last executing test programs:

36.125947829s ago: executing program 0 (id=8850):
socket$phonet(0x23, 0x2, 0x1)
socket$netlink(0x10, 0x3, 0x14)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58)
accept4(r0, 0x0, 0x0, 0x800)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f0000002c40)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x1409, 0x301, 0x70bd27, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r3], 0x30}}, 0x94)

35.521084456s ago: executing program 0 (id=8852):
r0 = socket(0x10, 0x803, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x42, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async)
recvmmsg(r0, &(0x7f0000004940)=[{{&(0x7f0000000300)=@qipcrtr, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000500)=""/218, 0xda}, {&(0x7f0000000600)=""/219, 0xdb}, {&(0x7f0000000700)=""/23, 0x17}, {&(0x7f0000000740)=""/230, 0xe6}, {&(0x7f0000000840)=""/24, 0x18}, {&(0x7f0000000880)=""/211, 0xd3}, {&(0x7f0000000980)=""/181, 0xb5}], 0x7, &(0x7f0000000ac0)=""/175, 0xaf}, 0x5e8f}, {{&(0x7f0000000b80)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000c00)=""/209, 0xd1}, {&(0x7f0000000d00)=""/84, 0x54}], 0x2, &(0x7f0000000dc0)=""/1, 0x1}, 0x2}, {{&(0x7f0000000e00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002140)=[{&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000001e80)=""/85, 0x55}, {&(0x7f0000001f00)=""/106, 0x6a}, {&(0x7f0000001f80)=""/10, 0xa}, {&(0x7f0000001fc0)=""/122, 0x7a}, {&(0x7f0000002040)=""/228, 0xe4}], 0x6, &(0x7f00000021c0)=""/148, 0x94}, 0x80000001}, {{&(0x7f0000002280)=@pppoe={0x18, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000003600)=[{&(0x7f0000002300)=""/110, 0x6e}, {&(0x7f0000002380)=""/78, 0x4e}, {&(0x7f0000002400)=""/252, 0xfc}, {&(0x7f0000002500)=""/156, 0x9c}, {&(0x7f00000025c0)=""/35, 0x23}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x6, &(0x7f0000003680)=""/141, 0x8d}, 0x9b7}, {{&(0x7f0000003740)=@nl, 0x80, &(0x7f0000004900)=[{&(0x7f00000037c0)=""/117, 0x75}, {&(0x7f0000003840)=""/146, 0x92}, {&(0x7f0000003900)=""/4096, 0x1000}], 0x3}, 0x9}], 0x5, 0x20000, &(0x7f0000004a80)={0x77359400}) (async, rerun: 64)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) (async, rerun: 64)
r3 = socket(0x1, 0x803, 0x0)
recvmsg$can_bcm(r0, &(0x7f0000009640)={&(0x7f0000004ac0)=@tipc, 0x80, &(0x7f0000009480)=[{&(0x7f0000004b40)=""/125, 0x7d}, {&(0x7f0000004bc0)=""/247, 0xf7}, {&(0x7f0000004cc0)=""/186, 0xba}, {&(0x7f0000004d80)=""/4096, 0x1000}, {&(0x7f0000005d80)=""/175, 0xaf}, {&(0x7f0000005e40)=""/4096, 0x1000}, {&(0x7f0000008300)=""/4096, 0x1000}, {&(0x7f0000009300)=""/118, 0x76}, {&(0x7f0000009380)=""/255, 0xff}], 0x9, &(0x7f0000009540)=""/236, 0xec}, 0x101) (async)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x2, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x501}]}, 0x34}}, 0x0) (async)
r5 = socket(0x10, 0x803, 0x0) (async, rerun: 32)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007980), 0xffffffffffffffff) (rerun: 32)
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000082c0)={0x0, 0x0, &(0x7f0000008280)={&(0x7f00000080c0)=ANY=[@ANYRES16=r6, @ANYBLOB="278525bd7000fddbdf25010000001000de0c3c9d3da33ce3ee556de643e45f02800c"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async)
write(r5, &(0x7f0000000400)="2ee233c3f393bf5b7e7a56aad17fb7e807ad617418c2b5aff6a5bcab383e527d1727024cd4eb071c3170856bb59193338a8987705c3634d41225b9333d3958bac99d4de17adcfec52aadd140abe2a6e2e49c9c992920d31c85ae1f7ea280d3a205d150d7de6c13671c231eae0a50788181b79120d6777dabd98f4c3b0e1823be8de53bbb9af0dfe81087cc96896ee37c0d16338d1330c9d6557a904bc76a9a0b7a37cd6017f0d4fd40de5ad3783cf7fd1da628b2b3b8b934e80dcfa502d4024a58f3dc8ae1c51e603c58740a6ab64a21cab317b5d28e7f0e64904d115a7be57a0229923c2db4165a32a34f6dee7fe4", 0xef) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x5c, r6, 0x102, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24048090}, 0x800) (async)
sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x68, 0x42, 0xc8, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x706}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0)

34.564459796s ago: executing program 0 (id=8857):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
r1 = socket(0x3, 0x80000, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000001c0)={r2, 0x407}, 0x8)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={r2, 0x7}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @private2, 0xb}]}, &(0x7f0000000240)=0x10) (async)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @private2, 0xb}]}, &(0x7f0000000240)=0x10)
r3 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async)
setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket$kcm(0x1e, 0x4, 0x0) (async)
r4 = socket$kcm(0x1e, 0x4, 0x0)
setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43)
socket(0x28, 0x5, 0x0) (async)
r5 = socket(0x28, 0x5, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r11 = openat$cgroup_devices(r10, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r11, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa) (async)
write$cgroup_devices(r11, &(0x7f0000000000)=ANY=[@ANYBLOB='b 75:*\tw\nr'], 0xa)
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x7e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x7b4, 0x2, [@TCA_FW_ACT={0x68, 0x4, [@m_vlan={0x64, 0xe, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x7, 0x1, 0x8}, 0x1}}]}, {0x1b, 0x6, "a463cd7fde7e31ff0eadb6e1ed4183c3b80855ec4a3924"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_ACT={0x748, 0x4, [@m_mpls={0x110, 0x1f, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TTL={0x5, 0x7, 0xed}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000, 0x8, 0x3, 0xfffffff9, 0x4}, 0x1}}]}, {0xb7, 0x6, "f79cedb4cd9a892270f290663ed8e4ad1c77b230e27c28839a09a2f3a5d444e7a8b1f32eb5332e3671cbb7f2621a6870f16ee9fd18178d731529c1ab154fbeaab095de6a1bfa45f3697edce8ef22dc6c247247291689c49e75a6034d483f511b04cb00b3f5f76c9dcf482aaf0a763c0278b0678395b21604585bde6ec6fd1ec051959688ffb7f2c908ca23a934acb86d6cf75fbfcf780a6ca3703ca0a7f2139c0862fedc0729d60ebfc68e0b6f1495f955b5e1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xdc, 0x18, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x5, 0x0, 0x1, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x796}]}, {0x78, 0x6, "1821ad058615e985c5690ba5a6596e5c457f8ce9f4b7107d03960935282d811eaaba1b765b6707aeb2cbac4c61603071886c1c88b0f51fec29f6922baa5db4fc2b65e0a9a143cbc43725f613ce60cace96e50d556b9bfc0bdbe0caa36193497c4a369ab439de2b4bb3611c6f87a68b126c6360b9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_csum={0x110, 0xb, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x6, 0x0, 0x9}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x866a, 0x4, 0x2767f990c990351e, 0x1000, 0x3}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x7, 0x0, 0xfffffff4}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x20000000, 0x1, 0x10001}, 0x11}}]}, {0x74, 0x6, "b9093f0da2f762490f7066c3483a152dcafaaadc0f191734f7d1d61309ddda3f3024ae00e94b95e9a0081ecda706fc16fefdcc57d80d5dfd16744bd2388d5fab610abd4bc475e5f37b0a5e11b14ef2c285585fccdf954deb453962ccbe1fa6bbd24a42a80b66b0833ac9b0e2f102bb4e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x120, 0xe, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x8d94, 0xffffffffeffffffb, 0x1, 0x8}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x8, 0x80000001, 0xe}}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x8c, 0x6, "fb4b45247d37d3f88d4aa6bc397f749d2efe3d4f5852d2b487fe351baf0914c4740075595b7e8ab54b8f1ddb01ac7e81fb650f7d561b2633a72b7d93a546b6aa72127f644af275e77dd5b53a153ccb8e771bd4a3e6382aeb4a4e3274bb5fbfc3b051cd8ae55948e4a5d093ecc891a322b705863958c29d088e50369ce6a38ad754f6b58016475895"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x68, 0x13, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x74e, 0xab61, 0x8, 0x4, 0xfffffffb}}}]}, {0x23, 0x6, "1636ca7d4ed3ec438e120b76363f0df424ec7358cff717b99ea480cef7ceb3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x2c0, 0x1c, 0x0, 0x0, {{0x7}, {0x254, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x116, 0x6, {0x80, 'mangle\x00', 0x4, 0x3, "4fd56c525b04c895381336e038d27dd92d67caac68cc87b2b021f103cea9601464dcb016b0e744150d617e7344b1a645b43c2546b93bd87514372b947fd5cf3ac9c961ef78213b0c4dbae1cbe6408deedbdf9aeb9b33de2e5d03605a95fff1870d5c34f51df87cf59d72ad7e2ab6f60bbabda74a75b7eceaace941dc5ed3e2ca87074729381ff8c3ad9f027e6a8153f23c3ddcc1fb967513db49f8939e5207d0bc9d64165ab9cfd46ba068037ac185d53badb9fa7228c49a0af4c38dbb2cc5b0cb5758eccdd88fdee3c8d0a83fffc8a9efdc90fca0d983ae3fe653aa8de2a3a267d7e31b71f30ccfd4a0414f"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xe8, 0x6, {0x2, 'raw\x00', 0x5, 0x8000, "8132ee5ccfa651432c80897dd4aaa1b3579a49c0126cfbe7db919da2673f05c44a1168fbb10fdfcf56de965f42bf9407026a49b58dfb07eaf85cf0274ea5ab042d4d5d910de0ce94119bc940e535925f5a65f798091340a1a04cb18b316876818d261303d4f3475d9195a9c561ba2e75ba19fe2bc3e31a115981e20eb35ccb8cfe4580f27dd17236d0ee0bd0c4971a02c5a73ec8010841a77b41896c8a9c649bb944dc54f047aba60af2c8f5add18ffc01ce769998dd8c1eaff25319788c"}}]}, {0x46, 0x6, "b01ce8b3f08969069978ce07d6168936339c131243dd296f91586d079358f7cb883b9ea874f2e05001d01323069f1e9023ca751bc23a6cc2f7043482d54fef58e158"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x7e0}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x7e0, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x7b4, 0x2, [@TCA_FW_ACT={0x68, 0x4, [@m_vlan={0x64, 0xe, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x8, 0x7, 0x1, 0x8}, 0x1}}]}, {0x1b, 0x6, "a463cd7fde7e31ff0eadb6e1ed4183c3b80855ec4a3924"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_ACT={0x748, 0x4, [@m_mpls={0x110, 0x1f, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x7}, @TCA_MPLS_TTL={0x5, 0x7, 0xed}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000, 0x8, 0x3, 0xfffffff9, 0x4}, 0x1}}]}, {0xb7, 0x6, "f79cedb4cd9a892270f290663ed8e4ad1c77b230e27c28839a09a2f3a5d444e7a8b1f32eb5332e3671cbb7f2621a6870f16ee9fd18178d731529c1ab154fbeaab095de6a1bfa45f3697edce8ef22dc6c247247291689c49e75a6034d483f511b04cb00b3f5f76c9dcf482aaf0a763c0278b0678395b21604585bde6ec6fd1ec051959688ffb7f2c908ca23a934acb86d6cf75fbfcf780a6ca3703ca0a7f2139c0862fedc0729d60ebfc68e0b6f1495f955b5e1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xdc, 0x18, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x1}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x5, 0x0, 0x1, 0x1}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x796}]}, {0x78, 0x6, "1821ad058615e985c5690ba5a6596e5c457f8ce9f4b7107d03960935282d811eaaba1b765b6707aeb2cbac4c61603071886c1c88b0f51fec29f6922baa5db4fc2b65e0a9a143cbc43725f613ce60cace96e50d556b9bfc0bdbe0caa36193497c4a369ab439de2b4bb3611c6f87a68b126c6360b9"}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_csum={0x110, 0xb, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x1, 0x6, 0x0, 0x9}, 0x16}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x866a, 0x4, 0x2767f990c990351e, 0x1000, 0x3}, 0x24}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x7, 0x0, 0xfffffff4}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x0, 0x20000000, 0x1, 0x10001}, 0x11}}]}, {0x74, 0x6, "b9093f0da2f762490f7066c3483a152dcafaaadc0f191734f7d1d61309ddda3f3024ae00e94b95e9a0081ecda706fc16fefdcc57d80d5dfd16744bd2388d5fab610abd4bc475e5f37b0a5e11b14ef2c285585fccdf954deb453962ccbe1fa6bbd24a42a80b66b0833ac9b0e2f102bb4e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x120, 0xe, 0x0, 0x0, {{0x8}, {0x70, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x8d94, 0xffffffffeffffffb, 0x1, 0x8}, 0x1}}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_TYPE={0x6, 0x5, 0x7}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x3, 0x8, 0x80000001, 0xe}}}, @TCA_IFE_DMAC={0xa, 0x3, @local}]}, {0x8c, 0x6, "fb4b45247d37d3f88d4aa6bc397f749d2efe3d4f5852d2b487fe351baf0914c4740075595b7e8ab54b8f1ddb01ac7e81fb650f7d561b2633a72b7d93a546b6aa72127f644af275e77dd5b53a153ccb8e771bd4a3e6382aeb4a4e3274bb5fbfc3b051cd8ae55948e4a5d093ecc891a322b705863958c29d088e50369ce6a38ad754f6b58016475895"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x68, 0x13, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x74e, 0xab61, 0x8, 0x4, 0xfffffffb}}}]}, {0x23, 0x6, "1636ca7d4ed3ec438e120b76363f0df424ec7358cff717b99ea480cef7ceb3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_xt={0x2c0, 0x1c, 0x0, 0x0, {{0x7}, {0x254, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x116, 0x6, {0x80, 'mangle\x00', 0x4, 0x3, "4fd56c525b04c895381336e038d27dd92d67caac68cc87b2b021f103cea9601464dcb016b0e744150d617e7344b1a645b43c2546b93bd87514372b947fd5cf3ac9c961ef78213b0c4dbae1cbe6408deedbdf9aeb9b33de2e5d03605a95fff1870d5c34f51df87cf59d72ad7e2ab6f60bbabda74a75b7eceaace941dc5ed3e2ca87074729381ff8c3ad9f027e6a8153f23c3ddcc1fb967513db49f8939e5207d0bc9d64165ab9cfd46ba068037ac185d53badb9fa7228c49a0af4c38dbb2cc5b0cb5758eccdd88fdee3c8d0a83fffc8a9efdc90fca0d983ae3fe653aa8de2a3a267d7e31b71f30ccfd4a0414f"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0xe8, 0x6, {0x2, 'raw\x00', 0x5, 0x8000, "8132ee5ccfa651432c80897dd4aaa1b3579a49c0126cfbe7db919da2673f05c44a1168fbb10fdfcf56de965f42bf9407026a49b58dfb07eaf85cf0274ea5ab042d4d5d910de0ce94119bc940e535925f5a65f798091340a1a04cb18b316876818d261303d4f3475d9195a9c561ba2e75ba19fe2bc3e31a115981e20eb35ccb8cfe4580f27dd17236d0ee0bd0c4971a02c5a73ec8010841a77b41896c8a9c649bb944dc54f047aba60af2c8f5add18ffc01ce769998dd8c1eaff25319788c"}}]}, {0x46, 0x6, "b01ce8b3f08969069978ce07d6168936339c131243dd296f91586d079358f7cb883b9ea874f2e05001d01323069f1e9023ca751bc23a6cc2f7043482d54fef58e158"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x7e0}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)
sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x10001)
socket$netlink(0x10, 0x3, 0xc) (async)
r12 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async)
bind$netlink(r12, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r12, 0x1, 0x8, &(0x7f0000000200), 0x4)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e0000d010c0002800500010000000000240002801400018008000100ac1e000108000200ac1e00010c000280050001000000000008000740ffff639c"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r5], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0)

