last executing test programs:

2m41.401964275s ago: executing program 4 (id=5262):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4)
ppoll(&(0x7f0000000280)=[{r1, 0x140}], 0x1, 0x0, 0x0, 0x0)
writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000080))
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000002c0)=0x7, 0x4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) (async)
ppoll(&(0x7f0000000280)=[{r1, 0x140}], 0x1, 0x0, 0x0, 0x0) (async)
writev(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="02ef667db5e53f90ddf725d589e79497ed32000192c55934a92b7b6285d5b1fb065ae78c91902eb69b165687a415b833508dc85680407417b65a83592a4e597178233649c148ab68571c3390210cbe7ea8194c25e9b37c83bb8055e08218fa6a47d9401cdffa24dd9b984cec90c7c1508f05453927e13e43ffc2f4482bd0fc", 0x4}, {&(0x7f0000000140)="1a36c585040053c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d661416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cd665a14bd1b7ad319101e9beae62faa71a5f2383e963aba417592d7a84958", 0x7e}], 0x62) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$FS_IOC_SETFLAGS(r2, 0x401c5820, &(0x7f0000000080)) (async)
setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f00000002c0)=0x7, 0x4) (async)

2m40.447626359s ago: executing program 4 (id=5274):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r3, @ANYBLOB="0100400000000000000001937ea272bbe9732b79"], 0x38}}, 0x0)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r3, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4054}, 0x80)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r4=>0x0})
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210128bd7000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046e3090034000202020202050000080026006c04000801000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2m40.200891031s ago: executing program 4 (id=5278):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000001880)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000018c0)=0x14)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002000)={0x6, 0x4, &(0x7f00000020c0)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f0000002100)='GPL\x00'}, 0x94)
r5 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002180)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r6 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r5, &(0x7f00000021c0)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002300)={r4, r7, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c)
sendmsg$nl_route(r1, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002380)={&(0x7f00000023c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r9)
recvmmsg(r9, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)=""/145, 0x91}, {&(0x7f0000000440)=""/184, 0xb8}, {&(0x7f00000005c0)=""/180, 0xb4}, {&(0x7f0000000680)=""/208, 0xd0}, {&(0x7f00000007c0)=""/4035, 0xfc3}, {&(0x7f00000017c0)=""/119, 0x77}, {&(0x7f0000001d40)=""/147, 0x93}], 0x7}}], 0x1, 0x40010080, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r9, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001980)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65}, 0x94)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001e00)=ANY=[@ANYBLOB="4800000010004b04feffffff000000007a0000003276be8136ff57d577fc3be120a47c4ac8b31fa3e6ccef6ebfce5abc9be3d300a8b5caba3bbeb8639616792db5f66183df3426e82e45b7cb84da1eff030000000000007f542fa4f785085bac869d572ff48c8a402beea61d1c522c1aefa2cdc7415d8f4fc321374b0a79f54bdcd812ba6e3ef1be48dc8071431cf6d652fbe560273a625737e9075db70ab1a79264ab528a86c5e51278cb5564b1168d0b0514ee0d4cae055d58395cf1f2740869968870f907a43df993", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028014000300"/48], 0x48}}, 0x0)
r12 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r12, 0x107, 0x5, &(0x7f0000000500)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r12, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000001bc0), 0xffffffffffffffff)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000019c0)={'wlan0\x00', <r15=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r14, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001a80)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="030300000e00000000001100000708000300", @ANYRES32=r15, @ANYBLOB="0a0006"], 0x28}}, 0x14014)
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='n\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010029bd7000000000003e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374004c00820000000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000c881}, 0x20040000)

2m39.534441037s ago: executing program 4 (id=5285):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [0x6000000], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
socket(0x1f, 0xa, 0xee)
syz_emit_ethernet(0x7e, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r2, &(0x7f0000000140)="240000003f0005000a0000000000000002020000000000000c0001006f76732d64703000", 0x24, 0x0, 0x0, 0x0)
ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000100))

2m39.079798885s ago: executing program 4 (id=5287):
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000001c0)={@mcast1, 0xf}) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x5813}, 0x10) (async)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv6_getaddrlabel={0x30, 0x1e, 0x492dfc465ae32a8d, 0x0, 0x0, {}, [@IFAL_ADDRESS={0x14, 0x1, @local}]}, 0x30}}, 0x0)
writev(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)="e851ca303c70ac8d7152e5b50576fb6d0ee37b1eebb7995f10519dc6402498e9cd47c61d9a3f8c05b92c51261ba97a0c442f27970338206bc7ed51a32fa458e8c8e948fe3ce7ec1d4af3dfe322066239f9889a9b518d3a56d6d15c1c52450bd6fb007316656425333c1721b20047dd4bfdc3a5cf", 0x74}, {&(0x7f00000003c0)="3144a9f33e8b7af1bac538f5a92b965883995df1a2f41477145f6476bd21a820c8d9f7f08244c60c13dee3000e50de3157365f9997275918add2cadbefac959cd7c6f370a726f84e06045ef5d23a35a1081ea65576c7ed1ef9f688fab4991252dcf2aa79", 0x64}], 0x2)

2m39.036751087s ago: executing program 4 (id=5289):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/82, 0x32c000, 0x1000}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r3, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c22007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xfe, 0x0, 0x0, 0x0)

2m29.922125129s ago: executing program 0 (id=5382):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20)
close(0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) (async)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x5, &(0x7f0000000280), 0x4)
writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000300)='/', 0x1}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) (async)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000030900bd70000000000100000000", @ANYRES32=0x0, @ANYBLOB="350200200000040000000000000600000000"], 0x30}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000001000030900bd70000000000100000000", @ANYRES32=0x0, @ANYBLOB="350200200000040000000000000600000000"], 0x30}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0)
socket$tipc(0x1e, 0x2, 0x0) (async)
r5 = socket$tipc(0x1e, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
r6 = syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r6, 0x215eb000)
socket$netlink(0x10, 0x3, 0x12)
r7 = socket(0x2b, 0x80801, 0x1)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, &(0x7f0000000600)={'filter\x00', 0x4}, 0x68)
bind$tipc(r5, &(0x7f0000000400)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10)
write$bt_hci(0xffffffffffffffff, 0x0, 0x17) (async)
write$bt_hci(0xffffffffffffffff, 0x0, 0x17)
r8 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, 0x0, 0xfffffffffffffe5d)
sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {0x0, 0x0, 0x6}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x5}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
bind(r9, &(0x7f0000000440)=@generic={0x1f, "0000000000000100"}, 0xa) (async)
bind(r9, &(0x7f0000000440)=@generic={0x1f, "0000000000000100"}, 0xa)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010028bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="78890400820cff8f6048217e4d33deccaf1b45000002001400030b76657468315f746f5f687372001800001c0016801800018014000a00fd"], 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x4048040) (async)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010028bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="78890400820cff8f6048217e4d33deccaf1b45000002001400030b76657468315f746f5f687372001800001c0016801800018014000a00fd"], 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x4048040)

2m28.545850993s ago: executing program 0 (id=5393):
r0 = socket$netlink(0x10, 0x3, 0x2)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', <r2=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000305000000000000000002180000", @ANYRES32=r2, @ANYBLOB="870bb6638aa0a74792a4840800f12e4e33713188d7e00de12d5205de79e04d5cd6a3b363d15e7f0ac583a49d00361d7c83b8f9e84522ea8787b7860ad80d5beaf7317821d7d97e8f2bcb4e00189735edc0793b1bd1a97e1f57b0d75a4f71cdcea1a8b9e4d7e84e518c5650354076f4511b23c8caf1df4977ba03a31c8e0b79eac60834e716356791ecdee06a68dd17b011737aa1b20ba6a1e1ec637a06c17397d73a8a3f79ee957e272a0d25b6ace8d5ec49e1a446f29dc6a7f999b3a32132db870e236605add8bdf87cf49edc543e"], 0x20}}, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000280)="4805000015", 0x5}], 0x1)
r3 = socket$inet6(0x10, 0x3, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f0000000bc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x7, 0x0, 0xd, 0x9, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000c40)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000010c0), 0x10)
sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000a00)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000c80)="4f435a507df45affbc0b492403fa953147e20b4333580f56e1440553cb556841bb6fe78aa7fd3ab401a373c2dc399ca0e6540c9c577f1608f3a61d0d509e005d1bf2d28f1d4097d1cb8a55f3f33288a5c025b7b9916e280ef3e05a82c612a32e613b7cad7d701da5485bd2a68e394e9732814786d78647d134bb05840e51b99e2e894879cf57348e06f814c5a5037ca1", 0x90}, {&(0x7f0000000d40)="19636bb1924e22d8687678decda924bca7191d3d38104bb4674fa95ed28ca46e39da02f85592941cd6263ecfea56f4590d00356bc3d371cf45554f86c48c5c56faf41e32582e3961ff21fc96875d0e525d025db114793497a3a8ffd4af6e846d37fa10e47bf131c8019aaf624747d404a7c935fd0afdc9fea625a64b94537a9751a1a8f6e354c0c8ff426bb8951935d05b", 0x91}, {&(0x7f0000000e00)}, {&(0x7f0000000e40)="1a0f4bc81761baed51384922094e5a913e3f94360a9b05217f4c9e4ed832935afd3bad08314b3c76d1ea95de6852aacf292c8f26", 0x34}, {&(0x7f0000000e80)="9118d6ff646c97c9e483f84f8719bdce677ec2b19f6560abb0234ba422723794c457a023b1057698fd834df82d95c1e4aca7bd885910", 0x36}], 0x5, &(0x7f0000000f40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast1, @empty}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xa82}}], 0x38}, 0x20000091)
sendto$inet6(r3, &(0x7f00000002c0)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000a00)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x10, 0x3fb, 0x10, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)
syz_emit_ethernet(0x86, &(0x7f0000001200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @mcast1, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x11, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0)
r7 = epoll_create1(0x0)
sendfile(r7, r5, &(0x7f0000000a40)=0x6, 0x276f)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_GET(r9, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="1000000e061401000000000000000000"], 0x10}}, 0x0)
ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f0000000880)=0x100000001)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000840)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r8, @ANYBLOB="120029bd7000fcdbdf25150000003000018008000300010000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=r2, @ANYBLOB="08000300030000004400018008000100", @ANYRES32=r2, @ANYBLOB="140002006e657464657673696d3000000000000014000200626f6e64300000000000000000000000080003000100000008000100", @ANYRES32=r2, @ANYBLOB="2000018008000300030000001400020069705f767469300000000000000000004800018008000300d4342f401400020077673200000000000000000000000000080003000200000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="080003000000000008000300020000000c00018008000300000000005400018008000300030000000800030001000000080003000300000014000200766c616e300000000000000000000000140002006e657464657673696d3000000000000008000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="6800018008000100", @ANYRES32=r2, @ANYBLOB="08000300000000001400020067726530000000000000000000000000080003000000000014000200697036746e6c3000000000000000000008000100", @ANYRES32=r2, @ANYBLOB="140002006261746164765f736c6176655f30000008000100", @ANYRES32=r2, @ANYBLOB], 0x1b8}, 0x1, 0x0, 0x0, 0x4004044}, 0x24008811)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r3, 0x20, &(0x7f0000000580)={&(0x7f0000000400)=""/183, 0xb7, 0x0, &(0x7f00000004c0)=""/180, 0xb4}}, 0x10)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={<r10=>0xffffffffffffffff})
getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000001080)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x64, 0x4, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000305fafffffe0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c54f8c2ee00080005000000000000008dbe2ff67532a25bf1dec95b2f3cbea083f48bf6c05c3291f1b62e4f43bf6bb6886c2d", @ANYRES32=r11, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4c890}, 0x0)

2m28.29032755s ago: executing program 0 (id=5396):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000100000000000000000000000031ab2e1885f93700000000395a000000000087f24678ad2dc3e192157c1d18d1317dafcb86d0541762711b812a202d5a9e4b87b69d20d27b0126419bde74510019a90752e19322aab7c2e67c6df255e785ef19cc908c6f91191fd85df0951253939acfdecea9af07c16570701a9ff049d51a"], 0x50)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x9, @loopback, 0x4}, 0x1c)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xffff, @mcast2}}}, 0x32)
setsockopt$inet6_opts(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8)
writev(r1, &(0x7f0000000100)=[{&(0x7f0000000200)="ee", 0x1}], 0x1)
writev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)='l', 0x1}], 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x110, r0, 0x117a7000)
sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r5, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

2m28.083118599s ago: executing program 0 (id=5400):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r2=>0x0})
setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r2, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, 0x43, 0x107, 0xfffffffe, 0x25dfdbfc, {0x4, 0x7c}, [@nested={0x4, 0x147}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xda, 0x0, 0x0, @uid}]}]}, 0x24}}, 0xc000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x2})
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'pim6reg0\x00', 0x1})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {0xe, 0x1}}}, 0x24}}, 0x4)

2m27.489907512s ago: executing program 0 (id=5409):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000340), 0x619, r1}, 0x38)
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bond_slave_0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfffe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840)
sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffff, 0xf}, {0x0, 0xfff3}, {0x2, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x88a8}, @TCA_FLOWER_KEY_VLAN_ID={0x6, 0x17, 0xb8a}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x0, @loopback}, @in6={0xa, 0x4e21, 0x2086, @loopback, 0x101}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}, @in={0x2, 0x4e20, @broadcast}], 0x58)

2m27.125817033s ago: executing program 0 (id=5413):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="e80000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000bc000380b8000080b4000b801c0001800b00010074756e6e656c00000c00028008000240000000125c000180090001006c617374000000004c000280080001400000100008000140000000060c000240000000000c220bcc0800400000000408000140000080000c000240000000000000020008000140000600f0280001800b0001006c6f6f6b757000001800028008000440000006000900010073797a3200000000100001800b00010074756e6e656c0000"], 0xe8}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x8000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000540), 0x4)
sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x20008060)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0)
unshare(0x46000480)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0)
write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00000003030006000000090040000304176bca54a1462f6024d5bf10ded82b119480d8bc56fe1b2a8cf5f19c54c5b004d1a3397dd2177b6005728cf53e25a05682f107aa5585f7d4c47da0d07fd24da0271cab5a3e66c0b93d86dd143dcbbbbc5f6448a7ac188e5b77fe5f0f94ebb8a7575005b1c9c33e97089bc70ab14bcf9f6a4a8eca3f1aa05d48b2eedf735d6c53adfaf7c7659346b1bd4f006689aaff87df457f67fe58afacc81c296dda81f6ad100062263fd9aebd8b"], 0x11)

2m23.589167765s ago: executing program 32 (id=5289):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x4007fff6, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c805}, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000040)=""/82, 0x32c000, 0x1000}, 0x20)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r3, &(0x7f0000000600)="a800000042000100030000000000000003010000102700003200010000112233445566778899aabb080045000020000140004011b778c0a80101c0a8010204d2162e000c22007465737400004c00020008000300010000001000040066778899aabb001122334455060006000800000010000700c0a80101c0a801021100400008000a0004d2162e08001600010000000600170000000000100003000c000c000600020000000000", 0xfe, 0x0, 0x0, 0x0)

2m23.104409562s ago: executing program 2 (id=5443):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x6, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r4 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
r5 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYRESOCT=0x0], 0x3c}}, 0x40000)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040)

2m22.68712087s ago: executing program 2 (id=5446):
write(0xca, &(0x7f0000000000)="04019884", 0x4)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2b, &(0x7f00000003c0)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000800)={0x3, 0x0, &(0x7f0000000840)={&(0x7f00000000c0)=ANY=[@ANYBLOB="02010008080000000000000000000000030006000000000002000000ac1414a2000000000000000003000500000000000200000020a43402c6a4cb027047914b06d34b59586ebaa591d15f9d2f72989a53a6075917fe83af1d44647a00ede8dee2f95ec47addc712d082d48b2a99e6ef11565f83caaafe9bce57ac89878dc9b0e137a6c9f656b3ce72258444f7bfcccf363bd3619d4139f1efa6a0"], 0x40}, 0x1, 0x7}, 0x0)
connect$inet6(r1, &(0x7f0000000500)={0xa, 0x0, 0x0, @loopback}, 0x1c)
close(r0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4)
writev(r1, &(0x7f0000000580)=[{&(0x7f00000005c0)="ec", 0xfdef}], 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000900)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000940), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000980)=0x7, 0x4)
r6 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newtaction={0xc0, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xac, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0xfffc, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd, 0xffffffff}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x3c, 0x2, 0x0, 0x0, {{0x9}, {0x10, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x248a, 0x4}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xc0}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000c00)={0x0, 0x1e5, &(0x7f0000000c40)={&(0x7f0000000c80)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000180)={r3, &(0x7f0000000240)="96452a", &(0x7f0000000280)=""/227}, 0x20)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r8, &(0x7f00000008c0)={0xa, 0x4e23, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=@base={0x1b, 0x3, 0x7, 0x8000, 0x500, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50)

2m22.365417443s ago: executing program 2 (id=5449):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x560, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x490, 0x2e8, 0x2e8, 0x490, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00', {0xff}}, 0x0, 0x2c0, 0x2f0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@inet=@policy={{0x158}, {[{@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0x0, 0xffffffff, 0xff000000, 0xffffff00], @ipv4=@rand_addr=0x64010102, [0x0, 0xffffffff, 0xffffffff, 0xff000000], 0x4d4, 0x3503, 0x3c, 0x0, 0x1, 0x4}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x38}, [0x0, 0xffffff00, 0xffffff00, 0xff000000], @ipv6=@loopback, [0xffffff00, 0xff, 0xff000000, 0xff000000], 0x4d5, 0x0, 0x0, 0x0, 0x2, 0x2}, {@ipv6=@private1, [0x0, 0xff, 0xff, 0xff], @ipv6=@mcast2, [0xff, 0x0, 0xffffff00, 0xffffff00], 0x4d4, 0x3504, 0x2, 0x0, 0x14, 0x9}, {@ipv6=@local, [0xff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0xffffff00, 0xff], 0x4d3, 0x3505, 0x62, 0x0, 0x7, 0x8}], 0xd9884bcd73343275, 0x1}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@mcast1, @loopback, [0xff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xff], 'sit0\x00', 'caif0\x00', {}, {}, 0x67, 0x3, 0x0, 0x20}, 0x0, 0x138, 0x1a0, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'bond0\x00', 'veth1_virt_wifi\x00', 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) (async)
r2 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) (async)
r3 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x4098884, &(0x7f00000000c0)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
sendto$inet6(r3, &(0x7f0000000180), 0x3000, 0x0, 0x0, 0x0) (async)
unshare(0x100000) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r4, 0x8cee000) (async)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) (async)
connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) (async)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2, 0x0, 0x0)
sendmmsg$inet(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56dfc0463d7264608be7eb101584031afcb2dd9fde4e9898c979973c2370b87cd0c28b16de10548ddc457fbc34309663418dc7df60c4ed965bbc5655ee79aa95aed1f33742034cf18df47530912cd19da57d44493b54c5a625e2c237d4ec4496df293d301359126d0129465a45aef9340515c2627f1919efa25c0fa5bf515a67ae10d527977138ade3e7422e41215aa75d6133b7710426c1e27f725e6040f01c6e7524e3789fefcb4640442cd4f72a03edec97bd47d12624053419048431ac781e6a17b9ab5030a5705ca11efb3dc58aaa41f9a6cfe397f774f0dc74610ac72624ca48af1ecba87376df745bccd434351f5831bcdc946bfa4ebb025412679f1e5011f1391935b6648007c98f5af3f0366eaa928de4180024188bae3aecea59a27edaf0cd199c57ef290c205dfbb89c82e9733d1bd12b59863a7f8a34b51f0a6da8b8f8ea6a571460938d4ea26f097e78af31c40501eeb8ad0f9feed8a6430149b85cdd7ed62c2e12cfa6a3c7292a1dfd3ca438e583d7f3af6ca123fe1c80352490c831ea385b132d792b4b6e0e570d0df29d9b39a761cf3b07ab29255cf4c3c281c71c47654144b0b61cda5830fa9d1feec4c305e89b12694fccab28759239b1e52377fdee05785867c281411372bab2a315403519199af83e75a402051fcfd2fdd179f4307ec96d1236cd9e24054582d242ed1e4113f1b244be3e26f78ad1668fbeee0e5e51b81d8302a85c64b2c8b3dbf6f126e289e216dd22902df37905872be8610c1e31fb2b0bcce23b7bbe76bc1eb69fac2ffffe06601273dda4769075823293cc94eb1a3a06b8cd13db4b1c7dc9ddd6ed4eeff148e3cd8494d81826d4586f780177664e4495fbb0045da95dfdfb96fcbbcd6ec5f78b66e2c738e1a6edc0c7bb17f5d764cff4eb5d572fb2e376b258a891ae25f16ee9d0803ae7b9ecbbdfe6d5de3cf4535d2f7cdbbb522d91693fc511589b2be769927954ae4574917c492bf4d75ffb0914939526f1d76fc73fc6a785f71707f41bb4766741926eda68c2783dd8a651c67edf80a4e5235fc72c343189eaf9563faced85942ddf1521b3f8f72565bd30de38f289ea131e228dbe53267b35e08575bd529c062c8d102ae61ef2af9c76132f53727e418c6bb903b0c8258f30f0b629701ce741434542e59a866766bd78d77274e6d56d40b2d8abb0cdb4ee7060ffe569f6080ddf7a7b696d8fba17ef2305547250ad5cde88c94f957febfd5c1a788b67d044369ceeb64bdcd8ec631658245eee03acc3de7fd4649060fde28c424f5e9f4f7f2013773a208c2faa4212e8c38685fc3773f04466329beca3ebd6ccf4a162fc1e5481fe537649c61c44e784c93db71036417dd96271cd21811178af52aa76b5b69342710c935707f792be532a346e47ffe576999f7ccd065eb1e439768cce2908a600d9e62148f4", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a40)="8b", 0x1}], 0x1}}], 0x2, 0x4001) (async)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000001a80)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001ac0)=0x40) (async)
setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000900)=@ccm_128={{0x303}, "02d8c71668c10f36", "9ee89f502f6f0b57acda0bf7225e431a", "e114ab80", "faa154ed73516e2d"}, 0x28)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080003006400000008000200c8"], 0x2c}}, 0x0) (async)
ioctl$int_out(r0, 0x2, &(0x7f0000000040))

