last executing test programs:

21m57.075244876s ago: executing program 4 (id=1492):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'pim6reg0\x00', 0xc802})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$kcm(0xa, 0x1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x29, 0x10, 0x0, 0x1300)
sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000380)=@in6={0xa, 0x4e24, 0x3000000c, @loopback, 0x76bc}, 0x80, 0x0}, 0x2000c805)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x80c4)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$NILFS_IOCTL_GET_SUSTAT(r4, 0x80306e85, &(0x7f0000000180))
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000140)={0x0, 'syzkaller0\x00', {0x1}, 0xb5})
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x6)
r6 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c, 0x80800)
preadv(r6, &(0x7f0000000240), 0x0, 0x0, 0x1)

21m56.882035502s ago: executing program 4 (id=1497):
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x200, 0x70bd2d, 0x25dfdbfe, {0x1, 0x0, 0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}}, 0x4000)
unshare(0x8010000)
unshare(0x20000000)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000100)={0x4, 0x0, 0x0, 0xfffffffe}, 0x10)
unshare(0x500)
unshare(0x14000080)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
close(r1)
unshare(0x22000880)
unshare(0x10200)
unshare(0x100)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x31, &(0x7f0000000140)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xf5d5, 0x0, 0x0, 0x0, 0x500000}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}}], &(0x7f0000000300)='syzkaller\x00', 0x4, 0xe, &(0x7f0000000340)=""/14, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0xa, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000440)=[{0x3, 0x1, 0x4, 0x6}, {0x3, 0x1, 0xf, 0xc}, {0x2, 0x5, 0x0, 0xb}, {0x4, 0x2, 0x7, 0xc}, {0x2, 0x5, 0x6, 0xb}, {0x4, 0x2, 0xc, 0x7}, {0x1, 0x2, 0x2, 0xc}], 0x10, 0x80000000}, 0x94)
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f00000006c0)={r2, 0x0, 0xc7, 0x0, &(0x7f0000000580)="bbece3f2911158b47d731b608e9547db4e4e85dd4b973f65e364fd26400be4b035e6580958b6af222b5eb8143c423c5933aa0efecdcc57b6c857948e4fe700da3df5b26575c0674cd46e6e6c7b3b5576a9a5349f18f26d082fd06de4e7b626505c962c28d6363384b1c524a174d0713601c5bdb7eb7876a52034d499508a64f0d7647d9c1c5d3d191217b1b7cbd9f414006198765ab1a69611eb8c84a23ab41217ed51fd1b52f24595d6ed35b8dac17d62dd8a73b9e202a12283a05832fc21e6ae0891c2cf2e15", 0x0, 0x4, 0x0, 0x8, 0x0, &(0x7f0000000680)="aee5d335d0222117", 0x0, 0x2, 0x0, 0x6}, 0x50)
ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000740)={0x0, 0x8})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000780))
unshare(0x20d00)
r3 = socket$inet(0x2, 0x80000, 0xebf5)
setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f00000007c0)={@rand_addr=0x64010101, @multicast1}, 0x8)
listen(r3, 0xe3)
ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, @hci={0x1f, 0x2, 0x3}, @phonet={0x23, 0x3, 0x0, 0x50}, @ax25={0x3, @bcast, 0x7}, 0x5, 0x0, 0x0, 0x0, 0xd, &(0x7f0000000800)='nicvf0\x00', 0x2, 0x7, 0xa})
setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0)
r4 = epoll_create1(0x80000)
r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000008c0), 0xa000, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000900)={0x1})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r4, 0x8010661b, &(0x7f0000000940))
pwritev(r2, &(0x7f0000000dc0)=[{&(0x7f0000000980)="3967ee4544942d2a78b147f563d65cb6da1b5adbc3cdb957c6c24eb76e6445f7b61fc454b4c29eaec44c90125177c82c0769c8231dcccc7c4da1cf3efacb5d3a8dcaabcec3b99aa83750330f10cac5bc69e1161c8cd9484181a27cf8ccfc50c37cdbe0b22190a42f710721507797236e86d7e4760ad9a9d226f5fd1e9b6c3836499fbe06201c3743b2988a9c9b23", 0x8e}, {&(0x7f0000000a40)="c22d2bd4fa52e2c7ef3b530703635a4b1111a06b744aa83a00d3c0b0b6bdb763600f222ee627a921c937e49b8b267091f6b4d6fd63c5968e3ba0cbb02b316d9c07c1cd54aef065bbf232853aded4aa2ac7e0326b54d1765fb95fb0f51396188acc478c3256241fa3ac4e267f39b14ca8436bd54138784b9104795287cd10b9cb537905f6fb5f061e8db1a98dd9310d5c702c4568486ff40bd8d93b096b7f98eafcb59b41e97a796f42af6e9cc430aa2ea88c4cc375ffc89e334fd7cfbc9b8b50be93a9a06605a3571d2368df32ecddc432a35b78224bc7ee7f55a3046e62ec1e65db", 0xe2}, {&(0x7f0000000b40)="e94de8481127c82d394c30678d140ff728cf9859c7f42d189a436eb7fcc17880ef3c96b49e364a49dbc48b5ecbbfd91dcf15220476f4f36b5915e801125f05f77b8d4a516365d909f9b67c95b18a8efffeb8a045ec51abce4db40a6d3ba001ef6396643ef3d146f9b53e1d54c05a92a12e0451c074589dfceb80d866342e3c08ab211539110c15f6c7d4fc4f411977993b9423dd39db7f2373f13827ab404bf0c5d9ae67023f0e3402cba62b39bb7a2062db8ffe93f0654596f0bfbd6e9c2f2881d9f725a1c4fbebc3c72eb10a6a4b901bf0c7d104323470f7cef6d0152a7484a214", 0xe2}, {&(0x7f0000000c40)="80cb2b4bd5f23e03d83dcd917e549f12863f3be8c7f81e0e6628317a118a3c36c4074a66190ce3b98f5bd790ae9a795a639e915940b5f88baae1db7475", 0x3d}, {&(0x7f0000000c80)="c1bf8b53270d1986bf7b1329268ccac4ae01100544a6a27a5798225f51b79efd42f0432fd6f1c8b333f0a926ec956ca1dbfdfd777f8d600bbb6337d225ad9e6388bee3059753c8745bbd3833152feedb8ff4525497014b809554e584f5f38d137c5b01573692e9069fa386b1e522e8fac2c2d2ad2b350b716f009f425d5d5ac1d566a59305e8edfda8a3108653144f33b36b3fa29ed367", 0x97}, {&(0x7f0000000d40)="6a851dcec183cecf39efc1b79ff0daf0019fe19256d697d791034e94753d3dc06fb0be9d15f8846be6bc9f1162a55763edd03318e4e0c54edce517286c44fad39dd4af0b06489f6070494437246476af982586ea6377403087e25015c27ffb79d65100f049e7f728ce3b", 0x6a}], 0x6, 0x1, 0x54ee)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x58, r6, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c041}, 0x40054)

21m56.730867282s ago: executing program 4 (id=1499):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="7400000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="03040000124101004c0012800b0001006970766c616e00003c00028006000100010000000600010001000000060001000200000006000200000000000600020003"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x1})
r2 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', <r4=>0x0})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0)
close(r5)
socket$unix(0x1, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000840)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r6 = socket$kcm(0x11, 0x3, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000880)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x800, 0xfffffff8, 0x6, 0x0, 0xe4e}, 0xc, 0x5}, [{0x4, 0xfff, 0x8, 0x9, 0xc00b, 0x9}, {0x6, 0x2d9539ea, 0x3, 0x8000, 0x4, 0x3}, {0xfffffffb, 0x1, 0x9, 0x3, 0x3, 0x7}, {0x3, 0x4, 0x2, 0x2, 0x3, 0x6}, {0x80, 0x80, 0xfffffffe, 0xf, 0x25, 0x6}, {0x7, 0x0, 0x0, 0x3, 0x800, 0xff000000}, {0x1000, 0x1, 0x8, 0x7d02, 0x8}, {0x2, 0x3, 0x6, 0x9, 0x3}, {0x2, 0x2, 0xffffffff, 0x3b, 0x3, 0xfff}, {0x5, 0x4, 0x1, 0x9, 0x7}, {0x0, 0x7ff, 0x7, 0x401, 0x1}, {0x841a, 0x9, 0x596d, 0x9, 0x3, 0xaad}, {0x6, 0xf, 0xfffffffc, 0x1a, 0x0, 0x7fff}, {0x10001, 0x6, 0xfffffff9, 0x101, 0x7a0, 0x8}, {0x80000000, 0xc8, 0x7, 0x3, 0x7fff, 0x1}, {0x101, 0x1, 0x7ff, 0x0, 0x9, 0xfff}, {0x8, 0x6, 0xe, 0x3, 0x5, 0xffff}, {0x1, 0x8, 0x6, 0x19, 0x7, 0x3}, {0x24, 0x2, 0xffff1406, 0xffffd137, 0x3, 0x3}, {0xed, 0xd530000, 0xbc, 0x8, 0x3}, {0x7fff, 0x1, 0x1, 0xebd, 0x6, 0x800}, {0x7, 0x4, 0x8000, 0xc, 0xff5, 0x4}, {0x7, 0xf, 0x83b, 0xe795, 0x8000, 0x80000000}, {0xfffffffe, 0x0, 0x99, 0x8, 0x1, 0x2ec}, {0x6, 0x5, 0x4, 0x8, 0x3, 0x4e}, {0x7ff, 0xc, 0x5, 0x80, 0x2, 0x401}, {0x781, 0x3, 0x1, 0x3, 0x1ff, 0x8a}, {0x100, 0x0, 0x5, 0x38000000, 0x6, 0x6}, {0x8, 0x2, 0xa, 0x4, 0x80, 0x4}, {0x8eb, 0x58, 0x3, 0x3, 0x5, 0xfffffff1}, {0x4188, 0x7, 0x9, 0x40, 0x10001, 0x6}, {0x7, 0x5, 0x60, 0xfff, 0x2, 0x58b50814}, {0x9, 0x7, 0x401, 0x9, 0x2f4}, {0x1, 0x5, 0x5, 0x8dc, 0xd, 0x4}, {0x8, 0x8c81, 0x1, 0x7, 0x4, 0x9}, {0x1, 0x98e2, 0x4, 0x7, 0x80000000, 0x4}, {0x5, 0x1ff, 0x5, 0xf, 0x8001, 0xdf9}, {0x4, 0x3ff, 0x0, 0x1000, 0x4, 0xe4}, {0x1, 0x1, 0x4, 0xffff, 0x1, 0x6}, {0x1, 0x1, 0xc, 0x4, 0x8, 0x9}, {0xff, 0xffff, 0x200, 0x7, 0x44, 0x6}, {0x2284, 0x7fff, 0x6, 0x200, 0x4, 0x518c}, {0x8000, 0x7, 0x6, 0x80000000, 0x1, 0x5}, {0x6, 0x3, 0x7, 0x6, 0x7, 0x9}, {0x6, 0xc, 0x4860, 0x3ff, 0x1, 0xed1}, {0x1, 0xbe, 0xcdf, 0x8, 0x6e, 0x8}, {0x1, 0x5, 0x6, 0x3, 0x8, 0x1c2d}, {0x0, 0x80, 0x5, 0x7fffffff, 0x2, 0x5}, {0xfee2, 0x388c, 0x400, 0x758, 0x4}, {0x457b, 0x6c9, 0x3, 0x8, 0x2, 0x2}, {0x9e, 0x5, 0x6, 0x1, 0xea12, 0x5}, {0x99, 0x4, 0x73, 0x6, 0xfffffff8, 0x80}, {0x9, 0x200, 0xfff, 0x4, 0x6, 0x10000}, {0x1, 0x9, 0x599, 0x820, 0x9, 0x80}, {0xb, 0x5, 0x40, 0x3c, 0x4, 0x7}, {0x4, 0x1, 0xf, 0x3, 0xfffffbff}, {0x9, 0x9, 0x3, 0x9, 0x9, 0x3}, {0x6, 0x9, 0x9, 0x1, 0x2}, {0xd, 0x7fffffff, 0x8, 0x9, 0x4f71, 0x5}, {0x3, 0x5, 0x9, 0x4, 0x8, 0xfffffffd}, {0xc, 0x1, 0x4, 0x6, 0xf, 0xb}, {0x10001, 0x32c, 0x8, 0x213, 0xe642, 0x6}, {0x7, 0xc, 0xfffffffe, 0x4, 0x8, 0x3}, {0x3, 0x10001, 0xb94, 0x6, 0x2, 0x8000}, {0xd71a, 0x485d01ae, 0x40, 0x0, 0x7ff, 0x8001}, {0x0, 0x7, 0x80, 0x3, 0x58a, 0x8}, {0x0, 0x6, 0x8, 0x7, 0xc18a, 0x80000001}, {0x3ff, 0x7, 0x8, 0x9, 0x78ff, 0x7f}, {0x9, 0x9, 0x8, 0x4, 0xfffffffc, 0x4}, {0x80000000, 0x3, 0x8, 0x3, 0x10000, 0xffff0000}, {0x2, 0x1, 0x2bb4, 0xa2d, 0x10000, 0x2}, {0x8001, 0xffffffff, 0x3, 0x1b6, 0x3, 0x3}, {0x1ff, 0x2b, 0xe5, 0x3, 0x4, 0x7}, {0xf, 0x4, 0x7, 0xa87, 0x3, 0xffb}, {0x7f, 0x5, 0x8, 0x5, 0x80, 0x28}, {0x63d, 0xfff, 0x4, 0x31f118d1, 0x7fff, 0x1}, {0x6, 0x6f2, 0x401, 0xb1b, 0xb, 0x2}, {0x7, 0x100, 0x9, 0xd30, 0xab, 0x5}, {0xc92, 0x1, 0x80, 0x6, 0x40, 0x2}, {0x0, 0x0, 0x204, 0x6, 0x100, 0x1e6e}, {0x9, 0x7, 0x7, 0xf, 0x2, 0x25f}, {0xe, 0x5, 0x3, 0x802b, 0x8}, {0x7, 0x6, 0x7, 0x7, 0x2, 0x8001}, {0x3, 0x2, 0x7, 0x10000, 0xd, 0x93}, {0x3, 0x4, 0xb54b, 0xeb47, 0x401, 0x80}, {0x8, 0x3, 0xfffffffd, 0x8, 0x0, 0x5}, {0x5, 0x0, 0x4, 0x961, 0x3, 0x257}, {0x3, 0x7, 0x4, 0x7fffffff, 0x80000000}, {0x6, 0x9, 0x6, 0x3, 0x8000, 0xc}, {0x3, 0x65ae, 0x36, 0x3, 0x7, 0x3}, {0x4, 0x1, 0xffff, 0x7fff, 0x4, 0xfff}, {0x8, 0x0, 0x4, 0x8000, 0x41, 0x401}, {0xfffff1d5, 0x5c, 0x5, 0x6, 0x80000000, 0x4}, {0xffffffff, 0xb3c, 0xfffffff7, 0x401, 0x40, 0x2}, {0xb1, 0x8, 0x7, 0xfffffff9, 0x80000001, 0x7}, {0x1, 0xa, 0x40, 0xa, 0x8, 0x3b3b}, {0x4, 0x1, 0x7, 0x10, 0x9, 0xfffffff7}, {0x0, 0x8001, 0x9, 0x7, 0x7, 0x7f}, {0x596, 0xbaf, 0x4c, 0x3, 0x6, 0x1}, {0x0, 0x3, 0xddb, 0x9, 0x81, 0x3d}, {0x40, 0x4, 0x3, 0x80000000, 0x4, 0xb9ce}, {0x2, 0x7, 0x3ff, 0xd346, 0xfffffff9, 0x4}, {0x1ff, 0x29eb, 0x5, 0x2, 0x2, 0x205}, {0x2, 0xc, 0x1, 0x1, 0x1000, 0x4}, {0x8, 0x3, 0x7, 0x3, 0x10000, 0x9}, {0x1, 0x70, 0x800, 0x44b35e2d, 0x6, 0xae53}, {0x2, 0x5, 0xb21, 0xd, 0x9, 0x9}, {0x1, 0x9, 0x7, 0x5, 0x4, 0x6}, {0x10, 0x3, 0xb1db6cb, 0x4, 0x5, 0xb2c8}, {0x18e, 0x6, 0xaf0, 0x28, 0x81, 0x400}, {0x3f, 0x8, 0x7, 0x3, 0xb, 0x4}, {0x5, 0x6, 0x4, 0x2, 0xb38}, {0x200, 0xfffffffc, 0x7fff, 0x0, 0x3a6, 0x80}, {0x4ecd, 0x8000, 0xfffffffe, 0x90, 0x1, 0x4}, {0xa0, 0x8f, 0x401, 0x1000, 0x10, 0x1}, {0xfffffff7, 0xc, 0x1000, 0x55, 0x56f, 0xd0b}, {0x6, 0x0, 0x0, 0x6, 0x4, 0x1}, {0x7, 0x2, 0x42a, 0x0, 0x8, 0x9}, {0x6, 0xffff, 0x8, 0x1d, 0x10, 0x1}, {0x5, 0x2, 0xfffffff7, 0x3, 0x80000001, 0x6}, {0x80000000, 0x9d3, 0x3a, 0x5, 0xfffffff7, 0x4}, {0x7b, 0xffffff5c, 0x3, 0x4, 0x0, 0x81}, {0x0, 0x7ff, 0x17, 0x5, 0xffff}, {0x8, 0x9, 0x401, 0x4, 0x6, 0x19}, {0x9, 0x8d2a, 0x5, 0x7, 0x1, 0x39}, {0x0, 0x29d7, 0x67, 0xfffffff3}, {0x1, 0x100, 0xd93, 0x0, 0x3, 0x2}, {0x8, 0x0, 0x9, 0x8001, 0x6, 0x3}], [{0x5}, {0x2, 0x1}, {0x3}, {0x4}, {0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x1}, {0x1, 0x1}, {}, {0x4}, {0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x3}, {0x2}, {0x0, 0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x5}, {0x3}, {0x5}, {0x3, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x5}, {0x2}, {0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4, 0x1}, {}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x2, 0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$kcm(r6, &(0x7f0000001800)={&(0x7f0000001840)=@xdp={0x2c, 0x8, r4, 0x1109}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001900)='7', 0x1}], 0x1}, 0x20000885)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0xa)
r10 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r11)
ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000500)=<r13=>0x0)
sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r13], 0x1c}}, 0x4008054)
r14 = socket(0x1e, 0x4, 0x0)
write$nci(r10, &(0x7f0000000600)=ANY=[@ANYBLOB="5001", @ANYRES8=r11, @ANYRES16=r14], 0x14)
r15 = socket$nl_route(0x10, 0x3, 0x0)
write(r15, &(0x7f0000000200)="9c000000100005000100000000000000000000000000000000000000000000000900030063616e3000000000700012000800010063616e00640002000c00050040b5922a539e8aac247470fe3076688539c0058a5ea1e4bf00010020a10700000000000000000000000000000000000000000000000000000000002400091e80841e00000000000000000000000500"/156, 0x9c)

21m56.511230836s ago: executing program 4 (id=1502):
r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$6lowpan_control(r0, &(0x7f0000000240)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async, rerun: 64)
socket$nl_route(0x10, 0x3, 0x0) (rerun: 64)
r1 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$netlink(r1, 0x10e, 0xc, &(0x7f0000000000)=""/181, &(0x7f00000000c0)=0xb5) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x24, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x9}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000851}, 0x4044001)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000001600)={0xb8, r5, 0x9, 0x70bd2d, 0x1, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "38a23ab14f"}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x0, 0x8, 0x2}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4059b6bf61b5ed38f6331bd2c5"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_SEQ={0xd, 0x4, "413155f567590bd2d3"}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_SEQ={0x12, 0xa, "dfbf17ce508ceebcbe12a1b126a7"}, @NL80211_ATTR_KEY={0x0, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT]}]}, 0xb8}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07000f010000000000000200000008000300", @ANYRES32=r4], 0x28}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="bf4601"], &(0x7f0000000480)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f0000000580)={r1, 0xd9f, 0xff, "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"}) (async)
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001700), 0x0, 0x40, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f40), 0xffffffffffffffff) (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002f80)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_GET_STATION(r10, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000003040)={0x28, r9, 0x303, 0x0, 0xdfffffff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x20040890)
r12 = socket$nl_generic(0x10, 0x3, 0x10)
r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f00000030c0)={'wlan0\x00', <r14=>0x0})
sendmsg$NL80211_CMD_START_AP(r12, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000003240)={0x74, r13, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x30, 0xe, {{{}, {0x6}, @broadcast, @device_a, @from_mac, {0x0, 0xff3}}, 0x0, @default, 0x5, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0xf, 0xf, [@random={0x1, 0x9, "2421fd45efaa9a157e"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}]}, 0x74}}, 0x0)

21m56.186940219s ago: executing program 4 (id=1509):
r0 = socket$inet6(0xa, 0x80002, 0x0)
sendmmsg$inet6(r0, &(0x7f0000002a80)=[{{&(0x7f0000000440)={0xa, 0x4e21, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000008000000001400000000000000290000003e00000001000000000000001400000000000000290000000b00000080000000faffffff18"], 0x60}}], 0x2, 0x40)

21m56.066036291s ago: executing program 4 (id=1511):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50)
getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000380)=0x14)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0xfffffff8, r1}, 0x38)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r3, 0x1}, 0xc)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000680)={0x4, 0x4}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000040)="ab", 0xfffd, 0x2000c8d4, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000800)=@security={'security\x00', 0x44, 0x4, 0x658, 0xffffffff, 0x0, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x588, 0x588, 0x588, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x320, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0xfff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {}, {}, 0xc8, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x358, 0x448, 0x190, 0x0, 0x190, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [0x0, 0xff000000, 0xff], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x4, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 0x2022, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x6e24], 0xd, 0x0, 0x4, 0x7}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0xffffffff], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5, 0x1}, {0x2, 0x4}, 0x9, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'dummy0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x6c, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@loopback, 0x1, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x36}, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001680)={0x0, <r9=>0x0}, &(0x7f00000016c0)=0xc)
sendmsg$netlink(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001780)=ANY=[@ANYBLOB="300000002c000100000000000000000008000000", @ANYRES32=r9, @ANYBLOB="0b000280976b6408686030000c00018008000000", @ANYRES32=0x0, @ANYBLOB], 0x30}], 0x1}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000017c0)={{{@in6=@mcast2, @in=@local, 0x4e23, 0xb45, 0x4e24, 0x0, 0x0, 0x20, 0x80, 0x4, 0x0, r9}, {0xf5, 0xfffffffffffffff9, 0x100000000, 0xf7a, 0x7, 0x2, 0x4, 0x8000000000000008}, {0x9eab, 0x2, 0xffffffffffffffff, 0x100000001}, 0x1000, 0x6e6bb3, 0x2, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x4d5, 0x5a}, 0x2, @in6=@remote, 0x0, 0x5, 0x2, 0xf, 0x5, 0x22c}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000018c0)={{{@in6=@private0, @in=@private=0xa010100, 0x4e21, 0x5, 0x4e24, 0xa2a1, 0x2, 0x40, 0xa0, 0x73, r2, r9}, {0xfffffffffffffff9, 0x2, 0xfffffffffffffffa, 0x4, 0x4008, 0x10, 0x0, 0x8000000000000000}, {0x8, 0x204d, 0x8}, 0x0, 0x6e6bb8, 0x1, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4d3, 0x6c}, 0x2, @in=@empty, 0x3504, 0x1, 0x0, 0xd5, 0x9, 0x6, 0x16}}, 0xe8)
setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0xf7, 0x6, 0x6, 0x1, 0xff, 0x0, 0x3, 0x5c, 0x5, 0x8, 0x61, 0x1, 0x7}, 0xe)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close(0xffffffffffffffff)
r10 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r10, &(0x7f00000002c0)={0x2, 0xfffc, @loopback}, 0x10)
unshare(0x20040600)
setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000740)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x2, 0x3, 0x1, 0x3}}, {0x0}, 0x0, 0x4c7768d080e3ff2c}, 0xa0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000440)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