33.861637754s ago: executing program 0 (id=8860):
r0 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
listen(r0, 0x3)
r1 = socket$tipc(0x1e, 0x5, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x521f)
sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x400000000000000)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1001e, 0x4)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f00000001c0)={@void, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val, {0x8100, 0x0, 0x0, 0x20}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x1f, 0x1c, 0x66, 0x0, 0xd, 0x2, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x13, 0x7, 0x0, @rand_addr=0x64010101}}}}}}, 0x32)

32.577261131s ago: executing program 0 (id=8864):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'syztnl1\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x4, 0x2, 0x6, 0x9c, 0x1, @remote, @loopback, 0x20, 0x1, 0x9, 0xb7d}})
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
socket$packet(0x11, 0x2, 0x300) (async)
r4 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', <r5=>0x0})
setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10) (async)
setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x1, 0x6, @multicast}, 0x10)
r6 = socket$can_j1939(0x1d, 0x2, 0x7)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000400)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r8, 0x3ffffffffe, {0x0, 0x1, 0x3}, 0x2}, 0x18)
r9 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18) (async)
bind$can_j1939(r9, &(0x7f0000000340)={0x1d, r10, 0x0, {0x0, 0xff, 0x6}, 0xfe}, 0x18)
sendmsg$can_j1939(r9, &(0x7f0000001780)={&(0x7f0000000140)={0x1d, r10, 0x2, {0x0, 0xf0, 0x1}}, 0x18, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40040c0)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x170bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xffffffff, 0x4000004, 0x20000001, 0x4, 0x2}, 0x1, r3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x47, 0x7f}}]}, 0x90}}, 0x40850)
sendto$inet(r0, &(0x7f0000000300)="4ec1d658f58298c0816636d5f993ddd07510c0e68e980ee197c6bc9a2e0bc7770b411b30a1a3383d5e6dcc44a352784240a722874a6f4c369586133ca962b60ad100f6dbcc329a0a6dca86964fb3f9c9b99122f91f2f7868905a6448b48c3e47e568a361f224ce77d8519b0c26d0b6e5dfeb4e3bc39f0186bf79ef82afc8aaeafbced5fa1c851f2689c4d181f61f438d154cc88875603294ea40e5c69c8dcc761839e1975dca9f4b1686086d1b8cbe0b7c", 0xb1, 0x20040094, &(0x7f00000003c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000280)=@llc={0x1a, 0x118, 0x6, 0x4, 0x3, 0x1a, @local}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="e423ec21bdf0c5d10625b8ad3cbef5bab39d1dd8e3d2df5e2a383ab5bbf51dcdede7e1359259b1f380347f2c757f45c20be1f0e2545a309a5be6324ed0538b4b9e9a066bc0c74f5d6daa48cb02a68750e499cbd8ddb6be97058e3f59ed46ab6daa3c99261fb32721a0c1534e64f9fa6044369b901b1b23cf63bb42aee2fe1c593f771ea08583b9ecb3c8e9e35492da4f6e4a7f6a147fd1f56d8d6d010d0ec7fe13e422af32b016760c874e545b2b9c22d0735c6c18a3ddec65dcc613b9787c4a7e218189bdfccfa14a2a34fee574f91c73acf49052a4f47f5c", 0xd9}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x8001}}, @timestamping={{0x14, 0x1, 0x25, 0x442}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x60}, 0x8000)
r11 = accept4(r0, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x81, 0x20, 0xfea, 0xfffffffffffffffa}, &(0x7f0000000440)=0x18) (async)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r11, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x81, 0x20, 0xfea, 0xfffffffffffffffa}, &(0x7f0000000440)=0x18)
getsockopt$bt_sco_SCO_CONNINFO(r11, 0x11, 0x2, &(0x7f0000000000), &(0x7f0000000040)) (async)
getsockopt$bt_sco_SCO_CONNINFO(r11, 0x11, 0x2, &(0x7f0000000000), &(0x7f0000000040))

31.099088773s ago: executing program 0 (id=8868):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r0, &(0x7f0000000040), 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000440)=0x2d, 0x4)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000200)={{<r2=>r0, &(0x7f0000000000)='\x00', 0x80402, &(0x7f0000000080)={@align=0x800000000000000, {0x3f8a, 0x7f, 0x1, 0x5}}, 0x6, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x9}, {[0x8, 0x1, 0x9, 0x4]}, 0xfffffff9, 0x85, &(0x7f0000000140)=""/133})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300))
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', <r6=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', <r7=>0x0, 0x8000, 0x0, 0x10001, 0x7f, {{0xd, 0x4, 0x1, 0x33, 0x34, 0x67, 0x0, 0x4, 0x2f, 0x0, @loopback, @broadcast, {[@rr={0x7, 0x1f, 0x7b, [@rand_addr=0x64010102, @private=0xa010100, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @rand_addr=0x64010100]}]}}}}})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team_slave_0\x00'})
r8 = socket$kcm(0x11, 0x3, 0x0)
r9 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56)
setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f00006dbffc), 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000001100)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f38a7a295f64666397a122abc8db53dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b11901b71bf0ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3ff}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x1769cb8eec77e7b2}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0}, 0x400002}], 0x1, 0x20000020, 0x0)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x14, r11, 0x200, 0x70bd26, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4c844}, 0x20000000)
sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @remote, @dev}, &(0x7f0000000480)=0xc)
sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000680)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000a80)={0x10c, r3, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4}, @HEADER={0x4}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0x4}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000095)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000a40), 0x4)

8.146804855s ago: executing program 1 (id=8921):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14)
r5 = socket(0x2d, 0x2, 0x0)
close(r5)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r4, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto(r6, &(0x7f0000000680)="3c12171adb0c2e92480943c91cf094bc9c697cfe4ab57ba11246f4464cf75d47809758045d0f32a2d772438106ef19d60f17c433c4383a5467ea89c2f9df04025a5f8494f75831e86891583dffb663a0859951a377ac3298353bd408817b01b392d557501fa6386e2b71ead07ace843ea7dceb42f695efa60264abff817bd3eae9bde0430406eb0c908af6dcd4fe8f6c62b8dbce84aeb7673e8a7bbff41a70984973cebaa58c029903ccf25a38a77f97692e2f1bc611a2adda2c31ad3e48d5db1c332fb382691407212056de490da31970ea7eec43e61b", 0xd7, 0x40, &(0x7f0000000780)=@xdp={0x2c, 0xf, r4, 0x5}, 0x80)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r7, 0x0, 0xe, 0x0, &(0x7f0000000880)="3a173357f297c605804ab3828443", 0x0, 0x8cfd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20008040)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000240)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000801)
r11 = socket(0x10, 0x803, 0x4)
r12 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10)
sendmsg$tipc(r12, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0)
ioctl$INCFS_IOC_CREATE_FILE(r9, 0xc058671e, &(0x7f0000001c40)={{'\x00', 0x1}, {0x8}, 0x79, 0x0, 0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000380)="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", 0x11f, 0x0, &(0x7f0000000b40)={0x2, 0x10cb, {0x0, 0xc, 0xbe, "2b74b88f015a2269e29d200a30f41689471ec012be200b23a40943e3f1fd4c0089b0002eac40becffff3d4bc3fb870d5488ac90cb05bdecdc0f4ffbe73a0744d2b2e29cc19afaf7997a199db41555876dc00d71f8203d35d6b3956e5bcedfa90e8e799ad62e81dfbe2da345164dd6cf07d5a2ef93e6b65f3642031c8c35e0220c2dc1de367145dd8c677bee73352f6212af1050420e761d118150baf558f94c81c19471a58b854e7f18b8d2307fe56c3d181f90d95037c72ae1f2e37089b", 0x1000, "a1ebc76c9d86d79ae33b84e5c9c899f037c807a6c645fbe118876e37f006685c2219c8ad3e930b8e819f3ca0f4f8d1fda1fc4f5498f38f46696a99c1c6092b0d25007d0e8859d500124726e8c8b6664bc88c1365b675115bbe4f78c2f9ce571363ef85f5aaddabd25cdd1f010e36319dc963dcae4134b9d07c891c99d2eef080ad73ce7e69c4771bc1f1a16e788a145fa5c04bdc6d6f9db8934da2850fc83d8eb1cae8a7e3c788a23022a6a8393d356c3fb6ec7c10cc875a72d5c86df7154b173abf643798312b613f20ca31c1646ca8a3d40c822aeb114521371b32b9252703e9a283af75c39bc606d6f429bc6655a6787761af6624932a7fa5c9fa94fa0ce6956ac3cda4c4e4f1dc39b65866596279f02ec7f4b4d4b442e3558f9e721d4da0cc646ea83b4b52b045d07620a5811db7bc916fc8bc3a816e77f8be2471b78f1579500e0ac21ad588de952c1e9c6c1850e880a86dbd0d71a770f352fbb87e6dc6b7b55c6af2c0f93df9f345310d5d33a538824a06c6e518d713f5818ce406a9ab00f96fe562c318904e007d178f0a82013a79344fc4a6192224a149620da8483fd45e4f4c3790d98055b458d27a255284ad72dda6c8efea2dab730598a6863dbe1c3fe498bdce9c864d4692082567eb94a203cc149276ffeb563fde3ed135b297d7cda02632d965a8e7bb135c87119b0304c1c106b3492007005dbcb116b7f73d8d1125c49784207604b4f62dd801eb8940c464013809b749110d0279b6697925550d112f0911ac7bb9a23dc3f1693f7791d1698f909d1c6bc6517fccb03a4939d003acc780112172fa051bc522c87b6096725ea30d3f8d83a80ccd34b9127eba3cafed45f494a755e2f4d81bc3526fa48ebf5b22afeea211c5672b363875b955bf012f899ad1749a764f957585b6044aa8504e08d8f20a81fae7c24420bb17a701b788bca999a72c694a8a121973f411cce7c306c248ec97cfce7751a1d239b5743267878373c2470acb7514ced7230721f9ee26cc769f181069df64f716e79807708135d90a91c0dcf7ad57c8e595575822a90e96d092f8f689402325c4a04cceec68a5cd3beb5129a706f5ee4b2436f37a8d35911ede924bcc22ed4323192549a5fcfd33646af769dc3ec4de23111cf962903b1a1a57ceb3d4d4f6e9186c291a1580de522c642341bb7a3c3306e0c1b132b213ec133ba117c3ffb0c02fae11ca593f0267f13069bd5f64348e1c8c6fe804a4a119a8d68bab72934a3910f33b09fc67976d029fe7e23c88d0b7552d75e72ec9ecc31b40ec923473062d14cb7d9bb65a1122ae7be81726065fb0390bff28a92545c91b40181fbc4643908739abc72851b6c6bb86e58a15ff84aed5777137be392e6d9c4ad53c8c575a1b7782240191df50eae407ed198e806e6e791721123bbf45dcf22cb662265abaff11256ab5a76fe19e6f50e7ad4e5cbb4878494ebeac933195b86997c42f3fac7c2b094076d8124a042da52bd9ded547542eb8bb2815ba8e733250c036481a10fa90bbe8e99a88c2157fc33e89c6315c08841c71eadb1b342773336480fe6c91f42a436ed3d6f74a970d893f550df0d7b2abb8efd62f5b780b1f3a4277c0d91b9d0741e27df933adb3c624902ee83585b37988850d728bf8348a6d65386209390b008ffe7993f649fee48e3af1aef996cea97462eff95a6750b03223f5e45bbf712ef348af15ef1ada7170230cf8d70995002bc86b234b01a468cd4b4db54b38f9682a37736747d4ffe136c024d102dd101fc22b754f99b742f46601d5dcd2a129862119d99af869df841e9601ec38742ef423f25279ae31298b0720b624a0fe8d822dbe81263417a457ff74623a440d83a0322b3a64fedfc1a446b595b942cc5e3cc7c02ba94b939905f32db8e39fe3f690e8130b93a81e93a778b9c8caea5721a8d1eb5e5381e97012c45d0b86f45adc186037e8610c8869769fd50c77fb34fbcbd10294d22c8fdc7616a41eb684b83eaf243b440d354dc80a95d76503df1e9d20a2a29b8e51de2498adaf20b39e3c3fecc241302ca6e35c3a86a6fef15ebac57cbb3fbc2ffcc259811aef825a18eadbfd9edc4c53b609c3b1fc1c95a043101a893c35c5d3bbb8034350b088d686038e27de12663c540bef40cdc9f598d730f1db9c5ee2cf60bc65bddc7e28db3b82da358549c3ffe0c184209c3e52472fc9fb689fea1ba32f74edb0709235b5a84fd305f3657cbb54a1b3ef2d3b00ba945f8506c433bd19b5e8c4c99160441628b146755dd9fcebef2885c5bc5553139e9ff41bfa9ebb7a75478ee38f2508248532cf6af79097f18517a1d9a9898c4b327086e659d60ffbac11b50ea279b3e2bf4f62b386fa174e61a0c22c374cec38c77f48fa980ed6cdd04acd8b491f9e965fe7a3ba928d7eb7c2785257fd2ead8d449367835a961727773ef0e679dbb3efc910667e6b916f17a707e194c391af5b75b6f11de01bd67f0169cfe7422b05cb25f789a20e49a851cbef4271a98912911092041d2557a55d8652f07e7bbf77ef2ea5da663d8c573c37b16d98e1d162849aadb1ce7e355eb219bb32f543a9372951c5c927300a0d66a4d3ddbafcbe4780eda2b7fe3d67cdc48f5483eab0510c0397a47e47313a8357d1f8dc2bcb673c16b75237678f3774f454cfaca45cbd428b87cd93180d4c1769ab9fd29503454aa92313b5fd2878b6cb09296fa04e0bc4d059b510b912943b0ddb6eb5fbc43733f6ae1d8b2974b1a462e1faa6b559ef308c1bbd0f310da3a27fec63f2454511e988ed809074a5f0e100a0328b17b509b4a1e721abc7bb43f724afe0b490bb8652af23c5dc378000649ba7847ef739e2483413b465165924290bcdc97465bea72ee4eac3182c45aad8f930ef88f020ca3db0ce507ec65e56844c40e28c762479b0d6a9f32295a6f9bc53ff91328787632b7b6e76ab4faaca8815bbdc6d2f11d94a7b3a6c4f065cf6ddc81ea8172e6a8495ce837cc99610a3a321cf7e9450b4a5eae33389801ba51409e31437b6b8a9f34277989288bdb1523655b5d8ef49e3ae0571548235320329f046de984f432739fbf2f8f618a962a5330a6cbd199cdb4fc55830debbd5edcfadf1f59f37475c084d5ba7f593e903709d938a67c0620bad03ce2b10d809d0c81d17c77a47816b4d366fbbbdea87043de26617410c34a14154e7126e08059eca3fa33565ef56096e6812fe85796231974ec53c69b1b543251b0fb35caefe252ff2f9569a54bd845c3d8dcb8d7eaabac3619a718247861ece57824435d3d95d767dfb8a31c80651d8687ae70f728e271511645be025f51837bfa13260948b6b814a897e8bc3af5a16a46f72c40f5e4f0447a9b86119c1b87d15a5608799efedb6012a74bffc0f102c9518890defbea7fd50409481cf978a0c78dd24496006f20f044f10e8cd33f21bd857371ea9663d118f951abc534b026fb9e995b0f555103069c25ff0a8c9eee7525dfdae26ed0f70277ee9d2cb02ae981f05addf5c22217764f163370c1c204d388a9cbe29e656e732c8b69a104ac6b5f7598270ba13ffba08ec9087e15a406512ae9d22271a99dad81a11eb61b48e3d64172f8aafed14d5fa30bfe21e0ba574b137ccc28ebca1c7aede5c48e099ce6de42b0d5c01239b9bc301cdfc9afc90d2703fa4effd8e1d549a2ddb3fc1848da4878c3fc346f28e8bb1b8e8d9d85ed8616cd3559776eeb0948c1852f3f0815788fb8e338bf0540828fe78984151398bf52de4f5df4ef8457203410c01352189c1023e0caca395b8635150d2c70856fbb687e653cf990bd07b25bf2c7d17df0c3c9612c48624065d1bd9ae3d32eabecf983e3d655f4605f9b4523841f3405c6fd8cb85e67ec9cc0118543bb5a08a74f6f110b797359c0e7457cc19c95280efcb26bf8d0dd1f12c10462e106105dd3884c1a8ef4f9b191db933c575a9a923bda906bd428c58f715ea47cbceba4933bdbddb980c0dc274b25db169859780452ab8a843dd47a5cc5e84bede7559a3ca4be704dd9fe8f8e306617e02db42d9313b3ee4ba82adacf59b595cf8d093ca96cbf2f6b68611b825788add51ed21998e1c84f3701f3004959b1da28ee3b2a7b074de9516c71cb136aa1769c26ffae0c86f08e3777119c9b8ab6ec36d8e72d50886f9f13be94d7f3acaabcac7ad30f7bd218ebb57b946e85b048c1b04a44bef2d72f6b1ac09d6d3e5740ba4c4920f57f4a23be53e9fc5fe4e34bcfadec7f83e03518804f15593d63d71ca5259e9bc853815806ece3501f73c8f1e79a7dd019786730ba37ef7abb6382e3d9fdc49ccb551e0a73eaa3ea044f0294d22f52465517212a5fb63bbf1b346078611c6b5a0864be255dce146eb6ae5952ac1a2ccbca39c6577f033df9b718c2246b78794106aee9001de5d5f10a20ce3c0696a9262243372a0519357a4d5c68f7531770abcf47f2408570ee610c1a5394e840d11d040a43490362a3ce2bfc03763cc81eb2c93407ee2c3c023231ed5d146db6b906c95dd584278231b611658d50009f049cd345a962b807d7aac9471c9565d83b08609569582fa8fad51bdd60b99193357973b7184faf13fe094c727ed9c091c5dd46191809769c9347e13f793a6bf3ceac82d5f8c128a42fe02366cf5d41ba22bb0c4dc34cb085422059b020c0a4339d35b197692b0a1b6427ecfbd954a174d1a7bb7732078e67b0f9de64aeadd9f5b3718a6aee1eb70814a39bb7f471fdb4c7c552bfa42d36694787c88785aedf6db6c1f3d93678c367d40b08c9d9c6974c7e99aeda27352a9ceadfb29bfc51786df133b86e1dd795e941faf9cebb1d641003253efb13cffa1641ba9847303ebb809a591156a5cdcd31372e2ae1d45f54142db8ef6de2883bf63a91c0724365048b6ad699ed01c3dfcfad1c757b2b132f9da831363ff4d8ce2068f33d10dfba6a74ba5491525db88f21ac0b1e759f4ad27fce6fe47b0501a11b85c92cb723f575f78173e9cd099630fdbe3fd37bf6556144dafc0d1b4587e4d74907d3d0117c09cc9d3236de56af023c29b0b609f8e280fe784c3888b6c435dab8d156343c83a0faa5c716f59af06b785410eeb1b06e4bb6753751bf736e5ddc61420772c499979c408018e407bb0a29b966fb81796d394d4dc04a5b19e0b0a2d29f6e9bbdb3b45be949eebce4ab1fde86ef2eb520de70dab4565ae9886d9dd1a86d2f5a371c29df6a0b89fd20718e1e74f858e1a9ec48e85c6492d7be24d0fb2aee36ed164fc7dd652457d87e006e11f734c28ebe5a0bada19d29d11716ed0539fa78ee627e3a9039678938708a49bc81750d90b5c80b4b81be5ee49b511b22ffc7f711ebdc12f1229793fc69213db34dc7a679cb81ac2efe5ac1bf51311862b3df9550dc06f475d1be31a67dfd9fbc82025ef065774434c4fdc7a0368657fd11459e26b39a85b677ec0350d865e833d3f543c50dfd1576c7fbe02eff118d0eb0354057ec2c621a63080d5a70ac128dcc94a8c6c01653ca575cdddc20c8405c4a03172c522d90c682ff67a386140c14cabf8b47e05f389603a4b120c47302d0d85553dd630ad4344c3eb139084f75b275441523dc34d0e194ccbb3e2a56dad5963d8fee807959ffaa504dc950719cb4f633b810b3ad9c3667140e8f1d98ad58f1a9d0cee026b7fcd169fb47a8ad002ef033b9240bd69e3dc57862acf87a908b7719cc4dcf7148a5a4931504a2688252412aa9db714ff040aa11f58674952778451e39e9eec01d17059847d3832100c58f394ab073fb94a"}}, 0x10d7})
sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r11, &(0x7f0000000340)={0x11, 0x0, <r13=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r13}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000)
sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0)

