last executing test programs:

5.202275609s ago: executing program 4 (id=2271):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) (async)
listen(r0, 0x1) (async)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r1, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x2) (async)
accept4(r0, 0x0, 0x0, 0x0) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4433000041000701fefffffffeffffff017c0000040042800c00018006000600800a0000203302801c3317800400150004008b80080086800400b2800633018024", @ANYRES8=r2, @ANYRES64=r2], 0x3344}, 0x1, 0x0, 0x0, 0x4040044}, 0xc000) (async)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x1, 0xc, 0x4, 0x3ff}, {0x401, 0x5, 0x1, 0x1}, {0x401, 0x4, 0x6, 0x9}, {0x1, 0x1, 0x1, 0xa}, {0x407, 0x3d, 0x4, 0x10001}, {0x0, 0x9, 0x0, 0x80000001}]}, 0x10)

4.641910468s ago: executing program 0 (id=2278):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000005, 0x3032, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r1, &(0x7f0000002e80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000400)="83d7", 0x2}], 0x1}}], 0x1, 0x41)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000200)={0x8, 0x1, 0x200, 0x3, 0x2, 0x7ff, 0xfff, 0x6e4c8f, r3}, 0x20)
getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000140), &(0x7f00000001c0)=0x4)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
getsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000005c0)=""/138, &(0x7f0000000680)=0x8a)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001214010028bd7000fcdbdf250800", @ANYRES16=r4], 0x30}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000054)
r6 = openat$cgroup_ro(r4, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r6, 0x82316000)
r7 = socket(0x1e, 0x4, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000480), 0x4)
recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000001e40)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/65, 0xfffffffffffffde0}, 0x4}], 0x1, 0x40002122, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000020040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28)
sendmsg$tipc(r7, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000000c0)="e8", 0x1}], 0x1}, 0x4800)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r8 = accept4(r0, 0x0, 0x0, 0x800)
sendmsg$nl_route_sched(r8, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x80)
recvmsg$kcm(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/11, 0xb}], 0x1}, 0x22)

4.362291478s ago: executing program 4 (id=2283):
r0 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000400)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000304000200d700", 0x5a}, {&(0x7f0000000280)="ffaf", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'vlan0\x00', <r2=>0x0})
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r4, 0xfffffffc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xcb, &(0x7f0000000280)={0x0, 0x1, 0x5, r2, 0x4}, 0xc)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20)
socket$inet_mptcp(0x2, 0x1, 0x106)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, r8, 0x7}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000001)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7)

4.181126143s ago: executing program 0 (id=2284):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001b1401"], 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300"], 0x64}}, 0x0)
sendmsg(r2, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000)
socket$kcm(0x29, 0x5, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x6c, 0x0, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, [@CTA_LABELS_MASK={0x4}, @CTA_SEQ_ADJ_ORIG={0x54, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xfcc}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1200000}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3efc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@cgroup, 0xffffffffffffffff, 0x2a}, 0x20)
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x2, 0x3, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x81133573713dfe30}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x15}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4004000)
r3 = socket$kcm(0x10, 0x2, 0x10)
r4 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', <r5=>0x0})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', <r7=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10)
bind$xdp(r4, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r6}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000477b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r10=>0x0})
sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="080100081000010426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0300000000000000d800128009000100766c616e00000000c800028006000100020000000600050088a800000c0002000b0000000700000006000500810000000c000200020000000c000000580003800c0001000d000000060000000c000100ff000000070000000c0001000400000000010000540001000200000010ce00000c000100ff010000090000000c00010083020000130000000c000100f44b000000020000060001000300000034000480d3ff010003000000050000000c00010006000000090000000c000100ffff0000ff7fffff0c000100000001000900000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x108}}, 0x0)
read(r8, &(0x7f0000000080)=""/4, 0x4)
openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x600000, 0x0)

4.057150652s ago: executing program 3 (id=2285):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a00000005"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)

3.911161665s ago: executing program 2 (id=2286):
unshare(0x8000000) (async)
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r0=>0x0}, &(0x7f0000000040)=0x8)
unshare(0x10000) (async)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x1, &(0x7f0000000240)=@raw=[@jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0x6, 0xffffffffffffffff}], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, r1, r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x80000000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r4, 0x0, 0x11, 0x62, &(0x7f0000000400)="eacb3c26f813d1ea71c3e1f1cd230b5e47", &(0x7f0000000440)=""/98, 0x7, 0x0, 0x21, 0x3e, &(0x7f00000004c0)="ae288d06720755d2c48b9b7e59e0f122f722e8eaa22084b1f880d56423d8859154", &(0x7f0000000500)="aff775fd7482c15572fca4241e54fae36d7be8bb0d5dd6bc9aa6e558377d9c7c99e1eee9ca41856c5c2fd2d0183132ac6e5525f71d753710e53ac892f4cf", 0x4, 0x0, 0x625fb835}, 0x50) (async)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000005c0)={r0, 0x2, 0x93, "d58444687c329988a9c657493cfad408f4625dee9f2746f2963d80733447f34cbca35c941c0c53840d2cb2ff8c5854c1753b1aaa555e78965727eec638f5c4cb1e73ba62b7222bdc60042800f61e858f05d3e83ed8b2f72ea3310c9013b21cb6442448cbbd7e04bfaedaaf029b40fc43848f3ff33035be59e7ea6a99038c238eb2b190ac16ccd9f18a86397a241eaa79cf0a92"}, 0x9b) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x14, r7, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async)
ioctl$sock_SIOCADDDLCI(r6, 0x8980, &(0x7f00000007c0)={'veth1_macvtap\x00', 0xff69}) (async)
clock_gettime(0x0, &(0x7f0000000840)={<r8=>0x0, <r9=>0x0})
ppoll(&(0x7f0000000800)=[{r1, 0x680}, {r5}, {r3, 0xb000}, {r5, 0x9241}, {r6, 0x20}, {r5, 0x6002}, {r3, 0x10}], 0x7, &(0x7f0000000880)={r8, r9+10000000}, &(0x7f00000008c0)={[0x6f]}, 0x8) (async)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000900)={0x212c}, 0x8) (async)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000980)=@o_path={&(0x7f0000000940)='./file0\x00', r4, 0x4000, r4}, 0x18) (async)
syz_genetlink_get_family_id$SEG6(&(0x7f00000009c0), r6) (async)
r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), r6)
sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000e80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000a80)={0x390, r10, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x130, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x79, 0x3, "9992de496b8634ac32edaa55bb433cb39a7c0c2d5bbd66869c0de56bbf7ce780fae9add5139ddbf8b9634a7d5e4085d2d9f1ff77042207a892a6e26badb0e9587037d3bfe70b825dee4a2717c3b9db5c962f3f01b3ef81debd8826287f17e738b93e2b749477917844b6c726c9d566d70580ed3f4e"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "ec29e1549d21683716e29488f4e82a37cea3556b97"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "5c408d9937974a9dc2281d85842beee94e089ba3c71ba58d6235d8ffb946cb8c"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NODE={0x18c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "48ac00c112877b5573c879e6cd90cce50ace88c483bd7d57057aabdf7465118dc5d6"}}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e83b1ea2636b15907507b2411c5e4f53f4741083"}}, @TIPC_NLA_NODE_ID={0xf7, 0x3, "668a2e54d928b5ea6af33541dd742b849322f753c8b4453bb54dc0c6872a35171510f7f982bf4061c47a33c37c213472b26a914430b67823d00f5c2aa09edcb8b6d6d611865d67f19f91cc7ccf7fcb2b287a10e330c76cea61f00de31a28cbd0c0df9099d7ec12c6ad7cb7321a0edb4382871bcfd4b6e5fe92e8fa8241073cf7066675127b0d4ea8743a91407782e4e7e029641b26cc7e480efa3431c307299dba0556eaa7d98a648f22b3568ad33fe9884edfb93c215f5ba5a568595b06b742ad2d05ed3c8150cfc669403aec26d7f5dc5e4f1a1d81c067cd031dc75180c92d07e97781aed3101cde668895ddee4638da2adb"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_BEARER={0xb8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x9, @mcast1, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6gre0\x00'}}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x59}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x435}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'wlan1\x00'}}]}]}, 0x390}, 0x1, 0x0, 0x0, 0x20000048}, 0x20000000) (async)
r11 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f0000000ec0), &(0x7f0000000f00)=0x4)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000f40), &(0x7f0000000f80)=0x4)
ioctl$XFS_IOC_FD_TO_HANDLE(r6, 0xc038586a, &(0x7f00000010c0)={<r12=>r4, &(0x7f0000000fc0)='+/\'{\'{%]\x00', 0xa40, &(0x7f0000001000)={@_ha_fsid={[0xfe000000, 0x3]}, {0x1, 0x3, 0x5, 0x4}}, 0x5b4, &(0x7f0000001040)={@_ha_fsid}, &(0x7f0000001080)=0x9}) (async)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r11, 0x84, 0x13, &(0x7f0000001100)={<r13=>r0, 0x3}, &(0x7f0000001140)=0x8)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000001180)={r13, 0x3}, &(0x7f00000011c0)=0x8) (async)
connect$bt_sco(r12, &(0x7f0000001200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8)
getsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f0000001240)={0x0, @loopback, @private}, &(0x7f0000001280)=0xc)

3.827517681s ago: executing program 3 (id=2287):
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240)=0xb, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10)
listen(r0, 0x5)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x2c8d4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
r3 = accept$inet(r0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "1234567812345678", "12345678123457781234567812345678", "001000", "deffffff00"}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet_tcp_TLS_RX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", '\b\x00', "1234567812345678"}, 0x28)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000640)={'wlan0\x00'})
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r7=>0x0})
r8 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r8, &(0x7f0000000000)={0x1d, r7, 0x3, {0x2, 0xff, 0x1}, 0x2}, 0x18)
bind$can_j1939(r5, &(0x7f0000000540)={0x1d, r7, 0x2, {0x1, 0xff, 0x4}}, 0x18)
bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0xffffffffffffffff, {0x0, 0x0, 0x3}, 0xfe}, 0x18)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20}, 0x18000)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000126bd7000fcdbdf250300000008000200010000000500050078000000050005008000000008000400000000000c000180080006000800000024000680060005004e200000060005004e21000008000300ac14141d060005004e200000d54e0c8361a081b34168e69546709eb3aebc21e2a95d29830a6ee2ae90b952f6189759e3074db365782fcb9101e83da6c1eaa8c67df6904bb421e3ce5eb03fefcc8259f1c31676a13fdbb73fd0fbbc076e8c4cd7ff282a2e3bb11b44ca4ef7d6f520da101b8f330f7eefb84d4ad68e0b3ff281ecf1b2bc8c341d82dab1b5b01afaac9a1eb68869b07289ce52da03c8cefb56c970f11deaab02784f8c325f33a6bf5c52b4653c35a84b34ef723672a49534362d5ba09febb9dd198c7c4045df280420507f4115287ef1751553d1c89208835f9153a4db12b8d702dea561da5cf68118dc2264851cfd27fa03e06f7b"], 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x4000)
mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x810, r0, 0x754c3000)

3.689016681s ago: executing program 2 (id=2288):
socketpair(0x25, 0x0, 0x200, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={<r2=>0x0, 0x3}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2, 0xfffffff9, 0x10}, &(0x7f0000000100)=0xc)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8, 0x100010, r1, 0xd3bc6000)
r3 = accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000001c0)=0x80, 0x80800)
mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x810, r1, 0x5b519000)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000200)={0x2, 'wlan0\x00', {0xb7b}, 0x80})
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240)={r2, 0x9}, 0x8)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="3e8338a1c34937676b16cc0ddd060ba884bb814a084c93a1b21fb08136cbcaaf42ac446d59a4b87461c2adf60b159b3f8df5d76f5b1e0a4d2ecd8428f7734f4e08f7f288a9fce0c9a588f853f44fdac0e372b5a85c44779377284ad66526d5f446701895f1b74760889a3feeb048bbb53d6cc0aaf7666dfe095611e5f70e373040c328311a541ced1511a456b88bd056f0a8eba04185a4dfaee0f0f3134c8c1a2c59734fc6af66530d9a695464ed4c6ad9591cb49639c13ecaf46964b3034e883b5ff61a9b", 0xc5)
sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x12, 0x2, 0x70bd27, 0x25dfdbfb, {0x9, 0x2, 0xe, 0xb, {0x4e24, 0x4e24, [0x5, 0x1, 0xfffffffe, 0x5], [0x200, 0x1, 0x3, 0xa], r4, [0x2, 0x4]}, 0x8, 0xb}}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40000000)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r0)
sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80200092}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r5, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}]}, @IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x400}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x80}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2df6}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x11}, 0x20000090)
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f00000006c0)=0x28801, 0x4)
recvfrom(r0, &(0x7f0000000700)=""/134, 0x86, 0x100, 0x0, 0x0)
setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f00000007c0), 0x4)
syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000880), r3)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000008c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x70, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x10}}}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x648fb0f4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1ac80000}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffff89}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x392}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044084}, 0x24008085)
getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000a00)={'mangle\x00', 0x63, "db751d585862da30410c1315dd15846a6c7ef461c62fb9ec0535240c8a4098b2a99af9d3ba4a7701b256d0007b85d40d2005182891382eecbfe80787a771a82953d7a73d4894eedd7f2fc6d531c5dd3f2cbd891ba1547d2ab2081537dd621a73b28862"}, &(0x7f0000000ac0)=0x87)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000b00))
writev(r1, &(0x7f0000001b40)=[{&(0x7f0000000b40)="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", 0x1000}], 0x1)
setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000001b80)=0x800, 0x4)
r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2200, 0x0)
ioctl$PPPIOCSMRRU(r9, 0x4004743b, &(0x7f0000001c00))
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001c40)=0x2401, 0x4)
recvfrom(r0, &(0x7f0000001c80)=""/26, 0x1a, 0x2001, &(0x7f0000001cc0)=@rc={0x1f, @none, 0x7}, 0x80)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001dc0)={{0xffffffffffffffff, <r10=>0xffffffffffffffff}, &(0x7f0000001d40), &(0x7f0000001d80)='%pi6   \x00'}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x1c, &(0x7f0000001ec0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1f}, [@jmp={0x5, 0x1, 0x4, 0x5, 0x7, 0x4, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x9}, @map_fd={0x18, 0x3, 0x1, 0x0, r10}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @tail_call, @btf_id={0x18, 0x3, 0x3, 0x0, 0x2}]}, &(0x7f0000001fc0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000002000)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000002040)={0x2, 0x2, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002180)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000021c0)=[{0x2, 0x4, 0x3, 0x5}, {0x1, 0x1, 0x1, 0xa}, {0x2, 0x2, 0xe, 0x3}, {0x0, 0x4, 0x9, 0x4}, {0x4, 0x1, 0xe, 0x9}, {0x0, 0x2, 0x2, 0x7}, {0x2, 0x3, 0x8, 0xb}], 0x10, 0x1c}, 0x94)

3.688279851s ago: executing program 0 (id=2289):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
syz_emit_ethernet(0x2c, &(0x7f00000004c0)={@multicast, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3, 0x1e, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @echo={0x8, 0x0, 0x0, 0xfff, 0x200, "c135"}}}}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58)
write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@val={0x0, 0x88be}, @void, @ipv6=@tipc_packet={0x2, 0x6, "f8558a", 0x154, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, {[@hopopts={0x2b, 0x1c, '\x00', [@jumbo={0xc2, 0x4, 0xfffffe01}, @generic={0x7, 0xc1, "7794a2ec1f3491946628486f6e5567c5db05d5a6f13c8c300f8188e4470cb1883eb431c6cf02258a96ce0b5a809cc0fd1106fbcf005604eedafdba5eb0c455e41f772374267d738891978d38ee1c5ffdb38615100c0d850a536ee5c12741c390592dfa7e2f6d366bc2c72bd446a44f01481c80069a3c131f436bcd9cbb14163c5bca17dc0a3f02fcdababd2eb682acf2dbcfc52c82ce0f92bd7cd7c08bb52c7e56a0bebe72d93f8643a221c171377568b6e0855d4cf6a54d1f8fec1c2c1c37d352"}, @ra={0x5, 0x2, 0x5}, @ra={0x5, 0x2, 0x9}, @ra={0x5, 0x2, 0xfff}, @jumbo={0xc2, 0x4, 0x2c94cb99}, @jumbo={0xc2, 0x4, 0x4}]}, @fragment={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, @routing={0x2c, 0x6, 0x0, 0x5, 0x0, [@loopback, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}], @payload_direct={{{{0x24, 0x0, 0x1, 0x0, 0x0, 0x8, 0x2, 0x2, 0x401, 0x0, 0x3, 0x2, 0x2, 0x3, 0xfffc, 0x8, 0x2, 0x4e20, 0x4e22}, 0x4, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}, 0x180)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000180)="10797fcd6cd957d2b903c6bf46b4abf3629ff075475e4bd6e43be1712bf8b4dc", 0x20)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x67)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x41, 0x1, 0x70bd28, 0x25dfdbfe, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x10}]}]}, @typed={0x4, 0x2, 0x0, 0x0, @binary}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4)
r6 = socket(0x11, 0x3, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f00000003c0)={'batadv_slave_1\x00', {0x2, 0x20, @empty=0xcf05fdfd}})
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x1403, 0x400, 0x70bd26, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x40010)
r7 = accept$alg(r2, 0x0, 0x0)
write$cgroup_pid(r7, &(0x7f0000000480), 0x12)
readv(r7, &(0x7f00000011c0)=[{&(0x7f0000000f80)=""/180, 0xb4}], 0x1)
sendmmsg$alg(r7, &(0x7f0000001c80)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="a27a196c868cdebbc88524fe5c837ecaaadfff8fc2cd2c97dfdfe2ebd46b485319c6d4bc424619dde7168e7d729a0d7250c002f8dd972e09505f2218e690214ca89943bbd0f15c4397a4ddc68fd4dbfcbde1af6c7131af5bc548cc8745847edff51bb4b33d9e5b1c201ec8243677f8156016117c64c3282ff5b26892465b27b9fe9fe95db1efb583e23f7ae6196dc87c98b76de404b012e1951e20160a7759fa8d8791", 0xa3}], 0x1, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48080}], 0x1, 0x4)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="810902000000000000000300000008000100000000001c0007800c000180080001"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080)

3.563911811s ago: executing program 4 (id=2290):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x1e, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c00dfff060a0b0400000000000000000200000050000418590e8e36c2802c"], 0xa4}}, 0x0) (async)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r0) (async)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001600)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="2c002d8005000400fd000000080002"], 0x48}, 0x1, 0x0, 0x0, 0x4811}, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001200010000000000478054c02949b36241d4"], 0x48}, 0x1, 0x0, 0x0, 0x8810}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c0000001d00070f000200000000000007000000", @ANYRES32=r5, @ANYRES16=r3, @ANYBLOB="1c"], 0x24}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)