2m21.318124365s ago: executing program 2 (id=5455):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x15}}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8000)

2m21.13949727s ago: executing program 2 (id=5458):
r0 = socket$kcm(0x29, 0x0, 0x0)
recvmsg$kcm(r0, &(0x7f0000001600)={&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001580)=[{&(0x7f00000001c0)=""/228, 0xe4}, {&(0x7f00000002c0)=""/27, 0x1b}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/82, 0x52}, {&(0x7f0000001400)=""/129, 0x81}, {&(0x7f00000014c0)=""/190, 0xbe}], 0x8}, 0x40022000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="600000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fab0837d2db8f11a1400030067656e6576653100000000000000000024001280110001006272696467e6024fcb11748f655f736c617665000000000c000580050004000000000008"], 0x60}, 0x1, 0x0, 0x0, 0x20044010}, 0x4050)
r2 = epoll_create1(0x80000)
r3 = socket(0x1, 0xa, 0x3)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000140)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000001640))
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000016c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f00000017c0)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001780)={&(0x7f0000001700)={0x78, r5, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x40}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x40110}, 0x40008c0)

2m20.750618065s ago: executing program 2 (id=5461):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x418000, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt(r7, 0x1ff, 0x9, 0x0, 0x0)

2m11.93579228s ago: executing program 33 (id=5413):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x27, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80)
sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="e80000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000bc000380b8000080b4000b801c0001800b00010074756e6e656c00000c00028008000240000000125c000180090001006c617374000000004c000280080001400000100008000140000000060c000240000000000c220bcc0800400000000408000140000080000c000240000000000000020008000140000600f0280001800b0001006c6f6f6b757000001800028008000440000006000900010073797a3200000000100001800b00010074756e6e656c0000"], 0xe8}, 0x1, 0x0, 0x0, 0x400c8c5}, 0x8000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r4 = socket$kcm(0xa, 0x922000000003, 0x11)
setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000540), 0x4)
sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f00000005c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x7, 0xffffffff}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000680)="f4000900062b2b25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x20008060)
writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1013b52513a5cb7", 0x19}], 0x1)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r3, 0x0)
unshare(0x46000480)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x60}}, 0x0)
write$tun(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="00000003030006000000090040000304176bca54a1462f6024d5bf10ded82b119480d8bc56fe1b2a8cf5f19c54c5b004d1a3397dd2177b6005728cf53e25a05682f107aa5585f7d4c47da0d07fd24da0271cab5a3e66c0b93d86dd143dcbbbbc5f6448a7ac188e5b77fe5f0f94ebb8a7575005b1c9c33e97089bc70ab14bcf9f6a4a8eca3f1aa05d48b2eedf735d6c53adfaf7c7659346b1bd4f006689aaff87df457f67fe58afacc81c296dda81f6ad100062263fd9aebd8b"], 0x11)

2m5.644864642s ago: executing program 34 (id=5461):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x418000, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3000000027000100000000ddfcdbdf460c0000001c00018017000200636c69214bcc51b172af5be4b75bd271"], 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r4)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x24}}, 0x0)
ioctl$TUNSETGROUP(r3, 0x400454ce, 0x0)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt(r7, 0x1ff, 0x9, 0x0, 0x0)

6.646643114s ago: executing program 1 (id=6391):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async)
close(0x4) (async)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000100)) (async, rerun: 64)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20702, 0x0) (rerun: 64)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xca58c30f81b6079f})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x6101}) (async, rerun: 32)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2901, 0x0) (rerun: 32)
close(r3) (async)
socket$can_raw(0x1d, 0x3, 0x1) (async)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local}) (async)
write$tun(r1, &(0x7f00000002c0)=ANY=[], 0x16)
write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x32600) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079107b00000000000500000000000000950000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (rerun: 64)

6.554270326s ago: executing program 5 (id=6392):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000400)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000440)={0x1, 0x0, 0x6, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x6)
r2 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'macsec0\x00', <r4=>0x0})
r5 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x5a8, 0x250, 0xffffffff, 0xffffffff, 0x250, 0xffffffff, 0x4d8, 0xffffffff, 0xffffffff, 0x4d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x228, 0x250, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit3={{0x158}, {'\x00', {0x4, 0x1, 0x1a, 0x0, 0xdedd, 0x10000000, 0x0, 0x1000, 0x78, 0x20}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x6a, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x608)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r4, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff0000000000000000000000000000ffff"], 0x4c}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040)
sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000002500c9eff9fce469ffe5ef3ce3cd25ee020027b97000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x800)
ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f0000000040)={'nr0\x00', 0xfff5})

6.297983069s ago: executing program 5 (id=6394):
r0 = socket(0x200000000000011, 0x2, 0x0) (async)
r1 = socket(0x2, 0x3, 0x3)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge0\x00', 0x52c)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000680), 0x3a, 0x10, &(0x7f00000006c0), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000780)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
sendto$unix(r1, 0x0, 0x0, 0x800, &(0x7f0000000080)=@abs={0x0, 0x7, 0xd0000e2}, 0x6e) (async)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS_V2(r0, 0x84, 0x25, &(0x7f00000001c0)={<r3=>0x1, @in6={{0xa, 0x4e20, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0xfffc, 0xfd90, 0x8}, &(0x7f0000000280)=0x90)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000e40)={r3, 0x1000, "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"}, &(0x7f0000001e80)=0x1008)
socket$igmp6(0xa, 0x3, 0x2) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/cgroup\x00') (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) (async)
shutdown(0xffffffffffffffff, 0x1) (async)
r4 = socket(0x8, 0x3, 0x3)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4)
r5 = socket$igmp(0x2, 0x3, 0x2)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='cpu.stat\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) (async)
setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000800)={0x1, 0x0, 0x80, 0xfffffffb, @vifc_lcl_addr=@private=0xa010100, @private=0xa010101}, 0x10) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', <r7=>0x0})
bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async)
sendmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x885)

4.821746927s ago: executing program 3 (id=6399):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8)
sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @empty}}}], 0x20}, 0x4000) (async)
sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="01000000000000000000050000000c"], 0x38}}, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x6}, 0x10)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000012002102000000000000000007"], 0x38}}, 0x0)
r2 = socket(0x10, 0x3, 0x0) (async)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'lo\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000030000002800018014000400ff01000000000000000000000000000108000700", @ANYRES32=0x0, @ANYBLOB="060001"], 0x3c}}, 0x0)
recvmmsg(r5, &(0x7f0000000800)=[{{&(0x7f0000000600)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/68, 0x44}, {&(0x7f0000000700)=""/165, 0xa5}], 0x2}, 0x3}], 0x1, 0x2021, &(0x7f0000000840)={0x77359400}) (async, rerun: 32)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 32)
r7 = socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x0, 0x5}, {0xfff1, 0xffff}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@deltfilter={0x34, 0x2d, 0x1, 0x78bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xb, 0xfff2}, {0xf, 0xffff}, {0x10, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x24044010)

4.821100903s ago: executing program 1 (id=6400):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x7, r3, 0x200000000000000}, 0x38)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)={0x34, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x34}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r7=>r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1f, 0xc, &(0x7f00000011c0)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5a7}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001240)={r8}, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "7f000001"}]}]}}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r11, &(0x7f0000000fc0)="01020304", 0x4, 0x0, &(0x7f0000001000)={0x2, 0x1234, @local}, 0x10)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000001280)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0)
connect$inet(r12, &(0x7f0000001040)={0x2, 0x1234, @local}, 0x10)
sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x128, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_NAT_SRC={0xc4, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x96d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000901)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', <r13=>0x0, 0x4, 0x2, 0x10, 0x0, 0x30, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x0, 0x1, 0x7}})
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000380)={0x1, 0x0, 0xfa, r13, 0x8}, 0xc)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYBLOB="0c00018008000600", @ANYRES32, @ANYRESDEC=r7, @ANYRES32=r3], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

4.753796555s ago: executing program 6 (id=6401):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28)
socket$vsock_stream(0x28, 0x1, 0x0) (async)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040), 0x4) (async)
setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040), 0x4)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async)
sendmsg$nl_generic(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0xffffffff}, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001200010a00000000000000050a000000"], 0x26}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet6(0xa, 0x2, 0x0) (async)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000400)={0xa, 0xe22, 0x0, @rand_addr, 0xe000}, 0x1c) (async)
bind$inet6(r5, &(0x7f0000000400)={0xa, 0xe22, 0x0, @rand_addr, 0xe000}, 0x1c)
connect$inet6(r5, &(0x7f0000000740)={0xa, 0x0, 0x3, @empty, 0x2}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004) (async)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000780)=[{&(0x7f0000000840)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000625d0000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x9b, 0x8, 0xfffffffffffffff6, 0x0}}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="180000001800000000000000030000005a860282", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', r9}, 0x94)
writev(r4, &(0x7f0000000700)=[{&(0x7f0000000300)="917fe487cc03921cc5bcc7c8d07e393bfb74b58ff8f071e2996894", 0x1b}, {&(0x7f0000000340)="92f5bf87e8e701946e1ec0c9f9f3b9ba5163552072322beed053c973c60ed9aa7d1007f544adcdb79981a44730d3492bbe906d37b1075fb22289e549750918d8dc8aea0b510197da6bbccbe8c87049df44dcefc559eaf721676e8650cf", 0x5d}, {&(0x7f0000000540)="bc82667b2c8f0f1e9716543cebd1033e24a3b25f875493e37e4fc68b1521c83731688f926681e0af21cfdb98df641f8fbab556151ce19a49dd3977914089213ebe90455f64ae333eb819c2dc6d6357f2773fe29af90cc4f49d77805af124fcd995b70eb710c938328e21c6ea8cc80ead339a05dee23df657dc6c1521c836bbf67dfcd1fa1275f504c9e87bb9dfcd0f136640dc3b7d1391308a4ad1aca1cb15988c7dfe4b3114a55c59b426d5d6d13456e773614c4cef418bd93d9c4ed02b3173dafa139d7f1e9f9d4490090f23c199d5e6", 0xd1}], 0x3)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt(r10, 0x174, 0x401, &(0x7f0000000a00)="21f5779c7029a563986aa8a0a0618772a032b89ab6119de6ac31c6beb6d0f8f84729b7a46026b80cf69f893678367ca6262a7595421f6f652c2f02f4888671f0e83c9eafca41feab4c61d9850c765e0a74ed8a0f4f805d2680acfcd539cf61c2331eb3511d02be92f304949f1533a37e2d73b9a7e039648163d70e864401a8c7af140ba4882a07d99a1b19391554dcb713a46fcd55d5570aa04bfeca03e3ee87506f20d713601d7397f4efd602e7f9e706bd9cf077ce7cc2edb62656e79d41af2b1dc5625dcd0a9f8dd8cc66", 0xcc) (async)
setsockopt(r10, 0x174, 0x401, &(0x7f0000000a00)="21f5779c7029a563986aa8a0a0618772a032b89ab6119de6ac31c6beb6d0f8f84729b7a46026b80cf69f893678367ca6262a7595421f6f652c2f02f4888671f0e83c9eafca41feab4c61d9850c765e0a74ed8a0f4f805d2680acfcd539cf61c2331eb3511d02be92f304949f1533a37e2d73b9a7e039648163d70e864401a8c7af140ba4882a07d99a1b19391554dcb713a46fcd55d5570aa04bfeca03e3ee87506f20d713601d7397f4efd602e7f9e706bd9cf077ce7cc2edb62656e79d41af2b1dc5625dcd0a9f8dd8cc66", 0xcc)

4.148321169s ago: executing program 6 (id=6402):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) (async, rerun: 32)
syz_emit_ethernet(0x42, &(0x7f00000003c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x10, 0x34, 0x0, 0x0, 0xc0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x1000, 0x2000, 0x1, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x40, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0xe7b0}, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (async, rerun: 32)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1daa000098888d102400ff000006000000000000000000000000000000dfda90b059e88dd8136028e96a9ee30175ee997f808522d6b714e9753a80c866186e77376e5ba154c7827181a5a0d48416ce654c193c97a499689f89d587806d393bec133cb32c9d049903feb6403f9dc690675cf391e71adee881d3d915e77c2c15eb5acb"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

4.054409515s ago: executing program 5 (id=6403):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000000)={@private=0xe1010203, @empty, 0x1}, 0xc) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendto(r1, &(0x7f0000000040)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) (async, rerun: 64)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffff5, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x6}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)

3.831287569s ago: executing program 3 (id=6404):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r0 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r0, &(0x7f00000004c0)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24)
r1 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r1, &(0x7f0000000500)={&(0x7f0000000540)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000010010000010000000100000000000000b800000000000000120100000600000059f795b90aa99690372ea89c2c8d64aec9cd4c0ed3141b14e13feeee508e67833e82142d8dbf96b6068434b25c4a90b0d1f43a619530825a7d065d92c4bd8a35a4d7d709bec4f2bf78770eeeb0341995f5a64debf9ae040c22da747adfd81ce968770764e929afd9f9443ff559894b4a3fa6ff43313c4e14019b6975b4950784c09b15184d5ca595d38efa278befa04e7989b132a0176d294762817c7172f43fba30b32be706d167a6e2be18cb36380000000018000000000000000100000000"], 0xe8}, 0x0)
recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
write$tun(r2, &(0x7f00000001c0)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) (async)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000200)={0x4, 0x6}, 0x4) (async)
socket$inet6(0xa, 0x80803, 0x87)
syz_emit_ethernet(0xa2, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60000000006c2b0020010000000000000000000000000002fe8000000000000000000000000000aa870000000000000000000200"], 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000001c0)='netpci0\x00', 0x10) (async)
sendto$inet(r6, 0x0, 0x0, 0x804, &(0x7f0000000680)={0x2, 0x4e22, @multicast1}, 0x10) (async)
ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0)
recvmmsg(r6, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x40004020, 0x0)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfd, {{0x2}, {@void, @val={0xc, 0x99, {0x9, 0x1000074}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20048814)
socket$nl_rdma(0x10, 0x3, 0x14) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$inet(0x2, 0x1, 0x0) (async)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2)
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r8, 0x200, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x31, 0xa5, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x8804)
setsockopt$inet_opts(r7, 0x0, 0x4, 0x0, 0x0) (async)
close(0x4)

3.709507568s ago: executing program 6 (id=6405):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x13, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9811, 0x0, 0x0, 0x0, 0xa37c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xc}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00'}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@struct={0xa, 0x1, 0x0, 0x4, 0x1, 0x2, [{0x6, 0x2, 0xfffffffc}]}]}, {0x0, [0x30, 0x30, 0x0, 0x0, 0x2e, 0x30, 0x30]}}, &(0x7f00000003c0)=""/222, 0x39, 0xde, 0x1, 0x1}, 0x28)

3.590333616s ago: executing program 5 (id=6406):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
ioctl$AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f0000000280))
writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9001c2f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f00000001c0)="0d1a000200000065581602720e1cd76e81e30f5da8b98541cce84453330b9ff2b966c2db25a6ed8d1867efd9804c7d3dbf8dfe53b78da18093cea1176bfbe9", 0x3f}], 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYRES64=r2], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r5, r4, 0x25, 0x0, @val=@tracing={0x0, 0x9ac}}, 0x20)
setsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000300)=0xfffffffd, 0x4)
syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[], 0x0)

3.58800698s ago: executing program 7 (id=6407):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1e, 0x0, 0x8, 0xff}, 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000940)={r2}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000440), &(0x7f0000000480)=0x4)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x2, 0x0, {0x4f}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8}, {0x6, 0x11, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x20000011)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket(0x10, 0x3, 0x0)
sendmsg(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000030000504010000000000000000000000480001804400018009000100676174650000000034000280180002000000000000000000000000000000000000000000100005800c000100000000000000000008000a0078563412", 0x5c}], 0x1}, 0x0)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r5)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f00000004c0)=0xd10, 0x4)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000580)=0x1, 0x4)
bind$inet(r8, &(0x7f0000000500)={0x2, 0x0, @local}, 0x10)
connect$inet(r8, &(0x7f0000000540)={0x2, 0x0, @multicast1}, 0x10)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r10, 0x0, 0x32, &(0x7f0000000980)=0xffffffbf, 0x4)
sendmmsg(r8, &(0x7f0000000580), 0x800001d, 0x0)
recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x45833af92e4b38ff, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r11=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010002000000000000002401000008000300", @ANYRES32=r11], 0x1c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES64=r5, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0)

3.409284446s ago: executing program 6 (id=6408):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x2c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@TCA_RATE={0x6, 0x5, {0x7, 0xd3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0x4, &(0x7f0000000280)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x6a}, [@ldst]}, 0x0}, 0x90)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r5, &(0x7f00000002c0)={0x27}, 0x74)
getsockname(r5, 0x0, &(0x7f0000000380))
write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00008915ffffffffffffbbbbbbbbbbbb810000020800"], 0x3a)
write$nci(0xffffffffffffffff, 0x0, 0x14)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0)

3.390829281s ago: executing program 1 (id=6409):
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000300)={{0xffffffffffffffff, &(0x7f00000001c0)='syzkaller\x00', 0x10000, &(0x7f0000000200)={@align, {0x0, 0x5, 0x1, 0x3}}, 0x1, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x1d}, {[0xfff, 0x3, 0x5, 0x2]}, 0x8, 0x8, &(0x7f00000002c0)=""/8})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1e, 0x5, &(0x7f0000000140)=@framed={{}, [@map_val={0x18, 0x340e47394361591a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x33d}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x11, &(0x7f0000000000), 0x4)

