last executing test programs:

3m28.518435604s ago: executing program 4 (id=1079):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xdc, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0xc8, 0x11, 0x0, 0x1, [@nested={0xc2, 0x128, 0x0, 0x1, [@generic="685c4533907e91a798c0cfb1f86f88f5a35221466fb93fa3a5d03c6cb96be3451e16abbcf720c0bc419cffb90e9556384299d3e41a11902852355b189eb373b2993a3a012d7ee914487ba5bfb5f1b61c2617ead1dcf199db742fb560a7d1400354ba9f2d05c23fc2d9d8a138c01ea4b51790c2b8df83a4a44924a10fc877ec873c819e316817e08d3b624c2b9c247695b21afecb0cf9482ef32307b6cebc79e9a023c200ad9c78418bcbf0b1b89e66eb06905d5c206785f372e29001b4eb"]}]}]}, 0xdc}, 0x1, 0x100000000000000, 0x0, 0x42804}, 0x84)

3m28.031226758s ago: executing program 4 (id=1084):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100546c616e000000000c00020000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000)

3m27.460838763s ago: executing program 4 (id=1090):
sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x804) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1800000002060500000000000000000000002200040009"], 0x18}}, 0x0) (async)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101"], 0x40}, 0xfffe) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async)
r1 = socket$kcm(0x21, 0x2, 0x2)
setsockopt$sock_attach_bpf(r1, 0x110, 0x7, 0x0, 0x4) (async)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x72)

3m27.135618903s ago: executing program 4 (id=1095):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xdc, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0xc8, 0x11, 0x0, 0x1, [@nested={0xc2, 0x128, 0x0, 0x1, [@generic="685c4533907e91a798c0cfb1f86f88f5a35221466fb93fa3a5d03c6cb96be3451e16abbcf720c0bc419cffb90e9556384299d3e41a11902852355b189eb373b2993a3a012d7ee914487ba5bfb5f1b61c2617ead1dcf199db742fb560a7d1400354ba9f2d05c23fc2d9d8a138c01ea4b51790c2b8df83a4a44924a10fc877ec873c819e316817e08d3b624c2b9c247695b21afecb0cf9482ef32307b6cebc79e9a023c200ad9c78418bcbf0b1b89e66eb06905d5c206785f372e29001b4eb"]}]}]}, 0xdc}, 0x1, 0x200000000000000, 0x0, 0x42804}, 0x84)

3m27.00103444s ago: executing program 4 (id=1097):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00'})
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_coalesce={0xf, 0x3, 0x7, 0x4, 0x2, 0x1, 0x202a9, 0x8a10, 0x71, 0x2, 0x8, 0xfffffff6, 0x0, 0x800, 0x8, 0x400c, 0x4, 0x9, 0x3, 0x8, 0xff, 0x5, 0x1}})
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480), 0x50)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000540)={'rose0\x00', 0x112})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000005c0)={'rose0\x00', 0x112})
ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x2, 0xe5e1}]})
ioctl$TUNATTACHFILTER(r3, 0x401054d5, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x0, 0x2, 0xe5e1}]})
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r4}, 0x8)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000780)={&(0x7f00000007c0)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000800)=0x20, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x12, 0x3, &(0x7f0000000900)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000980)={'netdevsim0\x00', <r8=>0x0})
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r9, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000b80)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000bc0)=0x4000, 0x4)
bind$xdp(r6, &(0x7f0000000c00)={0x2c, 0x0, r8}, 0x10)
ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000c40)={<r10=>0xffffffffffffffff})
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32=r2, @ANYBLOB="000400005a6dfaf43497c09d7800000200"/29, @ANYRES32=r8, @ANYRES32=r10, @ANYBLOB="010000000100"/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x11, 0x1c, &(0x7f0000000f80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0xfffe}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8, 0x9, 0x20}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r11, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000240)=@ethtool_rxnfc={0x51fbec230593a21, 0x1, 0x3, {0xd, @esp_ip6_spec={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0xaf7, 0x6}, {0x0, @empty, 0x6, 0xe, [0x2]}, @tcp_ip6_spec={@local, @mcast2, 0x4e21, 0x4e20, 0x58}, {0x0, @remote, 0x800, 0x0, [0x400, 0x8]}, 0x4, 0x8}}})

3m26.736997803s ago: executing program 4 (id=1099):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe2d)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="54ae1f0400560625baa700020000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000440)={0x3, 0x7}, 0x2)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c25}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1a}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20028001}, 0x800)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000024bd7000fed9df253200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x825)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

3m11.676340128s ago: executing program 32 (id=1099):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x3, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe2d)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f00000005c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f00000006c0)="54ae1f0400560625baa700020000", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000440)={0x3, 0x7}, 0x2)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0x40c25}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x6, 0x8, 0x1a}, @IFLA_IPTUN_PMTUDISC={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20028001}, 0x800)
sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x14, 0x29, 0x1, 0x70bd27, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x2204c85c}, 0x20040000)
sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000024bd7000fed9df253200000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x825)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)

2m28.732929327s ago: executing program 1 (id=1510):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x15, 0x1, 0x0, 0xfffffffc, {0xe}, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40080)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e)
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$unix(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="a72d4952962f65f76998112b", 0xc}, {&(0x7f0000000380)="b8869dd9fb606c38b5f1e38268a108562d150070", 0x14}], 0x2, 0x0, 0x0, 0x4004001}}], 0x1, 0x4000801)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x5c, r3, 0x1, 0x1070bd28, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'wg1\x00'}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30)

2m28.498582446s ago: executing program 1 (id=1514):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201})
r2 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', <r3=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=@newtfilter={0x60, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x30, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}, @TCA_FLOWER_KEY_TCP_FLAGS_MASK={0x6, 0x48, 0x6}, @TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @remote}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xb}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)

2m27.851425246s ago: executing program 1 (id=1518):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async)
sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000003c0)}], 0x1, &(0x7f00000007c0)=ANY=[@ANYBLOB="2000000000000000940000000200000004004900bc04000002000000", @ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES8=r1], 0x20, 0x40801}, 0x50) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x6, 0xffcb}, 0x8)
bind$bt_rfcomm(0xffffffffffffffff, &(0x7f00000009c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0xa) (async)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) (async)
close(r0) (async)
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={<r2=>r0, &(0x7f0000000000)='\x00', 0x0, &(0x7f0000000040)={@_ha_fsid={[0x2, 0x9]}, {0x8, 0x5, 0x8, 0x7b}}, 0xfb44, &(0x7f0000000080)={@_ha_fsid}, &(0x7f0000000100)=0x5}) (async)
r3 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10) (async)
sendto$inet(r3, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000040), 0x6) (async)
close(0x4)
close(0x3) (async)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000a40)=ANY=[], 0x10448) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x20850, r5, 0x0) (async)
r6 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r6, 0x29, 0x100000000001f, &(0x7f0000000a80)=0x1, 0x4) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000030425bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="0005000000800000300012800b00010062726964676500002000028005002d00812800"], 0x50}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x0, 0x7c, 0x44, &(0x7f0000000180)="d1f1f42842156b74fd739d9c5544b12c52f6568b07ba77c39ec2155dae50ae674060ab6c8345f8ea4eea1e28c76c9733e7ea17af43a052e297f977f4cdaa706064d261b417d72e5157983ca9cedecc54e04f5b3deb3bda3ee68d561184c663cf7cf139b24bc049d7a7a004e61936aeac7a2b48f685456d88c22c5a05", &(0x7f0000000200)=""/68, 0xf, 0x0, 0xaa, 0xe3, &(0x7f0000000280)="27f79309798408bed85d12f5e54de6fdf06d3060fa7978961f91de90c8ff04601559832e3d0e66502f6973fa32ba4fefd0b6172f68f2f5b0f66f4544751947ac00952740fd88054c8f8cd1dd6f49e0e17e3c2304ca5bad9ab013e47339e6453b79b25e27ec12bbbdd930c62a3903d8e325413539f09072304fb09acaa740b64dbd828f209fc0e9a553e729e896654be34e2c89f05a7922db98c83114205a12225d9cab3321220ebb2f8d", &(0x7f00000003c0)="6201b3dab394127f6f825229e4e9ce2e86c207542ce48715cfe00727a712dc667e0d1ab6f395e5a1cc7709144417ac827f1e94e4a0400274b38a9ba038bbda67b94a6b71ee63068f1049fc823aa0806e45559b4b03a523715b99cc9f150a054cb5f6915564fd4ddb779a565306508eb6869e43616e37d4f8c2f1a8eb41e9c2a29caba1e1d9a45c5315fa2c571543ed931931f6e410e9608500fdba800f6e6b97bf62708d4edc140e991bf702cfe3983110d45a92ffe472384966b772cf8af6522910b1c34afbc966029d2f7ac83b54fd46651642f7c2a6436f7b6e964ed9293d88717d", 0x5, 0x0, 0x80}, 0x50) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000640)) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="149df929d6021bb83bea4e6f00000000400062d8ff489789ed4b", @ANYRES32=r1, @ANYBLOB='\n\x00'/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000030000000300"/28], 0x50) (async)
socket$nl_generic(0x10, 0x3, 0x10)

2m27.503642292s ago: executing program 1 (id=1521):
socket$nl_netfilter(0x10, 0x3, 0xc)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0))
r0 = socket(0x1, 0x803, 0x0)
syz_emit_ethernet(0x6a, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa008100000086dd60f53a0284d4b75a73c4aa8ca386af275d29390400303a00fe8000000000000000000000000000bbff0200000000000000000000000000010100907802000000670f0d2900073300fc0100"/102], 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000540)={'syztnl1\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2d, 0x40, 0x9, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}, @private0, 0x80, 0x8, 0x7d1e}})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800"], 0x48)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000007140100"], 0x30}}, 0x94)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000740)={'wlan1\x00', @random="02000000000a"})
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, &(0x7f00000000c0)=0x1, 0x1)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2713, &(0x7f0000000180)=""/1, &(0x7f00000001c0)=0xf002)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x7}]}, 0x1c}}, 0x40001)
sendmsg$NFT_BATCH(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={0x90, r5, 0x1, 0x11e, 0x234, {}, [@TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x3}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xb9, @loopback}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}]}]}, 0x90}}, 0x0)

2m26.836109799s ago: executing program 1 (id=1527):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000840)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000880)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000880)={0xa, 0x4e22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f00000005c0)="00fbff008600000000003271a5bf00", 0x20)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8)
listen(r2, 0x0) (async)
listen(r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000500)={<r4=>0xffffffffffffffff})
sendmmsg$sock(r2, &(0x7f0000003080)=[{{&(0x7f0000000600)=@l2tp={0x2, 0x0, @rand_addr=0x64010102, 0x2}, 0x80, &(0x7f0000003000)=[{&(0x7f0000000680)="ef305cf2b9b876acd4849bd7d247048b105e00dac619693ad4924d5996bfef445f9a3c2a93c6fb685118a15e2d3f4d76aee714ae5fd9596f6aae280097131ac3457644a18b6937cfcb91a29c7210dbf9a89bebb5c8e3d1a8210bfda1018320bc1d42c3d4add78196a9b851b66e4e", 0x6e}, {&(0x7f0000000700)="05c646bd0092cd7c6e9da0428767e258ad04283a3cc52e667f78e6d341e12bbc", 0x20}, {&(0x7f0000000740)="fc885a587264c5452c0a5854dbe10e1bff9b25d28ebd9762c785d2482b51c5782e0a68d3c095e673db95a1ca7ef2219beeef09c52efee5a5fc70bd19e9231414be17a89bc48e25983813c55ce8731b3c184142bbecaffb229f51368739baba49a687ff7edfaba138df716b88b8781652d9740b365dedd93b32714f8cd1ed710ff141d2f54a7f3752151c", 0x8a}, {&(0x7f0000002000)="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", 0x1000}], 0x4, &(0x7f0000003040)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}}], 0x1, 0x800)
splice(r4, 0x0, r3, 0x0, 0x40, 0xe)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000540), &(0x7f0000000580)=0x4) (async)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000540), &(0x7f0000000580)=0x4)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async)
setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8)
mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x50, r0, 0xeb9c6000)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0xe0000000}, [@alu={0x7, 0x1, 0x0, 0x3, 0xb, 0xfffffffffffffff4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000003}}]}, &(0x7f0000000480)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0xe0000000}, [@alu={0x7, 0x1, 0x0, 0x3, 0xb, 0xfffffffffffffff4}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000003}}]}, &(0x7f0000000480)='GPL\x00', 0x7, 0x1000, &(0x7f0000001000)=""/4096, 0x40f00, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r5 = socket$netlink(0x10, 0x3, 0x9)
writev(r5, &(0x7f0000000200)=[{&(0x7f0000000240)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000008c0), 0x3) (async)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000008c0), 0x3)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000030c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003140)={0x4, 0x8, &(0x7f0000003200)=ANY=[@ANYBLOB="18020000000000000000000001000000850000002700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000003240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003280)={r7, 0x0, 0xe, 0x0, &(0x7f0000003300)="0000100000000300000a6e000000", 0x0, 0x57af, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000900)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a3df08cf1f5ef48d"}, 0x38) (async)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000900)=@gcm_256={{0x304, 0x36}, "00001f880000dbaa", "a504eb69a751e9d7e9fb434d1665e900000000ffffff7f00", '\x00\t\x00', "a3df08cf1f5ef48d"}, 0x38)
writev(r0, &(0x7f0000000940)=[{&(0x7f0000000980)="d69926f96e07754f010d70d3b866f9790aeb7910c1e671395bfbfefd240cc7a622c611396497f06f5f379e8db2a92b3a9a3b1cd40239d6246f24641a3fd9bfffd0a3b03d37ff18011127971a14c52f7d1f5643d961349906569913cc591a0442928bf9fa09d252f9d954cab3e88235d0d5692b1f45af55ef5e6fa8f021d0bac15786dde4d920ff2ca05b64591b9529292c0e3237f1c4e74ca4eb5b72b646e223d25f5a9f66bf0f9f9012e65d09a505a4b2b8af69ec787739310eb00174792b1474be163f242fbd48bf655fc5f7536eda4787707f94bfa8991354e8f042269fbd1cad1aae940fd3e2a7818b6f64a959b201260fe167a41b38105f1f8e9f09e2dc6c4eb7edc4186df312191f4ed8fcea1a3cb004969881049ef92deb9bbef9feec6a4ee0c187f0e4f968711226f7a46cc3c01b8ed73b87561284c32cb6106d205895295c022c326acbe8f46cb6a4446dfc0c0000afb38264ec4e77dc7b5947ebc7db4aab6f2f5c1b5edfd03b1a2fafc5b5457d902a69c00474bdc13df982eb94a463798594765ec8f30b566820f841b2ee52903ede89c395d8c1c55c84e76f0574610763758537fe5b0d0b9ed53f4ce6d3d86ffe1713dbd6c1df728131bf308bd0e0f58b70e445d2b6bf729c8aaa73764804dfac9b2daa59be1b8e29f8e088e1266e386cd4e3833bd759c538ce5fdcbb016d7785eaa98a154dfb0a4dbfe064a667319b749dabd4eb2e19c11d8444c446e450e8f38ff168a78274f7c50ad925de396729cc2992b37d6d5a22966f1bc5d81e49828f9282b0fa416f2990dd0ff40924444ae7d15b9c4759c4248032810db202c471b7a1d1ad60ddbf89c814b44b1843fb7e2895b729d166fabe4b95e253c0f6b3555a6d56a1957659decd5f27f755e77b56b7f4c15a3063ac5b4ef0a2ae262fdf804d88cd4d8238177070a8fab740829102cd76dda2c4a6ff58df704a16ec24caa5e0c5a91e3d55f421d8f7ef448e785ed16908e965d4af16a9266ab3f501603a0b14d120393531266763bd5b6534cdcee1c385bc2dd7fa1a7fe8458e0ab20d35a16f5d98cad0e0c3b538ef1442008d61c817eca9b92aa660e1685765e509591fe0056115220e1c3dcac292fe70d9baa2672817bfaeb067e7d4bdbc5d470026c0d7a960e83a4d91c14312d995ba82f5cb633124a15692a1c2fb98f48668a60b4b542b4e7677d558b8e4b3203b63e91f507c5f7cb93ea072f6dfd7a0119f6554f4ff14c117bbc7cb93e65a098ee03f2b449416e25e3a9afee86b04c50494ba1602092df37b176cb427d8125f5dc306bc583c827aba38196b2c842715ec671998b1b8b281f8418f121edcd339b736dec86f75151021c47c1d25303c07a7b4f9d4f6eefbd3c8edda927054a3a856479965d9bfa08b30e92c40878e875bfe0d53875e0cbf4d48510598bf7604d0b4937e14149916f4959725ddeb628a773bfb15d8fd5fdf2ac77f7b0918e1132788f0b6e94eab51e9a6e7d9cd8fd9556d0574b8dd994e0255c2186dcbf611cd9e453f6e6e5e2dab8ce32412a756fa1272b650bbf06d514edbaeb7a38eab10bb79582dcfd8a6c0f1d62361a5ee19d668f8e482473a07440b50e461c0156abce9b0c5efd9cc7dc028a674952922ed2a5575ce66fe89aed4269892587b0a27784913b90db9ff60eadb8990c37131d9a70b936c10c5cb2e0fdd53271a15d8f4f499db6004ab1416da4e69aacaa889d16971b68c782c921dc9e36bb1b73bd6fbf28f63fefd9b752aaee2bd2df95186eebf4445567c7678e527476ed8b32144b1f83782123f8fe4892c839df00cf805f09fe64fe7a1b848b9f55fbf12d2ec1affc35a79bcca7474a96767c9909c2e91b33f4bc61c8951f0f5637d7122dc18ff34f296b0d23a4186be5dd3be829913874bde565ba8f74ca40fcd8b4456b404d65c8ee927b4b6de1cb8843df794d95d03701467205f6187efb9ab2106f8317ee2b9dc696668bd3de9a22f5ccbff94c8a8ea287847f8c6159aa4262111e1c226ea66ff03eb2f515ccaeddff8c8ee24f93e05c06ccf7b601805538b385100651c29158cc747f7562f16478d8b9692c88d0cb8cb95aa7bc6599f142b9b652572953b6f2b73ff96cca3712633ab41a64cb5234200b793f8b9139e7f58a15ed499ad795e001ea1095c38cfb467a202a6f11e4ec8d80d7bde7f1f16e1c4d89e85c56927becf0580848ff0114a3bcb012eb69e6a62a53a30b76b2f9fe556e7a10eb5ee2bb095eeae5b4f1ca08dbc4e95bd25c19f937eab1c108831d2fd50ae0bef260b613d26c220db7c91f038e6062522ca8fdc7b98ae057710e276e5833bf011154bd59b0b95c8eed1fe", 0x67f}], 0x1)

2m25.883005826s ago: executing program 1 (id=1536):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000002900050000000000000000e90e"], 0x14}}, 0x20)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r3, 0x4}}]}, 0xc4}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002"], 0x34}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x58}}, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f00000004c0)=0x80, 0x4)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x4500, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25250000000e0001006e657464657673696d00f7ff0e0002006e657464657673696d3000000f6fd8a8e84362532cba512964c7f2fb220641a0a507a5a527e83c4c52fe1a56ac251f948fe2f171fc5c2f8ad626d21aaf50ed29ffd18ce448eb5806e74d8aee5f43c38c746f5512fc654eadee6312bc36de296c423b1497710000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)

2m10.761535364s ago: executing program 33 (id=1536):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', <r3=>0x0})
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000002900050000000000000000e90e"], 0x14}}, 0x20)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r3, 0x4}}]}, 0xc4}}, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002"], 0x34}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x58}}, 0x0)
r7 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f00000004c0)=0x80, 0x4)
r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x4500, &(0x7f0000000700)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000ffdbdf25250000000e0001006e657464657673696d00f7ff0e0002006e657464657673696d3000000f6fd8a8e84362532cba512964c7f2fb220641a0a507a5a527e83c4c52fe1a56ac251f948fe2f171fc5c2f8ad626d21aaf50ed29ffd18ce448eb5806e74d8aee5f43c38c746f5512fc654eadee6312bc36de296c423b1497710000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804)