3.370121151s ago: executing program 4 (id=2291):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = epoll_create1(0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)=0x100)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000080)=0x4)
r3 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @local}}, &(0x7f0000000100)=0x1c)
getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0, <r5=>0x0}}, {{@in=@private}, 0x0, @in6=@empty}}, &(0x7f00000002c0)=0xfffffffffffffcef)
ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000580)={0x0, @ethernet={0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, @xdp={0x2c, 0x8, r4, 0x26}, @hci={0x1f, 0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000140)='veth0_vlan\x00', 0x2, 0x2, 0x5798})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000300)={'syztnl2\x00', <r6=>0x0, 0x29, 0xd, 0x5, 0x7, 0xd, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe2931c89f4a4190d, 0x8000, 0x20, 0xfdd}})
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@newpolicy={0xc8, 0x13, 0x200, 0x70bd2c, 0x25dfdbfd, {{@in=@broadcast, @in6=@loopback, 0x4e22, 0x101, 0x4e22, 0x2, 0xa, 0x0, 0xa0, 0x3a, r2, r5}, {0x2, 0x2, 0x9, 0x6, 0x4, 0x2, 0x6, 0x1}, {0xed7, 0xffff, 0x9a, 0x3}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x2, 0x2}, [@offload={0xc, 0x1c, {r6, 0x3}}, @iptfs_dont_frag={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x881}, 0x20044010)
sendmmsg$inet(r3, &(0x7f0000005c00), 0x0, 0x4000)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r9 = socket(0xa, 0x3, 0xff)
ioctl$sock_inet_udp_SIOCOUTQ(r9, 0x5411, &(0x7f0000000340))
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd, 0x3}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0)
ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110c230000)
ioctl$TUNSETOFFLOAD(r8, 0x40047452, 0x17)
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000001240)={0x0, 0x600, &(0x7f0000000000)={&(0x7f0000002740)=@newtaction={0x74, 0x30, 0x51b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0xc13}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x20000000, 0x80, 0x6}}}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6, {0x1}}}}]}]}, 0x74}}, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001f80)={0x24, 0x2e, 0x229, 0x70bd2a, 0x25dfdbfa, {0x2}, [@typed={0x8, 0x92, 0x0, 0x0, @ipv4=@empty}, @typed={0x8, 0x13a, 0x0, 0x0, @fd}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x8000)

3.36836399s ago: executing program 2 (id=2292):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r3 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) (async)
bind$alg(r4, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="f78d9c63b9dc5e0c00c529e38fff4800bf52163448412ba8", 0x18}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4bb3766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721192af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511", 0xb8}], 0x2, 0x0, 0x0, 0x20004000}], 0x1, 0x40800)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x44002202}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x120, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x52}}}}, [@NL80211_ATTR_TX_RATES={0x100, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x64, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x4, 0x0, 0x8, 0x5, 0x6c, 0x7, 0x4]}}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x4, 0x9}, {0x0, 0x4}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x9}, {0x7, 0x3}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x3}, {0x3, 0x6}, {0x3, 0x5}, {0x4}, {0x1, 0x7}, {0x0, 0x6}, {0x2, 0x4}, {0x4, 0x8}, {0x1, 0x8}, {0x6, 0x1}, {0x6}, {0x0, 0x3}, {0x2}, {0x6, 0xa}, {0x4, 0x5}, {0x4, 0x1}, {0x3, 0x6}, {0x5, 0x1}, {0x0, 0xa}, {0x1, 0x2}, {0x6, 0xa}, {0x6, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x5, 0x5}, {0x2}, {0x7, 0xa}, {0x0, 0x8}, {0x4, 0x9}, {0x6, 0x2}, {0x7, 0x8}, {0x6, 0x9}, {0x2, 0x3}, {0x4, 0x1}, {0x2, 0x3}, {0x4, 0x3}, {0x4, 0x6}, {0x5, 0x1}, {0x0, 0x2}, {0x0, 0x9}, {0x7, 0xa}, {0x5, 0x4}, {0x7, 0x8}, {0x1}, {0x1}, {0x5, 0xa}, {0x6, 0x6}, {0x1}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x8}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x0, 0x5, 0x24, 0x1b, 0x9, 0x0]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x48, 0xc, 0x5, 0xb, 0x18, 0x2, 0x1b, 0xb, 0x6, 0x18, 0x6, 0x24, 0x18]}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x16, 0x12, 0xb, 0x6, 0xb, 0x6, 0x9, 0x1, 0x36, 0x1b, 0x6c, 0x60, 0xb, 0xc, 0x16, 0x60, 0x36, 0x18, 0x12, 0x1, 0xb, 0x18, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x1b, 0x5, 0x5, 0x6c]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8038, 0x9, 0xb021, 0x7fff, 0xcc2, 0xe, 0xd75]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x80c5, 0x6, 0x2, 0x5, 0x8, 0x7, 0x8, 0xfffc]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0x5, 0x1b, 0x1, 0x4, 0x9, 0x3, 0x1, 0x48, 0x48, 0x16, 0x6c, 0x6c, 0xc, 0x12, 0x12, 0x60, 0x48, 0x30, 0x1b, 0x3, 0x16]}]}]}]}, 0x120}}, 0x20044010)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async)
sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x8, 0x20000, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000)
ppoll(&(0x7f0000000100)=[{r3, 0x3328}, {0xffffffffffffffff, 0x4236}], 0x2, 0x0, 0x0, 0x0)
close(r2) (async)
close(r2)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r2], 0x64}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r9=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x100)
recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0)
sendmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000000)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)="29e8dd21c1c9c5c36d691f5440076e0aa6d1e48b58302e1b9a201ee0fb70073ff714c803cba2035d9ab5ce330205a698b8384ca1d97581dad54f9e", 0x3b}, {&(0x7f0000000140)="a762f4c414cdd009777944ee543c51999a946218a781fe77225c97747763ef28ea27560a3d4b2960eb7142622a74f25d9c7734532834305eae147fc59ae1ccda89ad53122645c42a603ed0b0c92d31bb0f48215711d70801ba2852fb96157d08ba0d1f980f6f50935218e1f4ce5e922a528db72c7b33b3418bab523abe5e3e37525d03c44b44779b989d5d04b7abc06cb4b94d7bdf55fc98df6f808ae5", 0x9d}, {&(0x7f00000002c0)="7cde12d9771b5c3d9cbfd0a4449a2a9738ad087f0a8a188c250de4f8163f4a2cbda2886268f872f181f7031dce974fd0c21f13be0b5fbf62622f9fb3d83081321e0fd0a9a2710ffe85f484fad5820c2b9ef6ad3516667b2aaeb8319681b468cd0938dcec4728bee9d0e89cc51b701fa93aa04d60c02dbbdc469f8cde6f8a813fdd629244e19c7157d91dad64", 0x8c}, {&(0x7f0000000380)="5633e3a7d097cda4eda03a96ed1d25e5bda14806", 0x14}, {&(0x7f00000003c0)}], 0x5}}, {{&(0x7f0000000480)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="2fcacfddb1e576995b6b322fb691d8dcf8d3b2e747bb77fc909ef59617998b1ba0c42603aeb4bb4445b28a9ddf", 0x2d}], 0x1}}], 0x2, 0x4000000)

3.193178123s ago: executing program 0 (id=2293):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r1, 0x300, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x10, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x24044004)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0x1300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x72cdf299}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000015)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'veth0_virt_wifi\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_CALIPSO_C_LISTALL(r4, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000840)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000800)={&(0x7f0000000400)={0x3f0, 0xd, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38c, 0x3, 0x0, 0x1, [{0x330, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xf6, 0x6, 0x1, 0x0, "5374b4568a2d72142b17a89eb6552d4d4d6fb8a039b42444f22396e77755fc196792252169a8da552bb69f9d27fa56680387fa6086e6ac56bf9616cee397837b4081c44ad4696d22ada54d7ff12844dbfa86958779e5e79ddb2ed0e5fd60b37c6b0a1fca07b4e319e220d10d636977c78fee44fe6138ee4f2c1063271a5e3f9ac502a17e2cbb53dab0919b54126638ea0e08acabeb23a972ae0066a360d4b0d65de7f34c382e8bda7377b47c77056a0351b279fee698685549e4d0a93ac9c076e970ee0fde1301ee28e6c9a60965881d1725d69c987188064db49e3fcc156dab5aea265242e511c853a1ed7d28b9055b3314"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x10000}, @NFTA_SET_ELEM_EXPRESSIONS={0x1d4, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "01"}]}]}}}, {0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x124, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x114, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0xf9, 0x3, "80735b89219ab133dbfa53cf1720f9276541e4e241486b630dda2ec33fce13c7e552e8a3968b4a81dfeafc88dd24e4c02d790df7f1f467ff7da483af01e98c25fc122f1796b9d57c58b56441420d3d8ae0fd6db759d814ccfef2d00a5d145cdc1b6a2c336a4fb4e6bce365457bf4167ab69825ec64279aba49ad489cbf0ee23be711f1486bb1536157933ff4f6e6bc3d6104a5b5afc8e3ce8bd938d2dd50791343fe5beadaf9e4fa68e840ed657b8c1634de9304b111b8ba7e2ee449d66d895f6e2859524075718bf28a3d73d10e522c0c1b8616ed249172be8681a22075b757ca0cb6908f0a607a90805a5ec4e58964f456511667"}, @NFTA_TARGET_NAME={0xa, 0x1, 'NFLOG\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x3c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}]}}}, {0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x46, 0x6, 0x1, 0x0, "796591d7fa4479f699fd1868b0686327ed850f83a9fa9498b9f7fac8911282d89b8c9b2046d18b13215470861092fb1d95e07222a1101712954109c12e1bb99ae1e5"}]}, {0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_ELEM_EXPR={0xc, 0x7, 0x0, 0x1, @fwd={{0x8}, @void}}]}, {0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'O'}]}]}, {0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x77}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}]}]}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x9c0}, 0x8000)
socket$can_j1939(0x1d, 0x2, 0x7)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xcc, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4a}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc9}, 0x4040001)
r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000a80), r4)
sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '\x1b\\\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r7 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000b80)={'vxcan0\x00', <r8=>0x0})
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000bc0)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r9=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000cc0)=0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000d00)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e23, 0x9, 0x4e20, 0x3, 0x2, 0x80, 0x80, 0x4, r8, r9}, {0xa8c, 0x100000000, 0xe8, 0x1, 0x6, 0x8, 0x3}, {0x0, 0x3, 0x9614, 0x2}, 0x8, 0xffff217b, 0x0, 0x0, 0x2, 0x2}, {{@in=@rand_addr=0x64010102, 0x4d4, 0x32}, 0xa, @in=@private=0xa010102, 0x3506, 0x0, 0x3, 0x1, 0x3, 0x1, 0xc1d}}, 0xe8)
getsockopt$IP_VS_SO_GET_VERSION(r7, 0x0, 0x480, &(0x7f0000000e00), &(0x7f0000000e40)=0x40)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r4)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f00), r4)
sendmsg$IEEE802154_ASSOCIATE_RESP(r10, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x5c, r11, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x1}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x53}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x4}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc080}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000022c0)={&(0x7f0000001040)="fac06962aab18d09736fe3de479329c70373dbb7618ac4624494a14b3f26cd66bb43dbbf6cd8619dafd8d411779fc9ef5a30508ec7f46b3f3d106756fe56aac2fd23764f19480ec95f15368b359851f78a2c9b1e1b2f91b2807a4d7f7c58261871a394ab34037233cc0a77171902aca21afa0fbea04d92b1e691c8cd6ce682c02625baa16f82c2e738504dcfbd77d59dce7dffb03c05f8", &(0x7f0000001100)=""/4096, &(0x7f0000002100)="a2a31f42d392a2764de5064a8ec89a039727f3acaa71f90b2a5590b46f6c2db1a7cbfed75e4451a0c1ebd54a7fd7adc47db2c66623be8ecc6c5f0097815d4c867c09abc873f2d7223eaa380b3bfcd3bea737eafab836b3295bc37ebf89f4bb4c908b4748545895ad4b060595208fb88c7785de6e45a14fc28952735ce2272e2da57a9cfdd29a571141f8ed0fd4bb23acfc9c6498fef7a23dab40", &(0x7f00000021c0)="10366544edb36b94d4e69b5e39c11ee6eff14944c279946d51b89704caa20c02fd60373f7b921a65e36ed59d50e8eb21369e7c61b9587e7eb63d69838d882dbd5387fd84c4b6ac4901059ee07970ba9d951cf8a5f9b6d11ae5f100f8e19e034b50c099c5cceb44ce78aa1a3f47a13038878d80f7fa77e2a35b9baa9b8a6d7d334291da12ab61506fc6bd66c2a0e76d9f039e544f8add0428c931278605c9dc5ebf9faeb426daab3c0ea849f64119ca0ef5b1670bac6f9614da97ee21bb66983735eb62c1bbbffc89b3ebefb5737b4f8cdd886658566b241bd0bf5493230c2a36bb0bcc16c08ade81a23c91485cb505444a4ca2e95fa3e936b5", 0x300000, 0xffffffffffffffff, 0x4}, 0x38)
ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002300)={<r12=>r0, 0xfffffffffffffff8, 0x8000, 0x70})
ioctl$PPPIOCGIDLE(r12, 0x8010743f, &(0x7f0000002340))
r13 = syz_genetlink_get_family_id$SEG6(&(0x7f00000023c0), r0)
sendmsg$SEG6_CMD_DUMPHMAC(r12, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002440)={&(0x7f0000002400)={0x1c, r13, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x39a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4084884)
sendmsg$NFC_CMD_START_POLL(r10, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x24, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x64}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x14}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x10)

3.163647174s ago: executing program 2 (id=2295):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000420000000900010073797a30000000000900020073797a310000000008000340000000010800084000000000f4fe044000000000a4000000060a0101000000000000000002000004000005800000024000000001000001400000005c0000024000000001000002884d0fc40308000b400000000108000a4000000002140000001100010000000000000000000000000a"], 0x110}}, 0x24000000)

3.01385195s ago: executing program 2 (id=2296):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x80}, [@call={0x85, 0x0, 0x0, 0xa8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0)
write$tun(r6, &(0x7f0000000000)=ANY=[], 0x38) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r6, 0x0) (async)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r5, r6, 0x18, 0x0, @void}, 0x10) (async)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f00000002c0), 0x4)
r8 = socket$unix(0x1, 0x1, 0x0)
r9 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async)
r11 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r10, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27, 0x38}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x2700, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) (async)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0}) (async)
r13 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xc, 0xfff1}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80)

3.011626468s ago: executing program 1 (id=2297):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a00000005"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)

3.000895826s ago: executing program 0 (id=2298):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_vlan\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x40062}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0)
ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x85)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x0, 0x4)
ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000))

2.927362719s ago: executing program 1 (id=2299):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r2=>0x0})
socket(0x10, 0x2, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="140000003c00010027bd7000fbdbdf2504001680f77c4048b35d42d3f41157"], 0x14}], 0x1, 0x0, 0x0, 0x20000080}, 0x880)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000005a0000000000000000b40000000000000200000000000000010000007ffffffe0000000000000000000006000000000000000000000000000d00000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000002000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x101, 0x8, 0x2}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=@newtfilter={0x318, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x2ec, 0x2, [@TCA_U32_SEL={0x2d4, 0x5, {0x3, 0x0, 0x0, 0x4003, 0x3, 0x4, 0x8, 0x2, [{0x8000, 0x4, 0x10001, 0x4}, {0x9, 0xb, 0x7, 0xff}, {0x8, 0x2, 0x6, 0x7ff}, {0x2, 0x7f1, 0x6, 0xaa}, {0x3, 0xd9e8, 0x6, 0x6}, {0x4, 0x1, 0xe000000, 0xc}, {0x3, 0xf4, 0x8c, 0x3a7}, {0x8000000, 0x7, 0x6, 0x88f}, {0x5, 0xf, 0x8d52, 0x29}, {0x8, 0x0, 0x8, 0x783db304}, {0x0, 0xffefffaa, 0x4, 0x3}, {0x5, 0x0, 0x0, 0x8}, {0x1ff, 0x40, 0xffffffff, 0xd072}, {0x9d, 0x0, 0x7, 0x3}, {0x5, 0x6, 0x9, 0x7}, {0x8c9, 0x0, 0x3, 0x3ff}, {0xfffffffc, 0x0, 0x100000, 0x8}, {0x1, 0x8c8, 0x6, 0x100}, {0x400, 0x0, 0x1, 0x10002000}, {0x261b, 0x8, 0xffff, 0x1}, {0x0, 0xffffffff, 0x9b18, 0x200}, {0xff, 0x7, 0x1}, {0xf, 0x744d21e1, 0x4, 0x6}, {0xea, 0x5, 0x80000000, 0x5}, {0x37dc0, 0x5, 0xffffffff, 0x568}, {0xff, 0x6, 0x5, 0x9}, {0x7, 0x1, 0x3, 0x4}, {0x2, 0x3, 0x401, 0x4}, {0x3, 0x5, 0x6, 0xffa3}, {0x5, 0x7, 0xb, 0x9}, {0x1, 0x7, 0x2, 0x7}, {0xffff8000, 0x7, 0x6, 0x10000}, {0x5, 0x6, 0x1, 0x31}, {0x8, 0xff, 0x6, 0xfffffffd}, {0x50, 0x0, 0x1, 0x1ff}, {0xfffff029, 0x2, 0x46668425, 0x80}, {0x99, 0x6, 0xaa}, {0x79, 0x0, 0x9, 0x200}, {0x2, 0x10001, 0x3, 0x3}, {0xf, 0x8, 0xffff0000, 0x4}, {0x6, 0xf, 0xa89, 0x2}, {0xfffffff7, 0xd7, 0x7f, 0x4}, {0x8, 0x4, 0xa75, 0x8}, {0x7, 0x26a, 0x0, 0x4}]}}, @TCA_U32_INDEV={0x14, 0x8, 'pim6reg0\x00'}]}}]}, 0x318}, 0x1, 0x0, 0x0, 0x24000800}, 0x24040084)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100))
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000040)={0x0, @in={{0xa, 0x804, @multicast1}}, 0x5, 0x6d0}, 0x90)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c)
sendto$inet6(r6, &(0x7f0000000280)='0', 0xfffd, 0x4000854, &(0x7f0000000300)={0xa, 0x4e21, 0xbe7, @loopback, 0x800000c0}, 0x1c)
socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x800, @private2, 0x42c4}}}, 0x84)
connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10)