21m40.957892359s ago: executing program 32 (id=1511):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50)
getpeername$packet(r0, &(0x7f0000000340)={0x11, 0x0, <r2=>0x0}, &(0x7f0000000380)=0x14)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r2, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680), &(0x7f00000006c0), 0xfffffff8, r1}, 0x38)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r3, 0x1}, 0xc)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000680)={0x4, 0x4}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000180)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x801, 0xf84, 0x3}, 0x1c)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
r5 = socket$inet_sctp(0x2, 0x1, 0x84)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000040)="ab", 0xfffd, 0x2000c8d4, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000800)=@security={'security\x00', 0x44, 0x4, 0x658, 0xffffffff, 0x0, 0x320, 0x0, 0xffffffff, 0xffffffff, 0x588, 0x588, 0x588, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x203, 0x1f8, 0x320, 0x8502, {}, [@common=@inet=@hashlimit2={{0x150}, {'ip6erspan0\x00', {0x3ff, 0x2, 0x0, 0x2, 0xfff, 0x849a, 0x1, 0x18, 0x18}, {0x8}}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:initctl_t:s0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0xff, 0xff, 0xff], [0xffffffff, 0xff, 0x0, 0xffffff00], 'erspan0\x00', 'caif0\x00', {}, {}, 0xc8, 0x0, 0x4, 0x50}, 0x0, 0x128, 0x150, 0x0, {0x0, 0x11}, [@common=@eui64={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'batadv_slave_0\x00', {0x8, 0x7, 0x101, 0x3, 0x4, 0x4, 0xfffffff8, 0x0, 0x78}, {0x1}}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x7, 0x81, 0x1, 0x0, "d13aea835ab25d2af06d2a594bd55044f3f8f4a6ee1c3d886408088b5319e5294d4192982093b0f1e78cdb4585b98822e00d4b509e74d3ebb43b153f2481c6e3"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6b8)
r7 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000ec0)=@mangle={'mangle\x00', 0x2, 0x6, 0x750, 0x358, 0x448, 0x190, 0x0, 0x190, 0x680, 0x680, 0x680, 0x680, 0x680, 0x6, 0x0, {[{{@ipv6={@mcast1, @mcast2, [], [0x0, 0xff000000, 0xff], 'bond_slave_0\x00', 'vlan1\x00', {}, {0xff}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x32, 0x0, 0x0, 0x4, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], 0x2022, 0x50}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x6e24], 0xd, 0x0, 0x4, 0x7}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [0x0, 0xffffffff], [0x0, 0x0, 0x8000007f], 'bridge0\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x3}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x5, 0x1}, {0x2, 0x4}, 0x9, 0x2}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [], 'dummy0\x00', 'veth1_to_team\x00', {0xff}, {}, 0x6c, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xf0, 0x48000000}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@loopback, 0x5, 0xc}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@loopback, 0x1, 0x37}}}, {{@uncond, 0x0, 0x210, 0x238, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d3], 0x1, 0x9, 0x3}}, @common=@rt={{0x138}, {0x0, [0x0, 0xc], 0x0, 0x0, 0x1, [@empty, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @dev={0xfe, 0x80, '\x00', 0x36}, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @local, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b0)
r8 = socket$netlink(0x10, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000001680)={0x0, <r9=>0x0}, &(0x7f00000016c0)=0xc)
sendmsg$netlink(r8, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001780)=ANY=[@ANYBLOB="300000002c000100000000000000000008000000", @ANYRES32=r9, @ANYBLOB="0b000280976b6408686030000c00018008000000", @ANYRES32=0x0, @ANYBLOB], 0x30}], 0x1}, 0x0)
setsockopt$inet6_IPV6_IPSEC_POLICY(r7, 0x29, 0x22, &(0x7f00000017c0)={{{@in6=@mcast2, @in=@local, 0x4e23, 0xb45, 0x4e24, 0x0, 0x0, 0x20, 0x80, 0x4, 0x0, r9}, {0xf5, 0xfffffffffffffff9, 0x100000000, 0xf7a, 0x7, 0x2, 0x4, 0x8000000000000008}, {0x9eab, 0x2, 0xffffffffffffffff, 0x100000001}, 0x1000, 0x6e6bb3, 0x2, 0x1, 0x1, 0x3}, {{@in=@multicast2, 0x4d5, 0x5a}, 0x2, @in6=@remote, 0x0, 0x5, 0x2, 0xf, 0x5, 0x22c}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000018c0)={{{@in6=@private0, @in=@private=0xa010100, 0x4e21, 0x5, 0x4e24, 0xa2a1, 0x2, 0x40, 0xa0, 0x73, r2, r9}, {0xfffffffffffffff9, 0x2, 0xfffffffffffffffa, 0x4, 0x4008, 0x10, 0x0, 0x8000000000000000}, {0x8, 0x204d, 0x8}, 0x0, 0x6e6bb8, 0x1, 0x1, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0xa}, 0x4d3, 0x6c}, 0x2, @in=@empty, 0x3504, 0x1, 0x0, 0xd5, 0x9, 0x6, 0x16}}, 0xe8)
setsockopt$inet_sctp_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x6, 0xf7, 0x6, 0x6, 0x1, 0xff, 0x0, 0x3, 0x5c, 0x5, 0x8, 0x61, 0x1, 0x7}, 0xe)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
close(0xffffffffffffffff)
r10 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r10, &(0x7f00000002c0)={0x2, 0xfffc, @loopback}, 0x10)
unshare(0x20040600)
setsockopt$RDS_GET_MR_FOR_DEST(r10, 0x114, 0x7, &(0x7f0000000740)={@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @local}, 0x2, 0x3, 0x1, 0x3}}, {0x0}, 0x0, 0x4c7768d080e3ff2c}, 0xa0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000440)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1m39.948702249s ago: executing program 2 (id=9181):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="24200400858d0000340012800e00010069703665727370616e000000200002800500160022000000040012"], 0x5c}, 0x1, 0x0, 0x0, 0x48001}, 0x0) (fail_nth: 10)

1m39.370328392s ago: executing program 2 (id=9184):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x15, 0x5b09, 0x7, 0x2, 0x3, 0x5, 0x7, 0x8, 0x5, 0x9, [0xce, 0x5, 0x2005, 0x40, 0x4, 0x3, 0x400e, 0xfb]}})
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e20, 0x7fffffff, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="300000000000000029000000040000008402000401", @ANYBLOB="f95eb06da0fa224e74dc0432214d423c18528f"], 0x30}, 0x40)

1m38.867325024s ago: executing program 2 (id=9187):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={<r1=>0x1, @in6={{0xa, 0x4e21, 0x10000, @rand_addr=' \x01\x00', 0x1}}, [0xd, 0xff, 0x792bd00, 0x1, 0x8, 0x3, 0x6, 0xfffffffffffff1bd, 0x4, 0x5, 0x8, 0x7e4, 0x230f, 0x1200000000000, 0x81]}, &(0x7f0000000180)=0x100)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x6b1}, 0x8)
close(r0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)=@getsa={0x240, 0x12, 0x300, 0x70bd2c, 0x25dfdbff, {@in=@rand_addr=0x64010101, 0x4d5, 0x2, 0x3c}, [@algo_comp={0x4c, 0x3, {{'deflate\x00'}, 0x20, "99847f81"}}, @algo_comp={0x10e, 0x3, {{'lzs\x00'}, 0x630, "e7b2af08c798917ec576be5d53197a98cf8fa169e9344d324c9efc036afdb53b82c33f8a7d492a7ca54fe169ae955a7c08d45e23238f0bfa9d5f7013d66746617112bfe73e6c1af856bb20c8575838f32ace662b44318b59db19487ce1b0c8feb6feeeb83cc998133c46597db4b9e81207541f79bf2f7a5c1d4c3953fbdd3a24174f5e10224fed22e0dbbffa10ba49a8d1c9a3239677932a05370653c9e213084cf6211c48f0a04a9e532be56a616d0fecbe3cbdf686accb1e7a55711f40a3e7e4174cba1b9b"}}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@loopback, 0x2, 0xd}}, @encap={0x1c, 0x4, {0x3, 0x4e20, 0x4e23, @in6=@private1}}, @replay_thresh={0x8, 0xb, 0x7}, @coaddr={0x14, 0xe, @in=@broadcast}, @replay_esn_val={0x28, 0x17, {0x3, 0x70bd25, 0x70bd25, 0x70bd28, 0x70bd2d, 0x9, [0x3ff, 0xb, 0x761]}}, @iptfs_max_qsize={0x8, 0x28, 0x2}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @sec_ctx={0x24, 0x8, {0x20, 0x8, 0x1, 0xfb, 0x18, "f854f6d1d720c2af037b9184db2f77a5505f36ed04852c6f"}}]}, 0x240}, 0x1, 0x0, 0x0, 0x1}, 0x8800)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000500)={0x1, [0x1]}, &(0x7f0000000540)=0x6)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, <r3=>0x0})
ioctl$BTRFS_IOC_INO_LOOKUP(r2, 0xd0009412, &(0x7f0000000780)={r3, 0x7fffffff})
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000018c0)={{<r4=>r2, &(0x7f0000001780)='*/--]+)-\'..+/.+%]-.^@@$}\xc0]}-]..\x00', 0x4000, &(0x7f00000017c0)={@align=0xa9, {0x4, 0x8, 0x7, 0x7}}, 0x6, &(0x7f0000001800)={@_ha_fsid}, &(0x7f0000001840)=0x6}, {[0x10, 0x7, 0x3, 0x3]}, 0x2, 0xa, &(0x7f0000001880)=""/10})
sendmsg$kcm(r4, &(0x7f0000001d00)={&(0x7f0000001940)=@l2tp6={0xa, 0x0, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x8}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000019c0)="afe6827ba0c8bbfe060e8001983def2676e9aef79b23673d07fe1b1ad4a738c201f1f293faa857ea987b3d3ebe78fbc4d991fa07c7f309bf0bd056b4a7b3c26df3424da0be099c1ebaf4f8735a8727e0a52e1f4629a70dee3ee204079aef", 0x5e}, {&(0x7f0000001a40)="54c0d9f1e2dab671c8eea34162e91e38719374ba1d7c4fa48aa9a4024f748c52c8f6b7a57d09e88daaf1e17e0bb2c9b810eb9bfdd680905cfe394b233802598a48e65976d97a5c17ec8e34dccb3c8ad8c3fcce1a291d3f23c36d33583f7839", 0x5f}, {&(0x7f0000001ac0)="3b40b8fd051229f49c99c8c0a34280491054bced55b5ad3c2476be41df328d3e007800601f8834ffbbf5672a1482b62f05478d9439e59155a45144231858c917b0a8bbd710286f8245421f58efa092fe7bd09699931fc8bd847c2ac1cb56ed8ffe57d2106bc2346d380fbdd387b771ea19d0c80dd4f0d6cbf8fe382ba7eca98def05358c20bfdce56cfdec1b2c0fbe1a17a5be21f262f2f522263aa393dae3e22fa6128f914b283c4f2210b6f6d1151544198b1c45", 0xb5}], 0x3, &(0x7f0000001bc0)=[{0xc0, 0x0, 0x34, "af852a0fe19e3361383c64111073f807cd16e19710642e6a0b85fb7e9ccd82bb2ed8a59ddcec5e858343e6fb2396e04f15fe882f1fcadf68c755385055de41e5fb7a4b8bf92baf54d680c9a9340fc9a1addcb13174caf2ad3646e26320f5c06dbb13c2157ef2beaf9fef2b58581ec5df56430b0109b75c4cb083b71ac3b3e9069e8e4fcbb196d782bd955278ced8337af7d26760fd131177cf3e3ebe4c72cbafa850abf5bdd496039e0b28"}, {0x60, 0x83, 0x3, "29a27fa83339368035ac156dff1c6bd2c1d72f718c6205de85dc214acb12923abadf60bd2700e3f38e5f1561197c88db7d520d50978f664310f65bd3b7e7c4a810ed7076b5c00f9e58"}], 0x120}, 0x804)
setsockopt$inet_tcp_TLS_RX(r4, 0x11a, 0x2, &(0x7f0000001d40)=@gcm_128={{0x304}, "eb2a2a9ee2f629c8", "a2e4874dde5ea23bbbfd87c22acc7051", "4152e58e", "985f624b1fd6359d"}, 0x28)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000001e80)={<r5=>0xffffffffffffffff, &(0x7f0000001d80)='\x00', 0x6002, &(0x7f0000001dc0)={@_ha_fsid={[0x3, 0x22d]}, {0x3ff, 0x0, 0x7, 0x1}}, 0x1000, &(0x7f0000001e00), &(0x7f0000001e40)=0xe})
bind$bt_hci(r5, &(0x7f0000001ec0)={0x1f, 0x2, 0x4}, 0x6)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000001f00)=0x2, 0x4)
sendmsg$key(r4, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x2, 0x12, 0x81, 0x7, 0x3, 0x0, 0x70bd25, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e22}]}, 0x18}}, 0x40)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x44, 0x3, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40000)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000002180), r4)
sendmsg$DEVLINK_CMD_PORT_SPLIT(r4, &(0x7f0000002300)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000022c0)={&(0x7f00000021c0)={0xf8, r8, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0xfffffff9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x3}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40050}, 0x0)
sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000002400)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000023c0)={&(0x7f0000002380)={0x34, 0xe, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r5, 0x84, 0x7a, &(0x7f0000002440)={r1, <r9=>0xffffffffffffffff}, &(0x7f0000002480)=0xc)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r9, 0x84, 0x75, &(0x7f00000024c0)={r1, 0x4}, &(0x7f0000002500)=0x8)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x10, r7, 0x408fd000)
r10 = syz_genetlink_get_family_id$fou(&(0x7f0000002580), r4)
sendmsg$FOU_CMD_DEL(r4, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f0000002640)={&(0x7f00000025c0)={0x70, r10, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V4={0x8, 0x8, @empty}]}, 0x70}, 0x1, 0x0, 0x0, 0x40004}, 0x4091)

1m38.499130326s ago: executing program 2 (id=9188):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001c40), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000022c0)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002280)={&(0x7f0000002100)={0x14, r1, 0x100, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x1)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x15, 0x2000000000000216, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x50, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
bind$802154_dgram(r2, &(0x7f0000001c80)={0x24, @none={0x0, 0x1}}, 0x14)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@remote, @remote, <r3=>0x0}, &(0x7f0000000480)=0xc)
ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000600)={0x0, @hci={0x1f, 0x4, 0x1}, @xdp={0x2c, 0x2, <r4=>r3, 0x4}, @ax25={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000005c0)='macvlan0\x00', 0x53b, 0x3, 0x2})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0xc, &(0x7f0000000400)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="1900000004000000040000000001000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000e26445500fd1c9ab71e95d09d2ed17e9058041470669ab8362e66369dc606618f2b03ba2d2733dcc0cb7c67b7ed39940258c9a6de652165afebf8e6c5b17622a42519b8b4bb1c06235738ea6df56b0f088c9f8068ce9adc1403083e94decb1bb37e101dbfc924541ebb15f0000000000"], 0x50)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000002480)={{<r9=>r6, &(0x7f0000002300)='%\x00', 0x480901, &(0x7f0000002340)={@align=0x9, {0x19, 0x5, 0x0, 0x1000}}, 0x1, &(0x7f0000002380), &(0x7f00000023c0)=0x9}, {[0xa, 0x7, 0x1, 0x6c]}, 0x6, 0x76, &(0x7f0000002400)=""/118})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002500)=@arena={0x21, 0x0, 0x0, 0x2d, 0x40000, 0x1, 0x3, '\x00', r4, r9, 0x1, 0x3}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000001d00)={0x1, 0xc, &(0x7f0000001dc0)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r8}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r10}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001e40)={{r7}, &(0x7f0000001e80), &(0x7f0000001ec0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000001f00)={0x11, 0x14, &(0x7f0000001fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0x14, &(0x7f0000002100)=ANY=[], &(0x7f0000002140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000002180)={r11}, 0xc)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000)
recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x20, &(0x7f0000000780)=[{&(0x7f0000000800)=""/183, 0xb7}, {&(0x7f00000008c0)=""/83, 0x53}, {&(0x7f0000000940)=""/4091, 0xffb}, {&(0x7f0000001940)=""/175, 0xaf}, {&(0x7f0000001a00)=""/256, 0x100}, {&(0x7f0000001b00)=""/191, 0xbf}], 0x6}, 0x1ff}], 0x4, 0x0, 0x0)

1m38.043922925s ago: executing program 2 (id=9193):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x128}, 0x4004000)
recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001340)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000013c0)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0)
close(0x3)
syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3}, {0x0, 0xfd}, {0x5, 0x0, 0xfe, 0x10000000}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0xf8}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

1m36.893820573s ago: executing program 2 (id=9198):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r0}, 0x18) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1fc, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0x1d8, 0x2a, [@mesh_chsw={0x76, 0x6, {0xe, 0x9, 0x3d, 0x2}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0x4, @device_a, 0x9, @value=@broadcast, 0x200, 0xf4a, @device_a, 0x6}}, @random={0x2, 0xed, "8068a1180f60265d413eaca52fceb4c79b86885b219aa2a7a7552eca6a266b072dfeb579cd36303d238c1a0dc9c9e9d2cb2ae88d04f1f489abf95949af55aa114eb7da8883a90818d5803fc7f7b20e2f8433b6498bb18d37a2e3a5ec36ab33a6580fe22488d182d3a6ea92360df83361098dfe37b1105a30e1216889292dd0d5922eb03bb072595902f88fbeb0a20d5248dd126bf9d0e78e5c6939ecdf3cbb005b1b37c8080ea5729d7de04cd9fd96047fc6f31f81f60a71881a1deeeaf139107639822663428b0287dae2e3bde82e0b284e5ecf6987fcdf699b9816409586774e94c86717cb36a6ee0a14bdd6"}, @fast_bss_trans={0x37, 0xb4, {0xb6, 0x7, "815cd862ef761cf8c5c9e8f41cf4e866", "af753ac6b7d389bd89a5bfd426ba68659beacda93e178fa50f5982b8b0fd041b", "594d2ccb359470002f7d756b5051eb387908354028eb53acd75489e3a0c7829f", [{0x4, 0x26, "b5e741c7847d2cbb1d934dee72407a5ae43c576f4d1ba834136cf8ccf574eaf016ca8c7a0c12"}, {0x3, 0x8, "0f6ad0cc750c093e"}, {0x1, 0x20, "5c7f7a2ed9b3a6f32875079b79aebada5214a9cd3459994a4e9f1746771d249f"}, {0x2, 0x1, '-'}, {0x3}, {0x4, 0x1, 'O'}, {0x3, 0x4, "356d5dc8"}]}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000440)={0x1, 0x0, 0x7, 0x833, 0x7fff, 0x400}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@arena={0x21, 0x0, 0x0, 0x34, 0x20400, r1, 0x2, '\x00', 0x0, r2, 0x0, 0x2}, 0x50) (async)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x4088c)
ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000640)="7c2548894002531e88bb4cefd9b3259d5d275b1102fa1f828bcdb73fc89f045c431a1ed78117bd2c6ca215b1c1e6cc51d0617b304f5e47") (async)
r7 = socket$rxrpc(0x21, 0x2, 0x0)
ioctl$sock_netdev_private(r7, 0x89f5, &(0x7f0000000680)="caca915eb3e69e7a7bc93d6a8c0bdc6dfb31af44300db7f3aaf4342eb1158b36e0c9f601dc248a3042e9890d6a49cae5d4a439995434a275711f22aa2f2caf0de25b75808edde61269d66e5f72afa26f918d35405f3273563e74e2184e1b357c87b1d2c282976b1cf5deeba4e530088ebb76093da12dee15490f4b1790bb63d4fb97ce3eaa1412ed94548fe23ebaf0764333ba7d89add152fcbe5e20d81e30fd2390fe4b55817b05d1aa72b7da59730258819cbc332ccbefe1030c82ff7df4426c2923ed421d0a2fbae284e196afbd88e3f7d2eea0c3") (async)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000780)={'icmp6\x00'}, &(0x7f00000007c0)=0x1e) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000800)={<r8=>0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000840)=0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000880)={r8, 0x3}, 0x8)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6gre0\x00', <r10=>0x0, 0x4, 0x0, 0x2, 0x6, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x1, 0x3}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a00)={'batadv0\x00', <r11=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'ipvlan0\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', <r13=>0x0, 0x700, 0x7800, 0x8, 0x6e, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x65, 0x0, 0x68, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x7, 0xb, "2177733c5762adbe1c"}, @timestamp={0x44, 0x20, 0xc7, 0x0, 0x6, [0x3b90, 0x6, 0x0, 0x0, 0xff000000, 0x2846, 0x10001]}, @timestamp={0x44, 0x1c, 0x8c, 0x0, 0x3, [0x1b, 0x7, 0x400, 0x1, 0x0, 0x100]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'syztnl1\x00', <r14=>0x0, 0x29, 0x1, 0xe, 0x6e7, 0x5d, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x700, 0x1, 0xa1e2, 0x22}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000d80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x108, r9, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40004}, 0x10) (async)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x144, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CT={0x10, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_PAYLOAD={0x2d, 0xa, "948849abc4b6fc0b3aa8854fa6b5c4e109dff10c73d930eb1c1f5e8734c92e173a9c77f27423edbcc1"}, @NFQA_EXP={0x74, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_ZONE={0x6}]}, @NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_ID={0x8}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x571}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000001000)={0x0, 'gre0\x00', 0x3}, 0x18) (async)
ioctl$OCFS2_IOC_UNRESVSP(r5, 0x40305829, &(0x7f0000001040)={0x1, 0x2, 0x0, 0x90000000, 0x9, 0x1ff})
r15 = syz_genetlink_get_family_id$fou(&(0x7f00000010c0), r1)
sendmsg$FOU_CMD_DEL(r2, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, r15, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}]}, 0x68}, 0x1, 0x0, 0x0, 0x40801}, 0x4000892) (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x138, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x228854f4}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa18c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8610}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf901}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f3b4d0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2797aa7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x627}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x574a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4723}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x769dd212}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d24df7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f9c96de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5aadc99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64d47dbc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b99d1e2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa49c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd377}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x596251ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11406480}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bd85fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba34}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c1564b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30e424c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a25dac8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6659499}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45010c73}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97d8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000084}, 0x10)

1m21.830894275s ago: executing program 33 (id=9198):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r0}, 0x18) (async)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1fc, r3, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0x1d8, 0x2a, [@mesh_chsw={0x76, 0x6, {0xe, 0x9, 0x3d, 0x2}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0xd, 0x4, @device_a, 0x9, @value=@broadcast, 0x200, 0xf4a, @device_a, 0x6}}, @random={0x2, 0xed, "8068a1180f60265d413eaca52fceb4c79b86885b219aa2a7a7552eca6a266b072dfeb579cd36303d238c1a0dc9c9e9d2cb2ae88d04f1f489abf95949af55aa114eb7da8883a90818d5803fc7f7b20e2f8433b6498bb18d37a2e3a5ec36ab33a6580fe22488d182d3a6ea92360df83361098dfe37b1105a30e1216889292dd0d5922eb03bb072595902f88fbeb0a20d5248dd126bf9d0e78e5c6939ecdf3cbb005b1b37c8080ea5729d7de04cd9fd96047fc6f31f81f60a71881a1deeeaf139107639822663428b0287dae2e3bde82e0b284e5ecf6987fcdf699b9816409586774e94c86717cb36a6ee0a14bdd6"}, @fast_bss_trans={0x37, 0xb4, {0xb6, 0x7, "815cd862ef761cf8c5c9e8f41cf4e866", "af753ac6b7d389bd89a5bfd426ba68659beacda93e178fa50f5982b8b0fd041b", "594d2ccb359470002f7d756b5051eb387908354028eb53acd75489e3a0c7829f", [{0x4, 0x26, "b5e741c7847d2cbb1d934dee72407a5ae43c576f4d1ba834136cf8ccf574eaf016ca8c7a0c12"}, {0x3, 0x8, "0f6ad0cc750c093e"}, {0x1, 0x20, "5c7f7a2ed9b3a6f32875079b79aebada5214a9cd3459994a4e9f1746771d249f"}, {0x2, 0x1, '-'}, {0x3}, {0x4, 0x1, 'O'}, {0x3, 0x4, "356d5dc8"}]}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x40000}, 0x40)
ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000440)={0x1, 0x0, 0x7, 0x833, 0x7fff, 0x400}) (async)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@arena={0x21, 0x0, 0x0, 0x34, 0x20400, r1, 0x2, '\x00', 0x0, r2, 0x0, 0x2}, 0x50) (async)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0)
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r6, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x4088c)
ioctl$sock_bt_hci(r2, 0x400448ca, &(0x7f0000000640)="7c2548894002531e88bb4cefd9b3259d5d275b1102fa1f828bcdb73fc89f045c431a1ed78117bd2c6ca215b1c1e6cc51d0617b304f5e47") (async)
r7 = socket$rxrpc(0x21, 0x2, 0x0)
ioctl$sock_netdev_private(r7, 0x89f5, &(0x7f0000000680)="caca915eb3e69e7a7bc93d6a8c0bdc6dfb31af44300db7f3aaf4342eb1158b36e0c9f601dc248a3042e9890d6a49cae5d4a439995434a275711f22aa2f2caf0de25b75808edde61269d66e5f72afa26f918d35405f3273563e74e2184e1b357c87b1d2c282976b1cf5deeba4e530088ebb76093da12dee15490f4b1790bb63d4fb97ce3eaa1412ed94548fe23ebaf0764333ba7d89add152fcbe5e20d81e30fd2390fe4b55817b05d1aa72b7da59730258819cbc332ccbefe1030c82ff7df4426c2923ed421d0a2fbae284e196afbd88e3f7d2eea0c3") (async)
getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000780)={'icmp6\x00'}, &(0x7f00000007c0)=0x1e) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000800)={<r8=>0x1, 0xffffffffffffffff, 0x800}, &(0x7f0000000840)=0xc)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000880)={r8, 0x3}, 0x8)
r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) (async)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000940)={'ip6gre0\x00', <r10=>0x0, 0x4, 0x0, 0x2, 0x6, 0x14, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x7, 0x1, 0x3}}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000a00)={'batadv0\x00', <r11=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'ipvlan0\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000b00)={'tunl0\x00', &(0x7f0000000a80)={'erspan0\x00', <r13=>0x0, 0x700, 0x7800, 0x8, 0x6e, {{0x18, 0x4, 0x0, 0x1, 0x60, 0x65, 0x0, 0x68, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x7, 0xb, "2177733c5762adbe1c"}, @timestamp={0x44, 0x20, 0xc7, 0x0, 0x6, [0x3b90, 0x6, 0x0, 0x0, 0xff000000, 0x2846, 0x10001]}, @timestamp={0x44, 0x1c, 0x8c, 0x0, 0x3, [0x1b, 0x7, 0x400, 0x1, 0x0, 0x100]}, @ra={0x94, 0x4, 0x1}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000bc0)={'ip6_vti0\x00', &(0x7f0000000b40)={'syztnl1\x00', <r14=>0x0, 0x29, 0x1, 0xe, 0x6e7, 0x5d, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, 0x700, 0x1, 0xa1e2, 0x22}})
sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000d80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x108, r9, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x40004}, 0x10) (async)
sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x144, 0x1, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFQA_VLAN={0x14, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7}, @NFQA_CT={0x10, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFQA_PAYLOAD={0x2d, 0xa, "948849abc4b6fc0b3aa8854fa6b5c4e109dff10c73d930eb1c1f5e8734c92e173a9c77f27423edbcc1"}, @NFQA_EXP={0x74, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_ZONE={0x6}]}, @NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_ID={0x8}, @CTA_SEQ_ADJ_REPLY={0x24, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x571}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}]}, @CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc}, @CTA_NAT_SRC={0x14, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @rand_addr=0x64010100}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4}, 0x4000)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000001000)={0x0, 'gre0\x00', 0x3}, 0x18) (async)
ioctl$OCFS2_IOC_UNRESVSP(r5, 0x40305829, &(0x7f0000001040)={0x1, 0x2, 0x0, 0x90000000, 0x9, 0x1ff})
r15 = syz_genetlink_get_family_id$fou(&(0x7f00000010c0), r1)
sendmsg$FOU_CMD_DEL(r2, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x68, r15, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @local}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x87}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x1f}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}]}, 0x68}, 0x1, 0x0, 0x0, 0x40801}, 0x4000892) (async)
sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001380)={&(0x7f0000001240)={0x138, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x11c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x228854f4}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa18c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa35}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8610}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf901}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f3b4d0b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2797aa7b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec86}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x627}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x574a}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4723}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x769dd212}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60d24df7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3f9c96de}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5aadc99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x64d47dbc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b99d1e2}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa49c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd377}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x596251ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x11406480}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2bd85fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xba34}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7c1564b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x44ea}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30e424c1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6a25dac8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6659499}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45010c73}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x97d8}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0x138}, 0x1, 0x0, 0x0, 0x4000084}, 0x10)

