last executing test programs:

5m4.677815419s ago: executing program 4 (id=4087):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
close(r2) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async)
setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000040)=0x8, 0x4)
r3 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x80002008}) (async)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x808000}, 0x8) (async)
getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x1f}}}, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x9}, &(0x7f00000001c0)=0x9c) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x44040810}, 0x0) (async)
listen(0xffffffffffffffff, 0x400004) (async)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r6, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async)
r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) (async)
poll(&(0x7f0000002000)=[{r8, 0x93d4}], 0x1, 0x9) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="28979602c34e15c79c75d40000101000000000003b68a635d892a3218c92e981b837fdd119cfe3045193c03c9893bbeedce84a4e9f8b47e8baac3ae8e143b90a5076000000"], 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r9, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r6}, 0x20)
recvmmsg(r6, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) (async)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001080)=ANY=[@ANYBLOB="400000006800000326bd7000fbdbdf25020005000400000014000600e000000200000000000000000000000008000100fdffffff08000500", @ANYRES32=r4, @ANYBLOB="04000f00"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0)

5m4.16106755s ago: executing program 4 (id=4093):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000007c0)={0x3, 'vlan1\x00'})
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x24, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044080}, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35", 0x18}, {&(0x7f0000000900)}], 0x4}}], 0x1, 0x20000044)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="ad56000081000008000d00"/24, 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80000)
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000980)={0x38, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{{0x8}, {0x4}}, {{0x8}, {0x4}}, {{0x8}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xd0}, 0x800)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

5m3.722428573s ago: executing program 4 (id=4097):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24008000)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f400002000000000000080000000000000000010005000000000044000500ac141426000000000000000000000000000004d53c", @ANYRES32, @ANYRES8=r1], 0xfc}}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c4}, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x14060060}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, r7, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xb}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@rand_addr=0x64010100}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1fdc0}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x37}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x34, 0x10}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000014}, 0x40)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r6, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x6, 0x0, 0x6}}, {@ipv6={0x86dd, @tipc_packet={0xb, 0x6, "5afbeb", 0x1a, 0x6, 0xff, @mcast2, @private2, {[], @payload_conn={{{0x1a, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x2, 0x7, 0x0, 0x0, 0xf, 0x3, 0x0, 0x3, 0x4, 0x3, 0x4e22, 0x4e21}}, [0x0, 0x0]}}}}}}}, 0x45)
setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4)
r9 = epoll_create1(0x80000)
r10 = socket(0x1, 0x3, 0x0)
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0x8000000d})
epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000000c0)={0x10000001})
close(r10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = getpid()
setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000003c0)=@gcm_256={{0x304}, "6d6b6f4e2a58cf31", "2957cf0a0b6ec539770a89897d96969cf7df9f9c060e6a726fb36017cafe27f3", "15796fd5", "ecdb87d351d53988"}, 0x38)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001500010000000000ffffffff0d00000008000100", @ANYRES32=r13, @ANYBLOB="e612dfdac554d03b01c5bb70dc7ad0316d35763c8d1d1af715220dfbcc647f43e24cc96dcbba5897697367d2749b1416866a6ad0c8ef029ae70d00"/72], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000)
sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0)

5m2.819051433s ago: executing program 4 (id=4108):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x4}, 0x40050)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000600142fd28095f62a00000000000009", @ANYRES32=r1, @ANYBLOB="00000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000200)=""/16, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94)

5m2.600252172s ago: executing program 4 (id=4110):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={<r1=>0xffffffffffffffff})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)
r2 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={<r3=>0x0, <r4=>0x0}, &(0x7f0000000200)=0xc)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRESOCT=r3, @ANYRES8=r5, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES16, @ANYRESDEC=r0, @ANYRESDEC=r4, @ANYRES32=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
clock_gettime(0x0, &(0x7f0000000000))
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f00003cf000/0x1000)=nil, 0x1000, 0x2, 0x31, r0, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024)
r8 = socket(0x10, 0x2, 0x0)
setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xfffffffe, @empty, 0x8}}}, 0x108)
r9 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {0xc, 0x4}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x34}, 0x1, 0x600}, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000200), 0x0)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r10 = socket(0xb, 0x8, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, 0x0, 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c00000019000106222a98f6bd3c0000000000fedbdf250a140000fd0400070036000008001e010100000008"], 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050)
recvmsg(r11, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
ioctl$XFS_IOC_FSGROWFSRT(r6, 0x40105870, &(0x7f0000000280)={0xc, 0x7})
sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000000706010800000000000000000a0000040500010007000000925c9885fdb7f9fc5a2b3fd8de7cd7331a984e37747c3d3f6f086e6d0f68387d7739718ecfd79786e5fce277c58a3ff7f699de62b2a50f1a71c380ebb15f99858cc86045f5709929197c5728e865add3793ca27c70b34f1345de90a5cd34b4e7f764a010a001e69797ead703711817b0cf2fb1c6473d1cdf9ef8fc2fd8636ae63073a29c90b5f89ca0d76bc42c1573962787c5cbf3ee2ce8d48a9fe9ae8e4b7dfd7dfa696c320d85114cab1ad7689da12c9b73f28e218a7acb5d57b70af3d2b6b95f0633b269b0e6d64a4e16a6b295c96bdf493711c2d6eed50906f92504314b12b4719c24ff9c27e0a712"], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r9)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

5m2.247754425s ago: executing program 4 (id=4111):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'ip6_vti0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
close(r2)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x404c881}, 0x20000880)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syz_tun\x00', @random="0b5de693443f"})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff1}, {0x2, 0xb}, {0x5, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x521}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5f}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x2200c0c4)
r7 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0xffff, @broadcast}}, 0x1e)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r9 = socket$inet6(0xa, 0x6, 0x2000810)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r10, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4)
getsockopt$inet6_tcp_int(r10, 0x6, 0x5, 0x0, &(0x7f00000009c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0x6}, 0x5}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000380)=[{0x7, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x1, 0xfffff00c}, {0x7, 0xba, 0x2, 0xffff}]}, 0x10)
sendmsg(r9, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)

4m46.834665408s ago: executing program 32 (id=4111):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'ip6_vti0\x00', 0x400})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0)
close(r2)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00'/20, @ANYRES32=0x0, @ANYRES8=r0], 0x44}, 0x1, 0x0, 0x0, 0x404c881}, 0x20000880)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syz_tun\x00', @random="0b5de693443f"})
r4 = socket$unix(0x1, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {0xfff3, 0xfff1}, {0x2, 0xb}, {0x5, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x521}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x5f}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000001}, 0x2200c0c4)
r7 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r7, &(0x7f0000000140)={0x18, 0x2, {0xffff, @broadcast}}, 0x1e)
r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r9 = socket$inet6(0xa, 0x6, 0x2000810)
r10 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r10, 0x6, 0x5, &(0x7f00000007c0)=0xe0, 0x4)
getsockopt$inet6_tcp_int(r10, 0x6, 0x5, 0x0, &(0x7f00000009c0))
connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0x6}, 0x5}, 0x1c)
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000380)=[{0x7, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x1, 0xfffff00c}, {0x7, 0xba, 0x2, 0xffff}]}, 0x10)
sendmsg(r9, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4)
connect$pptp(r7, &(0x7f0000000080)={0x18, 0x2, {0x1, @multicast1}}, 0x1e)

18.32291186s ago: executing program 1 (id=5680):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0)
r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000013c0)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000001400)={'a', ' *:* ', 'rwm\x00'}, 0xa)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004001001000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2}, 0x94)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x7, @val=@tracing={0x0, 0x7}}, 0x20)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001340)={<r3=>0xffffffffffffffff})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x4)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYRES16=r4, @ANYRES32=r6, @ANYBLOB="3c0012800b000100626174616476"], 0x64}, 0x1, 0x0, 0x0, 0x240480d1}, 0x40000)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000001380)={0x0, 0x1, 0x6, r6, 0xf}, 0xc)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000040)={0x0, ""/256, <r7=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000240)={r7, 0x4})
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
r8 = accept4(r5, &(0x7f0000001240)=@x25={0x9, @remote}, &(0x7f00000012c0)=0x80, 0x81000)
setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000001300)={0x1, 0x1, 0x8, 0x0, 0x6}, 0xc)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)

17.961372286s ago: executing program 1 (id=5684):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000000057"], 0x0, 0x34}, 0x28)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0c00e300"/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="010000000100"/28], 0x50)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001a00)=@filter={'filter\x00', 0x4, 0x4, 0x440, 0xffffffff, 0xd0, 0x1d8, 0xd0, 0xfeffffff, 0xffffffff, 0x370, 0x370, 0x370, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast2, [0xff, 0xffffff00, 0xff], 0x4e20, 0x4e21, 0x4e21, 0x4e22, 0x5, 0x1, 0x9, 0x0, 0x1}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0xff, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4}, 0x0, 0x138, 0x198, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x26, 0x8, 0x8, 0x7, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffff00, 0xff, 0xff000000], [0xff000000], 0x72, 0x1674}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0xce24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xc8, 0x0, 0xc000000)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd1, &(0x7f0000000340), 0x4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0x2, 0xc}, {0xffff, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x24, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x98}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8011}, 0x20000000)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000b80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000640)={0x4cc, r9, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x110, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5ea}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'syzkaller0\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, ',(-[$-\x00-#).}/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1de}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'netem\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'HMARK\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xbc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xae, 0x5, "7d75eac6a8ee7303fe12e0476c60c5d25047772d16fc4d9697b59fe2f39e7517bbf76aa749d0380ae5f606fe74107e0718144a39b3e013018b3cddfd763e617f60051a337ee10e3846b0b6ebcd9a3f65a76e773ece19106d7a68e20f845434deb9fa04abbd3bbaf29c13de16ef4e9727fd08437817cd067099157e3dbd6ad00fe6ed8d619df35299395d677ef6ee0353a604f20d44b077fd8ea4a5466878322a0a598ec38535e4a612b4"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x2e8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'REJECT\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'srh\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '.%:+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffb}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '/[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xff\xff'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x64, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x51bd}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ',]}\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4cba}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xeb0}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'HMARK\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '^.[](\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'REJECT\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'srh\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\+/\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'netem\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*:\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'filter\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5496}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x94q-.&\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000000}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/!\'@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x38, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x733}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'team0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x4}]}, 0x4cc}, 0x1, 0x0, 0x0, 0x20000800}, 0x4044141)
r10 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r10, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d86dd", 0x5ea, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14)

16.115229036s ago: executing program 1 (id=5691):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000500000001000000"], 0x50)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000010)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x85c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x4, 0x9, 0x2, 0x2, 0x1ff, 0x4, 0x4, 0x92, 0xd, 0x11f4, 0xf, 0x101, 0x0, 0xfffffffe, 0x4, 0x7f, 0x9, 0x4, 0x3597, 0x80, 0xc, 0x0, 0x6, 0xf290, 0x8e3, 0x6, 0x20a, 0x0, 0xfffffff3, 0x2b, 0x4, 0x4, 0x7, 0x6, 0xffff8001, 0x80, 0x479, 0x7, 0x1, 0x1, 0x4050732b, 0x8, 0xf5c8, 0x5e, 0x4, 0xf0, 0x7, 0x946, 0x5, 0x8001, 0xffff, 0x4, 0xbf2, 0x10001, 0xfffffffd, 0x8, 0xfffffffd, 0x8001, 0x6, 0x1, 0x7fffffff, 0x80, 0x7a, 0x1, 0x7, 0x5, 0x0, 0x9, 0x1, 0x7, 0x1e8, 0x4, 0xc31, 0x8, 0x20000000, 0x80000000, 0x1, 0x9, 0x5, 0x5, 0x80000000, 0x3e64, 0x5, 0x6, 0x6, 0xfffffff6, 0x4, 0x10, 0x9, 0x8, 0xd, 0x2, 0x2, 0x2941, 0x1000, 0x8, 0xff, 0x4, 0x9, 0xf6e2, 0x8, 0x6, 0x4, 0x1, 0x3, 0xb9, 0x2ee, 0x444, 0x2, 0x9, 0xb966, 0xb2000, 0x33, 0x9a6d, 0x9, 0x8, 0x200, 0xc, 0x5, 0x89, 0x8, 0x100e, 0x528, 0x4, 0x3, 0x8, 0x3, 0x0, 0x6, 0xbfe8, 0x5, 0x8, 0x3, 0x6, 0x4, 0x4e8d, 0x2, 0x8e, 0xffffff42, 0x5, 0xe, 0x1, 0x6, 0xe, 0x2, 0x4, 0x3, 0x6, 0x1, 0x5, 0x9, 0xffffffff, 0x7, 0x5, 0x160000, 0x9, 0x8, 0x1640, 0x6, 0x6, 0x0, 0x6b7, 0x2, 0xedd9, 0xfff, 0x8, 0x7fffffff, 0x8, 0x1, 0x2, 0x3, 0x8, 0x3, 0x0, 0x3, 0x200034, 0x9, 0x3, 0x2, 0xffffcd43, 0x7, 0x8, 0x486, 0x1, 0xffff, 0x5ca0, 0x3, 0x1000, 0x4, 0x7, 0x8, 0x5, 0x7, 0xfffffffd, 0x7, 0x8, 0xffffffff, 0x22, 0x4, 0x2, 0xfe800000, 0x3, 0x1e, 0x3, 0x8, 0xa1, 0x81, 0x5, 0x1, 0x2, 0x4, 0x7ff, 0xf43, 0x3, 0x8, 0x3, 0x3, 0x4, 0x100000, 0x9, 0x66c, 0x7fc, 0x3, 0x0, 0x10001, 0x5, 0x0, 0x81, 0x2, 0x9, 0x2823, 0x8, 0xffffffff, 0x0, 0xffffffff, 0x8001, 0x0, 0x9, 0xd, 0x1, 0x9, 0x5, 0xc, 0xc79, 0x80000001, 0x200, 0xede5, 0x3, 0x3, 0x0, 0x3, 0x7, 0x8, 0x8, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x10000000, 0x7, 0x7, 0x7, {0x4, 0x1, 0xfe00, 0xfe42, 0x4, 0x7}, {0x17, 0x2, 0xcb, 0x1, 0x800, 0x8002}, 0x7, 0xa6, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x4, 0x40000000, 0x6, 0xfffffff1, 0x796, 0x5, 0xd2c3, 0x7ff, 0x20, 0x6, 0x9, 0x101, 0x5, 0x2, 0x9, 0xc, 0x800, 0x695, 0x401, 0x2, 0x7, 0x1000, 0x343d41f0, 0x4, 0x3, 0x3, 0x3, 0xc94, 0xa0, 0x1, 0x5, 0x81a, 0x1666, 0x80c, 0xb, 0xce3a, 0x21f1, 0x81, 0x5f82, 0x5ff, 0x3, 0xed, 0x4, 0x81, 0x401, 0x1, 0x5fb2, 0x8, 0xfffffe01, 0xc, 0x6, 0x2, 0x0, 0x6, 0x1, 0xffffffff, 0xb1e5, 0x0, 0x8, 0x4, 0x1, 0x0, 0x3, 0x9, 0x3, 0x1, 0xc24, 0x2, 0x5, 0x1f, 0x7, 0x0, 0x4, 0x3, 0x2, 0x4d, 0xffffffff, 0x4, 0x1, 0x6, 0x40, 0x1, 0x3, 0x2, 0x5, 0x1ff, 0x101, 0x8, 0xf48, 0x9, 0xffffffff, 0x200, 0x5, 0x76, 0x6, 0x3, 0x8000, 0x6, 0x9, 0x80000000, 0x6, 0x8001, 0xbe39, 0x7b7, 0x5, 0x7ff, 0xb, 0x4, 0x1, 0x8, 0x9, 0xb, 0x6, 0xdfcf, 0x0, 0x442ff558, 0xb481, 0x6, 0x3, 0x4, 0xe, 0x10000, 0x0, 0x31fe, 0xfffff2c1, 0xb, 0x3, 0x6, 0x7b, 0x21d, 0x6, 0xc, 0x10, 0xf91, 0x0, 0x62e, 0x2, 0xfffffffc, 0x5d8, 0x4, 0x5, 0x7, 0x8, 0x3, 0x7, 0x9, 0x5, 0xfffffff7, 0x0, 0x2, 0x80000000, 0x400009, 0x5, 0x8, 0x3, 0x0, 0x200, 0xdff, 0x7, 0x9, 0x223ec3e9, 0xdaa, 0x0, 0x101, 0x1000, 0x4, 0x8, 0x8, 0x13, 0xb, 0x4, 0xfffffffb, 0x491, 0xfffffffb, 0xfffffff9, 0x9c, 0x3, 0x1, 0x4005, 0x5, 0x8001, 0x6, 0x10001, 0x1, 0x3, 0xffff, 0x4, 0x38, 0x401, 0x2, 0x10, 0x3, 0x3, 0xbd, 0x9, 0x4, 0x5, 0x81, 0x81, 0x3, 0x202, 0x5, 0x9, 0x81, 0x6, 0x8, 0x79, 0x6, 0x8, 0xffffffff, 0xea58, 0x29dc6e7b, 0x53ad, 0x7, 0xd77, 0xfb, 0x8, 0x1, 0x0, 0x0, 0x12, 0x4e, 0xf, 0xbb4f, 0x7, 0xe4, 0xbcba, 0x80, 0x8, 0xc6, 0x0, 0x81, 0x10000, 0x70, 0xffffffff, 0x4, 0x80, 0x8, 0x3ff, 0xffffffff, 0x5, 0x7, 0x6, 0x5, 0x8001, 0x6ab0, 0x401, 0x40000007, 0xd, 0x81, 0x7, 0x5, 0xf417, 0x6, 0x5]}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c55675a1f64b1d533a9cdc13ac46858fc35bc", @ANYRES16, @ANYBLOB="010000000000000000000e000000180001801400020067656e65766530000000000000000000"], 0x2c}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r4, 0x8983, &(0x7f0000000000)={0x6, 'veth1\x00', {}, 0x4})
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x92)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

10.934348816s ago: executing program 1 (id=5694):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x8000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000001010101000000c0120c8763e26cec4e40c800000000000000000329771fe562e0783afbe5f6a7e02bc5612f5f335401f5c81f147c3cd02f1cae165969d284bdda0a8f2017e77b530a091be049281e4b15ef627adac79d99a0143746797960faaa2ab6a4819d3fc4b286dc79046ae308472955d9dbfe70586952d3848e2fc2318d7815c148f2ae7e3b"], 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x4000088)
sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x7, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x10)
recvmsg$qrtr(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x38, 0x100)

10.933081198s ago: executing program 0 (id=5695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
listen(r0, 0x80000003)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c6", 0x56}], 0x1)

10.555501887s ago: executing program 0 (id=5699):
r0 = socket$packet(0x11, 0x2, 0x300)
getpeername(r0, 0x0, 0x0) (async)
accept$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
r1 = socket$kcm(0x11, 0xa, 0x300)
ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="c3000e00038d"})