3.09414111s ago: executing program 7 (id=6410):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x5, 0x8}]}, 0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r1=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r2=>0x0, <r3=>0x0})
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000004c0)={0xc2df, 0x156a, 0x4, 0xffffffff, 0x8, 0xffffa778, 0x8, 0x5ca, <r4=>r1}, &(0x7f0000000500)=0x20)
close(r2) (async)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000640)={r4, 0x3685}, &(0x7f0000000680)=0x8) (async)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) (async)
getsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f00000005c0), 0xffffffffffffffff) (async)
write(r5, &(0x7f0000000180)="4a0000001100"/23, 0x17)
getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f00000002c0)=0x7ff, &(0x7f0000000300)=0x4)
setsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r0, 0x84, 0x81, &(0x7f0000000600)={r4, 0x2e}, 0x8) (async)
setsockopt$inet6_buf(r0, 0x29, 0x2e, &(0x7f0000000400)="1cfb8dbbfe85a79a78514e30fc8f19ac2263707a03a67679041f79e5b1a568b79c85e1e24aaf499703d1627fa52e9f69eed585d7b65b4cb91dece6058a7da14408df0bdc79019b0754d88a8dd132ce57f7571372388da9eeffc4d66530882c079b0aa0abb2d22a1aaf24173fa197b971229a1528d99b4ba3be132d5889a2a3f2bb96d457b2dd1a0f0e5b0adb5e8a95a22c18f25130cdb15f48621f97a8e5c303994301a7cfedeb7cdd68ec3e3c17c94450a91b6586ee290b80ada6d9c6", 0xbd)
bind$phonet(r3, &(0x7f0000000540)={0x23, 0x63, 0x6, 0x2}, 0x10) (async)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000580)={0x6, 'veth1_macvtap\x00', {0x5}, 0x7}) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9}]}, 0x10)

3.092002602s ago: executing program 3 (id=6411):
r0 = socket(0x10, 0x80002, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000100)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x2a, 0x6, 0x3f, 0x2, 0x13, @mcast1, @loopback, 0x1, 0x700, 0xfffeff8f, 0x200}})
r1 = socket$inet(0x2, 0x1, 0x100)
listen(r1, 0x9)
listen(r1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa, {0xe4ffffff}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', 0x0})

3.036572821s ago: executing program 1 (id=6412):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x101, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000100)}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

2.933366276s ago: executing program 5 (id=6413):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0xe9, &(0x7f0000000080), &(0x7f00000000c0)=""/233, 0x9, 0x0, 0xa6, 0xa9, &(0x7f0000000200)="15efb5abf89532098312ddb08f45560b24d790c012fd253f26d3623c486dab72c61c97a106a44ac315a865d53305c6cd715f47ff2fd794e202108c6333207f5d21ae4d829b9f5aab476d1c7ea25328b9724347cc9f09c88d00f58dd98f0e1b2e627064b110e969e0e4fc90a499c9718bcf3226720daf7c15319b33b809da5075681ccf2adfa5d66dd6f279bcae1b8c1f0fb90563fede20042a3148b6dd74c5f7fa645b052447", &(0x7f00000002c0)="db2c70cd4f033034dc96acd51cdf6df90b25cf3c09234a511378efda1b3a2413938bdf7db68a644e11f056e17e88ea03bffaf898994de1295e4511af95c4976470d5c585205b9ce6f9d762906f2f47a001136885e2d1f34d725be8826882fea7c6976a766c3b6142ea864d9261a47d37df95e1f43eae514670f7dc128735793742cae9b820e8436b59518331da2156a0937d89a43fda32b1c8a42e0b7c0657da1d41962212bf0a7263", 0x3, 0x0, 0xfff}, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async)
mmap(&(0x7f0000601000/0x3000)=nil, 0x3000, 0x2800007, 0x8032, 0xffffffffffffffff, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0xe9, &(0x7f0000000080), &(0x7f00000000c0)=""/233, 0x9, 0x0, 0xa6, 0xa9, &(0x7f0000000200)="15efb5abf89532098312ddb08f45560b24d790c012fd253f26d3623c486dab72c61c97a106a44ac315a865d53305c6cd715f47ff2fd794e202108c6333207f5d21ae4d829b9f5aab476d1c7ea25328b9724347cc9f09c88d00f58dd98f0e1b2e627064b110e969e0e4fc90a499c9718bcf3226720daf7c15319b33b809da5075681ccf2adfa5d66dd6f279bcae1b8c1f0fb90563fede20042a3148b6dd74c5f7fa645b052447", &(0x7f00000002c0)="db2c70cd4f033034dc96acd51cdf6df90b25cf3c09234a511378efda1b3a2413938bdf7db68a644e11f056e17e88ea03bffaf898994de1295e4511af95c4976470d5c585205b9ce6f9d762906f2f47a001136885e2d1f34d725be8826882fea7c6976a766c3b6142ea864d9261a47d37df95e1f43eae514670f7dc128735793742cae9b820e8436b59518331da2156a0937d89a43fda32b1c8a42e0b7c0657da1d41962212bf0a7263", 0x3, 0x0, 0xfff}, 0x50) (async)

2.562393072s ago: executing program 5 (id=6414):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x20) (async)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x0, 0x37, 0x0, 0x1}, 0x20)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x48) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002100010000000000000000000a0000000000000000000000050019"], 0x24}}, 0x0) (async)
r3 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r3, &(0x7f0000000100)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r4=>0xffffffffffffffff}) (async)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r3, 0x29, 0x44, &(0x7f0000000740)={'icmp\x00'}, &(0x7f0000000780)=0x1e) (async)
pipe(&(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff}) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r6, 0x0) (async)
r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
setsockopt$X25_QBITINCL(r7, 0x106, 0x1, &(0x7f00000002c0), 0x4) (async)
splice(r4, 0x0, r5, 0x0, 0x6, 0x0) (async)
write$cgroup_devices(r5, 0x0, 0x6) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r5, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xc, 0x4, 0x4, 0x7, 0x1372c, r2, 0x0, '\x00', 0x0, r0, 0x0, 0x1, 0x0, 0x0, @void, @value, @value=r5}, 0x50)
write(r8, &(0x7f0000000400)="3800000024002d0000000000000008acca6efea70b69bc426c0aeee54f1acf07a60be2d48ddfa889cb82baac0c0800a5a4bf3c5ad092e80a29d2cd823b275a6a9b91ab7855d562161e2b50ca551f266a91cd06ea8a91744563b673cb9bfd0988d32cb23796371c86acfc043e84b4a1c722720734d3efbac692047cdcd68e73bf35571a03ecfcf91e68dc26ef0425e7d318a26696eb1869eb8d985b5ca7ecee4af9cc6e176c9a80a2cf4e4ada98638035ea90e6685ecffa2170bf8447929b0ce9da8b12fb58f502053cf3ced00b5fe34eda184f773187887afda9bc3d8104f80099a91aa1e1355aeb2b3ea3ff09a731b0a8c5e90b4a45648652703dcb6d2ee440b69833fc26b89e3767fa1a4fd28c462f0310bf20e5e8bb401280a4bebb11f92453efbf65b167dc718ae7886c9e8cacfb8fc3e61f9b943041e50f49b7233bafab30a76ffe97251caf509c2458a0879fd0f02cf0cdb490e23b2c6f76259d9a9ce3010d50dec7c0c47a9a5029ee78a01be9c94af29c4008ec020937fdf3ce0252fac1c0f8ce6837c60000577bf53d4a5a861d9ef29ea1a2ac2c1a95267a907cbf49e9b5c26303a465b6e83c87dd48cfd3fb4ed030f5314c90b99aeb1942096960f55f4e0c45f6360abe034235fff257add1a56656610ebde39c98c05507ece7289555f9f1cec80fd76e027b8b3979c1f56eb8e0e35ec276ad9f2b19a06704012211f45c49cedde74961d0e855a8676625b121df4ed1e39c4ae40f1af4fda1201256009ad3ffac286db5e52935b3053ef600f9e2b93b60506d184f7db8e914212a960fd69244ed3af7cd94c1e1f654f07fa4e5a5b1b0bc1cf7603375da5891179202c7290d867bc520437ecb883d5c8ff084f2ad945c011aae09937354fd483047b592929ae19b54a3ec2ee12b3e8be1dc9f86bdecce0e6aa41090e5ef76a69c747ffb4f9f953afbb8985af6cfc9ea3fbeecf95e19a1f73a7515ce678c1ea9980ddfeaaefc9620d4f29a069d85c32c226c1ff34dc2b801f9864e7bb34bfa1314c74970247e9ab831fea2f540fff525f37bbb787c9a98c24fc6e80616af32f71745f79274c9d3e050270890ca7fdbe33b13b2a20753eee7c170", 0xfffffffffffffc3a) (async)
r9 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

1.776397982s ago: executing program 7 (id=6415):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e21, @multicast1}, {0x306, @multicast}, 0x0, {0x2, 0x4e23, @private=0xa010100}, 'netpci0\x00'})
setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0x8, 0x10, 0xffffffff}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@gettaction={0x94, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x89b}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x40011}, 0x800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000440)={0x0, 0x5f, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', <r4=>0x0})
setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000380)={@private=0xa010102, @broadcast, r4}, 0xc)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.587194936s ago: executing program 6 (id=6416):
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000840)=ANY=[@ANYBLOB="80000000080210fa000108021100000008021100000000000000000000000000640001000006020202020202010882848b960c121824075dad2521bd2129a45fd481d50bb029176c9af9bd848c1263c3a35de71d3d9a949aab9c64889aa093c69d46dac2981c8fcf8c9569126d737153ef7f5145e417772ebfc0ca30b054b6487f4730e8868f3e1032fa0c884fa5a5ec25ad5ae0a12da3bf97b0dca3394ca9b70d40df19acb663ce4e60435621b3ced35eb6b851b7fc9cd33522b0f7387656f0d4ba8d755cabdb4ba8fa5ce42a56091ddbc52110f69cbd0cd9f5d966"], 0x36)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="b80000001900010000000000fddbdf2500000000000000000000000000000000ff02000000000000000000000000000100000000000000000a000080"], 0xb8}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b8000000190001000000000010000000000000000000000000000000000000007f00000100000000000000000000000000000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a9000000000000000d0000000000000001000000000000000000000000f3fffffeffffffffffffff535b53a1a03600000000000000f0ffffff00000000000000000000000000000a000000000000fcffffffff7f4000000210"], 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="a0000000210001000400000000000000ac1414aa000000000000000000000000ff02000000000000000000000000000100000003000000000a0000002e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011"], 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
nanosleep(&(0x7f0000000280)={0x77359400}, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r4, 0x118, 0x1, &(0x7f0000000180)=0x4bc, 0x4)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000700)=<r8=>0x0)
sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054)
r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000980)={'wpan0\x00', <r10=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000a40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x30, r9, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x400c000)
write$nci(r5, &(0x7f0000000800)=ANY=[@ANYBLOB='qf\x00'], 0x13)
bind$nfc_llcp(r4, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x7, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x37}, 0x60)
getsockopt$inet_buf(r4, 0x118, 0x1, 0x0, &(0x7f0000000240)=0xf)
nanosleep(&(0x7f0000000000), &(0x7f0000000140))
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r3, 0x111, 0x1, 0xb, 0x4)
getsockopt$inet_buf(r4, 0x0, 0x2e, &(0x7f00000005c0)=""/83, &(0x7f0000000640)=0x53)

1.494289868s ago: executing program 3 (id=6417):
pipe(&(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000540)={0x0, 0x61, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x27, 0x9, 0x70bd25, 0x25dfdbfd, {0x8}}, 0x14}}, 0x4000080)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0xc801)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x0)
splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf)
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r5=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan1\x00', <r6=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', <r7=>0x0})
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00032dbd7000fcdbdf253f00000008000300", @ANYRES32=r10, @ANYBLOB="0c0099007f000000060000000c005e8008000300ff0300005c005e800800090010000000080009000700000010000100a5000000ff01000001000000080006007400000008000900ffff00000800030009000000080005002d0000000800050015000000080005003800000008000900ff070000"], 0x90}, 0x1, 0x0, 0x0, 0x4000040}, 0x5)
setsockopt$inet_int(r8, 0x0, 0x13, &(0x7f00000002c0), 0x4)
accept(r8, 0x0, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r11)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r13, 0x8933, &(0x7f0000000300)={'wpan0\x00', <r14=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEV(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r14, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040)
sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x40, r4, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x844}, 0x20000000)

1.489698369s ago: executing program 1 (id=6418):
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff}, 0x50)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x2}]}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x0, 0x9}, 0x20)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x4, 0x401, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18}, 0x50)

1.385936556s ago: executing program 7 (id=6419):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x7, r3, 0x200000000000000}, 0x38)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000014c0)={0x34, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x34}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xa, 0x4, 0xfff, 0x7}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000001080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r7=>r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x1f, 0xc, &(0x7f00000011c0)=ANY=[], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5a7}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000001240)={r8}, 0xc)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000e80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "7f000001"}]}]}}}, {0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
sendto$inet(r11, &(0x7f0000000fc0)="01020304", 0x4, 0x0, &(0x7f0000001000)={0x2, 0x1234, @local}, 0x10)
r12 = socket$inet_tcp(0x2, 0x1, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000001280)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0)
connect$inet(r12, &(0x7f0000001040)={0x2, 0x1234, @local}, 0x10)
sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000001480)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001440)={&(0x7f0000001300)={0x128, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_NAT_SRC={0xc4, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @local}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}]}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @loopback}]}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x96d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x80000001}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000901)
sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xe4e}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xac}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', <r13=>0x0, 0x4, 0x2, 0x10, 0x0, 0x30, @private0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x0, 0x1, 0x7}})
setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000380)={0x1, 0x0, 0xfa, r13, 0x8}, 0xc)
r14 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYBLOB="0c00018008000600", @ANYRES32, @ANYRESDEC=r7, @ANYRES32=r3], 0x318}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

1.025800269s ago: executing program 3 (id=6420):
syz_emit_ethernet(0x12, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c200000e8ba98766577d00044242bf806033b97855584c0507dd78"], 0x0)
r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000540), 0x8)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b00)=@security={'security\x00', 0xe, 0x4, 0x448, 0xffffffff, 0x248, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, &(0x7f00000005c0), {[{{@ip={@empty, @loopback, 0xff000000, 0xffffff00, 'wg0\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x2}}, @common=@ttl={{0x28}, {0x2, 0xbb}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @broadcast, 0xffff, 0x5, [0xa, 0x8, 0x1d, 0x8, 0x21, 0xe, 0x89d, 0x13, 0xb, 0x8, 0x38, 0x2a, 0x1c, 0x37, 0x2], 0x0, 0xa, 0x9}}}, {{@ip={@loopback, @rand_addr=0x64010102, 0xff, 0x0, 'caif0\x00', 'batadv0\x00', {0xff}, {}, 0x5c, 0x2, 0x61}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'veth0_to_batadv\x00', 'veth0_to_team\x00', 0xb, 0x0, 0x4a6b, 0x48, 0xfffffff1, 0x3, {0x4}, {0x8}}}, @common=@ttl={{0x28}, {0x3, 0x5}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x108, 0x168, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x7, 0x2, 0x0, 0x6, 0x7], 0x5, 0x3}}}, @common=@inet=@hashlimit1={{0x58}, {'pimreg\x00', {0x48, 0x4, 0x7, 0x9, 0x4, 0x0, 0x0, 0x40, 0x20}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x0, 0x4, 0x4, 0x4, 0x5, 0x1], 0x5, 0x2}, {0xffffffffffffffff, [0x8, 0x6, 0x4, 0x2, 0x4, 0x1], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000000006ffdffff002e000000000000"], 0x0, 0x1b, 0x0, 0x2}, 0x28)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r3=>0x0})
ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f0000000500)={0x8, 0xf4})
r4 = socket$inet(0x2, 0x2, 0x1)
getsockopt$MRT(r4, 0x0, 0xd0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xbc}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020752f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000640)={0x0, 0x79, "9d4625107f756ac4f28f3b65ca2a123101464bd790a231ee31b0947ecc67ef0450b8eae8011289a0e1d5fa7871e00c4d5a3d895136a9e6a492dec1d9f765880a197b833d2fc13ca5d64e42253f9ba8eb497a112c0efeffc1cd87e8e39ec2c9f2074d58d6e55a1a6474d713162991c1946946cd44281bc0f0f0"}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000800)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, 0x0, &(0x7f0000000840))
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r6, r3, 0x25, 0x0, @val=@tracing={0x0, 0x9ac}}, 0x20)
syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4, 0x2}, 0x10}, 0x94)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r7, 0x0, 0x92, 0x7a, &(0x7f0000000880)="40ed0489a06fb9f0a8fb45cca72e16c12bf4a83ca8046d177119b70baa501fcebf22644c65465efcc61cc0405b907d596a7c7a29c31254ab0951bb943947ce2ecf9a3ac073d989e7a64619e0977bf2f97ee41ff823629c42af9b27ef21173a41e3b5d3062d77bdcebe7400865d0e603a82c8ea938f849e762eda0e5220310d4f298a2f98dd528a1ba08aeb52410356410a23", &(0x7f0000000940)=""/122, 0xd0fe, 0x0, 0x0, 0x41, &(0x7f00000009c0), &(0x7f0000000a00)="ad64df869335f5772ef7f5af27c230b9e0d38fdc41bfd498e3f7b3a03158dde831c1eeea599bcd4e1d6813df1bf99c022096290da174dc855da5b77008a9b87ec4", 0x4, 0x0, 0x29f}, 0x50)
mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x3000)
bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1f, 0x6, 0xd7, 0x5, 0x180, r9, 0x2ead5a94, '\x00', r3, r1, 0x1, 0x5, 0x1}, 0x50)

659.898145ms ago: executing program 3 (id=6421):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$inet6_sctp(0xa, 0x3e4ed9e6868d019f, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180)={0x1, [<r2=>0x0]}, &(0x7f00000001c0)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f0000000200)={r2, 0x40, 0x8}, 0x8)
getsockopt$inet_sctp6_SCTP_REMOTE_UDP_ENCAPS_PORT(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e20, @multicast1}}, 0x4e23}, &(0x7f0000000380)=0x90)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c0000004e0001000000000000ffffffff020000080001"], 0x1c}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000240)=ANY=[], 0x0)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d5, 0xfffffffffffffffe)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = epoll_create(0x83fe)
socket$inet(0x2, 0x2, 0x43)
writev(r5, 0x0, 0x0)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000400)={0x1d, r8, 0x0, {0x0, 0xff}, 0xff}, 0x18)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000440)={'vxcan1\x00', <r9=>0x0})
bind$can_j1939(r6, &(0x7f0000000480)={0x1d, r9, 0x0, {0x1, 0xff, 0x6}, 0xfe}, 0x18)
setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f00000004c0)=0x1, 0x4)
sendmmsg(r6, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x44845)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000740)={'tunl0\x00', &(0x7f0000000780)={'syztnl0\x00', <r11=>0x0, 0x7800, 0x8000, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x7, 0x0, 0x40, 0x4, 0x0, @local, @loopback}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f3, &(0x7f00000007c0)={'syztnl0\x00', &(0x7f00000000c0)={'gre0\x00', r11, 0x7800, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x6, 0x14, 0x1, 0x0, 0x88, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @loopback}}}})
sendmsg$nl_route_sched(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newtfilter={0x24, 0x11, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0x7, 0x5}, {0x7, 0xffff}, {0x1, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050)

531.009546ms ago: executing program 1 (id=6422):
unshare(0x2c060000)
unshare(0x24020400)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000600))
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x17, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xe, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2004c011}, 0x4800)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r6)
socket$inet6(0xa, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}})
r7 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r8=>0x0})
sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3f}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000440)='\r', 0x1}], 0x1}, 0x4)
ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000480)={<r9=>0xffffffffffffffff})
sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@gettclass={0x24, 0x2a, 0x800, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x3, 0xe}, {0x8, 0xb}, {0x7, 0xffff}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x40800)
openat$cgroup_ro(r9, &(0x7f0000000640)='blkio.bfq.io_serviced\x00', 0x0, 0x0)
sendfile(r0, r0, 0x0, 0x4)

