
[  569.400025][T15714] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20000
[  569.516098][T15718] netlink: 292 bytes leftover after parsing attributes in process `syz.4.2354'.
[  569.550256][T15718] tunl0: Caught tx_queue_len zero misconfig
[  569.729062][T15737] gtp0: entered promiscuous mode
[  569.753956][T15737] gtp0: entered allmulticast mode
[  569.759189][T15731] IPVS: Scheduler module ip_vs_‘ip not found
[  570.179664][T15759] xt_l2tp: invalid flags combination: 0
[  570.360275][T15767] netlink: 'syz.1.2367': attribute type 2 has an invalid length.
[  570.664046][T15783] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  570.678475][T15783] syzkaller0: entered promiscuous mode
[  570.684284][T15783] syzkaller0: entered allmulticast mode
[  570.699448][T15782] tipc: Resetting bearer <eth:syzkaller0>
[  570.735616][T15782] tipc: Disabling bearer <eth:syzkaller0>
[  570.810866][T15791] netlink: 'syz.3.2373': attribute type 1 has an invalid length.
[  570.897192][T15799] ip6t_REJECT: ECHOREPLY is not supported
[  570.918058][T15799] netlink: 'syz.3.2375': attribute type 5 has an invalid length.
[  571.162615][T15812] netlink: 'syz.2.2379': attribute type 11 has an invalid length.
[  571.185609][T15812] netlink: 'syz.2.2379': attribute type 11 has an invalid length.
[  572.447779][T15879] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode
[  572.455738][T15879] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode
[  572.464765][T15881] netlink: 'syz.2.2400': attribute type 1 has an invalid length.
[  572.504237][T15872] lo speed is unknown, defaulting to 1000
[  572.513340][T15867] lo speed is unknown, defaulting to 1000
[  572.881688][T15891] batman_adv: batadv0: Interface deactivated: macsec1
[  572.954451][T15894] __nla_validate_parse: 13 callbacks suppressed
[  572.954472][T15894] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2403'.
[  573.076846][T15898] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  573.259226][T15898] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode
[  573.267870][T15898] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode
[  573.340854][T15898] tipc: Resetting bearer <eth:syzkaller0>
[  573.637698][T15907] lo speed is unknown, defaulting to 1000
[  574.052015][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5810 ms
[  574.060230][    C1] lec:lec_tx_timeout: lec0
[  574.640652][T15932] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  575.265283][T15962] netlink: 'syz.0.2418': attribute type 2 has an invalid length.
[  575.380692][T15968] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2420'.
[  575.955219][T16003] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2430'.
[  576.330505][T16023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.493193][T16027] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  576.539072][T16032] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  576.559407][T16032] syzkaller0: entered promiscuous mode
[  576.580543][T16032] syzkaller0: entered allmulticast mode
[  576.604085][T16032] tipc: Resetting bearer <eth:syzkaller0>
[  576.624025][T16031] tipc: Resetting bearer <eth:syzkaller0>
[  576.624379][T16037] netlink: 'syz.4.2440': attribute type 11 has an invalid length.
[  576.724292][T16031] tipc: Disabling bearer <eth:syzkaller0>
[  576.756045][T16037] blkio.reset_stats is deprecated
[  576.952852][T11087] lec:lec_start_xmit: lec0:No lecd attached
[  577.020274][T16049] lo speed is unknown, defaulting to 1000
[  577.235001][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2444'.
[  577.498819][T16064] netlink: 216 bytes leftover after parsing attributes in process `syz.0.2446'.
[  577.508829][T16064] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2446'.
[  577.519969][T16064] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2446'.
[  578.378814][T16085] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2450'.
[  578.517031][T16091] sctp: [Deprecated]: syz.1.2451 (pid 16091) Use of int in max_burst socket option deprecated.
[  578.517031][T16091] Use struct sctp_assoc_value instead
[  578.567410][T16093] pim6reg: entered allmulticast mode
[  578.575282][T16093] pim6reg: left allmulticast mode
[  578.662903][T16095] syzkaller0: entered promiscuous mode
[  578.668617][T16095] syzkaller0: entered allmulticast mode
[  578.889660][T16099] FAULT_INJECTION: forcing a failure.
[  578.889660][T16099] name fail_futex, interval 1, probability 0, space 0, times 1
[  578.973658][T16099] CPU: 0 UID: 0 PID: 16099 Comm: syz.4.2454 Not tainted syzkaller #0 PREEMPT(full) 
[  578.973689][T16099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  578.973707][T16099] Call Trace:
[  578.973715][T16099]  <TASK>
[  578.973724][T16099]  dump_stack_lvl+0xe8/0x150
[  578.973757][T16099]  should_fail_ex+0x412/0x560
[  578.973790][T16099]  get_futex_key+0x1ac/0x1690
[  578.973830][T16099]  ? __pfx_get_futex_key+0x10/0x10
[  578.973859][T16099]  ? __pfx___mutex_trylock_common+0x10/0x10
[  578.973890][T16099]  futex_wake+0x114/0x580
[  578.973917][T16099]  ? __pfx_futex_wake+0x10/0x10
[  578.973944][T16099]  ? exit_mm_release+0x1a/0x30
[  578.973972][T16099]  do_futex+0x395/0x420
[  578.973999][T16099]  ? __might_fault+0xaf/0x130
[  578.974035][T16099]  ? __pfx_do_futex+0x10/0x10
[  578.974069][T16099]  ? __might_fault+0xaf/0x130
[  578.974102][T16099]  mm_release+0x103/0x290
[  578.974125][T16099]  exit_mm+0x51/0x220
[  578.974147][T16099]  ? unwind_deferred_task_exit+0x67/0xa0
[  578.974171][T16099]  do_exit+0x62e/0x2310
[  578.974200][T16099]  ? cgroup1_freezing+0x20/0x350
[  578.974234][T16099]  ? __pfx_do_exit+0x10/0x10
[  578.974260][T16099]  ? cgroup1_freezing+0x20/0x350
[  578.974290][T16099]  ? cgroup1_freezing+0x20/0x350
[  578.974329][T16099]  do_group_exit+0x21b/0x2d0
[  578.974355][T16099]  ? _raw_spin_unlock_irq+0x23/0x50
[  578.974384][T16099]  get_signal+0x1284/0x1330
[  578.974446][T16099]  arch_do_signal_or_restart+0xbc/0x830
[  578.974480][T16099]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  578.974517][T16099]  ? __pfx___se_sys_ppoll+0x10/0x10
[  578.974546][T16099]  exit_to_user_mode_loop+0x86/0x480
[  578.974574][T16099]  ? rcu_is_watching+0x15/0xb0
[  578.974596][T16099]  do_syscall_64+0x2b7/0xf80
[  578.974622][T16099]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.974641][T16099]  ? trace_irq_disable+0x37/0x100
[  578.974660][T16099]  ? clear_bhb_loop+0x60/0xb0
[  578.974689][T16099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  578.974716][T16099] RIP: 0033:0x7f2490f9aeb9
[  578.974736][T16099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  578.974754][T16099] RSP: 002b:00007f2491da4028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f
[  578.974778][T16099] RAX: fffffffffffffdfe RBX: 00007f2491216180 RCX: 00007f2490f9aeb9
[  578.974792][T16099] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000200000000980
[  578.974805][T16099] RBP: 00007f2491da4090 R08: 0000000000000000 R09: 0000000000000000
[  578.974817][T16099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  578.974829][T16099] R13: 00007f2491216218 R14: 00007f2491216180 R15: 00007ffd7cb98048
[  578.974862][T16099]  </TASK>
[  579.534614][T16107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'.
[  579.931962][   T30] audit: type=1800 audit(1770268798.948:12): pid=16104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2455" name="memory.events" dev="tmpfs" ino=2773 res=0 errno=0
[  580.217796][T16121] netlink: 'syz.1.2460': attribute type 1 has an invalid length.
[  580.249193][T16121] netlink: 'syz.1.2460': attribute type 2 has an invalid length.
[  580.266947][T16121] netlink: 'syz.1.2460': attribute type 1 has an invalid length.
[  580.275574][T16121] netlink: 'syz.1.2460': attribute type 3 has an invalid length.
[  580.283758][T16121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2460'.
[  580.893982][T16148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  581.749410][T16164] netlink: 'syz.4.2473': attribute type 5 has an invalid length.
[  581.781017][T16164] netlink: 'syz.4.2473': attribute type 5 has an invalid length.
[  582.051994][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5100 ms
[  582.060091][    C1] lec:lec_tx_timeout: lec0
[  582.487712][T16197] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2480'.
[  582.704405][T16201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2481'.
[  582.732384][T16201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2481'.
[  584.964752][T16175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  585.123209][T16208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2485'.
[  585.290150][T16221] lo speed is unknown, defaulting to 1000
[  585.695002][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2489'.
[  586.299025][T16274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2499'.
[  586.313546][T16274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2499'.
[  586.474599][T16281] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2501'.
[  586.485616][T16281] unsupported nlmsg_type 40
[  586.495247][T16281] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2501'.
[  586.596471][T16284] SET target dimension over the limit!
[  586.688689][T16287] syzkaller1: entered promiscuous mode
[  586.704729][T16287] syzkaller1: entered allmulticast mode
[  586.837540][T16290] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2504'.
[  587.215288][T16302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2506'.
[  587.406976][T16300] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode
[  587.420802][T16300] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode
[  587.429479][T16300] ip6gre3: left allmulticast mode
[  587.461099][   T10] lo speed is unknown, defaulting to 1000
[  587.468114][   T10] syz2: Port: 1 Link DOWN
[  589.206419][T16265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  589.393425][T16338] sock: sock_set_timeout: `syz.3.2517' (pid 16338) tries to set negative timeout
[  589.407272][T16334] pim6reg1: entered allmulticast mode
[  589.444133][T16342] netlink: 'syz.2.2520': attribute type 5 has an invalid length.
[  589.525494][T16353] netlink: 1216 bytes leftover after parsing attributes in process `syz.3.2521'.
[  589.535781][T16353] netlink: 4436 bytes leftover after parsing attributes in process `syz.3.2521'.
[  590.530852][T16385] lo speed is unknown, defaulting to 1000
[  590.776089][T16388] netlink: 'syz.0.2528': attribute type 2 has an invalid length.
[  590.803205][T16388] !©�9: entered promiscuous mode
[  590.810815][T16388] __nla_validate_parse: 2 callbacks suppressed
[  590.810870][T16388] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2528'.
[  590.885310][T16389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2528'.
[  592.132355][ T8802] IPVS: ip_vs_send_async error -101
[  592.424048][T16342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  592.515570][T16391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2529'.
[  592.574979][T16396] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2531'.
[  592.656378][T16402] netlink: 'syz.2.2532': attribute type 1 has an invalid length.
[  592.762960][T16402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2532'.
[  592.820817][T16409] bond9: (slave geneve2): making interface the new active one
[  592.839598][T16409] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  592.850245][T16419] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096
[  592.859605][T16402] 8021q: adding VLAN 0 to HW filter on device bond9
[  592.882675][ T8250] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  592.892982][T16419] netlink: 'syz.1.2536': attribute type 1 has an invalid length.
[  592.903419][ T8250] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  592.920789][ T8250] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  592.948239][T16415] lo speed is unknown, defaulting to 1000
[  592.954946][ T8250] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  593.090812][T16427] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2539'.
[  593.162483][T16427] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2539'.
[  593.175363][T16427] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2539'.
[  593.444154][T16440] raw_sendmsg: syz.4.2542 forgot to set AF_INET. Fix it!
[  593.648873][T16451] veth8: entered allmulticast mode
[  594.032481][T16461] nbd3: detected capacity change from 0 to 127
[  594.066495][T16466] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2549'.