10.479025598s ago: executing program 1 (id=5701):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2}, 0x6)
r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000)
connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c) (async)
r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={<r3=>0x0, 0x4, 0xfffff801, 0x2}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x7, 0x5, 0x80000000}, &(0x7f0000000180)=0x10) (async)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) (async)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) (async)
openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x252180, 0x0)
r4 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x10, 0x3fb, 0x200, 0x70bd27, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000890}, 0x8800) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x1, 0x8, 0x2, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r6, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x114, 0x1, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x7c, 0x6, "c6ee2698ae19dc32a049a25bcdd6269c965692fd9e0f003c34e73cbc8403f7a1caa160ba8d6cd3ee4d4c32a20f6c06a7d20ef94300dc5859711a9b49896a4c0b37b8a07a2ec58d02947c68c45bbc9c463f8a4b6e290ef6a7424f482bb8da07f9abc319a5b4d4664937b8c1f98297a72210a81f157e81e17c"}, @NFTA_TABLE_USERDATA={0x54, 0x6, "cc775a9dcd9d878d5330b3fc9934fbc878d70635e07cb93a7332c0ed41c3b2eda5e57a8b2d50254696115603837fddfd606082611e5f4a0f8890da336ccf0a94ab62110cb2ae1ec6d6a6dccc1097df3d"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x114}, 0x1, 0x0, 0x0, 0x24040000}, 0x84) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000740)={0x0, <r8=>0x0}, &(0x7f0000000780)=0xc) (async)
r9 = getuid()
sendmsg$nl_generic(r7, &(0x7f0000001900)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000018c0)={&(0x7f00000007c0)={0x10f4, 0x3d, 0x4, 0x70bd2a, 0x25dfdbfb, {0x1c}, [@typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="ff6d6e5bb5da1c4bb555de68ed84ad0618f16965088fb8bc0f42d4918dab4a4e24b1ce43b4920138", @generic="05c0393daa614c935fdd76fffd481ed17a7fea7ddbc4b9d3da3a3bf55d58c3ac629acc1ad03ba690bc8b468e8ca9c6909af2880c471747bdccf3f2709d362174efc01d0517d67de1f2afd7ea296bbc0c14469f1eda1143c886d4e2e1c86ab102cddc9688b806d21a37bf54177a8a6a9c5143ae6c4786a32998f7832d6f651a55b669636f56e3fff99190584ddd3fcf", @typed={0x8, 0xbf, 0x0, 0x0, @uid=r8}, @typed={0x8, 0x118, 0x0, 0x0, @uid=r9}, @typed={0x1004, 0x77, 0x0, 0x0, @binary="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"}]}, 0x10f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x44011)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001980), 0xffffffffffffffff)
sendmsg$IEEE802154_ADD_IFACE(r10, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x20, r11, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x840)
sendmsg$NFT_BATCH(r5, &(0x7f0000002680)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002640)={&(0x7f0000001ac0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELFLOWTABLE={0x21c, 0x18, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xa4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffff353}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'bridge_slave_1\x00'}, {0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'pim6reg0\x00'}, {0x14, 0x1, 'pim6reg\x00'}, {0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'netdevsim0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x140, 0x2, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x98, 0x6, "0ab0b6d6c8c18e8c3a43ed8c7f6a3de3ba2206c005c1dcd805e18922fccb577a4bd6acbb2170b7c2ea65501869c2fcc56e378b5b2936cadb35f25b05d9db8e4121e0ec34b1aabfbeb912b4b873f64c1f9c5f6ca2bf3abc1a275100e4d116495bbe479bb70d05cdc983ba3dd28c158c17dedde907d6d99cab5a49141e1bc1fd68a5c9b9eedee2d2f359fda1ac84e89f83a2ddf3a0"}, @NFTA_TABLE_USERDATA={0x81, 0x6, "1c3ea5d7a7c0841169956505ef133b2611a7ed98491ead0f6050ae00bf43b0aeff690beb3d2a4b94dfb9a739bf121a17bc937d8bfd6f4aa7249a3be5568a80c38c13f5507dadf449bf01203b22e9bebf4985462e3dad3017ae770201078091cccdb4fcb02b78341f04e89498328145dea9a4734b96b4ac7d28d769bff3"}]}, @NFT_MSG_DELRULE={0x108, 0x8, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_USERDATA={0x63, 0x7, 0x1, 0x0, "63bc2cd19300e3839d8ed222e53e9c926a78d181b4be4fc9dd9715b1a5ed9554516d7c9a5c5286f6ab627dfb2f1c3a5a5e12294bfc0acee61565ec20e6b8684cceff315b2b126ecaa30d39a5f02f1d96ad91ef8b345fc01964dfa8e3586480"}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x62}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2c}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x33}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2e}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x80}]}}}]}]}, @NFT_MSG_DELCHAIN={0x50, 0x5, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x44, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x660, 0xc, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x644, 0x3, 0x0, 0x1, [{0x310, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0x2f8, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x899c721b2b93c14f}]}, @NFTA_DATA_VALUE={0xd9, 0x1, "c4ef96d966d9b924bdf2b6d3edeed90681139e6f41e0796cd7a4eb9e5612ec39294171ee9cfaae86c315b2a473e565519898ef515afc056f4ad96523c28716949ce3d7e4cb18f9887c3ec59916ef490a42f8bd6d3d3d46d6eaca5dddd421af56687b1e60e80c7f4c2accded40377b2de50faa3f80182c40b66d33ee12afcb16fc1932e73a0c4773fee5f1f67bf872b4390ab45955bd666d10a033407336407e09c5188442ff35b306250ff5795677af61910f6c3b992944388c8882f129ee667efed336bc0158fe37ec85b5bae51f14c771ae39ee1"}, @NFTA_DATA_VALUE={0xa7, 0x1, "c3af32ea580eec5498a3c99b2c0759a3729e984255d3b3efd313eecc3ad4e7997dce28aca76acbc4b657986858b1b10021ea6868ed3bfe563c24d4e369e7e12173bf783e16c1d55d58846ee709a0709fcdad64b92783deb326cd72edeb62ea6c4a2d6d0c5f432bbd860bb7410af926b821b287a518932d2b038e8f863d3e90e803c41d0751bd74105151ca5a4388c90e55b251b8723c59a8ce674a35591978b44377c7"}, @NFTA_DATA_VALUE={0xaf, 0x1, "b4b1cb7e3567ac083875134f1868b116557ac9b40380f67ce4fc152750d1704ebd2ed99c95b45511d8df2810b36686e8465347be4e43633045e570f590732f0b44d27de6016f6e742701ad0318ffd0cc116c020b7f48fa11640ca301ffa3fde883fe81c3d3003cf21aeae1a68c01afcb5976d86534b38b8df1649418f2385a581c5a6cc6dcee944a444f5f318e078ba8ea1003c2e96951186d46b0653a2c4e9bc0594bc3f346b0ab7abf23"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}, {0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @limit={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}, {0x2dc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xd4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x70, 0x1, "5bae29e8fc13ebb09df58e641ea6e82bb74f1ec2734bbd79f4818b45c4ff6a5f9327801eca30d1cfc22164960a5fde651831976a133515787f9027201a9c8cf1b3f3983a4129b685dbbd2a95e9076aefabee3fc3c3be3a092f31cd76a9db13805498685e662c66c0b19b2550"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_KEY={0x1f0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x82, 0x1, "186350066562ec2159f341e668969e65fcd845a8962fcf4fef8f84b8c08573ca8656290c0d6092ca7d074e2e52929522a089244ac00ba53346366dabedddb443b2ae0c012109a52cf2935d84234cb7acbee02d57ca203af6cb6baece3dcc199a1e8f1622c3e58fc4b7fa2685b284a4e2d5fce2e371daca5fef0d90bd4ae7"}, @NFTA_DATA_VALUE={0x77, 0x1, "ea07117dd62e8db6a0f9fc9e1b1c594e1aa83b6a284d945839063aa12ebbd5a4529f6fc7e5f0d123c1f9bb363ab0bc7b4efbe320b183915baf172f00f5dbb0e407ccae1f317a69438a238e860768986d47393dae5b9988da036fdfb0d6d3d7d71a355a7a25c68c18ef9f30778a6e86c2be05d8"}, @NFTA_DATA_VALUE={0x8f, 0x1, "5bee58d2464c688510bf51abedf353d378ff23967e0b48ca2652218d8a814ac54c4fdeb696491e1a05c617c260210d63b1f1127a40efb95c410dd803d6c738fede599d2a10e047163e04ba7925f522522893e74ed3a2785ccf338e29067e0e2118da1cca65c9580e193ffd69172928c3bf585f5f1ef976b5ea65ae8fe7cbf648d4e83bec35db48fca37234"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xb80}, 0x1, 0x0, 0x0, 0x8c0}, 0x4084)
r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000002700), r7)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r7, &(0x7f00000027c0)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002780)={&(0x7f0000002740)={0x28, r12, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004005}, 0x2004801) (async)
ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000002800)={<r13=>r2})
getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r13, 0x84, 0x12, &(0x7f0000002840), &(0x7f0000002880)=0x4) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000028c0)) (async)
connect$unix(r13, &(0x7f0000002900)=@file={0x1, './file0\x00'}, 0x6e)

10.222935373s ago: executing program 0 (id=5705):
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)
sendmsg$nl_route_sched(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@newqdisc={0x174, 0x24, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffff}, {0xfffb, 0x3}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xc9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x0, 0xa02, 0x0, 0x2d0, 0x5, 0x9}}, {0x16, 0x2, [0x2, 0x1ff, 0x8000, 0x7, 0x5, 0xffff, 0x48b8, 0xfbff, 0x5]}}, {{0x1c, 0x1, {0x7, 0x4, 0x1, 0x8000, 0x1, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x0, 0x6]}}, {{0x1c, 0x1, {0xaa, 0x4, 0x9, 0x2, 0x0, 0x1, 0xffffffff, 0x6}}, {0x10, 0x2, [0x7, 0x245, 0x3, 0x0, 0x1000, 0x4214]}}, {{0x1c, 0x1, {0xa, 0x7, 0xe, 0x3, 0x0, 0x1, 0x9, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x3c, 0xa8, 0xe, 0x4, 0x1, 0x3, 0x3, 0x2}}, {0x8, 0x2, [0xa4, 0x4]}}, {{0x1c, 0x1, {0x2, 0xd, 0xa0, 0x7, 0x1, 0xfff, 0x3, 0x2}}, {0x8, 0x2, [0x7fff, 0x8]}}, {{0x1c, 0x1, {0x2, 0x4, 0x8, 0x2, 0x2, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0x1ff, 0x2]}}, {{0x1c, 0x1, {0x8, 0x1, 0x2, 0x3, 0x2, 0xb, 0x3d98, 0x4}}, {0xc, 0x2, [0xae, 0x8, 0x2, 0x0]}}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000000)
r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$SMC_PNETID_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r3, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040010)
unshare(0x6020400)
r9 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r10, {0x6, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100001002cbd70002000190000000000", @ANYRES32=0x0, @ANYBLOB="13019757c0200000140003006e657464657673696d300000000000000500110004000000d4001680d0000180a4000c80140001"], 0x110}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010)
r12 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r13 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33)
r14 = gettid()
syz_open_procfs$namespace(r14, &(0x7f0000000000)='ns/uts\x00')

10.201541125s ago: executing program 1 (id=5707):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x400, 0x70bd29, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff5, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x7e, 0x1, 0xfffffffc, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_RINGS_GET(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x14, r6, 0xffffffffffffffff, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x90)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="8c00000010001fff28bd70000000800000000000", @ANYRES32=0x0, @ANYBLOB="efb00000800000006c0012800b00010062726964676500005c00028008000500010000000c0000050000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x4000084}, 0x14)

9.643055846s ago: executing program 0 (id=5710):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006012000001282f00fe88a43de1a400000000000000027d01ff0200000000", @ANYRESOCT=r1], 0xfdef)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000020000800000000000000000611073000000000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
r6 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x1, 0x5, 0x0)
getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
r10 = socket$unix(0x1, 0x1, 0x0)
r11 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80cc85}, 0x94)
sendto$inet6(r11, &(0x7f0000000340)="a4", 0x1, 0x4000, &(0x7f0000000400)={0xa, 0x4e20, 0x0, @private1}, 0x1c)
write$cgroup_freezer_state(r0, &(0x7f00000002c0)='FREEZING\x00', 0x9)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r12)
sendmsg$NLBL_MGMT_C_ADD(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0xf4, r13, 0xe701ac47a3d23ccd, 0x0, 0x2, {}, [@NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20084880}, 0x0)
shutdown(r11, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000001ec0)={0x6, 0x8209, 0x0, 0x3b3}, &(0x7f0000001f00)=0x10)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r14=>0x0})
sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="4606a30000010000140012800c000100086363766c616e000400028008000500", @ANYRES32=r14, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0)

9.625512653s ago: executing program 5 (id=5711):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\b\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x800)

9.378203203s ago: executing program 5 (id=5712):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x22f0}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x100}}}}}}}}, 0x3e)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r5, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x66}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6c}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
r8 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getsockname$packet(r8, &(0x7f0000000400)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4104000001500100200012800e00010069703e67be95b2fb2908749758341e5d3cc8f900", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7, @ANYBLOB], 0x48}}, 0x0)

9.371988896s ago: executing program 2 (id=5713):
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x13, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000100020000000000fdffffff85000000b5000000850000008800000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x64, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @empty}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x2000000)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
openat$cgroup_pressure(r1, &(0x7f0000000100)='io.pressure\x00', 0x2, 0x0) (async)
openat$cgroup_type(r1, &(0x7f0000000180), 0x2, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="750a00000000000061111400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94)

8.782346145s ago: executing program 2 (id=5715):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001a"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

8.265970314s ago: executing program 2 (id=5716):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x80000000}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000980)={<r1=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000002c0)={'macsec0\x00', @random="0100061f8145"})

2.087098655s ago: executing program 2 (id=5720):
r0 = socket(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x5, 0xe, 0x0, &(0x7f0000000380)="2eb33d2ab87cded491710d000000", 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3c)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r3, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x5}, 0xe)
connect$bt_l2cap(r3, &(0x7f0000000240)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe)
socket$inet6(0xa, 0x2, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e000030a08000a00", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

2.007679053s ago: executing program 5 (id=5722):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000040}, 0x4008010)
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00(\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x800)

1.770236706s ago: executing program 5 (id=5724):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x23}, 0x8005c})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x3, 0x0, &(0x7f0000000000))
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000140)=@req3={0x10000, 0x1, 0x100, 0x100, 0x2, 0x0, 0x3}, 0x1c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x4}, {}, {0xffe0, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80010001}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x240488d0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)

1.731620219s ago: executing program 3 (id=5725):
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=<r0=>0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000080))

1.604121345s ago: executing program 3 (id=5726):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
shutdown(r0, 0x2)

1.415011753s ago: executing program 3 (id=5727):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="5c60df3a01b7e52fb3a38100a44074a3136594bdf3f01070a491c89d38a3660a8aac8cb234686c2659921b374998033781b295bc48919b20cbdd610e26ef92545d0520816731ac52ad59cf6faea8c9be0834db54720d5f9b645bff6515ba192baa27bb7ff509566b90ad2fce390ea238ce71663330626626b305afe2abc2b4bed75d7848e349896505bce07045df3f72110f09134df5fac0ca20878bf550427f7ec5f3bfa4a2ec100a9139e48e5800d1bf6e3ee5abc46671d36be74d7ff3f0254550ac05c80fe47ef0deba522180c55cda84010eccac0bb0205d0ae2633945d77d2a527463118b", @ANYRES32=r0, @ANYRESDEC=r0], 0x50)
sendto$inet6(r0, 0x0, 0xfffffffffffffd17, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c)
socket$inet(0x2, 0x5, 0x2)
close(0x4)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000003c40), 0x80000)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x804)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x38}}, 0x4)
r2 = accept(r1, 0x0, &(0x7f00000004c0))
setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000500)=0x7, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000caa536908df90e781c3a58fd20197c0902c33d686f5d162d5ae7ba210ad2b375b704010e78785b87a7552dd66f6dd4bb27f41e3c4f7025ca65c1e9d7f992cb8452c8aa0d1b31de474dffd5cd4e9482504fefe75006e3655c1351c1fedb4c8581bbfff0a7549b15362666bb078cd66b3ca8d40dbc35e0448a01c8fb7bb94081e42abf09b918bfdc283a20f901073d09d2a57decc96592ee82579e7ae47b71a966dfd28e93192d8308000000c9371e8348699dcaf13c3143639223e209"], 0x20}}, 0x0)
socket(0x10, 0x803, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0106000000000000000009"], 0x38}}, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x8, &(0x7f0000000080)=0x100000001, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$inet6(0xa, 0xa, 0x4)
connect$inet6(r8, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c)
sendmmsg(r8, &(0x7f00000092c0), 0x4ff, 0x0)
close(r0)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$inet_sctp(0x2, 0x5, 0x84)

889.835948ms ago: executing program 0 (id=5728):
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f0000000740)={&(0x7f0000000280)=""/52, 0x34, <r0=>0x0, &(0x7f0000000680)=""/138, 0x8a}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000580)="b80022ab98d1db1b883e04000000", 0x0, 0xbfffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf8}, 0x50)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a5", 0x3e}, {&(0x7f0000000900)}], 0x5}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)}, {&(0x7f0000000580)}], 0x2}}], 0x2, 0x20000044)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000f9ffffff00000000fdfffdff850000002700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000004000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xcd83, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000020900010073947a30000000000800034000000005140000001100010000000000000000000000000a0b00c586dcd3bfd1ad49d695ec3a3456191921998d9e6155f282e2a24e625d915e3d64"], 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
r5 = accept4(r2, 0x0, 0x0, 0x800)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_DCCP_OPEN={0x8, 0x4, 0x1, 0x0, 0x65}]}]}, 0x30}}, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

787.550881ms ago: executing program 2 (id=5729):
r0 = socket(0x2, 0x6, 0x40)
ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000100)={@loopback, @rand_addr=0x64010101, 0xf, 0x10}}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111cf000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={<r1=>0x0, 0x9}, &(0x7f00000001c0)=0x8) (rerun: 32)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r1, 0x1}, &(0x7f0000000240)=0x8)

553.98582ms ago: executing program 3 (id=5730):
r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x0)
shutdown(r0, 0x1)
recvmsg(r0, &(0x7f00000007c0)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/96, 0x60}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f00000001c0)=""/242, 0xf2}, {&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f0000000340)=""/66, 0x42}, {&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/79, 0x4f}, {&(0x7f0000000500)=""/251, 0xfb}], 0x9, &(0x7f00000006c0)=""/247, 0xf7}, 0x42)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000980)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xd0, 0x0, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@CTA_SEQ_ADJ_ORIG={0x34, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffff37}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x400}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_ZONE={0x6}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}]}, 0xd0}, 0x1, 0x0, 0x0, 0x800}, 0x20004000)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r2, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, r3, 0x225, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000b00)={0xffffffffffffffff, 0x2d, 0x91, 0xe})
r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x4008010)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f0000000c80)=0x8, 0x4)
ioctl$sock_ifreq(r2, 0x8949, &(0x7f0000000cc0)={'ip6tnl0\x00', @ifru_flags=0x9000})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000d00)='ns/user\x00')
ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000d40)={r1, 0x9c6d})
sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0xd, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}}, 0x4800)
r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000e80)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000ec0)=0x1c, 0x800)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000f80)={'gretap0\x00', &(0x7f0000000f00)={'sit0\x00', <r7=>0x0, 0x781f, 0x7800, 0x6, 0x10000, {{0xf, 0x4, 0x2, 0x21, 0x3c, 0x66, 0x0, 0x3, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @local, {[@timestamp={0x44, 0x20, 0xd2, 0x0, 0x9, [0xfffffff9, 0x351, 0x1, 0x3ebd, 0x9, 0x5, 0x100]}, @ra={0x94, 0x4, 0x1}, @end]}}}}})
ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000fc0)={@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x9, r7})
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001040), r2)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001080)={@local, @dev, <r9=>0x0}, &(0x7f00000010c0)=0xc)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001200)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0x8c, r8, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x81}, 0x77a7be00785b4c23)
syz_genetlink_get_family_id$mptcp(&(0x7f0000001240), r2)
ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f00000012c0)=<r10=>0x0)
r11 = gettid()
sendmsg$nl_generic(r2, &(0x7f0000002500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000024c0)={&(0x7f0000001300)={0x11bc, 0x27, 0x400, 0x70bd2d, 0x25dfdbfc, {0x1f}, [@generic="f617d44be464759bc510bdefb7bacb35ae61ca057c4cc680e839769f9bfc723fdf66e81d91a1f3efe3a9d4f7e711", @nested={0x116d, 0x1, 0x0, 0x1, [@nested={0x4, 0xa7}, @typed={0x8, 0x71, 0x0, 0x0, @str='\\\x0e$\x00'}, @typed={0xc, 0x3b, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x64}, @typed={0x14, 0xbc, 0x0, 0x0, @ipv6=@empty}, @generic="b7d228e815dddadc06e9b0c9f4bd1721bcb06442852f6887a2066d2da469a280df32c3a8342a9ad8a082112a36810004b599e6d5f8e384923c1755ad82e987a8f2adc891957df1730fea866b97670af1693b1992f7036dd5689012a52ee349fc23803847fd08ea4b30f8d57d1e1760c8ac61a5747b075d3bf9299c561703ec2314fc5041dbe9e02a3b8daaabe01a53ce01df6b08c0133278bf00f64c6d32f69355aef59ccc9e0ff5c05a24eef6a54b0ccd97d1037bbe051d73a4868fa5bbba6b72df51e3da3d84d51ab182070e99bc1484669270adf0eda38587dc670ac15210", @generic="f7efa595896bf53541826f199397514d47e44f57371b0d89beea382528d7069f53280dd8a3fa1f1310c0553d284831bb0d0d17aa51bc110e5fa8335a841626bdf731849a23e2c2831142092697272bd42d", @typed={0x8, 0xf, 0x0, 0x0, @pid=r10}, @generic="393ca888f0da6ca7e2f8dd60c2f1885d960c1d56fe315c73d254dfdcb29be0a8720b0f8ddef59278c7cb4b5d0662d5940eec96b444eb9955b905bbec6a0ce35baa1d31d822d81ad812b61f10c68156a0beb7d5aa6d46f8dbe53cc4caf4ab54e7a5041ab67b2f0e64727f77529105286ae126578a392cd3e7a008339ba96695e77caa5eccd1741e4c3be29e4f6d8a03292d8baa8b87bf9c4e692e84fb728886d7357153c2688f385e1af20a8d2c4e519d95ad4f72e8af69956ce73dec6380152f13cafc945e0ed21b3a6cd62d5ccb155cf41b7bcb20fa28761bc413c113d290d47372104e586d305c6bfb68de007a5b3b5c88b83d8ca82aff035173924a876b882ed1d8e144d0a74e60261b0e59feba22a6515d6438541df1d74b7f80672f1f2cc6388dfd88c2d9909d6c2c7f5ec3c517297310c527c5cb8a5b4c5e88745c0f577d959488620d7c2ed2ab79cbd6f1777ac2b50e9a143c6a11dc808b87a0d827858408b3f92aa58ef5e4cf88f5c2ca2972ff05ccc61820a48a6ccfba717c2e5b3f6dce496c868a6dafd081326f2953117602d0785fac3d7cde5f6e5a5e4f63d7705b241fff397c5b69ed7924455696777d7c807e215a3992b41c20107e31b2def7584f18c1523a9243d2f1bc589de68723c8cfde80fbf07f7f0c270f5cb43932201e472c9bcc71f2171bb04d7fb7481412448c06a7a0a5b415abc33383ec8a38467482b18f432bfb530cdcf46db15e972cdd6bfa2013ffdeb4650b78d81f675e625600d5748bf54c4e75726e6242ea416136edd0b5285defbc1278a26a50fb0f2e0e3cc621263b2b561fd00abbbc8962fc4fa8073c479a8fc76dd91bc7bc05d9b1b76b3dff7480e44d0ab9e14e782836bd91a15eb12b8718604ac3ab3b90a3729b7e0f93aabcaa986c56b82dc0d352c36a2c04828d571fe027b58c6d9d7b0cafbc9333a99b38c6168f947f7e21e0a604962831ce8c46315841a6b14319f1aa7e1c819737f951689e04339472a283591cbf1db0da52ee2622324b068c66be33cd04cd269cb0f5193dbb62ab767de7b76260abc8d2b45a69c05c46a0acc0083d204983984f6e36d904cf08b6505fd23d27cef3c3f49a3eacc1683b4ac858edc78dabf6da00582fe51b18213c38d4a334c4537ed2cbf56fb36c671289348235d2bfb5d4463b282258b95ab87a56a3e4ab366cb6c67952c9513b2fa792635542271190ce288a4b0deee8f0ee89e875c576287f0215cf75539171bc998939487d9855fcf51e9fe7730517b5cc76420afe55ba9c0e8ed4ba708835f3b8b440a21de3a94100c08de59ad44eb2d32e57448ef3877271a2cebdd8a3d8f20f20061efa072b889edb2af831d4273c112fa606e31b1d7d224d5e4f19f5f30ad4ed05efd1df998a8d661c60dc5cd5f3b37e76b6bad0a9cfd4468648ed71f79d29bd0ac6e1be27be84cac70c30b6d3add56be502567fba9cc901b9a9a7c98d21ef18358112b034801d0c8547d5d1ef9459f7a3653e75eb557ad45afb49af64273f3198ec0ed654e29aab6d986761cb87176008ebcb49e40441daeedcced76e651decfe422d1df2aaee6856bd7ec5a5470b9cff15b3da53effcc8499d4beba34efb666107dd24d97e7fd7895a6b9fe0e72e08ec7b33bff98ce9c6d3c74463c22a2e6fe093060e83c8d8d5b0fbf59bde54c4c370fd2b7fe0f9e907fdd47f2a9bbb8ceff5144968a43fddaea1433dbdf1e2abf16e7f4730c4bc2afd8d557f4a3571ffbc6a36a955b79b8db5f81bf9b16249c202aed9419449c58e10f47380bc848b7f211cf2c3698d3c037de2bf0f04018c1da7deea6ce55550ef52570e3e89f87a5e1984d7add59b3c3400fa0a1245cdc0b662bbb8db2f6f5230f75e746df7033b9be65d62990c79b97c17855015876ac7d3b6ae7fa3703700aa6d5fc80227bd1128c4201028eb92689c914925b5d3a6761c6e4cd08055ebe56ee30295693f2de092d3f4eddc40854ac9fc2179826703c48a333a053ca17757504bccf90ed807f370628a214ef274cdd325eff620febe7aa48512c53f3d7a3a8f5127794c30cb85e72719b2243d10ae2273530ac3681a89447465bb8a71e7a654ad24f5d5af798a6ce539ec189d2dbadbc9e4015a970002e842c7688c64f1c529616f68a32fa51afe03a4cbbdebd549861bf58f47ce6f57b9d765abe54adcfeded13bbb62e7f611ad24c6d8f1986ef32c194b89e366c509a9041f68f2ca52bd8a925013000650a2aebc528c9875b9fdb94c583ad042eab7ba119c173342dc4eff025f73c20c249484dd7d8f3ecb2fbbcb727a907fd5d4937d0ec67790e3885c69553bf1ee42f4968e51f05e81b5d509f1f42ad86659d386d735393362c796001e24f76a28e78f43f6232048db91831203bee4345ad95f1f54794d556a33f6b6a8c101becd8e64dc67a3c83fe231e869a2e50ea63ef278d622e63dcc8d782c0c776b109ff667b716f0a67c42df63f0677ede089094b597a79258616dac11291780af9129651dc12e71c9d5cd770f2dca9bda5d6504818369de6e00d04b9de5be5183f075bae389fc47afebaf138989b9ac8015787854caa2021ca40e09b55498f1b96fcbd318d7c5c5133bc9bea965df7282ad49c5625013a45c959421e13b470eaec0d8f755cd6ad9d6035f81c07fdfcce2c16f77c399423b63c7e975931b1e0e2280b819775033ac02e5744c2b20bc5c64604d37bc03aaf84a0acc8df0070501506897cf6a956e6d3597d23fdc801217a4740cf193ae62f9a5a2c4b913912e806287e65b18eb88e3758a7641fd9b9248f1e7b7917305804ab3734894ce16564ca57a78e56cd20baa17d4190d13c2f50898e49306f92c414a2aabb8e457bb41b24ad716689ca9080a1d79b05f21dffc3c6fa5b228239766b3838e150bf24abc1cc353a995cf076b91f721250d5b4c0732a48eb3ded56dce71ac6a7620fb2fde66d175ea28f2de36883c09bcab366f3062d6bbca62d31ac0088d7cc72db06f8f41e2eb50796b7d4e164928527ff72bc162043d08a666ad87423e82e8aa5dbe5db1079e24576dd44766023bb882e387473859ab631edf80f938cb6ad73e9fe9aa4fac786153875fb1674bd7a24146eec052598b39daba214f80094cca151c2a8014771736191627323f7635e08fe8ce5da0faf206bc2fab6996aaec1a59c95905e883e2d6f9860a94d23a12f4fd69d7084a767de1d2b9f3aa40e34a36e0a313e11900030d7a953c22646a7387496869be00967f32f0c8bbfe815773e4e356d887be3e2d72418cffff097bc37146f35beca22b69929c0ea62952cec4af9e3968c3724243841a95eb5d75edee4ad91163adbc6e610aa0bf99718fe9a9b5cdd54defdff4ff21e724028c89de5bf4d75a7a0a699e47f0d2fdd55bbd171973f065b57c45527af8eb3063f4362ded967233166bdec68017782110d7630a10446dd67c7801a7257f7cf6a5460d73952981a47f5c2dfcf63dc3a39a030dfcdff8837c8efd6f1231828ea724fa268369cd8b94fbf663d6e68ef9b35863950760aa74ab07dc7f21b30c7d0c63576b7b1e39467a86b66949d01a93fc3102dedc07a0e5056fd858b30d4d4b672860dfd8b68a1361b52b858e0df4a028f736c7072e2d9adb96e921877dda4adc509e730ccdb4e17ee92079a6f6bfe6460d4ab37dc4573f5d4aa8921ca34eff6f19504126e8d1c2602f715c57d64a7e47d7368820a6d3a1955216f89485c9a649c8a38f089909d7add28a5f84a628447f8ab60f17f366e6211796cdbd48ddc0da686653df3d27cf3c6ce820d40658cd59ffd4a1a1a30e91a2127d3c53b0a809575898136dc6bc7add06df4ebd72875397b6add38a3bc2d9f034c03e184d70a841f2b14c364f5eefaf3ef101ad1bd8e93c2f6639a86c132b49f2acfe01fa3efccefabe66d1c0e28efbf23f362b85d2ebfd069b23d6535dd82f24d563e1aa24a1f2ad984db57e48e6d4c6c231e4ede7076cb6a86a2ca3cca63ee1caa29dc4260bc85b37acfce8be16693837e3148d390af645e6485f26277e3a83d1a35b7cef45f0dadf85c571c1c11666951e10fe7608f2195a348b5dc974d54249715f6450dfba693ca1fca8ef3b0a5453ad78c6759161474afb02ed7c5fb03491c88df7e8b4447f9432d2883a59420eb9c13650e4eb6603ba35178edb613800df2b645821eeb9b674c190eb7d1ff450ceec9e5d5068a3c9e781bd239492c8cde6d44ede5aac5523408c2e7e131d53fb9d5f8509206d7d9db0c966aa40c4a52b83447ba506084c316694263ede4741b5d0737e1872600ca55ec976162db90a74f4e75bab01c99144130eb8ffd501578c51d2591f6ec83cf5bb952dad02c575d135d563667c8f2c67dd2cd4f92e60a23445a0892cbeda642bf13f0da75c691e45b85896200b466d4db16267986da104f1ed1b74760fec76f3b8bb8c6557c630eebf482c5d49dd3053f833eb16702a2a01c8d77e540578d7f03143d02a42cad1f375da2a521152e200ba56c9b7cefb48d0ad37be4dde2ec18e3211f62ac797a3eaa1d665854f5405b644e01de9503c90a95d3701aed768c5ef3f9568638c12720a48637167049a314758f01bc6fa4165522d6a7b7622d9370b33577f95653435eac95ba863c9fad5e4f08f068d797d318d4c584ad472600721d2073835d08059bff224232721cab8a4b9cc8f33910bc0eac2b15ae3fe997f3e179d4a7bd8c63618ca6a20cac8afbaee42f1e48c9db10366d3e2f03b50b8bf93a08598e72578534f32469bc8288cd52291c2ffef35585c5d7ce4dd690c084c087187b6c4719cc6d954cfc59817019a0f416e3ad44c2b8df320a3351465b694d8be24d6b7bdae0cf4a4659ba55fcdd40f9d2d2c8e40ac0308d78a67635d0797c9491a7df035097e1a7409b4ae92cf08a113f782b8ebdefd3909b1d4db8e426d5fead03ee65d267ed91abc9b518e91d202913b3d579e9767c5b7c12ae7f966e27b425bdd9826aa76f71bba62632b6759cb3d06e0baefa743eeac00ab8d4e2ffe901a081de1eeb27e10b8b1b06cc22c177ce262f3b555c5d028ab9081748fc5939f2677ef23c659d8a6be118fb49053bcbfcb461c5d992cc1d37850734037464c6bb7a89b255042dc87aa4e87f6449de92527c7c4772f662d24c2b15f0d28343233eb08d92da940cd5045d88fdf329d4c60172a868bc6c92917abaeee336154f755a46e1b3c99c1fdc2c8830ab1a3911d7104921e04185fe351942d91597fc3f9c54eaad588f75ef1bb616eaa72aaca55492cb0b3ea923afa6b35e87fc49b09c2c15ca05dda7f1cccbc81350e1db9be966692d6e7ae11872747b19911a1ca6582034561658022708bdda0e2133b39dc669dd20b12ab936e7b232eda084091edf58bdc3431a8519392e4c51185fbe153e6437037f16e1d7f5bdb48ba6088d4881c56114bc580c8c7d0198b1df8860ec00ceb90413eea642bab05113987b28ec75ff0174adc8192ce168a2e20b33d3b0d2b3dfabd3615a281d029dff422fa564cbebb2d60fc95f789261f48e6d881d7e0d9ecff7b3c6b38692a8f019fbb8d79b2dc64fe61a65e52fce1f382cb78b7e31c423a4789fbb9ed9d27d0a4b8bf5a6a6325bef79d7a437d6baf16972ff5bae654e68a884e9a0ae153bc6e9f3fd7b77bf6d3c6d0e374248758134e3afb8197c63519042f9674a9060c0fed5fb74973d44d97548b688da45d1d7ccbac4c3e716e9e75203171efa62c2679626708467042d1a5afb74ffc48b51288ef2de3889b0f9a8e09835fec1c864fcc9b95"]}, @typed={0x8, 0x7b, 0x0, 0x0, @pid=r11}]}, 0x11bc}, 0x1, 0x0, 0x0, 0x400c000}, 0x1ab3184e971b7c74)
r12 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r12, 0x6, 0x21, &(0x7f0000002540)="f6f805cb29d5bdc38adaad026c399d45", 0x10)
syz_genetlink_get_family_id$fou(&(0x7f0000002580), r2)