354.412203ms ago: executing program 7 (id=6423):
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xfffffffffffffffc})
socket(0x2b, 0x80801, 0x1)
r0 = socket$kcm(0x10, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009112c9000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)
sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1b0000001a007f029e", 0x9}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4042084)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x4, 0x9, 0x48, 0x8, 0x81})
close(0x4)

183.257125ms ago: executing program 7 (id=6424):
r0 = socket$pppoe(0x18, 0x1, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001100)={0x0}}, 0xc004) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001180)={'wlan0\x00', <r5=>0x0})
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async)
sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)={0x3c, r3, 0x801, 0xfffffffc, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "f041a5fc07"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}}, 0x4)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, 0x0, 0x20008004)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x7, @broadcast, 'macvlan1\x00'}}, 0x1e) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffe0, 0xb}, {0xffff, 0xffff}, {0x3, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20) (async)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000440)={{r0, &(0x7f0000000300)='\xff\xff\xff\xff\xff\xff', 0x402000, &(0x7f0000000340)={@align=0xfff, {0xed1d, 0x7, 0x4, 0xffff}}, 0x9, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x8001}, {[0x7fffffff, 0x8001, 0xf0, 0x5]}, 0x8, 0x30, &(0x7f0000000400)=""/48}) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000500)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0], 0x0, 0x16, &(0x7f00000005c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0xd7, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0xa}}], {0x14}}, 0x98}}, 0x0) (async)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r9) (async, rerun: 32)
ioctl$SIOCSIFHWADDR(r9, 0x8b34, &(0x7f0000000880)={'virt_wifi0\x00', @random="000500000020"}) (async, rerun: 32)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000008c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x3175}, 0xc) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@newtfilter={0x48, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x1c, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'lo\x00'}, @TCA_FW_ACT={0x4}]}}]}, 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001080)=@newtfilter={0x30, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x5}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) (async, rerun: 64)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) (rerun: 64)

0s ago: executing program 6 (id=6425):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8b}, [@ldst={0x7}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000340), 0x8, 0x10, &(0x7f0000000380), 0x10}, 0x3c)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000012c0)={'macsec0\x00', 0x400})
close(r0)

kernel console output (not intermixed with test programs):