2.825660852s ago: executing program 3 (id=2300):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25cfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f00000002c0), 0x4)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
r10 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@newtfilter={0x87c, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbf9, {0x0, 0x0, 0x0, r9, {0xffff, 0xfff3}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3ff, 0x2, 0x7, 0xfffffff7, 0x7, 0x2a3c14c8, 0x2, 0x140, 0x9cd0, 0x78e, 0x8, 0x9, 0x2, 0x80000000, 0x5, 0x80000000, 0x9, 0x6, 0xfff, 0x27, 0x52a67a94, 0xf, 0x1, 0x4, 0xfffffffe, 0x6, 0x0, 0xfffffffe, 0x800, 0x7, 0xffffffff, 0xffffffad, 0x8, 0x68, 0x0, 0x10000, 0x7ff, 0x7, 0xffffff64, 0x4, 0x9, 0x7, 0x5, 0x14000003, 0xffff, 0x2, 0x1ff, 0x4, 0xffff5edc, 0x8, 0x4, 0x81, 0x5, 0x94c, 0x1cf, 0x10000000, 0x3, 0x6, 0xfffffffb, 0x1, 0x2, 0x7, 0x1, 0x6, 0x0, 0xa, 0xf43, 0xa, 0x4, 0x5, 0x1, 0x8000, 0x3ff, 0x100, 0x2, 0x2, 0x8, 0x0, 0x24000000, 0x4, 0x80000000, 0x6, 0x4ac5, 0x9, 0xffb, 0x2, 0x67, 0xb, 0x9, 0x5, 0x7fffffff, 0xfffffff8, 0x86, 0x0, 0x0, 0x8ac7, 0x5, 0x78, 0x8000, 0xc, 0x6, 0x400, 0x20, 0x5, 0xffffffdf, 0x389, 0x3, 0x1e800000, 0x80000001, 0x4a, 0xff, 0x2, 0x3, 0x1ff, 0x9, 0x4, 0x6, 0x2, 0x7, 0x8001, 0x2, 0x263, 0xb, 0x8, 0x6, 0x6, 0x9, 0x6, 0xa, 0x13d, 0x209, 0x3fed, 0x2, 0x1, 0x2, 0x101, 0xffffffff, 0x7, 0x240, 0x4, 0x5, 0x2, 0xfffffffb, 0x1, 0x800, 0x7ffffffb, 0x8fc, 0x2, 0x68a4, 0x600000, 0x6, 0x4, 0x8, 0x4, 0x37, 0xa, 0x9, 0x3, 0x5, 0x8, 0x100, 0x7, 0xfe, 0x6, 0x7, 0x7, 0x22c, 0x6, 0x3, 0x8, 0x9, 0x66, 0xd6, 0x4ad, 0x7, 0x9, 0x2, 0x0, 0x7e6, 0x54d6, 0x2, 0x5, 0x8, 0x1, 0xf32, 0xffff, 0xb2, 0x0, 0x6, 0x7, 0x8, 0x400001, 0x4, 0x7, 0x9, 0x9, 0x0, 0x7, 0x2, 0x4000004, 0x20000, 0x2, 0x80000000, 0x10000, 0xe, 0x6, 0x2, 0x4, 0x1000, 0x8, 0x9, 0x0, 0xe6, 0x2, 0x9, 0x4, 0x1, 0x4, 0x9, 0xff, 0x9, 0x9, 0xb, 0x3, 0x7ffe, 0x200, 0x5, 0xca1, 0x7f, 0xe, 0x1, 0x1000, 0xfff, 0x5, 0x7, 0x0, 0x7, 0x40, 0x80000001, 0x1, 0x7, 0x6, 0x8, 0xe9375e5, 0x8cf5, 0x7, 0xdf0d, 0x2, 0xfffffffb]}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10, 0xd, 0xd36, 0x4, 0x6bc, 0x80002, 0x7, 0xf, 0x800, 0x7, 0x7, 0xe7f, 0xffff, 0x7, 0x5, 0x1, 0xffffffff, 0x4, 0x909e, 0x89cd, 0xffffffff, 0x8, 0x9, 0x4, 0x5, 0x2, 0x8, 0x4, 0xf23, 0x3ff, 0x9, 0xa, 0x5, 0x0, 0xff, 0x7f, 0x4, 0x0, 0x3, 0x382, 0x40, 0x80, 0x8, 0x2, 0x4000005, 0x20002, 0x9, 0x4f, 0x4, 0x0, 0x7, 0x80000000, 0x80000001, 0x8000, 0x9e, 0xe4, 0x200000, 0x7fffffff, 0x5a, 0x9, 0xfffffff4, 0x4, 0x6, 0x6, 0x459, 0x2, 0xff, 0x14000000, 0x5f72, 0x3, 0x8, 0x7, 0x5, 0x0, 0x6, 0x0, 0x6, 0x1000, 0xffffffff, 0x8000101, 0x2, 0x5, 0x7, 0x9, 0x1000, 0xb, 0x3, 0xfbb4, 0x4a, 0x0, 0x7, 0x8, 0x9, 0x0, 0x7, 0x101, 0x0, 0x3ff, 0x5, 0x800, 0x7fffffff, 0x2, 0x1, 0x3, 0x4, 0x101, 0x5, 0x19, 0x6c, 0x4000009, 0x4, 0xceb6, 0x5, 0x7, 0x53c0, 0x6, 0x5, 0x9, 0x1, 0x9, 0x2, 0x7, 0x8, 0x3, 0x3ff, 0x18, 0x6, 0xffffff7b, 0x15ef7157, 0xfffffffc, 0x5, 0x2, 0x7, 0x7fffffff, 0xdb5, 0x1000, 0x800, 0x8, 0x80000000, 0x100, 0x7, 0x1, 0x40, 0x1000, 0x3, 0xfffffffb, 0x5270e9b, 0x5, 0x7f, 0xb, 0x40, 0x9, 0x3, 0x0, 0x9, 0xb, 0x7, 0x1, 0x7, 0x3, 0x9, 0x0, 0xfe23, 0x6, 0x5, 0x8, 0xffffff7f, 0x3, 0xd, 0x80, 0x4, 0x9, 0x4, 0xff, 0x8001, 0x79, 0x40, 0x72e, 0x5c, 0x1, 0xb0, 0x6, 0x8, 0x9, 0x0, 0x80000001, 0x8, 0x4, 0x4, 0x200, 0x1, 0x1, 0x59ac, 0xebd7, 0x7, 0x10008, 0x4, 0x100, 0x0, 0x7, 0x138, 0x1, 0x8, 0xcb18, 0x0, 0xb, 0x5, 0xe489, 0x8, 0x5, 0x6, 0x56, 0x1800000, 0x80000000, 0xc4800000, 0x4251, 0x7fff, 0x8001, 0x6, 0x7, 0x5, 0x3, 0x4, 0x371, 0xaa67, 0x2, 0x0, 0x10, 0x8, 0x5a5, 0x400, 0x0, 0xfffeffff, 0xf, 0x8, 0x9, 0xc2b3, 0x0, 0x7fffffff, 0xfffffffa, 0x9, 0x3ff, 0x6, 0x7, 0x5, 0x7, 0x4, 0xc, 0x9, 0x1, 0x0, 0x10000, 0x4, 0x4, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x6, 0x4d2, 0x0, {0x8, 0x0, 0xa, 0x8, 0x8, 0x9}, {0x4, 0x0, 0xa380, 0x7ff, 0x5, 0x7d487c2b}, 0x9, 0xd303}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x10}, 0x8080)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000300)=@xdp={0x2c, 0x0, r7, 0x3d}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r11=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r11, 0x8983, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="740000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32, @ANYBLOB='\n\x00:'], 0x74}, 0x1, 0x0, 0x0, 0x4008048}, 0x0)

2.80753204s ago: executing program 4 (id=2301):
r0 = socket$nl_route(0x10, 0x3, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r2, 0x26, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0xcd}}, 0x30)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r2, 0x26, 0x0, @void}, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'hsr0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0)

765.490268ms ago: executing program 1 (id=2302):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRESHEX, @ANYRES32, @ANYBLOB="00000000000000116608000000000100180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x29}, 0x94) (async)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x41, 0x7, {r1, r2/1000+10000}, {}, {0x2, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "1791e40b1d86a985"}}, 0x48}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) (async)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x3, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa5}, 0x94) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6)
sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x88, r7, 0x1, 0x70bd27, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}, @NLBL_MGMT_A_DOMAIN={0x4e, 0x1, '\x03\xdf\xe4\xdd\x9en\xfa\x9er\xe4\x06^\x1d\xd0\xabL?\x17V\x84\x92\xfa\x01\x92%\xf4\xf5W$\xdb\xd9\xd7&H\x80\xef|\xefM\xa0\x8at\xe9G\xa3\x1c\xe6u\x0f\x9a\x05\xe4K\xd9]zn\xda\b;\xb4\x0e\xa3\xd6>\f\x00\x00\xdd\xd4\xa0\xc6\xf5\xe4'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000880)=ANY=[], 0x32600) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x10003}, 0x50) (async)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) (async)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000500), r4)
sendmsg$SEG6_CMD_GET_TUNSRC(r4, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r10, 0x100, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0x4, 0x2400]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @local}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4048800}, 0x20044004)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000009}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11, r9}, 0xc) (async)
r12 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r12, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) (async)
setsockopt$inet6_int(r12, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4)
getsockopt$inet6_buf(r12, 0x29, 0x6, &(0x7f0000000080)=""/25, &(0x7f0000000000)=0x19)

653.204676ms ago: executing program 0 (id=2303):
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x3, 0x1, 'xt\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844)
r5 = socket(0x1, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f00000bd000), 0x400000000000247, 0x0)
close(r6)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', <r10=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
r12 = socket(0x1, 0x803, 0x0)
getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000)

629.284382ms ago: executing program 3 (id=2304):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[], 0x6b4}, 0x1, 0x0, 0x0, 0x20000801}, 0x20048050)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYRES32, @ANYBLOB="0200000000000000000000000000683bb9de63c7acb69b00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x1}, {0xfff1, 0xffff}}}, 0x24}}, 0x20000811)
r5 = socket$l2tp6(0xa, 0x2, 0x73)
sendmsg$inet6(r5, &(0x7f0000000680)={&(0x7f0000000000)={0xa, 0x4e24, 0xc, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="280000000000000029000000390000002f020201"], 0x28}, 0x44040)
sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0)

552.926259ms ago: executing program 1 (id=2305):
r0 = socket(0x10, 0x80002, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000001000000000000000000000ffffffffffffffff0000000000200000fcffffffffffffff0000000000000000000a000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000001000004d43c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}}, 0x0) (async)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000700)=ANY=[@ANYBLOB="fc000000190001002bbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000001000000000000000000000ffffffffffffffff0000000000200000fcffffffffffffff0000000000000000000a000000000000feffffffff7f400002000000000000080100000000000000010000000000000044000500fc020000000000000000000000000001000004d43c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}}, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r5, 0x0, 0x0, 0x48815, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @mcast1}, 0x1c)
ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0)
r6 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r7, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x2c, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r7, 0x10b85, 0x49800}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000090}, 0x0)

396.630238ms ago: executing program 3 (id=2306):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0)
sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000c5c81d9e650728", @ANYRES16=r5, @ANYBLOB="000428bd7000fedbdf250500000008002b001000000005002a000100000005003300010000000800320000000000"], 0x34}, 0x1, 0x0, 0x0, 0x24000080}, 0x4c015)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x4000000)

379.585964ms ago: executing program 4 (id=2307):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000340)={{@align=0x2, {0x98, 0x3, 0x7, 0x7}}, {{[0x6, 0x0, 0x7f, 0x5]}, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{{@_ha_fsid={[0x0, 0x41129e10]}, {0x8, 0x5874, 0x3}}, 0x8, 0x0, '\x00'}]}})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r5, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003580), r6)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000035c0)={'wpan1\x00', <r9=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, &(0x7f00000036c0)={0x0, 0x0, &(0x7f0000003680)={&(0x7f0000003600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2b702bbd7000fddbdf251b00000008000300", @ANYRES32=r9, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0xa800)
sendmsg$NL802154_CMD_SET_PAN_ID(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0xe, r8, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_PAN_ID={0x6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x4051)
sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000480)="aa", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040))
setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0)

294.431102ms ago: executing program 1 (id=2308):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x18, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa292}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x2}, 0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff)
pipe(&(0x7f0000000580)={<r3=>0xffffffffffffffff})
ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x22c00000000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

70.121813ms ago: executing program 3 (id=2309):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a00000005"], 0x60}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94)

51.233261ms ago: executing program 2 (id=2310):
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c0000000e0601080000000000000000050000030900020073797a3000000000050001000700000005000100070000000900020073797a3000001a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x24048850)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r2, &(0x7f0000000080), 0x2, 0x0)
r3 = openat$cgroup_pressure(r2, &(0x7f0000000400)='cpu.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r3, &(0x7f0000000440)={'full', 0x20, 0x2, 0x20, 0x100}, 0x2f)
r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000c40), 0x12)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r6 = openat$cgroup_procs(r5, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000000c40), 0x12)
r7 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000240)=0xb, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
listen(r1, 0x5)
connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10)
r8 = accept$inet(r1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "1234567812345678", "12345678123457781234567812345678", "001000", "1234567812345678"}, 0x28)
setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000180), 0x4)
setsockopt$inet_tcp_TLS_RX(r8, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303}, "2ffeb1b317ab369b", "697b3b3255972c46b40e030634357e6fa2d37c1bce840bd6e35118d3eafd964e", "d39d01ec", "bb04b8a5c8a61514"}, 0x38)
sendto$inet(r7, &(0x7f0000000540)="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", 0x159, 0x24008080, 0x0, 0x0)
recvfrom$inet(r8, &(0x7f0000000000)=""/7, 0x7, 0x0, 0x0, 0x28)

0s ago: executing program 1 (id=2311):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
ppoll(&(0x7f0000000000)=[{r4, 0x8463}], 0x1, 0x0, 0x0, 0x0)
close(r3)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=@delchain={0x3c, 0x64, 0xf31, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x7}]}}]}, 0x3c}}, 0x4040004)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000002000010025bd7000000000000200000008001600", @ANYRES32=0x0, @ANYBLOB="180017"], 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x8040)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000001a0000000000"], 0x0, 0x1a}, 0x28)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r9=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)
sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x70bd28, 0xfffffffe, {}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffff7, 0xfff, 0x1, 0x0, 0x4}, 0x4, r9}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001c40)=@newtaction={0x68, 0x31, 0x123, 0x70bd25, 0x25dfdbf7, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x3, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x20048844)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', <r11=>0x0})
sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="24020000ec9ca88dd227197a8063596c03b4479ad65f51ca36265d0a86bd78d010e0f59a84dfbf5a78933f7ceb345adcf23ea0fb08851d4e3ee89a1a7c07349458fa1dbca6b54d922192470dc6", @ANYRES16=0x0, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x80}, 0x40)
r12 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000)
syz_genetlink_get_family_id$nl80211(0x0, r12)
sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x62}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x4080)
socket$kcm(0x10, 0x2, 0x0)
getsockopt$MRT6(r1, 0x29, 0xd0, &(0x7f0000000180), &(0x7f0000000400)=0x4)

kernel console output (not intermixed with test programs):