6.251342624s ago: executing program 3 (id=2014):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, 0x0, &(0x7f0000000080), 0x20}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000640)={'syzkaller0\x00', @multicast})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000680), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
close(0x3)

6.188850987s ago: executing program 6 (id=2015):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000007000000000000001f00000091116c000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x32600)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000640)={r0, r0}, 0x5)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c000000070a010400000000000000000200000309000100000c00034000"], 0x2c}, 0x1, 0x0, 0x0, 0x240048c4}, 0x800)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x29, 0x6, 0x7, {0xd, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x15}, @empty, 0xffffffff, 0x5}, {0x0, @local, 0x9, 0x3, [0x8, 0x9]}, @udp_ip6_spec={@loopback, @private1, 0x4e2c, 0x4e1e, 0x2}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 0xfffe, 0x1c, [0x9, 0x7]}, 0xffffffffffff7fff, 0x7fff}}})
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0xc, &(0x7f0000000540)=""/195}, 0x23)
r3 = socket$packet(0x11, 0x2, 0x300)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x210000, 0x0)
getsockopt$packet_int(r3, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4)

5.724171783s ago: executing program 3 (id=2019):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket(0x10, 0x3, 0x0) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500070000000500", @ANYRES8=r1], 0x7c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000040)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRES16=r0, @ANYRES64=r0, @ANYRES64=r0], 0x40}}, 0x4000000)

5.571496763s ago: executing program 6 (id=2020):
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4000)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000580)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f0000000940)="66f7", 0x4}, {&(0x7f0000000a00)='l3', 0x7fffef80}, {&(0x7f0000000a40)="5b06c70461fab92b3d952a0a0b5eca7d6b21f62c4f56ea9109a00b742eab4a7fdac90ab7c51a813cc4d693127d10c4e7234944e9410ad19c43ca9751c1b97aca344e5bf77fde23184af0b7e160e7a9a681f6391270dedc2978f7d1b9a913801beaa52e1eedf0ae71021e0d40864fc63603f1d6d94f55d23fb15eebc780292ee4be48a9036dcb83345a4285e043439e95b3f23b6edf199cea092725d6f7fab0f975cc42bd279f5de21d08a38091edbb34b32c6cd53373651fd3343aa6b228a996d957c556694dc3a26b68b38093a92eb192aa973bda1b51c61b6cc2b49a54550085e8d8270d889cefe65f62c975815b1b1208ed"}], 0x3f}], 0x1, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x72}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20040080}, 0x8004)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={0x0}, 0x1, 0x0, 0x0, 0x20004095}, 0x400c0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})
r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r6=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r6, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)

5.184321044s ago: executing program 3 (id=2022):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003ca68ba98fcb3a9e071771787459f25f73a0a7d895cd490f1062902108c0fb5ab3c5f28934973630e8bbcb8c9c16504bd415f6409ddcd60d69cb2887f56430749579e90f3a003f7b2014000b76dfa7e66997566e306eb34d38427d35f03f65f9e954ddaeec160900", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf255c00000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00k\x00<\x00\x00\x00'], 0x24}}, 0x44)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'})
getpid()
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, 0x0, 0x4000)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0x3, 0x2)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7}, 0xc)
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x121000, 0x0)
ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000480)={'syzkaller1\x00', @broadcast})
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xc0041, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000240)=0x90)
write$tun(r9, &(0x7f0000000280)=ANY=[@ANYBLOB="6ab964ac4223"], 0xfdef)
bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0d00000011000000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4624, 0x40000009, @remote, 0x4}, 0x1c)

5.10825007s ago: executing program 2 (id=2024):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x2})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x7, 0xa, 0x4000000, 0x70000000}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
close(r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x1, 0x6, 0x8, 0x4fbee}, 0x13, 0x3, 0x4000003, 0x7, 0x10, 0x2, 0x17, 0x0, 0x5, 0x2, {0x60, 0x8001, 0x428e, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local})
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000500)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', <r7=>0x0})
sendto$packet(r3, &(0x7f0000000580)="05031614d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f00000005c0)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x210c81, 0x0)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_TIMEOUT(r9, 0x0, 0x48a, &(0x7f0000000000)={0x80bf, 0x7, 0xf18}, 0xc)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000280)=0x6)

4.549099419s ago: executing program 6 (id=2026):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x800}) (async)
r3 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000001c0)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) (async)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000580)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'team_slave_1\x00'}) (async)
write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0xffe)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffc}, 0x1c)
listen(r1, 0x0) (async)
shutdown(r0, 0x0)

4.393481743s ago: executing program 2 (id=2027):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x1fffffffffffffcd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000008, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0x1fffffffffffffcd, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000008, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0xa, 0xc, &(0x7f0000001780)=ANY=[], &(0x7f00000017c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000001880)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000)
recvmsg$unix(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000240)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
close(r5) (async)
close(r5)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f00000018c0)={0x0, @in6={{0xa, 0x4e23, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x4}}, 0x3, 0x400}, 0x90)
sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000600)={'veth0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000600)={'veth0\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@newqdisc={0xb0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7fffffffffffffff}]}}]}, 0xb0}}, 0x0) (async)
sendmsg$nl_route_sched(r10, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@newqdisc={0xb0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x7fffffffffffffff}]}}]}, 0xb0}}, 0x0)
sendmsg$inet(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0) (async)
sendmsg$inet(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x128}, 0x0)
recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/4096, 0x1000}, 0x40)
socket$inet6(0xa, 0x802, 0x0)
socket$inet(0x2, 0x3, 0x2) (async)
r13 = socket$inet(0x2, 0x3, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001980)={0xffffffffffffffff, 0x0, 0xd, 0x0, &(0x7f0000001a00)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$inet_mreqsrc(r13, 0x0, 0x27, &(0x7f0000001a40)={@multicast1, @local, @loopback}, 0xc) (async)
setsockopt$inet_mreqsrc(r13, 0x0, 0x27, &(0x7f0000001a40)={@multicast1, @local, @loopback}, 0xc)
getsockopt$inet_buf(r13, 0x0, 0x29, &(0x7f0000001a80)=""/185, &(0x7f0000001b40)=0xb9)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)={0x28, 0x6c, 0x1, 0x70bd26, 0x25dfdc02, "", [@nested={0x10, 0x129, 0x0, 0x1, [@typed={0xa, 0x158, 0x0, 0x0, @str='veth0\x00'}]}, @typed={0x8, 0xa3, 0x0, 0x0, @pid}]}, 0x28}], 0x1, 0x0, 0x35, 0x20004880}, 0xc000) (async)
sendmsg$netlink(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)={0x28, 0x6c, 0x1, 0x70bd26, 0x25dfdc02, "", [@nested={0x10, 0x129, 0x0, 0x1, [@typed={0xa, 0x158, 0x0, 0x0, @str='veth0\x00'}]}, @typed={0x8, 0xa3, 0x0, 0x0, @pid}]}, 0x28}], 0x1, 0x0, 0x35, 0x20004880}, 0xc000)
epoll_create1(0x80000)

3.831155966s ago: executing program 3 (id=2030):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, 0x0, 0x4004090)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x6f41bcbb, @empty, 0x2}, 0x1c)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x3)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e1f, 0xfffffff8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x26}}}, 0x1c)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r7, 0xa7ba)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r8, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r9, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r10, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000500000000000000fcffffff85000000450000009500000000000000be1d6e30f38084fd332143c2ec623b6f"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r11)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0)

3.816596056s ago: executing program 5 (id=2031):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1)
getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x14, 0x0, 0x0)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0)
sendmsg$key(r5, &(0x7f0000000980)={0x0, 0x3, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="020300090a00000000000000000000ba02e3574147de53387ab7bba2b100000e0002000000e006000d000000000000000002000100000004d60000000003000500002000000200"/80], 0x50}}, 0x0)
ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000740)={0x0, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e24, @private=0xa010101}, {0x2, 0x4e20, @multicast1}, 0xc, 0x0, 0x0, 0x0, 0xe, &(0x7f00000007c0)='team_slave_0\x00', 0x5, 0x0, 0x8})
sendmmsg(r3, &(0x7f0000000400)=[{{&(0x7f0000000440)=@xdp={0x2c, 0x8, r2, 0x23}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="5e648d2271ebbbe21946b604e13243d6c65cc320b8", 0x15}], 0x1}}], 0x1, 0x1)
ioctl$XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f0000000540)={0x0, 0xffffffffffffffff, r3, 0x6, 0xfffffffffffffec8, '\x00', {0x5, 0x80, 0x8, 0x0, 0xe, 0x2ff4, 0x5, 0xa2e, {0x3, 0x1f9d}, {0x1, 0x3}, {0x1, 0x6}, 0x5, 0xfffffff7, 0x2a, 0x0, 0x1, 0x6, 0x4, 0x1, 0x1, 0xaf32, '\x00', 0x200, 0x7fff, 0x5, 0x1ff}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@gettaction={0x34, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x48840)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe0000010000000008000100000001"], 0x24}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=@base={0x12, 0xe, 0x8, 0x2, 0x4}, 0x50)
connect$pppl2tp(r6, &(0x7f0000000bc0)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000c00), 0xffffffffffffffff)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c0010"], 0x40}, 0x1, 0x0, 0x0, 0x40801}, 0x820)
r11 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000d00)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xa, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000000000000004000085100000060000001810ff00000000002ea087692253ec8d640366b226b1747b7e1ac68e07e492d28b3177958c256895fe74da4bcfdcc3bccda0754e20fa62bc5f195a1ca71c", @ANYRES32=r11, @ANYBLOB="000000000000000061000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f0000000ec0)='GPL\x00', 0x4}, 0x94)
bind$inet6(r7, &(0x7f0000000f00)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x335, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

3.649114752s ago: executing program 6 (id=2032):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x3, 0x2)
ioctl$sock_ifreq(r0, 0x8990, &(0x7f0000000980)={'bond0\x00', @ifru_names='ip6tnl0\x00'})

3.483902042s ago: executing program 6 (id=2034):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1bf5b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gre={{0x8}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x8}]}}}]}, 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffeeb, &(0x7f0000000300)={&(0x7f0000000140)=@delchain={0x30, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}, {0x0, 0x3}}, [@TCA_RATE={0x0, 0x5, {0xff, 0x8}}]}, 0x30}}, 0x40)

3.024565319s ago: executing program 2 (id=2035):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8)
r1 = socket$inet6(0xa, 0x3, 0xff)
sendto$inet6(r1, &(0x7f00000007c0)="6000000000082b401000000000000000000000000000000000000000013b5c00"/42, 0x2a, 0x20004800, &(0x7f0000000800)={0xa, 0x0, 0x0, @remote}, 0x1c)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff})
close(r2)
r3 = socket$inet6(0xa, 0x3, 0x76)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@private1, 0x0, 0x1, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0xffffffffffffffff, 0x800000, 0x0, 0x0, 0x80000, 0x0, 0x60a, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x8}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x0, 0x0, 0x0, 0x101, 0x8, 0x35ced141}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000840)={{{@in6=@remote, @in6=@mcast1, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x3, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8)
close(r3)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000040)={<r4=>0x0, @in={{0x2, 0x4e20, @multicast2}}, [0x6, 0x100000001, 0x5, 0x5, 0x8, 0x6, 0x5, 0xf3e, 0x1000, 0xffffffffffffff0f, 0x1, 0x5, 0x6, 0x9, 0x80000000]}, &(0x7f0000000140)=0x100)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000240)={r4, 0x84, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x9, @loopback, 0x5}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @rand_addr=0x64010100}, @in6={0xa, 0x4e23, 0x1fffc0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in6={0xa, 0x4e23, 0x1ff, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x3ff}, @in={0x2, 0x4e20, @remote}]}, &(0x7f0000000280)=0x10)

3.023971273s ago: executing program 5 (id=2036):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
sendmsg$inet_sctp(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast2}, @prinfo={0x18, 0x84, 0x5, {0xb3975ac4828b266c, 0x100}}], 0x30, 0xc0}, 0x20000001)
r2 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000100)=0x800001, 0x4)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000002c0)={0x7, 0x1966, 0x5, 0x879, 0x8}, 0x14)
bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)
setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f00000001c0)=0x1, 0x4)
bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x80, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000}, 0x1c)
write$cgroup_pid(r2, &(0x7f00000000c0), 0x12)
pread64(r2, &(0x7f0000000300)=""/4104, 0x1008, 0x4)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00'})

3.011346766s ago: executing program 6 (id=2037):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20000000)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x128}, 0x0) (async, rerun: 64)
recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xfffffe82}, 0x40000002) (async, rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x50) (async)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c010000140001002dbd7000fcdbdf2509014e800c000200080000000000000014000100000000000000000000000000000000002a725624d55e18f54ca5798d3fe7955ef9868c011de6a6d4494d7aba163930e7a6d17e0b2db61f06be12a8fe12bf5df24b2807a60c94c81f539deb8a1f987eb7669e1395c2ce8f7c2854902221ce978006451bd593aa73c50e0dfd544fd4fa321cbe1ddd38f2dfb0cec37543dac9e03b4dc38a9d937e23023a036a8ce5f7a6d9772d2c9b91825cd6f77be8203cbe17d83dbb0590b1ef553211edef640ed1ebbe1b583a2e5ce557c4ec021c723d2022c694102308a8fb6114ab4d007089b6a2816f689a565d4e70637725b2ff732144f7ad7c1b0c00e900d0000000000000000000000f2bfde70df439f62bb4a63485107862d42028fb76eb49ec0b3ad167d1b5d935ad9d77714b30eb4260870f8dd8b7fda805d54b4e3be6ca868607590fa3fa5946fe780450f55d50e636"], 0x11c}], 0x1, 0x0, 0x0, 0x40004}, 0x0) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r5}, 0xc) (async, rerun: 32)
r6 = socket$can_bcm(0x1d, 0x2, 0x2) (async, rerun: 32)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) (async, rerun: 64)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64)
sendmsg$NFT_BATCH(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000500)={<r8=>0xffffffffffffffff}) (async)
r9 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (rerun: 32)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x2, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
r11 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000d80)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000dc0)='./cgroup/cgroup.procs\x00', &(0x7f0000000e00)=[0x0], 0x0, 0x0, 0x3d}}, 0x40)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0xd0000000, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x3d, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x42, 0x0, 0x400000, 0x4000, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20, 0xfffffffc}, {0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x15}, {}, {0x4000, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x80000003}, {0x0, 0xffffffff, 0x0, 0x3, 0x5, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x7, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x5, 0xfffffffc}, {0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3, 0xfffffffe}, {0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x28e, 0x2, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x800, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6, 0x3}, {0x0, 0x12, 0x0, 0x48510}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xcb}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x26, 0x2}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000, 0x200000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0x4e}, {0x0, 0x54e4}, {0x0, 0x101, 0x0, 0x4, 0x0, 0xffffffff}, {0x1, 0x0, 0x0, 0x0, 0x8000}, {0x2f, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x402}, {}, {0x0, 0x2, 0xfffffffd, 0x80000, 0x3}, {}, {0x800000, 0x9, 0x5, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {0x0, 0x80}, {}, {0x0, 0xfffffffd}, {0x6, 0x0, 0x0, 0x0, 0x8}, {0x7f, 0x0, 0xfffffffe, 0xfffffffe}, {0xfff}, {}, {0xffffffff, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x8, 0x20000000}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {0x0, 0x80000000, 0x0, 0x7619, 0x0, 0x6}, {0x5, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7, 0x7f53}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1, 0xf}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000, 0x3, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0xf1, 0x80000000, 0x0, 0x7dff800}, {0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x40}, {0xfffffffe}, {0x0, 0x8, 0x2000000}], [{0x3}, {}, {}, {}, {}, {0x3}, {}, {0x3, 0x1}, {0x2, 0x1}, {}, {}, {0x1}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x3}, {}, {0x1}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x8, 0x1}, {}, {0x1, 0x1}, {0x4}, {}, {0x0, 0x1}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {0x3}, {}, {0x5}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {0x0, 0x1}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {0x6}, {0x2, 0x1}, {}, {}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {}, {0x2}, {0x2}, {}, {}, {0x4}, {0x1}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d80)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x20000)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001dc0)={r11, 0x58, &(0x7f0000001e00)}, 0x10) (async)
sendto(r9, &(0x7f0000000a00)="6800000030000505010000000000000000000000540001805000018009000100676174650000000040000280180002000000000300000072000000040000000000000000001868fdcee8000100080001000000000008000300640000000c000700e8030000000000", 0x68, 0x40000, 0x0, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r8, 0x10f, 0x80, &(0x7f0000000940), 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r1, @ANYRES8=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRES64=r8, @ANYRESOCT=r7], 0x50) (async, rerun: 32)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000a80)={'netpci0\x00', &(0x7f0000000980)=@ethtool_rxfh={0x47, 0x5, 0x7, 0x3, 0x8, 'u^!', 0x7, [0x1, 0x3b, 0x9, 0xd8, 0x7fff, 0x0]}}) (rerun: 32)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000600), 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vcan0\x00', <r12=>0x0})
connect$can_bcm(r6, &(0x7f0000000080)={0x1d, r12}, 0x10) (async)
sendmmsg$sock(r6, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="0100000003000000640000000000000000000000000000000000000000000000000000000000000000000000000000000200000001000000", 0x38}, {0x0}, {&(0x7f0000000340)="3c288d8b3b7d97f8c475ed07c88ca0836243c54dddf9e0f57bfa33a44b9d48f76902f42f22f03e6dd8ce26c87191adc51558ec6f6c4d9098317c377d4fa22032bc971b1f810292ea3dcf6ac06c8903c5", 0x50}], 0x3}}], 0x1, 0x20004090)

2.997939605s ago: executing program 3 (id=2038):
socket$igmp(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="b7000000ff000000bfa300000000000007030000f4ffffff620af0fff8ffffff71a4f0ff000000002d0a0200000000001d400200000000004704000001ed000062030000000000001d440000000000007a0af0ff00ffffffc3030000e10000009f040000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710e4d58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d66a77ac8daab82167606068067500c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00c37dfca3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebba2c598b4fc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923030000000000000014e72ba7a54f0c33d39000d06a59ff616236fd9aa5b4e377184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049ef6a989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7592566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270fa3d0ee281eaa11ad47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c3bfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed93517a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42e54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65807ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c25000000000000000005a7b57f03ca91c11ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6cb5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cdb70f617af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028af0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130b51d6c9b94c5513df2d85e8c01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef670000000000000000ba470bfe62fe2933082149d42e8a00672f0814bf895e3a6dfbc711243f58a817895f5c4eaf7de8411a831ef65508f416ae3fd1db8386f6aae40515273adcff6196bb45476ec0a5279ed223f772aee25947b1f0d275c0e495b050f10a0b5d19b578a2b4096b9df527211bb39a29224c34a517dc344a195697b0c158d3519c04fe7621ebeef0bc369a1431a90c4117bdfe358e0e869e9f3e5443813261c1c3c78ab2584603e4468de7d0dc93691491050666f4ea5f083a1b281ed230569921856befe07538fbf33f43fa4ad583867bee301ae1e2566ae7a7afb7fc54895a2fef928d91a162affb4d373c7628a2871d7d19eaf06ed5f58f799c8ff391d3752b115073702ee257ade173dd2f736ed5939f219ba42f7650b9a262f6ee4af52aba3e669a835555ea1674f89d7f98ee1a1c7f977e0a93fdf91606d01c1a9dacfd4328502948bed0bc9514e4f66846bc1f245aa5abad88d56679092fee01007cade7ee72a49a498d51a26ba5cf0896cd9143d457262976f682bf31833ee99b5301f349dd2815e76a8b9a6cec5e000bd6bdafcb9536379b6cd0351cfe345abb1f"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