ytes leftover after parsing attributes in process `syz.4.5219'.
[  675.186507][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  675.441780][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.442221][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.630709][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  675.988004][T19384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  676.089776][T26606] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5224'.
[  676.109664][T26606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5224'.
[  676.263763][T26621] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5227'.
[  676.532013][T26613] team0 (unregistering): Port device dummy0 removed
[  677.596694][T26659] dvmrp1: left allmulticast mode
[  677.596809][T26659] dvmrp8: left allmulticast mode
[  678.519544][T26702] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5252'.
[  678.521183][T26699] bond11: option primary: mode dependency failed, not supported in mode balance-xor(2)
[  678.580139][T26699] bond11 (unregistering): Released all slaves
[  678.627299][ T2020] block nbd3: Possible stuck request ffff8880289d5080: control (read@0,4096B). Runtime 120 seconds
[  678.668954][T26716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5255'.
[  678.882661][T26718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5256'.
[  678.983986][T26722] bridge5: the hash_elasticity option has been deprecated and is always 16
[  679.153040][T26728] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5259'.
[  679.153283][T26728] net_ratelimit: 10 callbacks suppressed
[  679.153295][T26728] openvswitch: netlink: Missing key (keys=40, expected=100)
[  679.234905][T26731] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  679.251171][T26730] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  679.306283][T26734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5261'.
[  679.346428][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  679.414631][T26743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5263'.
[  679.596780][T26748] bond0: (slave ip6tnl0): refused to change device type
[  679.729819][T26754] validate_nla: 58 callbacks suppressed
[  679.729839][T26754] netlink: 'syz.3.5267': attribute type 1 has an invalid length.
[  679.740538][T26758] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5267'.
[  679.829904][T26759] 8021q: adding VLAN 0 to HW filter on device bond12
[  679.858252][T26759] ieee802154 phy1 wpan1: encryption failed: -22
[  680.130145][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.259493][T26779] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5274'.
[  680.352699][T26782] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499
[  680.386575][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  680.485328][T26791] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5278'.
[  680.584293][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.584820][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  680.630067][T26791] bond6: entered promiscuous mode
[  680.630091][T26791] bond6: entered allmulticast mode
[  680.727374][T26791] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5278'.
[  680.759744][T26802] netlink: 'syz.1.5281': attribute type 4 has an invalid length.
[  680.759766][T26802] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5281'.
[  680.763412][T26802] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[  680.827213][T26802] siw: device registration error -23
[  681.008004][T26803] syzkaller0: entered promiscuous mode
[  681.008026][T26803] syzkaller0: entered allmulticast mode
[  682.380911][T26871] syzkaller0: entered promiscuous mode
[  682.380934][T26871] syzkaller0: entered allmulticast mode
[  683.019887][T26891] bridge6: entered promiscuous mode
[  683.020074][T26891] bridge6: entered allmulticast mode
[  683.054446][T26891] netlink: 'syz.0.5300': attribute type 1 has an invalid length.
[  683.808411][T26928] netlink: 'syz.2.5309': attribute type 1 has an invalid length.
[  683.858439][T26928] bond12: (slave geneve4): making interface the new active one
[  683.859486][T26928] bond12: (slave geneve4): Enslaving as an active interface with an up link
[  683.875651][   T51] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[  683.875698][   T51] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[  683.875733][   T51] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[  684.125378][T26938] __nla_validate_parse: 6 callbacks suppressed
[  684.125399][T26938] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5312'.
[  684.306804][    C1] net_ratelimit: 15 callbacks suppressed
[  684.306825][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.307006][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.307181][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.307365][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.307543][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.307713][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.307888][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.308076][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.404473][T19309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  684.460486][T26950] netlink: 'syz.2.5316': attribute type 5 has an invalid length.
[  684.546488][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  684.650287][T26956] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5316'.
[  684.804135][T26979] netlink: 'syz.3.5322': attribute type 1 has an invalid length.
[  684.804155][T26979] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5322'.
[  684.804169][T26979] NCSI netlink: No device for ifindex 0
[  684.995522][T26984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5325'.
[  685.014542][T26987] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5325'.
[  685.506389][T26997] netlink: 'syz.2.5327': attribute type 1 has an invalid length.
[  685.600895][T26996] sctp: [Deprecated]: syz.2.5327 (pid 26996) Use of int in max_burst socket option deprecated.
[  685.600895][T26996] Use struct sctp_assoc_value instead
[  685.682380][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  686.208575][T27023] 8021q: VLANs not supported on lo
[  686.224705][T27028] netlink: 'syz.2.5335': attribute type 11 has an invalid length.
[  686.225250][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.251548][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.347412][T27033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5337'.
[  686.379971][T27033] bond13: option primary: mode dependency failed, not supported in mode balance-xor(2)
[  686.386293][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.416969][T27033] bond13 (unregistering): Released all slaves
[  686.489157][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.493404][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.546979][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.548572][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.556051][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.608551][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.633441][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.657524][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.664070][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.689853][T27037] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5339'.
[  686.689970][T27037] 0·: renamed from hsr0
[  686.726991][T27037] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  686.727073][T27037] 0·: entered allmulticast mode
[  686.727087][T27037] hsr_slave_0: entered allmulticast mode
[  686.727102][T27037] hsr_slave_1: entered allmulticast mode
[  686.764075][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.783235][T27038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5338'.
[  686.784352][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.812486][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.833229][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.849223][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.871215][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.889034][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.904492][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.922146][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.949830][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  686.975097][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.000854][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.006764][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.034714][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.056645][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.077911][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.099555][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.105657][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.139141][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.169774][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.190633][T27026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  687.252133][T27044] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5341'.
[  687.288176][T27045] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5341'.
[  687.761579][T27076] xt_CT: You must specify a L4 protocol and not use inversions on it
[  687.985333][T27083] netlink: 'syz.2.5351': attribute type 24 has an invalid length.
[  688.665631][T27113] netlink: 'syz.0.5360': attribute type 1 has an invalid length.
[  689.269787][T27129] x_tables: ip_tables: osf match: only valid for protocol 6
[  689.275763][T27129] __nla_validate_parse: 3 callbacks suppressed
[  689.275780][T27129] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5366'.
[  689.275793][T27129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5366'.
[  689.454537][T27141] netlink: 'syz.2.5368': attribute type 61 has an invalid length.
[  689.474909][T27141] xt_l2tp: wrong L2TP version: 1
[  689.746450][    C1] net_ratelimit: 17 callbacks suppressed
[  689.746476][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  689.767588][T27150] openvswitch: netlink: Flow actions attr not present in new flow.
[  689.843530][T27153] x_tables: duplicate underflow at hook 1
[  689.925124][T27161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  690.001887][T27166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5374'.
[  690.090730][T27166] bond13: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[  690.109337][T27166] bond13 (unregistering): Released all slaves
[  690.148306][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.270526][T27174] Bluetooth: hci0: unsupported parameter 5135
[  690.270550][T27174] Bluetooth: hci0: unsupported parameter 8192
[  690.270563][T27174] Bluetooth: hci0: unsupported parameter 5135
[  690.270575][T27174] Bluetooth: hci0: unsupported parameter 8192
[  690.280588][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  690.787361][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  691.197400][T19384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.215461][T27213] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  691.291250][T27213] netlink: 'syz.3.5385': attribute type 1 has an invalid length.
[  691.380694][T27213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5385'.
[  691.401518][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  691.412729][T27195] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5382'.
[  691.412999][T27218] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5382'.
[  691.681869][T27228] netlink: 'syz.3.5388': attribute type 24 has an invalid length.
[  691.826422][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  692.055191][T27242] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5392'.
[  692.068806][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  692.424921][T27251] netlink: 'syz.3.5397': attribute type 1 has an invalid length.
[  692.574709][T27257] netlink: 'syz.0.5400': attribute type 1 has an invalid length.
[  692.601575][T27257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5400'.
[  692.655770][T27261] netlink: 'syz.2.5402': attribute type 1 has an invalid length.
[  693.063085][T27276] netlink: 4816 bytes leftover after parsing attributes in process `syz.1.5406'.
[  693.063108][T27276] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5406'.
[  693.343241][T27287] netlink: 'syz.2.5411': attribute type 3 has an invalid length.
[  693.374873][T27287] batman_adv: batadv0: Adding interface: syzkaller0
[  693.374891][T27287] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  693.375141][T27287] batman_adv: batadv0: Interface activated: syzkaller0
[  693.467296][T27285] batman_adv: batadv0: Interface deactivated: syzkaller0
[  693.538321][T27285] batman_adv: batadv0: Removing interface: syzkaller0
[  693.671646][T27296] tipc: Failed to remove unknown binding: 66,1,1/0:338717889/338717890
[  693.790429][T27297] wg0 speed is unknown, defaulting to 1000
[  694.359305][T27319] __nla_validate_parse: 3 callbacks suppressed
[  694.359326][T27319] netlink: 144 bytes leftover after parsing attributes in process `syz.3.5420'.
[  694.360474][T27319] syzkaller1: entered promiscuous mode
[  694.360493][T27319] syzkaller1: entered allmulticast mode
[  694.545376][T27295] tipc: Failed to remove unknown binding: 66,1,1/0:338717889/338717890
[  694.545403][T27295] tipc: Failed to remove unknown binding: 66,1,1/0:338717889/338717890
[  694.656069][T27297] lo speed is unknown, defaulting to 1000
[  694.947693][    C1] net_ratelimit: 9 callbacks suppressed
[  694.947714][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  695.268277][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.381955][T27337] bridge0: port 3(batadv1) entered blocking state
[  695.384003][T27337] bridge0: port 3(batadv1) entered disabled state
[  695.384152][T27337] batadv1: entered allmulticast mode
[  695.393115][T27337] batadv1: entered promiscuous mode
[  695.744307][T27345] netlink: 'syz.3.5428': attribute type 21 has an invalid length.
[  695.744330][T27345] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5428'.
[  695.744399][T27345] netlink: 'syz.3.5428': attribute type 4 has an invalid length.
[  695.744413][T27345] netlink: 'syz.3.5428': attribute type 5 has an invalid length.
[  695.744425][T27345] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5428'.
[  695.764446][T27345] netlink: 'syz.3.5428': attribute type 21 has an invalid length.
[  695.764467][T27345] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5428'.
[  695.797871][T27345] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5428'.
[  695.809924][T27348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5429'.
[  695.856647][T19312] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  695.856666][T19312] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  695.893857][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  695.934546][T27348] bond13: entered promiscuous mode
[  695.934571][T27348] bond13: entered allmulticast mode
[  695.949842][T27354] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4
[  695.963192][T27357] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4
[  695.986662][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  696.412199][T27373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5435'.
[  696.504751][T27375] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5435'.
[  696.597814][T27371] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5434'.
[  696.661263][T27372] validate_nla: 2 callbacks suppressed
[  696.661281][T27372] netlink: 'syz.1.5434': attribute type 1 has an invalid length.
[  696.661294][T27372] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5434'.
[  697.011159][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.026418][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  697.109200][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  697.256673][T27402] ip_tables: iptables: counters copy to user failed while replacing table
[  697.329616][T22656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  697.334139][T22656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  697.340442][T22656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  697.359196][T22656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  697.360203][T22656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  697.464216][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  697.474030][ T5622] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  697.475930][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  697.493895][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  697.504370][ T5622] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  697.741333][T27412] bond13: entered promiscuous mode
[  697.741357][T27412] bond13: entered allmulticast mode
[  698.026269][T27430] netlink: 'syz.2.5446': attribute type 3 has an invalid length.
[  698.026920][T27430] netlink: 'syz.2.5446': attribute type 3 has an invalid length.
[  698.094623][T27431] Bluetooth: MGMT ver 1.23
[  698.194150][T27432] netdevsim netdevsim3: Direct firmware load for . failed with error -2
[  698.194177][T27432] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  698.571282][T27406] wg0 speed is unknown, defaulting to 1000
[  698.963797][T27406] lo speed is unknown, defaulting to 1000
[  699.499761][T27475] __nla_validate_parse: 39 callbacks suppressed
[  699.499783][T27475] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5457'.
[  699.501351][T27477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5458'.
[  699.501370][T27477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5458'.
[  699.588387][ T5622] Bluetooth: hci4: command tx timeout
[  700.003492][T27406] bridge0: port 1(bridge_slave_0) entered blocking state
[  700.004182][T27406] bridge0: port 1(bridge_slave_0) entered disabled state
[  700.004655][T27406] bridge_slave_0: entered allmulticast mode
[  700.008002][T27406] bridge_slave_0: entered promiscuous mode
[  700.013603][T27406] bridge0: port 2(bridge_slave_1) entered blocking state
[  700.015349][T27406] bridge0: port 2(bridge_slave_1) entered disabled state
[  700.015468][T27406] bridge_slave_1: entered allmulticast mode
[  700.019868][T27406] bridge_slave_1: entered promiscuous mode
[  700.118529][T27406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  700.130644][T27406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  700.146416][    C1] net_ratelimit: 8 callbacks suppressed
[  700.146451][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  700.214043][T27406] team0: Port device team_slave_0 added
[  700.224712][T27406] team0: Port device team_slave_1 added
[  700.308619][T19384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.334443][T27406] batman_adv: batadv0: Adding interface: batadv_slave_0
[  700.334461][T27406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  700.334484][T27406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  700.338316][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  700.343119][T27406] batman_adv: batadv0: Adding interface: batadv_slave_1
[  700.343133][T27406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  700.343155][T27406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  700.435475][T27504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5464'.
[  700.435532][T27504] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5464'.
[  700.495549][T27406] hsr_slave_0: entered promiscuous mode
[  700.499756][T27406] hsr_slave_1: entered promiscuous mode
[  700.501451][T27406] debugfs: 'hsr0' already exists in 'hsr'
[  700.501571][T27406] Cannot create hsr debugfs directory
[  701.045033][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.186424][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  701.221805][T27508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5465'.
[  701.224207][T27508] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5465'.
[  701.479186][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.587595][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  701.668633][ T5622] Bluetooth: hci4: command tx timeout
[  701.728165][T27406] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  701.743560][T27406] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  701.745987][T27406] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  701.760969][T27406] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  701.763835][T27406] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  701.774152][T27406] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  701.777198][T27406] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  701.785826][T27406] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  701.921297][T27538] openvswitch: netlink: IPv6 tunnel dst address is zero
[  702.015663][T27539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  702.026730][T27543] openvswitch: netlink: IPv6 tunnel dst address is zero
[  702.045906][T27406] 8021q: adding VLAN 0 to HW filter on device bond0
[  702.105214][T27406] 8021q: adding VLAN 0 to HW filter on device team0
[  702.113522][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  702.113635][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  702.122730][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  702.122841][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  702.226573][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  703.012341][T27406] 8021q: adding VLAN 0 to HW filter on device batadv0
[  703.382019][T27406] veth0_vlan: entered promiscuous mode
[  703.392836][T27406] veth1_vlan: entered promiscuous mode
[  703.429414][T27406] veth0_macvtap: entered promiscuous mode
[  703.434841][T27406] veth1_macvtap: entered promiscuous mode
[  703.453605][T27406] batman_adv: batadv0: Interface activated: batadv_slave_0
[  703.468856][T27406] batman_adv: batadv0: Interface activated: batadv_slave_1
[  703.511131][ T1101] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  703.513353][ T1101] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  703.514217][ T1101] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  703.538042][ T1101] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  703.748268][ T5622] Bluetooth: hci4: command tx timeout
[  705.346431][    C1] net_ratelimit: 9 callbacks suppressed
[  705.346454][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  705.392188][T27555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  705.639133][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  705.639155][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  705.756998][T27591] netlink: 'syz.3.5479': attribute type 5 has an invalid length.
[  705.798716][T19319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  705.798735][T19319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  705.829068][ T5622] Bluetooth: hci4: command tx timeout
[  705.918646][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.229877][T27616] openvswitch: netlink: Missing key (keys=c0, expected=40280)
[  706.361558][T27623] openvswitch: netlink: Message has 8 unknown bytes.
[  706.364134][T27625] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5484'.
[  706.386428][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  706.391824][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  706.564838][T27628] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  706.722542][T27636] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5488'.
[  706.995428][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.019502][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  707.145997][T27662] netlink: 'syz.5.5496': attribute type 32 has an invalid length.
[  707.426588][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  707.554414][T27672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5500'.
[  707.615932][T27672] hsr_slave_1 (unregistering): left promiscuous mode
[  708.145311][T27679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5502'.
[  708.177336][T27679] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5502'.
[  708.532895][T10437] tipc: Subscription rejected, illegal request
[  708.709970][ T2020] block nbd3: Possible stuck request ffff8880289d5080: control (read@0,4096B). Runtime 150 seconds
[  708.822787][T27699] af_packet: tpacket_rcv: packet too big, clamped from 60 to 4294967272. macoff=96
[  708.890883][T22656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  708.897781][T22656] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  708.914068][T22656] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  708.925370][T22656] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  708.926325][T22656] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  709.114203][T27715] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5509'.
[  709.405549][T27700] wg0 speed is unknown, defaulting to 1000
[  709.564429][T27726] xt_socket: unknown flags 0xc
[  709.686116][T27730] netlink: 'syz.3.5513': attribute type 1 has an invalid length.
[  709.809057][T27736] netlink: 'syz.5.5515': attribute type 12 has an invalid length.
[  709.809080][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5515'.
[  709.844646][T27730] bond8: entered promiscuous mode
[  709.845189][T27730] 8021q: adding VLAN 0 to HW filter on device bond8
[  709.866536][T27732] ipvlan2: entered allmulticast mode
[  709.866554][T27732] bond8: entered allmulticast mode
[  709.866726][T27732] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  709.866742][T27732] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  709.866755][T27732] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  709.868251][T27732] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  709.984586][T27736] netlink: 'syz.5.5515': attribute type 12 has an invalid length.
[  709.984608][T27736] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5515'.
[  710.013548][T27700] lo speed is unknown, defaulting to 1000
[  710.070874][T19319] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  710.086761][T19319] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  710.106711][T19319] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  710.106761][T19319] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  710.356622][T27752] netlink: 'syz.5.5518': attribute type 1 has an invalid length.
[  710.358166][   T51] net_ratelimit: 9 callbacks suppressed
[  710.358181][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  710.439898][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5520'.
[  710.440633][T27757] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5518'.
[  710.531732][T27760] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  710.547440][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  710.630235][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.030022][ T5622] Bluetooth: hci6: command tx timeout
[  711.052216][T27700] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.052385][T27700] bridge0: port 1(bridge_slave_0) entered disabled state
[  711.052602][T27700] bridge_slave_0: entered allmulticast mode
[  711.054438][T27700] bridge_slave_0: entered promiscuous mode
[  711.088038][T27700] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.088177][T27700] bridge0: port 2(bridge_slave_1) entered disabled state
[  711.088301][T27700] bridge_slave_1: entered allmulticast mode
[  711.090003][T27700] bridge_slave_1: entered promiscuous mode
[  711.220798][T27700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  711.224271][T27700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  711.283316][T27700] team0: Port device team_slave_0 added
[  711.293386][T27700] team0: Port device team_slave_1 added
[  711.330761][T27700] batman_adv: batadv0: Adding interface: batadv_slave_0
[  711.330779][T27700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  711.330801][T27700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  711.332802][T27700] batman_adv: batadv0: Adding interface: batadv_slave_1
[  711.332816][T27700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  711.332838][T27700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  711.539662][T27787] netlink: 'syz.5.5527': attribute type 1 has an invalid length.
[  711.586454][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  711.593540][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  711.856236][T27700] hsr_slave_0: entered promiscuous mode
[  711.945809][T27700] hsr_slave_1: entered promiscuous mode
[  711.948606][T27700] debugfs: 'hsr0' already exists in 'hsr'
[  711.948625][T27700] Cannot create hsr debugfs directory
[  712.240738][T27798] sctp: [Deprecated]: syz.3.5529 (pid 27798) Use of int in max_burst socket option.
[  712.240738][T27798] Use struct sctp_assoc_value instead
[  712.394658][T27700] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  712.409372][T27700] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  712.410629][T27700] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  712.433480][T27700] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  712.434341][T27700] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  712.456787][T27700] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  712.457926][T27700] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  712.461444][T27700] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  712.474886][ T5724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.555024][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.626439][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  712.660807][T27700] 8021q: adding VLAN 0 to HW filter on device bond0
[  712.723931][T27700] 8021q: adding VLAN 0 to HW filter on device team0
[  712.747520][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  712.750004][T19319] bridge0: port 1(bridge_slave_0) entered blocking state
[  712.750130][T19319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  712.803240][T19319] bridge0: port 2(bridge_slave_1) entered blocking state
[  712.803341][T19319] bridge0: port 2(bridge_slave_1) entered forwarding state
[  712.835781][T27813] __nla_validate_parse: 2 callbacks suppressed
[  712.835800][T27813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5531'.
[  713.110068][ T5622] Bluetooth: hci6: command tx timeout
[  713.217056][T27828] netlink: 'syz.1.5537': attribute type 15 has an invalid length.
[  713.929081][   T30] audit: type=1800 audit(1791603283.911:11): pid=27861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5544" name="memory.events" dev="tmpfs" ino=2403 res=0 errno=0
[  713.973075][   T30] audit: type=1804 audit(1791603283.951:12): pid=27861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5544" name="/newroot/469/memory.events" dev="tmpfs" ino=2403 res=1 errno=0
[  714.220927][T27876] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5547'.
[  714.380147][T27888] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5547'.
[  714.453105][T27891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5550'.
[  714.643894][T27899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5550'.
[  714.760520][T27700] 8021q: adding VLAN 0 to HW filter on device batadv0
[  715.189183][ T5622] Bluetooth: hci6: command tx timeout
[  715.388380][T22656] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  715.390701][T22656] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  715.392576][T22656] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  715.403920][T22656] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  715.412560][T22656] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  715.509614][ T2252] net_ratelimit: 107 callbacks suppressed