6.857104449s ago: executing program 4 (id=8926):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000a40)=[{&(0x7f00000007c0)='p', 0x1}], 0x1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet_sctp(0x2, 0x1, 0x84)
unshare(0x2a060400)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

6.341931553s ago: executing program 1 (id=8928):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, 0xffffffffffffffff, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c)
r1 = socket$inet6(0xa, 0x3, 0x3c)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x2017be01})
setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000040)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18)
connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0xffffffff, @local, 0x9}, 0x1c)
writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48)

6.279681252s ago: executing program 4 (id=8929):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab000e271f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1ff032aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f757036303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e0800000092e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9be7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa5200002fe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb0972d39e4b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e501ddddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b605908000000f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c332c34812382e57c0e0d83f3f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217b6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b4783d66661a92f174f2b88cd544b2a8e1b05ea7cf51578169fff7765f9978883b4b5983b42a35a05dabfc325ec2a2ec2f9b0882fdcf5d6f72272d2ff0d8eea60f5494ba42b4d40f144f0ab680a6f40f9094d3afb58a1efd6109894b8605c6b3b3f020c222f6446195b2274f634fbb737948a1f36ea729467e132385e9da614e4625175f4443b97a675934db90010e4b884200c3546c4d86d712c3939e11be3343f693846f509ad4c445ade5cd6d126d5694462ac5d3b527c3bd51c0a715a28d65fe94b255d02cdc1fab99b5b9c352f1b284115e4046285a824d22b6f0afbed8d6096a72fef72ebd6aae78b02fa1993e8fe2020ae93aae2bcfffa40b98549f1fb9fcefa74329909a207336d07f6f59da423ac5fa47852055d5ce6d2c56bdbbcdbf3458ba478c669f39d5272e65c90908ea2cb86d38f8ebf80a8cb85d8399b42403c94b8662af5cf1411526f177b4d476169a5d5a8c37d0d8893a77d0bd47b8a0bba60b3e26094209c889585f997ff556bcd2cc223f9c0c44de9d0fe1b5a8a815f652e79747d3e1f413fa0575d51f652d22883e143065c5ad74bdc864754ba3dad5a8fc8fc2c807d1a51dfb29884adee415c13f2ce14d307bd6165ec6ba68a766adfcbe444ea72d586bb47dd98a225467aab538a77667d19bae2e51727ba6d190e6d7"], &(0x7f0000000340)='syzkaller\x00'}, 0x3c)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000000)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x28c, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map=r1, 0x7, 0x0, 0xddd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x98, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x84, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x62d, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x6}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xffff, @empty, 0xfffffffa}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2c}]}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'pim6reg0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x401}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x80c0}, 0x840)

5.438300333s ago: executing program 2 (id=8930):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x28, 0x2d, 0x107, 0x70bd25, 0x25dfdbfe, {0x6, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x115}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0x4014)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, <r5=>0x0}, &(0x7f00000003c0)=0xc)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @uid=r5}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000f00)={<r6=>0x0, <r7=>0x0, <r8=>0x0}, &(0x7f0000000f40)=0xc)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f0000000200)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc, &(0x7f0000000d40)=[{&(0x7f0000000280)={0x134, 0x1a, 0x2, 0x70bd2b, 0x25dfdbff, "", [@generic="7fefc6933553e3b34369e7a93174d43c52dd25416451dc7948", @generic="7188057f10e45f87eeac31e3b74de2a2", @nested={0x24, 0xef, 0x0, 0x1, [@typed={0x8, 0x76, 0x0, 0x0, @pid}, @generic="80a6ca17437ab5e34f598bc3d44370277bc6a38f", @nested={0x4, 0x104}]}, @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@empty}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x3}, @generic="f5c4afaa17ac19d4dd52c338b1da1a62a432a270ddbabfc95d215ba05c19796213817da7970982d4eb677b864cda9e6b18888acd9e6359c69b655ec400e92dd7f2cb411c2e0b2eb768eda6783d652b2216d542cf6f91bb671c50022d1fff1d1606e898c741a776b529cc287a83c593f7fbbc33824dfe99b7601e5a3759e036439a22a044b4eee201029e45f3c1ed746f37917aab0df58c6eb787e81b761859c269b9fd625990739a92c408dfad09aff6fddd092b0693e7b4528c", @typed={0x8, 0x1d, 0x0, 0x0, @u32=0x9}]}, 0x134}, {&(0x7f0000001080)={0x1678, 0x1f, 0x20, 0x70bd2d, 0x25dfdbfe, "", [@generic="9cee590eadf02d0a3da71572bf4f5088c06481c4e7bcb7036c7cf1be0ab2cc26d6e65a3a3767d07a1aea7bd21ac8cb7663de85535ab3a1e08b6a6031f6fc76d2fe492504e66ff1e2b6f1dc41154e6a8352db462e7f5e77002d72230e7318a1cfac7249cfda1c1c6ab447a4b426f0f3c2c2969d64808553cc81cf9ae92cf40e6b3a2ff005d4e121007a", @typed={0x14, 0xd4, 0x0, 0x0, @ipv6=@private1}, @nested={0x1c8, 0x1b, 0x0, 0x1, [@typed={0x4, 0x10c}, @typed={0x8, 0x106, 0x0, 0x0, @pid}, @typed={0x8, 0xcd, 0x0, 0x0, @ipv4=@empty}, @generic="49eaf871e0ba5bf628c9d15fd37599897ed3d96b4775bbd6502db1f5def4a1f890cae57a443b99eb5c69030967e4102ee93049896c3e081951e4b5b430c8ec7d00035f06fef15b813c96b68bd391a55928f1c74dcca1fe9eb4ed4a1fd3a5ae50158bef473d076d49e55e1ac74b5390b1901ca66a407839a420365c56c3ac36dbbccca44ff307aff3d5b7cdfb478fc2d32fdf9f0e10dc2c3f938ac63417ce1b8106e929a49cddf8419722f63087", @generic="0b87956a85b39203875188b809fd8dac5de61d1a5744c2a116c3e25e1d49724def1c18573f338c1fe8cf4a75125ae6834e132b8501fda9bac3d53d018b83dbab3efb26974e8b6c224b7f089b526491ea672cbc2e55d83146d8fa5d8f3e90fc05cba421515217fef519c80e854db5769c27c4c79b58bbe4f268cbd9bfeb6a62597f78e65b929dfd02a45acc5c9adb7ea3f3f110f7931c3505f65b0fbc48187c3f0952e78df22f930bd4aca397ef082cc5ef295293d72e1ef0fdcca6fd5c7a58ffedb8601a6fa05f583c096677e9cd0bdd44cba542589986e7954d409afed91ff52a0c5465b475cb97b08cba3a78384dcd86fc0576f56b16", @typed={0xc, 0x80, 0x0, 0x0, @u64=0x9fc}]}, @nested={0x1400, 0xdf, 0x0, 0x1, [@typed={0x14, 0x7e, 0x0, 0x0, @ipv6=@loopback}, @generic, @nested={0x4, 0xb3}, @nested={0x13e4, 0x2b, 0x0, 0x1, [@nested={0x134d, 0xa3, 0x0, 0x1, [@typed={0x8, 0xcf, 0x0, 0x0, @ipv4=@broadcast}, @generic="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", @typed={0x8, 0xc, 0x0, 0x0, @ipv4=@remote}, @nested={0x155, 0x29, 0x0, 0x1, [@nested={0x4, 0x79}, @generic="347eea7ecbff070000454e52c54d95e48f4a3b2d60320722bac556fc38c6ed9c8e8967b770079218", @generic="4f38d132", @nested={0x4, 0xbd}, @typed={0x8, 0x1b, 0x0, 0x0, @uid=r5}, @typed={0x63, 0x63, 0x0, 0x0, @binary="a5acf60fa0c87aa9ce2606fec081fe6b2e9b4176e70d78210c941c8f83f996ccb3c2e1d39e5676c8d21bdbe54545a2693ef261e9b8e29e17bedf666cbc62fb9653e10f8491f815d6bd4c252db0d308bdf4046f5a84a54cab82dc2f2c8075d0"}, @nested={0x4, 0x112}, @generic="6a2196507ef13a706102c8ef83e33fec8986b2282b9de6ae4a75fc9aa6b0f2207d0712b36488211ff4cca8ebb048f805948c63e9ca341cfef703baa329aa7c4116d5091919a9bdcf79c1ace0f0b10efdf4c0b33200d05ad11bfea8175462f25fef18ad90b2e97a21bd62039c531c3008e87fcc909449baca5144ecb237b4a4b577900c7e54b686caa2bf", @generic="62ced522947fc4a16a00262f31ed26def48c8100824a95b91cf1259f136312bba0371a"]}, @typed={0x8, 0xd4, 0x0, 0x0, @fd=r2}, @nested={0xef, 0x41, 0x0, 0x1, [@generic="e394e06531b491f7675a56799673c8c5a9fc1441ad6238b739f22d2bdfb4b9", @typed={0xc4, 0x5c, 0x0, 0x0, @binary="28a146b3f7d814ecbbf1a53ef79d80cae405076732c3aed5547b5b28bc8d59d435efc19d5ea383705857c71d6f40fc96cc909f156eb392747087a31d1daf088311bbd94863516911a9b290e09b8a201344cb4581a22c2f8d8654a782bf8695c17eb84e9597840a70db7b9231050deb0bc64f83730b5e9a398a14e9ff7175a3b78ee9204948b17be7536afd87811ec4827eca7ef988f4a9589cb24cdfbb488c3db41777f6911a71e74511364e8f716a5e4d58e5174646567e825ba6b880af06ca"}, @nested={0x4, 0x33}, @nested={0x4, 0x14e}]}, @generic="a4fd46cf62b44d997c58673ea78a8281b7e75c276b55f223e276dde28660f82cec60b32540e88b077f7e66b21a988850ab9adc7faa9bf5bf59481b06cab85caf2a4aaad070b50fbf0d5dfa3f7a6dc040f151bd33b28493f5e94fdcf32d8c22c47c63a7d363b802cef42df0c89f8b38af9131a98842c552d2c67b77cae758b6ea620ed0ebc3c37f0b778f17e4c14f854561f73b1e1d37329c7961417c7b0a86b27742a4f113714e9e133608f33e1e8e68d6e225ddd51465b18786fb7e84d867ab2946bf0f5efec27246701b587cf56d2d662674ea51cea4e7156b08698e1982b3b0", @typed={0x5, 0x10e, 0x0, 0x0, @str='\x00'}]}, @nested={0x87, 0x122, 0x0, 0x1, [@typed={0x8, 0x162, 0x0, 0x0, @uid=r7}, @typed={0xc, 0xcd, 0x0, 0x0, @u64=0x3}, @nested={0x1c, 0xd0, 0x0, 0x1, [@nested={0x4, 0x152}, @nested={0x4, 0x130}, @typed={0x8, 0x99, 0x0, 0x0, @uid}, @typed={0x8, 0xb, 0x0, 0x0, @pid}]}, @typed={0x8, 0x111, 0x0, 0x0, @fd=r2}, @generic="b13dbbf1c941939a9918fa679f4ca53e95847507ff56dea28e8f896496d1817912d616518db0578387e1d6413053b8fcc12f4a411f457647e7be18416822859e981d33f1abe9ec3eeb8417"]}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@multicast2}]}]}]}, 0x1678}, {&(0x7f0000000840)=ANY=[@ANYBLOB="ac000000350020002dbd7000fddbdf25040082800c00e480080033009b93ba2059acb746050beed15bbc522503034459fedc2d7119a54a5ec28947ea1656b24ff38d098fcaabd64460b35e019ffe56c092c31321020d2483", @ANYRES32=0xee00, @ANYBLOB="fac6a1337a595c52f7c755b0af01e443ff05b9395b7683e59e805431dd38fde0389c0601edc6c62902c4c8484e26bbd5a50b760d8891ab98c9959a0992056f1dafc284f1fd72e9cad333a455088cbbc13f13ce5cfafcf40d8d54118160b2d8cb4b14002000fc000000000000000000000000000000f409cb51f083d886cee3b6c139199c95f16b15b00f004e"], 0xac}, {&(0x7f0000002700)={0x1380, 0x28, 0x800, 0x70bd2d, 0x25dfdbfd, "", [@typed={0x8, 0x10e, 0x0, 0x0, @fd=r0}, @typed={0xa1, 0x45, 0x0, 0x0, @binary="e771cc13e0f94c364629ff691d789035b7ec14594118918c268980e1c0b7e29f4f01a7487f7c2e3ef7d297ae3e09d7717a395a939f1d5b6dd7e3949aed66f67bf46196ccb76c4d9efc52240f259758788e15e01cd24d634b9b571dcb46deb0a1cdd52c632311f83dc8db96fef2916a4b5416df46433f84e42b592c8324b86f5f65ed56ed846e3af66eadef5456f261b12ec642530b31168e9cada9db9e"}, @nested={0x12c2, 0x4e, 0x0, 0x1, [@typed={0x8, 0x55, 0x0, 0x0, @ipv4=@loopback}, @typed={0xcd, 0x55, 0x0, 0x0, @binary="7042702ac35b657d2842c56c63676d84a471058a72d53904eeda4c268925520bf001cfe209468d8aaeb428384652f9544b82bfbc8b0187a49177d0cf326883e4c4d014f51c641e22d4979de4f5c964a6bd058bd078731f31cc42b2eb9699dbddfded1c539e3d10e182bc22eaa7b734038e76de86a4622d5cb6dea7fccff22438578cbcb05f75d1c5d21d93eed98b930b3ccea76167069c99b148a959255862dfc613fed676c7c5320863358378d94089fe0d9bd6537af960140f8656d50331f8f3443570c17beba787"}, @typed={0x8, 0x126, 0x0, 0x0, @pid=r6}, @nested={0x14, 0x2c, 0x0, 0x1, [@nested={0x4, 0x68}, @nested={0x4, 0x11d}, @typed={0x8, 0xfb, 0x0, 0x0, @fd=r1}]}, @nested={0x20, 0x18, 0x0, 0x1, [@typed={0x8, 0x8d, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x126}, @typed={0x8, 0xa6, 0x0, 0x0, @u32=0x9c0e}, @nested={0x4, 0x65}, @nested={0x4, 0xad}]}, @generic="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", @generic="f8985113fbf0195bba52b7f91ce05014e3e15154a5f13a498935270ce3e3c405962f674cfe93c4e316837afd7d699b0bc6defbcbec0b2d4797130bb7d3e369771bff16873508d42aefc2d24cb1c586495f40a52ce1544b826381fbb5ff677b34964bd77256fee0bfee108ae1825a09720f3b520de18aa76c0efddf4776d30e2b846802e476aff3a8fb7ec440bcac89cd702f", @generic="2b484c1759cde2b2be9f298e0daec8ca6bd56a13f557f14b5c30c13823d5e4239831d98b1750ca10b6f1edd2234852023eea3d8b49fb31b3644d08521dacdda223d9e2db2199dbab4628217de7eee469cc709c39a499c4ae7a66be6cc754cd34ed765e7c5f119168e50ee8430c46252cd84eff8c386cd8923811444570287c902309d872b198259da3fb061cd5680a587e19775f09baa9e3160bc0ee3d89ec6fef8f1c7e734c8eb3de4219e9ad2d98ba893386833f965927651d0c3c0144158bcef0907307fa947dc8d42334e43bdce918ca23ba9a881c447d110a16a2233111f0f2511c9ae68336aec471920b594a80", @typed={0x4, 0xf8}, @nested={0x24, 0xc6, 0x0, 0x1, [@typed={0x14, 0xc2, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @typed={0x8, 0x126, 0x0, 0x0, @u32=0xc00000}, @nested={0x4, 0x80}]}]}]}, 0x1380}, {&(0x7f0000000980)=ANY=[@ANYBLOB="48020000220010002abd7000fbdbdf2553893df449a81f1687ea1cdf08ddce50fc443393d4e466f06acdd10bd6ec08c204ca08008100", @ANYRES32=0x0, @ANYBLOB="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"], 0x248}, {&(0x7f0000000c00)={0x90, 0x36, 0x4, 0x70bd25, 0x25dfdbfd, "", [@generic="f5693409", @typed={0x8, 0x3, 0x0, 0x0, @ipv4=@private=0xa010100}, @typed={0x71, 0x25, 0x0, 0x0, @binary="702d76212d3de6108d3f34bbb91df863b18e64125100d4402cf36655e6d19dd6cefaf5d3bde7b5ee5694dfcaba3a4613921d297a29b3193cdfaeccc0b8579913415b6db12ae094ca4e10a4e1e859d046a19e563172b9d444d051ec159c612a5e02d07d6fe6610dc84840439efc"}]}, 0x90}], 0x6, &(0x7f0000000f80)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r2, r2, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, r5, r8}}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r0, r0]}}], 0x90, 0x20008000}, 0x8040)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan0\x00', <r9=>0x0})
bind$can_raw(r2, &(0x7f00000000c0)={0x1d, r9}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000180)=0x80000000, 0x4)
bind$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10)
listen(r1, 0x0)
r10 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r10, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0)
unshare(0x400)
r11 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newsa={0x144, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in=@multicast2, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0xffffffffffffff3a, 0x0, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0xfff}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075b, 0x5}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0)
r12 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x5ff5, 0x800, 0x2000, 0x800010100000}, 0x0, &(0x7f0000000440)={0x1c, 0x40002, 0x0, 0x0, 0x0, 0x200000000, 0x6a9}, 0x0, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
r13 = socket(0x10, 0x3, 0x0)
sendmmsg(r13, &(0x7f0000000000), 0x4000000000001f2, 0x0)
setsockopt$nfc_llcp_NFC_LLCP_MIUX(r13, 0x118, 0x1, &(0x7f0000000140)=0x123, 0x4)
close(0x4)
clock_gettime(0x4, &(0x7f00000001c0))