465.425971ms ago: executing program 5 (id=5731):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) (async)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000030000000000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=ANY=[@ANYBLOB="380000001a000100000000000000000080002000", @ANYRES32=0x0, @ANYBLOB="00000000080002000b000000140001"], 0x38}}, 0x0) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000004e002e000000000000000000017c0000b8a9941ac024949d7e61162f245030a78af606342b20b9bfabc7b916c1c230b12262ef4c9a85ded43d6e4f5937bbecee560e79e9afffdb9a80fad6f9789fe4f341864f"], 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0xc010)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, &(0x7f0000000740))
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000010010000010000002400000000005dba"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) (async, rerun: 32)
sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="f4000000", @ANYRES16=0x0, @ANYBLOB="000128bd7000ffdbdf250f00000008000600ffff0000080004000e0000004400018006000100020000000800090068000000060002003b000000080005000300000008000500030000000800080001000000060004004e2000000600020067000000580001801400030000000000000000000000000000000001060002001100000008000b007369700006000200de000000060001000a000000060004004e230000060004004e240000070006006e71000056054f6a73697000080005000600000028000180090006006e6f6e650000000008000900170000000800050000000700080009002f00000004000280"], 0xf4}, 0x1, 0x0, 0x0, 0x4000}, 0x4041) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r4) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x5)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="000133bd0500030000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000020}, 0x8)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd608a37f200082c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2b000005"], 0x0) (async, rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="637a3346584bf783cd228298a389", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (rerun: 32)

271.370037ms ago: executing program 2 (id=5732):
syz_emit_ethernet(0x4e, &(0x7f0000000940)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @mcast1}}}}}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400b5a000000000000000"], 0x34}}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400b5a000000000000000"], 0x34}}, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x3, 0x0, @loopback, 0x4}}}, 0x108)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000000000)=""/57, 0x4}, 0xa) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r1, 0x0, &(0x7f0000000000)=""/57, 0x4}, 0xa)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x54, r4, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r6=>0xffffffffffffffff})
bind$unix(r6, &(0x7f0000000080)=@abs={0x5b5c61aa29fc67be, 0x0, 0x4e20}, 0x6e)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r8, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x4c0, 0x228, 0xf8, 0xffffffff, 0x0, 0x228, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, &(0x7f0000000100), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffffff, 0xff000000, 'macvlan0\x00', 'hsr0\x00', {}, {0xff}, 0x1, 0x3, 0x1}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x6, 0x0, 0x1, 0x2], 0x0, 0x4}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1}}, @common=@ah={{0x30}, {[0xd37b, 0x6]}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x9, 0x3, 0x80000000, 0x0, 0x0, 0x9]}}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa10, 0x84, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@empty, @ipv6=@mcast1, @icmp_id=0x64, @gre_key=0x6}}}, {{@ip={@empty, @local, 0xffffffff, 0xff, 'ip6gre0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x6, 0x2, 0xa}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x1, 0x0, 0x0, 0x6, 0x4], 0x4, 0x5}}}, @common=@ah={{0x30}, {[0xd9d, 0x7], 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private=0xa010101, @multicast2, @icmp_id=0x67, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) (async)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000940)=@nat={'nat\x00', 0x1b, 0x5, 0x4c0, 0x228, 0xf8, 0xffffffff, 0x0, 0x228, 0x428, 0x428, 0xffffffff, 0x428, 0x428, 0x5, &(0x7f0000000100), {[{{@ip={@dev={0xac, 0x14, 0x14, 0x41}, @dev={0xac, 0x14, 0x14, 0x20}, 0xffffffff, 0xff000000, 'macvlan0\x00', 'hsr0\x00', {}, {0xff}, 0x1, 0x3, 0x1}, 0x0, 0xb0, 0xf8, 0x0, {}, [@common=@set={{0x40}, {{0x1, [0x2, 0x6, 0x0, 0x1, 0x2], 0x0, 0x4}}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@mcast2, @ipv4=@loopback, @port=0x4e20, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0xa, 0x1}}, @common=@ah={{0x30}, {[0xd37b, 0x6]}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x9, 0x3, 0x80000000, 0x0, 0x0, 0x9]}}}, {{@uncond, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa10, 0x84, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0xc, @ipv4=@empty, @ipv6=@mcast1, @icmp_id=0x64, @gre_key=0x6}}}, {{@ip={@empty, @local, 0xffffffff, 0xff, 'ip6gre0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x6, 0x2, 0xa}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x1, 0x0, 0x0, 0x6, 0x4], 0x4, 0x5}}}, @common=@ah={{0x30}, {[0xd9d, 0x7], 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private=0xa010101, @multicast2, @icmp_id=0x67, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400d4d4c31000ffff27bd7000fbdbdf250000000004000000000000000000", @ANYRES32=0x0, @ANYBLOB="1720000004000100240012800c0001006d6163766c616e001400028008000300000000010800010002000000"], 0x44}, 0x1, 0x0, 0x0, 0x20004041}, 0x80000)

269.921288ms ago: executing program 3 (id=5733):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4)
bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c)
listen(r0, 0x80000003)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000012380)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c600", 0x57}], 0x1)

74.900841ms ago: executing program 0 (id=5734):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = socket(0x15, 0x5, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, 0x0, 0xd66771a5e8224ded, 0x0, 0x25dfdbfd, {{}, {@void, @void, @void}}}, 0x14}}, 0x8040)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x3c, 0x0, &(0x7f0000000440)="c1a36abcde20d308098e080086dd", 0x0, 0x4012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x3f)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000003c0)={0xfff9, 0xe38b, 0xffff, 0x40}, 0x8)
sendmsg$inet_sctp(r3, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0xc005}, 0x4000890)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000740)=0x30000000, 0x4)
write$cgroup_pid(r1, &(0x7f00000004c0), 0x12)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r5, 0x0, 0xf, &(0x7f0000000040)=0xfffffc6b, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000008, 0x13, r0, 0x80000000)

73.737091ms ago: executing program 5 (id=5735):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000003ffffeb00000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0xffffff98, &(0x7f00000000c0)="5f9a000000100000080000001700", 0x0, 0x710, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
write$tun(r1, &(0x7f0000001840)=ANY=[@ANYBLOB="0800430506000500000014000000000f"], 0x1200)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000040000701fe0dffff00000000017c0000040042800c00018006000600800a0000180002801200148004000f0004"], 0x3c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x330, 0x0, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x260, 0xffffffff, 0xffffffff, 0x260, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffffff00, 0xff000000], [0xffffffff], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2}, 0x0, 0x110, 0x138, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x88, 0x0, 0x3096, 0x7fff, 0x56e5, {0x2}}}, @common=@inet=@udplite={{0x30}, {[0x4e23, 0x4e23], [0x6e24, 0x4e21], 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @dev}, [], [0xff, 0x0, 0xffffff00, 0xff000000], 'erspan0\x00', 'gre0\x00', {}, {}, 0x29, 0x0, 0x3}, 0x0, 0xf8, 0x128, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x3, 0x5, 0x1}, {0x6, 0x4}, {0xf, 0xfff}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xffffffff, 0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x390)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7)
write$cgroup_freezer_state(r5, &(0x7f0000000200)='THAWED\x00', 0x7)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000100001042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="779db7b3119aa7e8c545e6ab27ce914b8651cd1972ec623576b7d4095cb1fd41ff37e308ee2fb87eb44f034438af9e54ef6ea0671a639863acd84f7a1b29f3f949b0d6f809a1cd884b810b4e91873395df102c0615c689c3d40dac60c6b541f28d1da62bcd05ad268200a100b109c003dbff2f6f15d54c454ce7b2749c1673529a3c9e6e4012778bd4"], 0x20}, 0x1, 0x0, 0x0, 0x14}, 0x10)

0s ago: executing program 3 (id=5736):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000002c0)=0x4, 0x4)
setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x1ff, 0x4)
getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000001c0)=""/16, &(0x7f0000000200)=0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x1, 0x803, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}}}}}]}, 0x50}}, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
splice(r5, 0x0, r6, 0x0, 0x7, 0x4)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084)
sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000001740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x8}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x2, 0xeb, 0x4, 0x7fff, 0x0, 0x7, 0x3, 0x0, 0x40011, 0xfffffff3, 0x40, 0x7, 0x57, 0xc, 0xb, 0x9, 0x7ff, 0x687, 0xfffff841, 0x9c8, 0x1000, 0x2c4e, 0x2, 0x7, 0x8000, 0x13, 0x6, 0x4, 0xd, 0x2, 0x5, 0x3ff, 0x80000001, 0x5, 0x3, 0x6, 0x3, 0x1ff, 0x0, 0x72, 0x7fff, 0x80000000, 0x6, 0x1, 0x1c00002, 0x0, 0xf, 0x202, 0x7fc, 0x10, 0xfffffbff, 0x1, 0x400fff, 0x9, 0x3, 0x4, 0x4, 0x0, 0xfffffffd, 0x5, 0x6, 0x6, 0x268, 0x2, 0x1, 0x1e0, 0x8, 0x0, 0x8, 0x0, 0x7, 0x7, 0x9395, 0x5, 0x1, 0x2, 0xfffffffc, 0x3, 0x5, 0x2, 0x1, 0x1, 0x6, 0x5, 0x22, 0xfffffff4, 0x0, 0x401, 0xd66a, 0x4, 0x9ca, 0x1, 0x4, 0x1, 0x1096, 0x1, 0x1, 0x1, 0xfffffffd, 0x1, 0x1, 0x3, 0x0, 0xfffff6a5, 0x0, 0x10000, 0x7, 0x425a2927, 0x5, 0xf, 0x0, 0x6, 0xc7b, 0x1, 0x2, 0x9, 0x10, 0x800, 0xb6b, 0x6, 0x52383756, 0x1, 0xff, 0x101, 0x11e5, 0x10001, 0x2, 0x7, 0x81, 0x13, 0xc0000000, 0x8, 0xee0, 0x2, 0xc0c, 0x401, 0x2, 0xfee, 0x3, 0xffffffff, 0x9, 0x8, 0x2, 0x9, 0x9, 0x5, 0x1, 0x9, 0x5, 0x1, 0x7, 0x599, 0x14, 0x5, 0x1, 0x0, 0x7, 0x3, 0xffff0e76, 0x5, 0x8000008, 0x40, 0x10001, 0x0, 0x9, 0x6, 0x5, 0x7, 0x3, 0xbf2f, 0xfffff1df, 0x1, 0x5, 0x5, 0x2, 0x8, 0x400, 0x8000, 0x2, 0x5, 0x7, 0xffff, 0x7, 0x8, 0x7d, 0xe7e6, 0x8000, 0x7, 0x5, 0x5, 0x3, 0x81, 0x7, 0x10000, 0x6, 0x8, 0x101, 0x7, 0x6, 0x8000, 0x7, 0x3, 0xfffffffb, 0xc5, 0x20, 0xfffe, 0x2, 0xf, 0x36, 0xca, 0x3, 0x0, 0x6dd4, 0x6, 0x1ff, 0x5, 0xfffffff7, 0x9, 0x8, 0x5, 0x80000001, 0x5, 0x1, 0xff, 0xfffffff9, 0x33f6, 0xfffffff7, 0x3, 0x8, 0x2, 0x4, 0x3, 0x2, 0xbb, 0x7, 0x8, 0x6, 0x1, 0x10, 0x81, 0x7, 0x9, 0x10, 0x7f, 0x1003, 0x1, 0x8001, 0x9, 0x81, 0x8, 0x1000, 0xe, 0x6, 0x8, 0xfffffff9]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x400dc}, 0x24000080)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000000)={&(0x7f0000000540)=@setlink={0x54, 0x13, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x2000, 0x2206}, [@IFLA_EVENT={0x8, 0x2c, 0x6}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xe0000000}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xe}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x4}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}, @IFLA_IFALIASn={0x4}, @IFLA_EXT_MASK={0x8, 0x1d, 0x181}]}, 0x54}}, 0x44)
writev(0xffffffffffffffff, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2)
ppoll(&(0x7f0000000380)=[{}], 0x1, &(0x7f0000000400), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x14}, [@ldst={0x2, 0x0, 0x3, 0x1c10a1, 0x0, 0xc}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52)

kernel console output (not intermixed with test programs):