[  594.118411][T16466] xfrm1: entered allmulticast mode
[  594.134333][ T5832] block nbd3: Receive control failed (result -104)
[  594.153504][T16466] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2549'.
[  594.163535][T16472] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  594.170858][T16472] IPv6: NLM_F_CREATE should be set when creating new route
[  594.178225][T16472] IPv6: NLM_F_CREATE should be set when creating new route
[  594.357591][T16483] bond6: entered promiscuous mode
[  594.367486][T16483] bond6: entered allmulticast mode
[  594.374787][T16483] 8021q: adding VLAN 0 to HW filter on device bond6
[  594.775859][T16510] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  594.791183][T16510] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  594.815440][T16510] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  594.838617][T16510] netem: change failed
[  594.882442][T16520] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  594.977583][T16518] lo speed is unknown, defaulting to 1000
[  595.126871][T16524] geneve4: entered promiscuous mode
[  595.134108][ T8233] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  595.144900][ T8233] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  595.157173][ T8233] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  595.199272][ T8233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  595.274000][T16542] 8021q: adding VLAN 0 to HW filter on device bond10
[  595.641486][T16559] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  595.686915][T16537] bond10 (unregistering): Released all slaves
[  595.756558][T16560] batadv_slave_0: entered promiscuous mode
[  595.867677][T16559] batadv_slave_0: left promiscuous mode
[  596.084346][T16577] __nla_validate_parse: 6 callbacks suppressed
[  596.084365][T16577] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2572'.
[  596.133898][ T5832] Bluetooth: hci4: command 0x0406 tx timeout
[  596.250310][T16579] lo speed is unknown, defaulting to 1000
[  596.324898][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2579'.
[  596.524281][T16586] netlink: 'syz.2.2578': attribute type 4 has an invalid length.
[  596.571868][T16588] batadv_slave_0: Caught tx_queue_len zero misconfig
[  597.220750][T16609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2582'.
[  597.268962][T16609] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2582'.
[  597.334955][T16622] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2586'.
[  597.490446][T16626] netlink: 'syz.0.2588': attribute type 1 has an invalid length.
[  597.567549][T16626] bond8: entered promiscuous mode
[  597.574425][T16626] bond8: entered allmulticast mode
[  597.658199][T16627] bond8: (slave ip6gretap2): making interface the new active one
[  597.732164][T16627] ip6gretap2: entered promiscuous mode
[  597.737893][T16627] ip6gretap2: entered allmulticast mode
[  597.754874][T16627] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link
[  597.790088][T16641] netlink: 'syz.2.2590': attribute type 1 has an invalid length.
[  597.809977][T16641] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2590'.
[  597.962217][T16645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2591'.
[  598.306718][T16659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2594'.
[  598.503929][T16670] netlink: 'syz.0.2597': attribute type 11 has an invalid length.
[  598.531986][T16670] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2597'.
[  598.789265][T16689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'.
[  598.800765][T16689] netlink: 'syz.1.2600': attribute type 13 has an invalid length.
[  598.985541][T16702] netlink: 'syz.4.2605': attribute type 13 has an invalid length.
[  599.335005][T16723] syzkaller0: entered promiscuous mode
[  599.340903][T16723] syzkaller0: entered allmulticast mode
[  599.613690][   T30] audit: type=1107 audit(1770268818.638:13): pid=16730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='"У?C`dl†é$Ì™,F
[  599.613690][   T30] uú.VY®ºcåáŠ(O>©Ö¾Ù ~ä—ñ�\¦§¾C¹Õæ’jhªö'
[  599.696187][T16695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  600.105441][T16752] lo speed is unknown, defaulting to 1000
[  600.185620][T16760] netlink: 'syz.4.2617': attribute type 64 has an invalid length.
[  600.437648][T16773] xfrm0: entered promiscuous mode
[  600.460631][T16773] xfrm0: entered allmulticast mode
[  601.171614][T16800] __nla_validate_parse: 4 callbacks suppressed
[  601.171635][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2626'.
[  601.188552][T16800] netlink: 'syz.0.2626': attribute type 30 has an invalid length.
[  601.206647][T16800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2626'.
[  601.213858][T12292] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  601.218050][T16800] netlink: 'syz.0.2626': attribute type 30 has an invalid length.
[  601.234772][T12292] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  601.263216][T12292] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  601.274967][T12292] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  601.739430][T16814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2629'.
[  602.547003][T16818] netlink: 'syz.3.2630': attribute type 1 has an invalid length.
[  602.555691][T16818] ªªªªª9: renamed from lo
[  602.736799][T16824] ªªªªª9 speed is unknown, defaulting to 1000
[  603.906882][T16786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  603.922580][T16820] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2630'.
[  604.121275][T16832] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2632'.
[  604.139748][T16835] x_tables: duplicate underflow at hook 2
[  604.230544][T16841] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003
[  604.378245][T16846] netlink: 'syz.3.2638': attribute type 2 has an invalid length.
[  604.409902][T16846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2638'.
[  604.462911][T16849] netlink: 'syz.1.2639': attribute type 10 has an invalid length.
[  604.839491][T16873] veth0: entered promiscuous mode
[  604.845437][T16873] veth0: entered allmulticast mode
[  605.163478][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2654'.
[  605.255682][T16903] netlink: 'syz.0.2657': attribute type 10 has an invalid length.
[  605.368096][T16907] syzkaller0: entered promiscuous mode
[  605.375772][T16907] syzkaller0: entered allmulticast mode
[  607.752651][T16868] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  608.103421][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'.
[  608.121640][T16932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2666'.
[  608.124189][T16917] veth1_macvtap: left promiscuous mode
[  608.144695][T16917] macsec0: entered allmulticast mode
[  608.181007][T16917] veth1_macvtap: entered promiscuous mode
[  608.233717][T16934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2660'.
[  608.241915][T16917] veth1_macvtap: entered allmulticast mode
[  608.265155][T16917] macsec0: left allmulticast mode
[  608.280535][T16917] veth1_macvtap: left allmulticast mode
[  608.376350][T16947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2669'.
[  608.386991][T16947] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2669'.
[  608.397961][T16933] veth1_to_hsr: entered promiscuous mode
[  608.404346][T16933] veth1_to_hsr: entered allmulticast mode
[  608.427416][T16949] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2670'.
[  608.460125][T16949] rdma_rxe: rxe_newlink: failed to add ip6_vti0
[  608.568320][T16956] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2673'.
[  608.616013][T16956] bond3: entered promiscuous mode
[  608.640168][T16956] 8021q: adding VLAN 0 to HW filter on device bond3
[  608.833051][T16956] bond3 (unregistering): Released all slaves
[  608.858138][T16975] tap0: tun_chr_ioctl cmd 35111
[  611.521354][T16951] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  611.696054][T16994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2681'.
[  611.721443][T16996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2679'.
[  611.782962][T17001] bridge0: port 3(veth1_to_hsr) entered blocking state
[  611.790280][T17001] bridge0: port 3(veth1_to_hsr) entered disabled state
[  611.804149][T17001] veth1_to_hsr: entered allmulticast mode
[  611.815094][T17001] veth1_to_hsr: entered promiscuous mode
[  611.937660][T17005] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[  612.028858][T17017] netlink: 'syz.4.2685': attribute type 1 has an invalid length.
[  612.228699][T17005] bond10 (unregistering): Released all slaves
[  612.737921][T17041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2691'.
[  613.027743][T17067] bond9 (unregistering): Released all slaves
[  613.087068][T17068] bond9 (unregistering): Released all slaves
[  613.285888][T17081] syzkaller0: entered promiscuous mode
[  613.295263][T17081] syzkaller0: entered allmulticast mode
[  613.429607][T17085] __nla_validate_parse: 1 callbacks suppressed
[  613.429623][T17085] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2700'.
[  613.565877][T17091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2701'.
[  614.612923][T17100] ip6erspan0: entered promiscuous mode
[  615.776317][T17045] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  616.207550][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  616.222754][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  616.232573][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  616.240588][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  616.248882][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  616.517586][T17118] ªªªªª9 speed is unknown, defaulting to 1000
[  617.217035][T17144] ªªªªª9 speed is unknown, defaulting to 1000
[  617.399185][T17156] 8021q: adding VLAN 0 to HW filter on device team0
[  617.413436][T17156] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  617.431697][T17151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2721'.
[  617.491104][  T798] ªªªªª9 speed is unknown, defaulting to 1000
[  617.498179][  T798] syz2: Port: 1 Link ACTIVE
[  617.515768][T17154] ªªªªª9 speed is unknown, defaulting to 1000
[  617.545924][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'.
[  617.625135][T17162] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2723'.
[  617.675879][T17118] chnl_net:caif_netlink_parms(): no params data found
[  617.696885][T17151] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2721'.
[  617.707662][T17151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2721'.
[  618.111315][T17118] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.207372][T17118] bridge0: port 1(bridge_slave_0) entered disabled state
[  618.238184][T17118] bridge_slave_0: entered allmulticast mode
[  618.254024][T17118] bridge_slave_0: entered promiscuous mode
[  618.292753][ T5832] Bluetooth: hci5: command tx timeout
[  618.309022][T17118] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.348703][T17118] bridge0: port 2(bridge_slave_1) entered disabled state
[  618.392594][T17118] bridge_slave_1: entered allmulticast mode
[  618.422064][T17118] bridge_slave_1: entered promiscuous mode
[  618.720045][T17118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  618.749206][T17182] delete_channel: no stack
[  618.849834][T17118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  618.936931][T17118] team0: Port device team_slave_0 added
[  618.965374][T17118] team0: Port device team_slave_1 added
[  619.282979][T17118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  619.291086][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  619.391817][T17118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  619.465946][T17218] ªªªªª9 speed is unknown, defaulting to 1000
[  619.468310][T17118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  619.499932][T17118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  619.535061][T17118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.567423][T17230] FAULT_INJECTION: forcing a failure.
[  619.567423][T17230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  619.582100][T17230] CPU: 1 UID: 0 PID: 17230 Comm: syz.4.2736 Not tainted syzkaller #0 PREEMPT(full) 
[  619.582130][T17230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  619.582144][T17230] Call Trace:
[  619.582152][T17230]  <TASK>
[  619.582160][T17230]  dump_stack_lvl+0xe8/0x150
[  619.582193][T17230]  should_fail_ex+0x412/0x560
[  619.582222][T17230]  _copy_from_user+0x2d/0xb0
[  619.582253][T17230]  do_sock_getsockopt+0x165/0x3f0
[  619.582283][T17230]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  619.582322][T17230]  ? __fget_files+0x3a0/0x420
[  619.582344][T17230]  ? __fget_files+0x2a/0x420
[  619.582373][T17230]  __x64_sys_getsockopt+0x1a4/0x240
[  619.582411][T17230]  do_syscall_64+0xe2/0xf80
[  619.582437][T17230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.582455][T17230]  ? trace_irq_disable+0x37/0x100
[  619.582475][T17230]  ? clear_bhb_loop+0x60/0xb0
[  619.582500][T17230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  619.582520][T17230] RIP: 0033:0x7f2490f9aeb9
[  619.582539][T17230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  619.582557][T17230] RSP: 002b:00007f2491de6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  619.582578][T17230] RAX: ffffffffffffffda RBX: 00007f2491215fa0 RCX: 00007f2490f9aeb9
[  619.582593][T17230] RDX: 0000000000000073 RSI: 0000000000000084 RDI: 0000000000000003
[  619.582604][T17230] RBP: 00007f2491de6090 R08: 0000200000000240 R09: 0000000000000000
[  619.582617][T17230] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  619.582629][T17230] R13: 00007f2491216038 R14: 00007f2491215fa0 R15: 00007ffd7cb98048
[  619.582662][T17230]  </TASK>
[  619.604528][T17217] ªªªªª9 speed is unknown, defaulting to 1000
[  619.735521][T17234] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2737'.