5.361379419s ago: executing program 1 (id=8931):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
close(0x3)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000040000000000000000cbd3f5303e3f324689ed79da891aabed09402b8046cb5afbfbfa5f578df76e403473d35d25b8a9c1d221bfc94e92c7a573f8f3c28563fa8187c326f61681035dfc9934b4b8a0ff6e7faeaec86ef0f8a947aa7c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x80000, 0x2)
setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4)
setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c0002", @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000100)=""/7}, 0x20)
sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @local}, 0x1c, 0x0}}], 0x1, 0x24000000)
recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/153, 0x99}, 0xdb31}], 0x1, 0x40002102, 0x0)
r5 = socket$kcm(0xa, 0x2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r6 = socket(0x2, 0x80805, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000280)={0x84, @loopback, 0x4e22, 0x3, 'rr\x00', 0x34, 0x80001, 0x70}, 0x2c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000deec27bc577ddbb3890c976fda5d45a7157b56458b7dbc57497e177f1e6abfd1e95e87540c97da4e103908f691005740bddb7e7807872d96fd749feef2dcd9df1586"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x5f}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES8=r1, @ANYBLOB="7d2a55dd73c1832200d9492ac06d91e713743b43e574024ff1a7a806e6cc09c13c8c649950d85bc4c26a58f131894245", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r6], 0x50)
close(0x3)
connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c)
socket$kcm(0x2d, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e61, 0x3, 'lc\x00', 0x8, 0x20000, 0x77}, {@remote, 0x4e20, 0xac91d2bf000ec5eb, 0xcd}}, 0x44)
sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0)

4.531305656s ago: executing program 4 (id=8933):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="a2443161be8f57bd2edb16613e72689f449745eacd2734d8221b9c5fd7e91761a2359344bdb98cc78e94fab6a8", 0x2d}], 0x1}, 0x40000) (async, rerun: 64)
accept4(r0, 0x0, 0x0, 0x80000) (rerun: 64)

3.923318678s ago: executing program 2 (id=8934):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0)
close(r6)
socket$tipc(0x1e, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x1, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', <r9=>0x0})
sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054)

3.809420446s ago: executing program 3 (id=8935):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x91, 0x1, 0x1, 0xa0}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
shutdown(r4, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r3}, 0x20)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000440)={<r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6, <r8=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0x0)
r11 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$kcm(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
ioctl$int_in(r11, 0x5452, &(0x7f0000000000)=0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
setsockopt$sock_attach_bpf(r11, 0x1, 0x7, &(0x7f0000000340), 0x4)
sendmsg$inet6(r9, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x8808)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000080), &(0x7f0000000100)=r9}, 0x20)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan0\x00'})

3.303858188s ago: executing program 4 (id=8936):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a00"], 0x1c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = accept4(r5, 0x0, 0x0, 0x800)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6)
r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6)
r8 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', <r9=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400000800014b5c9fa24f5f6708bcfc75184f2043"], 0x50)
sendto$packet(r8, &(0x7f00000002c0)="05031612d3fc140000004788031c09102c28", 0xfd1e, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14)
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5bd87987", @ANYRES16=r7, @ANYBLOB="010029bd7000ffdbdf25060000", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000810}, 0x20004800)
sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042abd7000fbdbdf250800000005002d000100000008002c00cd73b65908003c0081000000050029000100000005002e0000000000080032000800000005002900000000ffff"], 0x54}, 0x1, 0x0, 0x0, 0x84800}, 0x4004)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r10=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r10}, 0x10)
sendmsg$can_bcm(r4, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000022c0)=ANY=[@ANYBLOB="01000000670f00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}, 0x1, 0x0, 0x0, 0xc080}, 0x11)
socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r10, 0x1, {0x0, 0x1, 0x2}, 0xff}, 0x12)
socket$nl_route(0x10, 0x3, 0x0)
write$bt_hci(0xffffffffffffffff, 0x0, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000240)={'vxcan0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x5, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r9, {0xb, 0xfff2}, {0xfff3, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000040)
r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r1)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r11, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4084}, 0x40)

3.273463253s ago: executing program 3 (id=8937):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2007}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0xcd}}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00}, 0x94)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003b000100000000000000000011"], 0x14}}, 0x4044000)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={0xfffffffffffffffd, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8de}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)

3.151501405s ago: executing program 1 (id=8938):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={<r2=>0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000340)="9f", &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r3, &(0x7f0000000600)="73f73d18b0dc", &(0x7f0000000100)=""/68}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r3}, 0x4)
setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x5, 0xc}, 0xc)
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r5=>0x0]}, &(0x7f0000000040)=0x8)
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x418, 0x288, 0xa, 0x148, 0x288, 0x10, 0x380, 0x2a8, 0x2a8, 0x380, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0xe2, 0x9, 0x0, 0x0, 0xfffffffb, 0x7}, {0x4}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x400, 0x0, 0x44, 0x7, 0xff, 0xff, 0xfffffaf9, 0xe, 0x20}, {0x9}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0xafc, 0xf8, 0x10001, '\x00', 'syz0\x00', {0x4}}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'bond_slave_1\x00', 'vcan0\x00', {0xff}, {}, 0x33, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@time={{0x38}, {0x4, 0xdf, 0x7b72, 0x30e7, 0x393, 0x4, 0x2}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x2}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x478)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r6, 0x84, 0x1b, &(0x7f00000003c0)={r5, 0xaa, "031d4d653dab7cfe7614b11ccd6acede04f92fb53ae2368e826833d09b0ef4c14124cef90100a1f3b606b158c5dd70acb803e9cd59b550b43210b769ab5272f515964bcf0674c54590dcc2c9935c696e423f8be4c7b10bff171aac6eeef1f6ca55e32ebc8db02cd4fcd3db98f6ebc13edf9f940be90d7cebca0757cba34ac0b9cacac7c716ffde662788692b9ea89deac03f7b6c8857267d47a494c50700"/170}, &(0x7f0000000240)=0xffffffffffffffbd)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x82, &(0x7f0000000200)={r5, 0x0, 0x7}, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcf, 0x0, 0x0, 0x0, 0x805}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff5af6}, 0x94)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x7, 0x10, 0x2, 0xffffffff, 0x4}, 0x14)
r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_int(r8, 0x0, 0x15, &(0x7f00000001c0), &(0x7f0000000040)=0x49)
connect$802154_dgram(r7, &(0x7f0000000000)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x5)

2.659708106s ago: executing program 3 (id=8939):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="0db20200305b01001400030076657468305f6d616376746170000000050011000700000008000400ff010000140003006261746164765f736c6176655f30000005001000040000000c001980"], 0x6c}, 0x1, 0x0, 0x0, 0xc1}, 0x84)

2.462608288s ago: executing program 2 (id=8940):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000000f0)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004850}, 0x8800)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="78a23478ee079bf906cf0707ed6fbe8b871ebb0a1d54ba7ceee35909e050cfeccaba4f328ec3497f63fbce3605f4f89127f521527ffb795d3715"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002140)=@filter={'filter\x00', 0x42, 0x4, 0x1350, 0xffffffff, 0x0, 0x0, 0x1220, 0xffffffff, 0xffffffff, 0x12b8, 0x12b8, 0x12b8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'pim6reg0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x1160, 0x1188, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00', 0x0, {0x4000000000000000}}}, @common=@unspec=@string={{0xc0}, {0x4a, 0xfff, 'fsm\x00', "bb306f1a10bd0ba5fc36156ddf3c07659aa78b676a6d24da2c2e72ebc70f03e8fc2a67ed8594a958e8857370ea75ec62940b08c939231d5f7b091abb9155d934d0c3647ab48351a4419075c76b38a28c62d4f8479aea58be8d5f986f780cffb042d909156e4389330510cf49bcfc2aa48d8c9406a773b7d93b72967ae6d1caa9", 0x31, 0x1, {0x8}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x13b0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000100)={0x0, 0x2710}, 0x10)
recvmmsg(r7, &(0x7f0000008000)=[{{0x0, 0x0, 0x0}, 0x10000}], 0x1, 0x40000000, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r8, 0x0, 0x0}, 0x10)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20082}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0x1c, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000050)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x20000600}, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0880000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0)
r10 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000880)={'sit0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, 0x0)

2.399281526s ago: executing program 3 (id=8941):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
r2 = socket$inet6(0xa, 0x800, 0x7c)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$packet(0x11, 0x3, 0x300)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
recvmmsg(r5, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x8}], 0x1, 0x40000180, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r9)
getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40054}, 0x4804)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r11=>0x0})
sendto$packet(r4, &(0x7f0000000080)="9d96914067bf7a3be5510b29b4105063f34b32429eef3c72b4c002496c9b12df6146088387e103fd4e6cd6aee95d", 0x2e, 0x1, &(0x7f00000000c0)={0x11, 0x7, r11, 0x1, 0x8, 0x6, @remote}, 0x14)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r9, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40054)
r12 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xc}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0xc015}, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000040)={@mcast2, r11}, 0x14)
socket$packet(0x11, 0x3, 0x300)
close(r1)
socket$l2tp6(0xa, 0x2, 0x73)

2.223456028s ago: executing program 4 (id=8942):
r0 = socket$inet6(0xa, 0x3, 0x7)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
write$tun(r1, &(0x7f0000000280)={@void, @void, @eth={@random="7de102ec8729", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @val={@void, {0x8100, 0x6, 0x1}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x64, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x30, 0x0, @wg=@response={0x2, 0x3, 0x0, "2aa7ba4927c51ee2f5170f2f3a0072ae8bdc7d17430e9cdab3dac3ad86d35880", "1cc1da49ece4be1c578b9ae7174e98c7", {"322e109dbcb3bc4e915ba6de2dab1188", "99e2077b885aaf3c1d2e182f2863f441"}}}}}}}}}, 0x9e)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000001c0)=0x1f3, 0x4)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000000)={<r4=>0x0, 0x200}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000003a80)={r4, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000000c0)=0x18)