6.871910411s ago: executing program 1 (id=9837):
connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001100)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000002000000000000000008082295", @ANYRESDEC=0x0], &(0x7f0000000680)='syzkaller\x00'}, 0x94)
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
syz_emit_ethernet(0x46, &(0x7f00000006c0)=ANY=[@ANYBLOB="000003ffffffffffff0800450000380064000000019078ac1e0001ac141419053490786b00183f25000051060a43e9b1e7cf63b186000000fffd0d010001ac141498ffffffff0018631ba2f71328babe62e9bfb5d1358afa90f43de1582f9f263cd057f08f9aa4b7882f9aec4bda6d71491ab2929eac464feff1ed0037d5e62f2673dffd0c9d01e834a13ce048b5eb951c363289bd9737a79b980d071d11782ddf71546a9a23d800"], 0x0) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000012c0)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000001340)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0) (async)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000100)=0x8, 0x4) (async, rerun: 32)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000140)=0x800001, 0x4) (async, rerun: 64)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (rerun: 64)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001000)={&(0x7f0000001080)={0x50, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)
listen(r2, 0x0) (async)
r4 = socket$netlink(0x10, 0x3, 0x4)
writev(r4, &(0x7f0000000300)=[{&(0x7f0000000f00)="580000001500add427323b470c47b45602067fffffff81004e220700000000000000a8002000eaa57b00090080020efffeffe809020000ff0004f03a007357ac8ddc1fdd00000000000004ffffffe7ee0000000044c60000", 0x58}], 0x1) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x6, 0x2, 0x1, 0x1, 0xd, 0x2}, 0x20) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async, rerun: 64)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r5, 0x8b32, &(0x7f0000000080)) (async, rerun: 64)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r5}, 0x8) (async, rerun: 64)
mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4000002, 0x10, r2, 0xcd3c6000) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3}, 0x50)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0x1}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xd, 0x2, &(0x7f0000000900)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x4}], &(0x7f0000000940)='syzkaller\x00', 0xcc8, 0x8c, &(0x7f0000000980)=""/140, 0x41100, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x7, 0x10000, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000ac0)=[0xffffffffffffffff], &(0x7f0000000b00)=[{0x3, 0x1, 0xd, 0xc}], 0x10, 0x3}, 0x94)

5.807762983s ago: executing program 1 (id=9843):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd2d, 0x25dfdbf8, {0x2, 0x0, 0x10, 0x0, 0xfd, 0x0, 0xff, 0x2, 0x1800}}, 0x1c}, 0x1, 0x0, 0x0, 0x44050}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'ip6gretap0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x48}}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000041000000a60000000e00080095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0100000000010000007372000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80000}]}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0)
r7 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r7, &(0x7f00000008c0), 0x4924b68, 0x0)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff)
r9 = socket$netlink(0x10, 0x3, 0x0)
sendto(r9, &(0x7f0000000a40)="6800000030000505010000000000000000000000540001805000018009000100676174650000000040000280180002000000000000000000000000000000000000000000180008000300640000000c000700e803ffe400"/104, 0x68, 0x20001000, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_WIPHY(r7, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, r8, 0x4, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x5e}, @void, @val={0xc, 0x99, {0x6, 0x77}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20040000}, 0x40010)
socket$kcm(0x29, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000580)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0}, 0x50)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000b40)={'sit0\x00', &(0x7f0000000ac0)={'gre0\x00', r3, 0x40, 0x80, 0x709d0ec7, 0x2, {{0x13, 0x4, 0x2, 0xf, 0x4c, 0x67, 0x0, 0xc8, 0x0, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x0, 0x5, "87b2b0"}, @lsrr={0x83, 0x7, 0x4, [@multicast2]}, @end, @rr={0x7, 0x17, 0xa3, [@rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x41}, @remote, @dev={0xac, 0x14, 0x14, 0xc}, @multicast2]}, @noop, @generic={0x89, 0xf, "9ba58649cc22e00f8ca1b6a1d8"}, @ra={0x94, 0x4}]}}}}})
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x1c, &(0x7f0000000380)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300008520000000000000b7020000000000007b9af0ff00000000c509000000010000c3aaf0fff1000000bf8600000000000077080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x0, 0x2100, 0x0, &(0x7f00000001c0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
sendmsg$nl_route(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001240)=ANY=[@ANYBLOB="7c0000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a0100140003006e657464657673696d3000000000000034001680300001802c000c801400180000f8ffff61080000040000008100000014000100010000007b0200000000000000000000140014"], 0x7c}, 0x1, 0x0, 0x0, 0x8041}, 0x48880)

5.358766698s ago: executing program 5 (id=9850):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x99572000)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x1000)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x11000) (async)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x11000)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x400, {{0xa, 0x4e24, 0x3, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9}}}, 0x88)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0x26c1000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)

5.337773731s ago: executing program 1 (id=9851):
r0 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x6e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3c) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, &(0x7f0000000400), 0x4) (async)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%-010d \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)={0x7c, 0x43, 0x107, 0x70bd28, 0x25dfdc01, {0x1, 0x7c}, [@nested={0x4, 0x165}, @nested={0x64, 0x1, 0x0, 0x1, [@nested={0x60, 0x1d, 0x0, 0x1, [@nested={0x5c, 0xfa, 0x0, 0x1, [@typed={0x14, 0xc, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @nested={0x44, 0x158, 0x0, 0x1, [@nested={0x3d, 0x12a, 0x0, 0x1, [@generic="f9f42d3e6be0d12b1dbd4e9fef92b689966433818051502280ff3532abd24528", @typed={0x8, 0x1, 0x0, 0x0, @pid}, @typed={0xc, 0x19, 0x0, 0x0, @u64=0xffffffffffff8001}, @generic="1663e4e4f2"]}]}]}]}]}]}, 0x7c}}, 0xc000) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x11, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000400008500000018000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000500000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r4, 0x18000000000002a0, 0x48, 0x62, &(0x7f00000008c0)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28)
r5 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r5, &(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000004c0), 0x4) (async)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000500)=0xcde, 0x4)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x2000012, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)
listen(r6, 0x28)
shutdown(r6, 0x0) (async)
r10 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$inet(r10, &(0x7f0000000600)={&(0x7f0000000640)={0x2, 0x4003, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040)
close(r10)

5.134696968s ago: executing program 5 (id=9855):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000740)=ANY=[], 0x20)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="7c010000130001012dbd700000000020fe880000000000000000000000000101ac1414bb0000000000000000000000004e20000d840000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000003c0)={'syzkaller1\x00', @link_local})
write$tun(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff02000000000000000000002f000001"], 0xfdef)

4.313565123s ago: executing program 3 (id=9859):
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="bc01330080000000ffffffffffff080211000000"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000540)={'sit0\x00', <r4=>0x0, 0x4cc58a13faf9b2cd, 0x0, 0x6, 0x8000, {{0x27, 0x4, 0x2, 0x22, 0x9c, 0x64, 0x0, 0x4, 0x2f, 0x0, @empty, @local, {[@rr={0x7, 0x7, 0x74, [@loopback]}, @cipso={0x86, 0x50, 0xffffffffffffffff, [{0x6, 0x8, "1047c31320b2"}, {0x0, 0xc, "cd9e7381b527652bffad"}, {0x1, 0x3, "a5"}, {0x6, 0xd, "80c66b5fc08556def7c649"}, {0x5, 0xf, "346640926afc667deb0e4e1983"}, {0x1, 0x7, "c17d1d450d"}, {0x5, 0x3, "10"}, {0x2, 0xa, "d57efeb31ecde39c"}, {0x0, 0x3, "fd"}]}, @timestamp_addr={0x44, 0x14, 0xac, 0x1, 0x6, [{@local, 0x1}, {@rand_addr=0x64010100, 0x8001}]}, @timestamp={0x44, 0x8, 0x75, 0x0, 0x4, [0xfffffe01]}, @rr={0x7, 0x7, 0x95, [@remote]}, @timestamp={0x44, 0xc, 0x97, 0x0, 0x1, [0xb0d, 0x2]}]}}}}})
r5 = socket$netlink(0x10, 0x3, 0x0) (async)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r6, 0x0, 0x0)
getsockname$packet(r6, &(0x7f0000000640)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000680)=0x14)
sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c0000001000850600000000", @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000780)={'bridge_slave_0\x00', <r9=>0x0})
r10 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r10, @ANYRES32=r10], 0x44}, 0x1, 0x0, 0x0, 0x4000045}, 0x22000800)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'ip6tnl0\x00', <r11=>0x0, 0x4, 0x3, 0x1, 0x7ff, 0x40, @private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x20, 0x40, 0x10000}})
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001cc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000940)={0x1330, r3, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0x96, 0x3, "7489aa5c2cf6b47886dc09b2396a9c3f97cbec4b7508db8c83b0a140991a5f397996de7969eb3877786c2ac527c6392897338edc2925b8e04a777b530d5b85ce8a5ceb3d47dcc4069c25e99a7456cdfec68c65296aaeb44c224c6a6360faf4ad1734800cc854d3bb806db8be6c199b48ab1b3650b58f2447758cacc640f8c8a73da5b014f991c92a5991a3ca024259e4beab"}, @ETHTOOL_A_WOL_MODES={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x6c, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9c4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbb9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0xc3, 0x3, "25aa6261eed4a9f69a5aa1f081953190b61ecd3f7cc465d427d67fe584cdb0eeca4aeec3650c8be5884ea20b356bf99e17cb9fdca0d447c110393dd09330eb9fa26752bfaf73d405ec5c54e0b3156710f88cdc92068b8b2ae723dd94d3ffd76a925ad52da2203be378652c015f62b4ac9417785ab8b2d9baf4e999bf18ca8f4a20046d7bcde3ab61e43dfa861a02f95796ce895e6c42a6037d15ea8200bd407f19ccc23b845fe42a1f6296769a353db06ab22e7a3cb6f82a35da6058c3818b"}, @ETHTOOL_A_WOL_SOPASS={0x70, 0x3, "b763c4731abe81bd8b614a5231051e8f0bafffa5442c34c3996a9b48dfcd2c1004d2cc064fe59abc8ad477d153e7a90cc84329ecc540a41998c777cb98e929a51d2b60839e7d444983b6a2a388f5e6052645c6c0a23757821144a1e81dd424188ed9c409785bafd23514f546"}, @ETHTOOL_A_WOL_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x66, 0x3, "83ebcda9ee1959892a340313f113832b9fac0f5cb792fee5ee10634274ce7f2283c67d2b5b05db709b1cd930ee351437ccc32bf8f3a90a77191bc56ef6ee16b09871f49a6766b873afa30b9a23243ca269770745624b061c4972015d6eabf1b3e93c"}]}, 0x1330}}, 0x4040000) (async)
syz_emit_ethernet(0xf6, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa81004a6aa45db6898ffb19b12ec24c0088470000000000000000000f0f000000000000000000010157995316d753cc6b942bbdb588f84f9296ddd7b90c10bcdb73b6e51c6bc5fbded832a700000000000000c3be62589fb8c2232fe16046d1cc744ffae1b3009664b819b69c6055ab2403c76794c89906758f0f3f1c9f316ade9c989e0342471f8adfe7fbbf89c48ff8440f7a06caadc24ae012948f74a08a86b9794e7c3864107dab75d1d376f2421ffbb912830d8e6f87bd4ef9dd8cf83c92a41f7a43ebc5ae7aaa2c6b165fcf4e113536321b047f49fcc75bf2eae5b4e6d02ad7017b6ec1a4827364"], &(0x7f00000004c0)={0x0, 0x4, [0xcd0, 0x814, 0xad7, 0xc84]})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="98000000000101040000000000000000020000000c0018800800024000000ea0240001801400018008000100e000000108000200e00000010c00028005000100000000005400188008000140000000fd070002"], 0x98}, 0x1, 0x0, 0x0, 0x2408c843}, 0x0)
r12 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000080)={{r12}, 0x101, 0x7fffffffffffffff, 0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)

4.271516091s ago: executing program 1 (id=9860):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000a00)=0xf42, 0x4)
readv(r0, &(0x7f0000000a40)=[{&(0x7f0000000a80)=""/10, 0xa}, {0x0}], 0x2)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa4000000000000070400000080ffff740200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007e95000000000000db54c6e5f10000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$xdp(0x2c, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newqdisc={0xfc, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xfff2, 0xfffb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xcc, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_REORDER={0xc, 0x3, {0xa, 0x5}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_LOSS={0x70, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x2, 0x1, 0x45, 0xf19e, 0xc7}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9, 0x1ff, 0x80, 0x1}}, @NETEM_LOSS_GE={0x14, 0x2, {0xf39a, 0xfffffff7, 0x0, 0xf}}, @NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x7fffffff, 0x9, 0x4}}, @NETEM_LOSS_GI={0x18, 0x1, {0xce, 0x3, 0x3, 0x749, 0x81}}]}, @TCA_NETEM_DELAY_DIST={0xf, 0x2, "9b127ef7a59a359bde907c"}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x8}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x5ee}]}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x42000, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000600)={'pim6reg1\x00', 0x2})
ioctl$TUNSETLINK(r5, 0x400454cd, 0x339)
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@newqdisc={0x14c, 0x24, 0x200, 0x70bd2c, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x1, 0xb}, {0xc, 0x8}}, [@TCA_STAB={0x128, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x80, 0x1, 0x40, 0x1, 0x30, 0xff, 0x4}}, {0xc, 0x2, [0x1, 0x3, 0x6, 0x8]}}, {{0x1c, 0x1, {0xff, 0x7, 0xd, 0xdce, 0x0, 0x663, 0x828, 0x5}}, {0xe, 0x2, [0x0, 0x9, 0x4, 0x2, 0x6]}}, {{0x1c, 0x1, {0x7, 0x9, 0xd1, 0x1, 0x0, 0x1, 0xc00, 0x8}}, {0x14, 0x2, [0x2, 0x8, 0xfff7, 0x1, 0x401, 0x6, 0x6, 0x7]}}, {{0x1c, 0x1, {0x5, 0x7, 0xb24, 0xd4, 0x1, 0x94, 0x8, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x5, 0x22, 0x9, 0x7fffffff, 0x0, 0x7f, 0x40, 0x8}}, {0x14, 0x2, [0xff, 0xa, 0x8, 0x5, 0x7, 0x8, 0x3ff, 0x8]}}, {{0x1c, 0x1, {0x7f, 0xa, 0x2, 0x401, 0x2, 0x5, 0x2, 0x3}}, {0xa, 0x2, [0x4, 0x7, 0x5]}}, {{0x1c, 0x1, {0x2, 0x2, 0x6, 0x3, 0x1, 0x2, 0x30, 0x2}}, {0x8, 0x2, [0x4, 0x7]}}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x4, 0x4, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20)
r7 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000001d40), r7)
r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000740), r9)
ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000780)=<r11=>0x0)
sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054)
write$nci(r8, &(0x7f0000000940)=ANY=[@ANYBLOB='p\x00\t'], 0xc)
write$nci(r8, &(0x7f0000000980)=ANY=[@ANYBLOB="400104"], 0x14)
r12 = socket(0x1e, 0x4, 0x0)
write$nci(r8, &(0x7f00000009c0)=ANY=[@ANYBLOB="5001", @ANYRES8=r9, @ANYRES16=r12], 0x14)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r9)
getsockname$packet(r7, &(0x7f0000001d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001dc0)=0x14)
bind$xdp(r2, &(0x7f0000001e00)={0x2c, 0xd, r4, 0x14, r7}, 0x10)

4.140070221s ago: executing program 5 (id=9861):
r0 = socket$netlink(0x10, 0x3, 0x4)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f00000000c0), 0x10)
sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x41}, 0x4000000)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, @isdn={0x22, 0x1, 0x0, 0x9, 0x7}, @vsock={0x28, 0x0, 0x2710, @host}, @xdp={0x2c, 0x8, r2, 0x36}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0xae9e, 0x1c0000000000, 0x9})
socket$nl_rdma(0x10, 0x3, 0x14)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x28000600)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r4}, 0xc)
bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x30, 0x40, 0x107, 0x70bd27, 0xfffffdfe, {0x4, 0x7c}, [@nested={0x4, 0x90}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x11, 0x6, 0x0, 0x0, @str='\x80\xb3\xb4\xc6\x92Y\xa6\xe6\xf6\x8c=\x01\n'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc)

4.12462727s ago: executing program 6 (id=9862):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYBLOB="300000001900010000000000000000008020900000111405"], 0x30}}, 0xc0114)

3.830445308s ago: executing program 6 (id=9863):
r0 = socket$netlink(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1ffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0x4, 0x3ff, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x5, r1}, 0x38)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f00000002c0)}, 0x20)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0xa}]}}}]}, 0x3c}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x1ffffffffffffdf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x8, 0x4, 0x3ff, 0x1, 0xffffffffffffffff, 0x6da443c8}, 0x50) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x5, r1}, 0x38) (async)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f00000002c0)}, 0x20) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0xa}]}}}]}, 0x3c}}, 0x0) (async)

2.314623089s ago: executing program 6 (id=9864):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000180)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0x40, 0x0, 0x5}, @exit], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
unshare(0x0)

2.313664115s ago: executing program 5 (id=9865):
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x18}]}}]}, 0x40}}, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40)
sendmsg$key(0xffffffffffffffff, &(0x7f00000006c0)={0x40000000, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013"], 0x80}}, 0x0)
sendmmsg(r2, &(0x7f0000000780), 0x400008a, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000380)={0x0, <r3=>0xffffffffffffffff}, &(0x7f00000003c0)=0xc)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000480)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f00000004c0)={0x1, [<r6=>0x0]}, &(0x7f0000000500)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000540)={0x2d01, 0x2, 0x2, 0x1, r6}, 0x10)
getsockopt$inet_sctp6_SCTP_AUTH_SUPPORTED(r3, 0x84, 0x81, &(0x7f0000000580)={r6, 0x80000000}, &(0x7f00000005c0)=0x8)
r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="180000008c002000000000000400000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0920000000000055090100000000009500000000000000dd99ffff00000000bf91000000000000b702000003000000850000002a000000b700d59b81b6b223a245000000000000a23dfd45332c689e7ee2a0d1c535ff"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8ff}, 0x94)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b001c006272b869646765000014000280080002000101ffea08000300000000"], 0x44}}, 0x0)

2.278074535s ago: executing program 3 (id=9866):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) (async)
bind$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10)
bind$tipc(r1, 0x0, 0x0) (async)
bind$tipc(r1, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @mcast2}]}]}, 0xcc}}, 0x0)

2.227532443s ago: executing program 6 (id=9867):
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x12, 0xff, 0x0, @empty}}}}}, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$tun(r0, &(0x7f0000000080)={@val={0x0, 0x2}, @val={0x3, 0x4, 0x9, 0x1, 0x7dfe, 0x8}, @llc={@llc={0xe, 0xf4, "3bed", "76187d02703f9702c071230932d89ed1a4f05c03ceb16300c36a7a5afc97dd7927456d838fa9242d3f233e294e73c2888a466e9d51b379f1d655cd868c5f02987cbf76a93e46858cb26edef2f8a82799f3a3cade56b3f32e9b5ffb1e40c3db60695b6039ab6c9abedaae2df058a708441885f1d2bd4f464b0a"}}}, 0x8b)

2.080597853s ago: executing program 3 (id=9869):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1, 0xfffffffb}}, 0x10)
bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x2, 0x80000004}}, 0x10)
bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$int_in(r4, 0x5452, &(0x7f0000000480)=0x8000000ffffffff)
pipe(&(0x7f00000004c0)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r4, 0x0, r7, 0x0, 0x7, 0x0)
shutdown(r5, 0x1)
r8 = socket(0x11, 0x3, 0x0)
sendto$x25(r6, &(0x7f0000000500)="db79bb63773a40f7df8e0ae81464eea1e6d6759f469003b1e099b1165e5a38c252b7ea901a4bee9d3bea7608d33c6ebc078a9a9bba685fee3b54d469e54069b0a78e61ca17a5e13a5454076431d9ce58e71fed077e4c3e2bbdf707db14208d0fbb8cdc2325b8b7a1bf4f91435a8d13f10222ed8871a13fb78501088c4671bc53ed90cce04fd13a5a6726f691a90bcf4fb0fd47e522a1c8fa3ed234b75f66", 0x9e, 0x4410, &(0x7f00000005c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}}, 0x12)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000300)=@ethtool_gstrings={0x1b, 0x5, 0x4, "d26db4ef"}})
pwrite64(r3, 0x0, 0x0, 0x0)
bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4002}, 0x2}}, 0x10)
bind$tipc(r1, 0x0, 0x0)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x6, &(0x7f0000000740)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x49}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000780)='GPL\x00', 0x4, 0xc3, &(0x7f00000007c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70)
r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), r6)
sendmsg$TIPC_CMD_GET_NODES(r11, &(0x7f0000000980)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x1c, r12, 0x1, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4054}, 0x40000)
sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)={0x44, r10, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x44008010)
getpeername$l2tp6(r8, &(0x7f00000009c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000a00)=0x20)
syz_genetlink_get_family_id$nfc(0x0, r9)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600810000000c0003000800170004"]}, 0x58}}, 0x0)

2.064647344s ago: executing program 6 (id=9870):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x28}}, 0x40)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x50, r4, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}}, 0x20000400)

1.688196886s ago: executing program 0 (id=9872):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f00000001c0), 0x10)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x1c}}, 0x20000000)