731.363147][T23531] netlink: 'syz.3.4435': attribute type 1 has an invalid length.
[  731.377415][T23534] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4436'.
[  731.404779][T23509] lo speed is unknown, defaulting to 1000
[  731.407800][T23531] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4435'.
[  731.438098][T23534] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4436'.
[  731.495459][T23534] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4436'.
[  731.534143][T23534] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4436'.
[  731.584579][T23534] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4436'.
[  731.664916][T23540] block nbd3: NBD_DISCONNECT
[  731.683643][T23540] block nbd3: Send disconnect failed -32
[  731.717428][T23540] block nbd3: shutting down sockets
[  731.784609][    C0] blk_print_req_error: 27 callbacks suppressed
[  731.784635][    C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  731.800179][    C0] buffer_io_error: 27 callbacks suppressed
[  731.800198][    C0] Buffer I/O error on dev nbd3, logical block 0, async page read
[  731.817222][    C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  731.826417][    C0] Buffer I/O error on dev nbd3, logical block 1, async page read
[  731.834358][    C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  731.843586][    C0] Buffer I/O error on dev nbd3, logical block 2, async page read
[  731.851936][    C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  731.861157][    C0] Buffer I/O error on dev nbd3, logical block 3, async page read
[  731.870065][T12601] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  731.884359][T12601] Buffer I/O error on dev nbd3, logical block 0, async page read
[  731.898229][T12601] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  731.909562][T12601] Buffer I/O error on dev nbd3, logical block 1, async page read
[  731.918303][T12601] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  731.927512][T12601] Buffer I/O error on dev nbd3, logical block 2, async page read
[  731.967368][T12601] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  731.995784][T12601] Buffer I/O error on dev nbd3, logical block 3, async page read
[  732.023836][T12601] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  732.059440][T12601] Buffer I/O error on dev nbd3, logical block 0, async page read
[  732.061610][T23544] wg1 speed is unknown, defaulting to 1000
[  732.088043][T12601] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  732.125301][T12601] Buffer I/O error on dev nbd3, logical block 1, async page read
[  732.177032][T12601] ldm_validate_partition_table(): Disk read failed.
[  732.228350][T12601] Dev nbd3: unable to read RDB block 0
[  732.279463][T12601]  nbd3: unable to read partition table
[  732.427248][ T4993] udevd[4993]: worker [12601] terminated by signal 9 (Killed)
[  732.467987][ T4993] udevd[4993]: worker [12601] failed while handling '/devices/virtual/block/nbd3'
[  732.776262][T23562] FAULT_INJECTION: forcing a failure.
[  732.776262][T23562] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  732.808613][T23562] CPU: 0 UID: 0 PID: 23562 Comm: syz.1.4443 Not tainted syzkaller #0 PREEMPT(full) 
[  732.808644][T23562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  732.808657][T23562] Call Trace:
[  732.808667][T23562]  <TASK>
[  732.808675][T23562]  dump_stack_lvl+0xe8/0x150
[  732.808707][T23562]  should_fail_ex+0x412/0x560
[  732.808740][T23562]  _copy_from_user+0x2d/0xb0
[  732.808771][T23562]  memdup_user+0x5e/0xd0
[  732.808795][T23562]  sctp_getsockopt_connectx3+0x1f7/0x360
[  732.808821][T23562]  ? lock_sock_nested+0x6a/0x100
[  732.808855][T23562]  ? __pfx_sctp_getsockopt_connectx3+0x10/0x10
[  732.808887][T23562]  ? sctp_getsockopt+0x12f/0xb90
[  732.808919][T23562]  ? __local_bh_enable_ip+0xd0/0x130
[  732.808944][T23562]  sctp_getsockopt+0x984/0xb90
[  732.808974][T23562]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  732.808998][T23562]  do_sock_getsockopt+0x51d/0x7e0
[  732.809033][T23562]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  732.809079][T23562]  ? __fget_files+0x3a0/0x420
[  732.809102][T23562]  ? __fget_files+0x2a/0x420
[  732.809135][T23562]  __x64_sys_getsockopt+0x1a4/0x240
[  732.809168][T23562]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.809191][T23562]  do_syscall_64+0x15f/0xf80
[  732.809215][T23562]  ? trace_irq_disable+0x3b/0x140
[  732.809244][T23562]  ? clear_bhb_loop+0x40/0x90
[  732.809271][T23562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  732.809292][T23562] RIP: 0033:0x7f79a0d9cdd9
[  732.809313][T23562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  732.809332][T23562] RSP: 002b:00007f79a1be8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  732.809356][T23562] RAX: ffffffffffffffda RBX: 00007f79a1016180 RCX: 00007f79a0d9cdd9
[  732.809372][T23562] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000007
[  732.809385][T23562] RBP: 00007f79a1be8090 R08: 0000200000000140 R09: 0000000000000000
[  732.809399][T23562] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001
[  732.809414][T23562] R13: 00007f79a1016218 R14: 00007f79a1016180 R15: 00007ffdcaf80e18
[  732.809451][T23562]  </TASK>
[  733.040437][T23565] netlink: 'syz.3.4444': attribute type 11 has an invalid length.
[  733.225352][T23561] wg1 speed is unknown, defaulting to 1000
[  733.236475][T23544] lo speed is unknown, defaulting to 1000
[  734.144771][T23561] lo speed is unknown, defaulting to 1000
[  735.215909][T23617] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  736.659799][ T5818] IPVS: starting estimator thread 0...
[  736.817857][T23643] IPVS: using max 26 ests per chain, 62400 per kthread
[  737.482080][T23660] __nla_validate_parse: 35 callbacks suppressed
[  737.482101][T23660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4466'.
[  737.525156][T23660] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4466'.
[  737.922164][T23675] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  737.962353][T23675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4471'.
[  738.307316][T23685] macsec1: entered promiscuous mode
[  738.337869][T23685] macsec1: entered allmulticast mode
[  738.583937][T23688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4476'.
[  738.645841][T23688] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4476'.
[  738.673548][T23688] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4476'.
[  738.740548][T23699] netlink: 'syz.3.4479': attribute type 1 has an invalid length.
[  738.751468][T23701] xt_policy: neither incoming nor outgoing policy selected
[  738.766896][T23699] netlink: 'syz.3.4479': attribute type 1 has an invalid length.
[  738.777522][T23701] nbd: must specify a size in bytes for the device
[  738.818741][T23701] netlink: 'syz.5.4480': attribute type 33 has an invalid length.
[  738.842338][T23701] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4480'.
[  738.902883][T23708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4479'.
[  738.973097][T23714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4480'.
[  738.982187][T23708] bond4: (slave bridge3): making interface the new active one
[  738.990928][T23708] bond4: (slave bridge3): Enslaving as an active interface with an up link
[  739.044517][T23701] `: renamed from team0
[  739.053217][T23699] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4479'.
[  739.160080][T23699] 8021q: adding VLAN 0 to HW filter on device bond4
[  739.701945][T23745] netlink: 'syz.1.4490': attribute type 4 has an invalid length.
[  739.718056][T23733] bond1: entered promiscuous mode
[  739.742254][T23733] 8021q: adding VLAN 0 to HW filter on device bond1
[  741.050083][T23793] nicvf0: tun_chr_ioctl cmd 1074812117
[  741.169371][T23791] vlan0: entered promiscuous mode
[  742.279460][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  742.662761][T23836] netlink: 'syz.5.4517': attribute type 1 has an invalid length.
[  742.683272][T23839] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  742.690728][T23839] IPv6: NLM_F_CREATE should be set when creating new route
[  742.698052][T23839] IPv6: NLM_F_CREATE should be set when creating new route
[  742.716368][T23836] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR
[  742.718834][T23839] __nla_validate_parse: 5 callbacks suppressed
[  742.718856][T23839] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4518'.
[  742.743544][T23839] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4518'.
[  742.765729][T23839] netlink: 'syz.2.4518': attribute type 1 has an invalid length.
[  742.920853][T23847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4521'.
[  742.958392][T23850] netlink: 'syz.3.4519': attribute type 3 has an invalid length.
[  742.995028][T23850] netlink: 'syz.3.4519': attribute type 1 has an invalid length.
[  743.009975][T23847] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  743.025747][T23852] x_tables: duplicate underflow at hook 1
[  743.034730][T23850] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4519'.
[  743.111932][T23859] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4524'.
[  743.229921][T23863] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  744.031678][T23876] openvswitch: netlink: IPv6 tunnel dst address is zero
[  744.073493][T23869] bridge0: port 2(bridge_slave_1) entered disabled state
[  744.080982][T23869] bridge0: port 1(bridge_slave_0) entered disabled state
[  744.091543][T23882] openvswitch: netlink: IPv6 tunnel dst address is zero
[  744.100057][T23879] nbd: nbd1 already in use
[  744.109630][T23880] nbd: nbd1 already in use
[  744.227003][T23890] block nbd1: NBD_DISCONNECT
[  744.271147][T23890] block nbd1: Send disconnect failed -32
[  744.302394][T23890] block nbd1: shutting down sockets
[  744.441326][T23869] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  744.497528][T23869] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  744.535626][T23901] netlink: 'syz.2.4533': attribute type 1 has an invalid length.
[  744.544141][T23901] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4533'.
[  744.701056][T14608] vlan1: left allmulticast mode
[  744.717508][T14608] geneve0: left allmulticast mode
[  744.738088][T14608] vlan1: left promiscuous mode
[  744.764084][T14608] geneve0: left promiscuous mode
[  744.789849][T14608] bridge0: port 1(vlan1) entered disabled state
[  744.855762][T14608] bridge_slave_1: left allmulticast mode
[  744.886939][T14608] bridge_slave_1: left promiscuous mode
[  744.910855][T14608] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.012880][T23914] SET target dimension over the limit!
[  745.019999][T14608] dvmrp8: left allmulticast mode
[  745.495236][T23921] netlink: 192 bytes leftover after parsing attributes in process `syz.5.4538'.
[  745.528445][T14608] bond2 (unregistering): (slave gretap1): Releasing active interface
[  745.562833][T14608] bond14 (unregistering): (slave gretap2): Releasing active interface
[  745.852899][T14608] bond12 (unregistering): (slave bridge3): Releasing backup interface
[  745.861856][T14608] bridge3 (unregistering): left promiscuous mode
[  745.913790][T14608] bond14 (unregistering): (slave bridge4): Releasing active interface
[  745.994534][T14608] bond0 (unregistering): (slave 
3
0
): Releasing backup interface
[  746.006398][T14608] bond0 (unregistering): (slave 
c
@0Ùÿÿ): Releasing backup interface
[  746.018532][T14608] bond0 (unregistering): Released all slaves
[  746.031865][T14608] bond1 (unregistering): Released all slaves
[  746.047267][T14608] bond2 (unregistering): Released all slaves
[  746.064754][T14608] bond3 (unregistering): Released all slaves
[  746.085825][T14608] bond4 (unregistering): Released all slaves
[  746.102114][T14608] bond5 (unregistering): Released all slaves
[  746.127517][T14608] bond6 (unregistering): Released all slaves
[  746.144496][T14608] bond7 (unregistering): Released all slaves
[  746.164792][T14608] bond8 (unregistering): Released all slaves
[  746.180330][T14608] bond9 (unregistering): Released all slaves
[  746.201431][T14608] bond10 (unregistering): Released all slaves
[  746.223935][T14608] bond11 (unregistering): Released all slaves
[  746.254217][T14608] bond12 (unregistering): Released all slaves
[  746.272179][T14608] bond13 (unregistering): Released all slaves
[  746.302178][T14608] bond14 (unregistering): Released all slaves
[  746.320318][T14608] bond15 (unregistering): Released all slaves
[  746.340947][T14608] bond16 (unregistering): Released all slaves
[  746.387922][T14607] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  746.396491][T14607] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  746.405551][T14607] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20002 - 0
[  746.422713][T14607] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  746.446899][T14607] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  746.472629][T14607] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20002 - 0
[  746.801582][T23937] openvswitch: netlink: Key type 9508 is out of range max 32
[  746.811144][T14607] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  746.827169][T14607] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  746.852035][T14607] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20002 - 0
[  746.889121][T14607] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  746.921416][T14607] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  746.954205][T14607] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20002 - 0
[  747.006177][T14608] tipc: Disabling bearer <eth:hsr0>
[  747.012958][T23942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4542'.
[  747.059465][T14608] tipc: Left network mode
[  747.073908][T23923] wg1 speed is unknown, defaulting to 1000
[  747.120276][T23944] x_tables: duplicate underflow at hook 2
[  747.340135][T23948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'.
[  747.442963][T23948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4545'.
[  747.826400][T23963] __nla_validate_parse: 2 callbacks suppressed
[  747.826424][T23963] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4549'.
[  747.980416][T23967] netlink: 'syz.2.4550': attribute type 1 has an invalid length.
[  747.991606][T23967] netlink: 240 bytes leftover after parsing attributes in process `syz.2.4550'.
[  748.151144][T23966] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4549'.
[  748.203060][T23968] netlink: 'syz.1.4549': attribute type 10 has an invalid length.
[  748.326577][T23957] wg1 speed is unknown, defaulting to 1000
[  748.575429][T23975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4551'.
[  748.804037][T23990] netlink: 'syz.3.4555': attribute type 1 has an invalid length.
[  748.836797][T23990] netlink: 'syz.3.4555': attribute type 1 has an invalid length.
[  749.012093][T23957] lo speed is unknown, defaulting to 1000
[  749.623489][T24017] bond0: left promiscuous mode
[  749.646380][T24017] 8021q: adding VLAN 0 to HW filter on device bond0
[  749.673055][T24017] team0: left promiscuous mode
[  750.028020][T24017] A link change request failed with some changes committed already. Interface pimreg may have been left with an inconsistent configuration, please check.
[  750.048827][T23923] lo speed is unknown, defaulting to 1000
[  750.373894][T24026] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4564'.
[  752.901286][T24070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4567'.
[  753.851563][T14608] hsr_slave_1: left promiscuous mode
[  753.859668][T14608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  753.867136][T14608] batman_adv: batadv0: Removing interface: batadv_slave_0
[  753.876372][T14608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  753.882981][T24072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  753.895631][T14608] batman_adv: batadv0: Removing interface: batadv_slave_1
[  753.922161][T14608] veth1_macvtap: left promiscuous mode
[  753.929496][T14608] veth0_macvtap: left promiscuous mode
[  754.574318][T24079] FAULT_INJECTION: forcing a failure.
[  754.574318][T24079] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  754.588420][T24079] CPU: 0 UID: 0 PID: 24079 Comm: syz.1.4570 Not tainted syzkaller #0 PREEMPT(full) 
[  754.588451][T24079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  754.588464][T24079] Call Trace:
[  754.588473][T24079]  <TASK>
[  754.588482][T24079]  dump_stack_lvl+0xe8/0x150
[  754.588514][T24079]  should_fail_ex+0x412/0x560
[  754.588547][T24079]  _copy_from_user+0x2d/0xb0
[  754.588577][T24079]  do_sock_getsockopt+0x200/0x7e0
[  754.588608][T24079]  ? __pfx_vfs_write+0x10/0x10
[  754.588638][T24079]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  754.588665][T24079]  ? do_sys_openat2+0x14c/0x200
[  754.588687][T24079]  ? kmem_cache_free+0x182/0x650
[  754.588714][T24079]  ? fd_install+0x94/0x3d0
[  754.588753][T24079]  ? ksys_write+0x1fc/0x270
[  754.588788][T24079]  __x64_sys_getsockopt+0x1a4/0x240
[  754.588821][T24079]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.588844][T24079]  do_syscall_64+0x15f/0xf80
[  754.588869][T24079]  ? trace_irq_disable+0x3b/0x140
[  754.588899][T24079]  ? clear_bhb_loop+0x40/0x90
[  754.588926][T24079]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  754.588952][T24079] RIP: 0033:0x7f79a0d9cdd9
[  754.588980][T24079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  754.588999][T24079] RSP: 002b:00007f79a1c2a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  754.589022][T24079] RAX: ffffffffffffffda RBX: 00007f79a1015fa0 RCX: 00007f79a0d9cdd9
[  754.589038][T24079] RDX: 0000000000000002 RSI: 0000000000000011 RDI: 0000000000000005
[  754.589050][T24079] RBP: 00007f79a1c2a090 R08: 0000000000000000 R09: 0000000000000000
[  754.589064][T24079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  754.589076][T24079] R13: 00007f79a1016038 R14: 00007f79a1015fa0 R15: 00007ffdcaf80e18
[  754.589111][T24079]  </TASK>
[  755.448031][T24097] netlink: 280 bytes leftover after parsing attributes in process `syz.3.4575'.
[  755.500907][T14608] IPVS: stop unused estimator thread 0...
[  755.665626][T24102] xt_l2tp: v2 sid > 0xffff: 8388608
[  755.921226][T24104] netlink: 'syz.3.4577': attribute type 8 has an invalid length.
[  755.938800][T24104] netlink: 'syz.3.4577': attribute type 9 has an invalid length.
[  756.294978][T24118] ip6tnl0: Caught tx_queue_len zero misconfig
[  756.314490][T24119] x_tables: duplicate underflow at hook 1
[  756.708734][T24130] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4584'.
[  757.816428][T24189] block nbd0: NBD_DISCONNECT
[  757.870368][T24189] block nbd0: Send disconnect failed -32
[  757.910102][T24189] block nbd0: shutting down sockets
[  757.987173][T24194] netlink: 211472 bytes leftover after parsing attributes in process `syz.5.4598'.
[  758.045671][T24198] netlink: 'syz.3.4601': attribute type 1 has an invalid length.
[  758.100253][T24198] netlink: 'syz.3.4601': attribute type 1 has an invalid length.
[  758.121882][T24198] netlink: 'syz.3.4601': attribute type 1 has an invalid length.
[  758.182066][T24199] netlink: 'syz.3.4601': attribute type 1 has an invalid length.
[  758.198037][T24199] netlink: 'syz.3.4601': attribute type 1 has an invalid length.
[  758.214259][T24199] netlink: 'syz.3.4601': attribute type 1 has an invalid length.
[  758.250202][T24197] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4599'.
[  759.223633][T24225] netlink: 212336 bytes leftover after parsing attributes in process `syz.1.4605'.
[  759.356517][T24250] netlink: 'syz.2.4609': attribute type 8 has an invalid length.
[  759.931392][   T35] bond4 (unregistering): (slave geneve2): Releasing active interface
[  760.195495][   T35] bond7 (unregistering): (slave bridge3): Releasing active interface
[  760.270811][   T35] bond0 (unregistering): Released all slaves
[  760.284557][   T35] bond1 (unregistering): Released all slaves
[  760.303964][   T35] bond2 (unregistering): (slave veth3): Releasing backup interface
[  760.314694][   T35] bond2 (unregistering): Released all slaves
[  760.335799][   T35] bond3 (unregistering): Released all slaves
[  760.359259][   T35] bond4 (unregistering): Released all slaves
[  760.380970][   T35] bond5 (unregistering): Released all slaves
[  760.426240][   T35] bond6 (unregistering): Released all slaves
[  760.461575][   T35] bond7 (unregistering): Released all slaves
[  760.502840][   T35] bond8 (unregistering): Released all slaves
[  760.542748][   T35] bond9 (unregistering): Released all slaves
[  760.565773][   T35] bond10 (unregistering): Released all slaves
[  760.604779][   T35] bond11 (unregistering): Released all slaves
[  760.743135][ T5818] wg1 speed is unknown, defaulting to 1000
[  760.751743][ T5818] syz	: Port: 1 Link DOWN
[  760.900145][T24266] syzkaller0: entered promiscuous mode
[  760.900797][T19152] wg1 speed is unknown, defaulting to 1000
[  760.926575][T24266] syzkaller0: entered allmulticast mode
[  760.954362][T24268] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4614'.
[  760.975770][   T35] tipc: Disabling bearer <udp:syz1>
[  760.996573][   T35] tipc: Disabling bearer <udp:syz2>
[  761.012812][T24270] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4614'.
[  761.021515][   T35] tipc: Left network mode
[  761.103052][T24271] atomic_op ffff88807b06a998 conn xmit_atomic 0000000000000000
[  761.162823][T24275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4614'.
[  761.504954][T24285] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4618'.
[  761.539253][T24286] sctp: [Deprecated]: syz.2.4617 (pid 24286) Use of int in maxseg socket option.
[  761.539253][T24286] Use struct sctp_assoc_value instead
[  761.671260][T24293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4619'.
[  762.167187][T24304] batadv0: entered promiscuous mode
[  762.204635][T24304] macsec2: entered promiscuous mode
[  762.235125][T24304] macsec2: entered allmulticast mode
[  762.251216][T24304] batadv0: entered allmulticast mode
[  762.282914][T24304] 8021q: adding VLAN 0 to HW filter on device macsec2
[  762.287736][T24314] openvswitch: netlink: IP tunnel TTL not specified.
[  762.319540][T24304] batadv0: left allmulticast mode
[  762.353744][T24304] batadv0: left promiscuous mode
[  762.366326][T24316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4624'.
[  762.395405][T24320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4626'.
[  762.487116][T24317] hsr0: entered allmulticast mode
[  762.534259][T24317] hsr_slave_0: entered allmulticast mode
[  762.555814][T24317] hsr_slave_1: entered allmulticast mode
[  762.621913][T24308] wg1 speed is unknown, defaulting to 1000
[  763.266154][T24343] __nla_validate_parse: 4 callbacks suppressed
[  763.266175][T24343] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.4630'.
[  764.204571][T24308] lo speed is unknown, defaulting to 1000
[  764.286975][T24348] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4632'.
[  764.344882][T24354] netlink: 'syz.1.4634': attribute type 3 has an invalid length.
[  764.701511][T24350] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4632'.
[  764.742680][T24353] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  764.754961][T24353] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  764.779770][T24353] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  764.896382][T24357] wg1 speed is unknown, defaulting to 1000
[  764.949177][T24364] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20001
[  765.010796][T24365] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256
[  765.225557][T24372] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4639'.
[  765.429589][T24380] xt_policy: too many policy elements
[  765.457340][T24378] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4640'.
[  765.592157][T24384] veth0_to_hsr: mtu less than device minimum
[  765.822142][T24391] openvswitch: netlink: Unexpected mask (mask=20440, allowed=10048)
[  765.856453][T24391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4645'.
[  765.900019][T24394] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4646'.
[  765.923011][T24394] netlink: 'syz.3.4646': attribute type 2 has an invalid length.
[  765.948587][T24394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4646'.
[  766.246331][T24357] lo speed is unknown, defaulting to 1000
[  766.604938][T24407] netlink: 9148 bytes leftover after parsing attributes in process `syz.1.4648'.
[  767.071399][T24414] bond4: option all_slaves_active: invalid value (5)
[  767.140059][T24414] bond4 (unregistering): Released all slaves
[  767.201348][T24421] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4652'.
[  768.489180][T24447] __nla_validate_parse: 2 callbacks suppressed
[  768.489205][T24447] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4661'.
[  768.582952][T24443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4661'.
[  768.818700][T24454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4662'.
[  770.349439][   T35] batman_adv: batadv0: Removing interface: veth5
[  770.374999][   T35] batman_adv: batadv0: Removing interface: ipvlan0
[  771.274540][T14610] smc: removing ib device syz	
[  771.386203][   T35] team0 (unregistering): Port device vxcan1 removed
[  771.396347][T14610] smbdirect: ib_dev[syz	] removed
[  771.853698][    T9] IPVS: starting estimator thread 0...
[  771.968363][T24503] IPVS: using max 27 ests per chain, 64800 per kthread
[  772.773896][T24533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4675'.
[  772.808491][T24533] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4675'.
[  772.869961][T24535] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4676'.
[  773.006614][T24539] netlink: 292 bytes leftover after parsing attributes in process `syz.0.4676'.
[  773.034774][T24535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  773.141408][   T29] audit: type=1804 audit(1778018985.326:6): pid=24546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4678" name="/newroot/317/memory.events" dev="tmpfs" ino=1650 res=1 errno=0
[  773.148241][T24552] netlink: 'syz.2.4677': attribute type 1 has an invalid length.
[  773.209981][T24535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  773.274115][T24535] bond0 (unregistering): (slave syz_tun): Releasing backup interface
[  773.324453][T24535] bond0 (unregistering): Released all slaves
[  773.494137][T24552] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  773.739796][T24570] netlink: 4528 bytes leftover after parsing attributes in process `syz.2.4684'.