[  715.509632][ T2252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  715.746620][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  715.804365][T27700] veth0_vlan: entered promiscuous mode
[  715.857881][T27700] veth1_vlan: entered promiscuous mode
[  715.906658][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.010789][T27700] veth0_macvtap: entered promiscuous mode
[  716.039107][T27700] veth1_macvtap: entered promiscuous mode
[  716.118261][T27700] batman_adv: batadv0: Interface activated: batadv_slave_0
[  716.121344][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.165031][T27700] batman_adv: batadv0: Interface activated: batadv_slave_1
[  716.410218][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.595807][ T1101] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  716.607484][T11440] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  716.607647][T11440] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  716.607718][T11440] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  716.680787][T27918] wg0 speed is unknown, defaulting to 1000
[  716.786447][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  716.946672][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.946877][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.947043][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  716.947202][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  717.122720][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.122743][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.138258][T27954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5561'.
[  717.212470][T27954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5561'.
[  717.212523][T27954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5561'.
[  717.268699][ T5622] Bluetooth: hci6: command tx timeout
[  717.325696][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  717.325717][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  717.379580][T27918] lo speed is unknown, defaulting to 1000
[  717.507709][ T5622] Bluetooth: hci7: command tx timeout
[  718.375708][T27993] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5570'.
[  718.934812][T27918] bridge0: port 1(bridge_slave_0) entered blocking state
[  718.934916][T27918] bridge0: port 1(bridge_slave_0) entered disabled state
[  718.935601][T28019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5576'.
[  718.973016][T27918] bridge_slave_0: entered allmulticast mode
[  718.993868][T27918] bridge_slave_0: entered promiscuous mode
[  719.044410][T28010] bond0: (slave team0): Releasing backup interface
[  719.095813][T28010] bridge_slave_0: left allmulticast mode
[  719.095840][T28010] bridge_slave_0: left promiscuous mode
[  719.096028][T28010] bridge0: port 1(bridge_slave_0) entered disabled state
[  719.134930][T28010] bridge_slave_1: left allmulticast mode
[  719.134955][T28010] bridge_slave_1: left promiscuous mode
[  719.135197][T28010] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.178705][T28010] bond0: (slave bond_slave_0): Releasing backup interface
[  719.243895][T28010] bond0: (slave bond_slave_1): Releasing backup interface
[  719.304676][T28010] team0: Port device team_slave_0 removed
[  719.321917][T28010] team0: Port device team_slave_1 removed
[  719.322664][T28010] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  719.322684][T28010] batman_adv: batadv0: Removing interface: batadv_slave_0
[  719.393896][T27918] bridge0: port 2(bridge_slave_1) entered blocking state
[  719.394005][T27918] bridge0: port 2(bridge_slave_1) entered disabled state
[  719.394162][T27918] bridge_slave_1: entered allmulticast mode
[  719.396039][T28030] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5578'.
[  719.396175][T27918] bridge_slave_1: entered promiscuous mode
[  719.583159][T27918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  719.597357][ T5622] Bluetooth: hci7: command tx timeout
[  719.694796][T27918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  719.850269][T27918] team0: Port device team_slave_0 added
[  719.866948][T27918] team0: Port device team_slave_1 added
[  720.088664][T28045] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  720.303486][T28048] pim6reg: entered allmulticast mode
[  720.388103][T28049] pim6reg: left allmulticast mode
[  720.522943][T27918] batman_adv: batadv0: Adding interface: batadv_slave_0
[  720.522962][T27918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  720.522986][T27918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  720.584930][T27918] batman_adv: batadv0: Adding interface: batadv_slave_1
[  720.584948][T27918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  720.584972][T27918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  720.683852][T28057] netlink: 'syz.5.5586': attribute type 1 has an invalid length.
[  720.742391][T10437] net_ratelimit: 16 callbacks suppressed
[  720.742411][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  720.781833][T27918] hsr_slave_0: entered promiscuous mode
[  720.782901][T27918] hsr_slave_1: entered promiscuous mode
[  720.783689][T27918] debugfs: 'hsr0' already exists in 'hsr'
[  720.783708][T27918] Cannot create hsr debugfs directory
[  720.946507][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  721.288378][T28071] netlink: 'syz.1.5591': attribute type 2 has an invalid length.
[  721.587311][ T2252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.667293][T22656] Bluetooth: hci7: command tx timeout
[  721.717641][T27918] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  721.742696][T27918] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  721.744802][T27918] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  721.770978][T27918] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  721.771781][T27918] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  721.796252][T27918] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  721.822835][T27918] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  721.838018][T27918] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  721.858357][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  721.967650][T28102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5594'.
[  721.986424][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  722.162338][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  722.353717][T28112] xt_TCPMSS: Only works on TCP SYN packets
[  722.412332][T27918] 8021q: adding VLAN 0 to HW filter on device bond0
[  722.472938][T28114] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  722.568859][T27918] 8021q: adding VLAN 0 to HW filter on device team0
[  722.832814][T19319] bridge0: port 1(bridge_slave_0) entered blocking state
[  722.832918][T19319] bridge0: port 1(bridge_slave_0) entered forwarding state
[  722.921894][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  722.923762][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  722.992831][ T7120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.026504][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  723.429776][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  723.747197][T22656] Bluetooth: hci7: command tx timeout
[  724.064267][T28179] netlink: 80 bytes leftover after parsing attributes in process `syz.5.5611'.
[  724.258902][T28185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5613'.
[  724.353033][T28185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5613'.
[  724.353058][T28185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5613'.
[  724.353090][T28185] netlink: 'syz.1.5613': attribute type 4 has an invalid length.
[  724.542293][T28194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5616'.
[  724.704809][T27918] 8021q: adding VLAN 0 to HW filter on device batadv0
[  724.813086][T28206] netlink: 'syz.3.5617': attribute type 9 has an invalid length.
[  724.813106][T28206] netlink: 'syz.3.5617': attribute type 4 has an invalid length.
[  724.835175][T28208] netlink: 'syz.3.5617': attribute type 9 has an invalid length.
[  724.835193][T28208] netlink: 'syz.3.5617': attribute type 4 has an invalid length.
[  725.751850][T28228] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5621'.
[  725.864018][T28232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5621'.
[  726.146524][    C1] net_ratelimit: 8 callbacks suppressed
[  726.146545][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  726.291817][T28249] netlink: 'syz.1.5626': attribute type 1 has an invalid length.
[  726.318169][T28240] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5623'.
[  726.318196][T28240] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5623'.
[  726.338804][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  726.435930][T28255] Cannot find add_set index 65532 as target
[  726.526915][T28257] netlink: 'syz.6.5628': attribute type 21 has an invalid length.
[  726.638488][T28253] bond14: (slave gretap2): making interface the new active one
[  726.661222][T28253] bond14: (slave gretap2): Enslaving as an active interface with an up link
[  726.684137][T28257] netlink: 'syz.6.5628': attribute type 6 has an invalid length.
[  726.684157][T28257] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5628'.
[  726.994407][T27918] veth0_vlan: entered promiscuous mode
[  727.104196][T27918] veth1_vlan: entered promiscuous mode
[  727.186562][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  727.292397][T28275] bridge0: port 1(bridge_slave_0) entered disabled state
[  727.304363][T28275] bridge0: port 2(bridge_slave_1) entered disabled state
[  727.448801][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.544295][T28280] syzkaller1: entered promiscuous mode
[  727.544318][T28280] syzkaller1: entered allmulticast mode
[  727.668140][T19385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.687604][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.688978][T19384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.769478][T19384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  727.770165][T28298] xt_l2tp: invalid flags combination: 0
[  727.921105][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  728.007738][T27918] veth0_macvtap: entered promiscuous mode
[  728.035456][T27918] veth1_macvtap: entered promiscuous mode
[  728.078669][T27918] batman_adv: batadv0: Interface activated: batadv_slave_0
[  728.226434][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  728.342078][T27918] batman_adv: batadv0: Interface activated: batadv_slave_1
[  728.400065][ T1101] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  728.404244][ T1101] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  728.527964][T19312] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  728.528011][T19312] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  728.744412][T28318] netlink: 'syz.1.5644': attribute type 1 has an invalid length.
[  728.852838][T28318] bond15: entered promiscuous mode
[  728.854872][T28318] 8021q: adding VLAN 0 to HW filter on device bond15
[  728.894112][T28315] netlink: 'syz.3.5643': attribute type 1 has an invalid length.
[  729.145483][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.145529][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  729.239401][T28332] __nla_validate_parse: 6 callbacks suppressed
[  729.239421][T28332] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5645'.
[  729.544728][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  729.544752][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  730.099164][T28360] IPVS: Scheduler module ip_vs_sip not found
[  730.272157][T28373] IPVS: Scheduler module ip_vs_sip not found
[  730.295744][T28384] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5659'.
[  730.498433][T28387] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5660'.
[  730.960972][T28407] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[  730.960999][T28407] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[  731.069777][T28414] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  731.070120][T28413] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  731.174585][T28425] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5670'.
[  731.324107][T28430] xt_IDLETIMER: timeout value is zero
[  731.346444][    C1] net_ratelimit: 9 callbacks suppressed
[  731.346464][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  731.348373][T28413] tipc: Resetting bearer <eth:syzkaller0>
[  731.537927][T28437] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  731.538215][T28436] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  731.540216][T28436] sctp: [Deprecated]: syz.5.5675 (pid 28436) Use of struct sctp_assoc_value in delayed_ack socket option.
[  731.540216][T28436] Use struct sctp_sack_info instead
[  731.982721][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  732.285375][T28466] netlink: 872 bytes leftover after parsing attributes in process `syz.6.5682'.
[  732.386808][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  732.695102][T28475] netlink: 'syz.6.5685': attribute type 8 has an invalid length.
[  732.695125][T28475] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5685'.
[  732.695155][T28475] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5685'.
[  733.031467][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.107339][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  733.426474][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  733.833204][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.207261][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  734.837021][T28442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  735.220598][T28497] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5690'.
[  735.340095][T28493] mac80211_hwsim hwsim38 syzkaller0: left promiscuous mode
[  735.340390][T28493] mac80211_hwsim hwsim38 syzkaller0: left allmulticast mode
[  736.227872][T28537] netlink: 56 bytes leftover after parsing attributes in process `syz.7.5702'.
[  736.428042][   T12] net_ratelimit: 7 callbacks suppressed
[  736.428061][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  736.546444][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  736.869818][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  737.586447][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  737.661191][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.626640][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  738.791305][ T2020] block nbd3: Possible stuck request ffff8880289d5080: control (read@0,4096B). Runtime 180 seconds
[  738.822424][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  738.823488][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  739.666584][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  739.915121][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  740.944346][T28568] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5708'.
[  740.979692][ T4983] udevd[4983]: worker [22413] /devices/virtual/block/nbd3 timeout; kill it
[  740.979779][ T4983] udevd[4983]: seq 23893 '/devices/virtual/block/nbd3' killed
[  741.330660][T28601] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  741.334938][T28601] netlink: 'syz.6.5716': attribute type 6 has an invalid length.
[  741.710186][T28625] netlink: 'syz.3.5722': attribute type 1 has an invalid length.
[  741.746444][    C1] net_ratelimit: 6 callbacks suppressed
[  741.746465][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  741.803663][T28628] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5723'.
[  741.883137][T28631] bond9: (slave bridge9): making interface the new active one
[  741.883807][T28631] bond9: (slave bridge9): Enslaving as an active interface with an up link
[  742.172142][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  742.224733][T28646] netlink: 'syz.7.5726': attribute type 1 has an invalid length.
[  742.224759][T28646] netlink: 'syz.7.5726': attribute type 2 has an invalid length.
[  742.322909][T28649] tunl0: entered promiscuous mode
[  742.348645][T28649] netlink: 'syz.5.5727': attribute type 4 has an invalid length.
[  742.348665][T28649] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5727'.
[  742.349868][T28649] netlink: 'syz.5.5727': attribute type 4 has an invalid length.
[  742.349885][T28649] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5727'.
[  742.350094][T28649] netlink: 'syz.5.5727': attribute type 4 has an invalid length.
[  742.350108][T28649] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5727'.
[  742.350324][T28649] netlink: 'syz.5.5727': attribute type 4 has an invalid length.
[  742.350337][T28649] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5727'.
[  742.350604][T28649] netlink: 'syz.5.5727': attribute type 4 has an invalid length.
[  742.350623][T28649] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5727'.
[  742.354158][T28649] netlink: 'syz.5.5727': attribute type 4 has an invalid length.
[  742.354173][T28649] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5727'.
[  742.354389][T28649] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5727'.
[  742.354956][T28649] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5727'.
[  742.786426][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  742.949459][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  743.040194][T28667] syzkaller1: entered promiscuous mode
[  743.040216][T28667] syzkaller1: entered allmulticast mode
[  743.243991][T28674] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  743.275944][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  743.382458][T28678] batadv_slave_0: entered promiscuous mode
[  743.747282][T19319] wlan1: Trigger new scan to find an IBSS to join
[  743.826435][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  744.081910][T28707] gretap0: entered promiscuous mode
[  744.134716][T28707] gretap0: left promiscuous mode
[  744.199385][T28676] batadv_slave_0: left promiscuous mode
[  744.378913][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.548236][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  744.740064][T28727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  745.262006][T28749] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  745.282392][T28754] mac80211_hwsim hwsim38 syzkaller0: entered promiscuous mode
[  745.282421][T28754] mac80211_hwsim hwsim38 syzkaller0: entered allmulticast mode
[  745.582945][T28759] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  746.021874][T28770] xt_REDIRECT: bad MAP_IPS.
[  746.551075][T28785] bond16: option lacp_rate: mode dependency failed, not supported in mode broadcast(3)
[  746.554605][T28785] bond16 (unregistering): Released all slaves
[  746.788222][T11440] wlan1: Trigger new scan to find an IBSS to join
[  746.946436][    C1] net_ratelimit: 8 callbacks suppressed
[  746.946464][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  747.115828][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  747.250808][T28808] validate_nla: 62 callbacks suppressed
[  747.250827][T28808] netlink: 'syz.5.5773': attribute type 83 has an invalid length.
[  747.599993][T28823] ip_tables: iptables: counters copy to user failed while replacing table
[  747.710362][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  747.757901][T28818] sctp: [Deprecated]: syz.7.5776 (pid 28818) Use of int in max_burst socket option deprecated.
[  747.757901][T28818] Use struct sctp_assoc_value instead
[  747.758404][T28817] sctp: [Deprecated]: syz.7.5776 (pid 28817) Use of int in max_burst socket option deprecated.
[  747.758404][T28817] Use struct sctp_assoc_value instead
[  747.899735][T28840] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  747.986438][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  748.265266][T28855] __nla_validate_parse: 62 callbacks suppressed
[  748.265286][T28855] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5785'.
[  748.365277][T28864] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  748.848449][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.027072][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  749.029825][ T5709] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.171771][T28884] netlink: 64 bytes leftover after parsing attributes in process `syz.6.5790'.
[  749.186973][T28883] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5791'.
[  749.557015][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5794'.
[  749.635355][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  749.748327][ T1101] wlan1: Trigger new scan to find an IBSS to join
[  750.713572][T19319] wlan1: Creating new IBSS network, BSSID e2:3b:57:17:a5:c1
[  752.081178][ T5717] net_ratelimit: 7 callbacks suppressed
[  752.081199][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  752.146474][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  752.410147][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  753.186427][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  753.546504][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  753.781732][T28885] syzkaller1: entered promiscuous mode
[  753.781754][T28885] syzkaller1: entered allmulticast mode
[  754.047043][T28917] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5798'.
[  754.092400][T28918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5798'.
[  754.203456][T28921] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5798'.
[  754.203480][T28921] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5798'.
[  754.226446][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  754.324989][T28917] 8021q: adding VLAN 0 to HW filter on device bond1
[  754.698339][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.113731][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  755.266428][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  755.271130][T28960] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  755.974535][T29000] netlink: 'syz.5.5817': attribute type 1 has an invalid length.
[  755.974557][T29000] netlink: 228 bytes leftover after parsing attributes in process `syz.5.5817'.
[  756.223138][T28999] syzkaller1: entered promiscuous mode
[  756.223160][T28999] syzkaller1: entered allmulticast mode
[  756.758143][T29017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5823'.
[  756.779793][T29024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5826'.
[  756.842198][T29024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5826'.
[  756.921982][T29029] Bluetooth: hci0: unsupported parameter 5135
[  756.922003][T29029] Bluetooth: hci0: unsupported parameter 8192
[  756.922016][T29029] Bluetooth: hci0: unsupported parameter 5135
[  756.922028][T29029] Bluetooth: hci0: unsupported parameter 8192
[  756.924892][T29029] ieee802154 phy1 wpan1: encryption failed: -90
[  757.346761][    C1] net_ratelimit: 5 callbacks suppressed
[  757.346783][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  757.382005][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.386013][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  757.751268][T29049] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  757.751603][T29049] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  757.751924][T29049] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  757.752206][T29049] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  757.752520][T29049] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  757.805226][T29049] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  757.805579][T29049] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  757.965477][T29040] syzkaller1: entered promiscuous mode
[  757.965528][T29040] syzkaller1: entered allmulticast mode
[  758.853889][T29081] netlink: 'syz.1.5840': attribute type 21 has an invalid length.
[  758.853912][T29081] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5840'.
[  758.853983][T29081] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5840'.
[  760.112927][T29106] __nla_validate_parse: 1 callbacks suppressed
[  760.112948][T29106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5846'.
[  760.186006][T29110] netlink: 72 bytes leftover after parsing attributes in process `syz.5.5846'.
[  760.186029][T29110] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5846'.
[  760.186043][T29110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5846'.
[  761.051539][T29127] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5849'.
[  761.111055][T29137] Bluetooth: ISO socket layer initialized
[  761.227437][T29144] erspan0: entered promiscuous mode
[  761.343959][T29138] tipc: Started in network mode
[  761.343980][T29138] tipc: Node identity 2000004, cluster identity 4711
[  761.343992][T29138] tipc: Node number set to 33554436
[  761.374474][T29137] 8021q: VLANs not supported on ip_vti0
[  762.546537][    C1] net_ratelimit: 70 callbacks suppressed
[  762.546558][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  762.610493][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  762.764012][T29189] xt_l2tp: v2 tid > 0xffff: 4294967295
[  762.817304][T29188] batman_adv: batadv0: Adding interface: gretap1
[  762.817323][T29188] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  762.817351][T29188] batman_adv: batadv0: Interface activated: gretap1
[  763.012733][T29192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5863'.
[  763.112350][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.113810][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  763.586739][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  763.755282][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.084457][T29215] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5868'.
[  764.198137][ T1101] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  764.198197][ T1101] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  764.198239][ T1101] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  764.225358][T19319] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  764.294188][T29224] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  764.305352][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5870'.
[  764.401931][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  764.624709][T29232] netlink: 64 bytes leftover after parsing attributes in process `syz.7.5873'.
[  764.626428][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  764.654922][T29232] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5873'.
[  764.715853][T29232] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  764.736148][T29232] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  764.750419][T29232] bond0 (unregistering): Released all slaves
[  764.868386][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  765.004446][T29236] netlink: 'syz.1.5874': attribute type 12 has an invalid length.
[  765.004470][T29236] netlink: 'syz.1.5874': attribute type 29 has an invalid length.
[  765.355034][T29257] netlink: 'syz.7.5878': attribute type 1 has an invalid length.
[  765.491974][T29260] __nla_validate_parse: 6 callbacks suppressed
[  765.491993][T29260] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5878'.
[  765.666524][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  766.080054][T29278] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5882'.
[  766.192043][T29286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'.
[  766.251481][T29278] bond0 (unregistering): Released all slaves
[  766.648399][T29304] netlink: 'syz.6.5889': attribute type 29 has an invalid length.
[  766.812336][T29313] netlink: 'syz.6.5889': attribute type 29 has an invalid length.
[  767.215260][T29325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5895'.
[  767.366166][T29325] veth8: entered promiscuous mode
[  767.366188][T29325] veth8: entered allmulticast mode
[  767.413902][T29339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5897'.
[  767.423164][T29340] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5897'.
[  767.746966][    C1] net_ratelimit: 7 callbacks suppressed
[  767.746990][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  767.787970][T29334] wg0 speed is unknown, defaulting to 1000
[  767.791022][T29347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5900'.
[  768.289382][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.673169][T29334] lo speed is unknown, defaulting to 1000
[  768.708531][T22656] Bluetooth: hci7: command tx timeout
[  768.786718][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  768.870220][ T2020] block nbd3: Possible stuck request ffff8880289d5080: control (read@0,4096B). Runtime 210 seconds
[  768.885843][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  768.907184][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.005515][T29377] IPVS: set_ctl: invalid protocol: 47 172.20.20.66:20000
[  769.129915][T29380] netlink: 'syz.5.5912': attribute type 39 has an invalid length.
[  769.194768][T29384] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5912'.
[  769.529239][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  769.826825][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  770.337768][ T5622] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  770.342964][ T5622] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  770.345361][ T5622] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  770.382722][ T5622] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  770.383383][ T5622] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  770.467699][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.657576][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  770.866740][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  771.490283][T29436] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5925'.
[  771.491223][T29435] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5926'.
[  771.491246][T29435] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5926'.
[  771.588134][T29445] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5926'.
[  771.588160][T29445] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5926'.
[  772.039075][T29391] wg0 speed is unknown, defaulting to 1000
[  772.477612][T22656] Bluetooth: hci8: command tx timeout
[  772.521835][T29465] netlink: 288 bytes leftover after parsing attributes in process `syz.7.5931'.
[  772.877352][T29391] lo speed is unknown, defaulting to 1000
[  772.898404][ T1101] net_ratelimit: 7 callbacks suppressed
[  772.898423][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  772.946575][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  773.004728][T29480] block nbd6: NBD_DISCONNECT
[  773.329132][T29488] pimreg: entered allmulticast mode
[  773.507824][T19383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.790898][T29516] netlink: 'syz.6.5941': attribute type 1 has an invalid length.
[  773.790919][T29516] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5941'.
[  773.791196][T29516] netlink: 'syz.6.5941': attribute type 4 has an invalid length.
[  773.791210][T29516] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5941'.
[  773.849439][T29519] netlink: 'syz.6.5941': attribute type 1 has an invalid length.
[  773.849461][T29519] netlink: 228 bytes leftover after parsing attributes in process `syz.6.5941'.
[  773.853778][T29520] netlink: 'syz.6.5941': attribute type 4 has an invalid length.
[  773.853797][T29520] netlink: 152 bytes leftover after parsing attributes in process `syz.6.5941'.
[  773.987176][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  773.991211][T19309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  773.998537][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  774.081287][T29516] .`: renamed from bond0 (while UP)