8] ieee802154 phy0 wpan0: encryption failed: -22
[  132.861545][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  138.857982][ T7506] netlink: 'syz.0.430': attribute type 15 has an invalid length.
[  139.099478][ T7518] netlink: 68 bytes leftover after parsing attributes in process `syz.0.435'.
[  140.181777][ T7569] No such timeout policy "syz1"
[  140.919949][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  140.957024][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  141.290310][  T154] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.334461][  T154] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.358298][  T154] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.404895][  T154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.451702][  T154] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.481254][  T154] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.531785][  T154] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  141.572021][  T154] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  141.630991][ T7609] netlink: 20 bytes leftover after parsing attributes in process `syz.4.471'.
[  141.662674][ T7609] netlink: 240 bytes leftover after parsing attributes in process `syz.4.471'.
[  141.845555][ T7613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.473'.
[  142.207541][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.480'.
[  142.442205][ T7629] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.449889][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.738266][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.750549][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.488'.
[  142.788596][ T7629] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.018185][ T7629] batman_adv: batadv0: Interface deactivated: ip6gretap1
[  143.121198][  T154] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.144600][  T154] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.163295][  T154] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  143.208019][  T154] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  144.686344][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'.
[  144.794073][ T7709] bond0: (slave bond_slave_0): Releasing backup interface
[  145.950946][ T7770] tipc: Can't bind to reserved service type 0
[  146.902305][ T7787] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  146.975978][ T7793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.554'.
[  147.767351][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.570'.
[  147.789069][ T7830] netlink: 44 bytes leftover after parsing attributes in process `syz.2.570'.
[  147.881713][ T7830] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  148.333654][ T7851] xt_hashlimit: size too large, truncated to 1048576
[  148.794224][ T7875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.590'.
[  149.438481][ T7898] netlink: 216 bytes leftover after parsing attributes in process `syz.3.601'.
[  149.459608][ T7898] netlink: 76 bytes leftover after parsing attributes in process `syz.3.601'.
[  149.480762][ T7898] tipc: Started in network mode
[  149.497523][ T7898] tipc: Node identity 7d03a909, cluster identity 4711
[  149.529333][ T7898] tipc: Node number set to 2097391881
[  149.999022][ T7916] bridge_slave_0: left allmulticast mode
[  150.033677][ T7916] bridge_slave_0: left promiscuous mode
[  150.051346][ T7916] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.396714][ T7938] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[  150.602707][ T7949] netlink: 108 bytes leftover after parsing attributes in process `syz.3.624'.
[  150.629441][ T7949] netlink: 108 bytes leftover after parsing attributes in process `syz.3.624'.
[  150.676770][ T7949] netlink: 108 bytes leftover after parsing attributes in process `syz.3.624'.
[  150.690913][ T7949] netlink: 108 bytes leftover after parsing attributes in process `syz.3.624'.
[  150.731186][ T7949] netlink: 108 bytes leftover after parsing attributes in process `syz.3.624'.
[  150.752623][ T7949] netlink: 108 bytes leftover after parsing attributes in process `syz.3.624'.
[  150.947275][ T7956] bridge_slave_0: left allmulticast mode
[  150.963583][ T7956] bridge_slave_0: left promiscuous mode
[  150.980418][ T7956] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.631805][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'.
[  151.667931][ T7971] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16)
[  151.693954][ T7971] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  151.791186][ T7981] netlink: 8 bytes leftover after parsing attributes in process `syz.2.630'.
[  151.911970][ T7985] batadv0: entered promiscuous mode
[  151.925965][ T7989] netlink: 'syz.3.639': attribute type 1 has an invalid length.
[  151.940871][ T7985] macvtap2: entered promiscuous mode
[  151.946625][ T7985] macvtap2: entered allmulticast mode
[  151.952872][ T7985] batadv0: entered allmulticast mode
[  151.965197][ T7985] 8021q: adding VLAN 0 to HW filter on device macvtap2
[  151.985484][ T7985] batadv0: left allmulticast mode
[  151.991965][ T7985] batadv0: left promiscuous mode
[  152.003385][ T7993] xt_HMARK: spi-set and port-set can't be combined
[  152.093812][ T7989] 8021q: adding VLAN 0 to HW filter on device bond3
[  152.196970][ T7990] veth1: entered allmulticast mode
[  152.207293][ T7990] bond3: (slave veth1): Enslaving as an active interface with an up link
[  152.223494][ T7994] bond3 (unregistering): (slave veth1): Releasing backup interface
[  152.244529][ T7994] bond3 (unregistering): Released all slaves
[  152.663928][ T8018] netlink: 20 bytes leftover after parsing attributes in process `syz.1.648'.
[  152.678492][ T8018] IPVS: Error connecting to the multicast addr
[  152.916685][ T8022] netlink: 'syz.3.649': attribute type 10 has an invalid length.
[  153.166541][ T8037] netlink: 'syz.1.654': attribute type 2 has an invalid length.
[  153.297779][ T8037] : entered promiscuous mode
[  153.784645][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.658'.
[  153.822793][ T8042] block nbd0: server does not support multiple connections per device.
[  153.863224][ T8042] block nbd0: shutting down sockets
[  154.023877][ T8057] veth7: entered promiscuous mode
[  154.050879][ T8057] veth7: entered allmulticast mode
[  154.112730][ T8057] team0: Device veth7 is up. Set it down before adding it as a team port
[  155.139387][ T8130] bond1: option ad_select: invalid value (34)
[  155.157145][ T8130] bond1 (unregistering): Released all slaves
[  155.408974][ T8139] syzkaller0: entered promiscuous mode
[  155.436659][ T8139] syzkaller0: entered allmulticast mode
[  157.604394][ T8216] __nla_validate_parse: 4 callbacks suppressed
[  157.604414][ T8216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.699'.
[  157.967907][ T8227] sctp: [Deprecated]: syz.1.701 (pid 8227) Use of struct sctp_assoc_value in delayed_ack socket option.
[  157.967907][ T8227] Use struct sctp_sack_info instead
[  158.065702][ T8232] netlink: 'syz.4.703': attribute type 49 has an invalid length.
[  158.096606][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.703'.
[  158.268918][ T8239] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'.
[  158.291375][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.705'.
[  158.320473][ T8241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.705'.
[  158.341381][ T8241] netlink: 'syz.2.705': attribute type 18 has an invalid length.
[  158.828365][ T8256] netlink: 'syz.1.708': attribute type 21 has an invalid length.
[  159.205889][ T8263] Bluetooth: MGMT ver 1.23
[  159.247088][ T8265] netlink: 'syz.0.710': attribute type 1 has an invalid length.
[  159.775268][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.4.712'.
[  160.019207][ T8284] netlink: NAT attribute has 5 unknown bytes
[  160.025532][ T8284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  160.278277][ T8290] netlink: 'syz.0.717': attribute type 12 has an invalid length.
[  160.288207][ T8288] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40
[  160.358560][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'.
[  160.525960][ T8297] netlink: 'syz.2.721': attribute type 30 has an invalid length.
[  160.638381][ T8308] raw_sendmsg: syz.3.723 forgot to set AF_INET. Fix it!
[  160.664137][ T8305] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  160.699123][ T8305] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  160.709714][ T8297] netlink: 'syz.2.721': attribute type 30 has an invalid length.
[  160.728074][ T8305] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  160.841936][ T8321] netlink: 220 bytes leftover after parsing attributes in process `syz.1.725'.
[  160.902737][ T8321] netlink: 120 bytes leftover after parsing attributes in process `syz.1.725'.
[  160.931360][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.725'.
[  161.079638][ T8328] netlink: 'syz.3.728': attribute type 1 has an invalid length.
[  161.221616][ T8328] 8021q: adding VLAN 0 to HW filter on device bond3
[  161.334419][ T8343] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  161.351266][ T8343] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  162.029031][ T8378] pim6reg: entered allmulticast mode
[  162.192073][ T8388] ip_tables: iptables: counters copy to user failed while replacing table
[  162.631411][ T8400] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058)
[  163.200706][ T8427] ip_tables: iptables: counters copy to user failed while replacing table
[  163.358731][ T8432] __nla_validate_parse: 3 callbacks suppressed
[  163.358750][ T8432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.752'.
[  163.387376][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.2.754'.
[  163.417745][ T8432] netlink: 'syz.0.752': attribute type 1 has an invalid length.
[  164.144513][ T8475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.761'.
[  164.205321][ T8479] netlink: 220 bytes leftover after parsing attributes in process `syz.1.763'.
[  164.358757][ T8490] netlink: 20 bytes leftover after parsing attributes in process `syz.0.766'.
[  164.482592][ T8495] veth1_macvtap: left promiscuous mode
[  164.846231][ T8519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'.
[  164.858417][ T8516] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  164.887182][ T8518] ip6gre1: entered allmulticast mode
[  165.181374][ T8533] bond4 (unregistering): Released all slaves
[  165.299104][ T8552] netlink: 'syz.4.782': attribute type 2 has an invalid length.
[  165.321677][ T8552] netlink: 60 bytes leftover after parsing attributes in process `syz.4.782'.
[  166.100547][ T5268] veth1_macvtap: entered promiscuous mode
[  166.280671][ T8600] netlink: 24 bytes leftover after parsing attributes in process `syz.4.789'.
[  166.359958][ T8602] netlink: 'syz.3.788': attribute type 16 has an invalid length.
[  166.385385][ T8602] netlink: 'syz.3.788': attribute type 17 has an invalid length.
[  166.408152][ T8607] netlink: 36 bytes leftover after parsing attributes in process `syz.0.791'.
[  167.559378][ T8649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.796'.
[  168.617216][ T8668] netlink: 'syz.0.801': attribute type 2 has an invalid length.
[  169.104124][ T8728] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  169.449318][ T8751] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  169.786582][   T12] IPVS: starting estimator thread 0...
[  169.881043][ T8775] IPVS: using max 29 ests per chain, 69600 per kthread
[  170.176129][ T8798] syzkaller0: entered promiscuous mode
[  170.203970][ T8798] syzkaller0: entered allmulticast mode
[  170.596529][ T8813] syzkaller0: entered promiscuous mode
[  170.618369][ T8813] syzkaller0: entered allmulticast mode
[  171.028172][ T8836] netlink: 'syz.2.835': attribute type 1 has an invalid length.
[  171.060224][ T8834] __nla_validate_parse: 2 callbacks suppressed
[  171.060245][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'.
[  171.324696][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.839'.
[  171.418311][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.840'.
[  171.542981][ T8856] netlink: 76 bytes leftover after parsing attributes in process `syz.3.842'.
[  171.772183][ T8865] netlink: 16 bytes leftover after parsing attributes in process `syz.3.846'.
[  171.833322][ T8865] block nbd0: not configured, cannot reconfigure
[  172.022015][ T8865] tipc: Enabled bearer <eth:ipvlan1>, priority 0
[  172.036462][ T8872] netlink: 'syz.4.845': attribute type 1 has an invalid length.
[  172.059354][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.845'.
[  172.568936][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.2.853'.
[  172.613684][ T8895] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.853'.
[  172.794378][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.856'.
[  172.896551][ T8911] netlink: 24 bytes leftover after parsing attributes in process `syz.0.856'.
[  173.347092][ T8928] syzkaller1: entered promiscuous mode
[  173.358829][ T8928] syzkaller1: entered allmulticast mode
[  173.432600][ T8939] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.776086][ T8954] ip_tables: iptables: counters copy to user failed while replacing table
[  173.818102][ T8961] ip_tables: iptables: counters copy to user failed while replacing table
[  173.861256][ T8961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  174.119408][ T8973] netlink: 'syz.0.873': attribute type 1 has an invalid length.
[  175.177341][ T9013] Cannot find del_set index 4 as target
[  175.231571][ T9019] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534
[  175.316532][ T9019] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  175.759059][ T9028] syzkaller0: entered promiscuous mode
[  175.787571][ T9028] syzkaller0: entered allmulticast mode
[  176.118697][ T9062] netlink: zone id is out of range
[  176.485507][ T9078] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  177.717488][ T9077] netlink: 'syz.1.897': attribute type 1 has an invalid length.
[  177.726486][ T9078] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  177.859806][ T9090] __nla_validate_parse: 6 callbacks suppressed
[  177.859826][ T9090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.901'.
[  177.972463][ T4923] block nbd0: Receive control failed (result -107)
[  178.028855][ T9099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.904'.
[  178.413397][ T9114] bond4 (unregistering): Released all slaves
[  178.488131][ T9123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.498844][ T9123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  178.508742][ T9123] bond0 (unregistering): Released all slaves
[  178.846770][ T9145] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.902257][ T1216] bridge0: entered promiscuous mode
[  178.921071][ T9145] netlink: 104 bytes leftover after parsing attributes in process `syz.2.918'.
[  179.202929][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.921'.
[  179.271723][ T9173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'.
[  179.312993][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  179.334744][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_0
[  179.387155][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  179.438709][ T9173] batman_adv: batadv0: Removing interface: batadv_slave_1
[  179.556356][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.0.924'.
[  179.606215][ T9184] netlink: 'syz.1.925': attribute type 4 has an invalid length.
[  180.282526][ T9221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.937'.
[  180.443097][ T9221] netlink: 'syz.3.937': attribute type 30 has an invalid length.
[  180.489481][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'.
[  180.501618][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'.
[  180.513416][ T9230] Bluetooth: MGMT ver 1.23
[  180.648760][ T9237] netlink: 196 bytes leftover after parsing attributes in process `syz.1.942'.
[  181.266694][ T9268] netlink: 'syz.1.949': attribute type 11 has an invalid length.
[  181.852586][ T9295] netlink: 'syz.3.960': attribute type 1 has an invalid length.
[  181.881723][ T9295] netlink: 'syz.3.960': attribute type 2 has an invalid length.
[  182.189727][ T9305] netlink: 'syz.0.962': attribute type 1 has an invalid length.
[  182.584389][ T9305] bridge1: entered promiscuous mode
[  182.635090][ T9305] bond1: (slave bridge1): making interface the new active one
[  182.648956][ T9322] netlink: 'syz.4.965': attribute type 1 has an invalid length.
[  182.665814][ T9305] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  182.875307][ T9345] __nla_validate_parse: 43 callbacks suppressed
[  182.875327][ T9345] netlink: 68 bytes leftover after parsing attributes in process `syz.1.970'.
[  183.006059][ T9322] 8021q: adding VLAN 0 to HW filter on device bond2
[  183.441733][ T9363] IPVS: persistence engine module ip_vs_pe_ not found
[  183.535162][ T9376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.973'.
[  183.654300][ T9382] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.745485][ T9382] netlink: 'syz.4.977': attribute type 3 has an invalid length.
[  183.770330][ T9389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'.
[  183.850458][ T9395] netlink: 'syz.3.980': attribute type 1 has an invalid length.
[  183.881206][ T9395] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.944754][ T9400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.979'.
[  184.004972][ T9400] nbd: must specify at least one socket
[  184.427048][ T9425] tipc: Resetting bearer <eth:ipvlan1>
[  184.966312][ T9446] netlink: 72 bytes leftover after parsing attributes in process `syz.2.991'.
[  185.002244][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.0.992'.
[  185.216256][ T9451] pim6reg1: entered promiscuous mode
[  185.268434][ T9451] pim6reg1: entered allmulticast mode
[  185.787079][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.996'.
[  186.405707][ T9478] netlink: 96 bytes leftover after parsing attributes in process `syz.2.999'.
[  186.613225][ T9478] 8021q: VLANs not supported on ip_vti0
[  187.188229][ T9502] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1003'.
[  187.459775][ T9483] ip_tables: iptables: counters copy to user failed while replacing table
[  187.858087][ T9522] tipc: Resetting bearer <eth:ipvlan1>
[  187.878407][ T9522] tipc: Resetting bearer <eth:ipvlan1>
[  188.328986][ T9538] netlink: 'syz.0.1006': attribute type 8 has an invalid length.
[  188.519760][ T9534] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  188.578451][ T9534] bond1 (unregistering): Released all slaves
[  188.923543][ T9556] netlink: 'syz.0.1012': attribute type 2 has an invalid length.
[  188.953478][ T9556] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  188.992320][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1012'.
[  189.012241][ T9556] openvswitch: netlink: Flow key attribute not present in set flow.
[  189.095700][ T9560] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1013'.
[  189.144939][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1013'.
[  189.599185][ T9574] netlink: 'syz.0.1017': attribute type 11 has an invalid length.
[  189.639227][ T9577] netlink: 'syz.1.1018': attribute type 10 has an invalid length.
[  189.670369][ T9577] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1018'.
[  189.745740][ T9577] team0: Device wg2 is of different type
[  189.918584][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1016'.
[  189.942820][ T9576] openvswitch: netlink: Missing key (keys=c0, expected=20100)
[  190.424109][ T9573] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  190.575629][ T9608] netlink: 'syz.0.1026': attribute type 2 has an invalid length.
[  190.602407][ T9606] netlink: 'syz.1.1024': attribute type 2 has an invalid length.
[  190.613917][ T9606] netlink: 'syz.1.1024': attribute type 1 has an invalid length.
[  190.623232][ T9606] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1024'.
[  190.683543][ T9606] netlink: 'syz.1.1024': attribute type 5 has an invalid length.
[  190.714356][ T9608] D†'|o: entered promiscuous mode
[  190.795050][ T9618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'.
[  191.319257][   T30] audit: type=1804 audit(1786871279.631:4): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1031" name="/newroot/226/cgroup.controllers" dev="tmpfs" ino=1170 res=1 errno=0
[  191.449597][   T30] audit: type=1800 audit(1786871279.641:5): pid=9636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1031" name="cgroup.controllers" dev="tmpfs" ino=1170 res=0 errno=0
[  191.746091][ T9646] netlink: 'syz.4.1033': attribute type 13 has an invalid length.
[  191.782291][ T9646] netlink: 'syz.4.1033': attribute type 17 has an invalid length.
[  192.815177][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.830518][ T9645] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.109445][ T9646] bridge0: left promiscuous mode
[  193.118152][ T9646] 8021q: adding VLAN 0 to HW filter on device team0
[  193.133520][ T9646] 8021q: adding VLAN 0 to HW filter on device batadv0
[  193.183324][ T9646] veth0_to_team: left allmulticast mode
[  193.211659][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_0
[  193.223951][ T9646] batman_adv: batadv0: Interface activated: batadv_slave_1
[  193.248183][ T9646] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  193.275887][ T5268] veth0_vlan: left promiscuous mode
[  193.395567][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.402851][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.498343][ T9657] veth0_vlan: entered promiscuous mode
[  193.550932][   T12] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.576208][   T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.660038][ T9681] xt_hashlimit: size too large, truncated to 1048576
[  193.671793][ T5758] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.715580][ T5758] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.767475][ T5758] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.802946][ T5758] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.847335][ T5758] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  193.882249][ T5758] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  193.958486][ T9688] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1043'.
[  194.092678][ T9695] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  194.303599][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  194.315622][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  195.889474][ T9743] netlink: 'syz.2.1053': attribute type 1 has an invalid length.
[  195.979361][ T9743] bond1: entered promiscuous mode
[  195.986501][ T9743] 8021q: adding VLAN 0 to HW filter on device bond1
[  196.068084][ T9757] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1057'.
[  196.416849][ T9743] 8021q: adding VLAN 0 to HW filter on device bond1
[  196.443318][ T9743] bond1: (slave ipip0): The slave device specified does not support setting the MAC address
[  196.464351][ T9763] netlink: 'syz.3.1058': attribute type 1 has an invalid length.
[  196.488017][ T9743] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode
[  196.491907][ T9763] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1058'.
[  196.559515][ T9743] bond1: (slave ipip0): making interface the new active one
[  196.573546][ T9743] ipip0: entered promiscuous mode
[  196.585891][ T9743] bond1: (slave ipip0): Enslaving as an active interface with an up link
[  197.557848][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1067'.
[  198.205474][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'.
[  198.241837][ T9813] netlink: 'syz.2.1072': attribute type 1 has an invalid length.
[  198.252385][ T9813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1072'.
[  198.264309][ T9813] netlink: 'syz.2.1072': attribute type 1 has an invalid length.
[  198.435840][ T9830] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1072'.
[  198.499388][ T9813] Unknown options in mask 6
[  199.007382][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'.
[  199.054970][ T9843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'.
[  199.143560][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1082'.
[  199.538239][ T9828] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1076'.
[  199.678589][ T9864] bridge0: port 3(vlan3) entered blocking state
[  199.712171][ T9864] bridge0: port 3(vlan3) entered disabled state
[  199.724632][ T9864] vlan3: entered allmulticast mode
[  199.737262][ T9864] dummy0: entered allmulticast mode
[  199.761177][ T9864] vlan3: entered promiscuous mode
[  199.772517][ T9864] dummy0: entered promiscuous mode
[  200.753949][ T9899] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma?
[  200.956413][ T9912] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  201.016584][ T9915] netlink: 'syz.3.1103': attribute type 11 has an invalid length.
[  201.155023][ T9920] sctp: [Deprecated]: syz.2.1105 (pid 9920) Use of struct sctp_assoc_value in delayed_ack socket option.
[  201.155023][ T9920] Use struct sctp_sack_info instead