[  619.907436][T17237] team_slave_1: Caught tx_queue_len zero misconfig
[  620.021515][T17118] hsr_slave_0: entered promiscuous mode
[  620.031329][T17118] hsr_slave_1: entered promiscuous mode
[  620.069390][T17118] debugfs: 'hsr0' already exists in 'hsr'
[  620.076199][T17118] Cannot create hsr debugfs directory
[  620.118280][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2741'.
[  620.164237][T17246] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  620.231506][T17240] netlink: 'syz.3.2739': attribute type 11 has an invalid length.
[  620.382890][ T5832] Bluetooth: hci5: command tx timeout
[  620.510378][T17118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.522643][T17118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  620.675396][T17118] netdevsim netdevsim2 netdevsim2 (unregistering): left allmulticast mode
[  620.686448][T17118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.698604][T17118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  620.846494][T17118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.868506][T17118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  621.044931][T17260] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  621.074429][T17260] bond3 (unregistering): Released all slaves
[  621.088730][T17266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2744'.
[  621.248885][T17118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  621.262940][T17118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[  621.327774][T17260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2744'.
[  621.337493][T17260] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  621.811633][T17118] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  621.847201][T17118] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  621.882510][T17118] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  621.905246][T17118] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  622.116074][T17118] 8021q: adding VLAN 0 to HW filter on device bond0
[  622.178853][T17118] 8021q: adding VLAN 0 to HW filter on device team0
[  622.200630][T12288] bridge0: port 1(bridge_slave_0) entered blocking state
[  622.207907][T12288] bridge0: port 1(bridge_slave_0) entered forwarding state
[  622.250649][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  622.257925][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.412727][T17299] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2750'.
[  622.455190][ T5832] Bluetooth: hci5: command tx timeout
[  622.876166][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2753'.
[  622.894037][T17118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  622.977811][T17324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2755'.
[  623.034700][T17324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2755'.
[  623.119790][T17328] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2757'.
[  623.135393][T17118] veth0_vlan: entered promiscuous mode
[  623.166326][T17118] veth1_vlan: entered promiscuous mode
[  623.229609][T17335] netlink: 'syz.3.2760': attribute type 1 has an invalid length.
[  623.339252][T17335] 8021q: adding VLAN 0 to HW filter on device bond3
[  623.400087][T17343] bond3: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms
[  623.528174][T17118] veth0_macvtap: entered promiscuous mode
[  623.625561][T17358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  623.676969][T17118] veth1_macvtap: entered promiscuous mode
[  623.729125][T17118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  623.775272][T17118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  623.795003][T17362] netlink: 'syz.3.2766': attribute type 10 has an invalid length.
[  623.818964][T17363] netlink: 'syz.3.2766': attribute type 10 has an invalid length.
[  623.828132][ T8233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  623.851933][ T8233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  623.894608][ T8233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  623.929093][ T8233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  624.259279][ T8233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.284525][ T8233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.387655][T12292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  624.408627][T12292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  624.453491][T17360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2765'.
[  624.533590][ T5832] Bluetooth: hci5: command tx timeout
[  624.549569][   T97] block nbd3: Possible stuck request ffff8880257c8000: control (read@0,1024B). Runtime 30 seconds
[  624.563699][   T97] block nbd3: Possible stuck request ffff8880257c8200: control (read@1024,1024B). Runtime 30 seconds
[  624.574761][   T97] block nbd3: Possible stuck request ffff8880257c8400: control (read@2048,1024B). Runtime 30 seconds
[  624.586366][   T97] block nbd3: Possible stuck request ffff8880257c8600: control (read@3072,1024B). Runtime 30 seconds
[  624.626918][T17360] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  624.878785][T17402] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  625.100987][T17412] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  625.155043][T17412] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) !
[  625.355118][T17420] ªªªªª9 speed is unknown, defaulting to 1000
[  625.547279][T17436] ªªªªª9 speed is unknown, defaulting to 1000
[  625.624689][T17434] scsi_nl_rcv_msg: discarding partial skb
[  625.667554][T17440] ªªªªª9 speed is unknown, defaulting to 1000
[  625.797680][T17441] __nla_validate_parse: 1 callbacks suppressed
[  625.797704][T17441] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2785'.
[  626.630723][T17467] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2792'.
[  626.653722][T17467] netlink: 'syz.2.2792': attribute type 3 has an invalid length.
[  626.661521][T17467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2792'.
[  626.677600][T17470] netlink: 'syz.1.2794': attribute type 62 has an invalid length.
[  626.871138][T17470] ªªªªª9 speed is unknown, defaulting to 1000
[  627.125378][T17485] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2789'.
[  627.211659][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2798'.
[  627.971387][T17515] netlink: 360 bytes leftover after parsing attributes in process `syz.0.2802'.
[  628.121682][T17517] : entered promiscuous mode
[  628.280132][T17516] ªªªªª9 speed is unknown, defaulting to 1000
[  629.047362][T17552] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2810'.
[  629.118422][T17552] hsr_slave_1 (unregistering): left promiscuous mode
[  629.564625][T17566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2814'.
[  629.658225][ T1300] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[  629.673820][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  629.683289][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  629.893600][T17576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2817'.
[  630.155658][T17587] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2821'.
[  630.314027][T17587] syzkaller1: entered promiscuous mode
[  630.319668][T17587] syzkaller1: entered allmulticast mode
[  630.485060][T17584] syzkaller0: entered promiscuous mode
[  630.490760][T17584] syzkaller0: entered allmulticast mode
[  631.795373][T17651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  632.008791][T17659] openvswitch: netlink: Flow actions attr not present in new flow.
[  632.030969][T17659] openvswitch: netlink: Flow actions attr not present in new flow.
[  632.993532][T17693] netlink: 'syz.2.2848': attribute type 1 has an invalid length.
[  633.210594][T17692] ªªªªª9 speed is unknown, defaulting to 1000
[  633.258771][T17697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2850'.
[  633.300257][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2849'.
[  633.851593][T17712] syzkaller0: entered promiscuous mode
[  633.857793][T17712] syzkaller0: entered allmulticast mode
[  634.006678][T17717] netlink: 'syz.3.2856': attribute type 1 has an invalid length.
[  634.071274][T17717] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  634.075300][T17718] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  634.449154][T17736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2859'.
[  634.590485][T17738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2860'.
[  634.684610][T17738] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2860'.
[  634.786269][T17740] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2861'.
[  634.802675][T17743] netlink: 'syz.3.2862': attribute type 1 has an invalid length.
[  634.810192][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'.
[  634.821015][T17740] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2861'.
[  634.830845][T17740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2861'.
[  634.843997][T17740] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2861'.
[  634.884433][T17743] bond4: entered promiscuous mode
[  634.898906][T17743] 8021q: adding VLAN 0 to HW filter on device bond4
[  634.979875][T17743] bond4: (slave bridge4): making interface the new active one
[  634.993334][T17743] bridge4: entered promiscuous mode
[  635.011653][T17743] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  635.012189][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5330 ms
[  635.028439][    C1] lec:lec_tx_timeout: lec0
[  635.342635][T17766] netlink: 'syz.4.2868': attribute type 1 has an invalid length.
[  635.778789][T17789] bond1: Removing last ns target with arp_interval on
[  636.014763][T17808] netlink: 'syz.3.2878': attribute type 3 has an invalid length.
[  636.224403][T17819] nlmon0: Master is either lo or non-ether device
[  636.496287][T17832] netlink: 'syz.4.2884': attribute type 4 has an invalid length.
[  636.509360][T17832] .`: renamed from bond0
[  636.720483][T17839] netpci0: tun_chr_ioctl cmd 1074025678
[  636.727387][T17839] netpci0: group set to 0
[  636.920293][T17847] syzkaller0: entered promiscuous mode
[  636.927200][T17847] syzkaller0: entered allmulticast mode
[  637.123842][T17855] bridge: RTM_NEWNEIGH with invalid ether address
[  637.141430][T17855] bridge1: entered promiscuous mode
[  637.147074][T17855] bridge1: entered allmulticast mode
[  637.155586][T17855] team0: Port device bridge1 added
[  638.091699][ T5825] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  638.107227][ T5825] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  638.120384][ T5825] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  638.128853][ T5825] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  638.137504][ T5825] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  638.263543][T17899] ªªªªª9 speed is unknown, defaulting to 1000
[  638.444275][T17909] __nla_validate_parse: 14 callbacks suppressed
[  638.444296][T17909] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2908'.
[  638.551298][T17909] ip6tnl0: Caught tx_queue_len zero misconfig
[  639.166952][T17899] chnl_net:caif_netlink_parms(): no params data found
[  639.283203][T17949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2922'.
[  639.423729][T17899] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.433115][T17899] bridge0: port 1(bridge_slave_0) entered disabled state
[  639.440596][T17899] bridge_slave_0: entered allmulticast mode
[  639.450299][T17899] bridge_slave_0: entered promiscuous mode
[  639.460298][T17899] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.481000][T17899] bridge0: port 2(bridge_slave_1) entered disabled state
[  639.496079][T17899] bridge_slave_1: entered allmulticast mode
[  639.510123][T17899] bridge_slave_1: entered promiscuous mode
[  639.550668][T17960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2924'.
[  639.603505][T17966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2924'.
[  639.623559][T17899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  639.650378][T17899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  639.774786][T17899] team0: Port device team_slave_0 added
[  639.794479][T17977] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'.
[  639.810570][T17899] team0: Port device team_slave_1 added
[  639.865158][T17899] batman_adv: batadv0: Adding interface: batadv_slave_0
[  639.873006][T17899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.925142][T17899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  639.940377][T17899] batman_adv: batadv0: Adding interface: batadv_slave_1
[  639.948069][T17899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  639.975341][T17899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  639.978185][T11087] lec:lec_start_xmit: lec0:No lecd attached
[  640.059233][T17899] hsr_slave_0: entered promiscuous mode
[  640.066740][T17899] hsr_slave_1: entered promiscuous mode
[  640.073890][T17899] debugfs: 'hsr0' already exists in 'hsr'
[  640.081030][T17899] Cannot create hsr debugfs directory
[  640.205078][T17990] pim6reg1: entered promiscuous mode
[  640.210589][T17990] pim6reg1: entered allmulticast mode
[  640.216637][ T5832] Bluetooth: hci1: command tx timeout
[  640.254851][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  640.264883][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2931'.
[  640.414036][T18003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2935'.
[  640.432151][T18003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2935'.
[  640.464512][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2934'.
[  640.514221][T18007] team0: entered promiscuous mode
[  640.519442][T18007] team0: entered allmulticast mode
[  640.525230][T18007] 8021q: adding VLAN 0 to HW filter on device team0
[  640.554788][T18005] team1: entered promiscuous mode
[  640.560005][T18005] team1: entered allmulticast mode
[  640.568249][T18005] 8021q: adding VLAN 0 to HW filter on device team1
[  640.976463][T18021] netlink: 'syz.4.2938': attribute type 21 has an invalid length.
[  641.017494][T18022] netlink: 'syz.4.2938': attribute type 21 has an invalid length.
[  641.077941][T18021] netlink: 'syz.4.2938': attribute type 5 has an invalid length.
[  641.087862][T18021] netlink: 'syz.4.2938': attribute type 6 has an invalid length.
[  641.098322][T18022] netlink: 'syz.4.2938': attribute type 5 has an invalid length.
[  641.108382][T18022] netlink: 'syz.4.2938': attribute type 6 has an invalid length.