2.819051086s ago: executing program 5 (id=2040):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, 0x40, 0x109, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x19}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000740)="2e98d1dc0608000000c59218e7c8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.772840761s ago: executing program 2 (id=2041):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1100000004000000040000001000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000005c8ac8bd000000"], 0x48) (async)
socket$inet6_sctp(0xa, 0x5, 0x84) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async, rerun: 64)
socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
pselect6(0x40, &(0x7f0000000800)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x1, 0x401}, 0x0, &(0x7f0000000840)={0x3ff, 0x0, 0x8, 0x400000f, 0x1, 0x0, 0x7fffffff}, 0x0, 0x0) (async, rerun: 32)
bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffff, 0x3}, 0x6) (rerun: 32)
write(r0, &(0x7f00000008c0)="4000000005000140000000", 0xb) (async, rerun: 32)
socket$kcm(0x29, 0x2, 0x0) (async, rerun: 32)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(r2, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRESOCT=r4, @ANYRESHEX=r3, @ANYRESOCT=r1], 0x24}}, 0xc0d4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
write(r5, &(0x7f00000009c0)="300000001c00010401000000000000002d000000feffff7f8000000105000100260000000a0002000000000000000000300000001c00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000300000001d00010401000000000000002d000000010000008000000105000100280000000a0002000000000000000000", 0x90) (async)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8)
r6 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (rerun: 32)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7, 0x80000}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff86dd6000000000303a0020010000000000000800000000000000ff0200000000000000000000000000010103"], 0x0) (async)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x94489e87720a432, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) (async, rerun: 32)
write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x32600) (async, rerun: 32)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r3, 0x0) (async)
ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000980)={'pimreg1\x00'})
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40840, 0x0)
splice(r9, 0x0, r2, 0x0, 0xf3a, 0x0)

2.691184653s ago: executing program 0 (id=2042):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', <r1=>0x0})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=<r4=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=<r5=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=<r6=>0x0)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x880)
r7 = accept$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14)
setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000002c0)=@req3={0xf1a, 0xcdfb, 0x3, 0x2, 0xb, 0x8000, 0x80000001}, 0x1c)
ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000300)={<r8=>r7, 0x4, 0x3, 0x2})
sendto$packet(r8, &(0x7f0000000340)="ddbb6ebfdd8b6c8806d317637014e3edb4b3e933f13702bbc714f9e8ed84e7b3ea2235f544fe578156989d6ea4b7cc7d64c2b357f25cb2a07c2316d713f6ee3539e48d37aaef834a3e822b5b", 0x4c, 0x40010, &(0x7f00000003c0)={0x11, 0x7, r1, 0x1, 0x5, 0x6, @broadcast}, 0x14)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x15, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, @generic={0x1, 0x5, 0x4, 0x5, 0x7ca}, @generic={0x4, 0xc, 0x4, 0x8, 0xffffffff}, @generic={0xff, 0x9, 0x7, 0x6, 0xee24}, @ldst={0x0, 0x2, 0x6, 0x7, 0xb, 0x50, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x5, 0xf9, &(0x7f0000000500)=""/249, 0x41100, 0x45, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000600)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x6, 0x4, 0xc0}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)=[{0x3, 0x3, 0x8}], 0x10, 0x800}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r9, 0x0, 0x4f, 0x27, &(0x7f0000000780)="5d650faf6d8e1655d9ae568076ef5b13956c71311a59c09e17e3aea1d85c5093fde89e13dbf3da6823e69069da9649a35509da5608d07b0a248ea5306056966e86587da55a92dca23d11bbc26aeab3", &(0x7f0000000800)=""/39, 0x2, 0x0, 0xdc, 0x88, &(0x7f0000000840)="217a1a3749b54eff1b2bf92b37afbeda8950706226bda8d9267202728fa55538f48d55cb22b8f2202993776317ae929d83a86b6ad4b77e7ecb1dea5f57dd0e906090543cff5bf63953673c8cbeea6076a643f31356706c578ec9784a6f2c052ab9043b7834ad9a45a066218d5e14c9ed936a3e88527f4a6bafa3dd944d6653c292811cefecc257c48cac4de34941bfd2167f646bd65124fd7efcb6ebb3fb5d5a9d2be59ab434564af0f90ccf62221d4d6bb5223d1aaa97221dbaab94b8ecc7cfeb80aaf72cab077ac5ac35e422d82cf5cbe050b4fe0625ab01026a0c", &(0x7f0000000940)="fd2a858eb7d5c6c9ff54cf78a8682a0cefc6abf5283fe226d852bee0272b59522a3e858d986e4fc6802edea7fb503f25ab9227558d7ac653d4f60de0fc64469fdd849c51886ba8a101e37a3661ed01a2f1e1f734235532e4ab4e54cce7dbd912947f5b994ba05a1b4d79c72e1286f64f58b4cb268c9f45a49d846aff8ec6a3d9c6d09bc10f1f1200", 0x3, 0x0, 0x800}, 0x50)
r10 = accept4(r7, 0x0, &(0x7f0000000a80), 0x80800)
ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000ac0)={<r11=>r7})
setsockopt$SO_TIMESTAMP(r11, 0x1, 0x40, &(0x7f0000000b00)=0x4, 0x4)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000b40)={{{@in=@remote, @in=@local}}, {{@in=@empty}, 0x0, @in6=@private1}}, &(0x7f0000000c40)=0xe8)
sendmsg$TIPC_NL_LINK_GET(r11, &(0x7f0000000d40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x38, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x240000c1}, 0x84)
sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x3c, r3, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x800)
openat$nci(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET(r8, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x38, 0x1, 0x2, 0x5, 0x0, 0x0, {0x2}, [@CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xc630}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4)
setsockopt(r11, 0x5f, 0xcb, &(0x7f0000000fc0)="7717d25a8c027d8d5f4846eac72eef5c03536598285c7d3695c23bcda97afa7ddd6202ff68c968906fc9cea192bd0ad2cdc14888a273cc0c10672f6881f8a70c283f0369ccba7c0949a1d30b563d3718a1a975ff79c2c18fd8dfca10077608779e90e0c4846a6274731f0a8e67087505883a5b9aad298fcecdce145bf317682e010fb54f44397d1e356c1d78bd9ed59c190ce7f55a1a016b9b59dc91c204d3a3459d30dfb669d449dab44ce9097269ed40c7e0cc17824c0f73c1037b7040c9cacf39999d1d33d826", 0xc8)
r12 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r10, 0x84, 0x1a, &(0x7f00000010c0)={<r13=>0x1, 0x1000, "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"}, &(0x7f0000002100)=0x1008)
getsockopt$inet_sctp_SCTP_ECN_SUPPORTED(r12, 0x84, 0x82, &(0x7f0000002140)={r13, 0x8}, &(0x7f0000002180)=0x8)
bind$nfc_llcp(r11, &(0x7f00000021c0)={0x27, r4, 0x1, 0x6, 0xa, 0x2, "547708d9b0c6f7b830e38a32ae102eb53f880fd4c195c5ee881c3ee023751c4210690621db32b0af8067443b014c268f51077655620587bf0e770983fc6d0f", 0x26}, 0x60)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r10, 0x10e, 0x1, &(0x7f0000002240)=0x14, 0x4)
sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000002480)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002440)={&(0x7f00000022c0)={0x174, 0x15, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x81, 0x8, "90908c5859f1b719130fc7e8f48c81740ffd505a1eee907b6b4c3fdd9c038113928844b726514966263d500ab52256e7e8f2ee85ae4372fc049791353c9914ee61a21f513ad9e8028828c71726ed287e085f70d6cb8236b1cfd382ff992ee349380de895d94606a6caa7615cad5012f764b4eedfff1c83bf2ada77a910"}, @NFTA_OBJ_USERDATA={0x24, 0x8, "de6525b9b2d4617a7bc405194c4957773b01e4c5386fb8ee638bceb2847c3fb6"}, @NFTA_OBJ_USERDATA={0x67, 0x8, "e6d83d1ede2b28d64e4fc2dc4504294abf8e995513cf0a2469f634dfe442bad1d80b6ae6c44cf80cf90d97674b0a75c274134b5a6dcb43e4325fddb64b6acfe27b1a379a417d758d8a00df0d812c3e5bc697c6a9080853b3858d48054a1261156e39ca"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x174}, 0x1, 0x0, 0x0, 0x801}, 0x4001)
bind$inet6(r8, &(0x7f00000024c0)={0xa, 0x4e22, 0xfffffff8, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}, 0x1c)

2.636519631s ago: executing program 3 (id=2043):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000700)=ANY=[@ANYBLOB="000086dd0500e1fd08005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x1, <r3=>0x0}, 0x8)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4}, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000540)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50)
r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r3, 0x4)
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r6}, 0x8)
r8 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f00000000c0)=0x9, 0x4)
setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0)
bind$can_raw(r8, &(0x7f0000000100), 0x10)
read(r7, &(0x7f00000001c0)=""/185, 0xb9)
setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, 0xfffffffffffffffe, 0x0)
read(r7, 0x0, 0x60)
r9 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000029c0)={'ip6tnl0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002a80)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x5}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x5}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd2d4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)
sendmsg$nl_generic(r7, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/8612], 0x21a4}, 0x1, 0x0, 0x0, 0x4}, 0x2c000881)
ioctl$NS_GET_USERNS(r7, 0xb701, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r0, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0)

2.51373038s ago: executing program 5 (id=2044):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000419500"/28], 0x16)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b400000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000003f00000000000000850000002300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0}, 0x94)

2.474022678s ago: executing program 0 (id=2045):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000003e0007012cbd7006facbdf25037c00000400c380100001800c", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0xc111}, 0xc000) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f00000008c0), 0xffffffffffffffd2}, 0x48)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x1c, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000940)=0x10)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'geneve0\x00'}) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f00000009c0)=@assoc_value={<r3=>0x0}, &(0x7f0000000a00)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={r3, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000000b00)=0x9c) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) (async)
splice(r4, 0x0, r5, 0x0, 0x2, 0xe)

2.240707394s ago: executing program 5 (id=2046):
r0 = socket(0x29, 0x2, 0x4)
socket$kcm(0x10, 0x400000002, 0x0)
r1 = socket$tipc(0x1e, 0x2, 0x0)
connect$tipc(r1, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10)
sendmmsg$inet(r1, &(0x7f0000002f40)=[{{0x0, 0x15, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x12b, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000014c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd700000100000010000000c00020003000000000000001c0007800c00018008000100", @ANYRES32=r3, @ANYBLOB="0c00018008000100", @ANYRES32=r3, @ANYBLOB="d99d2f208f35c03d2152190757a88ac07c085bdb58aecbcbf0545195e5b934ea6bbce05ca4145744a57b7a81fb8b267019b64c3e0cc09bebcfdf1a940fe659544b324b7d6691b82a1288d3f5e02c2ce1c47529f7b1de96e527cf7df9445248a3d6ce09cfd6ef25af56b117b5994981cebad1abe334ad4c54880e76cb1b210307c346c7e4d51e50a11b39a6554ae6e73c80bf8e2c93ae9a49fe9cb3e26da6b10a78cc71fcd961316bb999b2c1841752f7022a85b8b7abac78dd697f1c27ffb8a15faf1a1b76efff30679c7ce7ada7c8a57d84027befd10d6289b15af73a307b9deebb58f03fc6bb4c"], 0x3c}}, 0x400400c)
r6 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x20008040)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r8 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r7, 0x4)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf0b, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4000000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32, @ANYBLOB="1000018004000480080001"], 0x28}}, 0x0)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0x4, 0x4)
sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)=ANY=[@ANYRESHEX=r8], 0x1c}, 0x1, 0x0, 0x0, 0x4c050}, 0x40000)
recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f00000010c0)=""/204, 0xcc}, {&(0x7f00000011c0)=""/228, 0xe4}], 0x2}}], 0x1, 0x26022, 0x0)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r10, 0x84, 0x1, 0x0, 0x0)
r11 = socket$inet6(0xa, 0x3, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa, 0x0, 0x0, 0x87}, {0xec, 0x8000000000000000, 0x1, 0x6811221b, 0x1d26, 0x8000000000010001, 0x200000200000003, 0x100000000}, {0x7ae, 0x1, 0x6, 0x7}, 0x6, 0x80, 0x1, 0x0, 0x6, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x6c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x44}, 0x0, 0x3, 0x2, 0x0, 0x9}}, 0xe8)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8)
setsockopt$RDS_GET_MR_FOR_DEST(r12, 0x114, 0x7, &(0x7f0000000180)={@vsock={0x28, 0x0, 0x0, @local}, {0x0}, 0x0, 0x12}, 0xa0)
connect$inet6(r11, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c)

1.40237595s ago: executing program 0 (id=2047):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000040)="60000000100001000100000000000000000000000000000000000000000100000900030063616e3000000000340012800800010063616e0028000280240005006e6fb4e214c67e7f819e54bfa00da1138dd1b5ca1142058ecd79d70b46e0f965", 0x60)
ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'pim6reg0\x00', {0x2, 0x4e22, @remote}})

794.4727ms ago: executing program 2 (id=2048):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000003"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x13, &(0x7f0000000040)=@raw=[@ldst={0x0, 0x3, 0x4, 0x6, 0x5, 0x40, 0xfffffffffffffffc}, @ldst={0x1, 0x1, 0x2, 0x0, 0xd, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}, @generic={0x4, 0x2, 0xf, 0xfffb, 0x9}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94)
pipe(&(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r3)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', <r4=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r4, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0)
splice(r2, 0x0, r3, 0x0, 0x8201, 0x9)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

692.505511ms ago: executing program 0 (id=2049):
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14afda63af2959ded02f77951ce0cb4561000000", @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8090)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000010000000000000000000085000000a000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f809ffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r4, r2, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30)
bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd16fe9f39432cce2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
syz_emit_ethernet(0xfe4f, &(0x7f0000000cc0)=ANY=[], 0x0)
ioctl(r0, 0x89e1, &(0x7f00000000c0)='lapb0')
socket(0xa, 0x1, 0x0)
r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r6)
ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000240))
r7 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x7, 0xa, &(0x7f00000003c0)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000079004001000000001800000000fd000000000000000000009500000000000000950000000000000001951d1ec378d31b5963cd68936d326a54b87defddaed300a13ac670874ee9635031e8d455a25090b8e91ca26d1fc7c396e50d4f01fbbb8a39ed394dff733351e043fa96826841ebd9d4208024b5b21080d4a92d46e31e67f5d2"], &(0x7f0000000480)='GPL\x00', 0x2, 0xee, &(0x7f00000004c0)=""/238, 0x41100}, 0x25)
write$nci(r5, &(0x7f0000000cc0)=ANY=[@ANYBLOB="7000094914af3799e0aeb37e285b0c069a9ea56cc32385f052189ae1371e63a09f22446cb6fcde091b83c0c3db261a1b93bd42ddc19021583a2c961a0ca7640e642a883feb0e95849becb00d8384b5ac42b32068fb3c1ab8252d40b3ddf3572ac3e6c95ffc7983196c58dfe698799b4ad17a7e4e2fa5b20f10e0b5b6f397b01f8f08cf8ad60b8fc4f17a238dc70bc468d4fd2786a0700400519a7366175f16c2fe08f9bea1f416e2fab6d792a5dc49e3e29a2b60b609a4c300"/195], 0xc)
write$nci(r5, &(0x7f00000006c0)=ANY=[@ANYBLOB="400109"], 0x87)
socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x12c}, 0x1, 0x0, 0x0, 0x1}, 0xc0958bbd2117fe68)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0xaf}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xd}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x240148c4}, 0x0)
sendmsg$IEEE802154_LLSEC_DEL_DEV(r6, &(0x7f00000009c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a80)={0x20, 0x0, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x20}, 0x1, 0x0, 0x0, 0xc080}, 0x20000880)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @multicast1}, &(0x7f0000000b00)=0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40))
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)

691.883836ms ago: executing program 5 (id=2050):
r0 = socket(0xa, 0x3, 0xff)
socket$rds(0x15, 0x5, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
unshare(0x22020600)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2c, &(0x7f0000000580)=0xbe, 0x4)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000700)={@map, 0x24, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2f01, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10)
sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a300000000014000480080001400000000308000240000000004c000000060a010400000000000000000200000a0900010073797a30000000000900020073797a3000000000200004801c0001800a00010071756575650000000c000280060001400000000014000000"], 0xd4}}, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000002030101000000000000010001000002090002000000000002000000"], 0x28}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100))
socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))

487.164205ms ago: executing program 2 (id=2051):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000340)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x77}]}, &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0x5001})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', 0x1})
write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB="03031b003000320006006300000e000000ff00000000000000000000ffffac141417ff02"], 0x76)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000010429bd70000000000000000200", @ANYRES32=0x0, @ANYBLOB="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"], 0x44}}, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0x5, &(0x7f0000000600)=ANY=[@ANYBLOB="b702000000000000b703000000000000850000007c000000b70000000100000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x20, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @u64=0x7}, @generic="f400a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x114}], 0x1}, 0x0)

324.428463ms ago: executing program 0 (id=2052):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000002561114a0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={<r1=>r0, &(0x7f0000000040)='\x00\x00', 0x141400, &(0x7f0000000080)={@_ha_fsid={[0x80000000, 0x4]}, {0x9, 0x3, 0x8, 0x9}}, 0x0, &(0x7f0000000280)={@_ha_fsid}, &(0x7f0000000180)=0x5})
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0xf0, 0x378, 0xffffffff, 0x268, 0xf0, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @ipv4=@broadcast, @port=0x4e21, @port=0x4e22}}}, {{@uncond, 0x0, 0x118, 0x178, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x0, 0x1, [0x0, 0xdb3, 0x2, 0x8, 0x6, 0x5, 0xff, 0x3, 0x372e, 0xae01, 0x6, 0x200, 0x5, 0x2, 0x200, 0x7fff], 0xc}}, @common=@hl={{0x28}, {0x2, 0x5}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0xc}, [0xff000000, 0x0, 0x0, 0xffffff00], 0x4e23, 0x4e24, 0x4e23, 0x4e23, 0x3, 0x6, 0xff, 0xfe4b, 0x2}}}, {{@ipv6={@mcast1, @dev={0xfe, 0x80, '\x00', 0x1b}, [0xff, 0x0, 0xffffffff], [0xff, 0xff, 0xff000000, 0xffffffff], 'wg0\x00', 'wlan0\x00', {}, {}, 0x3c, 0x6, 0x3, 0x2}, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x20}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x5, 0x4, 0x81, 0x7, 0x3307, 0x3, 0xffff]}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d6, 0x4d5], 0x10001, 0x2, 0x3}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x3e03}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0)