[  774.130357][T29528] netlink: 'syz.1.5943': attribute type 1 has an invalid length.
[  774.194869][T29528] bond16: entered promiscuous mode
[  774.195334][T29528] 8021q: adding VLAN 0 to HW filter on device bond16
[  774.355840][T29530] bond16: (slave bridge9): making interface the new active one
[  774.355864][T29530] bridge9: entered promiscuous mode
[  774.379519][T29530] bond16: (slave bridge9): Enslaving as an active interface with an up link
[  774.415884][T29538] Bluetooth: hci0: load_link_keys: too big key_count value 5120
[  774.549446][T22656] Bluetooth: hci8: command tx timeout
[  774.599460][T29391] bridge0: port 1(bridge_slave_0) entered blocking state
[  774.599660][T29391] bridge0: port 1(bridge_slave_0) entered disabled state
[  774.600059][T29391] bridge_slave_0: entered allmulticast mode
[  774.601723][T29391] bridge_slave_0: entered promiscuous mode
[  774.649672][T29391] bridge0: port 2(bridge_slave_1) entered blocking state
[  774.649790][T29391] bridge0: port 2(bridge_slave_1) entered disabled state
[  774.649975][T29391] bridge_slave_1: entered allmulticast mode
[  774.654041][T29391] bridge_slave_1: entered promiscuous mode
[  774.747518][T29391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  774.750870][T29391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  774.804306][T29391] team0: Port device team_slave_0 added
[  774.812984][T29391] team0: Port device team_slave_1 added
[  774.929897][T29391] batman_adv: batadv0: Adding interface: batadv_slave_0
[  774.929915][T29391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  774.929939][T29391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  774.937523][T29391] batman_adv: batadv0: Adding interface: batadv_slave_1
[  774.937539][T29391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  774.937563][T29391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  775.026648][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  775.181456][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  775.243345][T29391] hsr_slave_0: entered promiscuous mode
[  775.244475][T29391] hsr_slave_1: entered promiscuous mode
[  775.245243][T29391] debugfs: 'hsr0' already exists in 'hsr'
[  775.245262][T29391] Cannot create hsr debugfs directory
[  775.709601][T29581] ip_tables: iptables: counters copy to user failed while replacing table
[  775.908257][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  776.062763][T29591] ipt_ah: unknown flags FF
[  776.145473][T29596] veth1_macvtap: entered promiscuous mode
[  776.257964][T22656] Bluetooth: hci4: connection err: -111
[  776.414770][T29607] nbd: must specify at least one socket
[  776.514109][T29391] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.562827][T29599] netlink: 'syz.5.5957': attribute type 3 has an invalid length.
[  776.626177][T29614] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  776.630648][T22656] Bluetooth: hci8: command tx timeout
[  776.783195][T29391] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  776.815804][T29616] __nla_validate_parse: 3 callbacks suppressed
[  776.815824][T29616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5965'.
[  776.937040][T29391] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.008717][T29626] netlink: 'syz.1.5969': attribute type 1 has an invalid length.
[  777.052931][T29626] 8021q: adding VLAN 0 to HW filter on device bond17
[  777.166640][T29620] can: request_module (can-proto-4) failed.
[  777.309335][T29636] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  777.311466][T29636] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  777.418799][T29391] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  777.724596][T29650] nbd: must specify at least one socket
[  777.733262][T29650] block nbd1: NBD_DISCONNECT
[  777.733287][T29650] block nbd1: Send disconnect failed -32
[  777.733305][T29650] block nbd1: shutting down sockets
[  778.146491][    C1] net_ratelimit: 7 callbacks suppressed
[  778.146513][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  778.288780][T29391] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  778.295737][T29391] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  778.315633][T29391] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  778.337829][T29391] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  778.340706][T29391] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  778.368595][T29391] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  778.371886][T29391] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  778.414037][T29391] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  778.492152][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.567938][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  778.707571][T22656] Bluetooth: hci8: command tx timeout
[  778.895160][T29681] ipvlan0: entered promiscuous mode
[  778.933448][T29391] 8021q: adding VLAN 0 to HW filter on device bond0
[  779.029417][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.078625][T29391] 8021q: adding VLAN 0 to HW filter on device team0
[  779.094561][T19312] bridge0: port 1(bridge_slave_0) entered blocking state
[  779.094670][T19312] bridge0: port 1(bridge_slave_0) entered forwarding state
[  779.134474][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  779.134591][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  779.186447][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  779.293656][T29685] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5986'.
[  779.293687][T29685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5986'.
[  779.293700][T29685] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5986'.
[  779.587273][T19385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.691240][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  779.701326][T29700] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5990'.
[  779.750086][ T1113] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.024325][T29713] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5993'.
[  780.025391][T29713] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5993'.
[  780.053960][T29713] hsr_slave_0: left promiscuous mode
[  780.078043][T29713] hsr_slave_1: left promiscuous mode
[  780.190615][T19312] IPVS: starting estimator thread 0...
[  780.226509][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  780.273813][T29720] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.5994'.
[  780.317291][T29725] IPVS: using max 27 ests per chain, 64800 per kthread
[  780.540312][T29731] netlink: 524 bytes leftover after parsing attributes in process `syz.5.5995'.
[  780.727869][T11440] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  780.849750][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  780.890094][T29391] 8021q: adding VLAN 0 to HW filter on device batadv0
[  781.030762][T29391] veth0_vlan: entered promiscuous mode
[  781.067122][T29391] veth1_vlan: entered promiscuous mode
[  781.371331][T29391] veth0_macvtap: entered promiscuous mode
[  781.404893][T29391] veth1_macvtap: entered promiscuous mode
[  781.494120][T29391] batman_adv: batadv0: Interface activated: batadv_slave_0
[  781.581976][T29391] batman_adv: batadv0: Interface activated: batadv_slave_1
[  781.647173][T11440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  781.647338][T11440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  781.688003][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  781.947211][T19309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  782.781877][T11440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  782.781898][T11440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  782.987553][T19309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  782.987591][T19309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  782.995167][T29783] nbd: must specify at least one socket
[  783.346451][    C1] net_ratelimit: 9 callbacks suppressed
[  783.346473][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  783.986589][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  783.996692][T29815] bond0 (unregistering): Released all slaves
[  784.221799][T29834] batadv_slave_0: entered promiscuous mode
[  784.235711][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.237266][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  784.323101][T29842] netlink: zone id is out of range
[  784.323116][T29842] netlink: zone id is out of range
[  784.323125][T29842] netlink: zone id is out of range
[  784.323132][T29842] netlink: zone id is out of range
[  784.323140][T29842] netlink: zone id is out of range
[  784.323148][T29842] netlink: zone id is out of range
[  784.401855][T29845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6021'.
[  784.402008][T29845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  784.527346][T29845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  784.898925][   T51] IPVS: starting estimator thread 0...
[  784.987298][T29861] IPVS: using max 29 ests per chain, 69600 per kthread
[  785.260837][T29859] syzkaller1: entered promiscuous mode
[  785.261056][T29859] syzkaller1: entered allmulticast mode
[  785.308786][T29877] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6029'.
[  786.154858][T22656] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0
[  786.154974][T22656] Bluetooth: hci7: Injecting HCI hardware error event
[  786.157638][ T5622] Bluetooth: hci7: hardware error 0x00
[  786.189975][T29895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6034'.
[  786.189996][T29895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6034'.
[  786.441043][T29890] syzkaller1: entered promiscuous mode
[  786.441069][T29890] syzkaller1: entered allmulticast mode
[  786.939508][T29907] syzkaller1: entered promiscuous mode
[  786.939955][T29907] syzkaller1: entered allmulticast mode
[  788.104244][T29961] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6042'.
[  788.131316][T29961] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6042'.
[  788.388213][ T5622] Bluetooth: hci7: Opcode 0x0c03 failed: -110
[  788.546429][    C1] net_ratelimit: 526 callbacks suppressed
[  788.546452][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  788.708743][T19385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  788.738342][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.266575][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.266754][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.266902][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.267051][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.267237][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.267389][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  789.267538][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  790.022747][T29920] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  790.023293][T29926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  790.428393][T29993] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6050'.
[  790.520156][T29993] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6050'.
[  790.821549][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6054'.
[  790.821583][T30008] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6054'.
[  790.891408][T30012] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6057'.
[  791.043702][T30007] netlink: 'syz.1.6053': attribute type 49 has an invalid length.
[  791.156942][T30014] bridge1: the hash_elasticity option has been deprecated and is always 16
[  791.170491][T30019] netlink: 404 bytes leftover after parsing attributes in process `syz.7.6058'.
[  791.170512][T30019] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6058'.
[  791.170528][T30019] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6058'.
[  791.430910][T30031] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6063'.
[  791.508190][T30033] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6061'.
[  791.764965][T30048] netlink: 'syz.7.6068': attribute type 1 has an invalid length.
[  792.374211][T30080] netlink: 'syz.3.6071': attribute type 32 has an invalid length.
[  793.746452][    C1] net_ratelimit: 28 callbacks suppressed
[  793.746473][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  793.912900][ T5622] Bluetooth: hci6: ISO packet too small
[  794.258381][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.351448][T30168] netlink: 'syz.1.6097': attribute type 7 has an invalid length.
[  794.351470][T30168] netlink: 'syz.1.6097': attribute type 8 has an invalid length.
[  794.386950][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.556741][T30184] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  794.786414][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  794.787706][T17773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  794.942610][T30194] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  795.254794][T30212] syzkaller0: entered promiscuous mode
[  795.254817][T30212] syzkaller0: entered allmulticast mode
[  795.318826][T30212] tipc: Started in network mode
[  795.318857][T30212] tipc: Node identity c2006f128a75, cluster identity 4711
[  795.319172][T30212] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  795.369532][T30212] tipc: Resetting bearer <eth:syzkaller0>
[  795.419911][T19309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.428014][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.570869][T30222] netlink: 'syz.1.6109': attribute type 21 has an invalid length.
[  795.602089][T30222] __nla_validate_parse: 75 callbacks suppressed
[  795.602110][T30222] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6109'.
[  795.636256][T30210] tipc: Resetting bearer <eth:syzkaller0>
[  795.748751][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.749224][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  795.950422][T30210] tipc: Disabling bearer <eth:syzkaller0>
[  796.572962][T30257] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6120'.
[  796.572989][T30257] netlink: 48 bytes leftover after parsing attributes in process `syz.7.6120'.
[  797.142961][T30287] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6125'.
[  797.365696][T30294] netlink: 'syz.1.6126': attribute type 29 has an invalid length.
[  797.380272][T30294] netlink: 'syz.1.6126': attribute type 29 has an invalid length.
[  797.607216][T30297] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6127'.
[  798.348538][T30324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6138'.
[  798.498656][T30331] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6139'.
[  798.557426][T30331] bond1 (unregistering): Released all slaves
[  798.606057][T30340] netlink: 'syz.1.6141': attribute type 21 has an invalid length.
[  798.606140][T30340] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6141'.
[  798.820380][T30346] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6144'.
[  798.824458][T30347] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6143'.
[  798.868622][T11440] net_ratelimit: 19 callbacks suppressed
[  798.868642][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  798.946560][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  798.960107][ T2020] block nbd3: Possible stuck request ffff8880289d5080: control (read@0,4096B). Runtime 240 seconds
[  799.184954][T30362] ip_tables: iptables: counters copy to user failed while replacing table
[  799.415006][T30353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  799.524011][T30353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  799.552013][T30353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  799.662257][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  799.662307][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  799.662341][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  799.676571][T19312] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  799.986474][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  799.994605][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.485530][T30406] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2499
[  800.871709][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  800.884664][T19383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.026436][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  801.125872][T30426] __nla_validate_parse: 4 callbacks suppressed
[  801.125892][T30426] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6166'.
[  801.128174][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  801.161885][T22656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  801.178056][T22656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  801.190287][T22656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  801.192013][T30426] bridge1: entered promiscuous mode
[  801.192031][T30426] bridge1: entered allmulticast mode
[  801.204859][T22656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  801.224876][T22656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  801.841855][T30447] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6170'.
[  801.841881][T30447] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6170'.
[  801.841896][T30447] netlink: 'syz.3.6170': attribute type 6 has an invalid length.
[  801.841908][T30447] netlink: 'syz.3.6170': attribute type 5 has an invalid length.
[  801.841921][T30447] netlink: 43 bytes leftover after parsing attributes in process `syz.3.6170'.
[  802.063998][T30452] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6171'.
[  802.233058][T30273] nci: __nci_request: wait_for_completion_interruptible_timeout failed 0
[  802.550712][T30469] netlink: 156 bytes leftover after parsing attributes in process `syz.6.6176'.
[  802.732028][T30472] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  802.750422][T30472] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6177'.
[  802.812805][T30424] wg0 speed is unknown, defaulting to 1000
[  802.964012][T30478] bond0: Unable to set up delay as MII monitoring is disabled
[  802.970167][T30478] bond0 (unregistering): Released all slaves
[  803.248393][T30481] netlink: 'syz.7.6180': attribute type 83 has an invalid length.
[  803.347512][ T5622] Bluetooth: hci2: command tx timeout
[  803.486870][T30492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6182'.
[  803.821845][T30424] lo speed is unknown, defaulting to 1000
[  803.910944][T19383] net_ratelimit: 8 callbacks suppressed
[  803.910964][T19383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  803.924032][T30511] netlink: 'syz.7.6188': attribute type 1 has an invalid length.
[  803.924051][T30511] netlink: 'syz.7.6188': attribute type 2 has an invalid length.
[  803.968469][T30511] netlink: 'syz.7.6188': attribute type 1 has an invalid length.
[  803.968511][T30511] netlink: 'syz.7.6188': attribute type 2 has an invalid length.
[  804.080273][T19309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.146437][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  804.154910][T30514] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6190'.
[  804.195730][T30518] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6190'.
[  804.472654][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  804.504600][T30536] ipvlan1: entered promiscuous mode
[  804.722034][T30526] bridge0: port 1(bridge_slave_0) entered forwarding state
[  804.866558][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.186433][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  805.427121][ T5622] Bluetooth: hci2: command tx timeout
[  805.583731][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.860799][T30424] bridge0: port 1(bridge_slave_0) entered blocking state
[  805.861407][T30424] bridge0: port 1(bridge_slave_0) entered disabled state
[  805.861591][T30424] bridge_slave_0: entered allmulticast mode
[  805.866023][T30424] bridge_slave_0: entered promiscuous mode
[  805.905401][T30424] bridge0: port 2(bridge_slave_1) entered blocking state
[  805.906618][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.906804][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.906972][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  805.909595][T30424] bridge0: port 2(bridge_slave_1) entered disabled state
[  805.909740][T30424] bridge_slave_1: entered allmulticast mode
[  805.915875][T30424] bridge_slave_1: entered promiscuous mode
[  806.105046][T30424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  806.140035][T30424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  806.257726][T30585] __nla_validate_parse: 2 callbacks suppressed
[  806.257745][T30585] netlink: 45 bytes leftover after parsing attributes in process `syz.7.6201'.
[  806.295868][T30424] team0: Port device team_slave_0 added
[  806.314866][T30424] team0: Port device team_slave_1 added
[  806.370999][T30424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  806.371017][T30424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  806.371039][T30424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  806.372993][T30424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  806.373007][T30424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  806.373029][T30424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  806.536950][T30593] syzkaller0: entered promiscuous mode
[  806.537184][T30593] syzkaller0: entered allmulticast mode
[  806.578614][T30598] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6205'.
[  806.792997][ T1113] wlan1: Trigger new scan to find an IBSS to join
[  806.883162][T30606] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6207'.
[  806.883581][T30606] netlink: 108 bytes leftover after parsing attributes in process `syz.7.6207'.
[  806.883599][T30606] netlink: 84 bytes leftover after parsing attributes in process `syz.7.6207'.
[  806.943604][T30424] hsr_slave_0: entered promiscuous mode
[  806.961395][T30424] hsr_slave_1: entered promiscuous mode
[  806.965571][T30424] debugfs: 'hsr0' already exists in 'hsr'
[  806.965593][T30424] Cannot create hsr debugfs directory
[  807.513723][ T5622] Bluetooth: hci2: command tx timeout
[  808.552900][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[  808.693901][T30424] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  808.693936][T30424] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.693962][T30424] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  808.971166][T30424] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  808.971205][T30424] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.971230][T30424] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  808.992324][T19309] net_ratelimit: 18 callbacks suppressed
[  808.992343][T19309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  809.177193][T30647] syzkaller0: entered promiscuous mode
[  809.177215][T30647] syzkaller0: entered allmulticast mode
[  809.346456][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  809.383727][T30652] 8021q: adding VLAN 0 to HW filter on device .`
[  809.445093][T30664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6225'.
[  809.530899][T30652] 8021q: adding VLAN 0 to HW filter on device bond1
[  809.550924][T30652] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  809.588653][ T5622] Bluetooth: hci2: command tx timeout
[  809.749398][T19309] wlan1: Trigger new scan to find an IBSS to join
[  809.806593][T30659] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  809.922339][T30424] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  809.922374][T30424] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.922398][T30424] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  810.073434][T17773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.159625][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  810.230595][T30676] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  810.386425][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  810.427199][T30686] nbd: must specify at least one socket
[  810.678652][T30424] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  810.678687][T30424] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  810.678711][T30424] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  811.298524][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  811.426426][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  811.498859][T30424] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  811.522800][T30424] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  811.523677][T30424] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  811.550189][T30424] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  811.554396][T30424] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  811.619482][T30424] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  811.620423][T30424] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  811.654540][T30424] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  811.674838][T30720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6235'.
[  811.726524][T30722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6236'.
[  811.810650][T30722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6236'.
[  812.079673][T30424] 8021q: adding VLAN 0 to HW filter on device bond0
[  812.239873][T30424] 8021q: adding VLAN 0 to HW filter on device team0
[  812.273685][T19309] bridge0: port 1(bridge_slave_0) entered blocking state
[  812.273815][T19309] bridge0: port 1(bridge_slave_0) entered forwarding state
[  812.321306][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state
[  812.321444][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  812.374079][T30424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  812.374105][T30424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  812.410655][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  812.440847][T30748] nbd: must specify at least one socket
[  812.624039][T30740] ÿÿÿÿÿÿ: renamed from virt_wifi0 (while UP)
[  812.790512][   T51] wlan1: Creating new IBSS network, BSSID d6:ea:9d:58:7d:7a
[  813.402577][T30757] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  813.743716][T30760] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6243'.
[  814.505134][T30781] sctp: [Deprecated]: syz.7.6245 (pid 30781) Use of struct sctp_assoc_value in delayed_ack socket option.
[  814.505134][T30781] Use struct sctp_sack_info instead
[  814.546449][    C1] net_ratelimit: 7 callbacks suppressed
[  814.546471][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  814.919361][T11440] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  815.000680][T30794] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6247'.
[  815.000718][T30794] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6247'.
[  815.299779][T30424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  815.339402][T30801] netlink: 68 bytes leftover after parsing attributes in process `syz.7.6249'.
[  815.502331][T30424] veth0_vlan: entered promiscuous mode
[  815.570093][T30424] veth1_vlan: entered promiscuous mode
[  815.586562][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  815.730155][T30424] veth0_macvtap: entered promiscuous mode
[  815.741781][T30809] nbd: must specify at least one socket
[  815.763116][T30424] veth1_macvtap: entered promiscuous mode
[  815.819976][T30811] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6253'.
[  815.833238][T30424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  815.859957][T30424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  815.953236][T19309] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  815.954241][T19309] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  815.968194][T19309] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  815.968232][T19309] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  816.025922][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.158954][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  816.484374][T19319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  816.484396][T19319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  816.626416][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  816.677858][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  816.677880][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  816.944009][T30833] lo: entered promiscuous mode
[  816.951029][T30833] netlink: 'syz.5.6260': attribute type 2 has an invalid length.
[  816.951050][T30833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  817.010078][T30835] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6261'.
[  817.069127][T30839] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6163'.
[  817.120097][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  817.136024][T30843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6261'.
[  817.589346][T30853] bridge2: entered promiscuous mode
[  817.589412][T30853] bridge2: entered allmulticast mode
[  817.632910][T30857] nbd: must specify at least one socket
[  817.666415][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  818.214805][T30889] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6274'.
[  818.218080][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  818.593964][T30901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6279'.
[  818.680412][T30905] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6280'.
[  818.745608][T30905] xfrm1: entered promiscuous mode
[  818.745631][T30905] xfrm1: entered allmulticast mode
[  819.202647][T30920] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6286'.
[  819.202670][T30920] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6286'.
[  819.528173][T30925] xt_CT: No such helper "syz1"
[  819.535052][T30933] ip6tnl0: Caught tx_queue_len zero misconfig
[  819.652234][T30933] batman_adv: batadv0: Adding interface: syzkaller0
[  819.652252][T30933] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  819.652278][T30933] batman_adv: batadv0: Interface activated: syzkaller0
[  819.746481][    C1] net_ratelimit: 10 callbacks suppressed
[  819.746505][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  820.466733][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  820.535966][T30948] netlink: 'syz.5.6291': attribute type 8 has an invalid length.
[  820.641274][T30931] batman_adv: batadv0: Interface deactivated: syzkaller0
[  820.760122][T30931] batman_adv: batadv0: Removing interface: syzkaller0
[  820.786418][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  820.879682][T22656] Bluetooth: hci4: command 0x0406 tx timeout
[  821.154438][T30976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6299'.
[  821.198740][T30980] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6300'.
[  821.257813][T30983] FAULT_INJECTION: forcing a failure.
[  821.257813][T30983] name failslab, interval 1, probability 0, space 0, times 0
[  821.257846][T30983] CPU: 0 UID: 0 PID: 30983 Comm: syz.6.6301 Not tainted syzkaller #0 PREEMPT(full) 
[  821.257866][T30983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  821.257878][T30983] Call Trace:
[  821.257885][T30983]  <TASK>
[  821.257894][T30983]  dump_stack_lvl+0xe8/0x150
[  821.257925][T30983]  should_fail_ex+0x410/0x560
[  821.257952][T30983]  should_failslab+0xa8/0x100
[  821.257980][T30983]  __kmalloc_noprof+0xfe/0x720
[  821.258002][T30983]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  821.258030][T30983]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  821.258065][T30983]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[  821.258101][T30983]  genl_family_rcv_msg_doit+0xda/0x340