[  641.157173][T17899] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  641.177845][T17899] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  641.198358][T17899] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  641.211330][T17899] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  641.259554][T18038] xt_CT: You must specify a L4 protocol and not use inversions on it
[  641.341306][T17899] 8021q: adding VLAN 0 to HW filter on device bond0
[  641.364558][T17899] 8021q: adding VLAN 0 to HW filter on device team0
[  641.385556][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[  641.392799][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[  641.411240][T12290] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.418706][T12290] bridge0: port 2(bridge_slave_1) entered forwarding state
[  641.752952][T18051] netlink: 'syz.2.2942': attribute type 2 has an invalid length.
[  641.753346][T18052] netlink: 'syz.2.2942': attribute type 2 has an invalid length.
[  641.776281][T18051] : entered promiscuous mode
[  641.790610][T17899] 8021q: adding VLAN 0 to HW filter on device batadv0
[  641.850621][T17899] veth0_vlan: entered promiscuous mode
[  641.868767][T17899] veth1_vlan: entered promiscuous mode
[  641.967808][T17899] veth0_macvtap: entered promiscuous mode
[  642.037930][T17899] veth1_macvtap: entered promiscuous mode
[  642.113267][T18058] bond3: entered promiscuous mode
[  642.138707][T17899] batman_adv: batadv0: Interface activated: batadv_slave_0
[  642.168503][T18058] macvlan1: entered promiscuous mode
[  642.177063][T18058] macvlan1: entered allmulticast mode
[  642.184993][T18058] bond3: (slave macvlan1): Opening slave failed
[  642.216370][T17899] batman_adv: batadv0: Interface activated: batadv_slave_1
[  642.241153][T18061] gretap2: entered allmulticast mode
[  642.279961][   T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  642.289272][   T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  642.298732][   T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  642.313945][ T5832] Bluetooth: hci1: command tx timeout
[  642.319897][   T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  642.494564][T12290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.516444][T12290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.570945][T12290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  642.580664][T12290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  642.599182][T18079] ªªªªª9 speed is unknown, defaulting to 1000
[  642.950150][T18094] Cannot find set identified by id 0 to match
[  643.161959][T18104] netlink: 'syz.3.2955': attribute type 1 has an invalid length.
[  643.192421][ T5899] IPVS: starting estimator thread 0...
[  643.228073][T18081] dvmrp1: entered allmulticast mode
[  643.283209][T18105] IPVS: using max 27 ests per chain, 64800 per kthread
[  643.460744][T18111] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  643.630708][T18117] IPv6: addrconf: prefix option has invalid lifetime
[  643.661163][T18120] __nla_validate_parse: 11 callbacks suppressed
[  643.661183][T18120] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2959'.
[  643.807542][T18126] netlink: 'syz.2.2960': attribute type 10 has an invalid length.
[  643.926500][T18126] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  643.969146][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2959'.
[  644.373824][ T5832] Bluetooth: hci1: command tx timeout
[  644.406946][T18158] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2968'.
[  644.474012][T18159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2967'.
[  644.521988][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2969'.
[  644.963884][T18186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2972'.
[  645.012107][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms
[  645.020227][    C1] lec:lec_tx_timeout: lec0
[  645.747708][T18195] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  645.920964][T18202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2977'.
[  646.055741][T18208] rdma_rxe: rxe_newlink: failed to add bond0
[  646.098219][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2983'.
[  646.194510][T18210] gretap2: entered promiscuous mode
[  646.246492][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'.
[  646.462620][ T5832] Bluetooth: hci1: command tx timeout
[  646.645694][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'.
[  647.174259][T18240] delete_channel: no stack
[  647.346174][ T5825] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  647.356176][ T5825] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  647.365529][ T5825] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  647.374923][ T5825] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  647.385322][ T5825] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  647.445175][T18251] ªªªªª9 speed is unknown, defaulting to 1000
[  647.897287][T18251] chnl_net:caif_netlink_parms(): no params data found
[  648.033532][T18251] bridge0: port 1(bridge_slave_0) entered blocking state
[  648.041067][T18251] bridge0: port 1(bridge_slave_0) entered disabled state
[  648.050144][T18251] bridge_slave_0: entered allmulticast mode
[  648.064701][T18251] bridge_slave_0: entered promiscuous mode
[  648.074545][T18251] bridge0: port 2(bridge_slave_1) entered blocking state
[  648.090065][T18251] bridge0: port 2(bridge_slave_1) entered disabled state
[  648.098010][T18251] bridge_slave_1: entered allmulticast mode
[  648.106178][T18251] bridge_slave_1: entered promiscuous mode
[  648.158273][T18251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  648.171278][T18251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.206075][T18251] team0: Port device team_slave_0 added
[  648.214906][T18251] team0: Port device team_slave_1 added
[  648.243417][T18251] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.251197][T18251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.278078][T18251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.290618][T18251] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.297821][T18251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  648.324552][T18251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.371673][T18251] hsr_slave_0: entered promiscuous mode
[  648.379510][T18251] hsr_slave_1: entered promiscuous mode
[  648.386756][T18251] debugfs: 'hsr0' already exists in 'hsr'
[  648.392597][T18251] Cannot create hsr debugfs directory
[  649.322619][T18221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  649.357557][T18251] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  649.419708][ T5832] Bluetooth: hci3: command tx timeout
[  649.456170][T18251] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  649.464542][T18266] __nla_validate_parse: 1 callbacks suppressed
[  649.464562][T18266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2994'.
[  649.526793][T18251] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  649.558390][T18251] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  649.603765][T18272] validate_nla: 1 callbacks suppressed
[  649.603786][T18272] netlink: 'syz.4.2997': attribute type 1 has an invalid length.
[  649.689469][T18272] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.764383][T18288] netlink: 'syz.1.2999': attribute type 1 has an invalid length.
[  649.774934][T18284] 8021q: adding VLAN 0 to HW filter on device batadv1
[  649.788408][T18284] bond0: (slave batadv1): making interface the new active one
[  649.798991][T18284] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  649.816865][T18283] ªªªªª9 speed is unknown, defaulting to 1000
[  649.869813][T18288] 8021q: adding VLAN 0 to HW filter on device bond4
[  650.120291][T18251] 8021q: adding VLAN 0 to HW filter on device bond0
[  650.205013][T18251] 8021q: adding VLAN 0 to HW filter on device team0
[  650.237623][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  650.244868][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  650.297122][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  650.304376][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  650.524594][T18302] ªªªªª9 speed is unknown, defaulting to 1000
[  650.596801][T18300] ªªªªª9 speed is unknown, defaulting to 1000
[  650.888159][T18323] bond5: option ad_select: invalid value (34)
[  650.905221][T18323] bond5 (unregistering): Released all slaves
[  651.366029][T18251] 8021q: adding VLAN 0 to HW filter on device batadv0
[  651.493481][ T5832] Bluetooth: hci3: command tx timeout
[  652.088265][T18251] veth0_vlan: entered promiscuous mode
[  652.115460][T18251] veth1_vlan: entered promiscuous mode
[  652.164296][T18251] veth0_macvtap: entered promiscuous mode
[  652.176259][T18251] veth1_macvtap: entered promiscuous mode
[  652.203967][T18251] batman_adv: batadv0: Interface activated: batadv_slave_0
[  652.247679][T18251] batman_adv: batadv0: Interface activated: batadv_slave_1
[  652.280354][   T62] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  652.305304][   T62] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  652.333234][   T62] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  652.353183][   T62] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.020660][T18375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'.
[  653.030602][T18375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3017'.
[  653.051159][T18375] geneve2: entered promiscuous mode
[  653.057500][T18375] geneve2: entered allmulticast mode
[  653.066166][ T8233] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  653.074589][T18377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'.
[  653.074624][T18377] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3017'.
[  653.097058][ T8233] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  653.108244][ T8233] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  653.118845][ T8233] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  653.544456][T18310] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  653.556050][T18348] netlink: 'syz.2.3011': attribute type 10 has an invalid length.
[  653.568101][T18348] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3011'.
[  653.574198][ T5832] Bluetooth: hci3: command tx timeout
[  653.740376][T18380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3019'.
[  653.788919][T12290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  653.803802][T12290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  653.901604][T18384] ªªªªª9 speed is unknown, defaulting to 1000
[  653.915547][T18380] xt_CT: No such helper "snmp_trap"
[  653.949079][T18386] : entered promiscuous mode
[  654.017708][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  654.044975][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  654.264700][T18405] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  654.457863][T18412] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2991'.
[  654.628105][   T97] block nbd3: Possible stuck request ffff8880257c8000: control (read@0,1024B). Runtime 60 seconds
[  654.639657][   T97] block nbd3: Possible stuck request ffff8880257c8200: control (read@1024,1024B). Runtime 60 seconds
[  654.651421][   T97] block nbd3: Possible stuck request ffff8880257c8400: control (read@2048,1024B). Runtime 60 seconds
[  654.663189][   T97] block nbd3: Possible stuck request ffff8880257c8600: control (read@3072,1024B). Runtime 60 seconds
[  654.814888][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3027'.
[  654.868574][T18439] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3027'.
[  655.642378][T18444] ªªªªª9 speed is unknown, defaulting to 1000
[  655.658512][ T5825] Bluetooth: hci3: command tx timeout
[  655.684810][T18453] IPVS: length: 132 != 8
[  656.093598][T18466] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3031'.
[  656.496638][T18495] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 3, id = 0
[  656.744459][T18501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3038'.
[  656.795999][T18503] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3038'.
[  657.005507][T18511] x_tables: duplicate underflow at hook 2
[  657.737717][ T5825] Bluetooth: hci3: command 0x0405 tx timeout
[  658.856890][T18516] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.3042'.
[  659.349591][T18540] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3050'.
[  659.687426][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'.
[  659.869919][T18559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3052'.
[  660.066087][T18565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3054'.
[  660.366983][T18579] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not filter
[  660.530966][ T1168] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  660.546794][ T1168] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  660.560379][ T1168] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  660.599349][ T1168] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  660.761622][T18594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3060'.
[  660.799633][T18593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3061'.
[  660.817190][T18589] ªªªªª9 speed is unknown, defaulting to 1000
[  661.341554][T18609] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3064'.
[  661.355631][T18611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'.
[  661.377913][T18610] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3064'.
[  661.402622][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'.
[  661.432054][T18610] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3064'.
[  661.608836][T18613] ªªªªª9 speed is unknown, defaulting to 1000
[  661.642842][T18612] ªªªªª9 speed is unknown, defaulting to 1000
[  661.772325][T18620] bond1: option miimon: invalid value (18446744073709551607)
[  661.779783][T18620] bond1: option miimon: allowed values 0 - 2147483647
[  661.794411][T18620] bond1 (unregistering): Released all slaves
[  661.893614][T18627] bridge_slave_0: left allmulticast mode
[  661.910425][T18627] bridge_slave_0: left promiscuous mode
[  661.917159][T18627] bridge0: port 1(bridge_slave_0) entered disabled state
[  661.935289][T18627] bridge_slave_1: left allmulticast mode
[  661.944982][T18627] bridge_slave_1: left promiscuous mode
[  661.951105][T18627] bridge0: port 2(bridge_slave_1) entered disabled state
[  661.982821][T18627] bond0: (slave bond_slave_0): Releasing backup interface
[  662.007592][T18627] bond0: (slave bond_slave_1): Releasing backup interface
[  662.044895][T18627] team0: Port device team_slave_0 removed
[  662.076157][T18627] team0: Port device team_slave_1 removed
[  662.098499][T18627] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  662.109498][T18627] batman_adv: batadv0: Removing interface: batadv_slave_0
[  662.119416][T18627] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  662.127745][T18627] batman_adv: batadv0: Removing interface: batadv_slave_1
[  662.152557][T18627] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  662.394210][T18634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3069'.