1.965430311s ago: executing program 1 (id=8943):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket(0x2d, 0x2, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4)
setsockopt(r1, 0x6, 0x6, &(0x7f0000000040)="010000000e0ac25c5e0916f7088ec5d16e73e52b5b9d8cde22b5d5cba0cb2f9775d2da84498780c117bb4c6f56a5ec516cfbe772bd1a1e5a2a090b2117bc0266cf94f7877c0d43fa6ed6a7e55b9df94cb6df9328b7031f972bce8d1d7c219472a82175cb243de88bad5a82a94c7e13fe60fa089ddbc98686e7c85d83f2fc572b114c770ea4642746186129457a5210c6bd4c69b6cac5e58d6711cae9e66b432d0cfb94472f37b184b0c86b76def7b3641ae2a02d5ca25dbe9e51fdd5f7101811afed8ddf8f7983e5762a977b2eb62e80ffa0932dd80f404b06b6c82a933605384595", 0xe2)
sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000240)=@generic={0x2d, "0000080118000200000000000000001000000000000000000000000000f860c9e3bf460000000000000000000000000000000000000000000000209a00000000000000000000a76700000000000000007d000000000000000000200000008000"}, 0x80, 0x0}, 0x0)
r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x7, 0x8}, 0xc)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000a40fffffffc08000540000000020900020073797ab10000000008000640ffffff000800084000000001080003400000011c14000000110001b1fd0cf5a6f029f22071141a6dfdfefa09ff053711e6d1d26a8c0f93f45147968f24"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24004040)
close(0x3)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={&(0x7f0000000140)="132ec6e8f85ddb623007c8842ed7235c6472a0977d1d6c9d5153879d44a76aeec87fa8ca467986a3e0764744572e78d882acdcdf851b7aac5c229b5e93b2d60c0c571b2a700d6f201d468d14648cab864033a29301bb70d22753be8ca8119a01cc90d7377fc8d85f6ec4ce38c6cd8600c83e17a4b82d86", &(0x7f00000001c0)=""/39, &(0x7f0000000200)="de90197211b2a9bfcc604c83c4b431f769ab78823278f8b691ea93c37ce53c629dd1c9be10e4074fabe7204ef0a94e5313e68f33eee00c900e27be6e4c", &(0x7f00000002c0)="041fb88c5e0bf7f0dadbb25f0036fd95d8174233e4358bf37a1883de6789095bb851d2caf9e2bbe511fb90d85c86b80cd44554e859b7293b79e3c922d09b40aa50402c1956fd2b1917f5aabff9142a2aefe7a643b3faf57f6e2fb6e67a8e484546936fcbbb188de8e918540fd9cf94e03e154096aeda46c492306636082d4b231c5a4766a029fe74f8c49c21b246d9471f5f308fb6a39904", 0x101, r2, 0x4}, 0x38)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000068a00800000000004000000cb2004000001000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xfe5, &(0x7f0000001840)=""/4069, 0x0, 0x2}, 0x94)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1d0, 0x1170, 0x1398, 0x0, 0x1170, 0x310, 0x1398, 0x1398, 0x310, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [], [], 'batadv0\x00', 'veth0_to_hsr\x00', {}, {}, 0x53}, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21, 0x1}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x3c}, [0xff000000, 0xff, 0xff, 0xffffffff], @ipv4=@broadcast, [0xff000000], @ipv6=@dev={0xfe, 0x80, '\x00', 0xb}, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@multicast2, [0xff, 0xffffff00, 0xffffff00, 0xff], 0x4, 0x100, 0x6922a4bc93354ea2, 0x4e21, 0x4e23, 0x4e21, 0x4e21, 0x410, 0x300}, 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3, 0x6, 0x1, 'netbios-ns\x00'}}}, {{@ipv6={@empty, @mcast2, [], [], 'geneve1\x00', 'veth1_vlan\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000002600000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00'})
bpf$OBJ_GET_PROG(0x7, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', 0x0, 0x4010, r1}, 0x18)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r1], 0x24}}, 0x48006)

1.699727865s ago: executing program 2 (id=8944):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000100)={'xfrm0\x00'})
ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40a080, 0x0)
close(r2)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x60, r3, 0x1, 0x0, 0xfffffffc, {}, [@IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x60}}, 0x44046)
unshare(0x20000400)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f00000003c0)=0x499b, 0x4)
shutdown(r5, 0x1)
sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4c28, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000800)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000001600)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r9=>0x0})
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x5c)
syz_emit_ethernet(0x4a, &(0x7f0000000200)=ANY=[], 0x0)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, 0x7, 0x6, 0xf02, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x100}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}}, 0x0)

1.232386457s ago: executing program 2 (id=8945):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r3=>0x0})
bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x17)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x6}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r2, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0x1, 0x4000041)
setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000280)=0x1, 0x4)
setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f00000003c0)=[{0x1, 0x2, {0x2, 0xf0}, {0x1, 0x0, 0x2}, 0x2, 0xfe}], 0x20)
sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r3, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xc096}, 0x20000050)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x0, 0x0, 0x9, 0x1, 0x8000, 0x1010, 0x9, 0x1, 0x1, 'syz1\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNINFO(r4, 0x800448d3, &(0x7f0000000480)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb5, 0xb, 0xfffa, 0x1, 0x7, "a79d580dc83ae3e1aab0567f9b20d2e19bfe0c76d0a64b643785253a3af8bf426fe69e7381db5671455d0efa02964190fd303116f8c10ac0a557295f56368e80f3740e14b97799a7426d404f829864a3b08263ef66e60cc29b3ba3f5c02a10835e7a36f88f363ac771ffe354ed7847572fa2b48a5664645abb31c8a4b37b00"})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x140, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10c, 0x2, [@TCA_BPF_ACT={0x108, 0x1, [@m_skbmod={0x104, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0xd5, 0x6, "0c5720b707e41992f7d3e03eb0a83101ab1330a7c10ee2be34aa729f8f7f65d3fd4b0a3be1976c3538da2fa427f5a41285ad8376e443f0471df1a6abb6bf6be48dac58dd2b082bacfab3bcd53757683c1c0d212191fa3f0ec2d327fed0b2eab4bc9a2c74b4134cb0c5a9c1d5271da9a31296bde60257f2440d5e2a30e4e80d2148172961982fa14afb0c1e46c90998b87dcb9fe848ca94cccb28a2548a07b4f6c66706c6972ec9af1e162134eaa471dae8349e2457250eb954363e269d1ff96cfe0d1ff0455bc96168072b0c7f2371622c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4044085}, 0x20000080)
r5 = socket(0x10, 0x803, 0x0)
sendto(r5, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f0000000600)=""/179, 0xb3}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'})
ioctl$NILFS_IOCTL_GET_CPSTAT(r5, 0x80186e83, &(0x7f0000000000))

1.148735975s ago: executing program 3 (id=8946):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100014800c0011"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x91, 0x1, 0x1, 0xa0}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r4, 0x0, 0x0, 0x0)
shutdown(r4, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000080}, 0x4000824)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r3}, 0x20)
ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000440)={<r7=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6, <r8=>0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20)
r9 = socket$inet6_udp(0xa, 0x2, 0x0)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0x0)
r11 = socket$kcm(0x29, 0x2, 0x0)
write$cgroup_pressure(r11, &(0x7f0000000140)={'full'}, 0xfffffdef)
sendmsg$kcm(r11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
ioctl$int_in(r11, 0x5452, &(0x7f0000000000)=0xe)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0))
setsockopt$sock_attach_bpf(r11, 0x1, 0x7, &(0x7f0000000340), 0x4)
sendmsg$inet6(r9, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x8808)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r8}, &(0x7f0000000080), &(0x7f0000000100)=r9}, 0x20)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000040)}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b04, &(0x7f0000000040)={'wlan0\x00'})

1.121768847s ago: executing program 1 (id=8947):
socket$pptp(0x18, 0x1, 0x2) (async)
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e)
close(0x3)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={<r1=>0x0, 0x430, 0x3, 0x5, 0x6, 0x6}, &(0x7f0000000080)=0x14)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000180)={r1, @in={{0x2, 0x4e23, @local}}, 0x4, 0x6}, &(0x7f0000000240)=0x90)
pipe(&(0x7f0000000040)) (async)
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f0000000680)=[{&(0x7f0000000c00)="50dcfd95494e8ace50255707bb690c2f9ab90664bfff143945a7b19dce101290815d092130c3794b052e86ca4e6ec4f6da7e09370d4dc2d119f3182da59ae193409084da1a84bc94cff142d91b3816b5ba6c579203d64ba67a93a39453c257c693a999599d671d8588331ee9aefdeff4ae9cab7594caf18e0f9fbce396326999b8cb75f9d4c8ea6a657732d1c8ec14dd71a910b1396c87ac3eafdc62e349fd2f46983415e0bc1e491b30d911a26d312a234d36d8e0f07f3a9fda985b4b12843232351c838e2239202dcf2fade16bc82404b44179147d47920d46a9e641a39794f5759e9365e76152b675a24d8a52a5ea66401312afa0e6ae775ddcb28178eb006a1c4f03467cca4f1da37250e06a5cf22423366b5f4c0c03c6572c487e40a075720b0abbeca2dfa505c45ca0d2a6852524a6a7345a9da6bbe17eed88a848e7627e040d74d6a03e360299edca4f9818ef80f2ff2e3627b24185e7e7fd0c15023d2582e558ee0a4a97668db4b2aca946a865df9f2ee722bdbe170e36cf4bddedd78473861d9569c68e11215fabe7ce9993c59c31aaaf6c67bf94fa2cf0a64ed105609ec9bf734be47c24154a1d6250e88f56ae65f4be0431bb688706349039e702361f6374b069f944fb41ccd90e5e4f831c96ea4a812e112bbae48f52bb40ef31c4163af75c09b277a89bcdd9edc21b673866be954614552360b106572f3a9ada8485fe5da876f23bb80acf829d89a705065d96d9212cce3cd6a74073b91965cdc1350b33a579fcdba01c9c3b25541ae7559ba319d22984a71c1486c8550c60f5c10a63ccaceb8a0621f223b3afa3af6c69d9302b04dc10e49654970c17cd9d68cb7e88497dc1f60267dcefa26718459cf72ce6a45802438f3f182b82c3bf39c8066e01cff2616ec3ed9ed9853e0fd3c7558daa946b583bdf82294f0546c962da2449764b2e6c0137b1d6d34828bd038c72b731cc96bef15e0fc8a99ddfba177b39f008025cdb89b9ef8771b5317f2d969fe194f73fa2f809e3b825620c77f8074f928fbe126b9876a2ecb6583ecf1d61dad4c87363e4b6f02684feb123ebf162ff6d7b9f52645d70533ac3a9c46065be28bb5ddf4e27b1921651661b9422bcd93a23e125fb5b4cfb0b065521df823d6a8103ae20b1ed0b09214a02dedfbce80f5cf32e0801337b3a1dbf62101afaf7c735d41d136d939a0263fda4a42c9ba41a88b8dc77a8ce2c2d8708a4777773c0c28b02e9e7958ac4bd5a94256de3078db7a701e7d34737a849549cb8fd2948e45d6eada35b6d981c4f41da2781cd257151cc62028135a98e3e786ff39f9d5eb9e2cd2478ad73e1ae861e98d4e05e2afa280e580f1fd6e05657ecc37a564726637c5bd91eef241a99a1c82656bc921f57b20925fe2a610530092b43630d31a60bbda4813c3f2b7a2b2c71cfdc5da610d57d00", 0x401}], 0x1, 0x0)

575.083637ms ago: executing program 4 (id=8948):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket$pppoe(0x18, 0x1, 0x0)
r2 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x100, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, 'veth0_to_hsr\x00'}}, 0x1e)
close(0x3)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r4=>0x0})
r5 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0)
close(0x3)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0)

275.242749ms ago: executing program 3 (id=8949):
socket$netlink(0x10, 0x3, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
mmap(&(0x7f0000635000/0x3000)=nil, 0x3000, 0xb635773f07ebbeef, 0x10, 0xffffffffffffffff, 0x217eb000)
r0 = socket$kcm(0x1e, 0x1, 0x0)
sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@ieee802154={0x24, @short={0x2, 0x3, 0xaaa2}}, 0x80, &(0x7f00000004c0)=[{0x0, 0xffffffffffffff07}], 0x1, 0x0, 0xfffffeb0}, 0x44)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x8, 0x4, 0x3)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in6=@loopback, 0x0, 0xe599, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6c}, {0x8000000000000000, 0x0, 0x8, 0x0, 0xffff, 0x0, 0x0, 0x7}, {0xfffffffffffffffc, 0x3, 0x0, 0x1}, 0x80000000, 0x0, 0x2}, {{@in6=@loopback, 0x4d2, 0x3c}, 0x2, @in=@broadcast, 0x3, 0x0, 0x1, 0x0, 0xfffffffd, 0x400000, 0xffffffff}}, 0xe8)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94)
sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="24008d99", @ANYRES16=r5, @ANYBLOB="01000000000000000000040000000800020005000000080008000a010102"], 0x24}}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, 0x0, 0x0)
syz_emit_ethernet(0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000008100100086dd61bc4a06004a2f00fe80000000000000000000000000eb0aff0200000000000000000000000000010c2088be0000000101000800000086dd000500010001080088be000000031c0885100100000000007b40080022eb04000002230223090200000000000003ffffb41b0800655800000003"], 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x10, 0x1}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50)
ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0x40106183, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0})
socket$rds(0x15, 0x5, 0x0)
socket$rds(0x15, 0x5, 0x0)
r7 = socket(0x15, 0x5, 0x0)
getsockopt(r7, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000))
sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f0000000140)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
socket$nl_route(0x10, 0x3, 0x0)

0s ago: executing program 2 (id=8950):
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010)
bind$tipc(0xffffffffffffffff, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x10)
pipe(&(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r2, 0x0, 0x0, 0xa)
r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[], 0x50)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000001c00000000000c000280050006000500"/36], 0x3c}}, 0x0)
ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000080))
ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xffff)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r7, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x0, 0x1}}, 0x20)
getsockopt$sock_buf(r5, 0x1, 0x1f, &(0x7f0000001680)=""/193, &(0x7f0000000180)=0xc1)
r8 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xd}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x1e0, 0x16, 0xa, 0x3, 0x0, 0x0, {0x9}, [@NFTA_FLOWTABLE_HOOK={0x44, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xe0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'geneve1\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc0}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'geneve1\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x7c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffff6af7}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}]}]}], {0x14}}, 0x288}, 0x1, 0x0, 0x0, 0x8081}, 0xc000)
r9 = socket$inet_sctp(0x2, 0x5, 0x84)
r10 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r11=>0x0}, &(0x7f00000004c0)=0x8)
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000040)={r11, 0x1000}, 0x8)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000900)={{<r12=>r4, &(0x7f0000000080)='GPL\x00', 0xb0400, &(0x7f00000000c0)={@align=0x5, {0x6, 0x7, 0xe2b, 0xdc50}}, 0x200, &(0x7f0000000100), &(0x7f0000000140)}, 0x6, &(0x7f0000000840)=[{0x3, 0xffff0222, &(0x7f00000001c0)='/-\x00', &(0x7f0000000240)="80b9279ec513fe75671a35932d2c72e46cd4cb77156ad1f01b56da9ed58790dadeb661a28abb187db143f501e8e8e44a4e2940cc232ece3804b35f93783daaf2d1c5623265bda7e11fe4b1be3e8e061a63f298d73826839ac445a2f2487ed8a1ed526e7bdfc8f0d593bc48811993f293ad4c0eed60de020a6c1d962247d1e0bea36d9f1b699637c0854c2cf6b05ccd5f35b813abae686ee6f0429c7a4dfd6fabf20ba960cfe06e49efbb9758db749ccb33c88dce9e884ee7d56b38daf3c4e7223bb42feab050b670ba4f2de3873a92ed97e1ad33ba577e9da2d713ab363264f1ae0846a4977ec0390415c01987c6b4df6b", 0xf1}, {0x2, 0x4, &(0x7f0000000500)='\x00', &(0x7f0000000540)="494931011247a17f4489e98e4f43d42af112b6d21b2bf6f3be7cdeacfbf81680d8867776b0f46fb09cf80e1603540e8e222594cf8479ef603617c1b6189b900d310f9d8307518b62e1cda0", 0x4b, 0x7a}, {0x1, 0x200, &(0x7f00000005c0)='\x00', &(0x7f0000000600)="dd3d297cbf25d2b66594615b66034a7125591afe7a2cc01812cc96b9917490c103f3b6e285b41ab77a08db5c44841861546c1a20b46cde402764a2651db2f19998af2b04d5f14af9c6816cef6f4fefd7c089029c", 0x54, 0x20}, {0x1, 0x3, &(0x7f0000000680)=':S&.\x00', &(0x7f00000006c0)="80fd23433bb59cb82a00720b2bb01892e3862b5a87e37879a26dc4dbedd8b61f741f20982647b1e4e72e63ac63", 0x2d, 0x28}, {0x1, 0x6, &(0x7f0000000700)='\x00', &(0x7f0000000740)="37b2bf3f1d3b55af39f89207cf23a86ac6ad12e4b20b03d076cf3529aad45d84fdc34c128a0381aed229404c5cbd479034f3e3743c0751bc2972272f4ba86ba4f045191f635949db168562ce87c908c6b5d96ce5b71be0de62b08dcfe246a55167ec33556fa7433e4750eee74bd0491924edce6cf6c47b", 0x77, 0x2}, {0x3, 0x8, &(0x7f00000007c0)='}){\xfb-(\x12!\xf0!{-[\\}\\#]\\[,-@$\x00', &(0x7f0000000800), 0x0, 0x8}]})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000cbb6000000000000000000001811000037c55abfc7045cf772d77e5f8fd38690622a3455e65ca8e59989cc396aa2b0d654f63e41993fe5fc5a7fb9431fa1cec3cfeb8d76241135e14d810a9eb1232346296e0f28e52068d9a1e3c45a25efe58f8081220eb5a57382e6d4ccfa78c505a225fb9d41e9ba10552cca300d1381ef8d29a78b27619bc8f59ded55f30ea9907815f7855baa030f09c21cd0c674596d7cba9dbb53d087", @ANYRES16=r12, @ANYRES8=r5, @ANYRES64=r5, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d08000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x1d, r12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x32, r0, 0xd8e86000)
socket(0x11, 0x3, 0x0)