[  201.231383][ T9923] netlink: 'syz.3.1107': attribute type 21 has an invalid length.
[  201.239664][ T9923] IPv6: NLM_F_CREATE should be specified when creating new route
[  201.632049][ T9938] __nla_validate_parse: 10 callbacks suppressed
[  201.632088][ T9938] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1112'.
[  201.700948][ T9946] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT
[  202.107752][ T9958] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1119'.
[  202.224349][ T9962] netlink: 'syz.2.1117': attribute type 1 has an invalid length.
[  202.436384][ T9977] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1122'.
[  202.437618][ T9962] xt_CT: No such helper "syz0"
[  202.496518][ T9972] can: request_module (can-proto-3) failed.
[  202.696515][ T9986] Bluetooth: ISO socket layer initialized
[  203.422484][T10012] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  203.533955][T10021] openvswitch: netlink: Tunnel attr 68 out of range max 16
[  203.589040][T10016] syzkaller0: entered promiscuous mode
[  203.621759][T10016] syzkaller0: entered allmulticast mode
[  203.864413][T10034] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  204.471056][T10061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1145'.
[  204.907958][T10067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1148'.
[  204.951180][T10069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'.
[  205.017284][T10067] gretap0: entered promiscuous mode
[  205.045772][T10067] macsec0: entered allmulticast mode
[  205.063103][T10067] gretap0: entered allmulticast mode
[  205.094318][T10067] gretap0: left allmulticast mode
[  205.110504][T10067] gretap0: left promiscuous mode
[  205.185649][T10073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1150'.
[  205.254725][T10076] netlink: 'syz.4.1151': attribute type 1 has an invalid length.
[  205.283718][T10076] netlink: 'syz.4.1151': attribute type 1 has an invalid length.
[  205.304871][T10077] netlink: 'syz.4.1151': attribute type 8 has an invalid length.
[  205.324852][T10076] netlink: 'syz.4.1151': attribute type 8 has an invalid length.
[  206.205885][T10103] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.455036][T10089] netlink: 'syz.1.1155': attribute type 10 has an invalid length.
[  206.814779][T10120] netlink: 'syz.2.1164': attribute type 10 has an invalid length.
[  206.833084][T10120] bond0: option mode: unable to set because the bond device has slaves
[  207.326347][T10135] netlink: 'syz.4.1169': attribute type 2 has an invalid length.
[  207.366041][T10135] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  207.416399][T10135] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  207.474700][T10135] netlink: 'syz.4.1169': attribute type 2 has an invalid length.
[  207.616321][T10143] syzkaller0: entered promiscuous mode
[  207.623743][T10143] syzkaller0: entered allmulticast mode
[  207.846899][T10155] sock: sock_timestamping_bind_phc: sock not bind to device
[  208.041255][T10159] openvswitch: netlink: IP tunnel TTL not specified.
[  208.056795][T10160] openvswitch: netlink: IP tunnel TTL not specified.
[  208.069675][T10159] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.089264][T10160] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  208.358936][T10169] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1177'.
[  208.383785][T10164] netlink: 'syz.0.1178': attribute type 1 has an invalid length.
[  209.313104][T10199] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1185'.
[  209.451397][T10208] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1181'.
[  209.464007][T10209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1187'.
[  209.608086][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1185'.
[  209.864849][T10208] tipc: Resetting bearer <eth:ipvlan1>
[  209.956972][T10218] netlink: 'syz.1.1188': attribute type 4 has an invalid length.
[  209.994633][T10218] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1188'.
[  211.032823][T10253] netlink: 'syz.1.1195': attribute type 1 has an invalid length.
[  211.123549][T10253] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  211.251999][T10261] syzkaller1: entered promiscuous mode
[  211.315001][T10261] syzkaller1: entered allmulticast mode
[  211.601552][T10269] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1201'.
[  211.613873][T10269] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1201'.
[  211.957869][T10296] smc: net device vlan1 applied user defined pnetid SYZ2
[  212.097343][T10300] sctp: [Deprecated]: syz.3.1207 (pid 10300) Use of int in max_burst socket option deprecated.
[  212.097343][T10300] Use struct sctp_assoc_value instead
[  212.148593][T10300] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[  212.301602][T10305] SET target dimension over the limit!
[  212.365449][T10308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  212.477231][T10318] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  212.503772][T10318] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  212.689828][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1213'.
[  212.727440][T10323] tipc: Started in network mode
[  212.750672][T10323] tipc: Node identity 529b8935c66f, cluster identity 4711
[  212.772471][T10323] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  212.793112][T10324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1213'.
[  213.083215][T10334] macvtap1: entered allmulticast mode
[  213.097700][T10334] dummy0: entered allmulticast mode
[  213.117410][T10334] dummy0: entered promiscuous mode
[  213.159108][T10334] dummy0: left allmulticast mode
[  213.305485][ T5803] dummy0: left promiscuous mode
[  213.444244][T10339] xt_nfacct: accounting object `syz0' does not exist
[  213.650383][T10339] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.660474][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  213.894694][ T9657] tipc: Node number set to 2499053877
[  214.097279][T10365] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  214.113852][T10365] bond3: (slave macvlan3): making interface the new active one
[  214.139330][T10365] bond3: (slave macvlan3): Enslaving as an active interface with an up link
[  214.178344][T10365] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  214.195258][ T5714] bond_slave_0: entered promiscuous mode
[  214.204128][ T5714] bond_slave_1: entered promiscuous mode
[  214.792854][ T8285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.805457][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.814861][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.829882][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.840417][  T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.861287][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  214.879115][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  215.102579][T10411] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.1239'.
[  215.208352][T10404] 8021q: adding VLAN 0 to HW filter on device bond4
[  215.228689][T10404] bridge0: port 4(bond4) entered blocking state
[  215.245357][T10404] bridge0: port 4(bond4) entered disabled state
[  215.262318][T10404] bond4: entered allmulticast mode
[  215.287281][T10404] bond4: entered promiscuous mode
[  215.304299][T10410] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1239'.
[  215.700338][T10429] netlink: 'syz.4.1244': attribute type 11 has an invalid length.
[  215.737293][T10429] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1244'.
[  215.895461][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'.
[  216.014172][T10443] sctp: [Deprecated]: syz.0.1247 (pid 10443) Use of int in max_burst socket option.
[  216.014172][T10443] Use struct sctp_assoc_value instead
[  216.128576][T10447] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  216.285186][T10461] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1252'.
[  216.335356][T10462] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1252'.
[  216.493761][T10461] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  216.539261][T10461] bond2 (unregistering): Released all slaves
[  216.861600][T10462] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  216.926093][T10462] bond2 (unregistering): Released all slaves
[  217.512239][ T7594] net_ratelimit: 38 callbacks suppressed
[  217.512284][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  217.517267][T10482] syzkaller0: entered promiscuous mode
[  217.533497][T10482] syzkaller0: entered allmulticast mode
[  217.972023][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  218.541755][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.579324][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  219.787308][T10530] netlink: 'syz.0.1267': attribute type 5 has an invalid length.
[  219.814059][T10530] netlink: 'syz.0.1267': attribute type 9 has an invalid length.
[  219.856978][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'.
[  220.133682][T10549] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  220.327147][T10552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1273'.
[  220.533398][ T5758] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.545908][  T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.557250][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  220.613029][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.013629][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  221.356883][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'.
[  221.449093][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'.
[  221.703616][T10591] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  221.787004][T10591] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  221.843622][T10595] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1282'.
[  221.874203][T10595] netlink: 239 bytes leftover after parsing attributes in process `syz.2.1282'.
[  221.912944][T10598] bridge_slave_0: entered promiscuous mode
[  222.721803][ T5714] net_ratelimit: 2 callbacks suppressed
[  222.721836][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  222.905044][T10637] dvmrp0: entered allmulticast mode
[  222.966526][T10639] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1293'.
[  223.293366][T10662] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1300'.
[  223.303976][T10643] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  223.528953][T10671] bridge1: entered allmulticast mode
[  223.751382][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.054973][T10695] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  224.066086][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.184399][T10700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'.
[  224.549652][T10713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'.
[  224.572550][T10713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1312'.
[  224.614411][T10700] hsr_slave_1 (unregistering): left promiscuous mode
[  224.812396][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  224.866248][T10724] netlink: 'syz.2.1314': attribute type 1 has an invalid length.
[  225.025337][T10731] Bluetooth: hci1: too big key_count value 29096
[  225.520636][T10762] __nla_validate_parse: 2 callbacks suppressed
[  225.520674][T10762] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1322'.
[  225.948626][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.015749][T10777] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.027805][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.162955][T10779] xt_hashlimit: size too large, truncated to 1048576
[  226.284610][T10782] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1326'.
[  226.299324][  T154] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.317027][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  226.331336][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1327'.
[  226.361831][  T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  227.178276][T10804] vlan3: entered allmulticast mode
[  227.222029][T10804] bridge0: port 3(vlan3) entered blocking state
[  227.298401][T10804] bridge0: port 3(vlan3) entered disabled state
[  227.342467][T10804] vlan3: entered promiscuous mode
[  228.065161][ T7594] net_ratelimit: 3 callbacks suppressed
[  228.065207][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  228.779063][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'.
[  228.808051][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'.
[  228.821869][T10871] netlink: 'syz.0.1350': attribute type 1 has an invalid length.
[  228.834489][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'.
[  228.862754][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'.
[  228.889106][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'.
[  228.909634][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'.
[  228.932279][T10867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1349'.
[  229.115499][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  229.221737][T10863] dvmrp8: entered allmulticast mode
[  229.854134][T10909] vlan3: entered promiscuous mode
[  229.859501][T10909] hsr0: entered promiscuous mode
[  229.865757][T10909] vlan3: entered allmulticast mode
[  229.872135][T10909] hsr0: entered allmulticast mode
[  229.878756][T10909] hsr_slave_0: entered allmulticast mode
[  229.936130][T10897] FAULT_INJECTION: forcing a failure.
[  229.936130][T10897] name failslab, interval 1, probability 0, space 0, times 1
[  229.949738][T10897] CPU: 0 UID: 0 PID: 10897 Comm: syz.2.1355 Not tainted syzkaller #0 PREEMPT(full) 
[  229.949767][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  229.949788][T10897] Call Trace:
[  229.949796][T10897]  <TASK>
[  229.949805][T10897]  dump_stack_lvl+0xe8/0x150
[  229.949842][T10897]  should_fail_ex+0x40c/0x560
[  229.949874][T10897]  should_failslab+0xa8/0x100
[  229.949907][T10897]  kmem_cache_alloc_noprof+0xa6/0x5f0
[  229.949932][T10897]  ? alloc_pages_mpol+0x24a/0x380
[  229.949959][T10897]  ? ptlock_alloc+0x20/0x70
[  229.949979][T10897]  ? ptlock_alloc+0x20/0x70
[  229.950007][T10897]  ptlock_alloc+0x20/0x70
[  229.950029][T10897]  pte_alloc_one+0x7a/0x370
[  229.950056][T10897]  do_pte_missing+0x13c8/0x34b0
[  229.950088][T10897]  ? __pfx___thp_vma_allowable_orders+0x10/0x10
[  229.950128][T10897]  handle_mm_fault+0x1b36/0x3080
[  229.950165][T10897]  ? handle_mm_fault+0xec/0x3080
[  229.950197][T10897]  ? __pfx_handle_mm_fault+0x10/0x10
[  229.950249][T10897]  ? lock_mm_and_find_vma+0xa7/0x340
[  229.950279][T10897]  do_user_addr_fault+0x744/0x1340
[  229.950326][T10897]  exc_page_fault+0x6a/0xc0
[  229.950359][T10897]  asm_exc_page_fault+0x26/0x30
[  229.950380][T10897] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[  229.950405][T10897] Code: 64 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[  229.950421][T10897] RSP: 0018:ffffc9000752f838 EFLAGS: 00050202
[  229.950446][T10897] RAX: 00007ffffffff001 RBX: 00000000000000f0 RCX: 00000000000000f0
[  229.950460][T10897] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000752fc7c
[  229.950473][T10897] RBP: ffffc9000752fe10 R08: ffffc9000752fd6b R09: 1ffff92000ea5fad
[  229.950488][T10897] R10: dffffc0000000000 R11: fffff52000ea5fae R12: ffffc9000752fc7c
[  229.950502][T10897] R13: ffffc9000752fc78 R14: ffffc9000752fc7c R15: 0000200000000000
[  229.950537][T10897]  _copy_from_user+0x7a/0xb0
[  229.950570][T10897]  do_sys_poll+0x258/0x1110
[  229.950604][T10897]  ? __lock_acquire+0x683/0x2cf0
[  229.950638][T10897]  ? __pfx_do_sys_poll+0x10/0x10
[  229.950663][T10897]  ? aa_file_perm+0x18b/0x15f0
[  229.950773][T10897]  ? ktime_get_ts64+0xa9/0x410
[  229.950827][T10897]  ? __pfx_timespec64_add_safe+0x10/0x10
[  229.950868][T10897]  __x64_sys_poll+0x190/0x360
[  229.950894][T10897]  ? __pfx___x64_sys_poll+0x10/0x10
[  229.950927][T10897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.950950][T10897]  do_syscall_64+0x174/0x580
[  229.950982][T10897]  ? clear_bhb_loop+0x70/0xc0
[  229.951008][T10897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  229.951029][T10897] RIP: 0033:0x7ff91539e0d9
[  229.951047][T10897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  229.951062][T10897] RSP: 002b:00007ff916269028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007
[  229.951082][T10897] RAX: ffffffffffffffda RBX: 00007ff915626180 RCX: 00007ff91539e0d9
[  229.951096][T10897] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000
[  229.951109][T10897] RBP: 00007ff916269090 R08: 0000000000000000 R09: 0000000000000000
[  229.951121][T10897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  229.951132][T10897] R13: 00007ff915626218 R14: 00007ff915626180 R15: 00007fffca8fd6b8
[  229.951165][T10897]  </TASK>
[  230.282111][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.290455][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  230.430985][T10914] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  230.443441][T10915] Bluetooth: hci0: invalid length 0, exp 4 for type 32
[  230.575782][T10918] netlink: 'syz.2.1364': attribute type 10 has an invalid length.
[  230.631027][T10905] hsr_slave_0: left promiscuous mode
[  230.704146][T10918] syz_tun: entered promiscuous mode
[  230.762404][T10918] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  230.787891][   T12] bond0: (slave bond_slave_1): interface is now down
[  230.822000][   T12] bond0: (slave syz_tun): interface is now down
[  230.861475][ T6004] bond0: (slave bond_slave_1): interface is now down
[  230.885648][ T6004] bond0: (slave syz_tun): interface is now down
[  230.910271][ T6001] bond0: (slave bond_slave_1): interface is now down
[  230.927505][ T6001] bond0: (slave syz_tun): interface is now down
[  230.960855][ T6001] bond0: (slave bond_slave_1): interface is now down
[  230.973595][ T6001] bond0: (slave syz_tun): interface is now down
[  230.999713][ T6001] bond0: now running without any active interface!
[  231.124519][T10931] xt_cgroup: invalid path, errno=-2
[  231.330874][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.614161][T10959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.661952][T10959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.689764][T10965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  231.702963][T10965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  232.425867][T10981] __nla_validate_parse: 28 callbacks suppressed
[  232.425887][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1382'.
[  232.593011][T10987] pimreg: entered allmulticast mode
[  232.663863][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1385'.
[  232.770396][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1387'.
[  232.797252][T10999] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1388'.
[  232.807576][T10987] hsr_slave_1 (unregistering): left promiscuous mode
[  233.078590][T11003] netlink: 'syz.1.1389': attribute type 14 has an invalid length.
[  233.115156][T11005] tipc: Failed to remove unknown binding: 66,1,1/0:435798027/435798029
[  233.185807][T11005] bridge3: entered promiscuous mode
[  233.205210][T11005] bridge3: entered allmulticast mode
[  233.231030][T11005] team0: Port device bridge3 added
[  233.275434][T11011] bridge0: port 4(team0) entered blocking state
[  233.302699][T11011] bridge0: port 4(team0) entered disabled state
[  233.350955][ T7597] net_ratelimit: 1033 callbacks suppressed
[  233.350976][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.401054][T11011] team0: entered allmulticast mode
[  233.430188][T11011] team_slave_0: entered allmulticast mode
[  233.439078][T11011] team_slave_1: entered allmulticast mode
[  233.493828][ T7210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  233.564716][T11011] team0: entered promiscuous mode
[  233.596282][T11011] team_slave_0: entered promiscuous mode
[  233.630496][T11011] team_slave_1: entered promiscuous mode
[  233.687165][T11011] bridge0: port 4(team0) entered blocking state
[  233.695165][T11011] bridge0: port 4(team0) entered forwarding state
[  234.415301][T11046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.425538][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.436080][T11046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.451517][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.468171][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.562938][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.571917][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  234.588798][T11045] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  235.035666][T11072] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1407'.
[  235.067678][T11073] netlink: 'syz.3.1404': attribute type 49 has an invalid length.
[  235.517978][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1412'.
[  235.597344][T11088] netlink: 'syz.4.1413': attribute type 4 has an invalid length.
[  235.988080][T11102] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1418'.
[  236.276365][T11112] netlink: 'syz.4.1422': attribute type 16 has an invalid length.
[  236.322384][T11112] netlink: 'syz.4.1422': attribute type 17 has an invalid length.
[  236.408296][T11114] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.556024][T11135] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1421'.
[  236.779002][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1425'.
[  236.801636][T11112] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.808888][T11112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.949741][T11151] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1425'.
[  237.451094][T11164] syzkaller1: entered promiscuous mode
[  237.459587][T11164] syzkaller1: entered allmulticast mode
[  238.728117][   T24] net_ratelimit: 10 callbacks suppressed
[  238.728151][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.410920][  T194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  239.573127][T11205] __nla_validate_parse: 1 callbacks suppressed
[  239.573147][T11205] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1434'.
[  239.744901][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  240.164489][T11222] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3)
[  240.188018][T11222] bond3 (unregistering): Released all slaves
[  240.470924][T11227] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  240.494877][T11210] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1433'.
[  240.801863][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.079955][T11246] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1444'.
[  241.143701][T11246] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1444'.
[  241.890981][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  241.965648][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1447'.
[  242.425984][T11273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1449'.
[  242.450518][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  242.485418][T11273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1449'.
[  242.625752][T11273] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1449'.