[  662.445377][T18634] netlink: 'syz.3.3069': attribute type 1 has an invalid length.
[  663.526949][T18649] ªªªªª9 speed is unknown, defaulting to 1000
[  663.717975][T18654] netlink: 'syz.1.3075': attribute type 10 has an invalid length.
[  663.756852][T18660] vlan4: entered allmulticast mode
[  663.762337][T18660] macvtap0: entered allmulticast mode
[  664.223782][T18665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  665.499212][T18685] sctp: [Deprecated]: syz.1.3082 (pid 18685) Use of int in max_burst socket option.
[  665.499212][T18685] Use struct sctp_assoc_value instead
[  665.916946][T18696] __nla_validate_parse: 2 callbacks suppressed
[  665.916965][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3085'.
[  666.005347][T18699] batman_adv: batadv0: Adding interface: macvtap1
[  666.032627][T18699] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  666.092453][T18699] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[  666.122972][T18696] netlink: 'syz.2.3085': attribute type 4 has an invalid length.
[  666.154080][ T5832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  666.186710][ T5832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  666.203648][ T5832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  666.216908][ T5832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  666.227360][ T5832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  666.410220][T18708] ªªªªª9 speed is unknown, defaulting to 1000
[  666.471452][T18716] bond9: entered promiscuous mode
[  666.748103][T18723] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  666.820392][T18725] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3091'.
[  666.973738][T18708] chnl_net:caif_netlink_parms(): no params data found
[  667.135861][T18708] bridge0: port 1(bridge_slave_0) entered blocking state
[  667.152090][T18708] bridge0: port 1(bridge_slave_0) entered disabled state
[  667.170506][T18708] bridge_slave_0: entered allmulticast mode
[  667.186613][T18708] bridge_slave_0: entered promiscuous mode
[  667.196950][T18708] bridge0: port 2(bridge_slave_1) entered blocking state
[  667.204931][T18708] bridge0: port 2(bridge_slave_1) entered disabled state
[  667.213119][T18708] bridge_slave_1: entered allmulticast mode
[  667.221165][T18708] bridge_slave_1: entered promiscuous mode
[  667.266581][T18737] tap0: tun_chr_ioctl cmd 1074025680
[  667.301200][T18708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  667.335632][T18708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  667.402370][T18708] team0: Port device team_slave_0 added
[  667.417660][T18708] team0: Port device team_slave_1 added
[  667.457620][T18708] batman_adv: batadv0: Adding interface: batadv_slave_0
[  667.465215][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.495205][T18708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  667.514846][T18708] batman_adv: batadv0: Adding interface: batadv_slave_1
[  667.522318][T18708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  667.549070][T18708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  667.623824][T18708] hsr_slave_0: entered promiscuous mode
[  667.630930][T18708] hsr_slave_1: entered promiscuous mode
[  667.638203][T18708] debugfs: 'hsr0' already exists in 'hsr'
[  667.644723][T18708] Cannot create hsr debugfs directory
[  668.292600][ T5825] Bluetooth: hci6: command tx timeout
[  669.320619][T18711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  669.345050][T18708] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  669.407205][T18708] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  669.447015][T18708] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  669.476572][T18708] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  669.628881][T18759] netlink: 'syz.2.3097': attribute type 16 has an invalid length.
[  669.637502][T18759] netlink: 'syz.2.3097': attribute type 17 has an invalid length.
[  669.712722][T18759] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  670.083776][T18794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3104'.
[  670.097013][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3104'.
[  670.130142][T18794] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3104'.
[  670.140368][T18795] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3104'.
[  670.149944][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3104'.
[  670.369753][T18708] 8021q: adding VLAN 0 to HW filter on device bond0
[  670.383514][ T5825] Bluetooth: hci6: command tx timeout
[  670.434990][T18809] tipc: Resetting bearer <eth:syzkaller0>
[  670.523058][T18708] 8021q: adding VLAN 0 to HW filter on device team0
[  670.554988][T18813] netlink: 'syz.3.3108': attribute type 4 has an invalid length.
[  670.558294][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state
[  670.570054][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state
[  670.583148][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state
[  670.590441][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state
[  670.634340][T18809] tipc: Resetting bearer <eth:syzkaller0>
[  670.964398][T18825] netlink: 'syz.3.3111': attribute type 2 has an invalid length.
[  670.975692][T18825] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  671.160514][T18833] batadv0: entered promiscuous mode
[  671.168137][T18833] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  671.205646][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3112'.
[  671.363350][T18708] 8021q: adding VLAN 0 to HW filter on device batadv0
[  671.419786][T18708] veth0_vlan: entered promiscuous mode
[  671.446524][T18708] veth1_vlan: entered promiscuous mode
[  671.495090][T18708] veth0_macvtap: entered promiscuous mode
[  671.507599][T18708] veth1_macvtap: entered promiscuous mode
[  671.530332][T18708] batman_adv: batadv0: Interface activated: batadv_slave_0
[  671.552223][T18708] batman_adv: batadv0: Interface activated: batadv_slave_1
[  671.568039][T12286] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  671.579766][T12286] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  671.595444][T12286] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  671.605013][T12286] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  672.452042][ T5825] Bluetooth: hci6: command tx timeout
[  673.337475][T18804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  673.348172][T18839] netlink: 'syz.5.3114': attribute type 10 has an invalid length.
[  673.504568][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.525508][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.575912][T18849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3115'.
[  673.590723][T18849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3115'.
[  673.620207][T18853] netlink: 'syz.3.3116': attribute type 21 has an invalid length.
[  673.654776][T18853] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3116'.
[  673.675583][T12292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  673.703904][T12292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  673.754154][T18859] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3119'.
[  673.932808][T18872] openvswitch: netlink: Flow key attr not present in new flow.
[  674.089473][T18878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3122'.
[  674.342834][T18888] can: request_module (can-proto-5) failed.
[  674.497743][ T5832] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  674.513314][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  674.529963][ T5832] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  674.540417][ T5832] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  674.545321][T16470] Bluetooth: hci6: command tx timeout
[  674.559410][ T5832] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  674.681183][T18893] ªªªªª9 speed is unknown, defaulting to 1000
[  674.801514][ T5831] .`: (slave syz_tun): Releasing backup interface
[  674.817184][ T5831] syz_tun (unregistering): left promiscuous mode
[  674.890466][ T1168] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.982991][ T1168] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.044229][ T1168] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.108876][ T1168] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.137806][T18893] chnl_net:caif_netlink_parms(): no params data found
[  675.282096][T18893] bridge0: port 1(bridge_slave_0) entered blocking state
[  675.289354][T18893] bridge0: port 1(bridge_slave_0) entered disabled state
[  675.297943][T18893] bridge_slave_0: entered allmulticast mode
[  675.307498][T18893] bridge_slave_0: entered promiscuous mode
[  675.317799][T18893] bridge0: port 2(bridge_slave_1) entered blocking state
[  675.325968][T18893] bridge0: port 2(bridge_slave_1) entered disabled state
[  675.334590][T18893] bridge_slave_1: entered allmulticast mode
[  675.342686][T18893] bridge_slave_1: entered promiscuous mode
[  675.410244][T18893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  675.429679][T18893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  676.613851][ T5825] Bluetooth: hci2: command tx timeout
[  677.265694][ T1168] .` (unregistering): left promiscuous mode
[  677.273566][ T1168] bond_slave_0: left promiscuous mode
[  677.279160][ T1168] bond_slave_1: left promiscuous mode
[  677.288528][ T1168] .` (unregistering): (slave bond_slave_0): Releasing backup interface
[  677.288683][T12283] smc: removing ib device syz1
[  677.306347][ T1168] .` (unregistering): (slave bond_slave_1): Releasing backup interface
[  677.316317][ T1168] .` (unregistering): Released all slaves
[  677.327161][ T1168] bond1 (unregistering): Released all slaves
[  677.446301][ T1168] bond2 (unregistering): (slave macvlan2): Releasing backup interface
[  677.456397][ T1168] bond2 (unregistering): Released all slaves
[  677.588598][ T1168] bond3 (unregistering): Released all slaves
[  677.603653][ T1168] bond4 (unregistering): Released all slaves
[  677.730217][ T1168] bond5 (unregistering): Released all slaves
[  677.852833][ T1168] bond6 (unregistering): Released all slaves
[  677.867937][ T1168] bond7 (unregistering): Released all slaves
[  677.883356][ T1168] bond8 (unregistering): Released all slaves
[  678.010307][ T1168] bond0 (unregistering): (slave batadv1): Releasing active interface
[  678.021023][ T1168] bond0 (unregistering): Released all slaves
[  678.036141][ T1168] bond9 (unregistering): Released all slaves
[  678.052139][ T1168] bond10 (unregistering): Released all slaves
[  678.097546][T18893] team0: Port device team_slave_0 added
[  678.120185][T18893] team0: Port device team_slave_1 added
[  678.205803][T18893] batman_adv: batadv0: Adding interface: batadv_slave_0
[  678.234439][T18893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  678.275634][T18893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  678.312762][T18893] batman_adv: batadv0: Adding interface: batadv_slave_1
[  678.319781][T18893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  678.408087][T18893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  678.569769][T18893] hsr_slave_0: entered promiscuous mode
[  678.593855][T18893] hsr_slave_1: entered promiscuous mode
[  678.600698][T18893] debugfs: 'hsr0' already exists in 'hsr'
[  678.641214][T18893] Cannot create hsr debugfs directory
[  678.702571][ T5825] Bluetooth: hci2: command tx timeout
[  679.838775][T18893] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  679.859529][T18893] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  679.906533][T18893] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  679.944228][T18893] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  680.159449][T18893] 8021q: adding VLAN 0 to HW filter on device bond0
[  680.234628][T18893] 8021q: adding VLAN 0 to HW filter on device team0
[  680.263707][T12286] bridge0: port 1(bridge_slave_0) entered blocking state
[  680.271124][T12286] bridge0: port 1(bridge_slave_0) entered forwarding state
[  680.306255][T12286] bridge0: port 2(bridge_slave_1) entered blocking state
[  680.314291][T12286] bridge0: port 2(bridge_slave_1) entered forwarding state
[  680.742524][T18893] 8021q: adding VLAN 0 to HW filter on device batadv0
[  680.775178][ T5825] Bluetooth: hci2: command tx timeout
[  681.197267][ T1168] : left promiscuous mode
[  681.314996][ T1168] tipc: Disabling bearer <eth:syzkaller0>
[  681.355122][ T1168] tipc: Left network mode
[  681.543015][T18893] veth0_vlan: entered promiscuous mode
[  681.563244][T18893] veth1_vlan: entered promiscuous mode
[  681.648018][T18893] veth0_macvtap: entered promiscuous mode
[  681.681048][T18893] veth1_macvtap: entered promiscuous mode
[  681.749275][T18893] batman_adv: batadv0: Interface activated: batadv_slave_0
[  681.765864][T18893] batman_adv: batadv0: Interface activated: batadv_slave_1
[  681.823676][ T1150] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  681.836237][ T1150] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  681.868981][ T1150] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  681.878372][ T1150] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  682.090464][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.121552][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.230954][T12283] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  682.239898][T12283] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  682.331369][ T1168] batadv0: left promiscuous mode
[  682.359044][ T1168] hsr_slave_0: left promiscuous mode
[  682.373267][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_0
[  682.381439][ T1168] batman_adv: batadv0: Removing interface: batadv_slave_1
[  682.394611][ T1168] batman_adv: batadv0: Removing interface: dummy0
[  682.420463][ T1168] batman_adv: batadv0: Removing interface: macsec1
[  682.582865][T18987] netlink: 'syz.4.3124': attribute type 1 has an invalid length.