[  773.873837][T24575] netlink: 'syz.0.4686': attribute type 1 has an invalid length.
[  774.306068][T24597] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4689'.
[  774.432869][T24601] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4691'.
[  774.507321][T24597] syzkaller0: entered promiscuous mode
[  774.526909][T24597] syzkaller0: entered allmulticast mode
[  774.967798][T24604] veth11: entered promiscuous mode
[  775.001132][T24604] bond3: (slave veth11): Enslaving as an active interface with an up link
[  775.681146][T24628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4696'.
[  775.791091][T24635] netlink: 'syz.5.4697': attribute type 4 has an invalid length.
[  775.818126][T24635] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4697'.
[  776.249322][T24637] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4699'.
[  776.313026][T24639] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4699'.
[  776.642096][T24652] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4700'.
[  776.720060][T24657] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4698'.
[  776.906071][T24660] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4703'.
[  777.270762][T24670] Cannot find del_set index 3 as target
[  777.344517][T24671] syzkaller0: entered promiscuous mode
[  777.362892][T24671] syzkaller0: entered allmulticast mode
[  777.608271][   T35] IPVS: stop unused estimator thread 0...
[  777.837324][T24696] IPv6: NLM_F_CREATE should be specified when creating new route
[  777.866760][T24694] xt_CT: You must specify a L4 protocol and not use inversions on it
[  779.617994][T24756] 8021q: adding VLAN 0 to HW filter on device team0
[  779.686550][T24756] __nla_validate_parse: 5 callbacks suppressed
[  779.686574][T24756] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4731'.
[  779.752309][T24756] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  779.816210][T24757] syzkaller1: tun_chr_ioctl cmd 1074025677
[  779.823855][T24757] syzkaller1: linktype set to 1
[  780.177074][T24778] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4736'.
[  780.649766][T24798] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048)
[  780.821677][T24764] netlink: 'syz.3.4732': attribute type 29 has an invalid length.
[  780.849243][T24764] netlink: 'syz.3.4732': attribute type 29 has an invalid length.
[  781.673176][T24828] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4746'.
[  781.694956][T24828] syzkaller0: entered promiscuous mode
[  781.700721][T24828] syzkaller0: entered allmulticast mode
[  781.813524][T24831] bridge6: entered allmulticast mode
[  781.827451][T24831] bridge6: entered promiscuous mode
[  781.834237][T24831] team0: Port device bridge6 added
[  782.598135][ T4944] Bluetooth: hci4: command 0x0405 tx timeout
[  783.466837][T24790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  783.647336][T24841] syzkaller1: entered promiscuous mode
[  783.653527][T24841] syzkaller1: entered allmulticast mode
[  783.864010][T24844] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4749'.
[  783.912989][T24847] netlink: 'syz.2.4750': attribute type 6 has an invalid length.
[  783.998514][T24847] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4750'.
[  784.069264][  T993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  784.110537][T16829] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  784.493449][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4754'.
[  784.549525][T24866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4754'.
[  784.802984][T24879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4757'.
[  785.000084][  T993] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  785.142789][T24893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4759'.
[  785.214264][T24888] veth5: entered allmulticast mode
[  785.274642][T24888] bond0: (slave veth5): Enslaving as an active interface with an up link
[  785.316326][T24892] bond0 (unregistering): (slave veth5): Releasing backup interface
[  785.366765][T24892] bond0 (unregistering): Released all slaves
[  785.443286][T14609] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  785.466408][T14609] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  785.798442][ T5818] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  786.385776][T24932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4770'.
[  786.557361][T24942] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4771'.
[  786.568880][T24940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4772'.
[  786.610518][T24940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4772'.
[  787.148041][T24955] lo speed is unknown, defaulting to 1000
[  788.034157][T24993] netlink: 'syz.5.4783': attribute type 3 has an invalid length.
[  788.082016][T24993] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4783'.
[  788.413270][T24956] lo speed is unknown, defaulting to 1000
[  788.808645][T25017] sctp: [Deprecated]: syz.3.4789 (pid 25017) Use of struct sctp_assoc_value in delayed_ack socket option.
[  788.808645][T25017] Use struct sctp_sack_info instead
[  788.940274][T24972] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4778'.
[  789.041211][T25013] netlink: 192 bytes leftover after parsing attributes in process `syz.2.4787'.
[  789.096380][T25013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4787'.
[  789.396080][T25022] dvmrp1: tun_chr_ioctl cmd 1074025677
[  789.421944][T25022] dvmrp1: linktype set to 0
[  789.516675][T25025] batadv1: entered promiscuous mode
[  789.547250][T25025] batadv1: entered allmulticast mode
[  789.672279][T24969] lo speed is unknown, defaulting to 1000
[  789.875405][T25047] bridge_slave_1: mtu less than device minimum
[  789.881977][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  790.079298][T25054] __nla_validate_parse: 3 callbacks suppressed
[  790.079320][T25054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4797'.
[  790.583884][T25008] lo speed is unknown, defaulting to 1000
[  794.416416][T25158] sch_tbf: burst 0 is lower than device tunl0 mtu (1480) !
[  794.451236][T25153] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  794.641708][T25165] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4813'.
[  794.835088][T25163] lo speed is unknown, defaulting to 1000
[  795.375651][T25181] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4816'.
[  795.689398][T25189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4818'.
[  795.749989][T25191] netlink: 'syz.1.4819': attribute type 39 has an invalid length.
[  795.904143][T25191] hsr_slave_0 (unregistering): left promiscuous mode
[  796.302318][T25201] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4821'.
[  796.344547][T25201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4821'.
[  796.619877][T25212] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4824'.
[  796.649028][T25212] netlink: 'syz.0.4824': attribute type 1 has an invalid length.
[  796.669196][T25214] netlink: 'syz.1.4826': attribute type 30 has an invalid length.
[  796.683817][T25212] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4824'.
[  796.703246][T25214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  796.734634][T25215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4824'.
[  796.773145][T25206] lo speed is unknown, defaulting to 1000
[  796.783762][T25215] veth1: entered promiscuous mode
[  796.802434][T25215] veth1: entered allmulticast mode
[  797.044808][T25228] netlink: 'syz.2.4827': attribute type 2 has an invalid length.
[  797.389573][T25236] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4830'.
[  797.423615][T25236] .70·X: renamed from veth1_virt_wifi (while UP)
[  797.449279][T25236] .70·X: entered allmulticast mode
[  797.465273][T25236] A link change request failed with some changes committed already. Interface .70·X may have been left with an inconsistent configuration, please check.
[  798.465811][T25260] rdma_rxe: rxe_newlink: failed to add lo
[  798.598767][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  798.856583][T25268] netlink: 'syz.2.4838': attribute type 11 has an invalid length.
[  798.931973][T25273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4839'.
[  799.439369][T25293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4844'.
[  799.996356][ T5818] IPVS: starting estimator thread 0...
[  800.118690][T25316] IPVS: using max 25 ests per chain, 60000 per kthread
[  800.385203][T25332] __nla_validate_parse: 3 callbacks suppressed
[  800.385226][T25332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4851'.
[  800.471530][T25330] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4850'.
[  800.550565][T25340] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4853'.
[  800.740613][T25350] netlink: 124 bytes leftover after parsing attributes in process `syz.5.4853'.
[  801.801310][T25378] 8021q: adding VLAN 0 to HW filter on device bond0
[  801.837383][T25378] 8021q: adding VLAN 0 to HW filter on device team0
[  801.894376][T25399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4864'.
[  801.927172][T25378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  802.083638][T25410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4864'.
[  802.168600][T25406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4864'.
[  802.180699][T25406] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4864'.
[  802.249571][T25412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  802.413428][T25378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  802.469804][T25378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  802.486504][T25378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  802.504532][T25378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  802.515722][T25378] hsr0: left allmulticast mode
[  802.545794][T25378] hsr_slave_0: left allmulticast mode
[  802.554763][T25378] hsr_slave_1: left allmulticast mode
[  802.568484][T25378] veth1_macvtap: left promiscuous mode
[  802.575737][T25378] veth0_macvtap: left promiscuous mode
[  802.583221][T25378] veth0_macvtap: entered promiscuous mode
[  802.600078][T25378] veth1_macvtap: entered promiscuous mode
[  802.633686][T25378] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  802.687009][T14616] bridge0: port 1(bridge_slave_0) entered blocking state
[  802.694298][T14616] bridge0: port 1(bridge_slave_0) entered forwarding state
[  802.756373][T14616] bridge0: port 2(bridge_slave_1) entered blocking state
[  802.763665][T14616] bridge0: port 2(bridge_slave_1) entered forwarding state
[  802.879481][T16829] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  802.919953][T14598] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  802.957721][T14598] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  802.958127][T25430] netlink: 'syz.3.4870': attribute type 1 has an invalid length.
[  802.992682][T14598] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  803.032042][T25436] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4870'.
[  803.086129][T25430] bond5: entered promiscuous mode
[  803.132168][T25430] 8021q: adding VLAN 0 to HW filter on device bond5
[  803.270612][T25441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  803.325119][T25443] bond5: (slave bridge5): making interface the new active one
[  803.356932][T25443] bridge5: entered promiscuous mode
[  803.383272][T25443] bond5: (slave bridge5): Enslaving as an active interface with an up link
[  803.554134][ T5629] block nbd0: Receive control failed (result -32)
[  803.694802][T25464] tipc: Started in network mode
[  803.714692][T25464] tipc: Node identity aaaaaaaaaa35, cluster identity 4711
[  803.749225][T25464] tipc: Enabled bearer <eth:macvlan1>, priority 10
[  803.925727][T25471] netlink: 724 bytes leftover after parsing attributes in process `syz.1.4879'.
[  804.045442][T25480] sctp: [Deprecated]: syz.0.4883 (pid 25480) Use of int in max_burst socket option.
[  804.045442][T25480] Use struct sctp_assoc_value instead
[  804.238435][T25485] syzkaller0: entered promiscuous mode
[  804.272442][T25485] syzkaller0: entered allmulticast mode
[  804.365496][T25491] xt_hashlimit: size too large, truncated to 1048576
[  804.484141][T25507] netlink: 'syz.1.4884': attribute type 1 has an invalid length.
[  804.867830][  T993] tipc: Node number set to 10463914
[  806.435889][T25574] __nla_validate_parse: 6 callbacks suppressed
[  806.435912][T25574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4908'.
[  806.563200][T25577] tipc: New replicast peer: 255.255.255.255
[  806.599707][T25577] tipc: Enabled bearer <udp:syz2>, priority 10
[  806.735137][T25589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4914'.
[  806.866905][T25597] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  806.901400][T25590] lo speed is unknown, defaulting to 1000
[  807.102432][T25607] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[  807.175488][T25604] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  807.484469][T25621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4920'.
[  807.715129][T25633] netlink: 'syz.5.4922': attribute type 10 has an invalid length.
[  807.733357][T25631] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4923'.
[  807.749873][T25633] 8021q: adding VLAN 0 to HW filter on device `
[  807.775660][T25633] bond0: (slave `): Enslaving as an active interface with an up link
[  808.028451][T25641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4924'.
[  808.043641][T25641] openvswitch: netlink: Unknown nsh attribute 0
[  808.137401][T25646] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4926'.
[  808.137876][T25645] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4926'.
[  808.193699][T25649] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4927'.
[  808.210428][T25643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4925'.
[  808.300355][T25652] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4927'.
[  808.387262][T25643] openvswitch: netlink: Flow actions attr not present in new flow.
[  808.497168][T25652] 0ªî{X¹¦: renamed from gretap0
[  808.507419][T25652] 0ªî{X¹¦: entered allmulticast mode
[  808.521092][T25652] A link change request failed with some changes committed already. Interface 
30ªî{X¹¦ may have been left with an inconsistent configuration, please check.
[  808.656003][T25655] 8021q: adding VLAN 0 to HW filter on device bond6
[  810.771301][T25724] syzkaller0: entered promiscuous mode
[  810.776855][T25724] syzkaller0: entered allmulticast mode
[  815.731667][T25760] lo speed is unknown, defaulting to 1000
[  815.879350][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  816.031686][T25777] __nla_validate_parse: 2 callbacks suppressed
[  816.031707][T25777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4954'.
[  816.212576][T25772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4954'.
[  816.498721][T25791] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  816.520497][T25791] bond4 (unregistering): Released all slaves
[  816.617454][T25801] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4963'.
[  817.093639][T25808] tc action pedit 'at' offset 6 out of bounds
[  817.591988][T25815] lo speed is unknown, defaulting to 1000
[  818.181002][T25838] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4976'.
[  818.535705][T25849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4980'.
[  818.664317][T25851] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4981'.
[  818.700715][T25851] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4981'.
[  818.741350][T25851] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4981'.
[  818.965999][T14609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  818.983605][T14609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  819.097230][T25862] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  819.186104][T25862] block nbd5: not configured, cannot reconfigure
[  819.242215][T25862] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  819.566348][T25870] pim6reg99999991: entered allmulticast mode
[  819.783442][T25876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4986'.
[  819.820910][T25876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4986'.
[  819.854075][T25876] openvswitch: netlink: VXLAN extension message has 3 unknown bytes.
[  820.262734][T25897] bond4: option arp_interval: invalid value (18446744073709551615)
[  820.272383][T25897] bond4: option arp_interval: allowed values 0 - 2147483647
[  820.294238][T25897] bond4 (unregistering): Released all slaves
[  820.341940][T25907] veth1_macvtap: left promiscuous mode
[  820.548910][T25909] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 3, id = 0
[  841.893010][T25950] __nla_validate_parse: 2 callbacks suppressed
[  841.893030][T25950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5001'.
[  841.942921][T25941] lo speed is unknown, defaulting to 1000
[  842.012795][T25954] gre0: left promiscuous mode
[  842.030508][T25954] gre0: left allmulticast mode
[  842.046991][T25954] 0ªî{X¹¦: left allmulticast mode
[  842.231298][T25954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  842.440986][T25954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  842.534740][T25954] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  842.558297][T25954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  842.633479][T25954] veth1_vlan: left promiscuous mode
[  842.645906][T25954] veth0_vlan: left promiscuous mode
[  842.658291][T25954] veth0_vlan: entered promiscuous mode
[  842.673835][T25954] veth1_vlan: entered promiscuous mode
[  842.716786][T25954] veth1_macvtap: entered promiscuous mode
[  842.780680][T25954] veth3: left promiscuous mode
[  842.795775][T25954] hsr1: left promiscuous mode
[  842.833587][T25954] 8021q: adding VLAN 0 to HW filter on device bond1
[  842.852713][T25954] bond2: left promiscuous mode
[  842.858923][T25954] wireguard1: left promiscuous mode
[  842.886472][T25954] bond3: left promiscuous mode
[  842.896218][T25954] 8021q: adding VLAN 0 to HW filter on device eth0
[  842.906934][T25954] 8021q: adding VLAN 0 to HW filter on device eth1
[  842.926365][T25954] 8021q: adding VLAN 0 to HW filter on device eth2
[  842.966325][T25954] 8021q: adding VLAN 0 to HW filter on device eth3
[  843.086143][T25954] bridge6: left allmulticast mode
[  843.117188][T25954] 8021q: adding VLAN 0 to HW filter on device bond4
[  843.126049][    T9] lo speed is unknown, defaulting to 1000
[  843.144770][    T9] sqz0: Port: 1 Link ACTIVE
[  843.213771][T14610] bridge0: port 2(bridge_slave_1) entered blocking state
[  843.221051][T14610] bridge0: port 2(bridge_slave_1) entered forwarding state
[  843.301818][T14602] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  843.303811][T10019] syz1: Port: 1 Link ACTIVE
[  843.362366][T10018] lo speed is unknown, defaulting to 1000
[  843.431282][T14608] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  843.519544][T25964] lo speed is unknown, defaulting to 1000
[  843.519688][T14608] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  843.577254][T14608] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  843.631230][T25999] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  843.656916][T25999] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  843.840623][   T35] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  843.876585][   T35] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  843.885006][ T5359] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  844.292626][T26017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5018'.
[  844.352146][T16829] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  844.375723][T16829] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  844.435762][T16829] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  844.483806][T16829] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  844.508670][  T993] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  844.622065][T26024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5022'.
[  844.683539][T26026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  844.683693][  T993] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  844.733537][T26026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  844.909465][T26037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'.
[  844.975150][T26024] bond4: entered allmulticast mode
[  844.987166][T26038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'.
[  844.994882][T26024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5022'.
[  845.169556][T26026] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  845.208949][T26026] lo: entered allmulticast mode
[  845.233481][T26026] bond4: (slave lo): Enslaving as an active interface with an up link
[  845.262433][T26026] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  845.315666][T26037] veth0_to_bond: entered allmulticast mode
[  845.345251][T26036] netlink: 'syz.2.5024': attribute type 2 has an invalid length.
[  845.345696][T26024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5022'.
[  845.353609][T26036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5024'.
[  845.376389][T26024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5022'.
[  845.605723][T26026] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  845.635598][ T5818] syz1: Port: 1 Link DOWN
[  845.779926][T26049] macsec2: entered promiscuous mode
[  845.785505][T26049] virt_wifi0: entered promiscuous mode
[  845.861678][T26046] syzkaller0: entered promiscuous mode
[  845.867744][T26046] syzkaller0: entered allmulticast mode
[  847.798085][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  848.527941][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  850.810852][T26053] bond1: left promiscuous mode
[  850.815749][T26053] bridge3: left promiscuous mode
[  850.821708][T26053] vlan3: left allmulticast mode
[  850.826646][T26053] bond1: left allmulticast mode
[  850.834903][T26053] bridge3: left allmulticast mode
[  850.871855][T26053] veth11: left promiscuous mode
[  850.882690][T26053] bond4: left allmulticast mode
[  850.888990][T26053] lo: left allmulticast mode
[  851.053076][T26060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  851.066411][T26060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.218396][T26065] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  851.220550][   T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  851.264133][   T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  851.289558][   T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  851.309751][   T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  851.446009][T26060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  851.461642][T26060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  851.465420][T26089] netlink: 'syz.1.5030': attribute type 1 has an invalid length.
[  851.638369][T26089] 8021q: adding VLAN 0 to HW filter on device bond5
[  851.791234][T26060] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode
[  851.816664][T26060] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode
[  851.855300][T26060] bridge0: port 3(netdevsim1) entered disabled state
[  851.894524][T26060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  851.928730][T26060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.164904][T26060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  852.177316][T26060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  852.567801][T26137] syzkaller0: entered promiscuous mode
[  852.585813][T26137] syzkaller0: entered allmulticast mode
[  852.616489][T14598] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  852.644085][T14598] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  852.832608][T14616] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  852.864201][T14616] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  852.979070][T14608] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  852.988325][T14608] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  853.024118][T26153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5048'.
[  853.124893][T14608] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  853.146981][T14608] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.610582][T26181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5055'.
[  853.978836][T26199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5058'.
[  854.424619][T26215] netlink: 'syz.1.5063': attribute type 2 has an invalid length.
[  854.424954][T26214] netlink: 'syz.3.5061': attribute type 1 has an invalid length.
[  854.465936][T26215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5063'.
[  854.530098][T26214] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5061'.
[  855.007485][T26231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5068'.
[  855.150490][T26238] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5070'.
[  855.752825][T26253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5073'.
[  855.823630][T26256] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5078'.
[  855.860388][T26252] 5nè‹Ò: entered promiscuous mode
[  855.934687][T26265] FAULT_INJECTION: forcing a failure.
[  855.934687][T26265] name failslab, interval 1, probability 0, space 0, times 0
[  855.947501][T26265] CPU: 1 UID: 0 PID: 26265 Comm: syz.3.5079 Not tainted syzkaller #0 PREEMPT(full) 
[  855.947536][T26265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  855.947560][T26265] Call Trace:
[  855.947586][T26265]  <TASK>
[  855.947613][T26265]  dump_stack_lvl+0xe8/0x150
[  855.947654][T26265]  should_fail_ex+0x412/0x560
[  855.947685][T26265]  should_failslab+0xa8/0x100
[  855.947715][T26265]  ? dst_alloc+0x105/0x170
[  855.947743][T26265]  kmem_cache_alloc_noprof+0x87/0x650
[  855.947769][T26265]  ? ip6_pol_route+0x160/0x13d0
[  855.947793][T26265]  ? __pfx_ip6_dst_gc+0x10/0x10
[  855.947834][T26265]  dst_alloc+0x105/0x170
[  855.947867][T26265]  ip6_pol_route+0xafb/0x13d0
[  855.947888][T26265]  ? ip6_pol_route+0x160/0x13d0
[  855.947913][T26265]  ? __pfx_ip6_pol_route+0x10/0x10
[  855.947942][T26265]  ? unwind_next_frame+0xa6/0x2550
[  855.947977][T26265]  fib6_rule_action+0x265/0xc00
[  855.948001][T26265]  ? fib_rules_lookup+0x9b/0xea0
[  855.948030][T26265]  ? __pfx_fib6_rule_action+0x10/0x10
[  855.948052][T26265]  ? ip6_compressed_string+0xa79/0xb60
[  855.948080][T26265]  ? fib6_rule_match+0x79a/0xa80
[  855.948100][T26265]  ? __pfx_fib6_rule_action+0x10/0x10
[  855.948123][T26265]  fib_rules_lookup+0x768/0xea0