1.575824891s ago: executing program 0 (id=9873):
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x8, 0xd}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1e, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000100000000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf090000000000005509010000000080950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000056732200b704000002000000850000008200000018a53c8bf94d176d82523a7d9b2c7a91332696c8b8fe0c0b9c3f9022bc9a9075fa67720c42d7b264839499952110dc2b88b8d63662c70f0b4a6c9291a2ff34f9ecbad5cfc78fea61c5c06821d036cfef8054e45c1fda0d08a5c01241d8976d416de868e4b7a192421a85ce6618741e100416fcc86597a48855b7c2711c9530dc5710880f11d287721da7cb4a31c3247a1da427b681d3deeaea65c3604d082d664448dd5fbcc779728a5319e3a1f313113c2743d55a19c596e461cb75009d", @ANYRES32=r0, @ANYBLOB="0000000000000000bf91000000000000b702000001000000850000002a000000b7000000000500009500000000000000"], &(0x7f00000003c0)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)

1.419906123s ago: executing program 0 (id=9874):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='syzkaller\x00'}, 0x48)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe000001000000000a00120002"], 0x30}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r1, 0x2e0, 0x20, 0x0, &(0x7f0000001680)="b9ff0b078059268cb89e14f088a82de0ffff200000000087000aac14140ce000", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r3)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x38, r4, 0x401, 0x70bd2c, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x30002001}, 0x8000)
r5 = socket$kcm(0x11, 0x2, 0x300)
setsockopt$sock_attach_bpf(r5, 0x1, 0x28, &(0x7f00000016c0), 0x4)
recvmsg(r5, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000001000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000740)={r6}, 0xc)

1.330424491s ago: executing program 5 (id=9875):
r0 = socket(0xa, 0x3, 0xff)
sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x6, 0x3, @mcast2, 0x100000}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000100)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08)
bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1d)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6)

1.159215955s ago: executing program 5 (id=9876):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = epoll_create(0x7) (async)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x80000018}) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000640)={'veth1_macvtap\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newlink={0x48, 0x10, 0x401, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) (async, rerun: 32)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 32)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r6, 0x400, 0x70bd2b, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c801}, 0x0) (async)
sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, r6, 0x0, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "1f3418ea8a52f3cc86981cfd5a203f42"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x13}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}]}, 0x50}}, 0x10008851) (async, rerun: 64)
r9 = epoll_create(0x7) (async, rerun: 64)
r10 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000100)={0x20002000})
epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r1, &(0x7f0000000140))
r11 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000180)={0x60000000}) (async)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r11, &(0x7f00000001c0)={0x1008}) (async, rerun: 64)
r12 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000500)={'lo\x00', <r13=>0x0}) (async)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (async)
r15 = socket(0x11, 0x2, 0x0)
bind$packet(r15, &(0x7f0000000540)={0x11, 0x0, r13, 0x1, 0x6, 0x6, @multicast}, 0x14)
sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, r6, 0x400, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x2, 0x3b}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4008080}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r15, 0x89f3, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000580)={'ip6_vti0\x00', r5, 0x2f, 0x9, 0xd, 0x10001, 0x0, @private1, @remote, 0x7800, 0x700, 0x8001, 0x9a48}}) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68520, 0x10044}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x40008000}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e21}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}, @IFLA_MASTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000080}, 0x4040)

1.023845579s ago: executing program 6 (id=9877):
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0) (async)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time\x00', 0x0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101})
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
socket$unix(0x1, 0x1, 0x0) (async)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', <r7=>0x0})
r8 = socket$netlink(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FD_TO_HANDLE(r8, 0xc038586a, &(0x7f0000001780)={r8, &(0x7f0000001680)='@\x00', 0x40, &(0x7f00000016c0)={@align=0x4, {0xe, 0x0, 0x7, 0x3}}, 0x47, &(0x7f0000001700)={@_ha_fsid}, &(0x7f0000001740)=0x9})
sendmsg$nl_route_sched(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x4, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004)
recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/51, 0x33}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}, 0x7}], 0x1, 0x10022, 0x0) (async)
recvmmsg(r8, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/51, 0x33}, {&(0x7f0000000680)=""/4096, 0x1000}], 0x2}, 0x7}], 0x1, 0x10022, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x1, [<r9=>0x0]}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={r9, 0xc9, 0x2, 0x4, 0x1000, 0x0, 0x1, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x7, @local, 0x4fe9}}, 0x3dd, 0xfffffffc, 0x8001, 0x5, 0xffffffff}}, &(0x7f00000001c0)=0xb0) (async)
getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000100)={r9, 0xc9, 0x2, 0x4, 0x1000, 0x0, 0x1, 0x5, {0x0, @in6={{0xa, 0x4e23, 0x7, @local, 0x4fe9}}, 0x3dd, 0xfffffffc, 0x8001, 0x5, 0xffffffff}}, &(0x7f00000001c0)=0xb0)
setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={r9, 0x4, 0x3, 0x9}, 0x10)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, &(0x7f0000001d80)=""/183, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r10}, 0x38)

1.013345235s ago: executing program 0 (id=9878):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x1c, &(0x7f0000000200)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xa1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000016c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, @NFT_OBJECT_LIMIT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x20040050}, 0x4010)

1.000525846s ago: executing program 3 (id=9879):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0a000000070000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d40)={{r0}, &(0x7f0000000d80), &(0x7f0000000dc0), 0x1000000}, 0x20) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="736563757269747900000000000023000000000000000000000000000000000002"], 0x48) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x95257ce3e5539c1a}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000880)={'ip6tnl0\x00', <r5=>0x0})
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x3a8, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x65, 0x2, 0x3, 0x17, 0xd, 0x8, 0x2}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x3a8}}, 0x0) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f0000000040)=0xc)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={<r7=>0x1, 0x5, 0x10, 0x5, 0x9}, &(0x7f00000000c0)=0x18)
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$sock_timeval(r9, 0x1, 0x15, 0x0, &(0x7f0000000840)) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0x17, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090000036703e716000000036703e7180100002020702500000000002020207b9af8ff000000007e9000000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000180)={r7, 0x3}, &(0x7f0000000e00)=0x8) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r10=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@struct={0x10, 0x6, 0x0, 0x4, 0x0, 0x868, [{0xd, 0x0, 0xb}, {0xb, 0x3, 0xeb8}, {0x2, 0x5}, {0xa, 0x0, 0x1}, {0x5, 0x4, 0x9}, {0x1, 0x2, 0x4}]}]}, {0x0, [0x2e, 0x5f, 0x61, 0x30]}}, &(0x7f0000000700)=""/241, 0x72, 0xf1, 0x0, 0x7}, 0x28)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r10, 0x80, 0x7f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0xfffd}, 0x4040004)

726.600502ms ago: executing program 1 (id=9880):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x15, 0x0, 0x12, 0x24}, {0x1, 0x2, 0x29, 0xfffffff6}]}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x44)
socket$netlink(0x10, 0x3, 0x0) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async)
getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async)
socket$inet_udp(0x2, 0x2, 0x0) (async)
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000180)=[{0x15, 0x0, 0x12, 0x24}, {0x1, 0x2, 0x29, 0xfffffff6}]}, 0x10) (async)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x11, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x823be637d8173150}, 0x40000c0) (async)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8, 0x1, 0x3}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x44) (async)

716.007624ms ago: executing program 0 (id=9881):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0xe, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)='syzkaller\x00'}, 0x48)
close(0x3)
bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x4, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000001ec0)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001f00)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000001f80)="b9ff03076883268cb89e14f008004be0ffff00124000638777fbacf01416ac141416440c05114d2f87e5940c05ab441813f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000002080), &(0x7f00000020c0)}, 0x2c)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000340)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x10, &(0x7f0000002080)=ANY=[@ANYBLOB="bf16000000000000b7070000000000007b7af0ff000000007b7af8ff00000000bf61000000000000bfa200000000000007020000f0ffffffb70300000c000000b704000000000000b70500000000efff85000000630000001500faff00000000bf010000000000008500000056000000b70000000200100095"], &(0x7f0000002100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r5=>0x0})
read(r4, &(0x7f0000002e00)=""/90, 0x5a)
bind$can_j1939(r4, &(0x7f0000002e80)={0x1d, r5, 0x0, {0x2, 0xf0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000002ec0)=0x1, 0x4)
sendmmsg(r4, &(0x7f0000002f00)=[{{0x0, 0xfffffffffffffd0f, &(0x7f0000002f40)=[{&(0x7f0000002f80)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041)
r6 = socket$packet(0x11, 0x2, 0x300)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000022c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000002140)=""/180, 0xb4, 0x1, &(0x7f0000002200)=""/184, 0xb8}, &(0x7f0000002300)=0x40)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
r10 = bpf$MAP_CREATE(0x0, &(0x7f0000002b00)=@base={0x11, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000002b80)=@arena={0x21, 0x0, 0x0, 0x15, 0x40000, 0x1, 0x9, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x1, 0xd, &(0x7f0000002cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000061180000000000007a0af8ff009a670018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff8500000001000000950000000000"], &(0x7f0000002d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002d80)=r12, 0x4)
sendmsg$inet(r9, &(0x7f0000002dc0)={0x0, 0x0, 0x0}, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000580)=r13, 0x4)
r14 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r14, 0x29, 0x40, &(0x7f0000002340)=@mangle={'mangle\x00', 0x2, 0x6, 0x758, 0x5a0, 0x3d0, 0x3d0, 0x5a0, 0xd0, 0x688, 0x688, 0x688, 0x688, 0x688, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @local}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x4, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0xff, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0xfffffffe, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7b8)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0xc, 0xfff2}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x400000}, @TCA_CAKE_FWMARK={0x8}]}}]}, 0x44}}, 0x0)

232.306421ms ago: executing program 3 (id=9882):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000010000104000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="24200400858d0000340012800e00010069703665727370616e000000200002800500160022000000040012"], 0x5c}, 0x1, 0x30, 0x0, 0x48001}, 0x0)

159.063598ms ago: executing program 0 (id=9883):
r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r1=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000500)={"3d4874b36b7badc2a29198b51816addd", 0x0, r1, {0xb3, 0x9b}, {0x2, 0x4}, 0xfff, [0x10000, 0x8, 0x7f, 0x6, 0x9, 0x9037, 0x80000001, 0x4, 0x7, 0x58e0, 0x7, 0x8, 0xe59c, 0x4, 0x5, 0x7fffffffffffffff]})
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001800000000000000800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000945eb94b1a7b55555fb4f79a040000000000b5000400100000001801000020646c2500000000002020071e3eb1b8fbfe699000bfa14be20d3abb563ba25400000000000007010000f8ffffffb702000008000000b7030000050008008500000006000000bf91000000000000b702000003000000850000002a000000b7000000f0ff00"/185], &(0x7f0000000cc0)='GPL\x00', 0x6, 0x1001, &(0x7f0000001000)=""/4097, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3e}, 0x94)

52.739801ms ago: executing program 3 (id=9884):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl(r0, 0x5, &(0x7f0000000380)="97963085d3ff910e88855c2d2e693d6a68a9400ee842a1657022b750f15ade7eabb2712d1382171f9994626b07dc42fd3e2556cc71c1052874a1970c4223cb12f715b8ae13a70c2aeda4b577dfafdc592ac9")
r1 = socket$inet6(0xa, 0x2, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x1f, 0x0, 0x0, 0x2, 0x700}, 0x50)
socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x8000, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0xf0, &(0x7f0000000280)={@local, @empty, @void, {@x25={0x805, {0x2, 0x6, 0xb, "a6a10b460e72c936db374a8ee451f412d598ac57651884425ff3348379fd0bd84ce723522b86d9c65c6e42ab86724595dfbf741c1093c70de170da3e7c0e344a37cfec5715e04c0fabd385a6b3f579e8bcda74bffe1b52924718d94e55e3b265c6510db4a0839b70cf72ed571fa0504fc66443d87d563b0d32245b97ce94a832961919fb0e897bc163ebba7fdff16d904710681d7eb4871988d3ccee372a1cd22f9ff4e6fb1d679b42521f7dcf0cc052450bdc1f9a3bcd4b5ca9537b91acec0b49b0d9c041b1570c7951dea48919ebd349f7fffc96cad49cb69d04f463e3b2"}}}}, 0x0)
recvmmsg(r1, &(0x7f00000001c0), 0x400000000000284, 0x2, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newsa={0xfc, 0x10, 0x401, 0x0, 0x0, {{@in6=@loopback, @in=@broadcast, 0x1234, 0xffff, 0x0, 0x0, 0xa, 0x80, 0x80, 0xff}, {@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d2, 0x2b}, @in6=@rand_addr=' \x01\x00', {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffdfff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x3, 0xa, 0x0, 0xfc, 0x16}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0xa}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0xb4, 0x31, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0xa0, 0x16, 0x0, 0x1, [@typed={0x9c, 0xfc, 0x0, 0x0, @binary="e6c430d741f79839acf33d3a9be06614bffc50ab29d8d7d5fd3584aacba4f844dadcd6180d9d5395392a9c9e2f97a3c9117ccba1b4506e22c2ece32db134366800bf6e305f6666d73155a83eb3cb64fbd6585619d9f3c8a186a31d7717a65e6910eff490b8dadebc8297f7148360a5c114923f72f373fc2dda64654cae479bdb087e93a60cdd9bd6ab158b64d2d65950efa6d6e297578452"}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

0s ago: executing program 1 (id=9885):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff})
getsockopt$inet_sctp_SCTP_EXPOSE_POTENTIALLY_FAILED_STATE(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000080)={<r1=>0x0, 0x2}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000100)={r1, 0x100, 0x75, "3d3cd17901c0da2cbec6df8d8294cbf87c0a4d2935c0a810ca4f1943a9f0ae2ae4417bd3228311531d53de6d34bd6b8e433ce9c60b247efc2c1b8e35f89b5c4cd810531cc434fbffea96ad4d8add2257f2f5b1536f4c7f8e28553fb69f08cb5f94fd84c2a8f394a8e232bb73181b027c37677b0180"}, 0x7d)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x17, &(0x7f0000000300)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$kcm(0x2, 0xa, 0x2)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0)
write$tun(r4, &(0x7f0000000600)=ANY=[], 0x342)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000200)={'sit0\x00', 0x0})
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x104a8)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
sendto(r3, 0x0, 0xfdd3, 0x468fd, &(0x7f00000004c0)=@l2={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x94}, 0x9}, 0x80)

kernel console output (not intermixed with test programs):

after parsing attributes in process `syz.2.8724'.
[ 1412.575972][T13478] tls_set_device_offload: netdev not found
[ 1412.781860][T13486] veth0: entered promiscuous mode
[ 1413.569492][T13483] veth0: left promiscuous mode
[ 1413.652375][T13511] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8736'.
[ 1414.550911][T13541] netlink: 7280 bytes leftover after parsing attributes in process `syz.2.8742'.
[ 1415.385744][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1417.228831][T13530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1417.453864][T13575] netlink: 'syz.5.8748': attribute type 1 has an invalid length.
[ 1417.542822][T13575] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1417.603155][T13585] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8750'.
[ 1417.626788][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8750'.
[ 1417.626809][T13584] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8750'.
[ 1417.665533][T13579] bond6: (slave ip6gretap3): making interface the new active one
[ 1417.666415][T13579] bond6: (slave ip6gretap3): Enslaving as an active interface with an up link
[ 1417.945653][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1417.953891][T13601] syz_tun: left allmulticast mode
[ 1417.954018][T13601] pimreg: left allmulticast mode
[ 1418.086680][T13606] tipc: Started in network mode
[ 1418.086712][T13606] tipc: Node identity fec00000000040590100000000000001, cluster identity 4711
[ 1418.086766][T13606] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[ 1418.341337][T13613] netlink: 'syz.5.8757': attribute type 1 has an invalid length.
[ 1418.497416][T13613] bond7: entered promiscuous mode
[ 1418.498024][T13613] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1418.643210][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8759'.
[ 1418.687379][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8759'.
[ 1418.771211][T13630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8761'.
[ 1418.849148][T13615] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1418.849563][T13615] bond7: (slave gre2): The slave device specified does not support setting the MAC address
[ 1418.849585][T13615] bond7: (slave gre2): Setting fail_over_mac to active for active-backup mode
[ 1418.850630][T13615] bond7: (slave gre2): Opening slave failed
[ 1419.064393][T13635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8762'.
[ 1419.123415][T13641] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8762'.
[ 1419.550290][T13664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8769'.
[ 1419.672345][T13654] rxe_eth0 speed is unknown, defaulting to 1000
[ 1419.672411][T13665] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8768'.
[ 1420.001363][T13679] netlink: 'syz.2.8773': attribute type 1 has an invalid length.
[ 1420.289428][T13687] syzkaller1: entered promiscuous mode
[ 1420.289454][T13687] syzkaller1: entered allmulticast mode
[ 1420.293420][T13648] rxe_eth0 speed is unknown, defaulting to 1000
[ 1420.331128][T13687] ip_tables: iptables: counters copy to user failed while replacing table
[ 1420.670337][T13693] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) !
[ 1421.390612][T13713] rxe_eth0 speed is unknown, defaulting to 1000
[ 1421.567047][T13654] lo speed is unknown, defaulting to 1000
[ 1421.950675][T13729] x_tables: duplicate underflow at hook 1
[ 1422.807491][T13648] lo speed is unknown, defaulting to 1000
[ 1423.511545][T13713] lo speed is unknown, defaulting to 1000
[ 1423.541446][T13759] __nla_validate_parse: 6 callbacks suppressed
[ 1423.541463][T13759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8789'.
[ 1423.991675][T13766] netlink: 'syz.1.8791': attribute type 1 has an invalid length.
[ 1423.991999][T13769] netlink: 'syz.1.8791': attribute type 1 has an invalid length.
[ 1424.281350][T13764] rxe_eth0 speed is unknown, defaulting to 1000
[ 1424.689610][T13787] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1425.056926][T13793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8798'.
[ 1425.181333][T13793] syzkalle: left allmulticast mode
[ 1425.181362][T13793] syzkalle: left promiscuous mode
[ 1425.181591][T13793] bridge0: port 1(syzkalle) entered disabled state
[ 1425.385152][T13793] bridge_slave_1: left allmulticast mode
[ 1425.385181][T13793] bridge_slave_1: left promiscuous mode
[ 1425.399880][T13793] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1425.674388][T13793] bond1: (slave veth0_to_bond): Releasing active interface
[ 1425.674418][T13793] veth0_to_bond: left promiscuous mode
[ 1425.674595][T13793] veth0_to_bond: left allmulticast mode
[ 1425.741934][T13793] bond0: (slave bond_slave_0): Releasing backup interface
[ 1425.772178][T13793] bond0: (slave bond_slave_1): Releasing backup interface
[ 1425.818084][T13793] team0: Port device team_slave_0 removed
[ 1425.841897][T13793] team0: Port device team_slave_1 removed
[ 1425.848068][T13793] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1425.848134][T13793] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1425.873855][T13795] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1425.889032][T13793] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1425.889061][T13793] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1425.921102][T13793] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1426.087775][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8799'.
[ 1426.338673][T13764] lo speed is unknown, defaulting to 1000
[ 1427.194462][T13810] netlink: 'syz.2.8803': attribute type 10 has an invalid length.
[ 1428.298662][T13834] syzkaller0: entered promiscuous mode
[ 1428.298687][T13834] syzkaller0: entered allmulticast mode
[ 1428.737710][T13840] netlink: 'syz.3.8811': attribute type 1 has an invalid length.
[ 1428.853890][T13852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8811'.
[ 1429.088752][T13855] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1429.088779][T13855] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1429.227624][T13855] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1429.227651][T13855] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1429.297134][T13855] batman_adv: batadv0: Removing interface: vlan1
[ 1429.900154][T13865] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) !
[ 1430.753701][T13885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8821'.
[ 1430.896414][T13892] netlink: 'syz.2.8822': attribute type 1 has an invalid length.
[ 1430.896447][T13892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8822'.
[ 1431.056964][T13893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8822'.
[ 1431.354292][T13894] bond17: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1431.390941][T13894] bond17 (unregistering): Released all slaves
[ 1431.576827][T13912] xt_hashlimit: max too large, truncated to 1048576
[ 1431.923078][T13922] 
: renamed from ip6gre0 (while UP)
[ 1432.263213][T13937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8828'.
[ 1432.490614][T13943] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16)
[ 1432.510925][T30165] IPVS: starting estimator thread 0...
[ 1432.515102][T13943] netlink: 'syz.2.8833': attribute type 1 has an invalid length.
[ 1432.597425][T13943] bond3: (slave geneve0): making interface the new active one
[ 1432.601458][T13944] IPVS: using max 33 ests per chain, 79200 per kthread
[ 1432.607492][T13943] bond3: (slave geneve0): Enslaving as an active interface with an up link
[ 1432.609536][T30165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0
[ 1432.609940][T30165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0
[ 1432.610051][T30165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0
[ 1432.610087][T30165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0
[ 1432.949446][T13961] bond14: (slave veth0_to_bond): Releasing active interface
[ 1432.971627][T13961] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1432.981163][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8842'.
[ 1433.060013][T13961] team0: Device xfrm0 is of different type
[ 1433.192673][T13969] tipc: Enabled bearer <eth:team0>, priority 0
[ 1433.293697][T13976] netlink: 52 bytes leftover after parsing attributes in process `syz.5.8846'.
[ 1433.453288][T13981] netlink: 'syz.3.8845': attribute type 27 has an invalid length.
[ 1433.586216][T13981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8845'.
[ 1433.764376][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8847'.
[ 1433.881844][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8851'.
[ 1433.932138][T13998] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8851'.
[ 1433.946890][T13999] pim6reg: left allmulticast mode
[ 1435.781833][T14080] netlink: 'syz.5.8863': attribute type 1 has an invalid length.
[ 1435.913872][T14083] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8863'.
[ 1435.961971][T14080] bond8: entered promiscuous mode
[ 1435.970682][T14080] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1435.972005][T14083] bond8: entered allmulticast mode
[ 1436.290533][T14099] nbd: illegal input index -228072287
[ 1436.922838][T14122] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20001
[ 1436.936979][T14125] netlink: 964 bytes leftover after parsing attributes in process `syz.3.8875'.
[ 1437.424669][T14152] ip_tables: iptables: counters copy to user failed while replacing table
[ 1437.548733][T14152] netlink: 'syz.0.8877': attribute type 16 has an invalid length.
[ 1437.548757][T14152] netlink: 'syz.0.8877': attribute type 17 has an invalid length.
[ 1437.659721][T14152] sit0: left promiscuous mode
[ 1437.685878][T14152] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1437.688199][T14152] 8021q: adding VLAN 0 to HW filter on device team0
[ 1437.688713][T14152] tipc: Resetting bearer <eth:team0>
[ 1437.688989][T14152] tipc: Resetting bearer <eth:team0>
[ 1437.892116][T14152] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1437.892145][T14152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1437.922279][T14152] veth1_vlan: left promiscuous mode
[ 1437.923682][T14152] veth0_vlan: left promiscuous mode
[ 1437.938490][T14152] veth0_vlan: entered promiscuous mode
[ 1437.941301][T14152] veth1_vlan: entered promiscuous mode
[ 1437.961854][T14152] veth1_macvtap: left promiscuous mode
[ 1437.963059][T14152] veth1_macvtap: entered promiscuous mode
[ 1437.968606][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8881'.
[ 1437.989268][T14152] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1437.990014][T14152] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1437.992273][T14152] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1438.001459][T14152] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1438.032427][T14168] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8881'.
[ 1438.332650][T14152] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1438.344322][T14152] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1438.359385][T14152] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1438.361689][T14152] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1438.384824][T14152] bond9: left promiscuous mode
[ 1438.384841][T14152] wireguard0: left promiscuous mode
[ 1438.385082][T14152] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1438.434634][T14152] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1438.440134][T14152] syzkaller0: left promiscuous mode
[ 1438.440177][T14152] syzkaller0: left allmulticast mode
[ 1438.502615][T14152] 8021q: adding VLAN 0 to HW filter on device eth0
[ 1438.517008][T14152] 8021q: adding VLAN 0 to HW filter on device eth1
[ 1438.520596][T14152] 8021q: adding VLAN 0 to HW filter on device eth2
[ 1438.524079][T14152] 8021q: adding VLAN 0 to HW filter on device eth3
[ 1438.569375][T14152] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1438.572759][T14152] 8021q: adding VLAN 0 to HW filter on device bond12
[ 1438.574786][T14152] bond13: left promiscuous mode
[ 1438.574814][T14152] bond13: left allmulticast mode
[ 1438.585413][T14152] 8021q: adding VLAN 0 to HW filter on device bond13
[ 1438.653318][T14156] team0: left allmulticast mode
[ 1438.653335][T14156] team_slave_0: left allmulticast mode
[ 1438.653345][T14156] team_slave_1: left allmulticast mode
[ 1438.653391][T14156] team0: left promiscuous mode
[ 1438.653399][T14156] team_slave_0: left promiscuous mode
[ 1438.653516][T14156] team_slave_1: left promiscuous mode
[ 1438.654089][T14156] bridge0: port 1(team0) entered disabled state
[ 1438.665311][T14156] veth1_to_bridge: left allmulticast mode
[ 1438.665339][T14156] veth1_to_bridge: left promiscuous mode
[ 1438.665550][T14156] bridge0: port 2(veth1_to_bridge) entered disabled state
[ 1438.684554][T14156] bond6: (slave veth0_to_bond): Releasing active interface
[ 1438.707062][T14156] bond0: (slave bond_slave_0): Releasing backup interface
[ 1438.743076][T14156] bond0: (slave bond_slave_1): Releasing backup interface
[ 1438.787568][T14156] team0: Port device team_slave_0 removed
[ 1438.814770][T14156] team0: Port device team_slave_1 removed
[ 1438.837862][T14156] team0: Port device bridge2 removed
[ 1438.895865][ T5651] Bluetooth: hci2: link tx timeout
[ 1438.895893][ T5651] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1439.151061][T14183] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[ 1439.153235][T23024] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 256 - 0
[ 1439.153255][T23024] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 60387 - 0
[ 1439.153269][T23024] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1439.153282][T23024] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[ 1439.153303][T23024] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 256 - 0
[ 1439.153315][T23024] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 60387 - 0
[ 1439.153328][T23024] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1439.153340][T23024] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[ 1439.153359][T23024] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 256 - 0
[ 1439.153371][T23024] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 60387 - 0
[ 1439.153384][T23024] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1439.153396][T23024] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[ 1439.169378][T30167] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1439.169603][T30167] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1439.195754][T14186] netlink: 'syz.1.8883': attribute type 3 has an invalid length.
[ 1439.195777][T14186] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8883'.
[ 1439.204834][ T5565] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1439.242331][T30165] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 256 - 0
[ 1439.242363][T30165] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 60387 - 0
[ 1439.242388][T30165] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1439.242412][T30165] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[ 1439.243926][T30165] bond8: (slave veth5): link status definitely up, 10000 Mbps full duplex
[ 1439.247230][T30165] bond8: (slave veth5): making interface the new active one
[ 1439.253597][ T5565] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1439.446924][T30165] bond8: active interface up!
[ 1439.516926][T30176] bond5: (slave veth3): link status definitely up, 10000 Mbps full duplex
[ 1439.517232][T30176] bond5: (slave veth3): making interface the new active one
[ 1439.558424][T30176] bond5: active interface up!
[ 1439.612732][T14206] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8885'.
[ 1439.615242][T22379] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1440.114317][T14219] ip_tables: iptables: counters copy to user failed while replacing table
[ 1440.337365][T14231] netlink: 'syz.1.8888': attribute type 1 has an invalid length.
[ 1440.337390][T14231] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8888'.
[ 1440.747081][T14243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8892'.
[ 1440.993164][ T4953] Bluetooth: hci2: command 0x0406 tx timeout
[ 1441.124883][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8894'.
[ 1441.124920][T14251] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[ 1441.257008][T14254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8895'.
[ 1441.257041][T14254] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8895'.
[ 1441.258109][T14254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8895'.
[ 1441.267953][T14235] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1441.267989][T14235] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[ 1441.268019][T14235] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1441.345536][T14260] hsr0: entered allmulticast mode
[ 1441.345558][T14260] hsr_slave_0: entered allmulticast mode
[ 1441.345576][T14260] hsr_slave_1: entered allmulticast mode
[ 1441.347964][T14251] netlink: 380 bytes leftover after parsing attributes in process `syz.0.8894'.
[ 1441.347984][T14251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8894'.
[ 1441.507429][T14257] bridge8: entered allmulticast mode
[ 1441.513845][T14257] bond17: (slave bridge8): Enslaving as an active interface with an up link
[ 1441.598678][T14269] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1441.659905][T14259] hsr0: left allmulticast mode
[ 1441.659930][T14259] hsr_slave_0: left allmulticast mode
[ 1441.659948][T14259] hsr_slave_1: left allmulticast mode
[ 1441.941382][T14283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1441.962731][T14235] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1441.962771][T14235] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[ 1441.962799][T14235] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.642193][T14300] netlink: 'syz.1.8906': attribute type 4 has an invalid length.
[ 1442.663921][T14235] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1442.663959][T14235] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[ 1442.663994][T14235] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1442.904261][T14307] syzkaller0: left promiscuous mode
[ 1442.904321][T14307] syzkaller0: left allmulticast mode
[ 1443.065548][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1443.184293][T14235] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1443.184334][T14235] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[ 1443.184362][T14235] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1443.489476][T14317] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1443.979131][ T8963] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1443.979168][ T8963] netdevsim netdevsim5 eth2: set [0, 1] type 1 family 0 port 4352 - 0
[ 1443.979193][ T8963] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1443.979634][ T8963] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1443.979666][ T8963] netdevsim netdevsim5 eth3: set [0, 1] type 1 family 0 port 4352 - 0
[ 1443.979690][ T8963] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1443.979724][ T8963] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1443.979749][ T8963] netdevsim netdevsim5 eth0: set [0, 1] type 1 family 0 port 4352 - 0
[ 1443.979773][ T8963] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1443.979806][ T8963] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1443.979830][ T8963] netdevsim netdevsim5 eth1: set [0, 1] type 1 family 0 port 4352 - 0
[ 1443.979855][ T8963] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1444.296746][   T30] audit: type=1107 audit(1793930329.920:54): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.300400][   T30] audit: type=1107 audit(1793930329.920:55): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.300683][   T30] audit: type=1107 audit(1793930329.920:56): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.300946][   T30] audit: type=1107 audit(1793930329.920:57): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.302867][   T30] audit: type=1107 audit(1793930329.920:58): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.303222][   T30] audit: type=1107 audit(1793930329.920:59): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.360676][   T30] audit: type=1107 audit(1793930329.980:60): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.373540][   T30] audit: type=1107 audit(1793930329.980:61): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.373591][   T30] audit: type=1107 audit(1793930329.980:62): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.373650][   T30] audit: type=1107 audit(1793930329.980:63): pid=14334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[ 1444.422038][T14338] netlink: 'syz.0.8916': attribute type 10 has an invalid length.
[ 1444.422059][T14338] __nla_validate_parse: 4 callbacks suppressed
[ 1444.422070][T14338] netlink: 55 bytes leftover after parsing attributes in process `syz.0.8916'.
[ 1444.860292][T14358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8918'.
[ 1445.981044][T14404] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8922'.
[ 1446.303221][T14417] x_tables: unsorted underflow at hook 3
[ 1446.329833][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8931'.
[ 1446.597273][ T4953] Bluetooth: hci2: unexpected event for opcode 0x1009
[ 1446.685511][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8939'.
[ 1447.378691][T14421] 8021q: adding VLAN 0 to HW filter on device 