0s ago: executing program 0 (id=2053):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4040090)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="f1", 0x1}], 0x1}, 0x40)
ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2})
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
r6 = socket$kcm(0x29, 0x5, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000130006000000850000006100000085000100070000009500000000000000a4d17bfd12dc5c64507749cf50cf374fde2b73a4fee1cb33689f39c28d9ab54cf361e016516b6d23f6ca2d48"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, @sched_cls=0x36, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sendfile(r6, r7, 0x0, 0xffffffff000)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="3f713da207af717f0c5093ff374fab062388a190874c355b0eafe13bf7a448a6201a662ed21e005abcb3c5631ca5988d2b1300b0ce34e71b26da95cf1c197aa39b8ba4d92d44738fa0a1d763966ff31f8cfc10bf7ab052f41834", @ANYRES16=r8, @ANYBLOB="7961fdffffff0004000000000000000099006c910000e02425a0af74e42b92d4c3b9adf5bfc424a4484b7b9ce94379d9edc4229361d1c68a489b6c9b349923dd4979a8cd2d50803d4a17fd197be907317cc24664b3fa328d7c5359c8037e1e9dc55703cd4c0e83cd20bc50285d697570b3828de9c44e6886c73ff36721fc1db017c42ac6b892ac1d"], 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054)
sendmsg$NFT_BATCH(r5, &(0x7f0000000f00)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x81000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x658}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
r9 = socket$kcm(0x29, 0x5, 0x0)
select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x2})
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0)
write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$AUTOFS_IOC_CATATONIC(r4, 0x9362, 0x0)

kernel console output (not intermixed with test programs):

ength.
[  238.981112][T10033] netlink: 32 bytes leftover after parsing attributes in process `syz.0.989'.
[  239.041053][T10038] xfrm0: entered allmulticast mode
[  239.052491][T10038] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  239.084332][T10038] dvmrp0: entered allmulticast mode
[  239.085670][T10038] dvmrp0: left allmulticast mode
[  239.204899][T10043] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  239.282803][T10046] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  239.287478][T10050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.994'.
[  239.287506][T10050] netlink: 28 bytes leftover after parsing attributes in process `syz.0.994'.
[  239.287520][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.994'.
[  239.404453][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.995'.
[  239.735703][T10078] netlink: 'syz.2.1001': attribute type 1 has an invalid length.
[  239.735725][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1001'.
[  239.740594][T10078] sctp: [Deprecated]: syz.2.1001 (pid 10078) Use of int in max_burst socket option.
[  239.740594][T10078] Use struct sctp_assoc_value instead
[  239.924224][T10085] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  240.309343][T10102] No such timeout policy "syz0"
[  240.318898][T10102] ip_tables: iptables: counters copy to user failed while replacing table
[  240.319289][T10102] ip_tables: iptables: counters copy to user failed while replacing table
[  240.319628][T10102] ip_tables: iptables: counters copy to user failed while replacing table
[  240.319956][T10102] ip_tables: iptables: counters copy to user failed while replacing table
[  240.358611][T10102] ip_tables: iptables: counters copy to user failed while replacing table
[  240.358976][T10102] ip_tables: iptables: counters copy to user failed while replacing table
[  240.360546][T10102] ip_tables: iptables: counters copy to user failed while replacing table
[  240.360951][T10102] ip_tables: iptables: counters copy to user failed while replacing table
[  240.610183][T10110] pim6reg: entered allmulticast mode
[  240.611775][T10107] pim6reg: left allmulticast mode
[  240.760034][T10112] batadv0: entered promiscuous mode
[  240.761750][T10112] macvtap1: entered promiscuous mode
[  240.779658][T10112] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  240.792355][T10112] batadv0: left promiscuous mode
[  241.138398][T10128] batadv0: entered promiscuous mode
[  241.138649][T10128] macsec3: entered promiscuous mode
[  241.139661][T10128] macsec3: entered allmulticast mode
[  241.139678][T10128] batadv0: entered allmulticast mode
[  241.141537][T10128] 8021q: adding VLAN 0 to HW filter on device macsec3
[  241.142567][T10128] batadv0: left allmulticast mode
[  241.179948][T10128] batadv0: left promiscuous mode
[  241.637818][T10141] syzkaller1: entered promiscuous mode
[  241.637842][T10141] syzkaller1: entered allmulticast mode
[  242.956309][T10201] netlink: 'syz.1.1029': attribute type 8 has an invalid length.
[  242.957974][T10202] netlink: 'syz.2.1030': attribute type 83 has an invalid length.
[  242.974476][T10206] netlink: 'syz.2.1030': attribute type 83 has an invalid length.
[  243.318945][T10217] __nla_validate_parse: 8 callbacks suppressed
[  243.318965][T10217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1034'.
[  243.614197][T10226] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1036'.
[  243.617201][T10224] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1036'.
[  244.789630][T10249] net_ratelimit: 25 callbacks suppressed
[  244.789650][T10249] IPVS: sed: UDP 224.0.0.2:0 - no destination available
[  245.093799][T10263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1045'.
[  245.212207][T10274] pimreg: entered allmulticast mode
[  245.353972][T10273] pimreg: left allmulticast mode
[  245.563121][T10288] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1052'.
[  245.563594][T10289] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1052'.
[  245.781880][T10286] syzkaller0: entered promiscuous mode
[  245.781907][T10286] syzkaller0: entered allmulticast mode
[  246.449177][T10316] Bluetooth: hci0: unsupported parameter 5135
[  246.449200][T10316] Bluetooth: hci0: unsupported parameter 65
[  246.449230][T10316] Bluetooth: hci0: unsupported parameter 5135
[  246.449242][T10316] Bluetooth: hci0: unsupported parameter 65
[  247.098759][T10317] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  247.195926][T10323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  247.443866][T10338] Set syz1 is full, maxelem 1029 reached
[  250.297653][T10335] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  250.527382][T10382] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  250.527419][T10382] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  250.527456][T10382] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  250.638876][T10384] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1067'.
[  250.835817][   T40] smbdirect: ib_dev[syz1] removed
[  250.864134][T10382] siw: device registration error -19
[  250.972611][T10395] hsr0: entered promiscuous mode
[  251.122226][T10397] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  251.282062][T10412] netlink: 'syz.0.1074': attribute type 1 has an invalid length.
[  251.310900][T10414] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1074'.
[  251.481520][T10407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1073'.
[  251.485735][T10405] syzkaller0: entered promiscuous mode
[  251.485913][T10405] syzkaller0: entered allmulticast mode
[  251.581722][T10420] 8021q: adding VLAN 0 to HW filter on device bond2
[  251.597768][T10420] bond2: entered allmulticast mode
[  251.614310][T10420] bond0: (slave bond2): Enslaving as a backup interface with a down link
[  251.829805][T10433] netlink: 'syz.0.1077': attribute type 10 has an invalid length.
[  251.829826][T10433] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1077'.
[  252.400273][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'.
[  252.459603][T10454] 8021q: adding VLAN 0 to HW filter on device bond5
[  252.593459][T10462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1084'.
[  252.672995][T10464] netlink: 'syz.2.1085': attribute type 4 has an invalid length.
[  252.673017][T10464] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.1085'.
[  252.845703][T10468] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1086'.
[  253.113903][T10486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'.
[  253.290338][T10496] Bluetooth: hci0: unsupported parameter 5135
[  253.290362][T10496] Bluetooth: hci0: unsupported parameter 8192
[  253.290374][T10496] Bluetooth: hci0: unsupported parameter 5135
[  253.290385][T10496] Bluetooth: hci0: unsupported parameter 8192
[  253.389315][T10500] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  254.038467][T10521] netlink: 'syz.3.1102': attribute type 1 has an invalid length.
[  254.081750][T10521] batman_adv: batadv0: Adding interface: dummy0
[  254.081767][T10521] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  254.081796][T10521] batman_adv: batadv0: Interface activated: dummy0
[  254.166287][T10521] batadv0: mtu less than device minimum
[  254.167906][T10521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  254.169386][T10521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  254.170898][T10521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  254.172441][T10521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  254.174007][T10521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  254.175493][T10521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  254.176947][T10521] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  254.180442][T10529] netlink: 'syz.3.1102': attribute type 10 has an invalid length.
[  254.180460][T10529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1102'.
[  254.316518][T10529] batadv0: entered promiscuous mode
[  254.316700][T10529] batadv0: entered allmulticast mode
[  254.319992][T10529] bridge0: port 3(batadv0) entered blocking state
[  254.322709][T10529] bridge0: port 3(batadv0) entered disabled state
[  254.349129][T10529] batadv0: failed to initialize vlan filtering on this port
[  254.527756][T10533] syzkaller0: entered promiscuous mode
[  254.527938][T10533] syzkaller0: entered allmulticast mode
[  254.562417][T10533] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  254.619888][T10536] syzkaller0: left promiscuous mode
[  254.622054][T10536] syzkaller0: left allmulticast mode
[  254.757628][T10532] tipc: Resetting bearer <eth:syzkaller0>
[  254.797783][T10532] tipc: Disabling bearer <eth:syzkaller0>
[  254.962999][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  255.130764][T10558] bond6: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[  255.144484][T10558] bond6 (unregistering): Released all slaves
[  255.338578][T10568] trusted_key: syz.0.1117 sent an empty control message without MSG_MORE.
[  255.559231][T10572] syzkaller0: left promiscuous mode
[  255.559411][T10572] syzkaller0: left allmulticast mode
[  255.780741][T10582] __nla_validate_parse: 9 callbacks suppressed
[  255.780759][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1123'.
[  255.780781][T10582] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1123'.
[  255.818758][T10582] netlink: 'syz.3.1123': attribute type 1 has an invalid length.
[  256.245802][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  256.417222][T10606] xt_connbytes: Forcing CT accounting to be enabled
[  256.936208][T10629] bond6: entered promiscuous mode
[  257.410033][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1139'.
[  257.429899][T10647] sctp: [Deprecated]: syz.1.1138 (pid 10647) Use of struct sctp_assoc_value in delayed_ack socket option.
[  257.429899][T10647] Use struct sctp_sack_info instead
[  257.785847][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'.
[  257.864952][T10663] netlink: 'syz.1.1144': attribute type 4 has an invalid length.
[  257.889950][T10669] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  257.899316][T10665] tipc: Resetting bearer <eth:syzkaller0>
[  257.908491][T10661] tipc: Disabling bearer <eth:syzkaller0>
[  258.556813][   T30] audit: type=1800 audit(1793015088.352:7): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1153" name="memory.events" dev="tmpfs" ino=1338 res=0 errno=-22
[  258.560484][   T30] audit: type=1804 audit(1793015088.352:8): pid=10699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1153" name="/newroot/260/memory.events" dev="tmpfs" ino=1338 res=1 errno=0
[  258.699941][T10701] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'.
[  258.984741][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1157'.
[  259.392141][T10754] xt_l2tp: v2 doesn't support IP mode
[  259.701651][T10765] syzkaller1: entered promiscuous mode
[  259.701675][T10765] syzkaller1: entered allmulticast mode
[  260.415771][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'.
[  260.415847][T10790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1173'.
[  263.349291][T10807] batman_adv: batadv0: Adding interface: syzkaller0
[  263.349309][T10807] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  263.349337][T10807] batman_adv: batadv0: Interface activated: syzkaller0
[  263.349353][T10807] net_ratelimit: 17 callbacks suppressed
[  263.349363][T10807] batadv0: mtu less than device minimum
[  263.350868][T10807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  263.352328][T10807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  263.353726][T10807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  263.355097][T10807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  263.356440][T10807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  263.357767][T10807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  263.359126][T10807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  263.360489][T10807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  263.361859][T10807] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  263.514584][T10811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1175'.
[  263.606041][T10805] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1175'.
[  263.851975][T10828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1181'.
[  263.851998][T10828] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1181'.
[  263.933095][ T1947] block nbd0: Possible stuck request ffff888028507000: control (read@0,1024B). Runtime 60 seconds
[  263.933138][ T1947] block nbd0: Possible stuck request ffff8880285071c0: control (read@1024,1024B). Runtime 60 seconds
[  263.933163][ T1947] block nbd0: Possible stuck request ffff888028507380: control (read@2048,1024B). Runtime 60 seconds
[  263.933187][ T1947] block nbd0: Possible stuck request ffff888028507540: control (read@3072,1024B). Runtime 60 seconds
[  264.773422][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'.
[  264.773508][T10863] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1192'.
[  264.773541][T10863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1192'.
[  264.827375][ T4997] udevd[4997]: worker [9035] /devices/virtual/block/nbd0 is taking a long time
[  264.888303][T10863] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1192'.
[  264.888326][T10863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1192'.
[  264.897557][T10863] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1192'.
[  265.183545][T10877] Bluetooth: hci0: unsupported parameter 5135
[  265.183567][T10877] Bluetooth: hci0: unsupported parameter 8192
[  265.183579][T10877] Bluetooth: hci0: unsupported parameter 5135
[  265.183590][T10877] Bluetooth: hci0: unsupported parameter 8192
[  267.307400][T10930] Bluetooth: hci0: Invalid link key type 28 for 66:55:44:33:22:11
[  267.609656][T10940] x_tables: duplicate underflow at hook 2
[  267.915795][T10966] unsupported nlmsg_type 40
[  268.380911][T10980] net_ratelimit: 10 callbacks suppressed
[  268.380931][T10980] ip_tables: iptables: counters copy to user failed while replacing table
[  268.461493][T10976] bond3: entered allmulticast mode
[  268.461982][T10976] 8021q: adding VLAN 0 to HW filter on device bond3
[  268.593611][   T30] audit: type=1800 audit(1793015098.392:9): pid=10973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1221" name="memory.events" dev="tmpfs" ino=1252 res=0 errno=-22
[  268.970528][T10996] geneve1: entered promiscuous mode
[  269.182536][ T5628] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  269.195888][ T5628] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  269.202850][ T5628] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  269.213841][ T5628] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  269.215149][ T5628] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  269.272780][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  269.279630][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  269.281602][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  269.302413][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  269.303901][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  269.415636][T11006] syzkaller1: entered promiscuous mode
[  269.415656][T11006] syzkaller1: entered allmulticast mode
[  269.441407][T11006] IPVS: set_ctl: invalid protocol: 59 127.0.0.1:20001
[  269.493596][T11006] __nla_validate_parse: 11 callbacks suppressed
[  269.493614][T11006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1234'.
[  269.998515][T11045] syzkaller0: entered promiscuous mode
[  269.998539][T11045] syzkaller0: entered allmulticast mode
[  270.206951][T10997] rxe_eth0 speed is unknown, defaulting to 1000
[  270.573123][T11060] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1243'.
[  270.579868][T11061] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1243'.
[  270.608973][T11060] bridge4: entered promiscuous mode
[  270.689273][T11063] Bluetooth: MGMT ver 1.23
[  270.744088][T11061] bridge5: entered promiscuous mode
[  271.362906][ T5630] Bluetooth: hci5: command tx timeout
[  271.751052][T11081] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1246'.
[  272.221932][T10997] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.222612][T10997] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.238608][T10997] bridge_slave_0: entered allmulticast mode
[  272.240706][T10997] bridge_slave_0: entered promiscuous mode
[  272.263809][T10997] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.263930][T10997] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.265611][T10997] bridge_slave_1: entered allmulticast mode
[  272.268915][T10997] bridge_slave_1: entered promiscuous mode
[  272.287573][T11105] netlink: 'syz.1.1253': attribute type 1 has an invalid length.
[  272.335489][T10997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.338917][T10997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  272.516934][T11112] tipc: New replicast peer: 172.20.20.187
[  272.518597][T11112] tipc: Enabled bearer <udp:syz0>, priority 10
[  272.589489][T10997] team0: Port device team_slave_0 added
[  272.607063][T10997] team0: Port device team_slave_1 added
[  272.855272][T11121] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1258'.
[  272.949423][T10997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  272.949440][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  272.949464][T10997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  273.009311][T10997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  273.009328][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  273.009353][T10997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  273.060325][T11122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1258'.
[  273.138574][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1259'.
[  273.443052][ T5630] Bluetooth: hci5: command tx timeout
[  273.459040][   T30] audit: type=1800 audit(1793015103.252:10): pid=11140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1261" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1204 res=0 errno=-22
[  273.589619][T10997] hsr_slave_0: entered promiscuous mode
[  273.590623][T10997] hsr_slave_1: entered promiscuous mode
[  273.591283][T10997] debugfs: 'hsr0' already exists in 'hsr'
[  273.591302][T10997] Cannot create hsr debugfs directory
[  273.694611][T11138] xt_ecn: cannot match TCP bits for non-tcp packets
[  273.864927][T11148] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1)
[  273.989713][T10997] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  274.010532][T10997] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  274.012930][T10997] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  274.044918][T10997] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  274.052626][T10997] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  274.169595][T10997] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  274.297445][T10997] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  274.329490][T10997] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  274.660065][T11177] netlink: 'syz.1.1267': attribute type 30 has an invalid length.
[  274.766077][T11177] bond7: option arp_missed_max: invalid value (0)
[  274.766101][T11177] bond7: option arp_missed_max: allowed values 1 - 255
[  274.817013][T11177] bond7 (unregistering): Released all slaves
[  275.274742][T10997] 8021q: adding VLAN 0 to HW filter on device bond0
[  275.348459][T10997] 8021q: adding VLAN 0 to HW filter on device team0
[  275.384730][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.384845][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.386149][T11196] syzkaller0: entered promiscuous mode
[  275.386317][T11196] syzkaller0: entered allmulticast mode
[  275.417655][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'.
[  275.466323][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.466427][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  275.525311][ T5630] Bluetooth: hci5: command tx timeout
[  275.539516][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1271'.
[  275.539544][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1271'.
[  275.539559][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1271'.
[  275.587321][T11196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'.
[  275.587347][T11196] openvswitch: netlink: Flow key attr not present in new flow.
[  276.059353][T11220] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1280'.
[  276.077435][T11220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  276.394346][T11233] netlink: 1404 bytes leftover after parsing attributes in process `syz.1.1283'.
[  276.557049][T11234] sctp: [Deprecated]: syz.0.1281 (pid 11234) Use of int in max_burst socket option.
[  276.557049][T11234] Use struct sctp_assoc_value instead
[  276.608594][T11241] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1284'.
[  276.709028][T11246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1285'.
[  277.328103][T10997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  277.497541][T11278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1291'.
[  277.603376][ T5630] Bluetooth: hci5: command tx timeout
[  278.270469][T10997] veth0_vlan: entered promiscuous mode
[  278.329939][T11297] gretap0: entered promiscuous mode
[  278.338116][T11297] vlan2: entered promiscuous mode
[  278.539700][T11294] veth0_to_bond: default FDB implementation only supports local addresses