kernel console output (not intermixed with test programs):

nnections per device.
[ 1187.407769][ T8366] block nbd7: shutting down sockets
[ 1187.439291][ T8366] block nbd9: server does not support multiple connections per device.
[ 1187.449387][ T8366] block nbd9: shutting down sockets
[ 1187.471068][ T8366] block nbd6: server does not support multiple connections per device.
[ 1187.483292][ T8366] block nbd6: shutting down sockets
[ 1187.598769][ T8393] ip6t_rt: `--rt-type 0' required before `--rt-0-*'
[ 1187.838746][ T8388] syzkaller0: entered promiscuous mode
[ 1187.838799][ T8388] syzkaller0: entered allmulticast mode
[ 1187.863552][ T8398] netlink: 'syz.3.7891': attribute type 1 has an invalid length.
[ 1188.201113][ T8412] __nla_validate_parse: 11 callbacks suppressed
[ 1188.210413][ T8412] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7895'.
[ 1188.404870][ T8420] netlink: 'syz.4.7897': attribute type 1 has an invalid length.
[ 1188.439958][ T8420] netlink: 'syz.4.7897': attribute type 83 has an invalid length.
[ 1189.896268][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7902'.
[ 1189.907085][ T8444] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7902'.
[ 1189.950072][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7902'.
[ 1189.961390][ T8445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7902'.
[ 1190.297095][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 28 seconds
[ 1190.297165][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 28 seconds
[ 1190.297230][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 28 seconds
[ 1190.297335][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 28 seconds
[ 1192.895303][ T8444] erspan0: entered promiscuous mode
[ 1192.898663][ T8444] gretap0: entered promiscuous mode
[ 1193.063667][ T8447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1193.684255][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 30 seconds
[ 1193.684325][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 30 seconds
[ 1193.684493][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 30 seconds
[ 1193.684580][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 30 seconds
[ 1195.431059][ T8525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7923'.
[ 1197.020003][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 32 seconds
[ 1197.020085][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 32 seconds
[ 1197.020138][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 32 seconds
[ 1197.020169][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 32 seconds
[ 1197.773126][ T8608] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1197.802735][ T8608] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1197.888102][ T8624] TCP: TCP_TX_DELAY enabled
[ 1197.908616][ T8625] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7970'.
[ 1197.956948][ T8608] bridge0: left promiscuous mode
[ 1197.964071][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7969'.
[ 1197.964119][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7969'.
[ 1197.964142][ T8628] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7969'.
[ 1198.125668][T22598] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0
[ 1198.125769][T22598] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0
[ 1198.125838][T22598] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0
[ 1198.125966][T22598] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0
[ 1198.475037][ T8642] netlink: 179624 bytes leftover after parsing attributes in process `syz.0.7975'.
[ 1198.488345][ T8644] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7974'.
[ 1198.562347][ T8647] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7974'.
[ 1198.563050][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1198.567852][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1198.640524][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1198.640691][ T8647] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1198.641360][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1198.641697][ T8647] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1198.692576][ T8647] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7974'.
[ 1198.743447][ T8650] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7977'.
[ 1198.814430][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1198.814672][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1200.374339][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 34 seconds
[ 1200.374411][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 34 seconds
[ 1200.374462][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 34 seconds
[ 1200.374498][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 34 seconds
[ 1201.711461][ T8681] __nla_validate_parse: 1 callbacks suppressed
[ 1201.711520][ T8681] netlink: 666 bytes leftover after parsing attributes in process `syz.0.7982'.
[ 1201.839679][ T8684] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1201.952322][ T8686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7985'.
[ 1201.952391][ T8686] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[ 1202.049698][ T8688] lo speed is unknown, defaulting to 1000
[ 1202.060938][ T8690] netlink: 'syz.4.7987': attribute type 12 has an invalid length.
[ 1202.061747][ T8693] netlink: 'syz.1.7988': attribute type 10 has an invalid length.
[ 1202.085726][ T8693] 8021q: adding VLAN 0 to HW filter on device team0
[ 1202.108497][ T8693] bond0: (slave team0): Enslaving as an active interface with an up link
[ 1202.119239][ T8688] lo speed is unknown, defaulting to 1000
[ 1202.239974][ T8696] netlink: 'syz.4.7987': attribute type 13 has an invalid length.
[ 1202.240032][ T8696] netlink: 'syz.4.7987': attribute type 17 has an invalid length.
[ 1202.360955][ T8703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7992'.
[ 1202.912182][ T8696] A link change request failed with some changes committed already. Interface wlan2 may have been left with an inconsistent configuration, please check.
[ 1203.743561][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 36 seconds
[ 1203.744175][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 36 seconds
[ 1203.744260][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 36 seconds
[ 1203.744343][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 36 seconds
[ 1205.831413][ T8768] netlink: 192 bytes leftover after parsing attributes in process `syz.0.8006'.
[ 1205.889385][ T8769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8005'.
[ 1206.624261][T23482] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1206.964787][ T8775] netlink: 'syz.0.8007': attribute type 1 has an invalid length.
[ 1206.964888][ T8775] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8007'.
[ 1207.174352][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 38 seconds
[ 1207.174622][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 38 seconds
[ 1207.174876][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 38 seconds
[ 1207.175099][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 38 seconds
[ 1207.554483][ T4982] udevd[4982]: worker [7124] /devices/virtual/block/nbd3 is taking a long time
[ 1207.907877][ T8783] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1208.008612][ T8786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1209.285373][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8014'.
[ 1209.309340][ T8805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8017'.
[ 1210.034719][ T8816] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8020'.
[ 1210.538533][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 40 seconds
[ 1210.538967][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 40 seconds
[ 1210.539048][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 40 seconds
[ 1210.539118][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 40 seconds
[ 1210.702916][ T8826] ipvlan2: entered promiscuous mode
[ 1210.709428][ T8826] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1210.723679][ T8826] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[ 1210.723893][ T8826] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[ 1212.234994][ T8849] openvswitch: netlink: IP tunnel TTL not specified.
[ 1212.250162][ T8849] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1213.792042][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8035'.
[ 1214.114099][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 42 seconds
[ 1214.114502][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 42 seconds
[ 1214.114590][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 42 seconds
[ 1214.114666][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 42 seconds
[ 1216.007298][ T8900] xt_TPROXY: Can be used only with -p tcp or -p udp
[ 1216.051435][ T8892] macsec1: entered promiscuous mode
[ 1216.765234][ T8912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8046'.
[ 1217.228128][ T8921] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8049'.
[ 1217.416046][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 44 seconds
[ 1217.416315][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 44 seconds
[ 1217.416563][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 44 seconds
[ 1217.416790][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 44 seconds
[ 1218.991156][ T8950] syzkaller0: entered promiscuous mode
[ 1218.991623][ T8950] syzkaller0: entered allmulticast mode
[ 1220.779396][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 46 seconds
[ 1220.779637][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 46 seconds
[ 1220.779855][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 46 seconds
[ 1220.780057][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 46 seconds
[ 1224.163733][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 48 seconds
[ 1224.164272][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 48 seconds
[ 1224.164517][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 48 seconds
[ 1224.164754][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 48 seconds
[ 1227.494859][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 50 seconds
[ 1227.505843][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 50 seconds
[ 1227.520356][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 50 seconds
[ 1227.520386][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 50 seconds
[ 1230.883934][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 52 seconds
[ 1230.884193][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 52 seconds
[ 1230.884521][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 52 seconds
[ 1230.884745][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 52 seconds
[ 1234.214437][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 54 seconds
[ 1234.225396][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 54 seconds
[ 1234.225434][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 54 seconds
[ 1234.225465][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 54 seconds
[ 1237.583995][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 56 seconds
[ 1237.584283][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 56 seconds
[ 1237.584566][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 56 seconds
[ 1237.584825][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 56 seconds
[ 1240.944498][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 58 seconds
[ 1240.944986][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 58 seconds
[ 1240.945079][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 58 seconds
[ 1240.945165][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 58 seconds
[ 1241.867008][ T8969] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8058'.
[ 1242.114795][ T8974] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8059'.
[ 1242.293648][ T8985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8063'.
[ 1242.752815][ T8995] netlink: 'syz.1.8065': attribute type 2 has an invalid length.
[ 1243.974280][    C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1244.089924][ T9015] netlink: 'syz.1.8070': attribute type 4 has an invalid length.
[ 1244.103662][ T9015] netlink: 'syz.1.8070': attribute type 4 has an invalid length.
[ 1244.128839][T16721] lo speed is unknown, defaulting to 1000
[ 1244.128894][T16721] syz0: Port: 1 Link ACTIVE
[ 1244.187865][ T9019] netlink: 'syz.3.8072': attribute type 1 has an invalid length.
[ 1244.295978][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 60 seconds
[ 1244.296478][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 60 seconds
[ 1244.296573][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 60 seconds
[ 1244.296657][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 60 seconds
[ 1244.307083][ T9022] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8072'.
[ 1244.503599][ T9029] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8074'.
[ 1244.513376][ T9026] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8073'.
[ 1244.525187][ T9028] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8074'.
[ 1245.088198][ T9045] sctp: [Deprecated]: syz.4.8077 (pid 9045) Use of int in max_burst socket option deprecated.
[ 1245.088198][ T9045] Use struct sctp_assoc_value instead
[ 1245.189849][ T9040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8076'.
[ 1245.401741][ T9057] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1245.546413][ T9048] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1245.571792][ T9048] bond5: (slave bond6): Enslaving as an active interface with an up link
[ 1245.604123][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8079'.
[ 1245.604395][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8079'.
[ 1245.873483][ T9071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1246.211618][ T9053] Bluetooth: hci2: Opcode 0x0401 failed: -4
[ 1247.414363][T23482] Bluetooth: hci2: command 0x0406 tx timeout
[ 1247.482785][ T9088] __nla_validate_parse: 1 callbacks suppressed
[ 1247.491245][ T9088] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8086'.
[ 1247.654915][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 62 seconds
[ 1247.655458][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 62 seconds
[ 1247.655578][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 62 seconds
[ 1247.655660][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 62 seconds
[ 1247.725715][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8086'.
[ 1247.929012][ T9104] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8088'.
[ 1248.095273][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8088'.
[ 1248.155308][T23482] Bluetooth: hci3: link tx timeout
[ 1248.155665][T23482] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa
[ 1248.178260][T23482] Bluetooth: hci3: link tx timeout
[ 1248.178281][T23482] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1248.418625][ T9118] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[ 1249.000805][ T9129] FAULT_INJECTION: forcing a failure.
[ 1249.000805][ T9129] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1249.000945][ T9129] CPU: 1 UID: 0 PID: 9129 Comm: syz.3.8094 Not tainted syzkaller #0 PREEMPT(full) 
[ 1249.000980][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1249.000998][ T9129] Call Trace:
[ 1249.001009][ T9129]  <TASK>
[ 1249.001021][ T9129]  dump_stack_lvl+0xe8/0x150
[ 1249.001068][ T9129]  should_fail_ex+0x410/0x560
[ 1249.001117][ T9129]  _copy_to_user+0x31/0xb0
[ 1249.001151][ T9129]  simple_read_from_buffer+0xe1/0x170
[ 1249.001203][ T9129]  proc_fail_nth_read+0x1bb/0x230
[ 1249.001239][ T9129]  ? common_file_perm+0x20e/0x2b0
[ 1249.001271][ T9129]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1249.001312][ T9129]  ? rw_verify_area+0x24a/0x4c0
[ 1249.001347][ T9129]  ? tun_chr_write_iter+0xe0/0x200
[ 1249.001387][ T9129]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1249.001427][ T9129]  vfs_read+0x213/0xa80
[ 1249.001471][ T9129]  ? __pfx___mutex_lock+0x10/0x10
[ 1249.001515][ T9129]  ? __pfx_vfs_read+0x10/0x10
[ 1249.001555][ T9129]  ? __fget_files+0x2a/0x420
[ 1249.001595][ T9129]  ? __fget_files+0x3a2/0x420
[ 1249.001629][ T9129]  ? __fget_files+0x2a/0x420
[ 1249.001674][ T9129]  ksys_read+0x150/0x270
[ 1249.001717][ T9129]  ? __pfx_ksys_read+0x10/0x10
[ 1249.001770][ T9129]  do_syscall_64+0x166/0x520
[ 1249.001809][ T9129]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1249.001837][ T9129]  ? clear_bhb_loop+0x70/0xc0
[ 1249.001871][ T9129]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1249.001898][ T9129] RIP: 0033:0x7f291475e98e
[ 1249.001923][ T9129] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1249.001947][ T9129] RSP: 002b:00007f29155a9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1249.001977][ T9129] RAX: ffffffffffffffda RBX: 00007f29155aa6c0 RCX: 00007f291475e98e
[ 1249.001997][ T9129] RDX: 000000000000000f RSI: 00007f29155aa0a0 RDI: 0000000000000004
[ 1249.002014][ T9129] RBP: 00007f29155aa090 R08: 0000000000000000 R09: 0000000000000000
[ 1249.002032][ T9129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1249.002049][ T9129] R13: 00007f2914a26038 R14: 00007f2914a25fa0 R15: 00007ffd5058f028
[ 1249.002092][ T9129]  </TASK>
[ 1250.097394][ T9137] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1250.221725][ T9115] Bluetooth: hci3: command 0x0405 tx timeout
[ 1250.439268][ T9148] netlink: 'syz.0.8102': attribute type 16 has an invalid length.
[ 1250.448968][ T9148] netlink: 'syz.0.8102': attribute type 17 has an invalid length.
[ 1250.521952][ T9146] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1250.533806][ T9146] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1251.025390][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 64 seconds
[ 1251.025646][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 64 seconds
[ 1251.025880][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 64 seconds
[ 1251.026088][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 64 seconds
[ 1251.028521][ T9148] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1251.028664][ T9148] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1251.130456][ T9148] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1251.130627][ T9148] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1251.432832][ T9148] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1252.774944][ T9115] Bluetooth: hci3: command 0x0405 tx timeout
[ 1252.866558][ T9180] netlink: 'syz.4.8112': attribute type 2 has an invalid length.
[ 1253.550111][ T9200] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8116'.
[ 1253.574358][ T9200] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8116'.
[ 1253.621791][ T9200] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8116'.
[ 1254.419914][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 66 seconds
[ 1254.420372][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 66 seconds
[ 1254.420460][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 66 seconds
[ 1254.420554][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 66 seconds
[ 1255.119561][ T9221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8124'.
[ 1255.557812][ T9217] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[ 1257.896278][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8132'.
[ 1258.492734][ T9262] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8131'.
[ 1258.814322][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 68 seconds
[ 1258.814826][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 68 seconds
[ 1258.815096][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 68 seconds
[ 1258.815341][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 68 seconds
[ 1259.848556][ T9288] pimreg: entered allmulticast mode
[ 1260.634141][ T9309] netlink: 'syz.0.8144': attribute type 4 has an invalid length.
[ 1260.817102][ T9307] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1261.721464][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8149'.
[ 1261.721840][ T9324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8149'.
[ 1261.829958][ T9319] vlan2: entered promiscuous mode
[ 1261.830007][ T9319] erspan0: entered promiscuous mode
[ 1261.876447][ T9321] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[ 1261.905598][ T9321] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[ 1261.905733][ T9321] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[ 1261.967228][ T9321] infiniband s`z1: RDMA CMA: cma_listen_on_dev, error -98
[ 1262.135924][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 70 seconds
[ 1262.136382][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 70 seconds
[ 1262.136489][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 70 seconds
[ 1262.136571][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 70 seconds
[ 1262.278689][ T9325] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8148'.
[ 1262.563463][   T31] audit: type=1800 audit(1789038319.959:66): pid=9322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8149" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2472 res=0 errno=0
[ 1263.774945][ T9347] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8153'.
[ 1263.814713][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8153'.
[ 1263.815283][ T9351] netlink: 'syz.1.8153': attribute type 5 has an invalid length.
[ 1263.815332][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8153'.
[ 1263.816436][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8153'.
[ 1263.816513][ T9352] netlink: 'syz.1.8153': attribute type 5 has an invalid length.
[ 1263.816557][ T9352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8153'.
[ 1264.148768][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8153'.
[ 1264.163962][ T9351] netlink: 'syz.1.8153': attribute type 5 has an invalid length.
[ 1264.164588][ T9351] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8153'.
[ 1264.187805][ T9352] netlink: 'syz.1.8153': attribute type 5 has an invalid length.
[ 1264.188932][ T9352] netlink: 'syz.1.8153': attribute type 5 has an invalid length.