[ 1447.379587][T14421] 8021q: adding VLAN 0 to HW filter on device team0
[ 1447.379868][T14421] tipc: Resetting bearer <eth:team0>
[ 1447.380044][T14421] dummy0: left promiscuous mode
[ 1447.471950][T14421] batadv_slave_1: left promiscuous mode
[ 1447.488918][T14421] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1447.490224][T14437] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR
[ 1447.526736][T30167] bridge0: port 1(veth0) entered blocking state
[ 1447.526848][T30167] bridge0: port 1(veth0) entered forwarding state
[ 1447.765603][T14464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8948'.
[ 1448.014566][T14479] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8950'.
[ 1448.097828][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8951'.
[ 1448.524694][T14507] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1448.811301][T14513] bond4: Unable to set down delay as MII monitoring is disabled
[ 1448.829924][T14513] bond4 (unregistering): Released all slaves
[ 1448.965448][T14521] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8960'.
[ 1448.989985][T14519] gre3: entered promiscuous mode
[ 1449.872999][T14602] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8967'.
[ 1450.659728][T14662] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8969'.
[ 1450.659761][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8969'.
[ 1450.960242][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8971'.
[ 1451.230112][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1451.814825][T14704] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available
[ 1452.152612][T14718] dvmrp8: entered allmulticast mode
[ 1452.263924][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8984'.
[ 1452.311344][T14728] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8984'.
[ 1452.448417][T14730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8985'.
[ 1452.797091][T14739] sctp: [Deprecated]: syz.5.8989 (pid 14739) Use of int in max_burst socket option deprecated.
[ 1452.797091][T14739] Use struct sctp_assoc_value instead
[ 1453.226873][T14756] bridge0: port 2(batadv0) entered blocking state
[ 1453.226985][T14756] bridge0: port 2(batadv0) entered disabled state
[ 1453.227157][T14756] batadv0: entered allmulticast mode
[ 1453.232681][T14756] batadv0: entered promiscuous mode
[ 1453.276363][T14766] netlink: 'syz.0.8993': attribute type 1 has an invalid length.
[ 1453.276385][T14766] netlink: 'syz.0.8993': attribute type 2 has an invalid length.
[ 1453.291328][T14775] netlink: 'syz.1.8995': attribute type 4 has an invalid length.
[ 1453.402354][T14781] netlink: 'syz.5.8996': attribute type 10 has an invalid length.
[ 1453.402388][T14781] vlan0: left promiscuous mode
[ 1453.403623][T14781] batman_adv: batadv0: Adding interface: vlan0
[ 1453.403638][T14781] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1453.403666][T14781] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active
[ 1453.654401][ T8963] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled
[ 1453.654421][ T8963] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled
[ 1453.710754][T14788] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1453.747234][T14788] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8997'.
[ 1454.512071][T14793] bridge6: entered promiscuous mode
[ 1454.512087][T14793] bridge6: entered allmulticast mode
[ 1454.516972][T14793] team0: Port device bridge6 added
[ 1454.863684][T14816] netlink: 'syz.1.9003': attribute type 39 has an invalid length.
[ 1454.863936][T14812] netlink: 'syz.1.9003': attribute type 39 has an invalid length.
[ 1454.986156][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9007'.
[ 1455.233682][T14839] veth0: entered promiscuous mode
[ 1455.390157][T14849] netlink: 'syz.1.9014': attribute type 1 has an invalid length.
[ 1455.611203][T14849] bond11: entered promiscuous mode
[ 1455.617517][T14849] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1455.675625][T14854] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1455.676085][T14854] bond11: (slave gre3): The slave device specified does not support setting the MAC address
[ 1455.676107][T14854] bond11: (slave gre3): Setting fail_over_mac to active for active-backup mode
[ 1455.696149][T14854] bond11: (slave gre3): making interface the new active one
[ 1455.696174][T14854] gre3: entered promiscuous mode
[ 1455.710523][T14854] bond11: (slave gre3): Enslaving as an active interface with an up link
[ 1455.710764][T14838] veth0: left promiscuous mode
[ 1456.353563][T14882] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9021'.
[ 1456.444762][T14885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9020'.
[ 1456.798317][T14893] netlink: 64 bytes leftover after parsing attributes in process `syz.1.9022'.
[ 1456.929981][T14897] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1457.232904][T14917] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[ 1457.296767][T14912] bond9: option ad_user_port_key: invalid value (65535)
[ 1457.296794][T14912] bond9: option ad_user_port_key: allowed values 0 - 1023
[ 1457.326551][T14912] bond9 (unregistering): Released all slaves
[ 1457.491745][T14912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9025'.
[ 1458.000687][T14943] syzkaller1: entered promiscuous mode
[ 1458.000711][T14943] syzkaller1: entered allmulticast mode
[ 1458.329603][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9037'.
[ 1458.374712][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9036'.
[ 1458.459686][T14961] bond9: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[ 1458.485048][T14961] bond9 (unregistering): Released all slaves
[ 1458.528531][T14978] netlink: 'syz.0.9038': attribute type 4 has an invalid length.
[ 1458.565963][T14974] netlink: 44 bytes leftover after parsing attributes in process `syz.3.9040'.
[ 1458.672034][T14978] lo: entered allmulticast mode
[ 1458.686494][T14978] lo: left allmulticast mode
[ 1458.718385][T14979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9039'.
[ 1458.773549][T14978] ip6gre1: entered allmulticast mode
[ 1459.304757][T15003] batadv_slave_1: entered promiscuous mode
[ 1459.322728][T15002] batadv_slave_1: left promiscuous mode
[ 1459.518244][T15009] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.9045'.
[ 1459.518382][T15009] 1ªX¹¦Dö»: renamed from 
00ªX¹¦Dö» (while UP)
[ 1460.311004][T15059] __nla_validate_parse: 7 callbacks suppressed
[ 1460.311025][T15059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9053'.
[ 1460.356838][T15061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9054'.
[ 1460.480812][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9055'.
[ 1460.692999][T15059] bond18: entered promiscuous mode
[ 1460.705287][T15059] 8021q: adding VLAN 0 to HW filter on device bond18
[ 1461.073539][T15094] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9058'.
[ 1461.100970][T15096] netlink: 308 bytes leftover after parsing attributes in process `syz.1.9060'.
[ 1461.327566][T15104] vxcan4: entered allmulticast mode
[ 1461.348075][T15108] netlink: 'syz.1.9060': attribute type 39 has an invalid length.
[ 1461.376527][T15105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9062'.
[ 1461.391920][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9055'.
[ 1461.391948][T15072] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9055'.
[ 1461.512123][T15111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9063'.
[ 1461.512150][T15111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9063'.
[ 1462.630786][ T4953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1462.645305][ T4953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1462.654969][ T4953] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1462.675328][ T4953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1462.677950][ T4953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1462.940397][T15156] netdevsim netdevsim2 netdevsim2: left allmulticast mode
[ 1462.960203][T15156] netlink: 'syz.2.9071': attribute type 1 has an invalid length.
[ 1463.482756][T15166] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1463.756885][T30176] smbdirect: ib_dev[s`z1] removed
[ 1463.795116][ T5579] infiniband s`z1: ib_query_port failed (-19)
[ 1464.496520][T15145] rxe_eth0 speed is unknown, defaulting to 1000
[ 1464.753908][ T4953] Bluetooth: hci5: command tx timeout
[ 1465.541630][T15213] __nla_validate_parse: 2 callbacks suppressed
[ 1465.541651][T15213] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9083'.
[ 1465.541682][T15213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9083'.
[ 1465.570804][T15213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1466.007519][T15221] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9084'.
[ 1466.591493][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1466.680627][T15145] lo speed is unknown, defaulting to 1000
[ 1466.828358][ T4953] Bluetooth: hci5: command tx timeout
[ 1466.863587][T15231] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1466.863615][T15231] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1467.092995][T15231] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1467.093021][T15231] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1467.592116][T15231] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1467.592141][T15231] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1467.592290][T15251] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1468.765550][T15297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9095'.
[ 1468.879731][T15296] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9094'.
[ 1468.930706][T15145] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1468.941903][T15145] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1468.942091][T15145] bridge_slave_0: entered allmulticast mode
[ 1468.944151][T15145] bridge_slave_0: entered promiscuous mode
[ 1468.946814][T15145] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1468.950322][T15145] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1468.950466][T15145] bridge_slave_1: entered allmulticast mode
[ 1468.952114][T15145] bridge_slave_1: entered promiscuous mode
[ 1469.140633][T15145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1469.143988][T15145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1469.410737][T15145] team0: Port device team_slave_0 added
[ 1469.413518][T15145] team0: Port device team_slave_1 added
[ 1469.467149][T15316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9097'.
[ 1469.617362][T15323] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9098'.
[ 1469.740096][T15145] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1469.740154][T15145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1469.740221][T15145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1469.741209][T15312] Bluetooth: hci0: too big key_count value 38657
[ 1469.810642][T15145] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1469.810703][T15145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1469.810770][T15145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1469.915736][T15328] netlink: 'syz.5.9101': attribute type 1 has an invalid length.
[ 1470.013285][T15331] x_tables: unsorted entry at hook 2
[ 1470.277193][T15328] bond9: entered promiscuous mode
[ 1470.277749][T15328] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1470.305119][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9101'.
[ 1470.469816][T15350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9102'.
[ 1470.721602][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807e947000: rx timeout, send abort
[ 1470.810088][T15331] batman_adv: batadv0: Removing interface: vlan0
[ 1471.134265][T15345] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1471.134684][T15345] bond9: (slave gre2): The slave device specified does not support setting the MAC address
[ 1471.134705][T15345] bond9: (slave gre2): Setting fail_over_mac to active for active-backup mode
[ 1471.187090][T15345] bond9: (slave gre2): making interface the new active one
[ 1471.187117][T15345] gre2: entered promiscuous mode
[ 1471.223546][    C1] vcan0: j1939_tp_rxtimer: 0xffff88802d168000: rx timeout, send abort
[ 1471.223606][    C1] vcan0: j1939_tp_rxtimer: 0xffff88807e947000: abort rx timeout. Force session deactivation
[ 1471.226367][T15345] bond9: (slave gre2): Enslaving as an active interface with an up link
[ 1471.300660][T15328] bond9 (unregistering): (slave gre2): Releasing backup interface
[ 1471.300692][T15328] gre2: left promiscuous mode
[ 1471.312830][T15328] bond9 (unregistering): Released all slaves
[ 1471.601233][T15145] hsr_slave_0: entered promiscuous mode
[ 1471.604037][T15145] hsr_slave_1: entered promiscuous mode
[ 1471.604942][T15145] debugfs: 'hsr0' already exists in 'hsr'
[ 1471.604962][T15145] Cannot create hsr debugfs directory
[ 1471.726312][    C1] vcan0 (unregistered): j1939_tp_rxtimer: 0xffff88802d168000: abort rx timeout. Force session deactivation
[ 1472.060663][T15385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9106'.
[ 1472.060699][T15385] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9106'.
[ 1472.254023][T15389] nbd: couldn't find a device at index 0
[ 1472.265597][T15389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9107'.
[ 1472.979756][T15415] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9113'.
[ 1473.529305][T15438] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1473.550098][T15434] syz_tun: entered allmulticast mode
[ 1473.781562][T15434] dvmrp6: entered allmulticast mode
[ 1474.181143][T15433] syz_tun: left allmulticast mode
[ 1474.193908][T15145] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1474.268673][T15145] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1474.291581][T15145] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1474.360228][T15145] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1474.366905][T15145] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1474.497367][T15145] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1474.524635][T15145] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1474.568424][T15145] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1474.851504][T15145] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1474.920729][T15145] 8021q: adding VLAN 0 to HW filter on device team0
[ 1474.948281][T23031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1474.948389][T23031] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1474.952671][T23031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1474.952776][T23031] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1475.393651][T15488] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1476.650235][T15145] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1476.665486][T15528] netlink: 'syz.0.9128': attribute type 1 has an invalid length.
[ 1476.852836][T15528] 8021q: adding VLAN 0 to HW filter on device bond15
[ 1476.999872][T15532] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1477.172336][T15145] veth0_vlan: entered promiscuous mode
[ 1477.173419][T15545] netlink: 'syz.5.9131': attribute type 10 has an invalid length.
[ 1477.329147][T15145] veth1_vlan: entered promiscuous mode
[ 1477.547651][T15145] veth0_macvtap: entered promiscuous mode
[ 1477.594290][T15145] veth1_macvtap: entered promiscuous mode
[ 1477.719863][T15145] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1477.816516][T15145] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1477.892006][T15564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9135'.
[ 1477.892028][T15564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9135'.
[ 1477.892050][T15564] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9135'.
[ 1478.015456][T23031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1478.015549][T23031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1478.015591][T23031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1478.075462][T23024] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1478.885453][T30167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1478.885476][T30167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1479.093473][T15597] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9139'.
[ 1479.238388][T23020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1479.238410][T23020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1479.299854][T15594] netlink: 'syz.2.9140': attribute type 1 has an invalid length.
[ 1479.299877][T15594] netlink: 'syz.2.9140': attribute type 22 has an invalid length.
[ 1479.786312][T15614] syzkaller0: Caught tx_queue_len zero misconfig
[ 1479.936113][T15618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9145'.
[ 1479.936147][T15618] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9145'.
[ 1479.936178][T15618] FAULT_INJECTION: forcing a failure.
[ 1479.936178][T15618] name failslab, interval 1, probability 0, space 0, times 0
[ 1479.936209][T15618] CPU: 0 UID: 0 PID: 15618 Comm: syz.5.9145 Not tainted syzkaller #0 PREEMPT(full) 
[ 1479.936232][T15618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1479.936244][T15618] Call Trace:
[ 1479.936253][T15618]  <TASK>
[ 1479.936262][T15618]  dump_stack_lvl+0xe8/0x150
[ 1479.936300][T15618]  should_fail_ex+0x3eb/0x540
[ 1479.936329][T15618]  ? __alloc_skb+0x1db/0x7a0
[ 1479.936359][T15618]  should_failslab+0xa8/0x100
[ 1479.936398][T15618]  ? __alloc_skb+0x1db/0x7a0
[ 1479.936425][T15618]  kmem_cache_alloc_node_noprof+0x9c/0x600
[ 1479.936449][T15618]  ? __alloc_skb+0x18d/0x7a0
[ 1479.936479][T15618]  ? __alloc_skb+0x1db/0x7a0
[ 1479.936515][T15618]  __alloc_skb+0x1db/0x7a0
[ 1479.936549][T15618]  netlink_ack+0x136/0xb30
[ 1479.936574][T15618]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1479.936599][T15618]  ? __copy_skb_header+0xa3/0x4a0
[ 1479.936633][T15618]  netlink_rcv_skb+0x2a4/0x4a0
[ 1479.936659][T15618]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1479.936679][T15618]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1479.936716][T15618]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1479.936742][T15618]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1479.936768][T15618]  netlink_unicast+0x8ef/0xa80
[ 1479.936808][T15618]  netlink_sendmsg+0x7f0/0xb20
[ 1479.936842][T15618]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1479.936870][T15618]  ? aa_sock_msg_perm+0x144/0x210
[ 1479.936894][T15618]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1479.936924][T15618]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1479.936951][T15618]  sock_sendmsg_nosec+0x14e/0x190
[ 1479.936977][T15618]  ____sys_sendmsg+0x54e/0x850
[ 1479.937003][T15618]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1479.937034][T15618]  ? import_iovec+0x73/0xa0
[ 1479.937062][T15618]  ___sys_sendmsg+0x2a5/0x360
[ 1479.937081][T15618]  ? __lock_acquire+0x747/0x2de0
[ 1479.937106][T15618]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1479.937164][T15618]  ? __fget_files+0x3a2/0x420
[ 1479.937194][T15618]  ? __fget_files+0x2a/0x420
[ 1479.937225][T15618]  __x64_sys_sendmsg+0x1b1/0x290
[ 1479.937247][T15618]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1479.937287][T15618]  do_syscall_64+0x166/0x520
[ 1479.937308][T15618]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.937329][T15618]  ? clear_bhb_loop+0x70/0xc0
[ 1479.937355][T15618]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.937374][T15618] RIP: 0033:0x7f29ef59fb19
[ 1479.937392][T15618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1479.937408][T15618] RSP: 002b:00007f29f0465028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1479.937427][T15618] RAX: ffffffffffffffda RBX: 00007f29ef825fa0 RCX: 00007f29ef59fb19
[ 1479.937440][T15618] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1479.937452][T15618] RBP: 00007f29f0465090 R08: 0000000000000000 R09: 0000000000000000
[ 1479.937463][T15618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1479.937472][T15618] R13: 00007f29ef826038 R14: 00007f29ef825fa0 R15: 00007ffd9866d8c8
[ 1479.937501][T15618]  </TASK>
[ 1480.062981][T15615] syzkaller0: entered promiscuous mode
[ 1480.063005][T15615] syzkaller0: entered allmulticast mode
[ 1480.487893][T15626] 8021q: VLANs not supported on ip6_vti0
[ 1480.583580][T15628] netlink: 480 bytes leftover after parsing attributes in process `syz.3.9149'.
[ 1481.144203][ T4953] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1481.159132][ T4953] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1481.170598][ T4953] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1481.184295][T15654] xt_recent: hitcount (268435462) is larger than allowed maximum (65535)
[ 1481.200119][ T4953] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1481.200809][ T4953] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1481.705077][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9157'.
[ 1481.710143][T15665] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9157'.
[ 1482.094550][T15672] netlink: 260 bytes leftover after parsing attributes in process `syz.3.9159'.
[ 1482.100135][T15672] sctp: [Deprecated]: syz.3.9159 (pid 15672) Use of int in maxseg socket option.
[ 1482.100135][T15672] Use struct sctp_assoc_value instead
[ 1482.254107][T15680] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1482.254229][T15680] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1482.254239][T15680] IPv6: NLM_F_CREATE should be set when creating new route
[ 1482.791976][T30172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1482.792014][T30172] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1483.047350][T15691] __nla_validate_parse: 5 callbacks suppressed
[ 1483.047372][T15691] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9162'.
[ 1483.114808][T30172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1483.114846][T30172] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1483.313544][ T4953] Bluetooth: hci4: command tx timeout
[ 1483.380439][T30172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1483.380473][T30172] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1483.793960][T15655] rxe_eth0 speed is unknown, defaulting to 1000
[ 1483.989575][T30176] nci: nci_rx_work: unknown MT 0x6
[ 1484.018252][T15715] netlink: 'syz.3.9168': attribute type 4 has an invalid length.
[ 1484.018275][T15715] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9168'.
[ 1484.063442][T15719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9170'.
[ 1484.063473][T15719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9170'.
[ 1484.063542][T15719] FAULT_INJECTION: forcing a failure.
[ 1484.063542][T15719] name failslab, interval 1, probability 0, space 0, times 0
[ 1484.063565][T15719] CPU: 0 UID: 0 PID: 15719 Comm: syz.0.9170 Not tainted syzkaller #0 PREEMPT(full) 
[ 1484.063587][T15719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1484.063599][T15719] Call Trace:
[ 1484.063607][T15719]  <TASK>
[ 1484.063616][T15719]  dump_stack_lvl+0xe8/0x150
[ 1484.063653][T15719]  should_fail_ex+0x3eb/0x540
[ 1484.063683][T15719]  should_failslab+0xa8/0x100
[ 1484.063712][T15719]  ? skb_clone+0x212/0x3a0
[ 1484.063736][T15719]  kmem_cache_alloc_noprof+0x9c/0x600
[ 1484.063762][T15719]  ? skb_clone+0x212/0x3a0
[ 1484.063792][T15719]  skb_clone+0x212/0x3a0
[ 1484.063819][T15719]  __netlink_deliver_tap+0x355/0x6e0
[ 1484.063860][T15719]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1484.063890][T15719]  netlink_deliver_tap+0x19c/0x1b0
[ 1484.063920][T15719]  netlink_sendskb+0x68/0x140
[ 1484.063949][T15719]  netlink_rcv_skb+0x2a4/0x4a0
[ 1484.063978][T15719]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1484.064002][T15719]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1484.064045][T15719]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1484.064072][T15719]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1484.064108][T15719]  netlink_unicast+0x8ef/0xa80
[ 1484.064153][T15719]  netlink_sendmsg+0x7f0/0xb20
[ 1484.064189][T15719]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1484.064222][T15719]  ? aa_sock_msg_perm+0x144/0x210
[ 1484.064249][T15719]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1484.064280][T15719]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1484.064308][T15719]  sock_sendmsg_nosec+0x14e/0x190
[ 1484.064341][T15719]  ____sys_sendmsg+0x54e/0x850
[ 1484.064369][T15719]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1484.064402][T15719]  ? import_iovec+0x73/0xa0
[ 1484.064432][T15719]  ___sys_sendmsg+0x2a5/0x360
[ 1484.064451][T15719]  ? __lock_acquire+0x747/0x2de0
[ 1484.064483][T15719]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1484.064551][T15719]  ? __fget_files+0x3a2/0x420
[ 1484.064575][T15719]  ? __fget_files+0x2a/0x420
[ 1484.064610][T15719]  __x64_sys_sendmsg+0x1b1/0x290
[ 1484.064635][T15719]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1484.064683][T15719]  do_syscall_64+0x166/0x520
[ 1484.064705][T15719]  ? trace_irq_disable+0x3b/0x140
[ 1484.064732][T15719]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1484.064753][T15719]  ? clear_bhb_loop+0x70/0xc0
[ 1484.064779][T15719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1484.064799][T15719] RIP: 0033:0x7facceb9fb19
[ 1484.064818][T15719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1484.064835][T15719] RSP: 002b:00007faccfa1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1484.064858][T15719] RAX: ffffffffffffffda RBX: 00007faccee25fa0 RCX: 00007facceb9fb19
[ 1484.064873][T15719] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[ 1484.064886][T15719] RBP: 00007faccfa1c090 R08: 0000000000000000 R09: 0000000000000000
[ 1484.064900][T15719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1484.064912][T15719] R13: 00007faccee26038 R14: 00007faccee25fa0 R15: 00007ffd0c75f608
[ 1484.064948][T15719]  </TASK>
[ 1484.419562][T15715] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1484.519719][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[ 1484.574797][T30165] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 20004 - 0
[ 1484.574863][T30165] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 20004 - 0
[ 1484.638579][T23020] netdevsim netdevsim1 eth9: set [1, 0] type 2 family 0 port 20004 - 0
[ 1484.748667][T23019] netdevsim netdevsim1 eth10: set [1, 0] type 2 family 0 port 20004 - 0
[ 1484.888643][T30172] tipc: Resetting bearer <eth:syzkaller0>
[ 1485.299129][T30172] bond11 (unregistering): (slave gre3): Releasing backup interface
[ 1485.299159][T30172] gre3 (unregistering): left promiscuous mode
[ 1485.392048][ T4953] Bluetooth: hci4: command tx timeout