[  855.948153][T26265]  ? fib_rules_lookup+0x9b/0xea0
[  855.948188][T26265]  ? __pfx_fib_rules_lookup+0x10/0x10
[  855.948212][T26265]  ? l3mdev_update_flow+0x29/0x640
[  855.948239][T26265]  ? l3mdev_update_flow+0x4d1/0x640
[  855.948265][T26265]  ? l3mdev_update_flow+0x29/0x640
[  855.948313][T26265]  fib6_rule_lookup+0x1a0/0x730
[  855.948336][T26265]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  855.948359][T26265]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  855.948383][T26265]  ? ip6_route_output_flags+0x2e/0x5d0
[  855.948407][T26265]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  855.948437][T26265]  ? dev_get_by_index_rcu+0xf4/0x110
[  855.948476][T26265]  ip6_route_output_flags+0x364/0x5d0
[  855.948499][T26265]  ? ip6_route_output_flags+0x2e/0x5d0
[  855.948525][T26265]  ip6_dst_lookup_tail+0x2ae/0x15a0
[  855.948555][T26265]  ? txopt_get+0x79/0x3f0
[  855.948591][T26265]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  855.948618][T26265]  ? txopt_get+0x79/0x3f0
[  855.948643][T26265]  ? txopt_get+0x79/0x3f0
[  855.948666][T26265]  ? txopt_get+0x79/0x3f0
[  855.948693][T26265]  ? txopt_get+0x343/0x3f0
[  855.948723][T26265]  ? __pfx_txopt_get+0x10/0x10
[  855.948756][T26265]  ip6_dst_lookup_flow+0x89/0x150
[  855.948787][T26265]  rawv6_sendmsg+0xe1d/0x18e0
[  855.948838][T26265]  ? __pfx_rawv6_sendmsg+0x10/0x10
[  855.948881][T26265]  ? aa_sk_perm+0x6d5/0x900
[  855.948917][T26265]  ? __pfx_aa_sk_perm+0x10/0x10
[  855.948947][T26265]  ? sock_rps_record_flow+0x19/0x350
[  855.948980][T26265]  ? inet_sendmsg+0x2f4/0x370
[  855.949008][T26265]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  855.949040][T26265]  ____sys_sendmsg+0x80a/0x9f0
[  855.949079][T26265]  ? __pfx_____sys_sendmsg+0x10/0x10
[  855.949117][T26265]  ? import_iovec+0x73/0xa0
[  855.949150][T26265]  ___sys_sendmsg+0x2a5/0x360
[  855.949177][T26265]  ? __lock_acquire+0x6b5/0x2cf0
[  855.949207][T26265]  ? __pfx____sys_sendmsg+0x10/0x10
[  855.949237][T26265]  ? kstrtouint+0x6e/0xe0
[  855.949319][T26265]  ? __fget_files+0x2a/0x420
[  855.949343][T26265]  ? __fget_files+0x3a0/0x420
[  855.949379][T26265]  __sys_sendmmsg+0x27c/0x4e0
[  855.949414][T26265]  ? __pfx___sys_sendmmsg+0x10/0x10
[  855.949438][T26265]  ? __mutex_unlock_slowpath+0x1be/0x6f0
[  855.949489][T26265]  ? ksys_write+0x242/0x270
[  855.949521][T26265]  ? __pfx_ksys_write+0x10/0x10
[  855.949557][T26265]  __x64_sys_sendmmsg+0xa0/0xc0
[  855.949584][T26265]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.949606][T26265]  do_syscall_64+0x15f/0xf80
[  855.949629][T26265]  ? trace_irq_disable+0x3b/0x140
[  855.949659][T26265]  ? clear_bhb_loop+0x40/0x90
[  855.949684][T26265]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  855.949703][T26265] RIP: 0033:0x7fca56d9cdd9
[  855.949723][T26265] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  855.949741][T26265] RSP: 002b:00007fca57d06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  855.949765][T26265] RAX: ffffffffffffffda RBX: 00007fca57015fa0 RCX: 00007fca56d9cdd9
[  855.949779][T26265] RDX: 0000000000000001 RSI: 0000200000004580 RDI: 0000000000000003
[  855.949792][T26265] RBP: 00007fca57d06090 R08: 0000000000000000 R09: 0000000000000000
[  855.949805][T26265] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001
[  855.949817][T26265] R13: 00007fca57016038 R14: 00007fca57015fa0 R15: 00007ffff768b2b8
[  855.949864][T26265]  </TASK>
[  856.197769][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  856.745591][T26285] openvswitch: netlink: Unexpected mask (mask=100000000, allowed=10048)
[  856.890671][T26292] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5086'.
[  857.133018][T26299] syzkaller1: entered promiscuous mode
[  857.151759][T26299] syzkaller1: entered allmulticast mode
[  858.561895][T26324] sit0: entered promiscuous mode
[  858.573153][T26324] __nla_validate_parse: 8 callbacks suppressed
[  858.573174][T26324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5091'.
[  858.968820][T26338] netlink: 'syz.0.5095': attribute type 1 has an invalid length.
[  858.987117][T26339] netlink: 'syz.3.5097': attribute type 1 has an invalid length.
[  858.993568][T26338] netlink: 16122 bytes leftover after parsing attributes in process `syz.0.5095'.
[  859.120121][   T29] audit: type=1800 audit(1778019071.306:7): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5097" name="memory.events" dev="tmpfs" ino=2105 res=0 errno=0
[  859.164143][   T29] audit: type=1804 audit(1778019071.306:8): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5097" name="/newroot/406/memory.events" dev="tmpfs" ino=2105 res=1 errno=0
[  859.695787][T26367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5100'.
[  859.795151][T26339] 8021q: adding VLAN 0 to HW filter on device bond7
[  859.953693][T26371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5100'.
[  859.981846][T26343] bond7: (slave geneve4): making interface the new active one
[  860.024146][T26343] bond7: (slave geneve4): Enslaving as an active interface with an up link
[  860.115716][T26377] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  860.299581][T26354] syzkaller0: entered promiscuous mode
[  860.322420][T26354] syzkaller0: entered allmulticast mode
[  860.444064][T26390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5102'.
[  861.277507][T26386] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5102'.
[  861.334596][T26409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5104'.
[  866.590799][T26448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5112'.
[  866.617066][T26443] nbd5: detected capacity change from 0 to 63
[  866.631339][T26448] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5112'.
[  866.651193][T26449] block nbd5: NBD_DISCONNECT
[  866.685609][T26449] block nbd5: Disconnected due to user request.
[  866.738196][T26449] block nbd5: shutting down sockets
[  866.758235][    C1] blk_print_req_error: 54 callbacks suppressed
[  866.758261][    C1] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  866.773839][    C1] buffer_io_error: 54 callbacks suppressed
[  866.773858][    C1] Buffer I/O error on dev nbd5, logical block 0, async page read
[  866.807789][    C1] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  866.816959][    C1] Buffer I/O error on dev nbd5, logical block 1, async page read
[  866.825079][    C1] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  866.834268][    C1] Buffer I/O error on dev nbd5, logical block 2, async page read
[  866.842162][    C1] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  866.851274][    C1] Buffer I/O error on dev nbd5, logical block 3, async page read
[  866.869333][T26466] netlink: 'syz.3.5116': attribute type 29 has an invalid length.
[  866.886686][T26451] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  866.900053][T26466] netlink: 'syz.3.5116': attribute type 29 has an invalid length.
[  866.919378][T26451] Buffer I/O error on dev nbd5, logical block 0, async page read
[  866.948095][T26466] netlink: 'syz.3.5116': attribute type 32 has an invalid length.
[  866.965462][T26451] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  866.992664][T26466] netlink: 500 bytes leftover after parsing attributes in process `syz.3.5116'.
[  867.009850][T26451] Buffer I/O error on dev nbd5, logical block 1, async page read
[  867.029554][T26451] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  867.037225][T26469] netlink: 'syz.3.5116': attribute type 29 has an invalid length.
[  867.050753][T26451] Buffer I/O error on dev nbd5, logical block 2, async page read
[  867.064637][T26451] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  867.095255][T26451] Buffer I/O error on dev nbd5, logical block 3, async page read
[  867.103478][T26468] syzkaller0: entered promiscuous mode
[  867.103505][T26468] syzkaller0: entered allmulticast mode
[  867.135252][T26451] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  867.146418][T26473] netlink: 140 bytes leftover after parsing attributes in process `syz.1.5119'.
[  867.151734][T26451] Buffer I/O error on dev nbd5, logical block 0, async page read
[  867.174546][T26451] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  867.194397][T26451] Buffer I/O error on dev nbd5, logical block 1, async page read
[  867.211628][T26451] ldm_validate_partition_table(): Disk read failed.
[  867.231456][T26451] Dev nbd5: unable to read RDB block 0
[  867.253908][T26451]  nbd5: unable to read partition table
[  867.296613][T26451] ldm_validate_partition_table(): Disk read failed.
[  867.336069][T26451] Dev nbd5: unable to read RDB block 0
[  867.372831][T26451]  nbd5: unable to read partition table
[  867.605608][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5121'.
[  867.784622][T26495] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5123'.
[  867.926464][T26475] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5118'.
[  867.931630][T26492] lo speed is unknown, defaulting to 1000
[  867.996343][T26504] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5125'.
[  868.071528][T26504] 0·: renamed from hsr0
[  868.082369][T26504] 0·: entered allmulticast mode
[  868.089332][T26504] hsr_slave_0: entered allmulticast mode
[  868.095259][T26504] hsr_slave_1: entered allmulticast mode
[  868.105144][T26504] A link change request failed with some changes committed already. Interface 
c0· may have been left with an inconsistent configuration, please check.
[  868.256966][T26506] sysfs: cannot create duplicate filename '/class/ieee80211/!'
[  868.289810][T26506] CPU: 0 UID: 0 PID: 26506 Comm: syz.2.5126 Not tainted syzkaller #0 PREEMPT(full) 
[  868.289844][T26506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  868.289858][T26506] Call Trace:
[  868.289868][T26506]  <TASK>
[  868.289878][T26506]  dump_stack_lvl+0xe8/0x150
[  868.289911][T26506]  sysfs_warn_dup+0x8e/0xa0
[  868.289939][T26506]  sysfs_do_create_link_sd+0xc0/0x110
[  868.289970][T26506]  device_add_class_symlinks+0x1cf/0x240
[  868.290001][T26506]  device_add+0x475/0xbb0
[  868.290030][T26506]  wiphy_register+0x21e8/0x32e0
[  868.290081][T26506]  ? __pfx_wiphy_register+0x10/0x10
[  868.290110][T26506]  ? __pfx_netdev_run_todo+0x10/0x10
[  868.290141][T26506]  ? minstrel_ht_alloc+0x6e0/0x7e0
[  868.290183][T26506]  ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0
[  868.290218][T26506]  ieee80211_register_hw+0x3d82/0x4a70
[  868.290267][T26506]  ? ieee80211_register_hw+0x18f1/0x4a70
[  868.290329][T26506]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  868.290365][T26506]  ? __asan_memset+0x22/0x50
[  868.290392][T26506]  ? __hrtimer_setup+0x1b7/0x260
[  868.290419][T26506]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  868.290453][T26506]  mac80211_hwsim_new_radio+0x3335/0x5aa0
[  868.290516][T26506]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  868.290538][T26506]  ? kstrndup+0xbf/0x160
[  868.290573][T26506]  hwsim_new_radio_nl+0xf6a/0x1c00
[  868.290626][T26506]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  868.290662][T26506]  ? rcu_is_watching+0x15/0xb0
[  868.290689][T26506]  ? trace_kmalloc+0x2a/0xf0
[  868.290727][T26506]  ? __nla_parse+0x40/0x60
[  868.290773][T26506]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  868.290806][T26506]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  868.290850][T26506]  genl_family_rcv_msg_doit+0x22a/0x330
[  868.290893][T26506]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  868.290942][T26506]  ? bpf_lsm_capable+0x9/0x20
[  868.290962][T26506]  ? security_capable+0x7e/0x2c0
[  868.290997][T26506]  genl_rcv_msg+0x61c/0x7a0
[  868.291044][T26506]  ? __pfx_genl_rcv_msg+0x10/0x10
[  868.291077][T26506]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  868.291122][T26506]  netlink_rcv_skb+0x232/0x4b0
[  868.291152][T26506]  ? __pfx_genl_rcv_msg+0x10/0x10
[  868.291193][T26506]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  868.291243][T26506]  ? down_read+0x270/0x2e0
[  868.291270][T26506]  ? genl_rcv+0xd/0x40
[  868.291305][T26506]  genl_rcv+0x28/0x40
[  868.291336][T26506]  netlink_unicast+0x75c/0x8e0
[  868.291376][T26506]  netlink_sendmsg+0x813/0xb40
[  868.291418][T26506]  ? __pfx_netlink_sendmsg+0x10/0x10
[  868.291452][T26506]  ? aa_sock_msg_perm+0xf1/0x1b0
[  868.291481][T26506]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  868.291512][T26506]  ____sys_sendmsg+0x972/0x9f0
[  868.291538][T26506]  ? __might_fault+0xaf/0x130
[  868.291573][T26506]  ? __pfx_____sys_sendmsg+0x10/0x10
[  868.291610][T26506]  ? import_iovec+0x73/0xa0
[  868.291646][T26506]  ___sys_sendmsg+0x2a5/0x360
[  868.291671][T26506]  ? __lock_acquire+0x6b5/0x2cf0
[  868.291698][T26506]  ? __pfx____sys_sendmsg+0x10/0x10
[  868.291730][T26506]  ? futex_wake+0x4ac/0x580
[  868.291801][T26506]  ? __fget_files+0x2a/0x420
[  868.291826][T26506]  ? __fget_files+0x3a0/0x420
[  868.291865][T26506]  __x64_sys_sendmsg+0x1bd/0x2a0
[  868.291898][T26506]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  868.291936][T26506]  ? rcu_is_watching+0x15/0xb0
[  868.291971][T26506]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.291994][T26506]  do_syscall_64+0x15f/0xf80
[  868.292017][T26506]  ? trace_irq_disable+0x3b/0x140
[  868.292045][T26506]  ? clear_bhb_loop+0x40/0x90
[  868.292071][T26506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  868.292091][T26506] RIP: 0033:0x7fc883d9cdd9
[  868.292111][T26506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  868.292127][T26506] RSP: 002b:00007fc884ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  868.292147][T26506] RAX: ffffffffffffffda RBX: 00007fc884015fa0 RCX: 00007fc883d9cdd9
[  868.292161][T26506] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000009
[  868.292172][T26506] RBP: 00007fc883e32d69 R08: 0000000000000000 R09: 0000000000000000
[  868.292183][T26506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  868.292193][T26506] R13: 00007fc884016038 R14: 00007fc884015fa0 R15: 00007ffd51b9d1e8
[  868.292225][T26506]  </TASK>
[  868.778669][T26515] xt_TPROXY: Can be used only with -p tcp or -p udp
[  868.971648][T26514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  869.588101][T26534] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5128'.
[  870.271263][T14602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  870.312933][T14602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  870.635167][T26551] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5135'.
[  870.656087][T26553] tipc: Trying to set illegal importance in message
[  870.680508][T26551] xt_bpf: check failed: parse error
[  870.739794][T26554] bridge3: port 1(veth5) entered blocking state
[  870.752900][T26554] bridge3: port 1(veth5) entered disabled state
[  870.770116][T26554] veth5: entered allmulticast mode
[  870.785195][T26554] veth5: entered promiscuous mode
[  870.797742][T26554] bridge3: port 1(veth5) entered blocking state
[  870.804188][T26554] bridge3: port 1(veth5) entered forwarding state
[  870.960498][T26555] bridge3: port 2(veth7) entered blocking state
[  870.984548][T26555] bridge3: port 2(veth7) entered disabled state
[  871.007194][T26555] veth7: entered allmulticast mode
[  871.029689][T26555] veth7: entered promiscuous mode
[  871.057949][T26555] bridge3: port 2(veth7) entered blocking state
[  871.064443][T26555] bridge3: port 2(veth7) entered forwarding state
[  871.379775][T14605] bridge3: port 1(veth5) entered disabled state
[  871.545817][T14605] bridge3: port 2(veth7) entered disabled state
[  871.810573][T26593] __nla_validate_parse: 1 callbacks suppressed
[  871.810596][T26593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5142'.
[  871.851842][T26594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5142'.
[  872.014069][T26594] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5142'.
[  872.060906][T26587] lo speed is unknown, defaulting to 1000
[  872.103657][T26595] xt_CT: You must specify a L4 protocol and not use inversions on it
[  872.778068][T14607] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1
[  872.837967][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  873.615596][T26614] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5146'.
[  873.670327][T26614] bond0: entered promiscuous mode
[  873.687689][T26614] bond_slave_0: entered promiscuous mode
[  873.701617][T26616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5147'.
[  873.704528][T26614] bond_slave_1: entered promiscuous mode
[  873.759631][T26614] `: entered promiscuous mode
[  873.779031][T26614] team_slave_0: entered promiscuous mode
[  873.799755][T26614] team_slave_1: entered promiscuous mode
[  873.824621][T26614] gretap0: entered promiscuous mode
[  873.839710][T26614] debugfs: 'hsr1' already exists in 'hsr'
[  873.878607][T26618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5148'.
[  873.890671][T26614] Cannot create hsr debugfs directory
[  873.924462][T26614] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  873.954134][T26614] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network
[  874.005955][T26614] hsr1: entered promiscuous mode
[  874.686932][T26632] syzkaller0: entered promiscuous mode
[  874.705744][T26632] syzkaller0: entered allmulticast mode
[  874.948033][T26635] tipc: Failed to remove unknown binding: 66,1,1/10463914:2536253728/2536253730
[  874.984343][T26635] tipc: Failed to remove unknown binding: 66,1,1/10463914:2536253728/2536253730
[  875.017760][T26635] tipc: Failed to remove unknown binding: 66,1,1/10463914:2536253728/2536253730
[  875.181456][T26641] netlink: 'syz.1.5154': attribute type 10 has an invalid length.
[  875.383131][T26635] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5153'.
[  875.396726][T26646] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5156'.
[  875.444316][T26635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5153'.
[  875.591909][T26649] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  875.628919][T26649] syzkaller0: entered promiscuous mode
[  875.656137][T26649] syzkaller0: entered allmulticast mode
[  875.919909][T26662] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5160'.
[  875.994567][T26649] tipc: Resetting bearer <eth:syzkaller0>
[  876.111467][T26647] tipc: Resetting bearer <eth:syzkaller0>
[  876.304603][T26647] tipc: Disabling bearer <eth:syzkaller0>
[  876.417490][T26678] syzkaller0: entered promiscuous mode
[  876.448280][T26678] syzkaller0: entered allmulticast mode
[  876.826721][T26688] netlink: 'syz.2.5167': attribute type 4 has an invalid length.
[  877.144251][T26705] mac80211_hwsim hwsim67 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  877.332028][T26709] bond0: (slave vlan4): Opening slave failed
[  877.506508][T26723] __nla_validate_parse: 64 callbacks suppressed
[  877.506534][T26723] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5175'.
[  877.564490][T26721] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  877.596203][T26721] syzkaller0: entered promiscuous mode
[  877.621718][T26721] syzkaller0: entered allmulticast mode
[  877.733890][T26721] tipc: Resetting bearer <eth:syzkaller0>
[  877.795677][T26718] tipc: Resetting bearer <eth:syzkaller0>
[  877.857401][T26733] netlink: 'syz.2.5182': attribute type 10 has an invalid length.
[  877.866225][T26718] tipc: Disabling bearer <eth:syzkaller0>
[  877.876760][   T29] audit: type=1107 audit(1778019090.056:9): pid=26730 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  877.937499][T26733] dummy0: entered promiscuous mode
[  878.054077][T26733] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  878.090021][T26731] syzkaller1: entered promiscuous mode
[  878.126117][T26731] syzkaller1: entered allmulticast mode
[  878.265697][T26748] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5186'.
[  878.434469][T26757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5186'.
[  878.533012][T26760] netlink: 'syz.2.5186': attribute type 1 has an invalid length.
[  880.365112][T26811] netlink: 140 bytes leftover after parsing attributes in process `syz.5.5212'.
[  880.705328][T26819] netlink: 'syz.5.5214': attribute type 13 has an invalid length.
[  880.756231][T26819] netlink: 'syz.5.5214': attribute type 17 has an invalid length.
[  881.050877][T26828] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5217'.
[  881.229344][T26819] 8021q: adding VLAN 0 to HW filter on device bond0
[  881.246550][T26819] 8021q: adding VLAN 0 to HW filter on device `
[  881.261561][T26832] netlink: 'syz.2.5219': attribute type 10 has an invalid length.
[  881.284350][T26819] 8021q: adding VLAN 0 to HW filter on device batadv0
[  881.469924][T26819] batman_adv: batadv0: Interface activated: batadv_slave_0
[  881.509332][T26819] batman_adv: batadv0: Interface activated: batadv_slave_1
[  881.568145][T26819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  881.617678][T26819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  881.690091][T26819] veth1_vlan: left promiscuous mode
[  881.711254][T26819] veth0_vlan: left promiscuous mode
[  881.722365][T26819] veth0_vlan: entered promiscuous mode
[  881.734623][T26819] veth1_vlan: entered promiscuous mode
[  881.745728][T26819] tipc: Resetting bearer <eth:macvlan1>
[  881.752526][T26819] tipc: Resetting bearer <eth:macvlan1>
[  881.783813][T26819] veth1_macvtap: left promiscuous mode
[  881.796621][T26819] veth0_macvtap: left promiscuous mode
[  881.809361][T26819] veth1_macvtap: entered promiscuous mode
[  881.832585][T26819] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  881.849431][T26819] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  881.863390][T26819] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  881.881199][T26819] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  881.910739][T26819] bond1: left promiscuous mode
[  881.916248][T26819] 8021q: adding VLAN 0 to HW filter on device bond1
[  881.934476][T26819] erspan0: entered promiscuous mode
[  881.961660][T26819] 8021q: adding VLAN 0 to HW filter on device bond2
[  881.989329][T26819] hsr1: left promiscuous mode
[  882.178757][T26832] bond0: (slave dummy0): Releasing backup interface
[  882.244573][T26832] dummy0: left promiscuous mode
[  882.282779][T26832] dummy0: entered promiscuous mode
[  882.330107][T26832] team0: Port device dummy0 added
[  882.344118][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5221'.
[  882.428666][T14598] bridge0: port 1(bridge_slave_0) entered blocking state
[  882.436315][T14598] bridge0: port 1(bridge_slave_0) entered forwarding state
[  882.491620][T14598] bridge0: port 2(bridge_slave_1) entered blocking state
[  882.498923][T14598] bridge0: port 2(bridge_slave_1) entered forwarding state
[  882.646149][T14598] bridge3: port 1(veth5) entered blocking state
[  882.652715][T14598] bridge3: port 1(veth5) entered forwarding state
[  882.693980][T14598] bridge3: port 2(veth7) entered blocking state
[  882.700551][T14598] bridge3: port 2(veth7) entered forwarding state
[  882.771842][T16825] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  882.799119][T26849] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5222'.
[  882.808744][T16825] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  882.907284][T16825] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  882.955484][T16825] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  883.006318][T14616] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  883.214956][T26862] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5225'.
[  883.343618][T26862] nbd: nbd2 already in use
[  883.386703][T26862] block nbd2: NBD_DISCONNECT
[  883.422028][T26862] block nbd2: Send disconnect failed -32
[  883.459041][T26862] block nbd2: shutting down sockets
[  883.604481][T26868] veth0_to_bond: left allmulticast mode
[  883.728216][T19152] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  883.936077][ T9227] syz1: Port: 1 Link ACTIVE
[  883.947813][ T9227] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  884.039447][T14607] wlan1: Trigger new scan to find an IBSS to join
[  884.882596][T26890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5232'.
[  884.903615][T26890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5232'.
[  885.724078][T26904] netlink: 'syz.3.5235': attribute type 1 has an invalid length.
[  885.753218][T26902] 8021q: adding VLAN 0 to HW filter on device bond8
[  885.862494][T26902] gretap1: entered allmulticast mode
[  886.032088][T26906] tipc: Started in network mode
[  886.048496][T26906] tipc: Node identity e6c75eb4976f, cluster identity 4711
[  886.058779][T26906] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  886.199062][T26905] tipc: Disabling bearer <eth:syzkaller0>
[  886.350724][T26908] tls_set_device_offload_rx: netdev not found
[  886.757907][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  886.775256][T26915] sctp: [Deprecated]: syz.3.5240 (pid 26915) Use of int in max_burst socket option.
[  886.775256][T26915] Use struct sctp_assoc_value instead
[  886.913330][T26918] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5241'.
[  887.089125][T14598] wlan1: Trigger new scan to find an IBSS to join
[  887.235611][T26922] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.5243'.
[  887.324554][T26926] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5244'.
[  888.072927][T26946] netlink: 'syz.3.5249': attribute type 1 has an invalid length.
[  888.135742][T26945] netlink: 'syz.3.5249': attribute type 1 has an invalid length.
[  888.484101][T26952] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.752751][T26952] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.912893][T26952] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.979536][T26959] lo speed is unknown, defaulting to 1000
[  889.120123][T26952] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.428320][T16824] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  889.529841][T14607] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  889.612984][T16825] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  889.689584][T14616] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  889.742523][T26955] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.867175][T26955] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.048597][T14607] wlan1: Creating new IBSS network, BSSID 96:90:7f:e5:af:3e
[  890.126181][T26955] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.325013][T26955] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  891.280632][T26962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5252'.