[ 1264.190041][ T9352] netlink: 'syz.1.8153': attribute type 5 has an invalid length.
[ 1264.212732][ T9352] netlink: 'syz.1.8153': attribute type 5 has an invalid length.
[ 1264.214438][ T2595] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1264.214509][ T2595] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1264.214554][ T2595] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1264.214598][ T2595] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1264.350536][ T9351] netlink: 'syz.1.8153': attribute type 5 has an invalid length.
[ 1264.359514][ T9352] netlink: 'syz.1.8153': attribute type 5 has an invalid length.
[ 1264.642235][ T9356] mac80211_hwsim hwsim94 wlan0: entered promiscuous mode
[ 1264.642369][ T9356] mac80211_hwsim hwsim94 wlan0: entered allmulticast mode
[ 1264.643119][ T9356] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[ 1265.180005][   T31] audit: type=1804 audit(1789038322.579:67): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8157" name="/newroot/481/cgroup.controllers" dev="tmpfs" ino=2483 res=1 errno=0
[ 1265.180276][   T31] audit: type=1800 audit(1789038322.579:68): pid=9368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8157" name="cgroup.controllers" dev="tmpfs" ino=2483 res=0 errno=0
[ 1265.505822][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 72 seconds
[ 1265.506426][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 72 seconds
[ 1265.506515][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 72 seconds
[ 1265.506597][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 72 seconds
[ 1265.788563][ T9382] validate_nla: 15 callbacks suppressed
[ 1265.796012][ T9382] netlink: 'syz.0.8160': attribute type 21 has an invalid length.
[ 1266.962158][ T9397] __nla_validate_parse: 43 callbacks suppressed
[ 1266.962653][ T9397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8164'.
[ 1268.821233][ T9433] netlink: 256 bytes leftover after parsing attributes in process `syz.4.8173'.
[ 1268.843104][ T9433] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8173'.
[ 1268.865041][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 74 seconds
[ 1268.865298][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 74 seconds
[ 1268.865540][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 74 seconds
[ 1268.865760][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 74 seconds
[ 1269.035561][ T9438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8174'.
[ 1269.269543][ T9407] netlink: 'syz.2.8166': attribute type 1 has an invalid length.
[ 1269.826283][ T9407] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1270.211859][ T9450] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8177'.
[ 1270.600718][ T9460] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1270.646533][ T9462] netlink: 'syz.3.8180': attribute type 10 has an invalid length.
[ 1270.714662][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8180'.
[ 1270.738779][ T9462] bond0: (slave bridge0): Enslaving as an active interface with an up link
[ 1272.214994][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 76 seconds
[ 1272.215566][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 76 seconds
[ 1272.215659][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 76 seconds
[ 1272.216245][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 76 seconds
[ 1274.161734][ T9517] netlink: 'syz.4.8193': attribute type 2 has an invalid length.
[ 1274.810717][ T9524] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8196'.
[ 1275.148435][ T9522] lo speed is unknown, defaulting to 1000
[ 1275.166359][ T9522] lo speed is unknown, defaulting to 1000
[ 1275.574554][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 78 seconds
[ 1275.574822][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 78 seconds
[ 1275.575074][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 78 seconds
[ 1275.575326][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 78 seconds
[ 1275.594108][ T9539] netlink: 316 bytes leftover after parsing attributes in process `syz.3.8200'.
[ 1276.648497][ T9553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8203'.
[ 1276.882826][ T9549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8203'.
[ 1276.886829][ T9549] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8203'.
[ 1276.971354][ T9561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8206'.
[ 1277.426424][ T9575] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8209'.
[ 1277.459362][ T9569] lo speed is unknown, defaulting to 1000
[ 1277.493151][ T9569] lo speed is unknown, defaulting to 1000
[ 1278.420345][ T9598] No such timeout policy "syz0"
[ 1278.482015][ T9597] netlink: 'syz.1.8214': attribute type 12 has an invalid length.
[ 1279.814267][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[ 1279.874850][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 80 seconds
[ 1279.875349][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 80 seconds
[ 1279.875434][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 80 seconds
[ 1279.875519][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 80 seconds
[ 1280.026675][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8217'.
[ 1280.044697][ T9610] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1282.050605][ T9638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8221'.
[ 1282.772299][ T9648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8222'.
[ 1282.787854][ T9648] openvswitch: netlink: Missing key (keys=c0, expected=100)
[ 1283.180601][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 82 seconds
[ 1283.180860][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 82 seconds
[ 1283.181109][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 82 seconds
[ 1283.181338][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 82 seconds
[ 1285.464330][ T9685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8231'.
[ 1286.851156][ T9708] syzkaller0: entered promiscuous mode
[ 1286.851279][ T9708] syzkaller0: entered allmulticast mode
[ 1286.944711][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 84 seconds
[ 1286.944970][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 84 seconds
[ 1286.945217][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 84 seconds
[ 1286.945443][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 84 seconds
[ 1287.203070][ T9721] netlink: 'syz.3.8240': attribute type 2 has an invalid length.
[ 1287.489710][ T9727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8241'.
[ 1290.318537][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 86 seconds
[ 1290.329598][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 86 seconds
[ 1290.329635][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 86 seconds
[ 1290.329661][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 86 seconds
[ 1292.820770][ T9733] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR
[ 1293.354534][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.380671][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.391723][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.414120][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.425070][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.435804][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.446837][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.446912][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.447016][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.447126][ T9770] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma?
[ 1293.681748][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 88 seconds
[ 1293.682004][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 88 seconds
[ 1293.682241][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 88 seconds
[ 1293.682448][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 88 seconds
[ 1293.806787][ T9764] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1293.958769][ T9779] netlink: 19 bytes leftover after parsing attributes in process `syz.3.8249'.
[ 1294.090275][ T9782] IPVS: length: 155 != 8
[ 1294.332102][ T9788] sctp: [Deprecated]: syz.4.8253 (pid 9788) Use of int in maxseg socket option.
[ 1294.332102][ T9788] Use struct sctp_assoc_value instead
[ 1294.338710][ T9790] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8254'.
[ 1294.952644][ T9802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8256'.
[ 1296.426448][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8262'.
[ 1296.509013][ T9835] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1296.541500][ T9836] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8263'.
[ 1297.021143][ T9838] FAULT_INJECTION: forcing a failure.
[ 1297.021143][ T9838] name failslab, interval 1, probability 0, space 0, times 0
[ 1297.021269][ T9838] CPU: 1 UID: 0 PID: 9838 Comm: syz.0.8265 Not tainted syzkaller #0 PREEMPT(full) 
[ 1297.021383][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1297.021431][ T9838] Call Trace:
[ 1297.021500][ T9838]  <TASK>
[ 1297.021540][ T9838]  dump_stack_lvl+0xe8/0x150
[ 1297.021646][ T9838]  should_fail_ex+0x410/0x560
[ 1297.021760][ T9838]  should_failslab+0xa8/0x100
[ 1297.021829][ T9838]  __kmalloc_noprof+0xfe/0x720
[ 1297.021921][ T9838]  ? sk_prot_alloc+0xe7/0x210
[ 1297.021985][ T9838]  ? sk_prot_alloc+0xe7/0x210
[ 1297.022067][ T9838]  sk_prot_alloc+0xe7/0x210
[ 1297.022119][ T9838]  ? sk_alloc+0x27/0x390
[ 1297.022185][ T9838]  sk_alloc+0x3a/0x390
[ 1297.022250][ T9838]  bpf_prog_test_run_skb+0x3a6/0x2230
[ 1297.022335][ T9838]  ? irqentry_exit+0x218/0x910
[ 1297.022469][ T9838]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1297.022541][ T9838]  ? bpf_prog_test_run+0x2b3/0x340
[ 1297.022665][ T9838]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1297.022738][ T9838]  bpf_prog_test_run+0x2c5/0x340
[ 1297.022831][ T9838]  __sys_bpf+0xa22/0xd90
[ 1297.022930][ T9838]  ? __pfx___sys_bpf+0x10/0x10
[ 1297.023025][ T9838]  ? __fget_files+0x2a/0x420
[ 1297.023150][ T9838]  ? ksys_write+0x242/0x270
[ 1297.023242][ T9838]  ? __pfx_ksys_write+0x10/0x10
[ 1297.023347][ T9838]  __x64_sys_bpf+0xba/0xd0
[ 1297.023410][ T9838]  do_syscall_64+0x166/0x520
[ 1297.023493][ T9838]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.023563][ T9838]  ? clear_bhb_loop+0x70/0xc0
[ 1297.023634][ T9838]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1297.023689][ T9838] RIP: 0033:0x7fbec179e159
[ 1297.023750][ T9838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1297.023802][ T9838] RSP: 002b:00007fbec2696028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1297.023869][ T9838] RAX: ffffffffffffffda RBX: 00007fbec1a25fa0 RCX: 00007fbec179e159
[ 1297.023919][ T9838] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a
[ 1297.023953][ T9838] RBP: 00007fbec2696090 R08: 0000000000000000 R09: 0000000000000000
[ 1297.023994][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1297.024033][ T9838] R13: 00007fbec1a26038 R14: 00007fbec1a25fa0 R15: 00007ffe29f90708
[ 1297.024125][ T9838]  </TASK>
[ 1297.045010][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 90 seconds
[ 1297.045055][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 90 seconds
[ 1297.045086][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 90 seconds
[ 1297.045116][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 90 seconds
[ 1298.238966][ T9847] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8268'.
[ 1298.414887][ T9850] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1298.610529][ T9855] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8270'.
[ 1298.784447][ T9865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1298.892212][ T9869] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1299.000627][ T9879] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8275'.
[ 1299.147577][ T9882] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1300.374499][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 92 seconds
[ 1300.374760][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 92 seconds
[ 1300.375011][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 92 seconds
[ 1300.375239][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 92 seconds
[ 1300.554382][ T9897] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1301.169751][ T9918] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8284'.
[ 1301.350379][ T9925] macsec0: entered promiscuous mode
[ 1301.374247][ T9925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8285'.
[ 1301.402229][ T9925] macsec0 (unregistering): left promiscuous mode
[ 1302.358942][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8288'.
[ 1302.468453][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8288'.
[ 1302.953276][ T9956] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1303.243800][ T9962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8286'.
[ 1303.376698][ T9968] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8293'.
[ 1303.735350][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 94 seconds
[ 1303.735958][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 94 seconds
[ 1303.736070][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 94 seconds
[ 1303.736164][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 94 seconds
[ 1304.271621][ T9989] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1304.404761][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8297'.
[ 1305.549951][T10010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8300'.
[ 1305.716941][T10015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8302'.
[ 1305.794616][T10026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8304'.
[ 1306.248704][T10021] macsec1: entered allmulticast mode
[ 1306.248947][T10021] veth1_macvtap: entered allmulticast mode
[ 1306.281665][T10021] veth1_macvtap: left allmulticast mode
[ 1306.491251][T23482] block nbd4: Receive control failed (result -32)
[ 1306.491279][ T9115] block nbd4: Receive control failed (result -32)
[ 1306.900290][T10055] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1307.094819][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 96 seconds
[ 1307.095071][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 96 seconds
[ 1307.107477][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 96 seconds
[ 1307.107517][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 96 seconds
[ 1307.168705][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8310'.
[ 1307.585165][T10070] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1307.767007][T10081] netlink: 3560 bytes leftover after parsing attributes in process `syz.2.8314'.
[ 1307.885987][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8315'.
[ 1307.905739][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8315'.
[ 1307.932408][T10084] bond0: (slave bridge0): Releasing backup interface
[ 1307.964046][T10084] bridge_slave_0: left allmulticast mode
[ 1307.964100][T10084] bridge_slave_0: left promiscuous mode
[ 1307.964750][T10084] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1308.062406][T10084] bridge_slave_1: left allmulticast mode
[ 1308.062464][T10084] bridge_slave_1: left promiscuous mode
[ 1308.116457][T10084] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1308.251464][T10084] bond0: (slave bond_slave_0): Releasing backup interface
[ 1308.344041][T10084] bond0: (slave bond_slave_1): Releasing backup interface
[ 1308.389125][T10084] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1308.405805][T10084] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1308.501846][T10084] bond1: (slave gretap2): Releasing active interface
[ 1308.516372][T10084] bond2: (slave geneve3): Releasing active interface
[ 1308.596494][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8317'.
[ 1308.646733][T10084] batman_adv: batadv0: Removing interface: macvtap1
[ 1308.677058][T10071] macvlan0: entered promiscuous mode
[ 1309.079431][T10109] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8318'.
[ 1309.126562][T10108] pim6reg: entered allmulticast mode
[ 1309.174390][T10108] pim6reg: left allmulticast mode
[ 1309.974776][T10108] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1309.989159][T10108] bond9 (unregistering): Released all slaves
[ 1310.036496][T10123] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1310.047550][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8324'.
[ 1310.454782][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 98 seconds
[ 1310.455040][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 98 seconds
[ 1310.455297][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 98 seconds
[ 1310.455537][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 98 seconds
[ 1312.089580][T10167] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1312.186261][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8340'.
[ 1312.188058][T10172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8340'.
[ 1312.898887][T10181] tc_dump_action: action bad kind
[ 1313.814767][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 100 seconds
[ 1313.815037][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 100 seconds
[ 1313.815295][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 100 seconds
[ 1313.815525][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 100 seconds
[ 1313.896802][T10188] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1313.954231][T10194] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8344'.
[ 1314.005136][T10193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8345'.
[ 1314.404524][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8342'.
[ 1314.582334][T10209] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8347'.
[ 1314.582460][T10209] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8347'.
[ 1315.434962][T10231] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1316.086719][T10246] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8360'.
[ 1316.144659][T10246] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8360'.
[ 1316.163436][T10249] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8360'.
[ 1316.770495][T10274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8359'.
[ 1317.205695][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 102 seconds
[ 1317.216722][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 102 seconds
[ 1317.216763][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 102 seconds
[ 1317.216793][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 102 seconds
[ 1317.958230][T10292] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8368'.
[ 1318.107817][T10303] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1318.200335][T10304] netlink: 'syz.4.8368': attribute type 1 has an invalid length.
[ 1318.280212][T10300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8368'.
[ 1318.280276][T10300] nbd: nbd64 already in use
[ 1318.442152][T10309] netlink: 'syz.3.8372': attribute type 11 has an invalid length.
[ 1318.442198][T10309] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8372'.
[ 1318.538921][T10309] bridge3: entered promiscuous mode
[ 1319.028054][T10309] tipc: Enabled bearer <udp:syz2>, priority 26
[ 1319.177792][T10007] udevd[10007]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory
[ 1319.394525][T10320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8374'.
[ 1320.539110][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8377'.
[ 1320.540262][T16721] tipc: Node number set to 603041693
[ 1320.554597][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 104 seconds
[ 1320.554721][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 104 seconds
[ 1320.554797][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 104 seconds
[ 1320.554877][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 104 seconds
[ 1320.889981][T10344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8379'.
[ 1320.998568][T10344] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1321.069100][T10351] netlink: 'syz.1.8380': attribute type 32 has an invalid length.
[ 1321.132130][T10351] macsec1: entered promiscuous mode
[ 1322.194565][T10374] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1322.261423][T10376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8388'.
[ 1322.400451][T10380] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8389'.
[ 1322.627829][T10380] bond6: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms
[ 1322.635743][T10386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8391'.
[ 1322.656565][T10380] bond6 (unregistering): Released all slaves
[ 1323.234815][T10412] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8396'.
[ 1323.904414][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 106 seconds
[ 1323.904942][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 106 seconds
[ 1323.905028][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 106 seconds
[ 1323.905104][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 106 seconds
[ 1324.196396][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8398'.
[ 1324.229122][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8398'.
[ 1324.796626][T10422] lo speed is unknown, defaulting to 1000
[ 1324.935419][T10422] lo speed is unknown, defaulting to 1000
[ 1325.214230][T10439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8402'.
[ 1325.562366][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8399'.
[ 1325.562890][T10451] unsupported nla_type 140
[ 1325.618456][T10451] IPVS: stopping backup sync thread 6861 ...
[ 1325.715405][T10444] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8401'.
[ 1325.729459][T10448] syzkaller0: entered promiscuous mode
[ 1325.730372][T10448] syzkaller0: entered allmulticast mode
[ 1325.739949][T10456] syzkaller0: entered promiscuous mode
[ 1325.740429][T10456] syzkaller0: entered allmulticast mode
[ 1326.433637][T10466] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8404'.
[ 1326.678103][T10466] syzkaller0: left promiscuous mode
[ 1326.678842][T10466] syzkaller0: left allmulticast mode