[ 1485.482881][T30172] tipc: Disabling bearer <eth:syzkaller0>
[ 1485.584668][T30172] bond0 (unregistering): Released all slaves
[ 1485.600999][T30172] bond1 (unregistering): Released all slaves
[ 1485.625059][T30172] bond2 (unregistering): Released all slaves
[ 1485.653435][T30172] bond3 (unregistering): Released all slaves
[ 1485.674291][T30172] bond4 (unregistering): Released all slaves
[ 1485.707655][T30172] bond5 (unregistering): Released all slaves
[ 1485.729292][T30172] bond6 (unregistering): Released all slaves
[ 1485.757084][T30172] bond7 (unregistering): Released all slaves
[ 1485.782857][T30172] bond8 (unregistering): Released all slaves
[ 1485.807942][T30172] bond9 (unregistering): Released all slaves
[ 1485.829121][T30172] bond10 (unregistering): Released all slaves
[ 1485.864823][T30172] bond11 (unregistering): Released all slaves
[ 1485.907645][T15731] syzkaller0: left promiscuous mode
[ 1485.907670][T15731] syzkaller0: left allmulticast mode
[ 1485.929904][T15655] lo speed is unknown, defaulting to 1000
[ 1486.106802][T30172] tipc: Left network mode
[ 1486.251828][T30172] IPVS: stopping backup sync thread 3936 ...
[ 1486.654242][T15710] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1487.038989][T15753] netlink: 'syz.0.9178': attribute type 1 has an invalid length.
[ 1487.123960][T15753] netlink: 'syz.0.9178': attribute type 12 has an invalid length.
[ 1487.471002][ T4953] Bluetooth: hci4: command tx timeout
[ 1487.595000][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9181'.
[ 1487.595032][T15777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9181'.
[ 1487.621187][T15777] FAULT_INJECTION: forcing a failure.
[ 1487.621187][T15777] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1487.621218][T15777] CPU: 0 UID: 0 PID: 15777 Comm: syz.2.9181 Not tainted syzkaller #0 PREEMPT(full) 
[ 1487.621241][T15777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1487.621254][T15777] Call Trace:
[ 1487.621262][T15777]  <TASK>
[ 1487.621272][T15777]  dump_stack_lvl+0xe8/0x150
[ 1487.621309][T15777]  should_fail_ex+0x3eb/0x540
[ 1487.621340][T15777]  _copy_to_user+0x31/0xb0
[ 1487.621372][T15777]  simple_read_from_buffer+0xe1/0x170
[ 1487.621479][T15777]  proc_fail_nth_read+0x1bb/0x230
[ 1487.621514][T15777]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1487.621545][T15777]  ? rw_verify_area+0x24a/0x4c0
[ 1487.621573][T15777]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1487.621609][T15777]  vfs_read+0x213/0xa80
[ 1487.621641][T15777]  ? __pfx___mutex_lock+0x10/0x10
[ 1487.621667][T15777]  ? __pfx_vfs_read+0x10/0x10
[ 1487.621694][T15777]  ? __fget_files+0x2a/0x420
[ 1487.621717][T15777]  ? __fget_files+0x3a2/0x420
[ 1487.621739][T15777]  ? __fget_files+0x2a/0x420
[ 1487.621767][T15777]  ? fdget+0x1ac/0x250
[ 1487.621799][T15777]  ksys_read+0x150/0x270
[ 1487.621827][T15777]  ? __pfx_ksys_read+0x10/0x10
[ 1487.621866][T15777]  do_syscall_64+0x166/0x520
[ 1487.621888][T15777]  ? trace_irq_disable+0x3b/0x140
[ 1487.621914][T15777]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1487.621935][T15777]  ? clear_bhb_loop+0x70/0xc0
[ 1487.621961][T15777]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1487.621981][T15777] RIP: 0033:0x7fb7c956034e
[ 1487.622000][T15777] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1487.622018][T15777] RSP: 002b:00007fb7ca3e4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1487.622039][T15777] RAX: ffffffffffffffda RBX: 00007fb7ca3e56c0 RCX: 00007fb7c956034e
[ 1487.622054][T15777] RDX: 000000000000000f RSI: 00007fb7ca3e50a0 RDI: 0000000000000004
[ 1487.622067][T15777] RBP: 00007fb7ca3e5090 R08: 0000000000000000 R09: 0000000000000000
[ 1487.622078][T15777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1487.622095][T15777] R13: 00007fb7c9826038 R14: 00007fb7c9825fa0 R15: 00007ffdfe7d6ca8
[ 1487.622129][T15777]  </TASK>
[ 1488.408521][T15788] Dead loop on virtual device lo (net 3238), fix it urgently!
[ 1488.408760][T15788] Dead loop on virtual device lo (net 3238), fix it urgently!
[ 1488.408949][T15788] Dead loop on virtual device lo (net 3238), fix it urgently!
[ 1488.409503][T15788] Dead loop on virtual device lo (net 3238), fix it urgently!
[ 1488.409694][T15788] Dead loop on virtual device lo (net 3238), fix it urgently!
[ 1488.409892][T15788] Dead loop on virtual device lo (net 3238), fix it urgently!
[ 1488.410342][T15788] Dead loop on virtual device lo (net 3238), fix it urgently!
[ 1488.410523][T15788] Dead loop on virtual device lo (net 3238), fix it urgently!
[ 1488.410696][T15788] Dead loop on virtual device lo (net 3238), fix it urgently!
[ 1488.546632][T15792] erspan1: entered promiscuous mode
[ 1489.066015][ T5298] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1489.107819][T15809] Unsupported ieee802154 address type: 0
[ 1489.523846][T15814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9189'.
[ 1489.546798][ T4953] Bluetooth: hci4: command tx timeout
[ 1489.691736][T15655] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1489.691952][T15655] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1489.692387][T15655] bridge_slave_0: entered allmulticast mode
[ 1489.742330][T15655] bridge_slave_0: entered promiscuous mode
[ 1489.760814][T15655] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1489.760934][T15655] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1489.761099][T15655] bridge_slave_1: entered allmulticast mode
[ 1489.802665][T15655] bridge_slave_1: entered promiscuous mode
[ 1490.655658][T15861] net_ratelimit: 42 callbacks suppressed
[ 1490.655681][T15861] ip_tables: iptables: counters copy to user failed while replacing table
[ 1490.655976][ T5579] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1490.857422][T15866] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9199'.
[ 1490.896126][T15655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1490.936170][T15655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1491.044675][T15873] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9199'.
[ 1491.134478][T30172] veth1_macvtap: left promiscuous mode
[ 1491.134517][T30172] veth0_macvtap: left promiscuous mode
[ 1491.134634][T30172] veth1_vlan: left promiscuous mode
[ 1491.633641][ T5579] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1493.458529][T15865] syzkaller1: entered promiscuous mode
[ 1493.458559][T15865] syzkaller1: entered allmulticast mode
[ 1493.601088][ T5298] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1493.620874][T15655] team0: Port device team_slave_0 added
[ 1493.627156][T15655] team0: Port device team_slave_1 added
[ 1493.884236][T15655] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1493.884255][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1493.884281][T15655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1493.886347][T15655] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1493.886360][T15655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1493.886386][T15655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1494.267649][T15655] hsr_slave_0: entered promiscuous mode
[ 1494.268723][T15655] hsr_slave_1: entered promiscuous mode
[ 1494.269447][T15655] debugfs: 'hsr0' already exists in 'hsr'
[ 1494.269468][T15655] Cannot create hsr debugfs directory
[ 1494.452027][T30172] IPVS: stop unused estimator thread 0...
[ 1494.756971][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1495.052986][T15926] syzkaller1: entered promiscuous mode
[ 1495.053010][T15926] syzkaller1: entered allmulticast mode
[ 1495.319661][T15655] netdevsim netdevsim1 eth10 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1495.621091][T15655] netdevsim netdevsim1 eth9 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1496.143856][T15655] netdevsim netdevsim1 eth8 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1496.617609][T15655] netdevsim netdevsim1 eth7 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0
[ 1496.970557][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9219'.
[ 1496.970591][T15980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9219'.
[ 1497.563046][T15655] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1497.601549][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1497.602770][T15655] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1497.631153][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1497.633645][T15655] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1497.689967][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1497.709697][T15655] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1497.752613][T15655] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1497.916699][T16004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9224'.
[ 1498.302258][T15655] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1498.389590][T15655] 8021q: adding VLAN 0 to HW filter on device team0
[ 1498.509941][T23020] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1498.510053][T23020] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1498.512426][T23020] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1498.512523][T23020] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1498.569542][T16028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9227'.
[ 1499.010928][T16044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9229'.
[ 1499.010966][T16044] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9229'.
[ 1500.621668][T15655] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1500.713031][T15655] veth0_vlan: entered promiscuous mode
[ 1500.740014][T15655] veth1_vlan: entered promiscuous mode
[ 1500.798246][T15655] veth0_macvtap: entered promiscuous mode
[ 1500.817072][T15655] veth1_macvtap: entered promiscuous mode
[ 1500.958053][T15655] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1501.024800][T15655] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1501.244622][T16098] hsr_slave_1: entered allmulticast mode
[ 1501.269713][T23020] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.270039][T23020] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.270482][T30176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.271360][T16096] hsr_slave_1: left allmulticast mode
[ 1501.272428][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9237'.
[ 1501.272448][T16096] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9237'.
[ 1501.286829][T23020] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1501.355349][T16098] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9237'.
[ 1501.595717][T16104] openvswitch: netlink: ct_state flags ffffffff unsupported
[ 1501.724692][T23019] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1501.724714][T23019] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1501.795148][T16110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9240'.
[ 1501.933384][T23019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1501.933405][T23019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1502.265796][ T5651] Bluetooth: hci4: command 0x0405 tx timeout
[ 1502.473949][T16128] netlink: 'syz.3.9245': attribute type 10 has an invalid length.
[ 1502.491052][T16128] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1502.493566][T16128] team0: Port device bond0 added
[ 1502.566491][T16136] __nla_validate_parse: 1 callbacks suppressed
[ 1502.566511][T16136] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9246'.
[ 1502.604739][T16133] netlink: 'syz.1.9148': attribute type 1 has an invalid length.
[ 1502.633566][T16142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9246'.
[ 1502.657991][T16140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9148'.
[ 1502.752252][T16133] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1502.796776][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9148'.
[ 1502.806976][T16140] bridge1: entered promiscuous mode
[ 1503.048769][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9247'.
[ 1503.059300][T16137] bridge1: entered promiscuous mode
[ 1503.254517][T16137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9148'.
[ 1503.376398][T16137] bridge1: entered promiscuous mode
[ 1503.693415][ T4953] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1503.703976][ T4953] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1503.717331][ T4953] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1503.718682][ T4953] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1503.720300][T16169] sctp: [Deprecated]: syz.3.9250 (pid 16169) Use of int in maxseg socket option.
[ 1503.720300][T16169] Use struct sctp_assoc_value instead
[ 1503.755128][ T4953] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1503.810289][T16168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9251'.
[ 1503.810324][T16168] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9251'.
[ 1504.525671][T16189] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 1504.526777][T16189] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1504.706623][T16166] rxe_eth0 speed is unknown, defaulting to 1000
[ 1505.175491][T16203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9260'.
[ 1505.402125][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9262'.
[ 1505.683195][T16166] lo speed is unknown, defaulting to 1000
[ 1505.875377][ T4953] Bluetooth: hci3: command tx timeout
[ 1505.929344][ T5651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1505.943436][ T5651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1505.963608][ T5651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1505.972443][ T5651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1505.983765][ T5651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1506.556713][T16229] netlink: 'syz.5.9269': attribute type 1 has an invalid length.
[ 1507.440673][T16166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1507.440860][T16166] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1507.440990][T16166] bridge_slave_0: entered allmulticast mode
[ 1507.442616][T16166] bridge_slave_0: entered promiscuous mode
[ 1507.482282][T16166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1507.482445][T16166] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1507.482606][T16166] bridge_slave_1: entered allmulticast mode
[ 1507.484376][T16166] bridge_slave_1: entered promiscuous mode
[ 1507.710908][T16166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1507.710977][T16217] rxe_eth0 speed is unknown, defaulting to 1000
[ 1507.748881][T16166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1507.811583][T16166] team0: Port device team_slave_0 added
[ 1507.814578][T16166] team0: Port device team_slave_1 added
[ 1507.902233][T16166] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1507.902252][T16166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1507.902278][T16166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1507.950473][ T4953] Bluetooth: hci3: command tx timeout
[ 1508.001320][T16166] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1508.001382][T16166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1508.001911][T16166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1508.107736][ T4953] Bluetooth: hci0: command tx timeout
[ 1508.267053][T16281] __nla_validate_parse: 4 callbacks suppressed
[ 1508.267082][T16281] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9277'.
[ 1508.359956][T16166] hsr_slave_0: entered promiscuous mode
[ 1508.401354][T16166] hsr_slave_1: entered promiscuous mode
[ 1508.402172][T16166] debugfs: 'hsr0' already exists in 'hsr'
[ 1508.402193][T16166] Cannot create hsr debugfs directory
[ 1508.952860][T16217] lo speed is unknown, defaulting to 1000
[ 1509.407890][T16166] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[ 1509.407929][T16166] netdevsim netdevsim0 eth3 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[ 1509.407966][T16166] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.407994][T16166] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1509.616744][T16166] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[ 1509.616782][T16166] netdevsim netdevsim0 eth2 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[ 1509.616808][T16166] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.616834][T16166] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1509.935563][T16166] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[ 1509.935603][T16166] netdevsim netdevsim0 eth1 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[ 1509.935629][T16166] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1509.935650][T16166] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1510.038642][ T4953] Bluetooth: hci3: command tx timeout
[ 1510.193636][ T4953] Bluetooth: hci0: command tx timeout
[ 1510.283016][T16166] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[ 1510.283053][T16166] netdevsim netdevsim0 eth0 (unregistering): unset [0, 1] type 1 family 0 port 60387 - 0
[ 1510.283082][T16166] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1510.283095][T16166] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[ 1510.342365][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9282'.
[ 1510.342390][T16305] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9282'.
[ 1510.560096][T30165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1510.762295][T16266] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1510.805019][T16310] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1510.831788][T30165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1511.154898][T30165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1511.372487][T16217] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1511.375575][T16217] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1511.375779][T16217] bridge_slave_0: entered allmulticast mode
[ 1511.381470][T16217] bridge_slave_0: entered promiscuous mode
[ 1511.432004][T16217] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1511.432117][T16217] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1511.432301][T16217] bridge_slave_1: entered allmulticast mode
[ 1511.434020][T16217] bridge_slave_1: entered promiscuous mode
[ 1511.662163][T16335] netlink: 'syz.5.9288': attribute type 32 has an invalid length.
[ 1511.662188][T16335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9288'.
[ 1511.717854][T30165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0
[ 1511.891033][T16217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1511.934153][T16335] netlink: zone id is out of range
[ 1511.934174][T16335] netlink: get zone limit has 4 unknown bytes
[ 1512.021313][T16217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1512.095557][T16217] team0: Port device team_slave_0 added
[ 1512.113981][ T4953] Bluetooth: hci3: command tx timeout
[ 1512.205241][T16166] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1512.234569][T16166] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1512.248150][T16217] team0: Port device team_slave_1 added
[ 1512.248456][T30176] netdevsim netdevsim2 eth8: set [1, 0] type 2 family 0 port 20004 - 0
[ 1512.250235][T30176] netdevsim netdevsim2 eth7: set [1, 0] type 2 family 0 port 20004 - 0
[ 1512.273572][ T4953] Bluetooth: hci0: command tx timeout
[ 1512.361198][T16166] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1512.383190][T16166] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1512.415917][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9292'.
[ 1512.415953][T16348] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9292'.
[ 1512.511807][T23019] netdevsim netdevsim2 eth9: set [1, 0] type 2 family 0 port 20004 - 0
[ 1512.515116][T16166] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1512.534637][T16166] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1512.535572][T16166] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1512.580076][T16166] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1512.660418][T16217] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1512.660480][T16217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1512.660545][T16217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1512.673554][T23024] netdevsim netdevsim2 eth10: set [1, 0] type 2 family 0 port 20004 - 0
[ 1512.764428][T16217] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1512.764454][T16217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1512.764482][T16217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1512.914840][T30165] dvmrp6: left allmulticast mode
[ 1512.951668][T16363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9296'.
[ 1513.245298][T16386] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9295'.
[ 1513.419993][T30165] bond3 (unregistering): (slave geneve0): Releasing active interface
[ 1513.503351][T30165] bond0 (unregistering): Released all slaves
[ 1513.521974][T30165] bond1 (unregistering): Released all slaves
[ 1513.547018][T30165] bond2 (unregistering): Released all slaves
[ 1513.573717][T30165] bond3 (unregistering): Released all slaves
[ 1513.948027][T16217] hsr_slave_0: entered promiscuous mode
[ 1513.953926][T16217] hsr_slave_1: entered promiscuous mode
[ 1513.954651][T16217] debugfs: 'hsr0' already exists in 'hsr'
[ 1513.954670][T16217] Cannot create hsr debugfs directory
[ 1514.217932][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9303'.
[ 1514.217970][T16403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9303'.
[ 1514.318172][T16406] Cannot find del_set index 0 as target
[ 1514.360472][ T4953] Bluetooth: hci0: command tx timeout
[ 1515.081739][T16166] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1515.370975][T16166] 8021q: adding VLAN 0 to HW filter on device team0
[ 1515.415013][T30172] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1515.415119][T30172] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1515.675897][T30172] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1515.676081][T30172] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1516.000369][ T5298] 8021q: adding VLAN 0 to HW filter on device eth8
[ 1516.077984][T16217] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1516.143919][T16217] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1516.196899][T16166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1516.310875][T16217] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1516.411611][T16217] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1516.479961][T16217] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1516.576690][T16217] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1516.609366][T16217] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1516.676863][T16217] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1516.752346][T16451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9314'.
[ 1516.752385][T16451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9314'.
[ 1516.883105][T30165] hsr_slave_0: left promiscuous mode
[ 1516.920139][T30165] hsr_slave_1: left promiscuous mode
[ 1517.005718][T30165] veth1_macvtap: left promiscuous mode
[ 1517.005759][T30165] veth0_macvtap: left promiscuous mode
[ 1517.005876][T30165] veth1_vlan: left promiscuous mode
[ 1517.005947][T30165] veth0_vlan: left promiscuous mode
[ 1518.388147][ T5298] 8021q: adding VLAN 0 to HW filter on device eth7
[ 1518.715744][T16492] batadv_slave_0: entered promiscuous mode
[ 1518.723877][T16488] batadv_slave_0: left promiscuous mode
[ 1518.830985][T16217] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1518.907441][T16217] 8021q: adding VLAN 0 to HW filter on device team0
[ 1519.022146][T16498] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1519.167982][T23024] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1519.168087][T23024] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1519.170832][T23024] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1519.170935][T23024] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1519.209690][T30165] IPVS: stop unused estimator thread 0...
[ 1519.886235][T16166] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1519.889447][T16529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9324'.
[ 1520.151596][T16166] veth0_vlan: entered promiscuous mode
[ 1520.174525][T16166] veth1_vlan: entered promiscuous mode
[ 1520.187025][T16537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9325'.
[ 1520.395049][T16534] netlink: 'syz.3.9326': attribute type 4 has an invalid length.
[ 1520.395074][T16534] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9326'.
[ 1520.598145][T16166] veth0_macvtap: entered promiscuous mode
[ 1520.643304][T16166] veth1_macvtap: entered promiscuous mode
[ 1520.779714][ T5298] 8021q: adding VLAN 0 to HW filter on device eth9
[ 1520.784176][T16166] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1520.863093][T16166] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1520.933040][T16515] netlink: 'syz.5.9322': attribute type 29 has an invalid length.
[ 1520.940528][T23024] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1520.942848][T16515] netlink: 'syz.5.9322': attribute type 29 has an invalid length.
[ 1520.943292][T16515] netlink: 72 bytes leftover after parsing attributes in process `syz.5.9322'.
[ 1521.094318][T16566] NFSD: Failed to start, no listeners configured.
[ 1521.101521][T16563] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9327'.
[ 1521.102077][T23024] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.102615][T23024] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.102911][T23024] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.233819][T16217] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1521.532070][T30176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1521.532093][T30176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1521.772250][T16575] syzkaller0: entered promiscuous mode
[ 1521.772290][T16575] syzkaller0: entered allmulticast mode
[ 1521.789183][T16565] NFSD: Failed to start, no listeners configured.
[ 1521.805872][T23022] hfsc: classify hop budget exhausted, dropping packet
[ 1521.807635][T30167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1521.807658][T30167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1521.809466][T16575] hfsc: classify hop budget exhausted, dropping packet
[ 1522.209784][T16217] veth0_vlan: entered promiscuous mode
[ 1522.293066][T16597] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9330'.
[ 1522.372858][T16217] veth1_vlan: entered promiscuous mode
[ 1522.584764][T16217] veth0_macvtap: entered promiscuous mode
[ 1522.606850][T16217] veth1_macvtap: entered promiscuous mode