[  891.427859][T26967] netlink: 'syz.0.5252': attribute type 1 has an invalid length.
[  891.458417][T26967] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5252'.
[  891.502746][T26967] netlink: 'syz.0.5252': attribute type 1 has an invalid length.
[  891.550347][T26964] IPv4: Oversized IP packet from 127.202.26.0
[  891.587901][T26967] netlink: 634 bytes leftover after parsing attributes in process `syz.0.5252'.
[  891.599744][T26967] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5252'.
[  891.908877][T16825] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  892.015895][T16825] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  892.036634][T26979] netlink: 'syz.2.5254': attribute type 11 has an invalid length.
[  892.072903][T26979] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5254'.
[  892.125022][T14614] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  892.230856][T14598] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  892.372846][T26988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5257'.
[  892.940217][T26994] veth0_to_bond: Caught tx_queue_len zero misconfig
[  893.211436][T27009] netlink: 'syz.1.5263': attribute type 21 has an invalid length.
[  893.965681][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  898.068438][T27029] netlink: 'syz.2.5267': attribute type 10 has an invalid length.
[  898.160901][T27029] dummy0: left promiscuous mode
[  898.197347][T27029] team0: Port device dummy0 removed
[  898.223883][T27029] dummy0: entered promiscuous mode
[  898.231329][T27029] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  898.249352][T27035] netlink: 'syz.5.5271': attribute type 30 has an invalid length.
[  898.541534][T27040] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22
[  898.583430][T27040] netdevsim netdevsim1: Direct firmware load for . failed with error -22
[  898.623815][T27040] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  898.956784][T27062] netlink: 'syz.3.5279': attribute type 8 has an invalid length.
[  899.175191][T27074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5279'.
[  899.194013][T27072] openvswitch: netlink: Missing valid actions attribute.
[  899.249947][T27072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  901.904797][T27062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  902.241173][T27107] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5287'.
[  902.340150][T27112] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  902.843210][T27138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5296'.
[  903.086507][T27151] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5299'.
[  903.201459][T27114] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  903.363257][T27155] netlink: 'syz.3.5301': attribute type 6 has an invalid length.
[  903.430329][T27155] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5301'.
[  903.738578][T27169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5305'.
[  903.846143][T27172] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  903.852292][T27169] 8021q: adding VLAN 0 to HW filter on device bond5
[  903.865334][T27173] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  903.908835][T27169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5305'.
[  903.941020][T27175] bond5: (slave veth13): Enslaving as an active interface with an up link
[  904.057282][T27169] bond5: (slave bridge10): Enslaving as an active interface with an up link
[  904.228679][T27179] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  904.257092][T27179] syzkaller0: entered promiscuous mode
[  904.269551][T27179] syzkaller0: entered allmulticast mode
[  904.443126][T27194] netlink: 'syz.0.5313': attribute type 21 has an invalid length.
[  904.551605][T27202] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5312'.
[  904.563136][T27187] bond6: entered allmulticast mode
[  904.581896][T27202] nbd: must specify at least one socket
[  904.621385][T27179] tipc: Resetting bearer <eth:syzkaller0>
[  904.663143][T27190] macvlan2: entered promiscuous mode
[  904.674834][T27190] macvlan2: entered allmulticast mode
[  904.699558][T27190] bond6: (slave macvlan2): Opening slave failed
[  904.751319][T27204] sit0: left promiscuous mode
[  904.784434][T27204] veth1: left promiscuous mode
[  904.791981][T27209] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5315'.
[  904.807916][T27209] netlink: 'syz.5.5315': attribute type 7 has an invalid length.
[  904.818370][T27209] netlink: 'syz.5.5315': attribute type 8 has an invalid length.
[  904.834154][T27209] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5315'.
[  904.871981][T27204] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  904.925399][T27204] bridge1: left promiscuous mode
[  904.936269][T27204] 8021q: adding VLAN 0 to HW filter on device bond1
[  904.952541][T27204] bridge0: entered allmulticast mode
[  904.959812][T27204] bridge0: entered promiscuous mode
[  904.965600][T27204] macvtap1: left promiscuous mode
[  904.987057][T27204] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check.
[  905.015553][T27205] pim6reg: entered allmulticast mode
[  905.096317][T27209] syz_tun: entered promiscuous mode
[  905.111610][T27209] syz_tun: left promiscuous mode
[  905.134473][T27178] tipc: Resetting bearer <eth:syzkaller0>
[  905.197781][T27178] tipc: Disabling bearer <eth:syzkaller0>
[  905.236826][T27205] pim6reg: left allmulticast mode
[  905.395354][T27227] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5318'.
[  905.477967][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  905.780156][T27236] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.914190][T27241] syzkaller0: entered promiscuous mode
[  905.920265][T27241] syzkaller0: entered allmulticast mode
[  905.935236][T27236] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.051868][T27244] macsec1: entered promiscuous mode
[  906.080203][T27236] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.197203][T27252] lo speed is unknown, defaulting to 1000
[  906.234004][T27236] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.482715][T27265] ip6tnl3: entered allmulticast mode
[  906.507252][T14602] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  906.534502][ T5818] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  906.543394][T14602] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  906.618845][T14602] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  906.676227][T14598] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  906.786374][T14598] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  906.839575][T19152] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  906.876599][T27280] sctp: [Deprecated]: syz.2.5332 (pid 27280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  906.876599][T27280] Use struct sctp_sack_info instead
[  906.919784][T14598] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  906.939083][T27280] sctp: [Deprecated]: syz.2.5332 (pid 27280) Use of struct sctp_assoc_value in delayed_ack socket option.
[  906.939083][T27280] Use struct sctp_sack_info instead
[  906.991593][T27280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  907.177867][T19152] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  907.250703][T27284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5334'.
[  908.152015][T27314] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:0
[  908.198758][T27315] syzkaller0: entered promiscuous mode
[  908.204567][T27315] syzkaller0: entered allmulticast mode
[  908.474631][T27321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5346'.
[  908.678437][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  908.876927][T27333] netlink: 'syz.3.5350': attribute type 1 has an invalid length.
[  909.020994][T27340] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5353'.
[  909.072756][T27345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5353'.
[  909.113374][T27343] netlink: 'syz.0.5354': attribute type 13 has an invalid length.
[  909.159171][T27343] netlink: 'syz.0.5354': attribute type 17 has an invalid length.
[  909.204176][T27343] netlink: 'syz.0.5354': attribute type 27 has an invalid length.
[  909.463946][T27366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5356'.
[  909.708975][T27342] bridge0: port 4(team0) entered disabled state
[  909.716461][T27342] bridge0: port 2(bridge_slave_1) entered disabled state
[  909.724203][T27342] bridge0: port 1(bridge_slave_0) entered disabled state
[  910.095015][T27342] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  910.447850][    C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!
[  910.581363][T27342] bridge0: left allmulticast mode
[  910.892222][T14602] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  910.922041][T14602] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  910.958931][T14602] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  910.991527][T14602] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  911.124946][T14602] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  911.147909][T14602] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  911.194358][T14614] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  911.215829][T14614] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  911.363721][T27400] syzkaller0: entered promiscuous mode
[  911.386926][T27400] syzkaller0: entered allmulticast mode
[  911.428378][T27396] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5361'.
[  911.448912][T27396] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5361'.
[  911.458422][T27406] xt_hashlimit: max too large, truncated to 1048576
[  911.471999][T27406] xt_hashlimit: overflow, try lower: 2/0
[  911.500020][T27410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5366'.
[  911.536254][T27414] rdma_rxe: rxe_newlink: failed to add lo
[  911.553282][T27395] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5361'.
[  911.590528][T27395] pim6reg1: entered promiscuous mode
[  911.610154][T27395] pim6reg1: entered allmulticast mode
[  911.636949][T27412] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5365'.
[  911.973609][T27427] veth0: entered promiscuous mode
[  911.984870][T27429] netlink: 'syz.3.5372': attribute type 8 has an invalid length.
[  912.000241][T27431] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5373'.
[  912.050906][T27433] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5374'.
[  912.088122][T27427] bond0 (unregistering): Released all slaves
[  912.210737][T27442] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5374'.
[  912.257652][T27445] netlink: 'syz.3.5376': attribute type 1 has an invalid length.
[  912.281442][T27426] veth0: left promiscuous mode
[  912.400610][T27445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5376'.
[  912.416868][T27458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5377'.
[  912.485165][T27449] bond9: (slave geneve5): making interface the new active one
[  912.557066][T27449] bond9: (slave geneve5): Enslaving as an active interface with an up link
[  912.656561][T27468] netlink: 'syz.2.5378': attribute type 8 has an invalid length.
[  912.726162][T27471] tls_set_device_offload: netdev not found
[  912.864349][T27445] 8021q: adding VLAN 0 to HW filter on device bond9
[  912.877260][T16825] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[  912.900144][T16825] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[  913.074564][T16825] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[  913.099450][T16825] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[  913.472521][T27471] x_tables: duplicate underflow at hook 1
[  913.631476][T27494] netlink: ct family unspecified
[  914.182311][T27504] netlink: 'syz.0.5389': attribute type 1 has an invalid length.
[  914.219005][T27504] netlink: 'syz.0.5389': attribute type 2 has an invalid length.
[  915.148176][T27528] bond7: entered promiscuous mode
[  915.186789][T27528] 8021q: adding VLAN 0 to HW filter on device bond7
[  915.205621][T27528] bridge0: port 1(bond7) entered blocking state
[  915.232167][T27528] bridge0: port 1(bond7) entered disabled state
[  915.239558][T27528] bond7: entered allmulticast mode
[  915.255601][T27528] bridge0: port 1(bond7) entered blocking state
[  915.262332][T27528] bridge0: port 1(bond7) entered forwarding state
[  915.316618][T16828] bridge0: port 1(bond7) entered disabled state
[  916.046241][T27565] netlink: 'syz.5.5404': attribute type 6 has an invalid length.
[  916.342426][T27581] netlink: 'syz.1.5409': attribute type 1 has an invalid length.
[  916.379127][T27581] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  916.609297][T27594] netlink: 'syz.0.5414': attribute type 15 has an invalid length.
[  916.658417][T27594] __nla_validate_parse: 7 callbacks suppressed
[  916.658438][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5414'.
[  916.659122][T27596] netlink: 84 bytes leftover after parsing attributes in process `syz.2.5413'.
[  916.800247][T14616] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  916.823498][T14616] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  916.862193][T14616] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  916.891498][T14616] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  916.925504][T27604] xt_CT: You must specify a L4 protocol and not use inversions on it
[  916.944257][T27599] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  917.003296][T27606] pim6reg: left allmulticast mode
[  917.114103][T27599] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  917.345884][T27624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5422'.
[  917.358188][T27622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5421'.
[  917.382011][T27599] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  917.494606][T27630] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  917.513460][T27599] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  917.575195][T27622] syzkaller0: entered promiscuous mode
[  917.581469][T27634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5425'.
[  917.605226][T27622] syzkaller0: entered allmulticast mode
[  917.612156][T27634] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5425'.
[  917.656567][T27638] sctp: [Deprecated]: syz.2.5426 (pid 27638) Use of struct sctp_assoc_value in delayed_ack socket option.
[  917.656567][T27638] Use struct sctp_sack_info instead
[  917.712429][T27639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5425'.
[  917.796940][T27636] tipc: Resetting bearer <eth:syzkaller0>
[  917.822207][T27621] tipc: Resetting bearer <eth:syzkaller0>
[  917.892402][T27621] tipc: Disabling bearer <eth:syzkaller0>
[  918.022965][T14616] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  918.127260][T14616] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  918.190320][T14598] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  918.308792][T14616] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  918.472677][T27663] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5431'.
[  918.544784][T27653] lo speed is unknown, defaulting to 1000
[  918.915037][T27675] ipt_ECN: cannot use operation on non-tcp rule
[  919.378352][T27689] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5439'.
[  919.535117][T27698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5439'.
[  919.688894][T27701] batadv_slave_1: entered promiscuous mode
[  920.195919][T27688] batadv_slave_1: left promiscuous mode
[  920.369178][T27716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  920.523911][   T29] audit: type=1800 audit(1778019132.706:10): pid=27725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5449" name="memory.events" dev="tmpfs" ino=2182 res=0 errno=0
[  920.713007][T27727] bond6 (unregistering): Released all slaves
[  921.265169][T27740] vlan4: entered promiscuous mode
[  921.297250][T27740] bridge0: entered promiscuous mode
[  922.120744][T14616] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  922.454953][T27794] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  922.912080][T27814] __nla_validate_parse: 1 callbacks suppressed
[  922.912101][T27814] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5476'.
[  923.257087][T27826] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  923.276693][T27827] xt_bpf: check failed: parse error
[  923.495206][T27833] batadv_slave_1: entered promiscuous mode
[  923.522375][T27835] batadv_slave_1: left promiscuous mode
[  923.701491][T27843] netlink: 'syz.3.5483': attribute type 2 has an invalid length.
[  923.716002][T27844] netlink: 'syz.3.5483': attribute type 2 has an invalid length.
[  924.205647][T27860] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5489'.
[  924.230798][T27865] netlink: 'syz.0.5491': attribute type 1 has an invalid length.
[  924.238623][T27860] netlink: Conntrack attr has 4 unknown bytes
[  924.280259][T27865] 8021q: adding VLAN 0 to HW filter on device bond0
[  924.342762][T27867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5491'.
[  924.362551][T27865] bond0: (slave veth11): Enslaving as an active interface with a down link
[  924.396216][T27869] netlink: 'syz.0.5491': attribute type 1 has an invalid length.
[  924.452330][T27867] 8021q: adding VLAN 0 to HW filter on device batadv1
[  924.497158][T27867] bond0: (slave batadv1): making interface the new active one
[  924.523864][T27867] batadv1: entered promiscuous mode
[  924.531190][T27867] bond0: (slave batadv1): Enslaving as an active interface with an up link
[  924.796458][T27883] lo speed is unknown, defaulting to 1000
[  924.971988][T27889] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  925.212923][T27894] žÿ: renamed from team_slave_1 (while UP)
[  925.412597][T27896] bond10: entered promiscuous mode
[  925.425654][T27896] 8021q: adding VLAN 0 to HW filter on device bond10
[  925.485385][T27900] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5499'.
[  925.532548][T27905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5501'.
[  925.552063][T27900] vlan0: entered promiscuous mode
[  925.562185][T27900] veth0: entered promiscuous mode
[  925.619917][T27907] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5501'.
[  925.845638][T27885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5495'.
[  925.929776][T27914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5504'.
[  925.931664][T27382] hsr0: entered promiscuous mode
[  925.951429][T27911] syzkaller1: entered promiscuous mode
[  925.958093][T27911] syzkaller1: entered allmulticast mode
[  926.004516][T27911] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5503'.
[  926.034105][T27911] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  926.463117][T27924] syzkaller1: entered promiscuous mode
[  926.490763][T27924] syzkaller1: entered allmulticast mode
[  926.532901][T27929] netlink: 'syz.3.5508': attribute type 1 has an invalid length.
[  926.560693][T27926] bridge0: port 2(bridge_slave_1) entered disabled state
[  926.568325][T27926] bridge0: port 1(bridge_slave_0) entered disabled state
[  926.643084][T27933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5510'.
[  926.773360][T27937] netlink: 'syz.0.5510': attribute type 3 has an invalid length.
[  926.882497][T27942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  926.900111][T27932] bond11 (unregistering): Released all slaves
[  926.999294][T27936] lo speed is unknown, defaulting to 1000
[  928.255545][T27981] __nla_validate_parse: 2 callbacks suppressed
[  928.255566][T27981] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5521'.
[  928.815956][T28004] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5527'.
[  929.015769][T28008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5529'.
[  929.166524][T28018] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5531'.
[  929.295190][T28024] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5532'.
[  929.361663][T28024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5532'.
[  929.650438][T28043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5538'.
[  929.650567][T28039] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma?
[  930.617756][T28083] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5547'.
[  933.798410][ T4944] Bluetooth: hci4: command 0x0405 tx timeout
[  933.876215][T28098] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  934.424920][T28157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5566'.
[  934.437726][T28158] openvswitch: netlink: ERSPAN option length err (len 256, max 255).
[  934.468915][T28158] xt_l2tp: v2 sid > 0xffff: 8388608
[  934.482630][T28161] xt_connbytes: Forcing CT accounting to be enabled
[  934.491037][T28160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5564'.
[  934.512042][T28158] netlink: 'syz.5.5567': attribute type 2 has an invalid length.
[  934.546475][T28158] netlink: 'syz.5.5567': attribute type 1 has an invalid length.
[  934.563676][T28166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5568'.
[  934.589185][T28158] netlink: 'syz.5.5567': attribute type 2 has an invalid length.
[  934.610494][T28166] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5568'.
[  934.643991][T28158] netlink: 'syz.5.5567': attribute type 1 has an invalid length.
[  934.659955][T28158] netlink: 'syz.5.5567': attribute type 2 has an invalid length.
[  934.934549][T28179] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  935.218711][T28199] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5576'.
[  935.393100][T28206] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5579'.
[  935.452190][T28214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5579'.
[  936.023168][T28242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5585'.
[  936.209673][T28227] bridge0: port 2(bridge_slave_1) entered disabled state
[  936.462810][T28227] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  937.478025][    C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  937.736192][T27381] lo speed is unknown, defaulting to 1000
[  937.750757][T27381] sqz0: Port: 1 Link DOWN
[  937.819583][T28249] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  937.861797][T27362] syz1: Port: 1 Link DOWN
[  937.866328][T16824] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  937.885467][T16824] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  937.914632][T16824] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  937.962445][T16824] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.015959][T27382] lo speed is unknown, defaulting to 1000
[  938.015953][T16824] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  938.015990][T16824] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.077305][T16824] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  938.096190][T16824] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  938.169667][T28266] netlink: 'syz.3.5590': attribute type 6 has an invalid length.
[  938.208895][T14618] batadv1: left promiscuous mode
[  938.524142][T28275] lo speed is unknown, defaulting to 1000
[  938.564965][T28284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  938.584701][T28284] syzkaller0: entered promiscuous mode
[  938.612562][T28284] syzkaller0: entered allmulticast mode
[  938.657235][T28287] tipc: Resetting bearer <eth:syzkaller0>
[  938.685542][T28284] tipc: Resetting bearer <eth:syzkaller0>
[  938.751566][T28284] tipc: Disabling bearer <eth:syzkaller0>
[  939.195681][T28297] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5599'.
[  939.303574][T28299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5598'.
[  939.592799][T28311] sctp: [Deprecated]: syz.5.5600 (pid 28311) Use of int in maxseg socket option.
[  939.592799][T28311] Use struct sctp_assoc_value instead
[  939.660644][T28292] sctp: [Deprecated]: syz.1.5596 (pid 28292) Use of int in max_burst socket option.
[  939.660644][T28292] Use struct sctp_assoc_value instead
[  940.040675][T28318] netlink: 'syz.1.5603': attribute type 11 has an invalid length.
[  940.440775][T28332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  940.641221][T28336] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5606'.
[  940.683741][T28336] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5606'.
[  941.270839][T28353] netlink: 'syz.5.5610': attribute type 1 has an invalid length.
[  941.394369][T28353] 8021q: adding VLAN 0 to HW filter on device bond4
[  941.755691][T28372] netlink: 164956 bytes leftover after parsing attributes in process `syz.2.5613'.
[  941.774998][T28379] x_tables: duplicate underflow at hook 2
[  941.814127][T28379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5615'.
[  941.847448][T28379] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5615'.
[  942.125536][T28391] SET target dimension over the limit!
[  942.314915][T28397] syzkaller0: entered promiscuous mode
[  942.327846][T28397] syzkaller0: entered allmulticast mode
[  942.865969][T28414] netlink: 'syz.3.5624': attribute type 29 has an invalid length.
[  942.941444][T28421] netlink: 'syz.5.5625': attribute type 16 has an invalid length.
[  943.012780][T28421] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5625'.
[  943.159944][T28427] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5627'.
[  943.184751][T28420] bridge0: port 1(bridge_slave_0) entered disabled state
[  943.246863][T28420] bridge0: port 2(bridge_slave_1) entered disabled state
[  943.291338][T28420] tipc: Resetting bearer <eth:macvlan1>
[  943.298023][T28420] tipc: Resetting bearer <eth:macvlan1>
[  943.370983][T28420] bridge3: port 1(veth5) entered disabled state
[  943.380703][T28420] bridge3: port 2(veth7) entered disabled state
[  943.399942][T14618] tipc: Resetting bearer <eth:macvlan1>
[  943.435115][T28427] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5627'.
[  943.483333][T28391] lo speed is unknown, defaulting to 1000
[  943.643571][T28435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5629'.
[  943.820687][T28443] netlink: 268 bytes leftover after parsing attributes in process `syz.3.5629'.
[  943.860356][T28447] bridge_slave_0 (unregistering): left allmulticast mode
[  943.922759][T28447] bridge_slave_0 (unregistering): left promiscuous mode
[  943.952146][T28447] bridge0: port 1(bridge_slave_0) entered disabled state
[  944.136900][T28438] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  944.336722][T28438] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  944.500836][T28438] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  944.519577][T28457] netlink: Conntrack attr has 4 unknown bytes