[  682.590872][T18987] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3124'.
[  682.701109][T18987] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3124'.
[  682.712068][T18987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3124'.
[  682.857299][ T5825] Bluetooth: hci2: command tx timeout
[  684.702321][   T97] block nbd3: Possible stuck request ffff8880257c8000: control (read@0,1024B). Runtime 90 seconds
[  684.713816][   T97] block nbd3: Possible stuck request ffff8880257c8200: control (read@1024,1024B). Runtime 90 seconds
[  684.727232][   T97] block nbd3: Possible stuck request ffff8880257c8400: control (read@2048,1024B). Runtime 90 seconds
[  684.739099][   T97] block nbd3: Possible stuck request ffff8880257c8600: control (read@3072,1024B). Runtime 90 seconds
[  687.351407][ T5189] udevd[5189]: worker [15396] /devices/virtual/block/nbd3 is taking a long time
[  691.095822][ T1300] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[  691.105053][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  691.115499][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  696.131868][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  696.140137][    C1] lec:lec_tx_timeout: lec0
[  704.067457][T11087] lec:lec_start_xmit: lec0:No lecd attached
[  709.081836][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms
[  709.089988][    C1] lec:lec_tx_timeout: lec0
[  714.782322][   T97] block nbd3: Possible stuck request ffff8880257c8000: control (read@0,1024B). Runtime 120 seconds
[  714.793751][   T97] block nbd3: Possible stuck request ffff8880257c8200: control (read@1024,1024B). Runtime 120 seconds
[  714.805559][   T97] block nbd3: Possible stuck request ffff8880257c8400: control (read@2048,1024B). Runtime 120 seconds
[  714.817744][   T97] block nbd3: Possible stuck request ffff8880257c8600: control (read@3072,1024B). Runtime 120 seconds
[  742.284912][T19006] netlink: 'syz.3.3131': attribute type 8 has an invalid length.
[  742.296131][T19011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3128'.
[  742.328998][T19006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3131'.
[  742.343884][T19007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3129'.
[  742.415450][T19011] 8021q: adding VLAN 0 to HW filter on device bond1
[  742.464244][T19006] bond0: entered promiscuous mode
[  742.499464][T19006] gretap0: entered promiscuous mode
[  742.517325][T19006] bond0: left promiscuous mode
[  742.535310][T19006] gretap0: left promiscuous mode
[  742.582685][T19012] bond1: option miimon: invalid value (18446744071562067968)
[  742.594562][T19012] bond1: option miimon: allowed values 0 - 2147483647
[  742.833393][T19042] netlink: 'syz.5.3136': attribute type 10 has an invalid length.
[  742.860555][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3138'.
[  742.887104][T19044] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3138'.
[  742.898323][T19044] netlink: 260 bytes leftover after parsing attributes in process `syz.2.3138'.
[  743.145911][T19060] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3142'.
[  743.221069][T19060] ªªªªª9 speed is unknown, defaulting to 1000
[  743.581157][T19066] batadv0: entered promiscuous mode
[  743.687326][T19066] dummy0: entered promiscuous mode
[  743.776396][T19066] hsr1: entered promiscuous mode
[  743.781445][T19066] hsr1: entered allmulticast mode
[  743.801447][T19066] batadv0: entered allmulticast mode
[  743.824842][T19066] dummy0: entered allmulticast mode
[  743.959977][T19078] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3147'.
[  743.975069][T19078] block nbd0: Unsupported socket: should be TCP or UNIX.
[  744.463021][T19097] ªªªªªª: renamed from wg2 (while UP)
[  744.858374][   T97] block nbd3: Possible stuck request ffff8880257c8000: control (read@0,1024B). Runtime 150 seconds
[  744.869763][   T97] block nbd3: Possible stuck request ffff8880257c8200: control (read@1024,1024B). Runtime 150 seconds
[  744.881129][   T97] block nbd3: Possible stuck request ffff8880257c8400: control (read@2048,1024B). Runtime 150 seconds
[  744.893141][   T97] block nbd3: Possible stuck request ffff8880257c8600: control (read@3072,1024B). Runtime 150 seconds
[  745.772822][T19139] netlink: 'syz.1.3164': attribute type 1 has an invalid length.
[  745.784258][T19136] gretap1: entered promiscuous mode
[  745.959985][T19147] bond3: option mode: invalid value (254)
[  745.985631][T19147] bond3 (unregistering): Released all slaves
[  746.197609][T19149] bond3: option mode: invalid value (254)
[  746.237636][T19149] bond3 (unregistering): Released all slaves
[  746.477001][T19168] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  746.493580][T19176] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20003
[  746.589562][T19176] ªªªªª9 speed is unknown, defaulting to 1000
[  746.757172][T19182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3175'.
[  746.806640][T19184] dummy0: entered promiscuous mode
[  746.819185][T19184] dummy0: entered allmulticast mode
[  747.495690][T19219] Cannot find add_set index 0 as target
[  747.730674][T19230] macvtap0: entered promiscuous mode
[  747.741298][T19230] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3183'.
[  747.872205][T19235] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3185'.
[  747.978025][T19225] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.030583][T19244] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3187'.
[  748.148750][T19225] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.227066][T19259] tipc: Started in network mode
[  748.232303][T19259] tipc: Node identity f22804505245, cluster identity 4711
[  748.239610][T19259] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  748.253507][T19247] syzkaller0: entered promiscuous mode
[  748.259205][T19247] syzkaller0: entered allmulticast mode
[  748.287362][T19247] tipc: Resetting bearer <eth:syzkaller0>
[  748.324153][T19247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3188'.
[  748.349684][T19225] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.370010][T19263] Bluetooth: MGMT ver 1.23
[  748.383694][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3192'.
[  748.396222][T19246] tipc: Resetting bearer <eth:syzkaller0>
[  748.434238][T19246] tipc: Disabling bearer <eth:syzkaller0>
[  748.484207][T19225] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  748.503613][T19265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3193'.
[  748.534442][T19265] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3193'.
[  748.582689][T19265] netlink: 'syz.3.3193': attribute type 5 has an invalid length.
[  748.590517][T19265] netlink: 'syz.3.3193': attribute type 6 has an invalid length.
[  748.654150][T19265] netlink: 35 bytes leftover after parsing attributes in process `syz.3.3193'.
[  748.788620][T12292] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.815622][   T35] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.951171][T12292] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.986227][T12292] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  749.181304][T19295] netlink: 'syz.4.3205': attribute type 10 has an invalid length.
[  749.208319][T19295] team0: Port device dummy0 added
[  749.223107][T19295] netlink: 'syz.4.3205': attribute type 10 has an invalid length.
[  749.235116][T19298] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  749.246754][T19298] ipt_ECN: cannot use operation on non-tcp rule
[  749.305066][T19295] team0: Port device dummy0 removed
[  749.339035][T19295] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  749.522453][T19307] block nbd4: server does not support multiple connections per device.
[  749.531462][T19307] block nbd4: shutting down sockets
[  749.683702][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'.
[  750.016267][T19330] netlink: 'syz.1.3214': attribute type 13 has an invalid length.
[  750.314847][T19339] ªªªªª9 speed is unknown, defaulting to 1000
[  750.468772][T19346] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3217'.
[  750.628806][T19356] netlink: 'syz.5.3220': attribute type 1 has an invalid length.
[  750.832660][T19363] siw: device registration error -23
[  751.005116][T19374] netlink: 'syz.5.3224': attribute type 1 has an invalid length.
[  751.209121][T19381] can: request_module (can-proto-5) failed.
[  751.374138][T19388] netlink: 'syz.4.3226': attribute type 15 has an invalid length.
[  751.647553][T19401] netlink: 'syz.5.3230': attribute type 3 has an invalid length.
[  751.688133][T19401] netlink: 'syz.5.3230': attribute type 1 has an invalid length.
[  751.733042][T19401] NCSI netlink: No device for ifindex 813332851
[  752.536290][ T1300] aoe: packet could not be sent on lo.  consider increasing tx_queue_len
[  752.549160][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  752.560696][ T1300] lec:lec_start_xmit: lec0:No lecd attached
[  753.583773][T19495] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  753.931497][T19519] __nla_validate_parse: 10 callbacks suppressed
[  753.931520][T19519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'.
[  753.967151][T19519] syzkaller0: entered promiscuous mode
[  753.973688][T19519] syzkaller0: entered allmulticast mode
[  754.206293][T19528] erspan1: entered promiscuous mode
[  754.219582][T19528] erspan1: entered allmulticast mode
[  754.229920][T19528] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3259'.
[  754.613293][T19554] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3267'.
[  754.932589][T19573] hsr0: entered promiscuous mode
[  754.948010][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3271'.
[  755.002366][T19579] hsr_slave_0: left promiscuous mode
[  755.010171][T19579] hsr_slave_1: left promiscuous mode
[  755.078073][T19579] hsr0 (unregistering): left promiscuous mode
[  755.196797][T19587] netlink: 708 bytes leftover after parsing attributes in process `syz.1.3276'.
[  755.215372][T19587] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  755.240055][T19587] openvswitch: netlink: IP tunnel dst address not specified
[  755.522164][T19599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3280'.
[  755.533694][T19599] tipc: Started in network mode
[  755.538737][T19599] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  755.561932][T19599] tipc: Enabled bearer <eth:vlan0>, priority 0
[  756.336971][T19637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3293'.
[  756.452871][T19644] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  756.621330][T19653] bridge_slave_0: left allmulticast mode
[  756.657728][T19653] bridge_slave_0: left promiscuous mode
[  756.671520][T19653] bridge0: port 1(bridge_slave_0) entered disabled state
[  756.726573][T19653] bridge_slave_1: left allmulticast mode
[  756.740191][T19653] bridge_slave_1: left promiscuous mode
[  756.761404][T19653] bridge0: port 2(bridge_slave_1) entered disabled state
[  756.839416][T19653] bond0: (slave bond_slave_0): Releasing backup interface
[  756.862653][T19668] validate_nla: 3 callbacks suppressed
[  756.862677][T19668] netlink: 'syz.5.3297': attribute type 23 has an invalid length.
[  756.924580][T19653] bond0: (slave bond_slave_1): Releasing backup interface
[  756.950440][T19653] team0: Port device team_slave_0 removed
[  756.965733][T19653] team0: Port device team_slave_1 removed
[  756.974273][T19653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  756.983516][T19653] batman_adv: batadv0: Removing interface: batadv_slave_0
[  756.995086][T19653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  757.006430][T19653] batman_adv: batadv0: Removing interface: batadv_slave_1
[  757.020768][T19653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  757.047340][T19655] ipvlan2: entered promiscuous mode
[  757.068099][T19654] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  757.087685][ T5885] tipc: Node number set to 10005162
[  757.251255][T19675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3299'.
[  757.459802][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3303'.
[  757.469565][T19681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3303'.
[  757.493417][ T5825] Bluetooth: hci2: command 0x0405 tx timeout
[  757.597723][T19683] bond1: entered promiscuous mode
[  757.604501][T19683] 8021q: adding VLAN 0 to HW filter on device bond1
[  757.800290][T19683] bond1 (unregistering): Released all slaves
[  757.979534][T19702] geneve2: entered promiscuous mode
[  758.051753][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5490 ms
[  758.059900][    C1] lec:lec_tx_timeout: lec0
[  758.166209][T19708] IPVS: Scheduler module ip_vs_sip not found
[  758.817671][T19764] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  758.824735][T19764] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  758.904224][T19768] tipc: Started in network mode
[  758.937358][T19768] tipc: Node identity 9245853e1c04, cluster identity 4711
[  758.967111][T19773] __nla_validate_parse: 12 callbacks suppressed
[  758.967129][T19773] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3327'.