[ 1522.764193][T16217] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1522.828204][ T5298] 8021q: adding VLAN 0 to HW filter on device eth10
[ 1522.869349][T16217] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1523.015216][T23022] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.015262][T23022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.015295][T23022] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.015327][T23022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.270867][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9335'.
[ 1523.270901][T16621] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9335'.
[ 1523.366310][ T8963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1523.366333][ T8963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1523.659888][T30172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1523.659910][T30172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1524.250103][T16667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9346'.
[ 1524.250137][T16667] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9346'.
[ 1525.492782][T16705] sch_tbf: burst 7357 is lower than device lo mtu (32783) !
[ 1525.498335][T16709] __nla_validate_parse: 3 callbacks suppressed
[ 1525.498353][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9356'.
[ 1525.503369][T16708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9356'.
[ 1525.503402][T16708] netlink: 'syz.0.9356': attribute type 30 has an invalid length.
[ 1525.560932][T16712] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9357'.
[ 1525.560969][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9357'.
[ 1525.568352][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9356'.
[ 1525.568387][T16709] netlink: 'syz.0.9356': attribute type 30 has an invalid length.
[ 1525.669560][T16708] vxlan0: entered promiscuous mode
[ 1525.669575][T16708] vxlan0: entered allmulticast mode
[ 1525.707917][T16709] vxlan1: entered promiscuous mode
[ 1525.707941][T16709] vxlan1: entered allmulticast mode
[ 1525.732134][T23019] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1525.732187][T23019] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1525.747169][T23031] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1525.748006][T23031] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1526.104761][T16724] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[ 1526.756726][T16765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9370'.
[ 1526.756762][T16765] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9370'.
[ 1526.998502][T16774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9373'.
[ 1527.064615][T16774] bond1: option broadcast_neighbor: invalid value (4)
[ 1527.080309][T16774] bond1 (unregistering): Released all slaves
[ 1527.518785][   T30] kauditd_printk_skb: 55 callbacks suppressed
[ 1527.518805][   T30] audit: type=1800 audit(1793930413.140:119): pid=16791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9379" name="blkio.bfq.time_recursive" dev="tmpfs" ino=239 res=0 errno=-22
[ 1527.525802][T16796] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9380'.
[ 1527.529601][T16798] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9381'.
[ 1527.582330][T16800] openvswitch: netlink: Multiple metadata blocks provided
[ 1527.591352][T16791] Bluetooth: MGMT ver 1.23
[ 1527.591402][T16791] Bluetooth: hci0: unsupported parameter 5135
[ 1527.591417][T16791] Bluetooth: hci0: unsupported parameter 8192
[ 1527.591434][T16791] Bluetooth: hci0: unsupported parameter 5135
[ 1527.591447][T16791] Bluetooth: hci0: unsupported parameter 8192
[ 1527.809647][T16811] vcan0: entered promiscuous mode
[ 1527.809673][T16811] vcan0: entered allmulticast mode
[ 1528.054316][T16817] siw: device registration error -23
[ 1528.535056][T16838] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1529.084044][T16844] tipc: Failed to remove unknown binding: 66,0,2/0:3783255390/3783255391
[ 1529.094715][T16844] tipc: Failed to remove unknown binding: 66,0,2/0:3783255390/3783255391
[ 1530.608075][T16912] tc_dump_action: action bad kind
[ 1530.788037][T16924] __nla_validate_parse: 75 callbacks suppressed
[ 1530.788058][T16924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9408'.
[ 1530.788117][T16924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9408'.
[ 1531.395780][T16952] netlink: 44 bytes leftover after parsing attributes in process `syz.6.9415'.
[ 1531.491237][T16938] vxlan0: left promiscuous mode
[ 1531.491844][T16938] vxlan1: left promiscuous mode
[ 1531.493526][T16938] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1531.626237][T16968] netlink: 'syz.5.9419': attribute type 1 has an invalid length.
[ 1531.692769][T16963] : entered promiscuous mode
[ 1531.756269][T16973] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1531.857622][T16966] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1531.891621][T16966] bond1: (slave lo): Enslaving as an active interface with an up link
[ 1531.905976][T16966] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[ 1532.136798][T16982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9422'.
[ 1532.277088][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.277505][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.277874][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.311365][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.311766][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.312133][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.312537][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.312920][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.313336][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.313709][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.314130][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.314525][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.314929][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.315320][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.315724][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.316105][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.316518][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.316886][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.317297][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.370120][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.370530][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.370889][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.371265][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.371630][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.371976][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.372354][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.372715][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.373079][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.373444][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.373811][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.408827][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.409772][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.410227][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.410596][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.410957][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.411326][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.423785][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.424208][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.424581][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.424945][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.425314][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.425679][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.426078][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.426450][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.426813][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.427179][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.427628][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.428001][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.428365][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.428730][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.429097][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.429507][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.429863][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.430220][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.530683][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.531076][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.531529][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.531886][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.532685][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.533040][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.670292][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.670739][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.671125][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.671490][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1532.671865][T16991] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1533.112263][T17000] IPVS: set_ctl: invalid protocol: 58 100.1.1.0:20003
[ 1533.638521][T17032] bond1: Removing last arp target with arp_interval on
[ 1533.742339][T17040] netlink: 'syz.5.9435': attribute type 10 has an invalid length.
[ 1534.316526][T23019] IPVS: starting estimator thread 0...
[ 1534.320310][T17079] netlink: 'syz.0.9442': attribute type 1 has an invalid length.
[ 1534.320342][T17079] netlink: 'syz.0.9442': attribute type 8 has an invalid length.
[ 1534.400221][T17080] IPVS: using max 27 ests per chain, 64800 per kthread
[ 1534.511947][T17082] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0)
[ 1534.536747][T17082] bond2 (unregistering): Released all slaves
[ 1534.558595][T17088] netlink: 912 bytes leftover after parsing attributes in process `syz.6.9445'.
[ 1534.827350][T17095] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9447'.
[ 1535.056780][T17107] sctp: [Deprecated]: syz.0.9451 (pid 17107) Use of int in max_burst socket option.
[ 1535.056780][T17107] Use struct sctp_assoc_value instead
[ 1535.394544][T17125] ip_tables: iptables: counters copy to user failed while replacing table
[ 1535.450112][T17119] netlink: 'syz.3.9454': attribute type 1 has an invalid length.
[ 1535.450135][T17119] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9454'.
[ 1535.450155][T17119] nbd: couldn't find device at index 767
[ 1535.599811][T17131] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9458'.
[ 1535.887811][T17136] geneve2: entered promiscuous mode
[ 1535.919994][T17140] syzkaller0: entered promiscuous mode
[ 1535.920018][T17140] syzkaller0: entered allmulticast mode
[ 1535.929480][T17136] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9459'.
[ 1536.009157][T17149] x_tables: duplicate entry at hook 3
[ 1536.400858][T17138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9460'.
[ 1537.644179][T17198] netlink: 'syz.6.9472': attribute type 4 has an invalid length.
[ 1537.662620][T17200] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9470'.
[ 1537.664972][T17199] siw: device registration error -23
[ 1537.732753][T17199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9471'.
[ 1537.909813][T17198] team0 (unregistering): Port device team_slave_0 removed
[ 1537.969750][T17221] netlink: 'syz.6.9472': attribute type 4 has an invalid length.
[ 1538.006629][T17198] team0 (unregistering): Port device team_slave_1 removed
[ 1538.129815][T17228] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9475'.
[ 1538.692776][T17247] xt_TCPMSS: Only works on TCP SYN packets
[ 1538.742334][T17247] ip6gretap1: entered allmulticast mode
[ 1538.758039][T17247] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1538.758056][T17247] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1538.758087][T17247] batman_adv: batadv0: Interface activated: ip6gretap1
[ 1538.759156][T17238] syzkaller1: entered promiscuous mode
[ 1538.759174][T17238] syzkaller1: entered allmulticast mode
[ 1539.041147][T17267] syzkaller0: entered promiscuous mode
[ 1539.041171][T17267] syzkaller0: entered allmulticast mode
[ 1539.054443][T17270] netlink: 'syz.1.9482': attribute type 10 has an invalid length.
[ 1539.060013][T17270] ipvlan0: entered allmulticast mode
[ 1539.060033][T17270] veth0_vlan: entered allmulticast mode
[ 1539.062826][T17270] team0: Device ipvlan0 failed to register rx_handler
[ 1539.288650][T17275] Bluetooth: hci0: unsupported parameter 5135
[ 1539.288674][T17275] Bluetooth: hci0: unsupported parameter 8192
[ 1539.288688][T17275] Bluetooth: hci0: unsupported parameter 5135
[ 1539.288701][T17275] Bluetooth: hci0: unsupported parameter 8192
[ 1539.489475][T17277] syzkaller0: entered promiscuous mode
[ 1539.489498][T17277] syzkaller0: entered allmulticast mode
[ 1539.537168][T17281] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9485'.
[ 1539.537194][T17281] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[ 1540.330217][T17316] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9489'.
[ 1540.563883][T23031] IPVS: starting estimator thread 0...
[ 1540.657187][T17332] IPVS: using max 30 ests per chain, 72000 per kthread
[ 1540.960054][T17347] x_tables: duplicate underflow at hook 1
[ 1541.384539][T17353] veth0_to_bridge: entered promiscuous mode
[ 1541.384801][T17353] macvtap1: entered allmulticast mode
[ 1541.384818][T17353] veth0_to_bridge: entered allmulticast mode
[ 1541.421107][T17353] veth0_to_bridge: left allmulticast mode
[ 1541.421138][T17353] veth0_to_bridge: left promiscuous mode
[ 1541.563023][T17362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9499'.
[ 1541.913697][T17366] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9499'.
[ 1542.294220][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9507'.
[ 1542.392058][T17406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9506'.
[ 1542.393226][T17400] netlink: 80 bytes leftover after parsing attributes in process `syz.6.9509'.
[ 1542.441101][T17405] openvswitch: netlink: VXLAN extension 1 has unexpected len 8 expected 4
[ 1542.561841][T17392] netlink: 'syz.3.9506': attribute type 61 has an invalid length.
[ 1542.561867][T17392] netlink: 'syz.3.9506': attribute type 268 has an invalid length.
[ 1542.944728][T17424] pim6reg99999999: entered allmulticast mode
[ 1543.791594][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9527'.
[ 1543.791669][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9527'.
[ 1543.956192][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9529'.
[ 1544.178653][T17484] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[ 1544.225943][T17503] netlink: 'syz.0.9531': attribute type 29 has an invalid length.
[ 1544.667210][T17477] tipc: Resetting bearer <eth:syzkaller0>
[ 1544.724098][T17477] tipc: Disabling bearer <eth:syzkaller0>
[ 1544.834854][T17518] netlink: 'syz.6.9538': attribute type 1 has an invalid length.
[ 1544.999636][T17523] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1545.002978][T17523] bond2: (slave bond3): making interface the new active one
[ 1545.013594][T17523] bond2: (slave bond3): Enslaving as an active interface with an up link
[ 1545.147245][T17537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9540'.
[ 1545.147281][T17537] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9540'.
[ 1545.595645][T17552] ip_tables: iptables: counters copy to user failed while replacing table
[ 1545.627400][T17545] IPVS: Scheduler module ip_vs_mh  not found
[ 1545.677222][T17553] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1546.149145][T17565] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1546.202360][T17574] syzkaller1: entered promiscuous mode
[ 1546.202385][T17574] syzkaller1: entered allmulticast mode
[ 1546.265744][T30167] IPVS: starting estimator thread 0...
[ 1546.273327][T17573] netlink: 'syz.1.9550': attribute type 1 has an invalid length.
[ 1546.358521][T17577] IPVS: using max 29 ests per chain, 69600 per kthread
[ 1546.867436][T17594] bridge0: left allmulticast mode
[ 1547.258121][T17612] openvswitch: netlink: Key 6 has unexpected len 13 expected 2
[ 1547.604192][T17626] x_tables: unsorted entry at hook 1
[ 1547.631714][T17626] macsec1: entered promiscuous mode
[ 1547.669314][T17629] xfrm0: entered allmulticast mode
[ 1547.686298][T17629] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[ 1547.731463][T17634] __nla_validate_parse: 5 callbacks suppressed
[ 1547.731486][T17634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9566'.
[ 1547.731515][T17634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9566'.
[ 1547.797158][T17628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9567'.
[ 1547.810572][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9567'.
[ 1547.864787][T17641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9568'.
[ 1547.969042][T17645] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9571'.
[ 1548.029183][T17645] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9571'.
[ 1548.048543][T17648] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9572'.
[ 1548.050730][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9572'.
[ 1548.092667][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9572'.
[ 1549.004681][T17682] netlink: 'syz.0.9579': attribute type 10 has an invalid length.
[ 1549.028853][T17682] ipvlan0: entered allmulticast mode
[ 1549.028887][T17682] veth0_vlan: entered allmulticast mode
[ 1549.095679][T17682] team0: Device ipvlan0 failed to register rx_handler
[ 1549.318720][T17688] bond10: entered promiscuous mode
[ 1549.320181][T17688] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1549.385473][T17695] netlink: 'syz.3.9585': attribute type 1 has an invalid length.
[ 1549.385495][T17695] netlink: 'syz.3.9585': attribute type 12 has an invalid length.
[ 1549.528995][T17702] rxe_eth0 speed is unknown, defaulting to 1000
[ 1549.718121][T17703] can: request_module (can-proto-0) failed.
[ 1549.787733][T17722] netlink: 'syz.1.9588': attribute type 4 has an invalid length.
[ 1549.913170][T17722] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check.
[ 1549.979629][T17721] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1550.153106][T17712] rxe_eth0 speed is unknown, defaulting to 1000
[ 1551.059881][T17765] syzkaller0: entered promiscuous mode
[ 1551.059906][T17765] syzkaller0: entered allmulticast mode
[ 1551.224004][T17759] nbd1: detected capacity change from 0 to 63
[ 1551.224842][T17764] block nbd1: NBD_DISCONNECT
[ 1551.225044][T17764] block nbd1: Disconnected due to user request.
[ 1551.225061][T17764] block nbd1: shutting down sockets
[ 1551.234365][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.234562][ T2004] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1551.234738][ T2004] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 1551.234756][ T2004] Buffer I/O error on dev nbd1, logical block 2, async page read
[ 1551.234771][ T2004] Buffer I/O error on dev nbd1, logical block 3, async page read
[ 1551.246269][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.246302][ T2004] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1551.246316][ T2004] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 1551.246330][ T2004] Buffer I/O error on dev nbd1, logical block 2, async page read
[ 1551.246344][ T2004] Buffer I/O error on dev nbd1, logical block 3, async page read
[ 1551.391913][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.391949][ T2004] Buffer I/O error on dev nbd1, logical block 0, async page read
[ 1551.391967][ T2004] Buffer I/O error on dev nbd1, logical block 1, async page read
[ 1551.393291][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.393483][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.393789][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.401581][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.401756][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.401833][T17593] ldm_validate_partition_table(): Disk read failed.
[ 1551.402014][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.402414][ T2004] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1551.402797][T17593] Dev nbd1: unable to read RDB block 0
[ 1551.404061][T17593]  nbd1: unable to read partition table
[ 1551.471971][T17593] ldm_validate_partition_table(): Disk read failed.
[ 1551.472589][T17593] Dev nbd1: unable to read RDB block 0
[ 1551.481633][T17593]  nbd1: unable to read partition table
[ 1551.605317][T17702] lo speed is unknown, defaulting to 1000
[ 1551.895962][T17779] netlink: 'syz.5.9604': attribute type 1 has an invalid length.
[ 1552.082196][T17785] ip_tables: iptables: counters copy to user failed while replacing table
[ 1552.107576][T17782] bond11: (slave geneve3): making interface the new active one
[ 1552.108402][T17782] bond11: (slave geneve3): Enslaving as an active interface with an up link
[ 1552.145748][T23024] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0
[ 1552.145802][T23024] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0
[ 1552.145837][T23024] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0
[ 1552.161824][T23020] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0
[ 1552.289515][T17779] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1552.510523][T17712] lo speed is unknown, defaulting to 1000
[ 1552.608094][T17794] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1552.722819][T17797] netlink: 'syz.5.9608': attribute type 83 has an invalid length.
[ 1552.874263][T17803] netlink: 'syz.3.9611': attribute type 3 has an invalid length.
[ 1553.147752][T17814] netlink: 'syz.5.9612': attribute type 4 has an invalid length.
[ 1553.147776][T17814] __nla_validate_parse: 10 callbacks suppressed
[ 1553.147788][T17814] netlink: 5620 bytes leftover after parsing attributes in process `syz.5.9612'.
[ 1553.613234][T23024] IPVS: starting estimator thread 0...
[ 1553.706242][T17823] IPVS: using max 25 ests per chain, 60000 per kthread
[ 1554.154683][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9616'.
[ 1554.154743][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9616'.
[ 1554.415448][T17830] Bluetooth: MGMT ver 1.23
[ 1555.198567][T17856] netlink: 'syz.3.9622': attribute type 11 has an invalid length.
[ 1555.354009][T17856] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1555.603390][T17869] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9625'.
[ 1555.603424][T17869] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9625'.
[ 1556.049670][T17878] veth0: entered promiscuous mode
[ 1556.156304][T17875] tipc: Started in network mode
[ 1556.156335][T17875] tipc: Node identity c2bd53829aa, cluster identity 4711
[ 1556.161592][T17875] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1556.192742][    C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured!
[ 1556.572919][T23031] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1556.832437][T17874] tipc: Disabling bearer <eth:syzkaller0>
[ 1557.020922][T17907] netlink: 'syz.0.9633': attribute type 49 has an invalid length.
[ 1557.082629][T17878] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1557.141571][T17878] ip_tables: iptables: counters copy to user failed while replacing table
[ 1557.145042][T17877] veth0: left promiscuous mode
[ 1557.480355][T17928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9636'.
[ 1557.480457][T17928] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9636'.
[ 1559.266464][T17891] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1559.661489][T17959] x_tables: unsorted underflow at hook 4
[ 1559.714426][T17963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9649'.
[ 1559.714461][T17963] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9649'.
[ 1559.962136][T17972] tc_dump_action: action bad kind
[ 1560.095465][T17985] netlink: 'syz.0.9656': attribute type 2 has an invalid length.
[ 1560.273643][T17995] siw: device registration error -23
[ 1560.303980][T18004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9660'.
[ 1560.304014][T18004] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9660'.
[ 1560.417127][T17995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9659'.
[ 1560.802481][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9663'.
[ 1561.475536][T18045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9668'.
[ 1561.475573][T18045] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9668'.
[ 1561.531033][T18045] syz_tun: entered promiscuous mode
[ 1561.561230][T18057] ip_tables: iptables: counters copy to user failed while replacing table
[ 1561.562466][T18057] netlink: 64 bytes leftover after parsing attributes in process `syz.0.9672'.
[ 1561.562989][T18045] syz_tun: left promiscuous mode
[ 1561.594165][T18054] x_tables: duplicate entry at hook 3
[ 1561.662441][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9670'.
[ 1561.730037][T18059] netlink: 'syz.0.9672': attribute type 16 has an invalid length.
[ 1561.730102][T18059] netlink: 'syz.0.9672': attribute type 17 has an invalid length.
[ 1561.801150][T18057] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1561.844932][T18057] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1562.065492][T18059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1562.065616][T18059] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1562.068307][T18059] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1562.068437][T18059] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1562.129097][T18059] ipvlan0: left allmulticast mode
[ 1562.129123][T18059] veth0_vlan: left allmulticast mode
[ 1562.171705][T18059] vxlan0: left allmulticast mode
[ 1562.172574][T18059] vxlan1: left allmulticast mode
[ 1562.174438][T18059] macsec1: left promiscuous mode
[ 1562.328160][T18070] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[ 1562.444878][T18072] xt_addrtype: ipv6 BLACKHOLE matching not supported
[ 1562.591548][T18082] ip6gretap1: entered allmulticast mode
[ 1562.593640][T18082] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1562.593655][T18082] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1562.593684][T18082] batman_adv: batadv0: Interface activated: ip6gretap1
[ 1562.680404][T18084] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1562.822072][T18105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1562.851156][T18105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1562.862620][T18105] bond0 (unregistering): Released all slaves
[ 1563.311544][T18171] netlink: 'syz.5.9688': attribute type 1 has an invalid length.