[  278.581380][T10997] veth1_vlan: entered promiscuous mode
[  278.792420][T10997] veth0_macvtap: entered promiscuous mode
[  278.824509][T10997] veth1_macvtap: entered promiscuous mode
[  278.910685][T10997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  278.934611][T10997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  279.053795][   T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  279.053840][   T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  279.053872][   T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  279.053902][   T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  279.186876][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.186899][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.303135][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  279.303158][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  279.854080][T11322] veth1_to_team: entered promiscuous mode
[  279.888225][T11322] veth1_to_team: left promiscuous mode
[  280.287594][T11340] netlink: del zone limit has 4 unknown bytes
[  280.907576][T11355] __nla_validate_parse: 4 callbacks suppressed
[  280.907596][T11355] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1311'.
[  280.945898][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1310'.
[  281.082812][T11362] syzkaller1: entered promiscuous mode
[  281.083023][T11362] syzkaller1: entered allmulticast mode
[  281.187178][T11358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'.
[  281.663084][T11378] netlink: 'syz.0.1315': attribute type 21 has an invalid length.
[  281.663107][T11378] netlink: 'syz.0.1315': attribute type 20 has an invalid length.
[  281.727407][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'.
[  281.827766][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1316'.
[  282.736942][T11418] syzkaller0: entered promiscuous mode
[  282.736963][T11418] syzkaller0: entered allmulticast mode
[  282.739236][T11422] netlink: 'syz.5.1324': attribute type 16 has an invalid length.
[  282.739253][T11422] netlink: 'syz.5.1324': attribute type 17 has an invalid length.
[  283.186362][T11436] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1328'.
[  283.412233][T11439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1329'.
[  283.425214][T11439] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1329'.
[  284.142464][T11452] netlink: 45349 bytes leftover after parsing attributes in process `syz.5.1333'.
[  284.144817][T11452] 0�X孔D��: renamed from gretap0 (while UP)
[  284.179543][T11452] 0�X孔D��: entered allmulticast mode
[  284.233875][T11452] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1333'.
[  285.061573][T11480] bond10: entered promiscuous mode
[  285.061621][T11480] bond10: entered allmulticast mode
[  285.062016][T11480] 8021q: adding VLAN 0 to HW filter on device bond10
[  285.106424][T11485] xt_hashlimit: size too large, truncated to 1048576
[  286.962986][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  287.322594][T11505] Unsupported ieee802154 address type: 0
[  287.330192][T11505] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  287.384435][T11507] netlink: 'syz.0.1347': attribute type 1 has an invalid length.
[  287.418305][T11511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.440726][T11507] batman_adv: batadv0: Adding interface: dummy0
[  287.440746][T11507] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  287.440782][T11507] batman_adv: batadv0: Interface activated: dummy0
[  287.647356][T11507] netlink: 'syz.0.1347': attribute type 10 has an invalid length.
[  287.647380][T11507] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1347'.
[  287.655222][T11515] batadv0: mtu less than device minimum
[  287.656616][T11515] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  287.658023][T11515] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  287.659400][T11515] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  287.660843][T11515] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  287.662221][T11515] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  287.663660][T11515] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  287.665048][T11515] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  287.666444][T11515] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  287.751381][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'.
[  287.777783][T11507] batadv0: entered promiscuous mode
[  287.777953][T11507] batadv0: entered allmulticast mode
[  288.103417][T11535] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1357'.
[  288.103448][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1357'.
[  288.103462][T11535] netlink: 'syz.0.1357': attribute type 1 has an invalid length.
[  288.400725][T11534] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.938700][T11555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1363'.
[  289.312769][   T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.312802][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.312836][   T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.312858][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.312888][   T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.312911][   T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.312940][   T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  289.312962][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  289.813007][T11590] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.814059][T11589] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  289.824310][T11588] lo: entered allmulticast mode
[  289.878271][T10731] IPVS: starting estimator thread 0...
[  289.965092][T11594] IPVS: using max 26 ests per chain, 62400 per kthread
[  290.011543][T11600] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1370'.
[  290.116312][T11605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'.
[  290.309587][T11563] lo: left allmulticast mode
[  290.790602][T11625] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1380'.
[  290.853752][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1381'.
[  290.916505][T11633] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1383'.
[  291.040764][T11636] batadv_slave_1: entered promiscuous mode
[  291.129155][T11643] netlink: 'syz.3.1384': attribute type 4 has an invalid length.
[  291.332839][T11630] batadv_slave_1: left promiscuous mode
[  291.510171][T11649] bridge0: port 1(erspan0) entered blocking state
[  291.510287][T11649] bridge0: port 1(erspan0) entered disabled state
[  291.510458][T11649] erspan0: entered allmulticast mode
[  291.521988][T11649] erspan0: entered promiscuous mode
[  291.727939][T11671] netlink: 'syz.2.1389': attribute type 21 has an invalid length.
[  291.756245][T11667] bridge_slave_0: left allmulticast mode
[  291.756273][T11667] bridge_slave_0: left promiscuous mode
[  291.756619][T11667] bridge0: port 1(bridge_slave_0) entered disabled state
[  291.871560][T11676] syz_tun: left allmulticast mode
[  291.871586][T11676] syz_tun: left promiscuous mode
[  291.880348][T11676] bridge0: port 3(syz_tun) entered disabled state
[  291.926303][T11676] bridge_slave_1: left allmulticast mode
[  291.926333][T11676] bridge_slave_1: left promiscuous mode
[  291.926570][T11676] bridge0: port 2(bridge_slave_1) entered disabled state
[  292.220285][T11677] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  292.715256][T11692] __nla_validate_parse: 3 callbacks suppressed
[  292.715277][T11692] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1393'.
[  292.763685][T11652] net_ratelimit: 14 callbacks suppressed
[  292.763708][T11652] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  293.211567][T11706] netlink: 'syz.5.1398': attribute type 10 has an invalid length.
[  293.249656][T11706] 8021q: adding VLAN 0 to HW filter on device batadv0
[  293.274720][T11706] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  293.346623][T11706] bond0: (slave batadv0): Releasing backup interface
[  293.394140][T11706] bridge_slave_0: left allmulticast mode
[  293.394167][T11706] bridge_slave_0: left promiscuous mode
[  293.394385][T11706] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.427200][T11706] bridge_slave_1: left allmulticast mode
[  293.428399][T11706] bridge_slave_1: left promiscuous mode
[  293.428654][T11706] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.490049][T11706] bond0: (slave bond_slave_0): Releasing backup interface
[  293.498333][T11693] xt_CT: You must specify a L4 protocol and not use inversions on it
[  293.534457][T11706] bond0: (slave bond_slave_1): Releasing backup interface
[  293.575950][T11706] team0: Port device team_slave_0 removed
[  293.596036][T11706] team0: Port device team_slave_1 removed
[  293.600449][T11706] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  293.600475][T11706] batman_adv: batadv0: Removing interface: batadv_slave_0
[  293.609919][T11706] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  293.609999][T11706] batman_adv: batadv0: Removing interface: batadv_slave_1
[  293.622560][T11706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  293.687943][T11726] The dccp option matching is deprecated and scheduled to be removed in 2027.
[  293.687943][T11726] Please contact the netfilter-devel mailing list or update your nftables rules.
[  293.763703][T11726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1401'.
[  294.003800][ T1947] block nbd0: Possible stuck request ffff888028507000: control (read@0,1024B). Runtime 90 seconds
[  294.003873][ T1947] block nbd0: Possible stuck request ffff8880285071c0: control (read@1024,1024B). Runtime 90 seconds
[  294.003900][ T1947] block nbd0: Possible stuck request ffff888028507380: control (read@2048,1024B). Runtime 90 seconds
[  294.003924][ T1947] block nbd0: Possible stuck request ffff888028507540: control (read@3072,1024B). Runtime 90 seconds
[  294.092627][T11737] netlink: 'syz.5.1403': attribute type 61 has an invalid length.
[  294.204242][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1404'.
[  294.397369][T11741] 8021q: adding VLAN 0 to HW filter on device bond4
[  294.860591][T11756] netlink: 'syz.5.1408': attribute type 1 has an invalid length.
[  295.080117][T11766] veth3: entered allmulticast mode
[  295.100528][T11766] bond1: (slave veth3): Enslaving as an active interface with a down link
[  295.114489][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'.
[  295.114512][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'.
[  295.114537][T11770] netlink: 'syz.1.1414': attribute type 6 has an invalid length.
[  295.238805][T11756] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  295.348242][T11770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1414'.
[  295.348267][T11770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'.
[  295.348291][T11770] netlink: 'syz.1.1414': attribute type 6 has an invalid length.
[  295.348645][T11756] macvlan2: entered promiscuous mode
[  295.348664][T11756] macvlan2: entered allmulticast mode
[  295.398936][T11777] FAULT_INJECTION: forcing a failure.
[  295.398936][T11777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.398998][T11777] CPU: 1 UID: 0 PID: 11777 Comm: syz.2.1415 Not tainted syzkaller #0 PREEMPT(full) 
[  295.399023][T11777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  295.399055][T11777] Call Trace:
[  295.399064][T11777]  <TASK>
[  295.399076][T11777]  dump_stack_lvl+0xe8/0x150
[  295.399108][T11777]  should_fail_ex+0x410/0x560
[  295.399141][T11777]  _copy_to_user+0x31/0xb0
[  295.399172][T11777]  simple_read_from_buffer+0xe1/0x170
[  295.399214][T11777]  proc_fail_nth_read+0x1bb/0x230
[  295.399268][T11777]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  295.399312][T11777]  ? rw_verify_area+0x24a/0x4c0
[  295.399347][T11777]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  295.399390][T11777]  vfs_read+0x213/0xa80
[  295.399419][T11777]  ? __pfx___mutex_lock+0x10/0x10
[  295.399439][T11777]  ? __pfx_vfs_read+0x10/0x10
[  295.399463][T11777]  ? __fget_files+0x2a/0x420
[  295.399483][T11777]  ? __fget_files+0x3a2/0x420
[  295.399501][T11777]  ? __fget_files+0x2a/0x420
[  295.399526][T11777]  ? fdget+0x1ac/0x250
[  295.399553][T11777]  ksys_read+0x150/0x270
[  295.399575][T11777]  ? __pfx_ksys_read+0x10/0x10
[  295.399616][T11777]  do_syscall_64+0x166/0x520
[  295.399632][T11777]  ? trace_irq_disable+0x3b/0x140
[  295.399651][T11777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.399670][T11777]  ? clear_bhb_loop+0x70/0xc0
[  295.399691][T11777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.399708][T11777] RIP: 0033:0x7fa0faf5fd8e
[  295.399726][T11777] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  295.399742][T11777] RSP: 002b:00007fa0fbed4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  295.399763][T11777] RAX: ffffffffffffffda RBX: 00007fa0fbed56c0 RCX: 00007fa0faf5fd8e
[  295.399794][T11777] RDX: 000000000000000f RSI: 00007fa0fbed50a0 RDI: 0000000000000004
[  295.399805][T11777] RBP: 00007fa0fbed5090 R08: 0000000000000000 R09: 0000000000000000
[  295.399815][T11777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.399825][T11777] R13: 00007fa0fb226038 R14: 00007fa0fb225fa0 R15: 00007ffced063fd8
[  295.399857][T11777]  </TASK>
[  295.786993][T11793] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  295.963425][T11806] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1421'.
[  296.337410][T11819] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1424'.
[  296.486217][T11821] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1424'.
[  296.583140][T11829] netlink: 'syz.2.1427': attribute type 1 has an invalid length.
[  296.583180][T11829] netlink: 'syz.2.1427': attribute type 8 has an invalid length.
[  296.676351][T11829] 8021q: adding VLAN 0 to HW filter on device bond5
[  296.794478][T11837] bond5: (slave geneve2): Enslaving as an active interface with an up link
[  296.794642][   T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.999630][T11829] bond5 (unregistering): (slave geneve2): Releasing backup interface
[  297.029675][T11829] bond5 (unregistering): Released all slaves
[  297.193846][T10731] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  297.399570][T11851] FAULT_INJECTION: forcing a failure.
[  297.399570][T11851] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  297.399620][T11851] CPU: 1 UID: 0 PID: 11851 Comm: syz.5.1433 Not tainted syzkaller #0 PREEMPT(full) 
[  297.399643][T11851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  297.399654][T11851] Call Trace:
[  297.399662][T11851]  <TASK>
[  297.399670][T11851]  dump_stack_lvl+0xe8/0x150
[  297.399703][T11851]  should_fail_ex+0x410/0x560
[  297.399736][T11851]  _copy_to_iter+0x1e4/0x1810
[  297.399763][T11851]  ? __pfx_begin_current_label_crit_section+0x10/0x10
[  297.399799][T11851]  ? __pfx__copy_to_iter+0x10/0x10
[  297.399828][T11851]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  297.399857][T11851]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  297.399887][T11851]  __skb_datagram_iter+0xf8/0x980
[  297.399920][T11851]  ? __pfx_sk_busy_loop_end+0x10/0x10
[  297.399945][T11851]  ? __pfx_simple_copy_to_iter+0x10/0x10
[  297.399973][T11851]  skb_copy_datagram_iter+0xb5/0x240
[  297.400001][T11851]  ping_recvmsg+0x1cf/0x1010
[  297.400036][T11851]  ? lock_acquire+0x115/0x350
[  297.400061][T11851]  ? __pfx_ping_recvmsg+0x10/0x10
[  297.400093][T11851]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  297.400120][T11851]  ? sock_common_recvmsg+0x28/0xa0
[  297.400142][T11851]  ? __pfx_sock_common_recvmsg+0x10/0x10
[  297.400166][T11851]  sock_recvmsg+0x196/0x1e0
[  297.400192][T11851]  ____sys_recvmsg+0x1f8/0x530
[  297.400221][T11851]  ? __pfx_____sys_recvmsg+0x10/0x10
[  297.400262][T11851]  ? import_iovec+0x73/0xa0
[  297.400291][T11851]  ___sys_recvmsg+0x213/0x5a0
[  297.400316][T11851]  ? __pfx____sys_recvmsg+0x10/0x10
[  297.400340][T11851]  ? lock_acquire+0x115/0x350
[  297.400386][T11851]  ? __fget_files+0x2a/0x420
[  297.400405][T11851]  ? __fget_files+0x3a2/0x420
[  297.400423][T11851]  ? __fget_files+0x2a/0x420
[  297.400453][T11851]  __x64_sys_recvmsg+0x1ae/0x290
[  297.400475][T11851]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  297.400521][T11851]  do_syscall_64+0x166/0x520
[  297.400544][T11851]  ? trace_irq_disable+0x3b/0x140
[  297.400565][T11851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.400584][T11851]  ? clear_bhb_loop+0x70/0xc0
[  297.400608][T11851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  297.400626][T11851] RIP: 0033:0x7f688699f559
[  297.400644][T11851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  297.400660][T11851] RSP: 002b:00007f68878d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  297.400681][T11851] RAX: ffffffffffffffda RBX: 00007f6886c25fa0 RCX: 00007f688699f559
[  297.400695][T11851] RDX: 0000000000000000 RSI: 00002000000004c0 RDI: 0000000000000003
[  297.400707][T11851] RBP: 00007f68878d4090 R08: 0000000000000000 R09: 0000000000000000
[  297.400718][T11851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  297.400729][T11851] R13: 00007f6886c26038 R14: 00007f6886c25fa0 R15: 00007ffe2d61df48
[  297.400761][T11851]  </TASK>
[  297.748703][T11858] __nla_validate_parse: 2 callbacks suppressed
[  297.748721][T11858] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1435'.
[  297.908306][T11842] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1430'.
[  297.931980][T11873] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  298.072603][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1437'.
[  298.608513][T11873] smc: net device lo applied user defined pnetid SYZ0
[  298.624206][T11898] lo: entered allmulticast mode
[  299.556656][T11942] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1449'.
[  299.932609][T11942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  300.053201][T11957] sctp: [Deprecated]: syz.0.1452 (pid 11957) Use of int in max_burst socket option.
[  300.053201][T11957] Use struct sctp_assoc_value instead
[  300.086389][   T30] audit: type=1804 audit(1793015129.882:11): pid=11957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1452" name="/newroot/292/cgroup.controllers" dev="tmpfs" ino=1503 res=1 errno=0
[  300.086725][   T30] audit: type=1800 audit(1793015129.882:12): pid=11957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1452" name="cgroup.controllers" dev="tmpfs" ino=1503 res=0 errno=-22
[  300.151969][T11942] 8021q: adding VLAN 0 to HW filter on device bond1
[  300.905547][T11982] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  303.984669][   T13] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex
[  303.986636][   T13] bond1: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex
[  303.989406][   T13] bond1: (slave veth3): making interface the new active one
[  304.032384][   T13] bond1: active interface up!
[  304.493642][T12012] can: request_module (can-proto-0) failed.
[  305.202517][T12035] lo: entered allmulticast mode
[  305.247064][T12034] lo: left allmulticast mode
[  305.351271][T12016] syz.2.1466 (12016) used greatest stack depth: 18056 bytes left
[  305.385479][T12035] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1471'.
[  305.585684][T12049] netlink: 'syz.5.1476': attribute type 1 has an invalid length.
[  305.815201][T12051] netlink: 'syz.3.1475': attribute type 61 has an invalid length.
[  305.815227][T12051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1475'.
[  305.977109][T12067] netlink: 'syz.1.1477': attribute type 1 has an invalid length.
[  306.036003][T12052] bond2: (slave bridge2): Enslaving as a backup interface with an up link
[  306.064414][T12049] macvlan2: entered promiscuous mode
[  306.064780][T12049] macvlan2: entered allmulticast mode
[  306.067786][T12049] bond2: entered promiscuous mode
[  306.067806][T12049] bridge2: entered promiscuous mode
[  306.075258][T12049] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  306.093181][T12049] bond2: left promiscuous mode
[  306.093204][T12049] bridge2: left promiscuous mode
[  306.105125][T12071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1477'.
[  306.361362][T12069] bond7: (slave geneve5): making interface the new active one
[  306.378286][T12069] bond7: (slave geneve5): Enslaving as an active interface with an up link
[  306.397394][T12071] 8021q: adding VLAN 0 to HW filter on device bond7
[  306.583076][   T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  306.583494][   T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  306.583530][   T12] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  306.583562][   T12] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  306.642908][ T5630] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  306.724686][ T5630] Bluetooth: hci5: command 0x0405 tx timeout
[  306.976278][T12099] netlink: 'syz.5.1485': attribute type 4 has an invalid length.
[  307.048747][T12105] tipc: Started in network mode
[  307.048777][T12105] tipc: Node identity 22eba456f4ce, cluster identity 4711
[  307.049070][T12105] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  307.125697][T12099] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  307.134613][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1485'.
[  307.189034][T12098] tipc: Disabling bearer <eth:syzkaller0>
[  307.757487][T12115] syzkaller1: entered promiscuous mode
[  307.757511][T12115] syzkaller1: entered allmulticast mode
[  308.340695][T12142] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1490'.
[  308.555760][T12153] ip_tables: iptables: counters copy to user failed while replacing table
[  308.560654][T12148] bond3: ARP target 9.0.0.0 is already present
[  308.560677][T12148] bond3: option arp_ip_target: invalid value (9)
[  308.649127][T12148] bond3 (unregistering): Released all slaves
[  308.893131][T12149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1491'.
[  309.244243][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'.
[  309.263889][T12179] x_tables: duplicate underflow at hook 2
[  309.365336][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1500'.
[  309.368504][T12186] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1500'.
[  309.888472][T12188] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  311.384856][T12195] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  311.828761][T12222] geneve1: entered promiscuous mode
[  312.340477][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1517'.
[  312.340503][T12254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1517'.
[  312.366500][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'.
[  312.366527][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1517'.
[  312.709735][T12262] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1519'.
[  313.190585][T12275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1523'.
[  313.240947][T12281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1523'.
[  313.488195][T12290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1525'.
[  313.920465][T12306] SET target dimension over the limit!
[  314.099071][T12310] netlink: 'syz.0.1532': attribute type 1 has an invalid length.
[  314.151811][T12310] 8021q: adding VLAN 0 to HW filter on device bond5
[  314.251628][T12321] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 