[  759.001457][T19768] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  759.081587][T19777] syzkaller0: entered promiscuous mode
[  759.087865][T19777] syzkaller0: entered allmulticast mode
[  759.115841][T19783] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3328'.
[  759.177451][T19780] bond3: option ad_select: invalid value (34)
[  759.200213][T19780] bond3 (unregistering): Released all slaves
[  759.314570][T19789] tipc: Resetting bearer <eth:syzkaller0>
[  759.421195][T19766] tipc: Resetting bearer <eth:syzkaller0>
[  759.453543][T19766] tipc: Disabling bearer <eth:syzkaller0>
[  759.537818][T19803] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3331'.
[  759.732515][ T5832] Bluetooth: hci5: command 0x0406 tx timeout
[  759.928555][T19824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3334'.
[  759.951548][T19824] netlink: 'syz.1.3334': attribute type 1 has an invalid length.
[  760.227374][T19830] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.237864][T19849] IPv6: addrconf: prefix option has invalid lifetime
[  760.306549][T19853] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  760.467309][T19830] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.577708][T19830] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.753723][T19830] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  760.925469][   T35] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  761.023045][   T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  761.038766][T19889] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3352'.
[  761.126129][T12283] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  761.192687][T12292] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  761.314263][T19903] bond3: Removing last ns target with arp_interval on
[  761.321495][T19900] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  761.329643][T19905] netlink: 'syz.1.3356': attribute type 3 has an invalid length.
[  761.395434][T19901] syzkaller0: entered promiscuous mode
[  761.401370][T19901] syzkaller0: entered allmulticast mode
[  761.604944][T19921] netlink: 'syz.1.3359': attribute type 1 has an invalid length.
[  761.633258][T19922] tipc: Resetting bearer <eth:syzkaller0>
[  761.706073][T19926] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3359'.
[  761.760132][T19929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3360'.
[  761.847277][T19921] bond1: entered promiscuous mode
[  761.864201][T19921] 8021q: adding VLAN 0 to HW filter on device bond1
[  761.902193][T19898] tipc: Resetting bearer <eth:syzkaller0>
[  762.001643][T19898] tipc: Disabling bearer <eth:syzkaller0>
[  762.013386][T19926] bond1: entered allmulticast mode
[  762.071587][T19936] bond1: (slave bridge1): making interface the new active one
[  762.080286][T19936] bridge1: entered promiscuous mode
[  762.090926][T19936] bridge1: entered allmulticast mode
[  762.109136][T19936] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  762.493015][T19959] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  762.680561][T19963] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  762.704078][T19963] bond2 (unregistering): Released all slaves
[  762.754508][T19969] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.762309][T19969] bridge0: port 1(bridge_slave_0) entered disabled state
[  762.791028][T19969] bridge0: entered allmulticast mode
[  762.824217][T19971] bridge_slave_1: left allmulticast mode
[  762.829993][T19971] bridge_slave_1: left promiscuous mode
[  762.865596][T19971] bridge0: port 2(bridge_slave_1) entered disabled state
[  762.944784][T19971] bridge_slave_0: left allmulticast mode
[  762.972558][T19971] bridge_slave_0: left promiscuous mode
[  762.978682][T19971] bridge0: port 1(bridge_slave_0) entered disabled state
[  763.123260][T19984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3375'.
[  763.264282][T19991] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3374'.
[  763.298774][T19991] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3374'.
[  763.596158][T20000] bond3: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms
[  763.618462][T20000] bond3 (unregistering): Released all slaves
[  763.690501][T20003] lec:lec_vcc_attach: copy from user failed for 28 bytes
[  763.972646][T20024] netlink: 'syz.2.3383': attribute type 13 has an invalid length.
[  764.122665][T20024] bridge0: port 2(bridge_slave_1) entered disabled state
[  764.130340][T20024] bridge0: port 1(bridge_slave_0) entered disabled state
[  764.240561][T20024] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  764.256202][T20024] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  764.306180][T20024] tipc: Resetting bearer <eth:vlan0>
[  764.481225][T20035] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  764.498555][   T62] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  764.529347][   T62] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  764.553881][T20038] netlink: 'syz.5.3386': attribute type 2 has an invalid length.
[  764.559899][   T62] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  764.588256][   T62] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  764.613470][   T62] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  764.628656][   T62] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  764.645689][T20038] !: entered promiscuous mode
[  764.650884][T20043] __nla_validate_parse: 1 callbacks suppressed
[  764.650906][T20043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3388'.
[  764.679186][T20038] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3386'.
[  764.715360][   T62] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  764.725296][   T62] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  764.852747][T16470] Bluetooth: hci1: command 0x0406 tx timeout
[  764.916743][T20049] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3389'.
[  765.367224][T20075] IPv6: addrconf: prefix option has invalid lifetime
[  765.491631][T20081] xt_CT: You must specify a L4 protocol and not use inversions on it
[  765.519491][T20081] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3398'.
[  765.885582][T20102] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3399'.
[  766.292994][T20118] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3403'.
[  766.328915][T20119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3401'.
[  766.444215][T20125] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  766.478789][T20122] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  766.494092][T20126] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004
[  766.555431][T20121] 8021q: adding VLAN 0 to HW filter on device team0
[  766.652977][T20121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  766.695795][T20124] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3405'.
[  766.726550][T20131] 
: renamed from bond_slave_0 (while UP)
[  766.899906][T20140] openvswitch: netlink: Key type 195 is out of range max 32
[  767.138503][T20154] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3413'.
[  767.362357][T20163] nbd: must specify an index to disconnect
[  767.383077][T20164] pimreg: tun_chr_ioctl cmd 1074812117
[  767.406545][T20163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3418'.
[  767.427274][T20164] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  767.443850][T20164] syzkaller0: entered promiscuous mode
[  767.449574][T20164] syzkaller0: entered allmulticast mode
[  767.500173][T20164] tipc: Resetting bearer <eth:syzkaller0>
[  767.553670][T20169] netlink: 'syz.4.3420': attribute type 16 has an invalid length.
[  767.576946][T20162] tipc: Resetting bearer <eth:syzkaller0>
[  767.613086][T20162] tipc: Disabling bearer <eth:syzkaller0>
[  768.036744][T20191] syzkaller0: entered promiscuous mode
[  768.047662][T20191] syzkaller0: entered allmulticast mode
[  768.246885][T11087] lec:lec_start_xmit: lec0:No lecd attached
[  768.375941][T20203] 8021q: adding VLAN 0 to HW filter on device bond1
[  768.446093][T20209] 8021q: adding VLAN 0 to HW filter on device batadv1
[  768.467434][T20209] bond1: (slave batadv1): Enslaving as an active interface with an up link
[  768.597439][T20214] syzkaller0: entered promiscuous mode
[  768.603120][T20214] syzkaller0: entered allmulticast mode
[  768.640237][T20220] netlink: 'syz.2.3437': attribute type 1 has an invalid length.
[  768.974952][T20239] x_tables: unsorted underflow at hook 4
[  769.178737][T20258] sctp: [Deprecated]: syz.2.3444 (pid 20258) Use of struct sctp_assoc_value in delayed_ack socket option.
[  769.178737][T20258] Use struct sctp_sack_info instead
[  769.696848][T20282] __nla_validate_parse: 8 callbacks suppressed
[  769.696871][T20282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3454'.
[  769.829959][T20293] syzkaller0: entered promiscuous mode
[  769.867756][T20293] syzkaller0: entered allmulticast mode
[  770.057483][T20308] openvswitch: netlink: Duplicate key (type 21).
[  770.158992][T20313] ipvlan2: entered promiscuous mode
[  770.694358][T20322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3465'.
[  770.825592][T20327] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3467'.
[  770.897205][T20331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3469'.
[  771.015988][T20339] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  771.100500][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3471'.
[  771.194030][T20348] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3474'.
[  771.317152][T20350] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  771.395819][T20352] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3476'.
[  771.415463][T20352] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3476'.
[  771.546929][T20355] bond1: Removing last ns target with arp_interval on
[  771.693889][T20372] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  771.850674][T20382] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20001
[  772.117618][T20402] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.416555][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3493'.
[  772.463531][T20412] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3493'.
[  772.560750][T20412] vlan2: entered allmulticast mode
[  772.578462][T20412] bridge_slave_0: entered allmulticast mode
[  772.656163][T20429] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  773.514968][T20433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  773.705329][T20474] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  773.724720][T20474] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  773.905458][T20489] netlink: 'syz.5.3516': attribute type 10 has an invalid length.
[  773.917439][T20489] dummy0: left promiscuous mode
[  773.923328][T20489] dummy0: left allmulticast mode
[  773.944143][T20489] team0: Port device dummy0 added
[  774.051703][    C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5800 ms
[  774.059822][    C1] lec:lec_tx_timeout: lec0
[  774.217464][T20506] : entered promiscuous mode
[  774.295704][T20515] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0
[  774.551154][T20528] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  774.603919][T20528] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  774.668889][T20533] tipc: Started in network mode
[  774.726517][T20533] tipc: Node identity 12bed9389a02, cluster identity 4711
[  774.765868][T20533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  774.789056][T20536] syzkaller0: entered promiscuous mode
[  774.831159][T20536] syzkaller0: entered allmulticast mode
[  774.905805][T20533] tipc: Resetting bearer <eth:syzkaller0>
[  774.913823][T20533] __nla_validate_parse: 3 callbacks suppressed
[  774.913841][T20533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3528'.
[  774.932514][   T97] block nbd3: Possible stuck request ffff8880257c8000: control (read@0,1024B). Runtime 180 seconds
[  774.943991][   T97] block nbd3: Possible stuck request ffff8880257c8200: control (read@1024,1024B). Runtime 180 seconds
[  774.956093][   T97] block nbd3: Possible stuck request ffff8880257c8400: control (read@2048,1024B). Runtime 180 seconds
[  774.968105][   T97] block nbd3: Possible stuck request ffff8880257c8600: control (read@3072,1024B). Runtime 180 seconds
[  775.013652][T20533] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  775.071978][T20531] tipc: Resetting bearer <eth:syzkaller0>
[  775.193633][T20531] tipc: Disabling bearer <eth:syzkaller0>
[  775.337731][T20558] netlink: 212232 bytes leftover after parsing attributes in process `syz.1.3535'.
[  775.361446][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.370168][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.431251][T20564] netlink: 'syz.1.3538': attribute type 10 has an invalid length.
[  775.791518][T20575] netlink: 148 bytes leftover after parsing attributes in process `syz.2.3542'.
[  776.018499][T20583] syzkaller0: entered promiscuous mode
[  776.062690][T20583] syzkaller0: entered allmulticast mode
[  776.106081][T20587] bond0: (slave rose0): Releasing backup interface
[  776.182719][T12292] syzkaller0: tun_net_xmit 48
[  776.571206][T20623] net_ratelimit: 1 callbacks suppressed
[  776.571227][T20623] openvswitch: netlink: Missing valid actions attribute.
[  776.598905][T20623] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  776.789416][T20636] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3552'.
[  776.873153][T20636] IPVS: ip_vs_add_dest(): server weight less than zero
[  776.897492][ T5892] IPVS: starting estimator thread 0...
[  776.921888][T20639] netlink: 'syz.2.3554': attribute type 5 has an invalid length.
[  776.949657][T20639] netlink: 'syz.2.3554': attribute type 2 has an invalid length.
[  776.980402][T20639] netlink: 'syz.2.3554': attribute type 1 has an invalid length.
[  776.989212][T20639] netlink: 3617 bytes leftover after parsing attributes in process `syz.2.3554'.
[  777.009090][T20637] IPVS: using max 27 ests per chain, 64800 per kthread
[  777.017274][T20612] netlink: 'syz.3.3547': attribute type 6 has an invalid length.