[  821.258135][T30983]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  821.258170][T30983]  ? apparmor_capable+0x126/0x170
[  821.258194][T30983]  ? bpf_lsm_capable+0x9/0x20
[  821.258213][T30983]  ? security_capable+0x7e/0x2c0
[  821.258246][T30983]  genl_rcv_msg+0x614/0x7a0
[  821.258281][T30983]  ? __pfx_genl_rcv_msg+0x10/0x10
[  821.258307][T30983]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  821.258329][T30983]  ? __pfx_nl80211_set_pmksa+0x10/0x10
[  821.258346][T30983]  ? __pfx_nl80211_post_doit+0x10/0x10
[  821.258383][T30983]  netlink_rcv_skb+0x226/0x4a0
[  821.258407][T30983]  ? __pfx_genl_rcv_msg+0x10/0x10
[  821.258435][T30983]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  821.258477][T30983]  ? down_read+0x2be/0x330
[  821.258504][T30983]  genl_rcv+0x28/0x40
[  821.258528][T30983]  netlink_unicast+0x7bd/0x940
[  821.258559][T30983]  netlink_sendmsg+0x813/0xb40
[  821.258592][T30983]  ? __pfx_netlink_sendmsg+0x10/0x10
[  821.258638][T30983]  ? apparmor_socket_sendmsg+0x98/0x360
[  821.258665][T30983]  ? __pfx_netlink_sendmsg+0x10/0x10
[  821.258687][T30983]  sock_sendmsg_nosec+0x13a/0x180
[  821.258715][T30983]  ____sys_sendmsg+0x54e/0x850
[  821.258742][T30983]  ? __pfx_____sys_sendmsg+0x10/0x10
[  821.258770][T30983]  ? import_iovec+0x73/0xa0
[  821.258801][T30983]  ___sys_sendmsg+0x2a5/0x360
[  821.258819][T30983]  ? __lock_acquire+0x747/0x2de0
[  821.258843][T30983]  ? __pfx____sys_sendmsg+0x10/0x10
[  821.258895][T30983]  ? __fget_files+0x2a/0x420
[  821.258912][T30983]  ? __fget_files+0x3a2/0x420
[  821.258939][T30983]  __x64_sys_sendmsg+0x1b1/0x290
[  821.258962][T30983]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  821.259002][T30983]  do_syscall_64+0x166/0x520
[  821.259022][T30983]  ? trace_irq_disable+0x3b/0x140
[  821.259041][T30983]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.259060][T30983]  ? clear_bhb_loop+0x70/0xc0
[  821.259083][T30983]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  821.259101][T30983] RIP: 0033:0x7fc1a419e1d9
[  821.259118][T30983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  821.259134][T30983] RSP: 002b:00007fc1a513d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  821.259154][T30983] RAX: ffffffffffffffda RBX: 00007fc1a4425fa0 RCX: 00007fc1a419e1d9
[  821.259168][T30983] RDX: 0000000004004000 RSI: 0000200000000140 RDI: 0000000000000003
[  821.259181][T30983] RBP: 00007fc1a513d090 R08: 0000000000000000 R09: 0000000000000000
[  821.259193][T30983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  821.259205][T30983] R13: 00007fc1a4426038 R14: 00007fc1a4425fa0 R15: 00007ffdd709ea98
[  821.259237][T30983]  </TASK>
[  821.294183][T30980] gretap0: entered promiscuous mode
[  821.304774][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.492113][T30980] gretap0: left promiscuous mode
[  821.506636][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  821.826413][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  822.012153][T30995] openvswitch: netlink: Message has 8 unknown bytes.
[  822.075871][T31000] __nla_validate_parse: 1 callbacks suppressed
[  822.075891][T31000] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6305'.
[  822.128333][T31001] ip6t_hbh: too many supported opts specified
[  822.129931][T30998] ip6t_hbh: too many supported opts specified
[  822.156138][T31005] netlink: 288 bytes leftover after parsing attributes in process `syz.1.6305'.
[  822.184140][T31001] ip_tables: iptables: counters copy to user failed while replacing table
[  822.185404][T30998] ip_tables: iptables: counters copy to user failed while replacing table
[  822.208444][T31009] netlink: NAT attribute has 8 unknown bytes
[  822.304260][T31003] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6311'.
[  822.305983][T31004] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6311'.
[  822.472524][T31022] nbd: must specify at least one socket
[  822.473056][T31022] block nbd3: NBD_DISCONNECT
[  822.473078][T31022] block nbd3: Send disconnect failed -32
[  822.473095][T31022] block nbd3: shutting down sockets
[  822.529886][    C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.530202][    C0] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.568413][ T2020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.568448][ T2020] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.572966][ T2020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.572995][ T2020] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.573222][ T2020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.573247][ T2020] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.573611][ T2020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.573635][ T2020] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.573836][ T2020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.574960][ T2020] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.575227][ T2020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.575252][ T2020] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.575404][T22413] ldm_validate_partition_table(): Disk read failed.
[  822.575519][ T2020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.575542][ T2020] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.575692][ T2020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.575714][ T2020] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.575827][ T2020] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  822.575849][ T2020] Buffer I/O error on dev nbd3, logical block 0, async page read
[  822.576068][T22413] Dev nbd3: unable to read RDB block 0
[  822.618578][T22413]  nbd3: unable to read partition table
[  822.934404][ T4983] udevd[4983]: worker [22413] terminated by signal 9 (Killed)
[  822.934453][ T4983] udevd[4983]: worker [22413] failed while handling '/devices/virtual/block/nbd3'
[  823.568435][T31042] netlink: 'syz.6.6320': attribute type 4 has an invalid length.
[  823.568458][T31042] netlink: 240 bytes leftover after parsing attributes in process `syz.6.6320'.
[  823.600178][T31046] netlink: 'syz.1.6323': attribute type 2 has an invalid length.
[  823.600201][T31046] netlink: 'syz.1.6323': attribute type 2 has an invalid length.
[  823.774305][T31046] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  823.805854][T31046] bond1 (unregistering): Released all slaves
[  824.321316][T31072] netlink: 'syz.3.6330': attribute type 9 has an invalid length.
[  824.488845][T31076] nbd: must specify at least one socket
[  824.593277][T31077] x_tables: duplicate underflow at hook 2
[  824.807383][   T12] net_ratelimit: 19 callbacks suppressed
[  824.807402][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  824.946490][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  825.215014][T31115] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6342'.
[  825.273965][T19385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.411542][T31125] openvswitch: netlink: VLAN attribute unexpected.
[  825.596308][T31121] bond3 (unregistering): Released all slaves
[  825.862193][T31132] bond1: option resend_igmp: invalid value (32767)
[  825.862216][T31132] bond1: option resend_igmp: allowed values 0 - 255
[  825.893085][T31132] bond1 (unregistering): Released all slaves
[  825.958229][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  825.986490][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  825.987585][T31138] ip_tables: iptables: counters copy to user failed while replacing table
[  826.438742][T31150] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6352'.
[  826.528273][T31155] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6354'.
[  826.737946][T31159] nbd: must specify at least one socket
[  826.820654][T31156] syzkaller1: entered promiscuous mode
[  826.820678][T31156] syzkaller1: entered allmulticast mode
[  826.895954][T31162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  827.026414][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  827.140306][T19319] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  827.559889][T31167] netlink: 'syz.5.6357': attribute type 2 has an invalid length.
[  827.680387][T31180] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6361'.
[  827.699582][T31177] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6360'.
[  827.744239][T31177] syzkaller1: entered promiscuous mode
[  827.744260][T31177] syzkaller1: entered allmulticast mode
[  828.066413][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  828.220241][T31187] syzkaller0: entered promiscuous mode
[  828.220461][T31187] syzkaller0: entered allmulticast mode
[  828.253200][T31192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  828.495132][T31199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6364'.
[  828.495647][T31198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6364'.
[  828.627910][T31203] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6366'.
[  828.912709][T31219] nbd: must specify at least one socket
[  828.932442][T31220] sctp: [Deprecated]: syz.5.6371 (pid 31220) Use of struct sctp_assoc_value in delayed_ack socket option.
[  828.932442][T31220] Use struct sctp_sack_info instead
[  829.164953][T11440] bridge_slave_1: left allmulticast mode
[  829.165008][T11440] bridge_slave_1: left promiscuous mode
[  829.167379][T11440] bridge0: port 2(bridge_slave_1) entered disabled state
[  829.248077][T11440] bridge_slave_0: left allmulticast mode
[  829.252690][T11440] bridge_slave_0: left promiscuous mode
[  829.253714][T11440] bridge0: port 1(bridge_slave_0) entered disabled state
[  829.312598][T31230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6376'.
[  829.350292][T11440] pim6reg: left allmulticast mode
[  830.083771][T31243] net_ratelimit: 10 callbacks suppressed
[  830.083790][T31243] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  830.083931][T31235] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6377'.
[  830.146448][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  830.403170][T11440] bond14 (unregistering): (slave gretap2): Releasing active interface
[  830.461157][T11440] bond3 (unregistering): (slave geneve3): Releasing active interface
[  830.498164][T11440] bond1 (unregistering): (slave geneve2): Releasing active interface
[  830.518552][T19309] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  830.656011][T11440] bond16 (unregistering): (slave bridge9): Releasing backup interface
[  830.656038][T11440] bridge9 (unregistering): left promiscuous mode
[  830.893972][T11440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  830.944904][T11440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  830.970717][T11440] bond0 (unregistering): Released all slaves
[  831.011576][T11440] bond1 (unregistering): Released all slaves
[  831.039979][T11440] bond2 (unregistering): left allmulticast mode
[  831.040006][T11440] bond2 (unregistering): left promiscuous mode
[  831.043849][T11440] team0: Port device macvlan2 removed
[  831.074408][T11440] bond2 (unregistering): Released all slaves
[  831.095694][T11440] bond3 (unregistering): Released all slaves
[  831.120788][T11440] bond4 (unregistering): Released all slaves
[  831.122806][ T5622] Bluetooth: hci6: command 0x0406 tx timeout
[  831.164765][T11440] bond5 (unregistering): Released all slaves
[  831.186435][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  831.189145][T11440] bond6 (unregistering): Released all slaves
[  831.221428][T11440] bond7 (unregistering): Released all slaves
[  831.247482][T11440] bond8 (unregistering): Released all slaves
[  831.271604][T11440] bond9 (unregistering): Released all slaves
[  831.297799][T11440] bond10 (unregistering): Released all slaves
[  831.325940][T11440] bond11 (unregistering): Released all slaves
[  831.349432][T19383] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  831.356279][T11440] bond12 (unregistering): Released all slaves
[  831.393461][T11440] bond13 (unregistering): Released all slaves
[  831.416132][T11440] bond14 (unregistering): Released all slaves
[  831.441226][T11440] bond15 (unregistering): Released all slaves
[  831.474991][T11440] bond16 (unregistering): Released all slaves
[  831.513805][T11440] bond17 (unregistering): Released all slaves
[  831.653005][T31256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6379'.
[  831.679396][ T1101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  832.226531][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  832.421437][T31270] xt_TPROXY: Can be used only with -p tcp or -p udp
[  832.449610][T31270] xt_TPROXY: Can be used only with -p tcp or -p udp
[  832.523021][T31278] netlink: 'syz.7.6384': attribute type 11 has an invalid length.
[  832.523043][T31278] netlink: 132 bytes leftover after parsing attributes in process `syz.7.6384'.
[  832.730997][T11440] IPVS: stopping master sync thread 21730 ...
[  832.934918][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.110302][T31300] netlink: 'syz.1.6386': attribute type 1 has an invalid length.
[  833.266453][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  833.281226][T31300] 8021q: adding VLAN 0 to HW filter on device bond1
[  833.311269][T31300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6386'.
[  833.355125][T31310] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6389'.
[  833.552263][T31296] bond1: (slave veth3): Enslaving as an active interface with a down link
[  833.604554][T31306] mac80211_hwsim hwsim77 wlan1: entered promiscuous mode
[  833.676222][T31306] bond1: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[  833.807666][T31304] pim6reg1: entered promiscuous mode
[  833.807707][T31304] pim6reg1: entered allmulticast mode
[  834.058851][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  834.110570][T31322] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6390'.
[  834.391072][T31322] bond1 (unregistering): Released all slaves
[  835.087646][T31357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6396'.
[  835.194954][T10437] net_ratelimit: 5 callbacks suppressed
[  835.194976][T10437] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.346442][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  835.432192][ T7120] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  835.915378][T31370] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5
[  836.021940][T31371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6399'.
[  836.062727][T31374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  836.063182][T31375] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  836.315980][T19312] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  836.357594][T31382] nbd: must specify at least one socket
[  836.386426][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  836.628033][T31385] ip_tables: iptables: counters copy to user failed while replacing table
[  836.629022][T31385] ip_tables: iptables: counters copy to user failed while replacing table
[  836.633091][T31385] ip_tables: iptables: counters copy to user failed while replacing table
[  837.249393][T31411] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6407'.
[  837.249429][T31411] netlink: 36 bytes leftover after parsing attributes in process `syz.7.6407'.
[  837.569996][T11440] hsr_slave_0: left promiscuous mode
[  837.572591][T11440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  837.572630][T11440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  837.803681][T11440] veth1_macvtap: left promiscuous mode
[  837.803742][T11440] veth0_macvtap: left promiscuous mode
[  837.803932][T11440] veth1_vlan: left promiscuous mode
[  837.807747][T11440] veth0_vlan: left promiscuous mode
[  838.435164][T11440] team0 (unregistering): Port device team_slave_1 removed
[  838.469248][T11440] team0 (unregistering): Port device team_slave_0 removed
[  838.764859][T31432] gretap0: entered promiscuous mode
[  838.765724][T31432] vlan2: entered promiscuous mode
[  839.205904][T31452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  839.328877][T31455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6417'.
[  839.328904][T31455] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6417'.
[  839.415983][T31459] nbd: must specify at least one socket
[  839.642544][T11440] IPVS: stop unused estimator thread 0...
[  840.109393][T31477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6421'.
[  840.466604][    C0] net_ratelimit: 40 callbacks suppressed
[  840.466626][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.470889][ T5717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  840.546636][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  840.550892][   T31] INFO: tas
** replaying previous printk message **
[  840.550892][   T31] INFO: task syz.0.5413:27293 blocked for more than 143 seconds.
[  840.550914][   T31]       Not tainted syzkaller #0
[  840.550924][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  840.550934][   T31] task:syz.0.5413      state:D stack:25808 pid:27293 tgid:27292 ppid:17471  task_flags:0x400140 flags:0x00080002
[  840.550986][   T31] Call Trace:
[  840.550995][   T31]  <TASK>
[  840.551008][   T31]  __schedule+0x17db/0x58f0
[  840.551061][   T31]  ? __pfx___schedule+0x10/0x10
[  840.551091][   T31]  ? schedule+0x90/0x2b0
[  840.551114][   T31]  schedule+0x164/0x2b0
[  840.551136][   T31]  schedule_preempt_disabled+0x13/0x30
[  840.551155][   T31]  __mutex_lock+0x7c1/0x1550
[  840.551182][   T31]  ? __mutex_lock+0x5d4/0x1550
[  840.551208][   T31]  ? nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560
[  840.551238][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  840.551271][   T31]  ? kernel_text_address+0xa5/0xe0
[  840.551295][   T31]  ? __kernel_text_address+0xd/0x30
[  840.551316][   T31]  ? unwind_get_return_address+0x4d/0x90
[  840.551343][   T31]  nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560
[  840.551381][   T31]  ? stack_trace_save+0xa9/0x100
[  840.551402][   T31]  ? __pfx_stack_trace_save+0x10/0x10
[  840.551426][   T31]  ? stack_depot_save_flags+0x33/0x7f0
[  840.551461][   T31]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  840.551510][   T31]  ? kasan_save_track+0x4f/0x80
[  840.551532][   T31]  ? kasan_save_track+0x3e/0x80
[  840.551553][   T31]  ? __kasan_kmalloc+0x93/0xb0
[  840.551576][   T31]  ? __kmalloc_node_track_caller_noprof+0x4b4/0x720
[  840.551599][   T31]  ? __alloc_skb+0x2c1/0x7a0
[  840.551625][   T31]  ? netlink_dump+0x1e7/0xee0
[  840.551646][   T31]  ? __netlink_dump_start+0x589/0x7b0
[  840.551666][   T31]  ? genl_family_rcv_msg_dumpit+0x213/0x310
[  840.551694][   T31]  ? genl_rcv_msg+0x5e1/0x7a0
[  840.551719][   T31]  ? netlink_rcv_skb+0x226/0x4a0
[  840.551740][   T31]  ? genl_rcv+0x28/0x40
[  840.551763][   T31]  ? netlink_unicast+0x7bd/0x940
[  840.551821][   T31]  ? netlink_sendmsg+0x813/0xb40
[  840.551871][   T31]  ? sock_sendmsg_nosec+0x13a/0x180
[  840.551894][   T31]  ? ____sys_sendmsg+0x54e/0x850
[  840.551912][   T31]  ? ___sys_sendmsg+0x2a5/0x360
[  840.551929][   T31]  ? __x64_sys_sendmsg+0x1b1/0x290
[  840.551947][   T31]  ? do_syscall_64+0x166/0x520
[  840.551968][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.552016][   T31]  ? irqentry_exit+0x218/0x920
[  840.552037][   T31]  ? lockdep_hardirqs_on+0x7b/0x110
[  840.552058][   T31]  ? irqentry_exit+0x218/0x920
[  840.552076][   T31]  ? trace_irq_disable+0x3b/0x140
[  840.552111][   T31]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  840.552149][   T31]  genl_dumpit+0x10b/0x1b0
[  840.552181][   T31]  netlink_dump+0x711/0xee0
[  840.552216][   T31]  ? __pfx_netlink_dump+0x10/0x10
[  840.552251][   T31]  ? genl_start+0x497/0x6d0
[  840.552288][   T31]  __netlink_dump_start+0x589/0x7b0
[  840.552337][   T31]  genl_family_rcv_msg_dumpit+0x213/0x310
[  840.552370][   T31]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  840.552398][   T31]  ? genl_get_cmd+0x523/0x960
[  840.552430][   T31]  ? __pfx_genl_start+0x10/0x10
[  840.552455][   T31]  ? __pfx_genl_dumpit+0x10/0x10
[  840.552480][   T31]  ? __pfx_genl_done+0x10/0x10
[  840.552543][   T31]  genl_rcv_msg+0x5e1/0x7a0
[  840.552578][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  840.552605][   T31]  ? __pfx_nfsd_nl_rpc_status_get_dumpit+0x10/0x10
[  840.552648][   T31]  netlink_rcv_skb+0x226/0x4a0
[  840.552670][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  840.552700][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  840.552739][   T31]  ? down_read+0x2be/0x330
[  840.552766][   T31]  genl_rcv+0x28/0x40
[  840.552792][   T31]  netlink_unicast+0x7bd/0x940
[  840.552824][   T31]  netlink_sendmsg+0x813/0xb40
[  840.552864][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  840.552896][   T31]  ? apparmor_socket_sendmsg+0x98/0x360
[  840.552925][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  840.552948][   T31]  sock_sendmsg_nosec+0x13a/0x180
[  840.552976][   T31]  ____sys_sendmsg+0x54e/0x850
[  840.553003][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  840.553033][   T31]  ? import_iovec+0x73/0xa0
[  840.553066][   T31]  ___sys_sendmsg+0x2a5/0x360
[  840.553085][   T31]  ? __lock_acquire+0x747/0x2de0
[  840.553111][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  840.553136][   T31]  ? futex_wait+0x2a2/0x390
[  840.553186][   T31]  ? __fget_files+0x2a/0x420
[  840.553205][   T31]  ? __fget_files+0x3a2/0x420
[  840.553233][   T31]  __x64_sys_sendmsg+0x1b1/0x290
[  840.553258][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  840.553431][   T31]  do_syscall_64+0x166/0x520
[  840.553454][   T31]  ? trace_irq_disable+0x3b/0x140
[  840.553475][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.553515][   T31]  ? clear_bhb_loop+0x70/0xc0
[  840.553540][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.553560][   T31] RIP: 0033:0x7f064659e1d9
[  840.553578][   T31] RSP: 002b:00007f0647461028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  840.553599][   T31] RAX: ffffffffffffffda RBX: 00007f0646825fa0 RCX: 00007f064659e1d9
[  840.553613][   T31] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000004
[  840.553626][   T31] RBP: 00007f0646635888 R08: 0000000000000000 R09: 0000000000000000
[  840.553638][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  840.553650][   T31] R13: 00007f0646826038 R14: 00007f0646825fa0 R15: 00007ffea66f1a48
[  840.553683][   T31]  </TASK>
[  840.553738][   T31] 
[  840.553738][   T31] Showing all locks held in the system:
[  840.553749][   T31] locks held by khungtaskd/31: 1, last CPU#0:
[  840.553763][   T31]  #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  840.553830][   T31] locks held by getty/5371: 2, on CPU#1:
[  840.553850][   T31]  #0: ffff888033cb60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  840.553898][   T31]  #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  840.553974][   T31] locks held by syz.4.5289/26844: 2, on CPU#1:
[  840.553988][   T31]  #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  840.554038][   T31]  #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0
[  840.554090][   T31] locks held by syz.0.5413/27293: 3, on CPU#0:
[  840.554103][   T31]  #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  840.554153][   T31]  #1: ffff88805a2726e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0
[  840.554200][   T31]  #2: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xf0/0x1560
[  840.554252][   T31] locks held by syz.2.5461/27496: 2, on CPU#0:
[  840.554266][   T31]  #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  840.554316][   T31]  #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_set_reqs_doit+0x132/0x1480
[  840.554368][   T31] locks held by syz-executor/27700: 4, last CPU#0:
[  840.554382][   T31]  #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480
[  840.554431][   T31]  #1: ffff888057246540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  840.554475][   T31]  #2: ffff888022714cc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  840.554545][   T31]  #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[  840.554601][   T31] locks held by syz.5.6414/31443: 1, on CPU#0:
[  840.554615][   T31]  #0: ffff88804d293860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330
[  840.554664][   T31] locks held by syz.5.6414/31446: 1, on CPU#0:
[  840.554677][   T31]  #0: ffff88804d293860 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x3e/0x6b0
[  840.554723][   T31] locks held by syz.5.6414/31447: 1, on CPU#1:
[  840.554736][   T31]  #0: ffff88804d293860 (&pipe->mutex){+.+.}-{4:4}, at: anon_pipe_write+0x28f/0x1a30
[  840.554786][   T31] locks held by syz.3.6421/31475: 1, on CPU#1:
[  840.554799][   T31]  #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[  840.554858][   T31] locks held by syz.1.6422/31478: 1, last CPU#1:
[  840.554871][   T31]  #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  840.554921][   T31] locks held by syz.7.6424/31485: 1, on CPU#0:
[  840.554934][   T31]  #0: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00
[  840.554988][   T31] locks held by syz.7.6424/31486: 2, on CPU#0:
[  840.555002][   T31]  #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  840.555051][   T31]  #1: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x890
[  840.555160][   T31] 
[  840.555165][   T31] =============================================
[  840.555165][   T31] 
[  840.555179][   T31] NMI backtrace for cpu 0
[  840.555192][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  840.555212][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  840.555223][   T31] Call Trace:
[  840.555231][   T31]  <TASK>
[  840.555240][   T31]  dump_stack_lvl+0xe8/0x150
[  840.555267][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  840.555294][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  840.555326][   T31]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  840.555356][   T31]  sys_info+0x135/0x170
[  840.555380][   T31]  watchdog+0xfd7/0x1030
[  840.555408][   T31]  ? watchdog+0x1c7/0x1030
[  840.555435][   T31]  kthread+0x38b/0x480
[  840.555455][   T31]  ? __pfx_watchdog+0x10/0x10
[  840.555474][   T31]  ? __pfx_kthread+0x10/0x10
[  840.555497][   T31]  ret_from_fork+0x514/0xb70
[  840.555519][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  840.555539][   T31]  ? __switch_to+0xc89/0x1420
[  840.555567][   T31]  ? __pfx_kthread+0x10/0x10
[  840.555588][   T31]  ret_from_fork_asm+0x1a/0x30
[  840.555622][   T31]  </TASK>
[  840.555647][   T31] Sending NMI from CPU 0 to CPUs 1:
[  840.555726][    C1] NMI backtrace for cpu 1
[  840.555739][    C1] CPU: 1 UID: 0 PID: 31478 Comm: syz.1.6422 Not tainted syzkaller #0 PREEMPT(full) 
[  840.555761][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  840.555772][    C1] RIP: 0010:__hrtimer_run_queues+0x3c4/0xa10
[  840.555804][    C1] Code: df 42 0f b6 04 33 84 c0 0f 85 dd 02 00 00 41 c7 04 24 01 00 00 00 48 89 ef 4d 89 eb 2e e8 94 d0 4b 1e 41 89 c5 42 0f b6 04 33 <84> c0 0f 85 d7 02 00 00 41 c7 04 24 00 00 00 00 4c 8b 74 24 08 0f
[  840.555821][    C1] RSP: 0018:ffffc90000a18e50 EFLAGS: 00000286
[  840.555837][    C1] RAX: 0000000000000000 RBX: 1ffff1100d29555a RCX: ffffffff9b9f5501
[  840.555852][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 00000000ffffffff
[  840.555864][    C1] RBP: ffff88807f9a1538 R08: ffff88807f9a1483 R09: 1ffff1100ff34290
[  840.555879][    C1] R10: dffffc0000000000 R11: ffffed100ff34291 R12: ffff8880694aaad0
[  840.555894][    C1] R13: 0000000000000001 R14: dffffc0000000000 R15: 1ffff110170a50ba
[  840.555908][    C1] FS:  000055558de85500(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000
[  840.555925][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  840.555938][    C1] CR2: 00007f1efe3f6ff8 CR3: 0000000074b3e000 CR4: 00000000003526f0
[  840.555956][    C1] Call Trace:
[  840.555963][    C1]  <IRQ>
[  840.555980][    C1]  hrtimer_run_softirq+0x1e3/0x2e0
[  840.556001][    C1]  handle_softirqs+0x226/0x860
[  840.556029][    C1]  ? do_softirq+0x77/0xd0
[  840.556056][    C1]  ? addrconf_ifdown+0x68a/0x1a30
[  840.556084][    C1]  do_softirq+0x77/0xd0
[  840.556107][    C1]  </IRQ>
[  840.556114][    C1]  <TASK>
[  840.556121][    C1]  __local_bh_enable_ip+0x100/0x140
[  840.556146][    C1]  addrconf_ifdown+0x68a/0x1a30
[  840.556177][    C1]  ? net_generic+0x1e/0x240
[  840.556203][    C1]  ? __pfx_addrconf_ifdown+0x10/0x10
[  840.556232][    C1]  ? net_generic+0x1e/0x240
[  840.556262][    C1]  addrconf_notify+0x1bc/0x1050
[  840.556285][    C1]  notifier_call_chain+0x1a5/0x3d0
[  840.556308][    C1]  unregister_netdevice_many_notify+0x17f9/0x2140
[  840.556353][    C1]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  840.556379][    C1]  ? irqentry_exit+0x218/0x920
[  840.556398][    C1]  ? trace_irq_disable+0x3b/0x140
[  840.556424][    C1]  ? __tun_detach+0xec2/0x1900
[  840.556455][    C1]  unregister_netdevice_queue+0x2f5/0x340
[  840.556480][    C1]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  840.556523][    C1]  __tun_detach+0x1074/0x1900
[  840.556560][    C1]  tun_chr_close+0x10a/0x1c0
[  840.556584][    C1]  ? __pfx_tun_chr_close+0x10/0x10
[  840.556608][    C1]  __fput+0x418/0xa50
[  840.556638][    C1]  task_work_run+0x1d9/0x270
[  840.556661][    C1]  ? __pfx_task_work_run+0x10/0x10
[  840.556687][    C1]  exit_to_user_mode_loop+0x204/0x770
[  840.556708][    C1]  ? rcu_is_watching+0x16/0xb0
[  840.556735][    C1]  do_syscall_64+0x328/0x520
[  840.556755][    C1]  ? trace_irq_disable+0x3b/0x140
[  840.556776][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.556796][    C1]  ? clear_bhb_loop+0x70/0xc0
[  840.556817][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  840.556836][    C1] RIP: 0033:0x7f552879e1d9
[  840.556877][    C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  840.556893][    C1] RSP: 002b:00007ffd75fc3288 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  840.556912][    C1] RAX: 0000000000000000 RBX: 00007ffd75fc3370 RCX: 00007f552879e1d9
[  840.556926][    C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  840.556938][    C1] RBP: 00000000000cd230 R08: 0000000000000001 R09: 0000000000000000
[  840.556949][    C1] R10: 0000001b30a20000 R11: 0000000000000246 R12: 00007ffd75fc33b0
[  840.556963][    C1] R13: 00007f5528a25fac R14: 00000000000cd2b6 R15: 00007f5528a25fa0
[  840.556986][    C1]  </TASK>
[  840.566687][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  841.863043][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  841.872145][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[  841.882189][   T31] Call Trace:
[  841.885461][   T31]  <TASK>
[  841.888381][   T31]  vpanic+0x56d/0xa60
[  841.892364][   T31]  ? __pfx___schedule+0x10/0x10
[  841.897198][   T31]  ? __pfx_vpanic+0x10/0x10
[  841.901697][   T31]  panic+0xc5/0xd0
[  841.905409][   T31]  ? __pfx_panic+0x10/0x10
[  841.909816][   T31]  ? preempt_schedule_common+0x7f/0xd0
[  841.915261][   T31]  ? preempt_schedule_thunk+0x16/0x40
[  841.920627][   T31]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  841.926779][   T31]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  841.932931][   T31]  watchdog+0x1030/0x1030
[  841.937259][   T31]  ? watchdog+0x1c7/0x1030
[  841.941678][   T31]  kthread+0x38b/0x480
[  841.945732][   T31]  ? __pfx_watchdog+0x10/0x10
[  841.950394][   T31]  ? __pfx_kthread+0x10/0x10
[  841.954969][   T31]  ret_from_fork+0x514/0xb70
[  841.959549][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  841.964653][   T31]  ? __switch_to+0xc89/0x1420
[  841.969326][   T31]  ? __pfx_kthread+0x10/0x10
[  841.973903][   T31]  ret_from_fork_asm+0x1a/0x30
[  841.978663][   T31]  </TASK>
[  841.981936][   T31] Kernel Offset: disabled
[  841.986248][   T31] Rebooting in 86400 seconds..