[ 1563.406829][T18156] ip_tables: iptables: counters copy to user failed while replacing table
[ 1564.242813][T18239] netlink: ct family unspecified
[ 1564.609962][T18257] bridge_slave_1: left allmulticast mode
[ 1564.609992][T18257] bridge_slave_1: left promiscuous mode
[ 1564.610214][T18257] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1564.674126][T18257] bridge_slave_0: left allmulticast mode
[ 1564.674157][T18257] bridge_slave_0: left promiscuous mode
[ 1564.676041][T18257] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1565.925056][T18301] __nla_validate_parse: 2 callbacks suppressed
[ 1565.926665][T18301] netlink: 6356 bytes leftover after parsing attributes in process `syz.5.9709'.
[ 1566.081418][T18306] netlink: 'syz.3.9710': attribute type 10 has an invalid length.
[ 1566.081450][T18306] ipvlan0: entered allmulticast mode
[ 1566.081466][T18306] veth0_vlan: entered allmulticast mode
[ 1566.118850][T18306] team0: Device ipvlan0 failed to register rx_handler
[ 1566.205775][T18305] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9710'.
[ 1566.256638][T18308] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9710'.
[ 1566.352862][T18312] openvswitch: netlink: Missing key (keys=40, expected=200000)
[ 1566.417867][T18310] dvmrp8: entered allmulticast mode
[ 1566.579411][T18312] netlink: 'syz.6.9712': attribute type 11 has an invalid length.
[ 1566.807644][T18323] syzkaller1: entered promiscuous mode
[ 1566.807670][T18323] syzkaller1: entered allmulticast mode
[ 1566.976522][T18332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9718'.
[ 1566.985937][T18332] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9718'.
[ 1567.038424][T18338] netlink: 'syz.6.9719': attribute type 1 has an invalid length.
[ 1567.082006][T18338] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9719'.
[ 1567.587260][T18351] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9723'.
[ 1567.587284][T18351] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9723'.
[ 1567.894955][T18361] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9727'.
[ 1567.951816][T18361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9727'.
[ 1567.951841][T18361] openvswitch: netlink: Flow key attr not present in new flow.
[ 1568.074832][T18365] bond0: entered promiscuous mode
[ 1568.074857][T18365] bond_slave_0: entered promiscuous mode
[ 1568.075012][T18365] bond_slave_1: entered promiscuous mode
[ 1568.134152][T18365] openvswitch: netlink: Flow key attr not present in new flow.
[ 1568.143167][T18364] bond0: left promiscuous mode
[ 1568.143191][T18364] bond_slave_0: left promiscuous mode
[ 1568.143348][T18364] bond_slave_1: left promiscuous mode
[ 1568.464293][T18380] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1568.517477][T18382] sch_fq: defrate 4294967293 ignored.
[ 1568.747501][T18387] ip_tables: iptables: counters copy to user failed while replacing table
[ 1569.235475][T18398] sctp: [Deprecated]: syz.1.9739 (pid 18398) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1569.235475][T18398] Use struct sctp_sack_info instead
[ 1569.235701][T18398] sctp: [Deprecated]: syz.1.9739 (pid 18398) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1569.235701][T18398] Use struct sctp_sack_info instead
[ 1569.495863][T18415] nbd: socks must be embedded in a SOCK_ITEM attr
[ 1569.842254][T18428] netlink: 'syz.5.9746': attribute type 11 has an invalid length.
[ 1569.859985][T18428] Bluetooth: hci0: unsupported parameter 5134
[ 1569.860008][T18428] Bluetooth: hci0: unsupported parameter 8192
[ 1569.860021][T18428] Bluetooth: hci0: unsupported parameter 5134
[ 1569.860034][T18428] Bluetooth: hci0: unsupported parameter 8192
[ 1570.099920][T18441] veth0_to_bond: entered allmulticast mode
[ 1570.189632][T18451] syzkaller1: entered promiscuous mode
[ 1570.189655][T18451] syzkaller1: entered allmulticast mode
[ 1570.237551][ T5651] block nbd1: Wrong magic (0x24000000)
[ 1570.237640][ T5651] block nbd1: Wrong magic (0x0)
[ 1570.332138][ T8963] nci: nci_rx_work: unknown MT 0x4
[ 1570.333017][ T8963] nci: nci_ntf_packet: unknown ntf opcode 0xe17
[ 1570.483452][T18466] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1571.050934][T18486] __nla_validate_parse: 5 callbacks suppressed
[ 1571.050955][T18486] netlink: 44 bytes leftover after parsing attributes in process `syz.5.9759'.
[ 1573.220479][T18455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1573.439102][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9768'.
[ 1573.439141][T18523] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9768'.
[ 1573.458144][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9768'.
[ 1573.521246][T18523] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9768'.
[ 1573.521285][T18523] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9768'.
[ 1573.540743][T18523] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9768'.
[ 1573.701010][T18519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9769'.
[ 1573.702533][T18519] SET target dimension over the limit!
[ 1573.896673][T18550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9773'.
[ 1573.948452][T18545] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check.
[ 1574.008872][T18555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9773'.
[ 1574.048296][T18552] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1574.090583][T18552] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1574.500739][T18572] bond2: option lacp_active: invalid value (5)
[ 1574.520449][T18572] bond2 (unregistering): Released all slaves
[ 1574.869814][T18593] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20003
[ 1575.295706][T18592] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1575.307982][T18592] A link change request failed with some changes committed already. Interface veth1_to_bo
d may have been left with an inconsistent configuration, please check.
[ 1575.507492][T18601] syzkaller1: entered promiscuous mode
[ 1575.507518][T18601] syzkaller1: entered allmulticast mode
[ 1576.306577][T18635] pimreg0: tun_chr_ioctl cmd 1074025677
[ 1576.306680][T18635] pimreg0: linktype set to 823
[ 1576.411809][T18542] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1576.503573][T18637] __nla_validate_parse: 8 callbacks suppressed
[ 1576.503594][T18637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9790'.
[ 1576.503621][T18637] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9790'.
[ 1576.769144][T18643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9795'.
[ 1576.894516][T18655] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9796'.
[ 1577.000144][T18655] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9796'.
[ 1577.281193][T18663] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9799'.
[ 1577.669870][   T30] audit: type=1800 audit(1793930463.290:120): pid=18677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9802" name="blkio.bfq.time_recursive" dev="tmpfs" ino=444 res=0 errno=-22
[ 1577.859562][T18689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9804'.
[ 1577.859595][T18689] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9804'.
[ 1577.994427][T18641] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9794'.
[ 1578.073086][T18694] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9805'.
[ 1578.093079][ T4953] block nbd9: Receive control failed (result -32)
[ 1578.478891][T18709] sctp: [Deprecated]: syz.3.9810 (pid 18709) Use of int in max_burst socket option.
[ 1578.478891][T18709] Use struct sctp_assoc_value instead
[ 1578.574877][T18716] netlink: 'syz.6.9813': attribute type 32 has an invalid length.
[ 1579.306683][T18749] ip_tables: iptables: counters copy to user failed while replacing table
[ 1579.435073][T18758] syzkaller0: entered promiscuous mode
[ 1579.435097][T18758] syzkaller0: entered allmulticast mode
[ 1579.438843][T18758] 0: reclassify loop, rule prio 0, protocol 800
[ 1579.439986][   T30] audit: type=1800 audit(1793930465.050:121): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9825" name="blkio.bfq.time_recursive" dev="tmpfs" ino=465 res=0 errno=-22
[ 1580.273994][T18788] tap0: tun_chr_ioctl cmd 2147767506
[ 1580.281709][T18788] tap0: tun_chr_ioctl cmd 21731
[ 1580.637137][T18803] netlink: 'syz.6.9835': attribute type 61 has an invalid length.
[ 1581.207382][T18831] netlink: 'syz.5.9840': attribute type 4 has an invalid length.
[ 1581.627081][T18842] __nla_validate_parse: 11 callbacks suppressed
[ 1581.627102][T18842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9844'.
[ 1581.702198][T18840] netlink: 'syz.1.9843': attribute type 8 has an invalid length.
[ 1581.900679][T18860] netlink: 'syz.6.9849': attribute type 11 has an invalid length.
[ 1581.920193][T18840] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1582.098555][T18870] netlink: zone id is out of range
[ 1582.098591][T18870] netlink: zone id is out of range
[ 1582.098599][T18870] netlink: zone id is out of range
[ 1582.098607][T18870] netlink: zone id is out of range
[ 1582.098615][T18870] netlink: zone id is out of range
[ 1582.427393][ T5651] Bluetooth: hci3: command 0x0405 tx timeout
[ 1583.281607][T18919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9859'.
[ 1583.390164][T18926] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9862'.
[ 1583.590974][T18934] openvswitch: netlink: Key 6 has unexpected len 13 expected 2
[ 1584.257895][T30167] team0: Port device bridge6 removed
[ 1584.319307][T30167] bond0 (unregistering): Released all slaves
[ 1584.334412][T30167] bond1 (unregistering): Released all slaves
[ 1584.371534][T30167] team0: Port device bond2 removed
[ 1584.372410][T30167] bond2 (unregistering): Released all slaves
[ 1584.404065][T30167] bond3 (unregistering): Released all slaves
[ 1584.436239][T30167] bond4 (unregistering): Released all slaves
[ 1584.460189][T30167] bond5 (unregistering): (slave veth3): Releasing active interface
[ 1584.463231][T30167] bond5 (unregistering): Released all slaves
[ 1584.501888][T30167] bond6 (unregistering): Released all slaves
[ 1584.528955][T30167] bond7 (unregistering): Released all slaves
[ 1584.554867][T30167] bond8 (unregistering): (slave veth5): Releasing active interface
[ 1584.566833][T30167] bond8 (unregistering): Released all slaves
[ 1584.594558][T30167] bond9 (unregistering): (slave wireguard0): Releasing backup interface
[ 1584.614357][T30167] bond9 (unregistering): Released all slaves
[ 1584.636439][T30167] bond10 (unregistering): Released all slaves
[ 1584.661377][T30167] bond11 (unregistering): Released all slaves
[ 1584.694186][T30167] bond12 (unregistering): Released all slaves
[ 1584.716620][T30167] bond13 (unregistering): Released all slaves
[ 1584.740408][T30167] bond14 (unregistering): Released all slaves
[ 1584.780990][T30167] bond15 (unregistering): (slave veth0_to_bond): Releasing backup interface
[ 1584.784088][T30167] bond15 (unregistering): Released all slaves
[ 1584.812968][T30172] tipc: Resetting bearer <eth:team0>
[ 1584.902497][T18933] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[ 1584.904595][T18937] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[ 1585.060766][T30167] tipc: Disabling bearer <eth:team0>
[ 1585.090584][T30167] tipc: Left network mode
[ 1585.314821][T18960] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9865'.
[ 1585.917761][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9874'.
[ 1586.174741][T18940] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1586.544893][T18984] macsec1: entered promiscuous mode
[ 1586.701655][T19006] netlink: 'syz.1.9880': attribute type 1 has an invalid length.
[ 1586.897190][T19012] netlink: 'syz.1.9880': attribute type 1 has an invalid length.
[ 1587.010188][T19016] ip6t_rt: unknown flags 1F
[ 1587.092433][T19006] bond4: entered promiscuous mode
[ 1587.092903][T19006] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1587.120969][T19010] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1587.121362][T19010] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address
[ 1587.121390][T19010] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[ 1587.171590][T19010] bond4: (slave xfrm1): making interface the new active one
[ 1587.171616][T19010] xfrm1: entered promiscuous mode
[ 1587.189659][T19010] bond4: (slave xfrm1): Enslaving as an active interface with an up link
[ 1587.242599][T19019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9882'.
[ 1587.242633][T19019] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9882'.
[ 1587.361308][T30167] 
[ 1587.363664][T30167] ======================================================
[ 1587.370679][T30167] WARNING: possible circular locking dependency detected
[ 1587.376318][T19024] netlink: 'syz.3.9884': attribute type 11 has an invalid length.
[ 1587.385486][T30167] syzkaller #0 Not tainted
[ 1587.389883][T30167] ------------------------------------------------------
[ 1587.396882][T30167] kworker/u8:28/30167 is trying to acquire lock:
[ 1587.403186][T30167] ffff88801cec4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x240
[ 1587.413779][T30167] 
[ 1587.413779][T30167] but task is already holding lock:
[ 1587.421129][T30167] ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0
[ 1587.430690][T30167] 
[ 1587.430690][T30167] which lock already depends on the new lock.
[ 1587.430690][T30167] 
[ 1587.441081][T30167] 
[ 1587.441081][T30167] the existing dependency chain (in reverse order) is:
[ 1587.450082][T30167] 
[ 1587.450082][T30167] -> #9 (&root->kernfs_rwsem){++++}-{4:4}:
[ 1587.458068][T30167]        down_write+0x91/0x200
[ 1587.462843][T30167]        kernfs_add_one+0x41/0x510
[ 1587.467961][T30167]        kernfs_create_dir_ns+0x18c/0x220
[ 1587.473689][T30167]        internal_create_group+0x440/0x1180
[ 1587.479610][T30167]        cpuhp_invoke_callback+0x434/0x810
[ 1587.485414][T30167]        cpuhp_issue_call+0x3f0/0x750
[ 1587.490782][T30167]        __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0
[ 1587.497364][T30167]        __cpuhp_setup_state+0x3f/0x60
[ 1587.502816][T30167]        do_one_initcall+0x250/0x870
[ 1587.508097][T30167]        do_initcall_level+0x10a/0x1a0
[ 1587.513654][T30167]        do_initcalls+0x59/0xa0
[ 1587.518514][T30167]        kernel_init_freeable+0x29d/0x3e0
[ 1587.524229][T30167]        kernel_init+0x22/0x1d0
[ 1587.529074][T30167]        ret_from_fork+0x514/0xb70
[ 1587.534174][T30167]        ret_from_fork_asm+0x1a/0x30
[ 1587.539446][T30167] 
[ 1587.539446][T30167] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}:
[ 1587.547260][T30167] 
[ 1587.547260][T30167] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[ 1587.554999][T30167]        cpus_read_lock+0x3d/0x160
[ 1587.560133][T30167]        static_key_slow_inc+0x12/0x30
[ 1587.565593][T30167]        nbd_genl_reconnect_sock_cb+0x69a/0xbb0
[ 1587.571925][T30167]        nbd_genl_foreach_sock+0x265/0x450
[ 1587.577720][T30167]        nbd_genl_reconfigure+0xbbb/0x1040
[ 1587.583568][T30167]        genl_family_rcv_msg_doit+0x233/0x340
[ 1587.589623][T30167]        genl_rcv_msg+0x614/0x7a0
[ 1587.594635][T30167]        netlink_rcv_skb+0x226/0x4a0
[ 1587.599913][T30167]        genl_rcv+0x28/0x40
[ 1587.604400][T30167]        netlink_unicast+0x8ef/0xa80
[ 1587.609674][T30167]        netlink_sendmsg+0x7f0/0xb20
[ 1587.614956][T30167]        sock_sendmsg_nosec+0x14e/0x190
[ 1587.620492][T30167]        ____sys_sendmsg+0x54e/0x850
[ 1587.625765][T30167]        ___sys_sendmsg+0x2a5/0x360
[ 1587.630951][T30167]        __x64_sys_sendmsg+0x1b1/0x290
[ 1587.636396][T30167]        do_syscall_64+0x166/0x520
[ 1587.641508][T30167]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1587.647919][T30167] 
[ 1587.647919][T30167] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1587.655555][T30167]        __mutex_lock+0x197/0x15a0
[ 1587.660674][T30167]        nbd_queue_rq+0x373/0xff0
[ 1587.665691][T30167]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1587.671841][T30167]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1587.678708][T30167]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1587.685195][T30167]        blk_mq_run_work_fn+0x167/0x2f0
[ 1587.690730][T30167]        process_scheduled_works+0xc3d/0x1630
[ 1587.696790][T30167]        worker_thread+0xa47/0xfb0
[ 1587.701893][T30167]        kthread+0x38b/0x480
[ 1587.706473][T30167]        ret_from_fork+0x514/0xb70
[ 1587.711575][T30167]        ret_from_fork_asm+0x1a/0x30
[ 1587.716850][T30167] 
[ 1587.716850][T30167] -> #5 (&cmd->lock){+.+.}-{4:4}:
[ 1587.724048][T30167]        __mutex_lock+0x197/0x15a0
[ 1587.729146][T30167]        nbd_queue_rq+0xc1/0xff0
[ 1587.734156][T30167]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1587.740227][T30167]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1587.747069][T30167]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1587.753558][T30167]        blk_mq_run_work_fn+0x167/0x2f0
[ 1587.759098][T30167]        process_scheduled_works+0xc3d/0x1630
[ 1587.765166][T30167]        worker_thread+0xa47/0xfb0
[ 1587.770276][T30167]        kthread+0x38b/0x480
[ 1587.774852][T30167]        ret_from_fork+0x514/0xb70
[ 1587.779952][T30167]        ret_from_fork_asm+0x1a/0x30
[ 1587.785227][T30167] 
[ 1587.785227][T30167] -> #4 (set->srcu){.+.+}-{0:0}:
[ 1587.792338][T30167]        __synchronize_srcu+0xca/0x2f0
[ 1587.797787][T30167]        elevator_switch+0x1e8/0x7b0
[ 1587.803129][T30167]        elevator_change+0x2fa/0x480
[ 1587.808411][T30167]        elevator_set_default+0x375/0x440
[ 1587.814131][T30167]        blk_register_queue+0x404/0x4f0
[ 1587.819727][T30167]        __add_disk+0x6b8/0xdb0
[ 1587.824607][T30167]        add_disk_fwnode+0x100/0x3a0
[ 1587.829880][T30167]        nbd_dev_add+0x733/0xb60
[ 1587.834810][T30167]        nbd_init+0x168/0x1f0
[ 1587.839472][T30167]        do_one_initcall+0x250/0x870
[ 1587.844745][T30167]        do_initcall_level+0x10a/0x1a0
[ 1587.850192][T30167]        do_initcalls+0x59/0xa0
[ 1587.855034][T30167]        kernel_init_freeable+0x29d/0x3e0
[ 1587.860751][T30167]        kernel_init+0x22/0x1d0
[ 1587.865607][T30167]        ret_from_fork+0x514/0xb70
[ 1587.870724][T30167]        ret_from_fork_asm+0x1a/0x30
[ 1587.876009][T30167] 
[ 1587.876009][T30167] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[ 1587.883848][T30167]        __mutex_lock+0x197/0x15a0
[ 1587.888960][T30167]        elevator_change+0x1af/0x480
[ 1587.894239][T30167]        elevator_set_none+0xb5/0x140
[ 1587.899607][T30167]        blk_mq_update_nr_hw_queues+0x5ef/0x19e0
[ 1587.905926][T30167]        nbd_start_device+0x189/0xb30
[ 1587.911299][T30167]        nbd_genl_connect+0x167d/0x1cd0
[ 1587.916838][T30167]        genl_family_rcv_msg_doit+0x233/0x340
[ 1587.922891][T30167]        genl_rcv_msg+0x614/0x7a0
[ 1587.927914][T30167]        netlink_rcv_skb+0x226/0x4a0
[ 1587.933200][T30167]        genl_rcv+0x28/0x40
[ 1587.937701][T30167]        netlink_unicast+0x8ef/0xa80
[ 1587.942988][T30167]        netlink_sendmsg+0x7f0/0xb20
[ 1587.948278][T30167]        sock_sendmsg_nosec+0x14e/0x190
[ 1587.953829][T30167]        ____sys_sendmsg+0x54e/0x850
[ 1587.959118][T30167]        ___sys_sendmsg+0x2a5/0x360
[ 1587.964321][T30167]        __x64_sys_sendmsg+0x1b1/0x290
[ 1587.969783][T30167]        do_syscall_64+0x166/0x520
[ 1587.974888][T30167]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1587.981312][T30167] 
[ 1587.981312][T30167] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[ 1587.989913][T30167]        blk_alloc_queue+0x544/0x690
[ 1587.995198][T30167]        __blk_mq_alloc_disk+0x194/0x390
[ 1588.000821][T30167]        nbd_dev_add+0x494/0xb60
[ 1588.005750][T30167]        nbd_init+0x168/0x1f0
[ 1588.010429][T30167]        do_one_initcall+0x250/0x870
[ 1588.015705][T30167]        do_initcall_level+0x10a/0x1a0
[ 1588.021155][T30167]        do_initcalls+0x59/0xa0
[ 1588.025994][T30167]        kernel_init_freeable+0x29d/0x3e0
[ 1588.031705][T30167]        kernel_init+0x22/0x1d0
[ 1588.036549][T30167]        ret_from_fork+0x514/0xb70
[ 1588.041651][T30167]        ret_from_fork_asm+0x1a/0x30
[ 1588.046922][T30167] 
[ 1588.046922][T30167] -> #1 (fs_reclaim){+.+.}-{0:0}:
[ 1588.054119][T30167]        fs_reclaim_acquire+0x71/0x100
[ 1588.059576][T30167]        kmem_cache_alloc_noprof+0x5f/0x600
[ 1588.065470][T30167]        __kernfs_iattrs+0xdd/0x380
[ 1588.070740][T30167]        kernfs_iop_setattr+0xe6/0x3f0
[ 1588.076201][T30167]        notify_change+0xbba/0xea0
[ 1588.081372][T30167]        do_truncate+0x1c2/0x250
[ 1588.086317][T30167]        path_openat+0x18a6/0x20f0
[ 1588.091508][T30167]        do_file_open+0x23e/0x4a0
[ 1588.096527][T30167]        do_sys_openat2+0x115/0x200
[ 1588.101716][T30167]        __x64_sys_openat+0x138/0x170
[ 1588.107080][T30167]        do_syscall_64+0x166/0x520
[ 1588.112188][T30167]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1588.118591][T30167] 
[ 1588.118591][T30167] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[ 1588.127098][T30167]        __lock_acquire+0x164c/0x2de0
[ 1588.132477][T30167]        lock_acquire+0x115/0x350
[ 1588.137502][T30167]        down_write+0x91/0x200
[ 1588.142261][T30167]        kernfs_unlink_sibling+0x6d/0x240
[ 1588.148064][T30167]        kernfs_rename_ns+0x575/0x9e0
[ 1588.153427][T30167]        sysfs_rename_link_ns+0x16e/0x1b0
[ 1588.159145][T30167]        device_rename+0x110/0x210
[ 1588.164344][T30167]        __dev_change_net_namespace+0x156d/0x2050
[ 1588.170752][T30167]        cfg802154_switch_netns+0xbd/0x410
[ 1588.176553][T30167]        cfg802154_pernet_exit+0x75/0xc0
[ 1588.182176][T30167]        ops_undo_list+0x451/0x8f0
[ 1588.187281][T30167]        cleanup_net+0x572/0x810
[ 1588.192211][T30167]        process_scheduled_works+0xc3d/0x1630
[ 1588.198269][T30167]        worker_thread+0xa47/0xfb0
[ 1588.203374][T30167]        kthread+0x38b/0x480
[ 1588.207957][T30167]        ret_from_fork+0x514/0xb70
[ 1588.213066][T30167]        ret_from_fork_asm+0x1a/0x30
[ 1588.218342][T30167] 
[ 1588.218342][T30167] other info that might help us debug this:
[ 1588.218342][T30167] 
[ 1588.228552][T30167] Chain exists of:
[ 1588.228552][T30167]   &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem
[ 1588.228552][T30167] 
[ 1588.242971][T30167]  Possible unsafe locking scenario:
[ 1588.242971][T30167] 
[ 1588.250407][T30167]        CPU0                    CPU1
[ 1588.255767][T30167]        ----                    ----
[ 1588.261120][T30167]   lock(&root->kernfs_rwsem);
[ 1588.265874][T30167]                                lock(cpuhp_state_mutex);
[ 1588.272969][T30167]                                lock(&root->kernfs_rwsem);
[ 1588.280252][T30167]   lock(&root->kernfs_iattr_rwsem);
[ 1588.285525][T30167] 
[ 1588.285525][T30167]  *** DEADLOCK ***
[ 1588.285525][T30167] 
[ 1588.293651][T30167] locks held by kworker/u8:28/30167: 5, last CPU#1:
[ 1588.300219][T30167]  #0: ffff88801cec6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1588.311099][T30167]  #1: ffffc9000a347c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1588.321633][T30167]  #2: ffffffff9147d5e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810
[ 1588.330946][T30167]  #3: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: cfg802154_pernet_exit+0x18/0xc0
[ 1588.340516][T30167]  #4: ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0
[ 1588.350517][T30167] 
[ 1588.350517][T30167] stack backtrace:
[ 1588.356398][T30167] CPU: 1 UID: 0 PID: 30167 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) 
[ 1588.366022][T30167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1588.376064][T30167] Workqueue: netns cleanup_net
[ 1588.380830][T30167] Call Trace:
[ 1588.384096][T30167]  <TASK>
[ 1588.387016][T30167]  dump_stack_lvl+0xe8/0x150
[ 1588.391604][T30167]  print_circular_bug+0x2e2/0x300
[ 1588.396625][T30167]  check_noncircular+0x12f/0x150
[ 1588.401561][T30167]  __lock_acquire+0x164c/0x2de0
[ 1588.406408][T30167]  ? __lock_acquire+0x747/0x2de0
[ 1588.411345][T30167]  ? __lock_acquire+0x747/0x2de0
[ 1588.416275][T30167]  lock_acquire+0x115/0x350
[ 1588.420771][T30167]  ? kernfs_unlink_sibling+0x6d/0x240
[ 1588.426141][T30167]  down_write+0x91/0x200
[ 1588.430377][T30167]  ? kernfs_unlink_sibling+0x6d/0x240
[ 1588.435744][T30167]  ? __pfx_down_write+0x10/0x10
[ 1588.440585][T30167]  ? kernfs_root+0x1c/0x230
[ 1588.445080][T30167]  ? kernfs_root+0x1c/0x230
[ 1588.449584][T30167]  ? kernfs_root+0x1ea/0x230
[ 1588.454169][T30167]  kernfs_unlink_sibling+0x6d/0x240
[ 1588.459363][T30167]  kernfs_rename_ns+0x575/0x9e0
[ 1588.464212][T30167]  sysfs_rename_link_ns+0x16e/0x1b0
[ 1588.469410][T30167]  device_rename+0x110/0x210
[ 1588.473995][T30167]  __dev_change_net_namespace+0x156d/0x2050
[ 1588.479887][T30167]  ? __pfx___dev_change_net_namespace+0x10/0x10
[ 1588.486128][T30167]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1588.491154][T30167]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1588.496947][T30167]  ? __mutex_lock+0x10de/0x15a0
[ 1588.501788][T30167]  ? __mutex_lock+0x5cd/0x15a0
[ 1588.506546][T30167]  ? __pfx___mutex_lock+0x10/0x10
[ 1588.511566][T30167]  cfg802154_switch_netns+0xbd/0x410
[ 1588.516852][T30167]  cfg802154_pernet_exit+0x75/0xc0
[ 1588.521956][T30167]  ops_undo_list+0x451/0x8f0
[ 1588.526545][T30167]  ? __pfx_ops_undo_list+0x10/0x10
[ 1588.531651][T30167]  ? idr_destroy+0x227/0x290
[ 1588.536231][T30167]  cleanup_net+0x572/0x810
[ 1588.540641][T30167]  ? __pfx_cleanup_net+0x10/0x10
[ 1588.545577][T30167]  ? rcu_is_watching+0x16/0xb0
[ 1588.550337][T30167]  ? process_scheduled_works+0x97a/0x1630
[ 1588.556055][T30167]  process_scheduled_works+0xc3d/0x1630
[ 1588.561615][T30167]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1588.567592][T30167]  ? assign_work+0x3cf/0x5d0
[ 1588.572178][T30167]  worker_thread+0xa47/0xfb0
[ 1588.576777][T30167]  kthread+0x38b/0x480
[ 1588.580835][T30167]  ? __pfx_worker_thread+0x10/0x10
[ 1588.585942][T30167]  ? __pfx_kthread+0x10/0x10
[ 1588.590526][T30167]  ret_from_fork+0x514/0xb70
[ 1588.595111][T30167]  ? __pfx_ret_from_fork+0x10/0x10
[ 1588.600213][T30167]  ? __switch_to+0xc78/0x1410
[ 1588.604887][T30167]  ? __pfx_kthread+0x10/0x10
[ 1588.609474][T30167]  ret_from_fork_asm+0x1a/0x30
[ 1588.614250][T30167]  </TASK>
[ 1588.778455][T19024] ieee80211 phy113: Selected rate control algorithm 'minstrel_ht'
[ 1588.800720][T30167] hsr_slave_0: left promiscuous mode
[ 1588.801251][T30167] hsr_slave_1: left promiscuous mode
[ 1588.828963][T30167] veth1_macvtap: left promiscuous mode
[ 1588.946414][T30167] smc: removing net device macvtap0 with user defined pnetid SYZ0
[ 1590.004574][T30167] IPVS: stop unused estimator thread 0...