(�h\E3�~���析汚o���R!Fo�?�バ<
[  314.313653][T12315] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  314.573147][T12335] netlink: 'syz.1.1536': attribute type 1 has an invalid length.
[  314.573170][T12335] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'.
[  314.649330][T12337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1538'.
[  314.931385][T12340] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  315.707248][T12359] netlink: 'syz.3.1541': attribute type 362 has an invalid length.
[  315.750420][T12362] syzkaller0: entered promiscuous mode
[  315.750443][T12362] syzkaller0: entered allmulticast mode
[  316.540399][T12379] netlink: 'syz.0.1548': attribute type 1 has an invalid length.
[  317.632399][T12401] netlink: 'syz.2.1555': attribute type 21 has an invalid length.
[  317.632456][T12401] netlink: 'syz.2.1555': attribute type 6 has an invalid length.
[  317.632469][T12401] __nla_validate_parse: 2 callbacks suppressed
[  317.632479][T12401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1555'.
[  317.672898][T12403] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1555'.
[  317.686576][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  320.027160][T12406] sctp: [Deprecated]: syz.3.1556 (pid 12406) Use of int in max_burst socket option.
[  320.027160][T12406] Use struct sctp_assoc_value instead
[  320.101901][T12409] ip_tables: iptables: counters copy to user failed while replacing table
[  320.243338][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.243685][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.243989][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  320.694879][T12423] syzkaller1: entered promiscuous mode
[  320.695070][T12423] syzkaller1: entered allmulticast mode
[  320.981873][T12425] geneve3: entered promiscuous mode
[  321.885846][T12450] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  321.910146][T12450] xt_hashlimit: size too large, truncated to 1048576
[  322.886238][T12337] Set syz1 is full, maxelem 65536 reached
[  323.060938][T12467] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1575'.
[  323.116279][T12467] syzkaller1: entered promiscuous mode
[  323.116303][T12467] syzkaller1: entered allmulticast mode
[  323.192870][T12472] syzkaller1: entered promiscuous mode
[  323.193059][T12472] syzkaller1: entered allmulticast mode
[  323.363005][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.363626][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.363908][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  323.413485][T12475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1577'.
[  324.091175][ T1947] block nbd0: Possible stuck request ffff888028507000: control (read@0,1024B). Runtime 120 seconds
[  324.091218][ T1947] block nbd0: Possible stuck request ffff8880285071c0: control (read@1024,1024B). Runtime 120 seconds
[  324.091244][ T1947] block nbd0: Possible stuck request ffff888028507380: control (read@2048,1024B). Runtime 120 seconds
[  324.091268][ T1947] block nbd0: Possible stuck request ffff888028507540: control (read@3072,1024B). Runtime 120 seconds
[  326.482923][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.483216][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.483496][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  326.805612][T12515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1585'.
[  327.005669][T12523] syzkaller1: entered promiscuous mode
[  327.005692][T12523] syzkaller1: entered allmulticast mode
[  327.298934][T12537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  327.298954][T12537] IPv6: NLM_F_CREATE should be set when creating new route
[  327.298997][T12537] IPv6: NLM_F_CREATE should be set when creating new route
[  327.299022][T12537] IPv6: NLM_F_CREATE should be set when creating new route
[  327.313797][T12537] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  328.111028][T12548] bond1: (slave veth0_to_bond): Releasing active interface
[  328.111056][T12548] veth3: entered promiscuous mode
[  328.168827][T12548] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  328.542405][T12558] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1596'.
[  329.061982][T12565] geneve1: left promiscuous mode
[  329.126287][  T701] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  329.154050][T12565] 8021q: adding VLAN 0 to HW filter on device bond2
[  329.232827][   T12] bond2: (slave bridge2): link status up again after 0 ms
[  329.232859][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  329.244252][   T52] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond
[  329.346254][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  329.438202][T12574] netlink: 'syz.2.1600': attribute type 10 has an invalid length.
[  329.438411][T12574] team0: Device vxcan0 is CAN, IEEE 802.15.4 or 6LoWPAN. These device types can't be added as a team port
[  329.464319][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  329.791947][T12585] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1606'.
[  329.799924][T12585] xt_ipcomp: unknown flags 1D
[  329.802441][T12585] netlink: 15 bytes leftover after parsing attributes in process `syz.3.1606'.
[  330.029111][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  330.032179][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  330.038678][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  330.046159][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  330.046961][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  330.441742][T12610] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1609'.
[  330.921344][T12624] syzkaller0: left promiscuous mode
[  330.921367][T12624] syzkaller0: left allmulticast mode
[  331.129752][T12631] vlan2: entered promiscuous mode
[  331.129775][T12631] bond0: entered promiscuous mode
[  331.129789][T12631] bond_slave_1: entered promiscuous mode
[  331.344061][T12589] rxe_eth0 speed is unknown, defaulting to 1000
[  331.524654][T10739] net_ratelimit: 18 callbacks suppressed
[  331.524677][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  331.636016][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  331.745759][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  331.854280][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  331.964043][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  332.076338][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  332.157653][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1619'.
[  332.163992][ T5630] Bluetooth: hci6: command tx timeout
[  332.525988][T12660] 8021q: adding VLAN 0 to HW filter on device bond0
[  332.550853][T12660] 8021q: adding VLAN 0 to HW filter on device team0
[  332.656578][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.657669][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.671486][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.677766][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  332.847947][T12660] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  332.894315][  T142] bridge0: port 2(bridge_slave_1) entered blocking state
[  332.894476][  T142] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.671241][T12676] x_tables: duplicate underflow at hook 1
[  333.671597][T12676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1624'.
[  333.671627][T12676] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1624'.
[  333.671642][T12676] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1624'.
[  333.683977][T12677] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1625'.
[  333.683997][T12677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'.
[  333.739379][T12681] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1625'.
[  333.739401][T12681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1625'.
[  334.104631][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'.
[  334.156572][T12689] netlink: 'syz.3.1626': attribute type 1 has an invalid length.
[  334.172168][T12689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1626'.
[  334.253711][ T5630] Bluetooth: hci6: command tx timeout
[  334.737144][T12589] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.737327][T12589] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.737468][T12589] bridge_slave_0: entered allmulticast mode
[  334.740468][T12589] bridge_slave_0: entered promiscuous mode
[  334.749107][T12589] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.749218][T12589] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.749614][T12589] bridge_slave_1: entered allmulticast mode
[  334.760362][T12589] bridge_slave_1: entered promiscuous mode
[  334.942366][T12589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.961239][T12589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.118437][T12589] team0: Port device team_slave_0 added
[  335.149665][T12589] team0: Port device team_slave_1 added
[  335.339074][T12589] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.339093][T12589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.339117][T12589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.437555][T12589] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.437573][T12589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.437598][T12589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.637363][T12589] hsr_slave_0: entered promiscuous mode
[  335.640352][T12589] hsr_slave_1: entered promiscuous mode
[  335.643333][T12589] debugfs: 'hsr0' already exists in 'hsr'
[  335.643353][T12589] Cannot create hsr debugfs directory
[  335.913907][T12750] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1640'.
[  336.322719][ T5630] Bluetooth: hci6: command tx timeout
[  336.536684][T12767] batadv0: left promiscuous mode
[  336.630234][T12767] 8021q: adding VLAN 0 to HW filter on device bond1
[  336.658001][T12773] syz.2.1646: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  336.658260][T12773] CPU: 1 UID: 0 PID: 12773 Comm: syz.2.1646 Not tainted syzkaller #0 PREEMPT(full) 
[  336.658292][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  336.658305][T12773] Call Trace:
[  336.658313][T12773]  <TASK>
[  336.658323][T12773]  dump_stack_lvl+0xe8/0x150
[  336.658358][T12773]  warn_alloc+0x24d/0x270
[  336.658384][T12773]  ? kasan_save_track+0x4f/0x80
[  336.658409][T12773]  ? kasan_save_track+0x3e/0x80
[  336.658437][T12773]  ? __pfx_warn_alloc+0x10/0x10
[  336.658459][T12773]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  336.658488][T12773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.658529][T12773]  __vmalloc_node_range_noprof+0x127/0x1540
[  336.658576][T12773]  ? rcu_is_watching+0x16/0xb0
[  336.658609][T12773]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  336.658631][T12773]  ? __kmalloc_cache_noprof+0x31c/0x600
[  336.658656][T12773]  ? __kmalloc_cache_noprof+0x148/0x600
[  336.658680][T12773]  ? xskq_create+0x56/0x220
[  336.658714][T12773]  xskq_create+0x148/0x220
[  336.658743][T12773]  ? xsk_init_queue+0x8a/0xe0
[  336.658773][T12773]  xsk_init_queue+0x8a/0xe0
[  336.658803][T12773]  xsk_setsockopt+0x52a/0x960
[  336.658834][T12773]  ? __pfx_xsk_setsockopt+0x10/0x10
[  336.658864][T12773]  ? __pfx_aa_sk_perm+0x10/0x10
[  336.658899][T12773]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  336.658917][T12773]  ? __pfx_xsk_setsockopt+0x10/0x10
[  336.658947][T12773]  do_sock_setsockopt+0x17c/0x1b0
[  336.658981][T12773]  __x64_sys_setsockopt+0x13d/0x1b0
[  336.659015][T12773]  do_syscall_64+0x166/0x520
[  336.659035][T12773]  ? trace_irq_disable+0x3b/0x140
[  336.659057][T12773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.659076][T12773]  ? clear_bhb_loop+0x70/0xc0
[  336.659098][T12773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  336.659116][T12773] RIP: 0033:0x7fa0faf9f559
[  336.659136][T12773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  336.659152][T12773] RSP: 002b:00007fa0fbed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  336.659172][T12773] RAX: ffffffffffffffda RBX: 00007fa0fb225fa0 RCX: 00007fa0faf9f559
[  336.659187][T12773] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[  336.659199][T12773] RBP: 00007fa0fb036b20 R08: 0000000000000004 R09: 0000000000000000
[  336.659212][T12773] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  336.659225][T12773] R13: 00007fa0fb226038 R14: 00007fa0fb225fa0 R15: 00007ffced063fd8
[  336.659259][T12773]  </TASK>
[  336.664163][T12773] Mem-Info:
[  336.664179][T12773] active_anon:10182 inactive_anon:0 isolated_anon:0
[  336.664179][T12773]  active_file:0 inactive_file:43417 isolated_file:0
[  336.664179][T12773]  unevictable:0 dirty:159 writeback:0
[  336.664179][T12773]  slab_reclaimable:12433 slab_unreclaimable:117395
[  336.664179][T12773]  mapped:39685 shmem:522 pagetables:1355
[  336.664179][T12773]  sec_pagetables:0 bounce:0
[  336.664179][T12773]  kernel_misc_reclaimable:0
[  336.664179][T12773]  free:1240648 free_pcp:6704 free_cma:0
[  336.664241][T12773] Node 0 active_anon:40728kB inactive_anon:0kB active_file:0kB inactive_file:173472kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:158740kB dirty:636kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14772kB pagetables:5264kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  336.664303][T12773] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB
[  336.664353][T12773] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  336.664411][T12773] lowmem_reserve[]: 0 2467 2467 2467 2467
[  336.664449][T12773] Node 0 DMA32 free:999552kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:40728kB inactive_anon:0kB active_file:0kB inactive_file:173472kB unevictable:0kB writepending:636kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:24052kB local_pcp:16436kB free_cma:0kB
[  336.664507][T12773] lowmem_reserve[]: 0 0 0 0 0
[  336.664541][T12773] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  336.664593][T12773] lowmem_reserve[]: 0 0 0 0 0
[  336.664626][T12773] Node 1 Normal free:3947680kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2764kB local_pcp:2764kB free_cma:0kB
[  336.664683][T12773] lowmem_reserve[]: 0 0 0 0 0
[  336.664713][T12773] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  336.664822][T12773] Node 0 DMA32: 616*4kB (UME) 420*8kB (ME) 184*16kB (M) 44*32kB (UME) 163*64kB (UME) 84*128kB (UME) 18*256kB (UM) 4*512kB (UME) 3*1024kB (ME) 2*2048kB (M) 233*4096kB (UM) = 999552kB
[  336.664975][T12773] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  336.665062][T12773] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 2*32kB (UM) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 2*2048kB (U) 962*4096kB (UM) = 3947680kB
[  336.665219][T12773] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  336.665236][T12773] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  336.665253][T12773] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  336.665269][T12773] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  336.668251][T12773] 43935 total pagecache pages
[  336.668276][T12773] 0 pages in swap cache
[  336.668290][T12773] Free swap  = 124996kB
[  336.668298][T12773] Total swap = 124996kB
[  336.668307][T12773] 2097051 pages RAM
[  336.668314][T12773] 0 pages HighMem/MovableOnly
[  336.668321][T12773] 433831 pages reserved
[  336.668328][T12773] 0 pages cma reserved
[  336.687365][T12767] 8021q: adding VLAN 0 to HW filter on device bond2
[  336.697303][T12767] geneve2: left promiscuous mode
[  336.697329][T12767] net_ratelimit: 20 callbacks suppressed
[  336.697339][T12767] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[  336.730806][T12779] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  336.744622][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  336.759091][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  336.762965][   T52] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  336.763790][   T52] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  336.763824][   T52] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  336.820358][T12773] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  337.166672][T12777] syzkaller0: entered promiscuous mode
[  337.166694][T12777] syzkaller0: entered allmulticast mode
[  337.472919][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  337.584224][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  337.634016][T12589] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  337.665947][T12589] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  337.673226][T12589] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  337.726549][T12589] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  337.732514][T12589] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  337.735357][T12799] netlink: 'syz.0.1651': attribute type 1 has an invalid length.
[  337.750896][T12589] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  337.753445][T12589] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  337.790736][T12589] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  337.792449][T12801] netlink: 'syz.0.1651': attribute type 3 has an invalid length.
[  337.793951][T12807] netlink: 'syz.0.1651': attribute type 3 has an invalid length.
[  337.913079][  T142] bond2: (slave bridge2): failed to get link speed/duplex
[  337.985490][T12817] macvlan0: entered promiscuous mode
[  337.985989][T12817] netlink: 'syz.3.1654': attribute type 1 has an invalid length.
[  337.986007][T12817] netlink: 'syz.3.1654': attribute type 2 has an invalid length.
[  338.166935][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.167391][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.167868][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.168410][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  338.168742][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  338.296989][T12589] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.406790][ T5630] Bluetooth: hci6: command tx timeout
[  338.613251][T12589] 8021q: adding VLAN 0 to HW filter on device team0
[  338.668708][T10739] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.668818][T10739] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.698941][T10739] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.699051][T10739] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.244658][   T12] veth3: left promiscuous mode
[  339.738314][T12825] __nla_validate_parse: 3 callbacks suppressed
[  339.738335][T12825] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1657'.
[  339.861875][T12862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1664'.
[  339.875557][T12862] netlink: 'syz.2.1664': attribute type 4 has an invalid length.
[  339.875579][T12862] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1664'.
[  339.886978][T12862] .`: renamed from bond0 (while UP)
[  339.963251][T12865] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1665'.
[  340.639048][T12886] 0�X孔D��: left allmulticast mode
[  340.712630][T12889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1669'.
[  340.772462][T12886] veth3: left allmulticast mode
[  341.015893][T12896] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20002
[  341.207938][T12589] 8021q: adding VLAN 0 to HW filter on device batadv0
[  341.375743][T10739] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  341.375994][T10739] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  341.405419][ T5751] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  341.645709][ T5751] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  341.645901][ T5751] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  341.695446][   T12] net_ratelimit: 44 callbacks suppressed
[  341.695469][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  341.805642][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  341.916256][T12943] veth9: entered allmulticast mode
[  342.009754][ T5820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.083141][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.083485][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.083832][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  342.158714][T12958] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1681'.
[  343.292233][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.926782][  T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.927944][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  343.928483][  T142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  344.167096][T12589] veth0_vlan: entered promiscuous mode
[  344.186476][T12965] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1683'.
[  344.208464][T12589] veth1_vlan: entered promiscuous mode
[  344.269301][T12968] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'.
[  344.285539][T12969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1683'.
[  344.357509][T12589] veth0_macvtap: entered promiscuous mode
[  344.373994][T12589] veth1_macvtap: entered promiscuous mode
[  344.421092][T12589] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.459525][T12589] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.518039][   T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  344.518269][   T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  344.518297][   T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  344.518321][   T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  344.869029][T12956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  345.111219][  T701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.111243][  T701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.188021][  T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.188042][  T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.397039][T12986] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1689'.
[  345.443521][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  345.581667][T12983] syzkaller0: left promiscuous mode
[  345.581689][T12983] syzkaller0: left allmulticast mode
[  346.036285][T13001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'.
[  346.295621][T13021] xt_hashlimit: size too large, truncated to 1048576
[  346.733128][T10739] net_ratelimit: 18 callbacks suppressed
[  346.733241][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  346.856985][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  346.963463][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  347.094635][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  347.223130][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  347.364319][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  347.474242][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  347.605514][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  347.609994][T13042] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1697'.
[  347.673196][T13039] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  347.775443][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1700'.
[  347.778552][T13039] syzkaller0: MTU not usable for tipc bearer
[  347.778572][T13039] tipc: Disabling bearer <eth:syzkaller0>
[  347.899066][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  348.023217][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  348.268095][T13046] netlink: 'syz.5.1700': attribute type 1 has an invalid length.
[  350.054636][T13106] bond11: option min_links: invalid value (18446744073709551612)
[  350.054661][T13106] bond11: option min_links: allowed values 0 - 2147483647
[  350.527132][T13106] bond11 (unregistering): Released all slaves
[  350.806698][T13112] bond11: option min_links: invalid value (18446744073709551612)
[  350.806723][T13112] bond11: option min_links: allowed values 0 - 2147483647
[  350.811838][T13112] bond11 (unregistering): Released all slaves
[  351.079357][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'.
[  351.079390][T13120] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'.
[  351.130582][T13121] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1717'.
[  351.159195][T13121] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1717'.
[  351.164564][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'.
[  351.164593][T13125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1719'.
[  351.383371][T13131] netdevsim netdevsim0: Firmware load for './file0/file0/../file0' refused, path contains '..' component
[  351.389082][T13131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1720'.
[  351.812858][  T701] net_ratelimit: 28 callbacks suppressed
[  351.812880][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  351.892250][T13146] 8021q: adding VLAN 0 to HW filter on device .`
[  351.977083][T13146] bond_slave_0: left allmulticast mode
[  352.159939][T13146] veth1_vlan: left promiscuous mode
[  352.170193][T13146] veth0_vlan: left promiscuous mode
[  352.180621][T13146] veth0_vlan: entered promiscuous mode
[  352.191686][T13146] veth1_vlan: entered promiscuous mode
[  352.236436][T13146] veth1_macvtap: left promiscuous mode
[  352.250929][T13146] veth0_macvtap: left promiscuous mode
[  352.266681][T13146] veth0_macvtap: entered promiscuous mode
[  352.271302][T13146] veth1_macvtap: entered promiscuous mode
[  352.294606][T13146] geneve1: left promiscuous mode
[  352.307752][T13146] netdevsim netdevsim2 netdevsim0: left allmulticast mode
[  352.309473][T13146] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  352.317087][T13146] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  352.357091][T13146] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  352.373664][T13146] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  352.407127][T13146] 8021q: adding VLAN 0 to HW filter on device bond1
[  352.411540][T13146] ip6gre1: left allmulticast mode
[  352.459430][T13146] sit1: left allmulticast mode
[  352.641629][T13146] bond2: left promiscuous mode
[  352.641655][T13146] wireguard0: left promiscuous mode
[  352.646934][T13146] 8021q: adding VLAN 0 to HW filter on device bond2
[  352.683169][T13146] bond3: left allmulticast mode
[  352.683631][T13146] 8021q: adding VLAN 0 to HW filter on device bond3
[  352.906163][T13143] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1724'.
[  352.906649][   T52] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  352.906677][   T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.906718][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  353.053524][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  353.069274][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.069585][   T52] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  353.069614][   T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.070867][   T52] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  353.070893][   T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  353.071060][   T52] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  353.071083][   T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  353.164484][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.256970][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.346720][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  353.353926][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.404277][ T5751] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  353.475247][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  353.522855][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  354.098955][T13195] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1734'.