[  242.959835][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  243.970726][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.015921][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.491087][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  245.499759][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  246.059581][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  247.096009][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.136126][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  248.530418][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  249.175842][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  250.216198][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.266251][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  251.570715][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  252.307849][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  253.346285][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.376515][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  254.612653][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.092822][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.416460][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  255.733956][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  255.740899][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  256.457016][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.506205][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  257.650903][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  258.537158][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  259.577158][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.626015][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  260.690503][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  261.668332][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  262.705989][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.730469][ T7597] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  263.745371][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.691165][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  264.776348][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  265.816066][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.770965][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  266.850715][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  267.896239][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  268.936394][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.815419][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  269.978195][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  271.021412][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.056230][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  272.850492][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  273.090691][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.136872][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  274.292240][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.170692][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  275.891386][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  276.217203][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  277.256439][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.296112][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  278.931660][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  279.336412][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  280.376479][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.416987][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  281.970420][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  282.456481][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.497585][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  283.890949][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  284.536798][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.010501][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  285.575993][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.616503][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.750186][T11301] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1459'.
[  286.780125][T11302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.790467][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.821384][T11302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.831456][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.848962][T11302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.857611][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.874866][T11302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  286.883387][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  287.448000][T11322] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  287.455800][T11322] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  288.408652][T11359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1471'.
[  288.897533][T11374] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1474'.
[  289.115997][T11383] Bluetooth: MGMT ver 1.23
[  289.439340][T11385] 8021q: adding VLAN 0 to HW filter on device team0
[  289.467515][T11385] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.748485][T11385] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.767451][T11385] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.799300][T11385] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  289.821382][T11385] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  289.876869][ T6001] bridge0: port 3(veth0) entered blocking state
[  289.883400][ T6001] bridge0: port 3(veth0) entered forwarding state
[  289.910094][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state
[  289.917390][ T6001] bridge0: port 1(bridge_slave_0) entered forwarding state
[  289.949248][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state
[  289.956542][ T6001] bridge0: port 2(bridge_slave_1) entered forwarding state
[  290.295591][T11417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1483'.
[  290.473067][T11404] syzkaller1: entered promiscuous mode
[  290.503241][T11404] syzkaller1: entered allmulticast mode
[  290.812428][ T7594] net_ratelimit: 520 callbacks suppressed
[  290.812474][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.090607][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.100697][T11456] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1486'.
[  291.286494][T11463] tunl0: entered promiscuous mode
[  291.356389][T11463] netlink: 'syz.2.1489': attribute type 4 has an invalid length.
[  291.407953][T11463] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1489'.
[  291.495041][T11471] netlink: 'syz.4.1490': attribute type 58 has an invalid length.
[  291.544597][T11471] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1490'.
[  291.931508][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  291.942474][T11485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1493'.
[  291.976337][T11484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'.
[  292.014121][T11490] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1495'.
[  292.427809][T11502] vlan4: entered promiscuous mode
[  292.437490][T11505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1499'.
[  292.462500][T11502] gretap0: entered promiscuous mode
[  292.874501][T11518] netlink: 'syz.0.1501': attribute type 4 has an invalid length.
[  293.028161][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.498154][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  293.517959][T11541] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1507'.
[  293.689471][T11544] tipc: Started in network mode
[  293.713849][T11544] tipc: Node identity ac1414aa, cluster identity 4711
[  293.818503][T11544] tipc: Enabled bearer <udp:syz2>, priority 10
[  293.980273][T11549] tipc: Started in network mode
[  293.993069][T11549] tipc: Node identity f2982dfa8d4f, cluster identity 4711
[  294.001234][T11549] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.008331][T11555] netlink: 'syz.3.1512': attribute type 1 has an invalid length.
[  294.026378][T11555] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1512'.
[  294.095417][   T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.114011][T11548] tipc: Disabling bearer <eth:syzkaller0>
[  294.136260][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  294.366077][T11563] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1514'.
[  294.400702][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1514'.
[  294.427521][T11563] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1514'.
[  294.460203][T11563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1514'.
[  294.501868][T11563] bridge0: port 5(wlan1) entered blocking state
[  294.516279][T11563] bridge0: port 5(wlan1) entered disabled state
[  294.531291][T11563] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  294.579749][T11563] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  294.911455][ T9657] tipc: Node number set to 2886997162
[  295.172236][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.272561][T11594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.281366][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  295.568732][T11605] syz_tun: entered allmulticast mode
[  295.824985][T11611] netlink: 'syz.4.1529': attribute type 1 has an invalid length.
[  295.847137][T11612] batman_adv: batadv0: Adding interface: ip6gretap1
[  295.859217][T11612] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.904621][T11612] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active
[  296.116707][T11611] 8021q: adding VLAN 0 to HW filter on device bond3
[  296.210937][ T5714] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.284579][T11617] bond3: (slave geneve4): making interface the new active one
[  296.304235][T11617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.323540][T11617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.344574][T11617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.367389][T11617] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.389981][T11617] bond3: (slave geneve4): Enslaving as an active interface with an up link
[  296.431645][  T203] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.512904][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  296.633854][ T7594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.041745][ T6005] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  297.061321][ T6005] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  297.080103][ T6005] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  297.107627][ T6004] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.163790][   T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.174209][ T9657] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  297.187329][T11631] __nla_validate_parse: 6 callbacks suppressed
[  297.187366][T11631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1533'.
[  297.463682][T11633] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1535'.
[  297.475102][T11638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1536'.
[  297.657235][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1537'.
[  297.714491][T11633] netlink: 'syz.4.1535': attribute type 4 has an invalid length.
[  298.151101][T11651] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1539'.
[  298.169556][T11651] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1539'.
[  298.452223][T11649] veth0_vlan: left promiscuous mode
[  298.477400][T11649] tipc: Resetting bearer <eth:ipvlan1>
[  298.503325][T11658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.516520][T11649] bond2: left promiscuous mode
[  298.530338][T11649] batadv1: left promiscuous mode
[  298.538638][T11649] veth1: left allmulticast mode
[  298.612949][T11659] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1541'.
[  298.919786][T11668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1544'.
[  299.065223][T11672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1546'.
[  299.135003][T11674] lo: entered allmulticast mode
[  299.175248][T11673] lo: left allmulticast mode
[  299.409911][T11679] bridge0: entered allmulticast mode
[  299.656144][T11700] netlink: 4356 bytes leftover after parsing attributes in process `syz.4.1554'.
[  299.676644][T11695] netlink: 'syz.1.1552': attribute type 10 has an invalid length.
[  299.760643][T11695] team0 (unregistering): Port device team_slave_0 removed
[  299.808075][T11695] team0 (unregistering): Port device team_slave_1 removed
[  300.338112][T11727] mac80211_hwsim hwsim5 »»»»»»: renamed from wlan0
[  300.927717][T11753] bond0: (slave ip6tnl0): refused to change device type
[  302.251561][T11769] __nla_validate_parse: 5 callbacks suppressed
[  302.251604][T11769] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1573'.
[  302.332100][T11772] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode
[  302.349788][T11772] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode
[  302.587233][T11784] ieee802154 phy0 wpan0: encryption failed: -22
[  302.676419][T11781] net_ratelimit: 6 callbacks suppressed
[  302.676438][T11781] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  302.788830][T11783] bond2: Unable to set up delay as MII monitoring is disabled
[  302.805987][T11783] bond2 (unregistering): Released all slaves
[  302.954861][T11781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  303.289036][T11808] bridge0: port 4(vlan2) entered blocking state
[  303.302680][T11808] bridge0: port 4(vlan2) entered disabled state
[  303.314903][T11808] vlan2: entered allmulticast mode
[  303.324924][T11808] geneve0: entered allmulticast mode
[  303.340271][T11808] vlan2: entered promiscuous mode
[  303.350673][T11808] geneve0: entered promiscuous mode
[  303.477733][T11810] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1585'.
[  303.563776][T11815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1587'.
[  303.602990][T11814] netlink: 'syz.1.1586': attribute type 1 has an invalid length.
[  303.876029][T11814] bond0: entered promiscuous mode
[  303.884460][T11814] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.042075][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'.
[  304.058888][T11836] openvswitch: netlink: Flow actions attr not present in new flow.
[  304.071307][T11836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1592'.
[  304.084057][T11836] openvswitch: netlink: Flow actions attr not present in new flow.
[  304.188075][T11839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1593'.
[  304.528891][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1599'.
[  304.874914][T11866] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  305.307326][T11879] bond4: option fail_over_mac: invalid value (127)
[  305.334892][T11879] bond4 (unregistering): Released all slaves
[  305.414343][T11882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1609'.
[  305.439460][T11882] ovs-system: entered promiscuous mode
[  305.530832][T11882] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  305.551086][T11882] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  305.786227][T11894] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1613'.
[  306.181187][T11905] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  306.382441][T11905] bond6 (unregistering): Released all slaves
[  306.961188][T11934] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1621'.
[  307.530530][T11947] __nla_validate_parse: 1 callbacks suppressed
[  307.530568][T11947] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1626'.
[  307.582494][T11949] netlink: 'syz.3.1627': attribute type 1 has an invalid length.
[  307.939156][T11959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  307.978340][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1633'.
[  307.992316][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1630'.
[  308.317334][T11970] veth1_to_bond: entered allmulticast mode
[  308.347864][T11970] veth1_to_bond: entered promiscuous mode
[  308.379523][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1634'.
[  308.449136][T11970] veth1_to_bond (unregistering): left promiscuous mode
[  308.459796][T11970] veth1_to_bond (unregistering): left allmulticast mode
[  308.467702][T11973] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1635'.
[  309.070767][T11988] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1636'.
[  309.132661][T11989] bond1: option downdelay: invalid value (18446744073709551487)
[  309.146040][T11989] bond1: option downdelay: allowed values 0 - 2147483647
[  309.162315][T11989] bond1 (unregistering): Released all slaves
[  309.839549][T12008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1641'.
[  309.900555][T12012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1642'.
[  309.925397][T12013] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1642'.
[  309.947482][T12010] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1642'.
[  310.485192][T12031] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  311.304230][T12057] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  311.610737][ T5713] tipc: Node number set to 2885325987
[  312.007795][T12068] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  312.030865][T12068] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  312.657091][T12087] __nla_validate_parse: 2 callbacks suppressed
[  312.657111][T12087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1659'.
[  312.702071][T12087] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1659'.
[  312.720925][T12088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1659'.
[  312.944140][T12095] bridge0: port 1(vlan3) entered blocking state
[  312.957419][T12095] bridge0: port 1(vlan3) entered disabled state
[  312.972833][T12095] vlan3: entered allmulticast mode
[  312.982666][T12095] batadv0: entered allmulticast mode
[  312.998882][T12095] vlan3: entered promiscuous mode
[  313.010592][T12095] batadv0: entered promiscuous mode
[  313.022303][T12095] bridge0: port 1(vlan3) entered blocking state
[  313.030261][T12095] bridge0: port 1(vlan3) entered forwarding state
[  313.069085][T12096] tunl0: left promiscuous mode
[  313.308189][T12096] syz_tun: left promiscuous mode
[  313.437664][T12096] bridge0: port 4(team0) entered disabled state
[  313.445024][T12096] bridge0: port 2(bridge_slave_1) entered disabled state
[  313.452754][T12096] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.522312][T12110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1665'.
[  314.189528][T12096] bond1: left promiscuous mode
[  314.194713][T12096] ipip0: left promiscuous mode
[  314.232714][T12106] bridge_slave_1: left allmulticast mode
[  314.251414][T12106] bridge_slave_1: left promiscuous mode
[  314.257490][T12106] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.313184][T12106] team0: Port device team_slave_0 removed
[  314.337401][T12106] team0: Port device team_slave_1 removed
[  314.350682][T12106] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  314.358164][T12106] batman_adv: batadv0: Removing interface: batadv_slave_0
[  314.368159][T12106] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  314.376130][T12106] batman_adv: batadv0: Removing interface: batadv_slave_1
[  314.391945][T12106] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  314.415128][T12114] smc: net device lo applied user defined pnetid SYZ0
[  314.419545][T12113] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  314.431606][T12114] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0
[  314.462472][T12113] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  314.498521][T12113] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  314.891565][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  314.935677][ T6005] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.001628][T12139] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue
[  315.050691][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.063981][T12150] xt_TCPMSS: Only works on TCP SYN packets
[  315.084862][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  315.345096][T12162] ip_tables: iptables: counters copy to user failed while replacing table
[  315.658832][T12173] netlink: 'syz.2.1676': attribute type 1 has an invalid length.
[  315.735723][T12178] netlink: 'syz.3.1679': attribute type 1 has an invalid length.
[  315.748053][T12178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1679'.
[  315.878782][T12172] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.037538][T12172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  316.071755][T12172] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  316.142668][ T7599] bridge0: port 3(vlan3) entered blocking state
[  316.150362][ T7599] bridge0: port 3(vlan3) entered forwarding state
[  316.208655][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.215959][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.301655][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.308996][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.446597][   T12] bridge0: port 4(team0) entered blocking state
[  316.453121][   T12] bridge0: port 4(team0) entered forwarding state
[  316.502356][T12202] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  317.181740][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  317.201852][ T1308] ieee802154 phy1 wpan1: encryption failed: -22
[  317.266790][T12230] FAULT_INJECTION: forcing a failure.
[  317.266790][T12230] name failslab, interval 1, probability 0, space 0, times 0
[  317.353474][T12230] CPU: 1 UID: 0 PID: 12230 Comm: syz.2.1688 Not tainted syzkaller #0 PREEMPT(full) 
[  317.353505][T12230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  317.353530][T12230] Call Trace:
[  317.353539][T12230]  <TASK>
[  317.353549][T12230]  dump_stack_lvl+0xe8/0x150
[  317.353585][T12230]  should_fail_ex+0x40c/0x560
[  317.353616][T12230]  should_failslab+0xa8/0x100
[  317.353648][T12230]  __kmalloc_noprof+0xfe/0x720
[  317.353674][T12230]  ? tomoyo_encode+0x2ad/0x570
[  317.353694][T12230]  ? tomoyo_encode+0x2ad/0x570
[  317.353721][T12230]  tomoyo_encode+0x2ad/0x570
[  317.353750][T12230]  tomoyo_realpath_from_path+0x5fa/0x640
[  317.353780][T12230]  ? tomoyo_path_number_perm+0x219/0x5f0
[  317.353811][T12230]  tomoyo_path_number_perm+0x246/0x5f0
[  317.353845][T12230]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  317.353872][T12230]  ? __lock_acquire+0x683/0x2cf0
[  317.353914][T12230]  ? hook_file_ioctl+0x1f0/0x5f0
[  317.353973][T12230]  ? __fget_files+0x2a/0x420
[  317.354002][T12230]  ? __fget_files+0x2a/0x420
[  317.354027][T12230]  ? __fget_files+0x3a2/0x420
[  317.354051][T12230]  ? __fget_files+0x2a/0x420
[  317.354081][T12230]  security_file_ioctl+0xc3/0x2a0
[  317.354112][T12230]  __se_sys_ioctl+0x47/0x170
[  317.354132][T12230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.354154][T12230]  do_syscall_64+0x174/0x580
[  317.354187][T12230]  ? clear_bhb_loop+0x70/0xc0
[  317.354213][T12230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  317.354233][T12230] RIP: 0033:0x7ff91539e0d9
[  317.354253][T12230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  317.354271][T12230] RSP: 002b:00007ff91628a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  317.354294][T12230] RAX: ffffffffffffffda RBX: 00007ff915626090 RCX: 00007ff91539e0d9
[  317.354309][T12230] RDX: 00002000000003c0 RSI: 0000000000008933 RDI: 0000000000000003
[  317.354322][T12230] RBP: 00007ff91628a090 R08: 0000000000000000 R09: 0000000000000000
[  317.354334][T12230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  317.354346][T12230] R13: 00007ff915626128 R14: 00007ff915626090 R15: 00007fffca8fd6b8
[  317.354380][T12230]  </TASK>
[  317.358147][T12230] ERROR: Out of memory at tomoyo_realpath_from_path.
[  317.839563][T12241] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1690'.
[  317.942938][T12241] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  317.998320][T12241] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  318.008768][T12245] netlink: 'syz.4.1690': attribute type 3 has an invalid length.
[  318.117240][T12241] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  318.189011][T12251] bridge0: port 1(vlan3) entered disabled state
[  318.195710][T12251] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.228433][T12251] bridge0: entered allmulticast mode
[  318.236107][T12241] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  318.378546][T12241] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  318.828835][T12276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1697'.
[  319.093304][T12288] netlink: 'syz.0.1701': attribute type 11 has an invalid length.
[  319.768708][T12305] Bluetooth: hci0: Opcode 0x0c20 failed: -22
[  319.792535][T12305] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1704'.
[  319.824269][T12305] openvswitch: netlink: Missing key (keys=c0, expected=20080)
[  320.091164][T12292] bridge0: port 3(veth0) entered disabled state
[  320.097862][T12292] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.105299][T12292] bridge0: port 1(bridge_slave_0) entered disabled state
[  320.189315][T12301] FAULT_INJECTION: forcing a failure.
[  320.189315][T12301] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  320.261424][T12301] CPU: 1 UID: 0 PID: 12301 Comm: syz.4.1703 Not tainted syzkaller #0 PREEMPT(full) 
[  320.261455][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  320.261467][T12301] Call Trace:
[  320.261475][T12301]  <TASK>
[  320.261484][T12301]  dump_stack_lvl+0xe8/0x150
[  320.261518][T12301]  should_fail_ex+0x40c/0x560
[  320.261548][T12301]  _copy_from_user+0x2d/0xb0
[  320.261580][T12301]  sock_do_ioctl+0x195/0x320
[  320.261614][T12301]  ? __pfx_sock_do_ioctl+0x10/0x10
[  320.261643][T12301]  ? hook_file_ioctl+0x1f0/0x5f0
[  320.261691][T12301]  sock_ioctl+0x57a/0x7e0
[  320.261724][T12301]  ? __pfx_sock_ioctl+0x10/0x10
[  320.261755][T12301]  ? __fget_files+0x2a/0x420
[  320.261780][T12301]  ? __fget_files+0x3a2/0x420
[  320.261805][T12301]  ? __fget_files+0x2a/0x420
[  320.261834][T12301]  ? bpf_lsm_file_ioctl+0x9/0x20
[  320.261858][T12301]  ? __pfx_sock_ioctl+0x10/0x10
[  320.261886][T12301]  __se_sys_ioctl+0xfc/0x170
[  320.261906][T12301]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.261929][T12301]  do_syscall_64+0x174/0x580
[  320.261962][T12301]  ? clear_bhb_loop+0x70/0xc0
[  320.261988][T12301]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  320.262009][T12301] RIP: 0033:0x7f369dd9e0d9
[  320.262028][T12301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  320.262046][T12301] RSP: 002b:00007f369ed1c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  320.262068][T12301] RAX: ffffffffffffffda RBX: 00007f369e026090 RCX: 00007f369dd9e0d9
[  320.262082][T12301] RDX: 00002000000003c0 RSI: 0000000000008933 RDI: 0000000000000003
[  320.262096][T12301] RBP: 00007f369ed1c090 R08: 0000000000000000 R09: 0000000000000000
[  320.262109][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.262129][T12301] R13: 00007f369e026128 R14: 00007f369e026090 R15: 00007ffe42ad0e28