[  778.144649][   T31] INFO: task syz.0.2840:17671 blocked for more than 143 seconds.
[  778.153057][   T31]       Not tainted syzkaller #0
[  778.158055][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  778.167044][   T31] task:syz.0.2840      state:D stack:25144 pid:17671 tgid:17665 ppid:5819   task_flags:0x400040 flags:0x00080003
[  778.179374][   T31] Call Trace:
[  778.183034][   T31]  <TASK>
[  778.186007][   T31]  __schedule+0x14ea/0x5050
[  778.190548][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  778.197716][   T31]  ? stack_trace_save+0xa9/0x100
[  778.202842][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  778.208289][   T31]  ? __pfx___schedule+0x10/0x10
[  778.213799][   T31]  ? schedule+0x90/0x360
[  778.218115][   T31]  schedule+0x164/0x360
[  778.222411][   T31]  schedule_timeout+0xc3/0x2c0
[  778.227225][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[  778.233891][   T31]  ? do_raw_spin_lock+0x12b/0x2f0
[  778.238980][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  778.244883][   T31]  ? wait_for_completion+0x274/0x5e0
[  778.250321][   T31]  wait_for_completion+0x2cc/0x5e0
[  778.255695][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[  778.261375][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  778.266915][   T31]  ? _raw_spin_unlock_irqrestore+0x74/0x80
[  778.273417][   T31]  __flush_work+0xa17/0xc50
[  778.277950][   T31]  ? __flush_work+0x100/0xc50
[  778.282783][   T31]  ? __pfx___flush_work+0x10/0x10
[  778.287872][   T31]  ? __pfx_wq_barrier_func+0x10/0x10
[  778.293707][   T31]  ? __cancel_work_sync+0x5c/0x110
[  778.299830][   T31]  __cancel_work_sync+0xbe/0x110
[  778.305156][   T31]  tls_sk_proto_close+0xc7/0x8c0
[  778.310326][   T31]  ? ip_mc_drop_socket+0x25a/0x270
[  778.315720][   T31]  inet_release+0x143/0x190
[  778.320296][   T31]  sock_close+0xc3/0x240
[  778.325084][   T31]  ? __pfx_sock_close+0x10/0x10
[  778.329968][   T31]  __fput+0x44f/0xa70
[  778.334659][   T31]  task_work_run+0x1d9/0x270
[  778.339284][   T31]  ? __pfx_task_work_run+0x10/0x10
[  778.345571][   T31]  ? do_splice_direct+0x1ac/0x290
[  778.350700][   T31]  get_signal+0x11eb/0x1330
[  778.355481][   T31]  ? do_sendfile+0x6f5/0x7d0
[  778.360181][   T31]  arch_do_signal_or_restart+0xbc/0x830
[  778.366156][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  778.372709][   T31]  ? __se_sys_sendfile64+0x144/0x1a0
[  778.378060][   T31]  exit_to_user_mode_loop+0x86/0x480
[  778.383470][   T31]  ? rcu_is_watching+0x15/0xb0
[  778.388285][   T31]  do_syscall_64+0x2b7/0xf80
[  778.393367][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.400600][   T31]  ? trace_irq_disable+0x37/0x100
[  778.405901][   T31]  ? clear_bhb_loop+0x60/0xb0
[  778.410649][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  778.416898][   T31] RIP: 0033:0x7f2c0339aeb9
[  778.421475][   T31] RSP: 002b:00007f2c0428d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  778.430699][   T31] RAX: 0000000000130000 RBX: 00007f2c03616090 RCX: 00007f2c0339aeb9
[  778.438942][   T31] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007
[  778.447037][   T31] RBP: 00007f2c03408c1f R08: 0000000000000000 R09: 0000000000000000
[  778.455865][   T31] R10: 0000020000000002 R11: 0000000000000246 R12: 0000000000000000
[  778.464016][   T31] R13: 00007f2c03616128 R14: 00007f2c03616090 R15: 00007ffe4c4203e8
[  778.472240][   T31]  </TASK>
[  778.475383][   T31] 
[  778.475383][   T31] Showing all locks held in the system:
[  778.483587][   T31] 3 locks held by kworker/0:0/9:
[  778.488575][   T31]  #0: ffff88813fe55948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  778.499685][   T31]  #1: ffffc900000e7bc0 ((work_completion)(&(&sw_ctx_tx->tx_work.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  778.514806][   T31]  #2: ffff88805820ecf0 (&ctx->tx_lock){+.+.}-{4:4}, at: tx_work_handler+0x10a/0x200
[  778.524632][   T31] 3 locks held by kworker/u8:0/12:
[  778.529807][   T31]  #0: ffff88802fe48948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  778.542369][   T31]  #1: ffffc90000117bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  778.556198][   T31]  #2: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x11e/0x14c0
[  778.567020][   T31] 1 lock held by khungtaskd/31:
[  778.572259][   T31]  #0: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  778.582375][   T31] 1 lock held by dhcpcd/5484:
[  778.587092][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x23d/0x370
[  778.596641][   T31] 2 locks held by getty/5581:
[  778.601440][   T31]  #0: ffff88814d5350a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  778.613332][   T31]  #1: ffffc900036bb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  778.623586][   T31] 3 locks held by kworker/u8:20/12286:
[  778.629090][   T31]  #0: ffff88813fe69948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  778.641757][   T31]  #1: ffffc9000b577bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  778.652901][   T31]  #2: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  778.662435][   T31] 1 lock held by udevd/15396:
[  778.667156][   T31]  #0: ffff8880256d3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  778.677727][   T31] 3 locks held by kworker/u9:1/16470:
[  778.683490][   T31]  #0: ffff88807c8eb948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0
[  778.695036][   T31]  #1: ffffc90002ea7bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa0f/0x17a0
[  778.708800][   T31]  #2: ffff88807e23cec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400
[  778.718785][   T31] 1 lock held by syz.0.2840/17671:
[  778.724379][   T31]  #0: ffff888047b62a48 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  778.734812][   T31] 2 locks held by syz.4.3543/20576:
[  778.740037][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  778.749352][   T31]  #1: ffffffff8e560c78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  778.760641][   T31] 2 locks held by syz.3.3547/20604:
[  778.766018][   T31]  #0: ffffffff8f99ddf0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x4f7/0x730
[  778.776453][   T31]  #1: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d7/0x840
[  778.786882][   T31] 1 lock held by syz.3.3547/20612:
[  778.792344][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: fib_newrule+0x4b6/0x1030
[  778.801434][   T31] 1 lock held by syz.5.3552/20629:
[  778.808712][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  778.818435][   T31] 1 lock held by syz.5.3552/20636:
[  778.823735][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: bpf_xdp_link_attach+0x120/0x950
[  778.833824][   T31] 1 lock held by syz.1.3557/20650:
[  778.838977][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  778.848907][   T31] 1 lock held by syz.1.3557/20652:
[  778.855005][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  778.864326][   T31] 1 lock held by syz.1.3557/20656:
[  778.869467][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410
[  778.879340][   T31] 1 lock held by syz.1.3557/20657:
[  778.885547][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150
[  778.895561][   T31] 1 lock held by syz.2.3559/20662:
[  778.900709][   T31]  #0: ffffffff8f9ac708 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10
[  778.911738][   T31] 
[  778.922253][   T31] =============================================
[  778.922253][   T31] 
[  778.931055][   T31] NMI backtrace for cpu 1
[  778.931076][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  778.931099][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  778.931112][   T31] Call Trace:
[  778.931119][   T31]  <TASK>
[  778.931128][   T31]  dump_stack_lvl+0xe8/0x150
[  778.931160][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  778.931182][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  778.931213][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  778.931238][   T31]  sys_info+0x135/0x170
[  778.931266][   T31]  watchdog+0xf90/0xfe0
[  778.931293][   T31]  ? watchdog+0x209/0xfe0
[  778.931321][   T31]  kthread+0x726/0x8b0
[  778.931348][   T31]  ? __pfx_watchdog+0x10/0x10
[  778.931367][   T31]  ? __pfx_kthread+0x10/0x10
[  778.931393][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  778.931415][   T31]  ? __pfx_kthread+0x10/0x10
[  778.931439][   T31]  ret_from_fork+0x51b/0xa40
[  778.931474][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  778.931504][   T31]  ? __switch_to+0xc82/0x1410
[  778.931536][   T31]  ? __pfx_kthread+0x10/0x10
[  778.931561][   T31]  ret_from_fork_asm+0x1a/0x30
[  778.931606][   T31]  </TASK>
[  778.931614][   T31] Sending NMI from CPU 1 to CPUs 0:
[  779.054873][    C0] NMI backtrace for cpu 0
[  779.054891][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  779.054910][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  779.054921][    C0] RIP: 0010:pv_native_safe_halt+0xf/0x20
[  779.054950][    C0] Code: 18 5f 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 77 10 00 fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90
[  779.054965][    C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000242
[  779.054981][    C0] RAX: 00000000002646ef RBX: ffffffff8199370d RCX: 0000000080000001
[  779.054994][    C0] RDX: 0000000000000001 RSI: ffffffff8dccd1e4 RDI: ffffffff8c073980
[  779.055006][    C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  779.055023][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef4270
[  779.055036][    C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000
[  779.055048][    C0] FS:  0000000000000000(0000) GS:ffff8881256eb000(0000) knlGS:0000000000000000
[  779.055062][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  779.055073][    C0] CR2: 0000555558cb64e8 CR3: 0000000027bce000 CR4: 00000000003526f0
[  779.055099][    C0] Call Trace:
[  779.055108][    C0]  <TASK>
[  779.055114][    C0]  default_idle+0x9/0x20
[  779.055139][    C0]  default_idle_call+0x72/0xb0
[  779.055166][    C0]  do_idle+0x1bd/0x500
[  779.055181][    C0]  ? lockdep_hardirqs_on+0x7a/0x110
[  779.055207][    C0]  ? __pfx_do_idle+0x10/0x10
[  779.055239][    C0]  cpu_startup_entry+0x43/0x60
[  779.055254][    C0]  rest_init+0x2de/0x300
[  779.055271][    C0]  start_kernel+0x380/0x3d0
[  779.055297][    C0]  x86_64_start_reservations+0x24/0x30
[  779.055319][    C0]  x86_64_start_kernel+0x143/0x1c0
[  779.055339][    C0]  common_startup_64+0x13e/0x147
[  779.055370][    C0]  </TASK>
[  779.241007][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  779.247916][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  779.257068][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  779.267177][   T31] Call Trace:
[  779.270500][   T31]  <TASK>
[  779.273474][   T31]  vpanic+0x1e0/0x670
[  779.277523][   T31]  panic+0xc5/0xd0
[  779.281308][   T31]  ? __pfx_panic+0x10/0x10
[  779.285767][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  779.291169][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  779.297351][   T31]  watchdog+0xfda/0xfe0
[  779.301527][   T31]  ? watchdog+0x209/0xfe0
[  779.305900][   T31]  kthread+0x726/0x8b0
[  779.310033][   T31]  ? __pfx_watchdog+0x10/0x10
[  779.314757][   T31]  ? __pfx_kthread+0x10/0x10
[  779.319480][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  779.324725][   T31]  ? __pfx_kthread+0x10/0x10
[  779.329350][   T31]  ret_from_fork+0x51b/0xa40
[  779.333995][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  779.339147][   T31]  ? __switch_to+0xc82/0x1410
[  779.343866][   T31]  ? __pfx_kthread+0x10/0x10
[  779.348494][   T31]  ret_from_fork_asm+0x1a/0x30
[  779.353302][   T31]  </TASK>
[  779.357043][   T31] Kernel Offset: disabled
[  779.361372][   T31] Rebooting in 86400 seconds..