[  944.640714][T28438] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0
[  944.901527][T16828] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 2816 - 0
[  945.019226][T14614] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 2816 - 0
[  945.248860][T28475] bond4: (slave lo): Releasing backup interface
[  945.266156][T28475] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  945.304944][T28475] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  945.362004][T28476] vxcan3: entered promiscuous mode
[  945.468015][T14598] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 2816 - 0
[  945.490097][T14598] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 2816 - 0
[  945.636518][T14598] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 2816 - 0
[  945.642139][T28486] netlink: 'syz.0.5641': attribute type 13 has an invalid length.
[  945.653437][T14598] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 2816 - 0
[  945.653569][T14598] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 2816 - 0
[  945.672021][T28486] netlink: 'syz.0.5641': attribute type 17 has an invalid length.
[  945.686611][T14598] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 2816 - 0
[  945.779612][T28486] bridge0: left promiscuous mode
[  945.806045][T28486] 8021q: adding VLAN 0 to HW filter on device team0
[  945.829842][T28486] 8021q: adding VLAN 0 to HW filter on device batadv0
[  945.851519][T28486] veth1: left allmulticast mode
[  945.898476][T28486] batman_adv: batadv0: Interface activated: batadv_slave_1
[  945.907327][T28494] can: request_module (can-proto-0) failed.
[  945.921273][T28486] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  945.944346][T28486] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  945.965408][T28486] 0·: left allmulticast mode
[  945.970315][T28486] hsr_slave_0: left allmulticast mode
[  945.974489][T28494] __nla_validate_parse: 3 callbacks suppressed
[  945.974506][T28494] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5643'.
[  945.975836][T28486] hsr_slave_1: left allmulticast mode
[  946.000680][T28486] .70·X: left allmulticast mode
[  946.011336][T28486] virt_wifi0: left promiscuous mode
[  946.024517][T28486] veth1_vlan: left promiscuous mode
[  946.058271][T28486] veth0_vlan: left promiscuous mode
[  946.066679][T28486] veth0_vlan: entered promiscuous mode
[  946.079522][T28486] veth1_vlan: entered promiscuous mode
[  946.146426][T28486] 8021q: adding VLAN 0 to HW filter on device bond1
[  946.160630][T28486] 8021q: adding VLAN 0 to HW filter on device bond2
[  946.172230][T28486] bridge0: entered allmulticast mode
[  946.178860][T28486] bridge0: entered promiscuous mode
[  946.182380][T28501] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5645'.
[  946.184272][T28486] macvtap1: left allmulticast mode
[  946.202598][T28486] bridge0: left allmulticast mode
[  946.225498][T28486] ip6gre1: left promiscuous mode
[  946.231165][T28486] ip6gre1: left allmulticast mode
[  946.244885][T28486] virt_wifi0: entered promiscuous mode
[  946.250801][T28486] virt_wifi0: entered allmulticast mode
[  946.256710][T28486] macsec1: left promiscuous mode
[  946.262393][T28486] macsec1: left allmulticast mode
[  946.267451][T28486] virt_wifi0: left allmulticast mode
[  946.275114][T28486] 8021q: adding VLAN 0 to HW filter on device bond3
[  946.294965][T28486] veth5: left allmulticast mode
[  946.310237][T28486] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check.
[  946.331668][T14616] bridge0: port 2(bridge_slave_1) entered blocking state
[  946.339097][T14616] bridge0: port 2(bridge_slave_1) entered forwarding state
[  946.402072][T14598] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  946.414362][T14598] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  946.447951][T14598] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  946.464090][T14598] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  946.490038][T14598] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  946.503744][T14598] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  946.554340][T14616] bridge0: port 4(team0) entered blocking state
[  946.560908][T14616] bridge0: port 4(team0) entered forwarding state
[  946.614274][T14598] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  946.642512][T14598] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  946.690068][T28513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5646'.
[  946.712301][T28513] netlink: 'syz.0.5646': attribute type 1 has an invalid length.
[  947.090718][T14616] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  947.380149][T28535] lo speed is unknown, defaulting to 1000
[  948.082799][T28563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5657'.
[  948.163847][T28563] netlink: 'syz.2.5657': attribute type 1 has an invalid length.
[  948.225362][T28563] netlink: 492 bytes leftover after parsing attributes in process `syz.2.5657'.
[  948.248618][T28563] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5657'.
[  948.301799][T28546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5654'.
[  948.317019][T28546] 8021q: VLANs not supported on ip6_vti0
[  948.384651][T28550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5654'.
[  948.718532][T28578] netlink: 'syz.3.5660': attribute type 8 has an invalid length.
[  949.019884][T28585] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  949.047621][T28587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5663'.
[  949.194842][T28592] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  949.312445][T28601] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5665'.
[  949.591056][T28609] netlink: 'syz.5.5670': attribute type 1 has an invalid length.
[  949.608967][T28608] sctp: [Deprecated]: syz.3.5669 (pid 28608) Use of int in maxseg socket option.
[  949.608967][T28608] Use struct sctp_assoc_value instead
[  950.222021][T28633] 1·: renamed from 
c0· (while UP)
[  950.268741][T28633] 1·: entered allmulticast mode
[  950.301669][T28633] hsr_slave_0: entered allmulticast mode
[  950.327082][T28633] hsr_slave_1: entered allmulticast mode
[  950.348071][T28633] A link change request failed with some changes committed already. Interface 
c1· may have been left with an inconsistent configuration, please check.
[  950.999949][T28656] __nla_validate_parse: 8 callbacks suppressed
[  950.999974][T28656] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5680'.
[  951.080347][T28656] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5680'.
[  951.256334][T28658] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5681'.
[  951.296429][T28659] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5681'.
[  951.324314][T28662] pimreg0: tun_chr_ioctl cmd 1074025673
[  951.332320][T28659] netlink: 116 bytes leftover after parsing attributes in process `syz.5.5681'.
[  951.342231][T28661] pimreg0: tun_chr_ioctl cmd 1074025681
[  951.363378][T28659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5681'.
[  951.398071][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  951.485794][T28668] syzkaller0: entered promiscuous mode
[  951.524332][T28668] syzkaller0: entered allmulticast mode
[  952.558766][T28686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5687'.
[  952.593011][T28686] netem: change failed
[  952.628338][T28693] bridge0: port 4(team0) entered disabled state
[  952.639152][T28693] team0 (unregistering): left allmulticast mode
[  952.647680][T28693] team_slave_0: left allmulticast mode
[  952.653363][T28693] team_slave_1: left allmulticast mode
[  952.665517][T28693] bridge2: left allmulticast mode
[  952.674923][T28693] team0 (unregistering): left promiscuous mode
[  952.691428][T28693] team_slave_0: left promiscuous mode
[  952.700139][T28693] team_slave_1: left promiscuous mode
[  952.706052][T28693] bridge2: left promiscuous mode
[  952.713908][T28693] bridge0: port 4(team0) entered disabled state
[  952.730214][T28693] team0 (unregistering): Port device team_slave_0 removed
[  952.759818][T28693] team0 (unregistering): Port device team_slave_1 removed
[  952.777209][T28693] team0 (unregistering): Port device bridge2 removed
[  952.825762][T28678] syzkaller0: entered promiscuous mode
[  952.831862][T28678] syzkaller0: entered allmulticast mode
[  953.246988][T28717] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  953.480300][T14598] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  954.466554][T28723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5693'.
[  958.494961][T28732] macsec0: entered promiscuous mode
[  958.531807][T28732] macsec0: entered allmulticast mode
[  958.566415][T28732] veth1_macvtap: entered allmulticast mode
[  958.579049][T28734] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5698'.
[  958.590125][T28734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5698'.
[  959.351372][T28781] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5707'.
[  959.364829][T28782] netlink: 'syz.2.5708': attribute type 1 has an invalid length.
[  959.374500][T28778] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5705'.
[  959.391593][T28783] netlink: 'syz.2.5708': attribute type 1 has an invalid length.
[  959.600471][T28782] 8021q: adding VLAN 0 to HW filter on device bond9
[  959.700148][T28785] bond9: (slave geneve2): making interface the new active one
[  959.722770][T28785] bond9: (slave geneve2): Enslaving as an active interface with an up link
[  959.746812][T14607] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  959.776798][T14607] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  959.808424][T14607] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  959.877724][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  959.887039][T28777] lo speed is unknown, defaulting to 1000
[  959.991870][T14607] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  960.082002][T28797] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5712'.
[  961.775457][T28828] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5718'.
[  962.001910][T28830] netlink: 'syz.3.5719': attribute type 1 has an invalid length.
[  967.060073][T28830] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[  968.013114][T28857] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5727'.
[  968.329125][T28857] bridge0: port 2(bridge_slave_1) entered blocking state
[  968.336453][T28857] bridge0: port 2(bridge_slave_1) entered listening state
[  968.344020][T28857] bridge0: port 1(bridge_slave_0) entered blocking state
[  968.351366][T28857] bridge0: port 1(bridge_slave_0) entered listening state
[  968.870497][T28881] netlink: 'syz.5.5731': attribute type 1 has an invalid length.
[  969.341544][T28893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  969.445727][T28885] 
[  969.448134][T28885] ======================================================
[  969.455183][T28885] WARNING: possible circular locking dependency detected
[  969.462230][T28885] syzkaller #0 Not tainted
[  969.466699][T28885] ------------------------------------------------------
[  969.473724][T28885] syz.2.5732/28885 is trying to acquire lock:
[  969.479861][T28885] ffff88802771bd68 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450
[  969.489327][T28885] 
[  969.489327][T28885] but task is already holding lock:
[  969.496720][T28885] ffff88802771b840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x198/0x450
[  969.506967][T28885] 
[  969.506967][T28885] which lock already depends on the new lock.
[  969.506967][T28885] 
[  969.517426][T28885] 
[  969.517426][T28885] the existing dependency chain (in reverse order) is:
[  969.526560][T28885] 
[  969.526560][T28885] -> #6 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  969.535219][T28885]        blk_alloc_queue+0x546/0x680
[  969.540623][T28885]        __blk_mq_alloc_disk+0x197/0x390
[  969.546284][T28885]        nbd_dev_add+0x499/0xb50
[  969.551365][T28885]        nbd_init+0x168/0x1f0
[  969.556054][T28885]        do_one_initcall+0x250/0x870
[  969.561457][T28885]        do_initcall_level+0x104/0x190
[  969.567319][T28885]        do_initcalls+0x59/0xa0
[  969.572221][T28885]        kernel_init_freeable+0x2a6/0x3e0
[  969.578038][T28885]        kernel_init+0x1d/0x1d0
[  969.582990][T28885]        ret_from_fork+0x514/0xb70
[  969.588426][T28885]        ret_from_fork_asm+0x1a/0x30
[  969.593729][T28885] 
[  969.593729][T28885] -> #5 (fs_reclaim){+.+.}-{0:0}:
[  969.601298][T28885]        fs_reclaim_acquire+0x71/0x100
[  969.606775][T28885]        kmem_cache_alloc_node_noprof+0x4a/0x690
[  969.613125][T28885]        __alloc_skb+0x1d0/0x7d0
[  969.618106][T28885]        __ip6_append_data+0x2c7c/0x3e90
[  969.623763][T28885]        ip6_append_data+0x10f/0x280
[  969.629073][T28885]        rawv6_sendmsg+0x12d3/0x18e0
[  969.634564][T28885]        ____sys_sendmsg+0x80a/0x9f0
[  969.639880][T28885]        ___sys_sendmsg+0x2a5/0x360
[  969.645096][T28885]        __x64_sys_sendmsg+0x1bd/0x2a0
[  969.650566][T28885]        do_syscall_64+0x15f/0xf80
[  969.655690][T28885]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  969.662225][T28885] 
[  969.662225][T28885] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}:
[  969.670062][T28885]        lock_sock_nested+0x41/0x100
[  969.675527][T28885]        inet_shutdown+0x6a/0x390
[  969.680564][T28885]        nbd_mark_nsock_dead+0x2e9/0x560
[  969.686213][T28885]        recv_work+0x1c2e/0x1d40
[  969.691246][T28885]        process_scheduled_works+0xb5d/0x1860
[  969.697361][T28885]        worker_thread+0xa53/0xfc0
[  969.702488][T28885]        kthread+0x388/0x470
[  969.707090][T28885]        ret_from_fork+0x514/0xb70
[  969.712295][T28885]        ret_from_fork_asm+0x1a/0x30
[  969.717685][T28885] 
[  969.717685][T28885] -> #3 (&nsock->tx_lock){+.+.}-{4:4}:
[  969.725340][T28885]        __mutex_lock+0x1a3/0x1550
[  969.730466][T28885]        nbd_queue_rq+0x37b/0x1100
[  969.735581][T28885]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  969.741667][T28885]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  969.748623][T28885]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  969.755165][T28885]        blk_mq_run_hw_queue+0x348/0x4f0
[  969.760807][T28885]        blk_mq_dispatch_list+0xd16/0xe10
[  969.766627][T28885]        blk_mq_flush_plug_list+0x48d/0x570
[  969.772630][T28885]        __blk_flush_plug+0x3ed/0x4d0
[  969.778045][T28885]        __submit_bio+0x28d/0x580
[  969.783101][T28885]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  969.789271][T28885]        block_read_full_folio+0x599/0x830
[  969.795182][T28885]        filemap_read_folio+0x137/0x3b0
[  969.800836][T28885]        do_read_cache_folio+0x358/0x590
[  969.806535][T28885]        read_part_sector+0xb6/0x2b0
[  969.811918][T28885]        adfspart_check_ICS+0xb1/0x960
[  969.817408][T28885]        bdev_disk_changed+0x817/0x1770
[  969.822967][T28885]        blkdev_get_whole+0x380/0x510
[  969.828355][T28885]        bdev_open+0x31e/0xd30
[  969.833165][T28885]        blkdev_open+0x470/0x610
[  969.838282][T28885]        do_dentry_open+0x785/0x14e0
[  969.843628][T28885]        vfs_open+0x3b/0x340
[  969.848327][T28885]        path_openat+0x2e08/0x3860
[  969.853482][T28885]        do_file_open+0x23e/0x4a0
[  969.858548][T28885]        do_sys_openat2+0x113/0x200
[  969.863779][T28885]        __x64_sys_openat+0x138/0x170
[  969.869362][T28885]        do_syscall_64+0x15f/0xf80
[  969.874527][T28885]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  969.881161][T28885] 
[  969.881161][T28885] -> #2 (&cmd->lock){+.+.}-{4:4}:
[  969.888871][T28885]        __mutex_lock+0x1a3/0x1550
[  969.894368][T28885]        nbd_queue_rq+0xc6/0x1100
[  969.899459][T28885]        blk_mq_dispatch_rq_list+0xa70/0x1910
[  969.905743][T28885]        __blk_mq_sched_dispatch_requests+0xdcc/0x1600
[  969.912792][T28885]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  969.919494][T28885]        blk_mq_run_hw_queue+0x348/0x4f0
[  969.925246][T28885]        blk_mq_dispatch_list+0xd16/0xe10
[  969.931002][T28885]        blk_mq_flush_plug_list+0x48d/0x570
[  969.937033][T28885]        __blk_flush_plug+0x3ed/0x4d0
[  969.942446][T28885]        __submit_bio+0x28d/0x580
[  969.947507][T28885]        submit_bio_noacct_nocheck+0x2f4/0xa40
[  969.953684][T28885]        block_read_full_folio+0x599/0x830
[  969.959507][T28885]        filemap_read_folio+0x137/0x3b0
[  969.965125][T28885]        do_read_cache_folio+0x358/0x590
[  969.970795][T28885]        read_part_sector+0xb6/0x2b0
[  969.976100][T28885]        adfspart_check_ICS+0xb1/0x960
[  969.981688][T28885]        bdev_disk_changed+0x817/0x1770
[  969.987262][T28885]        blkdev_get_whole+0x380/0x510
[  969.992664][T28885]        bdev_open+0x31e/0xd30
[  969.997442][T28885]        blkdev_open+0x470/0x610
[  970.002469][T28885]        do_dentry_open+0x785/0x14e0
[  970.007848][T28885]        vfs_open+0x3b/0x340
[  970.012455][T28885]        path_openat+0x2e08/0x3860
[  970.017603][T28885]        do_file_open+0x23e/0x4a0
[  970.022770][T28885]        do_sys_openat2+0x113/0x200
[  970.027985][T28885]        __x64_sys_openat+0x138/0x170
[  970.033365][T28885]        do_syscall_64+0x15f/0xf80
[  970.038486][T28885]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.044912][T28885] 
[  970.044912][T28885] -> #1 (set->srcu){.+.+}-{0:0}:
[  970.052050][T28885]        __synchronize_srcu+0xca/0x300
[  970.057520][T28885]        elevator_switch+0x1e8/0x7a0
[  970.062904][T28885]        elevator_change+0x2cc/0x450
[  970.068207][T28885]        elevator_set_default+0x36c/0x430
[  970.073944][T28885]        blk_register_queue+0x3e9/0x4e0
[  970.079505][T28885]        __add_disk+0x677/0xd50
[  970.084371][T28885]        add_disk_fwnode+0xfb/0x480
[  970.089661][T28885]        nbd_dev_add+0x72c/0xb50
[  970.094605][T28885]        nbd_init+0x168/0x1f0
[  970.099474][T28885]        do_one_initcall+0x250/0x870
[  970.104767][T28885]        do_initcall_level+0x104/0x190
[  970.110328][T28885]        do_initcalls+0x59/0xa0
[  970.115194][T28885]        kernel_init_freeable+0x2a6/0x3e0
[  970.121014][T28885]        kernel_init+0x1d/0x1d0
[  970.126071][T28885]        ret_from_fork+0x514/0xb70
[  970.131196][T28885]        ret_from_fork_asm+0x1a/0x30
[  970.136497][T28885] 
[  970.136497][T28885] -> #0 (&q->elevator_lock){+.+.}-{4:4}:
[  970.144343][T28885]        __lock_acquire+0x15a5/0x2cf0
[  970.149754][T28885]        lock_acquire+0x106/0x350
[  970.154851][T28885]        __mutex_lock+0x1a3/0x1550
[  970.160016][T28885]        elevator_change+0x1b3/0x450
[  970.165596][T28885]        elevator_set_none+0xb5/0x140
[  970.171002][T28885]        blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  970.177345][T28885]        nbd_start_device+0x17f/0xb10
[  970.182819][T28885]        nbd_genl_connect+0x165b/0x1cf0
[  970.188380][T28885]        genl_family_rcv_msg_doit+0x22a/0x330
[  970.194463][T28885]        genl_rcv_msg+0x61c/0x7a0
[  970.199697][T28885]        netlink_rcv_skb+0x232/0x4b0
[  970.205000][T28885]        genl_rcv+0x28/0x40
[  970.209606][T28885]        netlink_unicast+0x75c/0x8e0
[  970.214899][T28885]        netlink_sendmsg+0x813/0xb40
[  970.220211][T28885]        ____sys_sendmsg+0x972/0x9f0
[  970.225621][T28885]        ___sys_sendmsg+0x2a5/0x360
[  970.230833][T28885]        __x64_sys_sendmsg+0x1bd/0x2a0
[  970.236351][T28885]        do_syscall_64+0x15f/0xf80
[  970.241563][T28885]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.248261][T28885] 
[  970.248261][T28885] other info that might help us debug this:
[  970.248261][T28885] 
[  970.258665][T28885] Chain exists of:
[  970.258665][T28885]   &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#50
[  970.258665][T28885] 
[  970.272629][T28885]  Possible unsafe locking scenario:
[  970.272629][T28885] 
[  970.280209][T28885]        CPU0                    CPU1
[  970.285671][T28885]        ----                    ----
[  970.291123][T28885]   lock(&q->q_usage_counter(io)#50);
[  970.296509][T28885]                                lock(fs_reclaim);
[  970.303023][T28885]                                lock(&q->q_usage_counter(io)#50);
[  970.310935][T28885]   lock(&q->elevator_lock);
[  970.315537][T28885] 
[  970.315537][T28885]  *** DEADLOCK ***
[  970.315537][T28885] 
[  970.323953][T28885] 6 locks held by syz.2.5732/28885:
[  970.329255][T28885]  #0: ffffffff8fe3e428 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  970.337461][T28885]  #1: ffffffff8fe3e260 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0
[  970.346572][T28885]  #2: ffff8880276b61c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60
[  970.358013][T28885]  #3: ffff8880276b60d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60
[  970.369086][T28885]  #4: ffff88802771b840 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: elevator_change+0x198/0x450
[  970.379901][T28885]  #5: ffff88802771b878 (&q->q_usage_counter(queue)#34){+.+.}-{0:0}, at: elevator_change+0x198/0x450
[  970.390902][T28885] 
[  970.390902][T28885] stack backtrace:
[  970.396814][T28885] CPU: 1 UID: 0 PID: 28885 Comm: syz.2.5732 Not tainted syzkaller #0 PREEMPT(full) 
[  970.396834][T28885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  970.396844][T28885] Call Trace:
[  970.396851][T28885]  <TASK>
[  970.396859][T28885]  dump_stack_lvl+0xe8/0x150
[  970.396878][T28885]  print_circular_bug+0x2e1/0x300
[  970.396900][T28885]  check_noncircular+0x12e/0x150
[  970.396923][T28885]  __lock_acquire+0x15a5/0x2cf0
[  970.396949][T28885]  ? elevator_change+0x1b3/0x450
[  970.396976][T28885]  lock_acquire+0x106/0x350
[  970.396992][T28885]  ? elevator_change+0x1b3/0x450
[  970.397017][T28885]  __mutex_lock+0x1a3/0x1550
[  970.397037][T28885]  ? elevator_change+0x1b3/0x450
[  970.397059][T28885]  ? rcu_is_watching+0x15/0xb0
[  970.397080][T28885]  ? work_grab_pending+0x3d1/0x990
[  970.397098][T28885]  ? elevator_change+0x1b3/0x450
[  970.397119][T28885]  ? __pfx___mutex_lock+0x10/0x10
[  970.397137][T28885]  ? enable_work+0x17f/0x230
[  970.397155][T28885]  ? lockdep_hardirqs_on+0x7a/0x110
[  970.397176][T28885]  ? __cancel_work_sync+0xf7/0x110
[  970.397194][T28885]  ? blk_mq_cancel_work_sync+0xa5/0xe0
[  970.397220][T28885]  elevator_change+0x1b3/0x450
[  970.397244][T28885]  elevator_set_none+0xb5/0x140
[  970.397265][T28885]  ? __pfx_elevator_set_none+0x10/0x10
[  970.397289][T28885]  ? xa_load+0x1db/0x210
[  970.397310][T28885]  blk_mq_update_nr_hw_queues+0x5e7/0x1a60
[  970.397331][T28885]  ? kernfs_add_one+0x477/0x5c0
[  970.397353][T28885]  ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10
[  970.397372][T28885]  ? sysfs_add_file_mode_ns+0x259/0x300
[  970.397392][T28885]  nbd_start_device+0x17f/0xb10
[  970.397410][T28885]  ? device_create_file+0xf4/0x1b0
[  970.397428][T28885]  nbd_genl_connect+0x165b/0x1cf0
[  970.397443][T28885]  ? __pfx___nla_validate_parse+0x10/0x10
[  970.397469][T28885]  ? __pfx_nbd_genl_connect+0x10/0x10
[  970.397490][T28885]  ? rcu_is_watching+0x15/0xb0
[  970.397514][T28885]  ? trace_kmalloc+0x2a/0xf0
[  970.397542][T28885]  ? __nla_parse+0x40/0x60
[  970.397566][T28885]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[  970.397591][T28885]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[  970.397619][T28885]  genl_family_rcv_msg_doit+0x22a/0x330
[  970.397645][T28885]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  970.397673][T28885]  ? __lock_acquire+0x6b5/0x2cf0
[  970.397693][T28885]  genl_rcv_msg+0x61c/0x7a0
[  970.397718][T28885]  ? __pfx_genl_rcv_msg+0x10/0x10
[  970.397741][T28885]  ? __pfx_nbd_genl_connect+0x10/0x10
[  970.397760][T28885]  netlink_rcv_skb+0x232/0x4b0
[  970.397779][T28885]  ? __pfx_genl_rcv_msg+0x10/0x10
[  970.397802][T28885]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  970.397826][T28885]  ? down_read+0x270/0x2e0
[  970.397845][T28885]  ? genl_rcv+0xd/0x40
[  970.397867][T28885]  genl_rcv+0x28/0x40
[  970.397888][T28885]  netlink_unicast+0x75c/0x8e0
[  970.397909][T28885]  netlink_sendmsg+0x813/0xb40
[  970.397932][T28885]  ? __pfx_netlink_sendmsg+0x10/0x10
[  970.397953][T28885]  ? aa_sock_msg_perm+0xf1/0x1b0
[  970.397980][T28885]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  970.398002][T28885]  ____sys_sendmsg+0x972/0x9f0
[  970.398023][T28885]  ? __might_fault+0xaf/0x130
[  970.398045][T28885]  ? __pfx_____sys_sendmsg+0x10/0x10
[  970.398068][T28885]  ? import_iovec+0x73/0xa0
[  970.398091][T28885]  ___sys_sendmsg+0x2a5/0x360
[  970.398110][T28885]  ? __lock_acquire+0x6b5/0x2cf0
[  970.398127][T28885]  ? __pfx____sys_sendmsg+0x10/0x10
[  970.398149][T28885]  ? futex_wait+0x2a2/0x390
[  970.398180][T28885]  ? __fget_files+0x2a/0x420
[  970.398198][T28885]  ? __fget_files+0x3a0/0x420
[  970.398219][T28885]  __x64_sys_sendmsg+0x1bd/0x2a0
[  970.398241][T28885]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  970.398264][T28885]  ? rcu_is_watching+0x15/0xb0
[  970.398285][T28885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.398302][T28885]  do_syscall_64+0x15f/0xf80
[  970.398320][T28885]  ? trace_irq_disable+0x3b/0x140
[  970.398343][T28885]  ? clear_bhb_loop+0x40/0x90
[  970.398360][T28885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  970.398376][T28885] RIP: 0033:0x7fc883d9cdd9
[  970.398392][T28885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  970.398406][T28885] RSP: 002b:00007fc884ba1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  970.398423][T28885] RAX: ffffffffffffffda RBX: 00007fc884015fa0 RCX: 00007fc883d9cdd9
[  970.398435][T28885] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000b
[  970.398446][T28885] RBP: 00007fc883e32d69 R08: 0000000000000000 R09: 0000000000000000
[  970.398456][T28885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  970.398466][T28885] R13: 00007fc884016038 R14: 00007fc884015fa0 R15: 00007ffd51b9d1e8
[  970.398483][T28885]  </TASK>
[  970.871525][T28895] veth3: entered promiscuous mode
[  970.919826][T28895] veth3: entered allmulticast mode
[  971.003225][ T5629] block nbd1: Receive control failed (result -32)
[  971.008035][ T4944] block nbd1: Receive control failed (result -32)
[  971.016701][T28838] block nbd1: NBD_DISCONNECT
[  971.021827][T28838] block nbd1: Send disconnect failed -32
[  971.027703][T28838] block nbd1: Send disconnect failed -32
[  971.033490][T28838] block nbd1: shutting down sockets
[  971.107397][T28838] udevd[28838]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory
[  971.144995][T28904] udevd[28904]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory
[  977.157892][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!