[  320.262164][T12301]  </TASK>
[  320.541441][T12316] netlink: 'syz.4.1707': attribute type 1 has an invalid length.
[  320.737429][T12292] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  320.783341][T12292] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  320.896550][T12316] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  321.187859][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'.
[  321.205052][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'.
[  321.213948][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'.
[  321.222847][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'.
[  321.231770][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'.
[  321.279736][T12339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1708'.
[  321.288654][T12339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1708'.
[  321.862238][T12361] bond4: option arp_interval: invalid value (18446744073709551615)
[  321.870220][T12361] bond4: option arp_interval: allowed values 0 - 2147483647
[  321.894799][T12361] bond4 (unregistering): Released all slaves
[  322.653571][T12395] trusted_key: syz.1.1725 sent an empty control message without MSG_MORE.
[  322.758427][T12400] netlink: 'syz.0.1729': attribute type 9 has an invalid length.
[  322.787561][T12406] netlink: 'syz.1.1728': attribute type 1 has an invalid length.
[  322.796633][T12404] netlink: 'syz.1.1728': attribute type 1 has an invalid length.
[  322.850121][T12406] bond1: option mode: invalid value (7)
[  322.863952][T12406] bond1 (unregistering): Released all slaves
[  322.993941][T12404] bond1: option mode: invalid value (7)
[  323.004193][T12404] bond1 (unregistering): Released all slaves
[  323.148710][T12423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.354321][T12437] netlink: 'syz.2.1738': attribute type 16 has an invalid length.
[  323.371700][T12437] netlink: 'syz.2.1738': attribute type 17 has an invalid length.
[  323.406422][T12435] bridge0: port 4(team0) entered disabled state
[  323.436603][T12435] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.459762][T12435] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.518826][T12435] bridge0: port 3(vlan3) entered disabled state
[  323.571089][T12437] bridge0: port 4(team0) entered blocking state
[  323.577471][T12437] bridge0: port 4(team0) entered forwarding state
[  323.589994][T12437] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.609968][T12437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.655103][T12437] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.662343][T12437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.706375][T12437] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  323.786133][T12437] netlink: 'syz.2.1738': attribute type 16 has an invalid length.
[  323.794682][  T154] bridge0: port 3(vlan3) entered blocking state
[  323.796740][T12437] netlink: 'syz.2.1738': attribute type 17 has an invalid length.
[  323.801306][  T154] bridge0: port 3(vlan3) entered forwarding state
[  323.833896][T12435] bridge0: port 4(team0) entered disabled state
[  323.861418][T12452] xt_hashlimit: size too large, truncated to 1048576
[  323.868305][T12452] xt_hashlimit: max too large, truncated to 1048576
[  323.879099][T12435] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.888280][T12435] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.904852][T12435] bridge0: port 3(vlan3) entered disabled state
[  323.918668][T12437] bridge0: port 4(team0) entered blocking state
[  323.925079][T12437] bridge0: port 4(team0) entered forwarding state
[  323.936042][T12437] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.943200][T12437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.965831][T12437] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.973030][T12437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.987735][T12437] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  324.003865][T12437] netlink: 'syz.2.1738': attribute type 16 has an invalid length.
[  324.011728][T12437] netlink: 'syz.2.1738': attribute type 17 has an invalid length.
[  324.027497][  T154] bridge0: port 3(vlan3) entered blocking state
[  324.034047][  T154] bridge0: port 3(vlan3) entered forwarding state
[  324.059588][T12435] bridge0: port 4(team0) entered disabled state
[  324.123218][T12435] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.132255][T12435] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.150707][T12435] bridge0: port 3(vlan3) entered disabled state
[  324.219932][T12437] bridge0: port 4(team0) entered blocking state
[  324.226406][T12437] bridge0: port 4(team0) entered forwarding state
[  324.241719][T12437] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.248936][T12437] bridge0: port 1(bridge_slave_0) entered forwarding state
[  324.259685][T12437] bridge0: port 2(bridge_slave_1) entered blocking state
[  324.266925][T12437] bridge0: port 2(bridge_slave_1) entered forwarding state
[  324.284297][T12437] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  324.336235][ T8286] bridge0: port 3(vlan3) entered blocking state
[  324.342787][ T8286] bridge0: port 3(vlan3) entered forwarding state
[  324.381599][T12455] __nla_validate_parse: 19 callbacks suppressed
[  324.381621][T12455] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1741'.
[  324.511895][T12464] netlink: 'syz.1.1744': attribute type 3 has an invalid length.
[  325.109738][T12486] tipc: New replicast peer: 127.0.0.1
[  325.115925][T12486] tipc: Enabled bearer <udp:syz0>, priority 10
[  325.232389][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1751'.
[  326.889130][T12568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1767'.
[  327.736645][T12583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1772'.
[  327.977000][T12583] ovs-s: entered promiscuous mode
[  327.993647][T12583] openvswitch: ovs-s: Dropping previously announced user features
[  328.210506][T12631] validate_nla: 4 callbacks suppressed
[  328.210531][T12631] netlink: 'syz.4.1780': attribute type 2 has an invalid length.
[  328.223937][T12631] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1780'.
[  328.274132][T12633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1781'.
[  328.312491][T12631] : entered promiscuous mode
[  328.662499][T12643] netlink: 'syz.3.1785': attribute type 11 has an invalid length.
[  328.687596][T12640] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  328.725005][T12640] bond4 (unregistering): Released all slaves
[  328.944087][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'.
[  328.993605][T12648] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.002678][T12648] 8021q: adding VLAN 0 to HW filter on device team0
[  329.024719][T12648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  329.052021][T12659] siw: device registration error -23
[  329.059090][T12659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1788'.
[  329.090370][T12648] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  329.100820][T12648] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  329.116288][T12648] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  329.156695][ T9655] bridge0: port 3(vlan3) entered blocking state
[  329.164512][ T9655] bridge0: port 3(vlan3) entered forwarding state
[  329.185370][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.192686][ T6004] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.213239][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.220537][ T6004] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.286419][T12656] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1789'.
[  329.319228][T12665] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode
[  329.337765][T12665] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode
[  329.405268][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'.
[  329.456817][T12665] syz_tun (unregistering): left allmulticast mode
[  329.504453][ T5623] block nbd1: Receive control failed (result -32)
[  329.512940][ T4923] block nbd1: Receive control failed (result -32)
[  329.547367][ T9651] syz1: Port: 1 Link DOWN
[  329.624817][ T6001] smbdirect: ib_dev[syz1] removed
[  329.678919][T12683] openvswitch: netlink: IP tunnel attribute has 5377 unknown bytes.
[  329.763842][T12679] xfrm0: entered allmulticast mode
[  329.792893][T12679] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  329.824472][T12685] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1795'.
[  329.845140][T12690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1796'.
[  329.856911][T12690] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.871803][ T5614] bridge0: port 3(vlan3) entered disabled state
[  330.036321][T12699] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1799'.
[  330.469869][T12711] netlink: 'syz.0.1803': attribute type 1 has an invalid length.
[  330.646926][T12718] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1806'.
[  330.673765][T12718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1806'.
[  330.909885][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1810'.
[  331.119639][T12738] bridge0: port 5(batadv1) entered blocking state
[  331.126383][T12738] bridge0: port 5(batadv1) entered disabled state
[  331.133039][T12738] batadv1: entered allmulticast mode
[  331.140536][T12738] batadv1: entered promiscuous mode
[  331.274114][T12737] xt_l2tp: invalid flags combination: 8
[  331.283493][T12732] bond4 (unregistering): Released all slaves
[  331.591281][  T203] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled
[  331.602191][  T203] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled
[  331.766441][T12769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1817'.
[  331.779112][T12769] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1817'.
[  331.951928][T12776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1820'.
[  332.126290][T12788] netlink: 'syz.1.1822': attribute type 5 has an invalid length.
[  332.523922][T12802] sctp: [Deprecated]: syz.4.1827 (pid 12802) Use of int in max_burst socket option deprecated.
[  332.523922][T12802] Use struct sctp_assoc_value instead
[  332.543977][T12801] netlink: 'syz.4.1827': attribute type 1 has an invalid length.
[  332.708710][T12801] bond4: option mode: invalid value (9)
[  332.732223][T12801] bond4 (unregistering): Released all slaves
[  332.823364][T12821] IPVS: length: 4096 != 8
[  333.265782][T12828] vlan3: left allmulticast mode
[  333.284062][T12828] batadv0: left allmulticast mode
[  333.289996][T12828] vlan3: left promiscuous mode
[  333.294826][T12828] batadv0: left promiscuous mode
[  333.300866][T12828] bridge0: port 1(vlan3) entered disabled state
[  333.369978][T12828] bridge_slave_1: left allmulticast mode
[  333.375848][T12828] bridge_slave_1: left promiscuous mode
[  333.384205][T12828] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.420907][T12840] netlink: 'syz.4.1836': attribute type 2 has an invalid length.
[  334.092565][T12873] netdevsim netdevsim0: Direct firmware load for á failed with error -2
[  334.101222][T12873] netdevsim netdevsim0: Falling back to sysfs fallback for: á
[  334.433860][T12884] __nla_validate_parse: 7 callbacks suppressed
[  334.433880][T12884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1852'.
[  334.569093][T12887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  335.042491][T12901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'.
[  335.237784][T12909] xt_hashlimit: size too large, truncated to 1048576
[  335.298771][T12914] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.429847][T12914] batman_adv: batadv0: Interface activated: batadv_slave_0
[  335.439772][T12914] batman_adv: batadv0: Interface activated: batadv_slave_1
[  335.480010][T12914] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  335.490487][T12914] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  335.554330][T12914] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  335.578420][   T57] bridge0: port 3(veth0) entered blocking state
[  335.586452][   T57] bridge0: port 3(veth0) entered forwarding state
[  335.604847][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.612128][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[  335.636754][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[  335.644072][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[  335.691546][T12924] netlink: 'syz.2.1863': attribute type 3 has an invalid length.
[  335.926224][T12935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1867'.
[  336.054745][T12942] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  336.103800][T12947] lo: entered allmulticast mode
[  336.230200][T12952] netlink: 'syz.3.1871': attribute type 1 has an invalid length.
[  336.292575][T12952] 8021q: adding VLAN 0 to HW filter on device bond6
[  336.316981][T12958] sit0: left promiscuous mode
[  336.358334][T12958] bridge_slave_0: left promiscuous mode
[  336.380836][T12958] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  336.556551][T12964] netlink: 380 bytes leftover after parsing attributes in process `syz.3.1871'.
[  336.570122][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'.
[  336.595444][T12964] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1871'.
[  336.648729][T12967] macvlan2: entered promiscuous mode
[  336.654110][T12967] macvlan2: entered allmulticast mode
[  336.694135][T12957] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode
[  336.713991][T12957] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode
[  336.913077][T12944] lo: left allmulticast mode
[  337.020057][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'.
[  337.065949][T12979] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  337.295968][T12994] --map-set only usable from mangle table
[  337.357284][T12997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1882'.
[  337.485729][T13002] bridge0: port 3(veth0) entered disabled state
[  337.492640][T13002] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.500303][T13002] bridge0: port 1(bridge_slave_0) entered disabled state
[  337.539651][T13002] bridge0: entered allmulticast mode
[  337.620788][T13004] batadv1: left allmulticast mode
[  337.653025][T13004] batadv1: left promiscuous mode
[  337.665072][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1887'.
[  337.696250][T13004] bridge0: port 5(batadv1) entered disabled state
[  337.823662][T13004] vlan2: left allmulticast mode
[  337.828613][T13004] geneve0: left allmulticast mode
[  337.833768][T13004] vlan2: left promiscuous mode
[  337.838571][T13004] geneve0: left promiscuous mode
[  337.883237][T13004] bridge0: port 4(vlan2) entered disabled state
[  337.899566][T13004] veth0: left allmulticast mode
[  337.904500][T13004] veth0: left promiscuous mode
[  337.918666][T13004] bridge0: port 3(veth0) entered disabled state
[  337.947700][T13004] bridge_slave_1: left promiscuous mode
[  337.953697][T13004] bridge0: port 2(bridge_slave_1) entered disabled state
[  337.994851][T13004] bridge_slave_0: left allmulticast mode
[  338.000578][T13004] bridge_slave_0: left promiscuous mode
[  338.006376][T13004] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.253796][T13032] netlink: 'syz.2.1893': attribute type 1 has an invalid length.
[  338.274111][T13032] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1893'.
[  339.277252][T13062] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  339.299565][T13062] openvswitch: netlink: Missing key (keys=40, expected=100)
[  339.773656][T13079] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  339.926127][T13091] __nla_validate_parse: 7 callbacks suppressed
[  339.926148][T13091] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1910'.
[  339.972531][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'.
[  339.984897][T13091] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1910'.
[  339.984940][T13091] netlink: 'syz.0.1910': attribute type 5 has an invalid length.
[  339.984962][T13091] netlink: 'syz.0.1910': attribute type 6 has an invalid length.
[  339.984976][T13091] netlink: 35 bytes leftover after parsing attributes in process `syz.0.1910'.
[  340.105432][T13100] netlink: 'syz.4.1914': attribute type 1 has an invalid length.
[  340.568618][T13123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1918'.
[  340.578347][T13123] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1918'.
[  340.588430][T13123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1918'.
[  340.683820][T13127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.691325][T13127] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.724153][T13127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.744644][T13127] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.797010][T13127] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  340.966167][T13144] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1926'.
[  341.067360][T13148] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1925'.
[  341.314513][T13154] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1930'.
[  341.811857][T13171] unsupported nlmsg_type 40
[  342.176137][T13192] bridge0: entered allmulticast mode
[  342.318913][T13197] netlink: Conntrack attr has 12 unknown bytes
[  342.390909][T13197] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  342.841216][T13214] IPv6: sit1: Disabled Multicast RS
[  343.100965][T13220] nbd: must specify a size in bytes for the device
[  343.524835][T13242] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 528
[  343.550376][T13242] netlink: 'syz.3.1957': attribute type 1 has an invalid length.
[  344.092210][T13260] can: request_module (can-proto-4) failed.
[  344.654600][ T5268] veth1_vlan: left promiscuous mode
[  345.083225][T13298] netlink: 'syz.0.1969': attribute type 1 has an invalid length.
[  345.315567][T13298] 8021q: adding VLAN 0 to HW filter on device bond4
[  345.441733][T13298] __nla_validate_parse: 15 callbacks suppressed
[  345.441754][T13298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1969'.
[  345.540348][   T30] audit: type=1804 audit(1786871433.841:6): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1971" name="/newroot/386/cgroup.controllers" dev="tmpfs" ino=1981 res=1 errno=0
[  345.622591][   T30] audit: type=1800 audit(1786871433.841:7): pid=13320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1971" name="cgroup.controllers" dev="tmpfs" ino=1981 res=0 errno=0
[  345.774418][T13302] bond4: (slave veth7): Enslaving as an active interface with a down link
[  345.854980][T13307] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  345.945334][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'.
[  345.981539][T13316] 8021q: adding VLAN 0 to HW filter on device batadv1
[  346.009697][T13316] bond4: (slave batadv1): making interface the new active one
[  346.073331][T13316] batadv1: entered promiscuous mode
[  346.209588][T13316] bond4: (slave batadv1): Enslaving as an active interface with an up link
[  346.276406][T13334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1974'.
[  346.315598][T13347] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1977'.
[  346.381849][T13349] ip_tables: iptables: counters copy to user failed while replacing table
[  346.502786][T13356] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1979'.
[  346.721156][T13361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1976'.
[  346.859766][T13366] --map-set only usable from mangle table
[  346.866668][T13363] bridge0: port 4(team0) entered disabled state
[  346.873929][T13363] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.914147][T13375] openvswitch: netlink: IP tunnel TTL not specified.
[  347.037532][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1985'.
[  347.050373][T13382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1985'.
[  347.252524][T13388] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1986'.
[  347.308091][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1987'.
[  348.096920][ T4923] block nbd2: Receive control failed (result -32)
[  348.203337][T13418] Bluetooth: ISO socket layer initialized
[  351.236627][T13466] __nla_validate_parse: 5 callbacks suppressed
[  351.236673][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2005'.
[  351.289176][T13469] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2009'.
[  351.327763][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2009'.
[  352.443186][T13504] syzkaller1: entered promiscuous mode
[  352.448733][T13504] syzkaller1: entered allmulticast mode
[  352.597591][T13500] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5)
[  352.626988][T13500] bond2 (unregistering): Released all slaves
[  352.936476][T13523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2021'.
[  352.946562][T13523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2021'.
[  353.642027][T13540] netlink: 'syz.2.2027': attribute type 11 has an invalid length.
[  353.669663][T13545] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2028'.
[  353.891168][T13540] 8021q: adding VLAN 0 to HW filter on device bond0
[  353.954079][T13540] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  353.967572][T13540] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  354.045927][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state
[  354.053220][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  354.062110][ T6003] bridge0: port 3(vlan3) entered blocking state
[  354.068507][ T6003] bridge0: port 3(vlan3) entered forwarding state
[  354.076400][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[  354.083625][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  354.123824][ T6003] bridge0: port 4(team0) entered blocking state
[  354.144123][ T6003] bridge0: port 4(team0) entered forwarding state
[  354.409988][T13556] xt_hashlimit: max too large, truncated to 1048576
[  354.417728][T13556] xt_hashlimit: overflow, try lower: 0/0
[  354.452778][T13562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'.
[  354.515028][T13564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2035'.
[  354.524282][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'.
[  354.534265][T13564] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2035'.
[  354.749226][T13566] netlink: 'syz.0.2036': attribute type 2 has an invalid length.
[  354.854579][T13581] netlink: 'syz.4.2040': attribute type 1 has an invalid length.
[  355.982658][T13615] netlink: 'syz.4.2051': attribute type 2 has an invalid length.
[  356.539334][T13642] netlink: 'syz.2.2059': attribute type 32 has an invalid length.
[  356.569582][T13646] ip_tables: iptables: counters copy to user failed while replacing table
[  356.573809][T13642] __nla_validate_parse: 5 callbacks suppressed
[  356.573862][T13642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2059'.
[  356.616551][T13642] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0)
[  356.659856][T13649] ip_tables: iptables: counters copy to user failed while replacing table
[  356.978233][T13656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2063'.
[  356.998916][T13670] netlink: 'syz.4.2066': attribute type 25 has an invalid length.
[  357.007127][T13670] netlink: 'syz.4.2066': attribute type 3 has an invalid length.
[  357.014989][T13670] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2066'.
[  357.087809][T13670] netlink: 'syz.4.2066': attribute type 4 has an invalid length.
[  357.117859][T13653] tipc: Resetting bearer <eth:ipvlan1>
[  357.188075][T13670] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2066'.
[  357.463663][T13687] pim6reg: left allmulticast mode
[  357.468886][T13687] bridge0: left allmulticast mode
[  357.530964][T13696] xt_hashlimit: size too large, truncated to 1048576
[  357.558795][T13695] xt_hashlimit: size too large, truncated to 1048576
[  357.637292][T13689] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  357.706895][T13689] bond5 (unregistering): Released all slaves
[  357.897216][T13710] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  357.999960][   T57] batadv1: left promiscuous mode
[  358.077768][T13720] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2075'.
[  358.522941][T13748] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  358.561996][T13748] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  358.779451][T13758] netlink: 'syz.2.2085': attribute type 58 has an invalid length.
[  358.814621][T13757] netlink: 'syz.2.2085': attribute type 58 has an invalid length.
[  358.841910][T13758] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2085'.
[  358.876174][T13757] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2085'.
[  358.898187][T13761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2085'.
[  358.916011][T13767] x_tables: duplicate underflow at hook 1
[  358.923357][T13767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2083'.
[  359.211823][T13763] nbd4: detected capacity change from 0 to 63
[  359.258795][ T4923] block nbd4: Receive control failed (result -104)
[  359.378980][T13780] openvswitch: netlink: Key type 65 is out of range max 32