[  354.098989][T13195] netlink: 'syz.6.1734': attribute type 20 has an invalid length.
[  354.099002][T13195] netlink: 'syz.6.1734': attribute type 21 has an invalid length.
[  354.163049][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  354.175657][ T1947] block nbd0: Possible stuck request ffff888028507000: control (read@0,1024B). Runtime 150 seconds
[  354.175699][ T1947] block nbd0: Possible stuck request ffff8880285071c0: control (read@1024,1024B). Runtime 150 seconds
[  354.175725][ T1947] block nbd0: Possible stuck request ffff888028507380: control (read@2048,1024B). Runtime 150 seconds
[  354.175750][ T1947] block nbd0: Possible stuck request ffff888028507540: control (read@3072,1024B). Runtime 150 seconds
[  354.744062][T13205] netlink: 'syz.0.1737': attribute type 1 has an invalid length.
[  354.896144][T13210] veth0: entered promiscuous mode
[  354.906969][T13205] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1737'.
[  354.995095][T13208] veth0: left promiscuous mode
[  355.149483][T13209] syzkaller1: entered promiscuous mode
[  355.149508][T13209] syzkaller1: entered allmulticast mode
[  355.704524][T13223] ip6_vti0: entered promiscuous mode
[  355.704552][T13223] ip6_vti0: entered allmulticast mode
[  356.825050][T13267] __nla_validate_parse: 1 callbacks suppressed
[  356.825087][T13267] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1752'.
[  356.907829][   T12] net_ratelimit: 48 callbacks suppressed
[  356.907853][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  357.013584][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  357.124827][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  357.233588][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  357.233949][T13271] xt_ecn: cannot match TCP bits for non-tcp packets
[  357.340615][T13288] ip_tables: iptables: counters copy to user failed while replacing table
[  357.344519][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  357.402269][T13291] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1756'.
[  357.495034][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  357.604045][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  357.713138][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  357.833593][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  358.544974][T13321] netlink: 'syz.0.1762': attribute type 29 has an invalid length.
[  358.545000][T13321] netlink: 'syz.0.1762': attribute type 13 has an invalid length.
[  359.133787][T13336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1765'.
[  359.489062][   T30] audit: type=1804 audit(1793015189.282:13): pid=13341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1767" name="/newroot/412/cgroup.controllers" dev="tmpfs" ino=2114 res=1 errno=0
[  359.489372][   T30] audit: type=1800 audit(1793015189.282:14): pid=13341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1767" name="cgroup.controllers" dev="tmpfs" ino=2114 res=0 errno=-22
[  361.191894][T13313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  361.780873][T13373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'.
[  361.781016][T13373] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  361.871688][T13374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1776'.
[  362.049733][T13373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  362.118686][T13374] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  362.133048][   T12] net_ratelimit: 61 callbacks suppressed
[  362.133070][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  362.243694][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  362.352819][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  362.463202][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  362.555656][T13386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  362.585162][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  362.695607][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  362.802930][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  362.913139][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  363.023422][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  363.399767][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1785'.
[  363.812328][T13430] x_tables: duplicate underflow at hook 2
[  363.821539][T13430] netlink: 'syz.5.1789': attribute type 16 has an invalid length.
[  363.821824][T13430] netlink: 'syz.5.1789': attribute type 17 has an invalid length.
[  364.045134][ T5764] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  364.376246][ T5764] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  365.700556][T13466] syzkaller0: entered promiscuous mode
[  365.700580][T13466] syzkaller0: entered allmulticast mode
[  365.853991][T13468] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1798'.
[  365.950375][T13468] netlink: 'syz.3.1798': attribute type 153 has an invalid length.
[  366.576407][T13482] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  366.591360][T13482] bond3 (unregistering): Released all slaves
[  366.670633][T13492] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1802'.
[  366.869858][T13501] syz_tun: entered allmulticast mode
[  366.945155][T13492] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1802'.
[  366.951489][T13501] syz_tun: left allmulticast mode
[  367.040058][T13502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1804'.
[  367.049773][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1804'.
[  367.672929][   T52] net_ratelimit: 43 callbacks suppressed
[  367.672952][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  367.785098][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  367.892881][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  368.001644][T13527] syzkaller0: entered promiscuous mode
[  368.001667][T13527] syzkaller0: entered allmulticast mode
[  368.023795][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  368.552945][   T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  368.553370][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  368.665740][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  368.834119][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  368.948118][T13555] tipc: Started in network mode
[  368.948150][T13555] tipc: Node identity b67085d45cb9, cluster identity 4711
[  368.948328][T13555] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  368.950315][T13545] syzkaller0: entered promiscuous mode
[  368.950336][T13545] syzkaller0: entered allmulticast mode
[  368.958133][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  369.028464][T13545] tipc: Resetting bearer <eth:syzkaller0>
[  369.048768][T13544] tipc: Resetting bearer <eth:syzkaller0>
[  369.158149][T13544] tipc: Disabling bearer <eth:syzkaller0>
[  369.234485][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  369.271682][T13563] smc: smcd device lo applied user defined pnetid SYZ0
[  369.319867][T13562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1817'.
[  369.364601][   T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  369.433001][T13566] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1817'.
[  369.444115][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  370.249255][T13579] syzkaller0: entered promiscuous mode
[  370.249278][T13579] syzkaller0: entered allmulticast mode
[  370.279144][T13582] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  370.279579][T13582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.280044][T13582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.309540][T13582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.310080][T13582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.311711][T13582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.312604][T13582] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  370.387183][T13583] tipc: Resetting bearer <eth:syzkaller0>
[  370.418046][T13578] tipc: Resetting bearer <eth:syzkaller0>
[  370.488202][T13578] tipc: Disabling bearer <eth:syzkaller0>
[  370.517926][T13586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1821'.
[  370.517952][T13586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1821'.
[  370.787403][T13593] netlink: 'syz.6.1824': attribute type 2 has an invalid length.
[  371.442899][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  371.524310][T13616] 8021q: adding VLAN 0 to HW filter on device bond0
[  371.874497][T13640] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20002
[  372.295493][T13659] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1839'.
[  372.408348][T13662] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1840'.
[  372.439733][T13662] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1840'.
[  372.556778][T13666] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1841'.
[  373.582919][   T12] net_ratelimit: 26 callbacks suppressed
[  373.582941][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  373.693693][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  373.803092][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  373.912831][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  374.022848][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  374.133148][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  374.243021][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  374.352829][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  374.463151][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  374.572861][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  378.645070][   T52] net_ratelimit: 40 callbacks suppressed
[  378.645095][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  378.753171][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  378.862887][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  378.972805][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  379.083361][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  379.128775][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  379.192819][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  379.302863][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  379.413917][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  379.524712][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  379.632833][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  383.702900][T10739] net_ratelimit: 43 callbacks suppressed
[  383.702923][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  383.812826][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  383.923487][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  384.032816][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  384.142896][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  384.245433][ T1947] block nbd0: Possible stuck request ffff888028507000: control (read@0,1024B). Runtime 180 seconds
[  384.245475][ T1947] block nbd0: Possible stuck request ffff8880285071c0: control (read@1024,1024B). Runtime 180 seconds
[  384.245501][ T1947] block nbd0: Possible stuck request ffff888028507380: control (read@2048,1024B). Runtime 180 seconds
[  384.245526][ T1947] block nbd0: Possible stuck request ffff888028507540: control (read@3072,1024B). Runtime 180 seconds
[  384.262819][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  384.372808][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  384.483273][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  384.593113][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  384.702867][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  386.157495][ T4997] udevd[4997]: worker [9035] /devices/virtual/block/nbd0 timeout; kill it
[  386.159906][ T4997] udevd[4997]: seq 13204 '/devices/virtual/block/nbd0' killed
[  388.726281][   T52] net_ratelimit: 40 callbacks suppressed
[  388.726304][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  388.773158][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  388.884660][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  388.992798][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  389.103193][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  389.212827][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  389.322821][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  389.433191][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  389.542888][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  389.652867][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  393.832819][T10739] net_ratelimit: 39 callbacks suppressed
[  393.832841][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  393.854666][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  393.942881][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  394.053097][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  394.163011][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  394.272843][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  394.383206][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  394.488787][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.494981][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  394.495465][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  398.904938][   T13] net_ratelimit: 41 callbacks suppressed
[  398.904961][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  398.964893][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.014676][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  399.124473][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  399.234072][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  399.344041][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  399.454468][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  399.563193][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  399.608996][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  399.674710][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  403.963915][  T701] net_ratelimit: 41 callbacks suppressed
[  403.963938][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  404.074136][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  404.183436][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  404.294184][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  404.404767][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  404.514457][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  404.623167][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  404.730190][   T52] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  404.744771][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  404.854149][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  407.283923][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[  409.054259][  T701] net_ratelimit: 40 callbacks suppressed
[  409.054282][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  409.164057][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  409.208174][   T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  409.273466][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  409.384518][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  409.494222][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  409.604436][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  409.714329][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  409.824902][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  409.935305][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  414.124569][T10739] net_ratelimit: 42 callbacks suppressed
[  414.124594][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  414.244722][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  414.323866][T10739] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.326407][ T1947] block nbd0: Possible stuck request ffff888028507000: control (read@0,1024B). Runtime 210 seconds
[  414.326448][ T1947] block nbd0: Possible stuck request ffff8880285071c0: control (read@1024,1024B). Runtime 210 seconds
[  414.326474][ T1947] block nbd0: Possible stuck request ffff888028507380: control (read@2048,1024B). Runtime 210 seconds
[  414.326513][ T1947] block nbd0: Possible stuck request ffff888028507540: control (read@3072,1024B). Runtime 210 seconds
[  414.367579][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  414.474187][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  414.583418][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  414.693442][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  414.803084][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  414.883428][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  414.913685][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  417.823296][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1846'.
[  418.041087][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1844'.
[  418.452405][T13701] xt_l2tp: invalid flags combination: 8
[  418.499354][T13704] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1851'.
[  418.778655][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1849'.
[  419.332842][   T12] net_ratelimit: 39 callbacks suppressed
[  419.332863][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  419.445308][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  419.555111][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  419.588151][T13726] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1855'.
[  419.608284][T13726] netlink: 'syz.5.1855': attribute type 6 has an invalid length.
[  419.667086][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  419.772835][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  419.886772][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  419.992879][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  419.996925][T13728] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1856'.
[  419.996959][T13728] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1856'.
[  420.112814][ T8474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  420.120221][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  420.224635][   T52] bond2: (slave bridge2): failed to get link speed/duplex
[  421.018313][T13758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1865'.
[  421.199645][T13758] syzkaller0: entered promiscuous mode
[  421.199904][T13758] syzkaller0: entered allmulticast mode
[  421.219028][T13758] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1865'.
[  421.301570][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'.
[  421.361734][T13771] netlink: 'syz.6.1870': attribute type 10 has an invalid length.
[  421.401401][T13771] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  421.419091][T13771] team0: Port device netdevsim1 added
[  422.462610][T13813] smc: removing ib device rxe0
[  422.701063][T13813] smbdirect: ib_dev[rxe0] removed
[  423.360372][T13820] bond5: entered promiscuous mode
[  423.360941][T13820] 8021q: adding VLAN 0 to HW filter on device bond5
[  423.980299][T13840] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  424.360438][ T5628] Bluetooth: hci6: link tx timeout
[  424.360459][ T5628] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  424.391743][ T5630] Bluetooth: hci6: link tx timeout
[  424.391761][ T5630] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  424.392108][ T5630] Bluetooth: hci6: link tx timeout
[  424.392120][ T5630] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  424.395492][ T5630] Bluetooth: hci6: link tx timeout
[  424.395511][ T5630] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  424.409657][ T5764] net_ratelimit: 32 callbacks suppressed
[  424.409679][ T5764] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  424.521290][ T5630] Bluetooth: hci6: link tx timeout
[  424.521312][ T5630] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa
[  424.853194][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  425.044584][T13841] __nla_validate_parse: 6 callbacks suppressed
[  425.044605][T13841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1888'.
[  425.123531][  T701] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  425.357830][T13841] bond0: (slave bond_slave_1): Releasing backup interface
[  425.621600][T13877] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  425.625641][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  425.756144][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  426.276425][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  426.405140][ T5630] Bluetooth: hci6: command 0x0406 tx timeout
[  426.638759][  T701] bond2: (slave bridge2): failed to get link speed/duplex
[  426.643191][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.643640][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  426.743446][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  426.914059][T13898] bridge0: port 2(syz_tun) entered blocking state
[  426.914512][T13898] bridge0: port 2(syz_tun) entered disabled state
[  426.914854][T13898] syz_tun: entered allmulticast mode
[  426.919436][T13902] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1900'.
[  426.982127][T13898] syz_tun: entered promiscuous mode
[  427.163536][T13898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1899'.
[  427.511278][T13908] IPVS: set_ctl: invalid protocol: 0 172.30.0.3:20003
[  428.324098][T13932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1909'.
[  428.402133][T13932] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1909'.
[  428.639994][T13941] xt_IDLETIMER: timeout value is zero
[  428.945257][T13947] FAULT_INJECTION: forcing a failure.
[  428.945257][T13947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  428.945294][T13947] CPU: 1 UID: 0 PID: 13947 Comm: syz.2.1910 Not tainted syzkaller #0 PREEMPT(full) 
[  428.945316][T13947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  428.945329][T13947] Call Trace:
[  428.945359][T13947]  <TASK>
[  428.945438][T13947]  dump_stack_lvl+0xe8/0x150
[  428.945588][T13947]  should_fail_ex+0x410/0x560
[  428.945713][T13947]  _copy_from_user+0x2d/0xb0
[  428.945792][T13947]  ___sys_sendmsg+0x1c6/0x360
[  428.945913][T13947]  ? __lock_acquire+0x747/0x2de0
[  428.946002][T13947]  ? __pfx____sys_sendmsg+0x10/0x10
[  428.946066][T13947]  ? __fget_files+0x3a2/0x420
[  428.946108][T13947]  ? __fget_files+0x2a/0x420
[  428.946137][T13947]  __x64_sys_sendmsg+0x1b1/0x290
[  428.946160][T13947]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  428.946209][T13947]  do_syscall_64+0x166/0x520
[  428.946288][T13947]  ? trace_irq_disable+0x3b/0x140
[  428.946325][T13947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.946363][T13947]  ? clear_bhb_loop+0x70/0xc0
[  428.946386][T13947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  428.946405][T13947] RIP: 0033:0x7fa0faf9f559
[  428.946452][T13947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  428.946469][T13947] RSP: 002b:00007fa0fbed5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  428.946521][T13947] RAX: ffffffffffffffda RBX: 00007fa0fb225fa0 RCX: 00007fa0faf9f559
[  428.946535][T13947] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  428.946547][T13947] RBP: 00007fa0fbed5090 R08: 0000000000000000 R09: 0000000000000000
[  428.946560][T13947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  428.946571][T13947] R13: 00007fa0fb226038 R14: 00007fa0fb225fa0 R15: 00007ffced063fd8
[  428.946603][T13947]  </TASK>
[  429.525903][T13958] net_ratelimit: 17 callbacks suppressed
[  429.525924][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  429.527418][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  429.539764][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  429.554109][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  429.554955][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  429.562272][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  429.573227][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  429.574191][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  429.586413][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  429.587337][T13958] ip_tables: iptables: counters copy to user failed while replacing table
[  430.326787][T13982] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1918'.
[  430.361699][T13955] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  430.526967][T13982] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1918'.
[  430.526997][T13982] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1918'.
[  430.741460][T13994] netlink: 'syz.0.1920': attribute type 1 has an invalid length.
[  430.843322][T13994] bond6: entered promiscuous mode
[  430.847885][T13994] 8021q: adding VLAN 0 to HW filter on device bond6
[  431.000269][T14000] bond6: (slave bridge1): making interface the new active one
[  431.000297][T14000] bridge1: entered promiscuous mode
[  431.031788][T14000] bond6: (slave bridge1): Enslaving as an active interface with an up link
[  431.351140][T14018] ksmbd: Unknown IPC event: 8, ignore.
[  431.360189][T14016] FAULT_INJECTION: forcing a failure.
[  431.360189][T14016] name failslab, interval 1, probability 0, space 0, times 0
[  431.360221][T14016] CPU: 1 UID: 0 PID: 14016 Comm: syz.0.1925 Not tainted syzkaller #0 PREEMPT(full) 
[  431.360242][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  431.360253][T14016] Call Trace:
[  431.360260][T14016]  <TASK>
[  431.360268][T14016]  dump_stack_lvl+0xe8/0x150
[  431.360301][T14016]  should_fail_ex+0x410/0x560
[  431.360332][T14016]  ? __alloc_skb+0x1db/0x7a0
[  431.360525][T14016]  should_failslab+0xa8/0x100
[  431.360570][T14016]  ? __alloc_skb+0x1db/0x7a0
[  431.360592][T14016]  kmem_cache_alloc_node_noprof+0x9c/0x600
[  431.360620][T14016]  ? __alloc_skb+0x18d/0x7a0
[  431.360645][T14016]  ? __alloc_skb+0x1db/0x7a0
[  431.360678][T14016]  __alloc_skb+0x1db/0x7a0
[  431.360710][T14016]  netlink_sendmsg+0x5cd/0xb20
[  431.360823][T14016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  431.360848][T14016]  ? aa_sock_msg_perm+0x144/0x210
[  431.360992][T14016]  ? apparmor_socket_sendmsg+0x98/0x360
[  431.361015][T14016]  ? __pfx_netlink_sendmsg+0x10/0x10
[  431.361038][T14016]  sock_sendmsg_nosec+0x14e/0x190
[  431.361065][T14016]  ____sys_sendmsg+0x54e/0x850
[  431.361100][T14016]  ? __pfx_____sys_sendmsg+0x10/0x10
[  431.361138][T14016]  ? import_iovec+0x73/0xa0
[  431.361205][T14016]  ___sys_sendmsg+0x2a5/0x360