[  359.394044][T13780] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2091'.
[  359.881746][T13806] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  360.051718][T13814] netlink: 'syz.3.2096': attribute type 1 has an invalid length.
[  360.352297][T13827] ip: renamed from virt_wifi0
[  360.444267][T13827] A link change request failed with some changes committed already. Interface ip may have been left with an inconsistent configuration, please check.
[  360.593638][T13838] bridge6: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  360.874585][   T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  360.885065][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  360.895170][   T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  360.904021][   T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  361.063770][T13837] bridge0: port 1(bridge_slave_0) entered forwarding state
[  361.330721][T13861] netlink: 'syz.0.2112': attribute type 142 has an invalid length.
[  361.685578][T13873] netlink: 'syz.0.2115': attribute type 1 has an invalid length.
[  361.738853][T13873] macvtap1: entered allmulticast mode
[  361.869098][T13895] __nla_validate_parse: 10 callbacks suppressed
[  361.869121][T13895] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2121'.
[  362.198959][T13893] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  362.372949][T13916] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2126'.
[  362.384273][T13916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  362.768410][T13916] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2126'.
[  362.777959][T13916] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2126'.
[  362.786859][T13916] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2126'.
[  362.951126][T13936] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2132'.
[  363.271963][T13952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2137'.
[  363.526663][T13961] syzkaller1: entered promiscuous mode
[  363.538044][T13963] Bluetooth: MGMT ver 1.23
[  363.552459][T13961] syzkaller1: entered allmulticast mode
[  363.559736][T13963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2140'.
[  363.685388][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2141'.
[  363.714878][T13971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2143'.
[  363.735070][T13966] netlink: 'syz.3.2141': attribute type 1 has an invalid length.
[  363.981383][T13980] syzkaller0: entered promiscuous mode
[  363.987044][T13980] syzkaller0: entered allmulticast mode
[  364.325195][T13988] bridge0: port 3(vlan3) entered disabled state
[  364.331754][T13988] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.340130][T13988] bridge0: port 1(bridge_slave_0) entered disabled state
[  364.707281][T13997] ieee802154 phy0 wpan0: encryption failed: -126
[  365.036863][T14014] bond7: Unable to set peer notification delay as MII monitoring is disabled
[  365.047809][T14014] bond7 (unregistering): Released all slaves
[  365.463417][T14041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  365.735210][T14048] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig
[  366.069465][T14060] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  366.403298][T14072] vti0: entered promiscuous mode
[  366.508841][T14068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 26229 - 0
[  366.525244][T14068] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.619883][T14077] veth1_to_bridge: mtu greater than device maximum
[  366.971544][T14095] bond1: option mode: invalid value (254)
[  366.979501][T14095] bond1 (unregistering): Released all slaves
[  367.078481][T14068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 26229 - 0
[  367.088911][T14068] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.116580][T14102] netlink: 'syz.1.2178': attribute type 126 has an invalid length.
[  367.759304][T14122] __nla_validate_parse: 8 callbacks suppressed
[  367.759328][T14122] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2185'.
[  367.776466][T14122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2185'.
[  367.848504][T14068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 26229 - 0
[  367.858941][T14068] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.179663][T14136] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2187'.
[  368.271326][T14129] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  368.357722][T14068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 26229 - 0
[  368.368150][T14068] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.707118][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2198'.
[  368.717679][T14154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2198'.
[  368.961296][ T6001] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 26229 - 0
[  368.978791][ T6001] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  369.005431][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2201'.
[  369.103007][ T6001] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 26229 - 0
[  369.116322][ T6001] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  369.146062][ T6001] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 26229 - 0
[  369.169670][ T6001] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  369.186088][ T6001] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 26229 - 0
[  369.199817][ T6001] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  369.312495][T14175] netlink: 'syz.2.2201': attribute type 3 has an invalid length.
[  369.320308][T14175] netlink: 'syz.2.2201': attribute type 1 has an invalid length.
[  369.328072][T14175] netlink: 232 bytes leftover after parsing attributes in process `syz.2.2201'.
[  369.424576][T14178] openvswitch: netlink: IP tunnel dst address not specified
[  369.440756][T14178] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  369.735305][T14191] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2210'.
[  369.861462][T14197] netlink: zone id is out of range
[  369.871002][T14197] netlink: zone id is out of range
[  369.876611][T14197] netlink: zone id is out of range
[  369.897343][T14195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2211'.
[  370.032882][T14206] netlink: 'syz.0.2214': attribute type 1 has an invalid length.
[  370.053188][T14199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2215'.
[  370.133648][T14206] 8021q: adding VLAN 0 to HW filter on device bond6
[  370.165414][T14214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  370.275367][T14210] bond6: (slave erspan0): making interface the new active one
[  370.316010][T14210] bond6: (slave erspan0): Enslaving as an active interface with an up link
[  370.345481][T14217] netlink: 'syz.3.2218': attribute type 1 has an invalid length.
[  370.373281][T14217] workqueue: Failed to create a rescuer kthread for wq "phy2": -EINTR
[  370.547749][T14234] openvswitch: netlink: Missing key (keys=40, expected=100)
[  370.704907][T14240] netlink: 'syz.4.2226': attribute type 4 has an invalid length.
[  370.726708][T14240] netlink: 'syz.4.2226': attribute type 4 has an invalid length.
[  370.758327][T14240] pimreg: entered allmulticast mode
[  370.781058][T14240] dvmrp8: left allmulticast mode
[  370.882463][T14253] netlink: 'syz.1.2229': attribute type 1 has an invalid length.
[  371.086424][T14262] openvswitch: netlink: IP tunnel dst address not specified
[  371.095358][T14262] bond1: entered allmulticast mode
[  371.101050][T14262] ipip0: entered allmulticast mode
[  371.117638][T14261] bond1: left allmulticast mode
[  371.130071][T14261] ipip0: left allmulticast mode
[  371.160319][T14239] pimreg: left allmulticast mode
[  371.348092][T14274] block nbd0: reconnected socket
[  371.358607][ T4923] block nbd0: Receive control failed (result -32)
[  371.401936][T14276] mac80211_hwsim hwsim19 syzkaller0: left promiscuous mode
[  371.409214][T14276] mac80211_hwsim hwsim19 syzkaller0: left allmulticast mode
[  371.483158][T14284] netlink: 'syz.0.2241': attribute type 1 has an invalid length.
[  371.519445][T14284] 8021q: adding VLAN 0 to HW filter on device bond7
[  371.573987][T14284] bond7: (slave veth9): Enslaving as an active interface with a down link
[  371.683472][T14284] 8021q: adding VLAN 0 to HW filter on device batadv2
[  371.693154][T14284] bond7: (slave batadv2): making interface the new active one
[  371.728193][T14304] netlink: 'syz.4.2246': attribute type 2 has an invalid length.
[  371.751166][T14284] batadv2: entered promiscuous mode
[  371.768668][T14284] bond7: (slave batadv2): Enslaving as an active interface with an up link
[  372.146040][T14321] ipip2: entered promiscuous mode
[  372.167272][T14321] ipip2: entered allmulticast mode
[  372.213326][T14325] sch_tbf: peakrate 3 is lower than or equals to rate 134217911 !
[  372.534519][T14349] netlink: 'syz.4.2258': attribute type 9 has an invalid length.
[  372.616136][T14347] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  372.850896][T14373] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:0
[  373.167150][T14387] __nla_validate_parse: 18 callbacks suppressed
[  373.167174][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2269'.
[  373.261262][T14399] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  373.396046][T14407] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2272'.
[  373.693756][T14424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2276'.
[  373.917635][T14431] netlink: 'syz.2.2277': attribute type 1 has an invalid length.
[  373.939398][T14431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2277'.
[  374.011427][T14432] netlink: 'syz.0.2278': attribute type 7 has an invalid length.
[  374.121070][T14412] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2274'.
[  374.300181][T14456] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2284'.
[  374.524661][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2285'.
[  374.552341][T14466] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2285'.
[  375.005218][T14484] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2290'.
[  375.029964][T14484] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2290'.
[  375.083625][T14486] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  375.144772][T14486] block nbd0: Unsupported socket: should be TCP or UNIX.
[  375.555763][T14511] syzkaller0: entered promiscuous mode
[  375.562498][T14511] syzkaller0: entered allmulticast mode
[  375.695370][T14520] smc: net device lo erased user defined pnetid SYZ0
[  375.703169][T14520] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ0
[  377.672130][T14524] macsec0: entered promiscuous mode
[  377.677433][T14524] hsr0: entered promiscuous mode
[  377.740410][T14529] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode
[  377.747862][T14529] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode
[  377.820955][T14538] netlink: 'syz.0.2303': attribute type 1 has an invalid length.
[  377.989196][T14548] netlink: 'syz.0.2303': attribute type 21 has an invalid length.
[  378.011972][T14538] 8021q: adding VLAN 0 to HW filter on device bond10
[  378.048492][T14548] IPv6: NLM_F_CREATE should be specified when creating new route
[  378.056366][T14548] netlink: 'syz.0.2303': attribute type 1 has an invalid length.
[  378.083938][T14549] erspan0: entered promiscuous mode
[  378.206530][T14538] macvlan1: entered promiscuous mode
[  378.211933][T14538] macvlan1: entered allmulticast mode
[  378.218807][T14538] bond10: entered allmulticast mode
[  378.224201][T14538] bond10: entered promiscuous mode
[  378.230104][T14538] 8021q: adding VLAN 0 to HW filter on device macvlan1
[  378.242627][T14538] team0: Port device macvlan1 added
[  378.343252][T14538] bond10: (slave ip6gretap1): making interface the new active one
[  378.373313][T14538] ip6gretap1: entered promiscuous mode
[  378.394408][T14538] ip6gretap1: entered allmulticast mode
[  378.429268][T14538] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link
[  378.446172][T14568] __nla_validate_parse: 5 callbacks suppressed
[  378.446194][T14568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2309'.
[  378.542846][T14568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2309'.
[  378.593142][T14573] 
[  378.594596][T14574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2311'.
[  378.596057][T14573] ======================================================
[  378.612057][T14573] WARNING: possible circular locking dependency detected
[  378.619260][T14573] syzkaller #0 Not tainted
[  378.623709][T14573] ------------------------------------------------------
[  378.630812][T14573] syz.2.2310/14573 is trying to acquire lock:
[  378.636359][ T1308] ieee802154 phy0 wpan0: encryption failed: -22
[  378.636929][T14573] ffff88801c294210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430
[  378.653943][T14573] 
[  378.653943][T14573] but task is already holding lock:
[  378.661353][T14573] ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  378.671529][T14573] 
[  378.671529][T14573] which lock already depends on the new lock.
[  378.671529][T14573] 
[  378.681950][T14573] 
[  378.681950][T14573] the existing dependency chain (in reverse order) is:
[  378.690983][T14573] 
[  378.690983][T14573] -> #7 (cpu_hotplug_lock){++++}-{0:0}:
[  378.698815][T14573]        cpus_read_lock+0x42/0x160
[  378.703971][T14573]        static_key_slow_inc+0x12/0x30
[  378.709503][T14573]        nbd_genl_reconfigure+0x1301/0x1e80
[  378.715518][T14573]        genl_family_rcv_msg_doit+0x233/0x340
[  378.721719][T14573]        genl_rcv_msg+0x614/0x7a0
[  378.726903][T14573]        netlink_rcv_skb+0x226/0x4a0
[  378.732266][T14573]        genl_rcv+0x28/0x40
[  378.736790][T14573]        netlink_unicast+0x7bb/0x940
[  378.742100][T14573]        netlink_sendmsg+0x813/0xb40
[  378.747406][T14573]        sock_sendmsg_nosec+0x13a/0x180
[  378.753083][T14573]        ____sys_sendmsg+0x54e/0x850
[  378.758395][T14573]        ___sys_sendmsg+0x2a5/0x360
[  378.763621][T14573]        __x64_sys_sendmsg+0x1b1/0x290
[  378.769239][T14573]        do_syscall_64+0x174/0x580
[  378.774504][T14573]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.780959][T14573] 
[  378.780959][T14573] -> #6 (&nsock->tx_lock){+.+.}-{4:4}:
[  378.788628][T14573]        __mutex_lock+0x19d/0x1550
[  378.793829][T14573]        nbd_queue_rq+0x373/0x1150
[  378.798956][T14573]        blk_mq_dispatch_rq_list+0x499/0x1990
[  378.805139][T14573]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  378.812042][T14573]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  378.818574][T14573]        blk_mq_run_work_fn+0x16c/0x300
[  378.824137][T14573]        process_scheduled_works+0xa8e/0x14e0
[  378.830241][T14573]        worker_thread+0xa47/0xfb0
[  378.835368][T14573]        kthread+0x388/0x470
[  378.839978][T14573]        ret_from_fork+0x514/0xb70
[  378.845170][T14573]        ret_from_fork_asm+0x1a/0x30
[  378.850503][T14573] 
[  378.850503][T14573] -> #5 (&cmd->lock){+.+.}-{4:4}:
[  378.857822][T14573]        __mutex_lock+0x19d/0x1550
[  378.862955][T14573]        nbd_queue_rq+0xc1/0x1150
[  378.867989][T14573]        blk_mq_dispatch_rq_list+0x499/0x1990
[  378.874071][T14573]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[  378.880948][T14573]        blk_mq_sched_dispatch_requests+0xd7/0x190
[  378.887500][T14573]        blk_mq_run_work_fn+0x16c/0x300
[  378.893074][T14573]        process_scheduled_works+0xa8e/0x14e0
[  378.899189][T14573]        worker_thread+0xa47/0xfb0
[  378.904317][T14573]        kthread+0x388/0x470
[  378.908929][T14573]        ret_from_fork+0x514/0xb70
[  378.914152][T14573]        ret_from_fork_asm+0x1a/0x30
[  378.919501][T14573] 
[  378.919501][T14573] -> #4 (set->srcu){.+.+}-{0:0}:
[  378.926653][T14573]        __synchronize_srcu+0xc9/0x2f0
[  378.932157][T14573]        elevator_switch+0x1e8/0x7b0
[  378.937547][T14573]        elevator_change+0x2fa/0x480
[  378.942952][T14573]        elevator_set_default+0x375/0x440
[  378.948711][T14573]        blk_register_queue+0x3f3/0x4e0
[  378.954369][T14573]        __add_disk+0x6cb/0xe30
[  378.959309][T14573]        add_disk_fwnode+0x100/0x3a0
[  378.964789][T14573]        nbd_dev_add+0x733/0xb60
[  378.970274][T14573]        nbd_init+0x15f/0x1e0
[  378.975064][T14573]        do_one_initcall+0x250/0x870
[  378.980420][T14573]        do_initcall_level+0x10a/0x1a0
[  378.985944][T14573]        do_initcalls+0x59/0xa0
[  378.990845][T14573]        kernel_init_freeable+0x29d/0x3e0
[  378.996608][T14573]        kernel_init+0x1d/0x1d0
[  379.001493][T14573]        ret_from_fork+0x514/0xb70
[  379.006629][T14573]        ret_from_fork_asm+0x1a/0x30
[  379.011946][T14573] 
[  379.011946][T14573] -> #3 (&q->elevator_lock){+.+.}-{4:4}:
[  379.019790][T14573]        __mutex_lock+0x19d/0x1550
[  379.024941][T14573]        elevator_change+0x1af/0x480
[  379.030335][T14573]        elevator_set_none+0xb5/0x140
[  379.035737][T14573]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[  379.042096][T14573]        nbd_start_device+0x189/0xb30
[  379.047490][T14573]        nbd_genl_connect+0x1597/0x1c10
[  379.053124][T14573]        genl_family_rcv_msg_doit+0x233/0x340
[  379.059205][T14573]        genl_rcv_msg+0x614/0x7a0
[  379.064243][T14573]        netlink_rcv_skb+0x226/0x4a0
[  379.069547][T14573]        genl_rcv+0x28/0x40
[  379.074099][T14573]        netlink_unicast+0x7bb/0x940
[  379.079415][T14573]        netlink_sendmsg+0x813/0xb40
[  379.084728][T14573]        sock_sendmsg_nosec+0x13a/0x180
[  379.090305][T14573]        ____sys_sendmsg+0x54e/0x850
[  379.095610][T14573]        ___sys_sendmsg+0x2a5/0x360
[  379.100860][T14573]        __x64_sys_sendmsg+0x1b1/0x290
[  379.106348][T14573]        do_syscall_64+0x174/0x580
[  379.111485][T14573]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.117919][T14573] 
[  379.117919][T14573] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}:
[  379.126630][T14573]        blk_alloc_queue+0x544/0x690
[  379.131940][T14573]        __blk_mq_alloc_disk+0x194/0x390
[  379.137722][T14573]        nbd_dev_add+0x494/0xb60
[  379.142675][T14573]        nbd_init+0x15f/0x1e0
[  379.147374][T14573]        do_one_initcall+0x250/0x870
[  379.152679][T14573]        do_initcall_level+0x10a/0x1a0
[  379.158151][T14573]        do_initcalls+0x59/0xa0
[  379.163061][T14573]        kernel_init_freeable+0x29d/0x3e0
[  379.168792][T14573]        kernel_init+0x1d/0x1d0
[  379.173682][T14573]        ret_from_fork+0x514/0xb70
[  379.178815][T14573]        ret_from_fork_asm+0x1a/0x30
[  379.184155][T14573] 
[  379.184155][T14573] -> #1 (fs_reclaim){+.+.}-{0:0}:
[  379.191389][T14573]        fs_reclaim_acquire+0x71/0x100
[  379.197007][T14573]        kmem_cache_alloc_noprof+0x64/0x5f0
[  379.202953][T14573]        __kernfs_iattrs+0xdd/0x380
[  379.208172][T14573]        kernfs_iop_setattr+0xe6/0x3f0
[  379.213654][T14573]        notify_change+0xbba/0xea0
[  379.218896][T14573]        do_truncate+0x1c2/0x250
[  379.223931][T14573]        path_openat+0x2fed/0x3830
[  379.229088][T14573]        do_file_open+0x23e/0x4a0
[  379.234149][T14573]        do_sys_openat2+0x115/0x200
[  379.239374][T14573]        __x64_sys_openat+0x138/0x170
[  379.244771][T14573]        do_syscall_64+0x174/0x580
[  379.249905][T14573]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.256351][T14573] 
[  379.256351][T14573] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}:
[  379.265093][T14573]        __lock_acquire+0x1520/0x2cf0
[  379.270523][T14573]        lock_acquire+0x106/0x350
[  379.275571][T14573]        down_read+0x4a/0x330
[  379.280287][T14573]        kernfs_iop_permission+0x7f/0x430
[  379.286042][T14573]        inode_permission+0x3de/0x5f0
[  379.291439][T14573]        cgroup_attach_permissions+0x28e/0x9f0
[  379.297703][T14573]        __cgroup_procs_write+0x24b/0x320
[  379.303459][T14573]        cgroup_threads_write+0x24/0x50
[  379.309560][T14573]        cgroup_file_write+0x331/0x8f0
[  379.315064][T14573]        kernfs_fop_write_iter+0x3a4/0x540
[  379.320905][T14573]        vfs_write+0x612/0xba0
[  379.325751][T14573]        ksys_write+0x150/0x270
[  379.330635][T14573]        do_syscall_64+0x174/0x580
[  379.335871][T14573]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.342314][T14573] 
[  379.342314][T14573] other info that might help us debug this:
[  379.342314][T14573] 
[  379.352590][T14573] Chain exists of:
[  379.352590][T14573]   &root->kernfs_iattr_rwsem --> &nsock->tx_lock --> cpu_hotplug_lock
[  379.352590][T14573] 
[  379.366709][T14573]  Possible unsafe locking scenario:
[  379.366709][T14573] 
[  379.374198][T14573]        CPU0                    CPU1
[  379.379640][T14573]        ----                    ----
[  379.385039][T14573]   rlock(cpu_hotplug_lock);
[  379.389674][T14573]                                lock(&nsock->tx_lock);
[  379.396837][T14573]                                lock(cpu_hotplug_lock);
[  379.403904][T14573]   rlock(&root->kernfs_iattr_rwsem);
[  379.409477][T14573] 
[  379.409477][T14573]  *** DEADLOCK ***
[  379.409477][T14573] 
[  379.417709][T14573] 5 locks held by syz.2.2310/14573:
[  379.422958][T14573]  #0: ffff8880550b3cf0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320
[  379.432117][T14573]  #1: ffff888036be0450 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0
[  379.441054][T14573]  #2: ffff888031cfcc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540
[  379.450837][T14573]  #3: ffffffff8eb99560 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230
[  379.460661][T14573]  #4: ffffffff8e9e75f0 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900
[  379.471231][T14573] 
[  379.471231][T14573] stack backtrace:
[  379.477159][T14573] CPU: 1 UID: 0 PID: 14573 Comm: syz.2.2310 Not tainted syzkaller #0 PREEMPT(full) 
[  379.477191][T14573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  379.477211][T14573] Call Trace:
[  379.477283][T14573]  <TASK>
[  379.477352][T14573]  dump_stack_lvl+0xe8/0x150
[  379.477433][T14573]  print_circular_bug+0x2e1/0x300
[  379.477466][T14573]  check_noncircular+0x12e/0x150
[  379.477500][T14573]  __lock_acquire+0x1520/0x2cf0
[  379.477528][T14573]  ? __lock_acquire+0x683/0x2cf0
[  379.477579][T14573]  ? __bfs+0x153/0x290
[  379.477602][T14573]  ? __pfx_hlock_conflict+0x10/0x10
[  379.477635][T14573]  ? kernfs_iop_permission+0x7f/0x430
[  379.477659][T14573]  lock_acquire+0x106/0x350
[  379.477683][T14573]  ? kernfs_iop_permission+0x7f/0x430
[  379.477709][T14573]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  379.477737][T14573]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  379.477762][T14573]  down_read+0x4a/0x330
[  379.477779][T14573]  ? kernfs_iop_permission+0x7f/0x430
[  379.477805][T14573]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  379.477830][T14573]  kernfs_iop_permission+0x7f/0x430
[  379.477857][T14573]  ? __pfx_kernfs_iop_permission+0x10/0x10
[  379.477882][T14573]  inode_permission+0x3de/0x5f0
[  379.477907][T14573]  cgroup_attach_permissions+0x28e/0x9f0
[  379.477935][T14573]  __cgroup_procs_write+0x24b/0x320
[  379.477961][T14573]  cgroup_threads_write+0x24/0x50
[  379.477980][T14573]  ? __pfx_cgroup_threads_write+0x10/0x10
[  379.478005][T14573]  cgroup_file_write+0x331/0x8f0
[  379.478023][T14573]  ? kernfs_fop_write_iter+0x22b/0x540
[  379.478044][T14573]  ? __pfx_cgroup_file_write+0x10/0x10
[  379.478062][T14573]  ? __kmalloc_noprof+0x396/0x720
[  379.478084][T14573]  ? vfs_write+0x22b/0xba0
[  379.478110][T14573]  ? __kmalloc_noprof+0x1ad/0x720
[  379.478135][T14573]  ? __pfx_cgroup_file_write+0x10/0x10
[  379.478151][T14573]  kernfs_fop_write_iter+0x3a4/0x540
[  379.478174][T14573]  vfs_write+0x612/0xba0
[  379.478205][T14573]  ? __pfx_vfs_write+0x10/0x10
[  379.478237][T14573]  ? __fget_files+0x2a/0x420
[  379.478264][T14573]  ksys_write+0x150/0x270
[  379.478292][T14573]  ? __pfx_ksys_write+0x10/0x10
[  379.478324][T14573]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.478343][T14573]  do_syscall_64+0x174/0x580
[  379.478370][T14573]  ? trace_irq_disable+0x3b/0x140
[  379.478406][T14573]  ? clear_bhb_loop+0x70/0xc0
[  379.478427][T14573]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.478446][T14573] RIP: 0033:0x7ff91539e0d9
[  379.478488][T14573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  379.478507][T14573] RSP: 002b:00007ff9162ab028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  379.478555][T14573] RAX: ffffffffffffffda RBX: 00007ff915625fa0 RCX: 00007ff91539e0d9
[  379.478569][T14573] RDX: 0000000000000012 RSI: 0000200000000c40 RDI: 0000000000000009
[  379.478582][T14573] RBP: 00007ff915435024 R08: 0000000000000000 R09: 0000000000000000
[  379.478593][T14573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  379.478605][T14573] R13: 00007ff915626038 R14: 00007ff915625fa0 R15: 00007fffca8fd6b8
[  379.478627][T14573]  </TASK>
[  379.916325][T14577] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2312'.
[  379.927404][T14577] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2312'.
[  380.072584][T14579] netlink: 'syz.1.2311': attribute type 3 has an invalid length.
[  384.460135][ T6003] batadv2: left promiscuous mode