[  431.361232][T14016]  ? __lock_acquire+0x747/0x2de0
[  431.361260][T14016]  ? __pfx____sys_sendmsg+0x10/0x10
[  431.361329][T14016]  ? __fget_files+0x3a2/0x420
[  431.361349][T14016]  ? __fget_files+0x2a/0x420
[  431.361380][T14016]  __x64_sys_sendmsg+0x1b1/0x290
[  431.361447][T14016]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  431.361509][T14016]  do_syscall_64+0x166/0x520
[  431.361529][T14016]  ? trace_irq_disable+0x3b/0x140
[  431.361550][T14016]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.361569][T14016]  ? clear_bhb_loop+0x70/0xc0
[  431.361592][T14016]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  431.361608][T14016] RIP: 0033:0x7f825619f559
[  431.361626][T14016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  431.361642][T14016] RSP: 002b:00007f82570d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  431.361663][T14016] RAX: ffffffffffffffda RBX: 00007f8256425fa0 RCX: 00007f825619f559
[  431.361677][T14016] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  431.361689][T14016] RBP: 00007f82570d7090 R08: 0000000000000000 R09: 0000000000000000
[  431.361700][T14016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  431.361712][T14016] R13: 00007f8256426038 R14: 00007f8256425fa0 R15: 00007ffe574e3288
[  431.361745][T14016]  </TASK>
[  431.565963][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1927'.
[  431.882936][T14026] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1928'.
[  431.926619][T14026] netlink: 'syz.5.1928': attribute type 1 has an invalid length.
[  431.926658][T14026] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1928'.
[  432.029155][T14034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1929'.
[  432.403642][ T5632] Bluetooth: hci5: command 0x0405 tx timeout
[  432.952230][T14054] netlink: 'syz.2.1933': attribute type 4 has an invalid length.
[  433.086250][T14059] netlink: 'syz.6.1934': attribute type 1 has an invalid length.
[  433.287041][T14059] bond1: entered promiscuous mode
[  433.295174][T14059] 8021q: adding VLAN 0 to HW filter on device bond1
[  433.347539][T14071] netlink: 'syz.5.1935': attribute type 15 has an invalid length.
[  433.355030][T14071] IPv6: NLM_F_CREATE should be specified when creating new route
[  433.589762][T14063] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  433.765077][T14063] 8021q: adding VLAN 0 to HW filter on device bond2
[  433.817624][T14063] 8021q: adding VLAN 0 to HW filter on device bond3
[  433.921174][T14063] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  433.950725][T14063] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  434.062390][T14063] 8021q: adding VLAN 0 to HW filter on device ipvlan4
[  434.097955][T14063] 8021q: adding VLAN 0 to HW filter on device ipvlan5
[  434.146784][T14063] geneve0: entered promiscuous mode
[  434.177429][T14063] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  434.375929][T14063] ieee802154 phy0 wpan0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  434.411119][T14063] 8021q: adding VLAN 0 to HW filter on device batadv2
[  434.426131][T14063] 8021q: adding VLAN 0 to HW filter on device batadv3
[  434.450023][T14063] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  434.480800][T14064] macvtap1: entered allmulticast mode
[  434.510119][T14069] bond1: (slave bridge2): making interface the new active one
[  434.510145][T14069] bridge2: entered promiscuous mode
[  434.512493][T14069] bond1: (slave bridge2): Enslaving as an active interface with an up link
[  434.607408][   T13] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex
[  434.607751][   T13] bond3: (slave veth5): making interface the new active one
[  434.627247][   T13] bond3: active interface up!
[  434.670453][T14092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1939'.
[  435.317094][   T13] net_ratelimit: 42 callbacks suppressed
[  435.317119][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  435.461072][T14092] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check.
[  435.463553][T10727] bond2: (slave bridge2): failed to get link speed/duplex
[  435.478985][T14101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1941'.
[  435.576521][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  435.683225][T10727] bond2: (slave bridge2): failed to get link speed/duplex
[  435.793152][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  435.902879][T10727] bond2: (slave bridge2): failed to get link speed/duplex
[  435.940510][T14122] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  435.940900][T14122] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  436.012916][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  436.776512][T14139] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1948'.
[  436.839957][T14134] bond5: left promiscuous mode
[  437.055476][T14138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1948'.
[  437.158032][   T30] audit: type=1800 audit(1793015266.952:15): pid=14144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1950" name="blkio.bfq.time" dev="tmpfs" ino=2005 res=0 errno=-22
[  437.266248][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1950'.
[  437.326180][T14140] syzkaller1: entered promiscuous mode
[  437.326204][T14140] syzkaller1: entered allmulticast mode
[  438.691105][T14176] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1957'.
[  438.724106][T14181] netlink: 'syz.0.1959': attribute type 4 has an invalid length.
[  438.776713][T14184] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1961'.
[  438.811920][T14180] netlink: 'syz.5.1960': attribute type 6 has an invalid length.
[  438.811948][T14180] IPv6: NLM_F_CREATE should be specified when creating new route
[  438.934160][T14185] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11
[  438.935631][T14180] Bluetooth: hci0: Invalid link address type 1 for 66:55:44:23:22:11
[  439.039335][T14182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1958'.
[  439.449350][T14195] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1965'.
[  439.568984][T14197] syzkaller0: entered promiscuous mode
[  439.569011][T14197] syzkaller0: entered allmulticast mode
[  439.622874][T14204] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1966'.
[  439.926106][T14213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'.
[  440.575960][ T1319] ieee802154 phy1 wpan1: encryption failed: -22
[  444.410984][ T1947] block nbd0: Possible stuck request ffff888028507000: control (read@0,1024B). Runtime 240 seconds
[  444.411024][ T1947] block nbd0: Possible stuck request ffff8880285071c0: control (read@1024,1024B). Runtime 240 seconds
[  444.411048][ T1947] block nbd0: Possible stuck request ffff888028507380: control (read@2048,1024B). Runtime 240 seconds
[  444.411070][ T1947] block nbd0: Possible stuck request ffff888028507540: control (read@3072,1024B). Runtime 240 seconds
[  444.411494][   T40] net_ratelimit: 27 callbacks suppressed
[  444.411509][   T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  444.779124][T14213] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  444.784097][T14220] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  444.798823][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  444.921401][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  445.023794][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  445.047013][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.048484][T10730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  445.133077][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  445.243915][T14249] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  445.249108][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  445.377757][T14256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  445.402909][T14251] nbd: must specify an index to disconnect
[  445.454108][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  446.163849][T10739] bond2: (slave bridge2): failed to get link speed/duplex
[  447.879183][T14317] wg0 speed is unknown, defaulting to 1000
[  447.938881][T14317] wg0 speed is unknown, defaulting to 1000
[  447.945990][T14317] wg0 speed is unknown, defaulting to 1000
[  448.378624][T14348] netlink: 'syz.6.1991': attribute type 1 has an invalid length.
[  448.786439][T14317] infiniband s題1: set active
[  448.792406][T14317] infiniband s題1: added wg0
[  448.812560][T14317] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[  448.846445][T14317] infiniband s題1: Couldn't open port 1
[  448.846930][T14317] smbdirect: ib_dev[s題1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  448.846963][T14317] smbdirect: ib_dev[s題1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  448.847002][T14317] smbdirect: ib_dev[s題1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  448.938889][T14348] 8021q: adding VLAN 0 to HW filter on device bond2
[  448.944095][  T988] wg0 speed is unknown, defaulting to 1000
[  449.227104][T14317] RDS/IB: s題1: added
[  449.227162][T14317] smc: adding ib device s題1 with port count 1
[  449.227183][T14317] smc:    ib device s題1 port 1 has no pnetid
[  449.549786][  T988] wg0 speed is unknown, defaulting to 1000
[  449.550000][T14317] wg0 speed is unknown, defaulting to 1000
[  449.573302][T10731] net_ratelimit: 11 callbacks suppressed
[  449.573326][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  449.825874][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  449.932889][ T5632] Bluetooth: hci6: command 0x0406 tx timeout
[  449.952876][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  450.084917][   T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.085145][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  450.170993][   T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.171923][T10730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.175895][   T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.243919][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  450.395265][T14373] __nla_validate_parse: 1 callbacks suppressed
[  450.395288][T14373] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'.
[  450.395491][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1997'.
[  450.654988][T10730] bond2: (slave bridge2): failed to get link speed/duplex
[  450.998357][T14317] wg0 speed is unknown, defaulting to 1000
[  451.055506][T14387] netlink: 'syz.6.2000': attribute type 29 has an invalid length.
[  451.095063][T14387] netlink: 67 bytes leftover after parsing attributes in process `syz.6.2000'.
[  451.697651][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'.
[  452.287813][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'.
[  452.371123][T14317] wg0 speed is unknown, defaulting to 1000
[  452.565089][T14412] syzkaller0: entered promiscuous mode
[  452.565271][T14412] syzkaller0: entered allmulticast mode
[  452.591976][   T40] hfsc: classify hop budget exhausted, dropping packet
[  452.606527][T14412] hfsc: classify hop budget exhausted, dropping packet
[  452.806511][T14430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2007'.
[  452.837941][T14317] wg0 speed is unknown, defaulting to 1000
[  452.864171][T14422] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[  452.901373][T14431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2005'.
[  453.411652][T14443] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2009'.
[  453.438809][T14317] wg0 speed is unknown, defaulting to 1000
[  453.976246][T14454] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2013'.
[  453.976271][T14454] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2013'.
[  454.228551][T14317] wg0 speed is unknown, defaulting to 1000
[  454.322404][T14459] syzkaller0: entered promiscuous mode
[  454.322428][T14459] syzkaller0: entered allmulticast mode
[  454.348075][T14459] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  454.685779][ T8474] net_ratelimit: 22 callbacks suppressed
[  454.685804][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  454.793028][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  454.917026][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  455.023720][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  455.135666][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.139352][   T12] bond2: (slave bridge2): failed to get link speed/duplex
[  455.289486][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.374644][   T13] bond2: (slave bridge2): failed to get link speed/duplex
[  455.376287][T14317] wg0 speed is unknown, defaulting to 1000
[  455.485194][ T8474] bond2: (slave bridge2): failed to get link speed/duplex
[  455.801983][T14504] __nla_validate_parse: 3 callbacks suppressed
[  455.802001][T14504] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2025'.
[  455.823638][T10731] bond2: (slave bridge2): failed to get link speed/duplex
[  455.865628][T14496] syzkaller1: entered promiscuous mode
[  455.865878][T14496] syzkaller1: entered allmulticast mode
[  456.753679][T14534] bond0: (slave ip6tnl0): refused to change device type
[  457.037038][T14537] gre1: entered promiscuous mode
[  457.037064][T14537] gre1: entered allmulticast mode
[  457.114267][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2034'.
[  457.494984][T14550] netlink: 'syz.6.2037': attribute type 2 has an invalid length.
[  457.495010][T14550] netlink: 232 bytes leftover after parsing attributes in process `syz.6.2037'.
[  457.732729][T14554] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2037'.
[  458.108410][T14579] ip6tnl0: Caught tx_queue_len zero misconfig
[  458.436322][T14583] block nbd2: server does not support multiple connections per device.
[  458.439678][T14583] block nbd2: shutting down sockets
[  459.757852][T14593] netlink: 193 bytes leftover after parsing attributes in process `syz.0.2049'.
[  459.859765][T14598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2050'.
[  460.117861][T14604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2051'.
[  460.218970][T14608] netlink: 'syz.2.2051': attribute type 1 has an invalid length.
[  460.406161][   T32] INFO: task syz.1.1536:12328 blocked for more than 143 seconds.
[  460.406191][   T32]       Not tainted syzkaller #0
[  460.406201][   T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  460.406210][   T32] task:syz.1.1536      state:D stack:27168 pid:12328 tgid:12327 ppid:5636   task_flags:0x400140 flags:0x00080002
[  460.406267][   T32] Call Trace:
[  460.406275][   T32]  <TASK>
[  460.406289][   T32]  __schedule+0x17dd/0x5820
[  460.406450][   T32]  ? __pfx___schedule+0x10/0x10
[  460.406490][   T32]  ? schedule+0x90/0x2b0
[  460.406523][   T32]  schedule+0x164/0x2b0
[  460.406553][   T32]  schedule_preempt_disabled+0x13/0x30
[  460.406717][   T32]  __mutex_lock+0x7c4/0x15a0
[  460.406744][   T32]  ? __mutex_lock+0x5cd/0x15a0
[  460.406769][   T32]  ? nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0
[  460.406858][   T32]  ? __pfx___mutex_lock+0x10/0x10
[  460.406888][   T32]  ? net_generic+0x1e/0x240
[  460.406906][   T32]  ? net_generic+0x1e/0x240
[  460.406932][   T32]  nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0
[  460.406961][   T32]  ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10
[  460.406991][   T32]  ? rcu_is_watching+0x16/0xb0
[  460.407038][   T32]  ? trace_kmalloc+0x2a/0xf0
[  460.407067][   T32]  ? __kmalloc_noprof+0x387/0x710
[  460.407095][   T32]  ? __nla_parse+0x40/0x60
[  460.407119][   T32]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  460.407140][   T32]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  460.407169][   T32]  genl_family_rcv_msg_doit+0x233/0x340
[  460.407214][   T32]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  460.407258][   T32]  ? bpf_lsm_capable+0x9/0x20
[  460.407294][   T32]  ? security_capable+0x7e/0x2c0
[  460.407377][   T32]  genl_rcv_msg+0x614/0x7a0
** replaying previous printk message **
[  460.407377][   T32]  genl_rcv_msg+0x614/0x7a0
[  460.407469][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  460.407498][   T32]  ? __pfx_nfsd_nl_expkey_set_reqs_doit+0x10/0x10
[  460.407535][   T32]  netlink_rcv_skb+0x226/0x4a0
[  460.407555][   T32]  ? __pfx_genl_rcv_msg+0x10/0x10
[  460.407578][   T32]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  460.407933][   T32]  ? down_read+0x2b9/0x320
[  460.407967][   T32]  genl_rcv+0x28/0x40
[  460.407997][   T32]  netlink_unicast+0x8ef/0xa80
[  460.408040][   T32]  netlink_sendmsg+0x7f0/0xb20
[  460.408073][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.408103][   T32]  ? aa_sock_msg_perm+0x144/0x210
[  460.408133][   T32]  ? apparmor_socket_sendmsg+0x98/0x360
[  460.408156][   T32]  ? __pfx_netlink_sendmsg+0x10/0x10
[  460.408179][   T32]  sock_sendmsg_nosec+0x14e/0x190
[  460.408207][   T32]  ____sys_sendmsg+0x54e/0x850
[  460.408242][   T32]  ? __pfx_____sys_sendmsg+0x10/0x10
[  460.408281][   T32]  ? import_iovec+0x73/0xa0
[  460.408312][   T32]  ___sys_sendmsg+0x2a5/0x360
[  460.408338][   T32]  ? __lock_acquire+0x747/0x2de0
[  460.408366][   T32]  ? __pfx____sys_sendmsg+0x10/0x10
[  460.408585][   T32]  ? futex_wake+0x51b/0x5f0
[  460.408665][   T32]  ? __fget_files+0x3a2/0x420
[  460.408685][   T32]  ? __fget_files+0x2a/0x420
[  460.408722][   T32]  __x64_sys_sendmsg+0x1b1/0x290
[  460.408745][   T32]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  460.408795][   T32]  do_syscall_64+0x166/0x520
[  460.408811][   T32]  ? trace_irq_disable+0x3b/0x140
[  460.408832][   T32]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.408852][   T32]  ? clear_bhb_loop+0x70/0xc0
[  460.408871][   T32]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  460.408890][   T32] RIP: 0033:0x7faad939f559
[  460.408908][   T32] RSP: 002b:00007faada2c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  460.409255][   T32] RAX: ffffffffffffffda RBX: 00007faad9625fa0 RCX: 00007faad939f559
[  460.409271][   T32] RDX: 0000000000000020 RSI: 00002000000003c0 RDI: 0000000000000007
[  460.409283][   T32] RBP: 00007faad9436b20 R08: 0000000000000000 R09: 0000000000000000
[  460.409296][   T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  460.409308][   T32] R13: 00007faad9626038 R14: 00007faad9625fa0 R15: 00007ffe6dbc98f8
[  460.409342][   T32]  </TASK>
[  460.409399][   T32] 
[  460.409399][   T32] Showing all locks held in the system:
[  460.409410][   T32] locks held by khungtaskd/32: 1, last CPU#1:
[  460.409585][   T32]  #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  460.409749][   T32] locks held by kworker/u8:2/40: 2, on CPU#0:
[  460.409762][   T32]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  460.409957][   T32]  #1: ffffc90000b07c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  460.410037][   T32] locks held by getty/5385: 2, on CPU#0:
[  460.410162][   T32]  #0: ffff8880385290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  460.410777][   T32]  #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[  460.410836][   T32] locks held by syz-executor/5627: 3, last CPU#0:
[  460.410849][   T32]  #0: ffffffff8fe33fd0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470
[  460.410913][   T32]  #1: ffff888037400340 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[  460.410968][   T32]  #2: ffff8880550c8340 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[  460.411037][   T32] locks held by kworker/u8:11/8474: 3, on CPU#1:
[  460.411051][   T32]  #0: ffff88801c0ac148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  460.411125][   T32]  #1: ffffc9001a33fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[  460.411613][   T32]  #2: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  460.411773][   T32] locks held by udevd/9035: 1, on CPU#1:
[  460.411787][   T32]  #0: ffff888027dfc350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70
[  460.411883][   T32] locks held by syz.4.1099/10508: 2, on CPU#1:
[  460.411897][   T32]  #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  460.411951][   T32]  #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0
[  460.412051][   T32] locks held by syz.1.1536/12328: 2, on CPU#1:
[  460.412065][   T32]  #0: ffffffff912db128 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  460.412109][   T32]  #1: ffffffff9009e720 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_set_reqs_doit+0xfe/0xaf0
[  460.412157][   T32] locks held by syz.6.2037/14548: 2, on CPU#1:
[  460.412171][   T32]  #0: ffff888013a6a4c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0
[  460.412227][   T32]  #1: ffff8880271aa260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1d4/0xa30
[  460.584429][   T32] locks held by syz.3.2043/14570: 2, on CPU#1:
[  460.584449][   T32]  #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0
[  460.584662][   T32]  #1: ffffffff8fd60328 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760
[  460.584716][   T32] locks held by syz.3.2043/14571: 1, last CPU#1:
[  460.584729][   T32]  #0: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: bpf_test_timer_enter+0xf9/0x260
[  460.584825][   T32] locks held by syz.5.2050/14598: 1, on CPU#1:
[  460.584838][   T32]  #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30
[  460.585103][   T32] locks held by syz.2.2051/14601: 1, on CPU#0:
[  460.585117][   T32]  #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70
[  460.585161][   T32] locks held by syz.2.2051/14602: 1, on CPU#0:
[  460.585174][   T32]  #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x2fb/0x1c50
[  460.585297][   T32] locks held by syz.2.2051/14604: 1, on CPU#1:
[  460.585309][   T32]  #0: ffffffff91276f20 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc1d/0x1c30
[  460.585597][   T32] 
[  460.585603][   T32] =============================================
[  460.585603][   T32] 
[  460.585622][   T32] NMI backtrace for cpu 0
[  460.585637][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  460.585652][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  460.585658][   T32] Call Trace:
[  460.585664][   T32]  <TASK>
[  460.585670][   T32]  dump_stack_lvl+0xe8/0x150
[  460.585688][   T32]  nmi_cpu_backtrace+0x274/0x2d0
[  460.585751][   T32]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  460.585785][   T32]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[  460.585813][   T32]  sys_info+0x135/0x170
[  460.585862][   T32]  watchdog+0xfd2/0x1030
[  460.585898][   T32]  ? watchdog+0x1c7/0x1030
[  460.585926][   T32]  kthread+0x38b/0x480
[  460.585945][   T32]  ? __pfx_watchdog+0x10/0x10
[  460.585964][   T32]  ? __pfx_kthread+0x10/0x10
[  460.585984][   T32]  ret_from_fork+0x514/0xb70
[  460.586017][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  460.586036][   T32]  ? __switch_to+0xc78/0x1410
[  460.586093][   T32]  ? __pfx_kthread+0x10/0x10
[  460.586113][   T32]  ret_from_fork_asm+0x1a/0x30
[  460.586147][   T32]  </TASK>
[  460.586193][   T32] Sending NMI from CPU 0 to CPUs 1:
[  460.586248][    C1] NMI backtrace for cpu 1
[  460.586264][    C1] CPU: 1 UID: 0 PID: 31 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) 
[  460.586285][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  460.586298][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  460.586387][    C1] Code: e8 1e 1c 50 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 af 13 c1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  460.586403][    C1] RSP: 0018:ffffc90000a778b8 EFLAGS: 00000002
[  460.586421][    C1] RAX: 1ffffffff37b4300 RBX: 00000000000003fd RCX: 0000000000000000
[  460.586434][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  460.586446][    C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004
[  460.586459][    C1] R10: dffffc0000000000 R11: ffffffff857849b0 R12: dffffc0000000000
[  460.586474][    C1] R13: 0000000000000000 R14: ffffffff9bda1b20 R15: 0000000000000000
[  460.586487][    C1] FS:  0000000000000000(0000) GS:ffff888123b6b000(0000) knlGS:0000000000000000
[  460.586503][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  460.586517][    C1] CR2: 00007f82561c7fd2 CR3: 000000007526a000 CR4: 00000000003526f0
[  460.586534][    C1] Call Trace:
[  460.586542][    C1]  <TASK>
[  460.586551][    C1]  wait_for_lsr+0x184/0x2f0
[  460.586624][    C1]  __serial8250_console_fifo_write+0xcd/0x3e0
[  460.586653][    C1]  serial8250_console_write+0xa7e/0x1200
[  460.586682][    C1]  ? lockdep_hardirqs_on+0x7b/0x110
[  460.586707][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  460.586735][    C1]  ? __schedule+0x17f3/0x5820
[  460.586773][    C1]  nbcon_emit_next_record+0xef5/0x1a90
[  460.586807][    C1]  ? __pfx_nbcon_emit_next_record+0x10/0x10
[  460.586834][    C1]  ? nbcon_context_try_acquire+0x819/0xbd0
[  460.586867][    C1]  ? _raw_spin_lock_irqsave+0x4c/0x60
[  460.586930][    C1]  nbcon_kthread_func+0x6d9/0x8d0
[  460.586956][    C1]  ? nbcon_kthread_func+0x163/0x8d0
[  460.586977][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  460.587003][    C1]  ? __kthread_parkme+0x71/0x1f0
[  460.587032][    C1]  ? __kthread_parkme+0x199/0x1f0
[  460.587063][    C1]  kthread+0x38b/0x480
[  460.587081][    C1]  ? __pfx_nbcon_kthread_func+0x10/0x10
[  460.587102][    C1]  ? __pfx_kthread+0x10/0x10
[  460.587122][    C1]  ret_from_fork+0x514/0xb70
[  460.587144][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  460.587163][    C1]  ? __switch_to+0xc78/0x1410
[  460.587192][    C1]  ? __pfx_kthread+0x10/0x10
[  460.587212][    C1]  ret_from_fork_asm+0x1a/0x30
[  460.587241][    C1]  </TASK>
[  460.632074][   T32] Kernel panic - not syncing: hung_task: blocked tasks
[  460.634997][   T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  461.811280][   T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[  461.824412][   T32] Call Trace:
[  461.828111][   T32]  <TASK>
[  461.831460][   T32]  vpanic+0x56d/0xa60
[  461.836150][   T32]  ? __pfx___schedule+0x10/0x10
[  461.841301][   T32]  ? __pfx_vpanic+0x10/0x10
[  461.846130][   T32]  panic+0xc5/0xd0
[  461.850587][   T32]  ? __pfx_panic+0x10/0x10
[  461.855685][   T32]  ? preempt_schedule_common+0x7f/0xd0
[  461.863002][   T32]  ? preempt_schedule_thunk+0x16/0x40
[  461.870016][   T32]  ? nmi_trigger_cpumask_backtrace+0x31a/0x390
[  461.878056][   T32]  ? nmi_trigger_cpumask_backtrace+0x31f/0x390
[  461.885763][   T32]  watchdog+0x102b/0x1030
[  461.896244][   T32]  ? watchdog+0x1c7/0x1030
[  461.903060][   T32]  kthread+0x38b/0x480
[  461.907965][   T32]  ? __pfx_watchdog+0x10/0x10
[  461.914150][   T32]  ? __pfx_kthread+0x10/0x10
[  461.921032][   T32]  ret_from_fork+0x514/0xb70
[  461.926381][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  461.933685][   T32]  ? __switch_to+0xc78/0x1410
[  461.942062][   T32]  ? __pfx_kthread+0x10/0x10
[  461.947044][   T32]  ret_from_fork_asm+0x1a/0x30
[  461.952040][   T32]  </TASK>
[  461.956645][   T32] Kernel Offset: disabled
[  461.961557][   T32] Rebooting in 86400 seconds..