[ 1326.964897][T10478] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1327.264602][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 108 seconds
[ 1327.264951][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 108 seconds
[ 1327.265097][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 108 seconds
[ 1327.265176][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 108 seconds
[ 1328.357403][T10501] __nla_validate_parse: 7 callbacks suppressed
[ 1328.367470][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8411'.
[ 1328.367515][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8411'.
[ 1328.390275][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8411'.
[ 1328.399324][T10501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8411'.
[ 1329.215385][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8419'.
[ 1329.257029][T10530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8417'.
[ 1329.725779][T10535] ip_tables: iptables: counters copy to user failed while replacing table
[ 1330.427574][T10543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1330.624815][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 110 seconds
[ 1330.625071][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 110 seconds
[ 1330.625309][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 110 seconds
[ 1330.625524][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 110 seconds
[ 1331.851824][T10589] xt_recent: hitcount (262144) is larger than allowed maximum (65535)
[ 1331.975827][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8431'.
[ 1332.825350][T10612] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8435'.
[ 1332.836038][T10612] netlink: 'syz.0.8435': attribute type 2 has an invalid length.
[ 1332.846423][T10612] netlink: 'syz.0.8435': attribute type 1 has an invalid length.
[ 1332.855734][T10612] netlink: 116 bytes leftover after parsing attributes in process `syz.0.8435'.
[ 1333.043477][T10614] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1333.994821][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 112 seconds
[ 1333.995318][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 112 seconds
[ 1333.995410][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 112 seconds
[ 1333.995485][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 112 seconds
[ 1334.062652][T10633] netlink: 'syz.4.8440': attribute type 2 has an invalid length.
[ 1334.074437][T10633] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8440'.
[ 1334.165050][T10635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1335.166763][T10646] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8443'.
[ 1335.458499][T10652] xt_hashlimit: size too large, truncated to 1048576
[ 1335.674126][ T4982] udevd[4982]: worker [7124] /devices/virtual/block/nbd3 timeout; kill it
[ 1335.674443][ T4982] udevd[4982]: seq 42126 '/devices/virtual/block/nbd3' killed
[ 1336.628635][T10646] bridge2: port 1(erspan0) entered disabled state
[ 1336.822578][T10676] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8446'.
[ 1337.010113][T10684] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8446'.
[ 1337.307498][T10691] netlink: 'syz.0.8447': attribute type 16 has an invalid length.
[ 1337.307619][T10691] netlink: 'syz.0.8447': attribute type 30 has an invalid length.
[ 1337.394231][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 114 seconds
[ 1337.394724][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 114 seconds
[ 1337.394811][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 114 seconds
[ 1337.394893][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 114 seconds
[ 1339.502692][T10646] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1339.756290][T10646] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1340.694594][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 116 seconds
[ 1340.695072][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 116 seconds
[ 1340.695156][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 116 seconds
[ 1340.695239][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 116 seconds
[ 1341.098427][T10646] bridge0: left promiscuous mode
[ 1342.384127][  T972] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.384256][  T972] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1342.384425][  T972] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.384494][  T972] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1342.384618][  T972] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.384690][  T972] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1342.384784][  T972] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1342.384853][  T972] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 20004 - 0
[ 1342.868629][T10695] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[ 1343.255345][T10718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1344.054502][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 118 seconds
[ 1344.055024][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 118 seconds
[ 1344.055116][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 118 seconds
[ 1344.055192][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 118 seconds
[ 1345.234169][T10774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8465'.
[ 1345.546660][T10772] batman_adv: batadv0: Adding interface: macvtap1
[ 1345.554588][T10772] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1345.592661][T10772] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active
[ 1345.651601][T10773] batman_adv: batadv0: Adding interface: macvtap2
[ 1345.661935][T10773] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1345.691841][T10773] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active
[ 1346.178250][T10785] bond4: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms
[ 1346.190318][T10785] bond4: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms
[ 1346.206018][T10785] bond4: entered allmulticast mode
[ 1346.206466][T10785] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1346.273301][T10798] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1347.311444][T10822] SET target dimension over the limit!
[ 1347.324948][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8471'.
[ 1347.338304][T10822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8471'.
[ 1347.601124][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 120 seconds
[ 1347.601411][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 120 seconds
[ 1347.601807][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 120 seconds
[ 1347.601921][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 120 seconds
[ 1347.754641][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8472'.
[ 1348.293095][T10840] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8476'.
[ 1349.776120][T10870] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8480'.
[ 1349.793552][T10871] xt_nfacct: accounting object `syz0r}' does not exist
[ 1350.934383][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 122 seconds
[ 1350.934866][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 122 seconds
[ 1350.934952][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 122 seconds
[ 1350.935036][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 122 seconds
[ 1351.044511][T10891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1352.053430][T10888] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1352.744321][T10915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8489'.
[ 1354.334099][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 124 seconds
[ 1354.334471][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 124 seconds
[ 1354.334557][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 124 seconds
[ 1354.334635][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 124 seconds
[ 1354.557410][T10957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1354.706442][T10963] ip_tables: iptables: counters copy to user failed while replacing table
[ 1354.897511][T10961] can: request_module (can-proto-3) failed.
[ 1355.623537][T10986] macsec0: entered promiscuous mode
[ 1355.623589][T10986] macsec0: entered allmulticast mode
[ 1355.908622][T11001] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1356.572141][T11012] netlink: 'syz.2.8512': attribute type 39 has an invalid length.
[ 1357.279599][T11016] netlink: 'syz.0.8515': attribute type 1 has an invalid length.
[ 1357.376522][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8515'.
[ 1357.468405][T11016] bond11: entered promiscuous mode
[ 1357.474260][T11016] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1357.590175][T11020] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8516'.
[ 1357.730384][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 126 seconds
[ 1357.730643][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 126 seconds
[ 1357.730874][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 126 seconds
[ 1357.731091][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 126 seconds
[ 1357.839716][T11017] bond11 (unregistering): Released all slaves
[ 1357.883991][T11025] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8517'.
[ 1358.031255][T11023] netlink: 'syz.1.8517': attribute type 1 has an invalid length.
[ 1358.040887][T11023] netlink: 756 bytes leftover after parsing attributes in process `syz.1.8517'.
[ 1358.392472][T11037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1359.160483][T11059] netlink: 'syz.1.8523': attribute type 4 has an invalid length.
[ 1359.238806][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8522'.
[ 1359.396609][T11067] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1359.703326][T11076] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8528'.
[ 1360.012940][T11080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8530'.
[ 1360.475156][T11090] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1360.666989][T11093] syzkaller0: entered promiscuous mode
[ 1360.687885][T11093] syzkaller0: entered allmulticast mode
[ 1360.787785][T11093] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1360.802140][T11094] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1360.932608][T11093] tipc: Resetting bearer <eth:syzkaller0>
[ 1360.933482][T11093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[ 1360.972738][T11091] tipc: Resetting bearer <eth:syzkaller0>
[ 1361.036274][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 128 seconds
[ 1361.036531][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 128 seconds
[ 1361.036764][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 128 seconds
[ 1361.036985][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 128 seconds
[ 1361.160503][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8534'.
[ 1361.175385][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8534'.
[ 1361.206247][ T2614] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1361.219844][T11091] tipc: Disabling bearer <eth:syzkaller0>
[ 1361.373576][T11111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1361.730469][T11129] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1361.957039][T11137] lo speed is unknown, defaulting to 1000
[ 1362.034473][T11140] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8542'.
[ 1362.115292][T11137] lo speed is unknown, defaulting to 1000
[ 1362.615984][T11156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8545'.
[ 1363.301856][T11162] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1364.375584][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 130 seconds
[ 1364.375844][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 130 seconds
[ 1364.376087][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 130 seconds
[ 1364.376314][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 130 seconds
[ 1364.667884][T11184] netlink: 'syz.0.8553': attribute type 1 has an invalid length.
[ 1364.770778][T11187] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1364.862047][ T2614] tipc: Subscription rejected, illegal request
[ 1365.460579][T11200] pimreg: entered allmulticast mode
[ 1365.605286][T11216] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) !
[ 1365.747605][T11199] lo speed is unknown, defaulting to 1000
[ 1365.775198][T11199] lo speed is unknown, defaulting to 1000
[ 1365.946888][T11208] lo speed is unknown, defaulting to 1000
[ 1365.958611][T11208] lo speed is unknown, defaulting to 1000
[ 1367.757645][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 132 seconds
[ 1367.758138][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 132 seconds
[ 1367.758525][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 132 seconds
[ 1367.758612][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 132 seconds
[ 1369.136995][T11262] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1369.842241][T11284] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1371.107486][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 134 seconds
[ 1371.107748][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 134 seconds
[ 1371.108040][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 134 seconds
[ 1371.108270][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 134 seconds
[ 1372.133539][T11328] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1372.744262][T11341] nbd0: detected capacity change from 0 to 63
[ 1372.744622][T11340] block nbd0: NBD_DISCONNECT
[ 1372.744744][T11340] block nbd0: Disconnected due to user request.
[ 1372.744764][T11340] block nbd0: shutting down sockets
[ 1372.754766][ T1704] blk_print_req_error: 27 callbacks suppressed
[ 1372.754788][ T1704] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.754818][ T1704] buffer_io_error: 27 callbacks suppressed
[ 1372.754832][ T1704] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1372.755469][ T1704] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.755501][ T1704] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1372.756412][ T1704] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.756444][ T1704] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1372.756755][ T1704] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.756783][ T1704] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1372.759172][ T1704] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.759257][ T1704] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1372.759910][ T1704] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.760442][ T1704] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1372.761292][ T1704] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.761368][ T1704] Buffer I/O error on dev nbd0, logical block 2, async page read
[ 1372.773546][ T1704] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.773580][ T1704] Buffer I/O error on dev nbd0, logical block 3, async page read
[ 1372.773822][ T1704] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.773851][ T1704] Buffer I/O error on dev nbd0, logical block 0, async page read
[ 1372.773956][ T1704] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1372.773984][ T1704] Buffer I/O error on dev nbd0, logical block 1, async page read
[ 1372.798132][T10006] ldm_validate_partition_table(): Disk read failed.
[ 1372.815048][T10006] Dev nbd0: unable to read RDB block 0
[ 1372.833402][T10006]  nbd0: unable to read partition table
[ 1373.032332][T11348] pim6reg: entered allmulticast mode
[ 1373.063495][T10006] ldm_validate_partition_table(): Disk read failed.
[ 1373.082139][T10006] Dev nbd0: unable to read RDB block 0
[ 1373.093346][T10006]  nbd0: unable to read partition table
[ 1373.305731][T11345] pim6reg: left allmulticast mode
[ 1373.710887][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8590'.
[ 1374.492031][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 136 seconds
[ 1374.492623][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 136 seconds
[ 1374.492717][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 136 seconds
[ 1374.492794][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 136 seconds
[ 1374.734789][T11391] set_target_v3_checkentry: 23 callbacks suppressed
[ 1374.735307][T11391] Cannot find del_set index 0 as target
[ 1374.748684][T11391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8595'.
[ 1375.725062][T11410] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1377.859451][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 138 seconds
[ 1377.859931][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 138 seconds
[ 1377.860018][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 138 seconds
[ 1377.860102][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 138 seconds
[ 1378.033663][T11451] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1378.316115][T11464] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8610'.
[ 1381.237199][T11513] syzkaller0: entered promiscuous mode
[ 1381.237247][T11513] syzkaller0: entered allmulticast mode
[ 1381.373741][T11536] netlink: 'syz.0.8622': attribute type 10 has an invalid length.
[ 1381.566817][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 140 seconds
[ 1381.567075][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 140 seconds
[ 1381.567318][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 140 seconds
[ 1381.567549][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 140 seconds
[ 1381.626232][T11543] netlink: 'syz.0.8622': attribute type 10 has an invalid length.
[ 1382.340205][T11536] dummy0: entered allmulticast mode
[ 1382.371381][T11536] team0: Port device dummy0 added
[ 1382.787720][T11560] syzkaller0: entered promiscuous mode
[ 1382.788573][T11560] syzkaller0: entered allmulticast mode
[ 1383.012557][T11566] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8628'.
[ 1383.343426][T11569] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8629'.
[ 1384.167677][T11594] syzkaller0: entered promiscuous mode
[ 1384.168535][T11594] syzkaller0: entered allmulticast mode
[ 1384.210675][T11594] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1384.322167][T11594] tipc: Resetting bearer <eth:syzkaller0>
[ 1384.420213][T11593] tipc: Resetting bearer <eth:syzkaller0>
[ 1384.514063][T11601] netlink: 'syz.4.8637': attribute type 10 has an invalid length.
[ 1384.523373][T11601] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8637'.
[ 1384.555228][T11593] tipc: Disabling bearer <eth:syzkaller0>
[ 1384.854863][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 142 seconds
[ 1384.855399][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 142 seconds
[ 1384.855494][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 142 seconds
[ 1384.855580][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 142 seconds
[ 1384.940333][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8637'.
[ 1384.940385][T11602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8637'.
[ 1385.051477][T11607] ip_tables: iptables: counters copy to user failed while replacing table
[ 1385.129537][T11615] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8638'.
[ 1385.463160][T11618] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.8641'.
[ 1386.706512][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8643'.
[ 1386.717161][T11630] netlink: 1 bytes leftover after parsing attributes in process `syz.0.8643'.
[ 1386.897489][T11636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8644'.
[ 1386.898408][T11636] 8021q: VLANs not supported on nlmon0
[ 1386.940647][T11639] openvswitch: netlink: IP tunnel TTL not specified.
[ 1387.219785][T11643] netlink: 'syz.4.8647': attribute type 2 has an invalid length.
[ 1387.391881][T11652] syzkaller0: entered promiscuous mode
[ 1387.391928][T11652] syzkaller0: entered allmulticast mode
[ 1387.581670][T11658] syzkaller0: entered promiscuous mode
[ 1387.591280][T11658] syzkaller0: entered allmulticast mode
[ 1388.236373][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 144 seconds
[ 1388.236882][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 144 seconds
[ 1388.236966][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 144 seconds
[ 1388.237041][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 144 seconds
[ 1388.363894][T11646] wg2 speed is unknown, defaulting to 1000
[ 1388.382750][T11646] wg2 speed is unknown, defaulting to 1000
[ 1388.452065][T11646] wg2 speed is unknown, defaulting to 1000
[ 1388.562541][T11669] openvswitch: netlink: IPv4 frag type 228 is out of range max 2
[ 1388.576177][T11669] __nla_validate_parse: 1 callbacks suppressed
[ 1388.583553][T11669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8654'.
[ 1389.128698][T11673] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8656'.
[ 1389.158485][T11673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1389.290085][T11676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1389.330001][T11673] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1389.416073][T10704] wg2 speed is unknown, defaulting to 1000
[ 1389.422057][T11646] infiniband syz2: set down
[ 1389.427660][T11646] infiniband syz2: added wg2
[ 1389.438088][T11646] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR
[ 1389.440390][T11646] infiniband syz2: Couldn't open port 1
[ 1389.457163][T11646] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1389.475246][T11646] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1389.495867][T11646] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1389.546679][T11646] RDS/IB: syz2: added
[ 1389.550847][T11646] smc: adding ib device syz2 with port count 1
[ 1389.557124][T11646] smc:    ib device syz2 port 1 has no pnetid
[ 1389.566411][T10704] wg2 speed is unknown, defaulting to 1000
[ 1389.573492][T11646] wg2 speed is unknown, defaulting to 1000
[ 1390.540947][T11646] wg2 speed is unknown, defaulting to 1000
[ 1390.570850][T11694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8660'.
[ 1390.783015][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8660'.
[ 1391.035795][T11646] wg2 speed is unknown, defaulting to 1000
[ 1391.326149][T11646] wg2 speed is unknown, defaulting to 1000
[ 1391.666071][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 146 seconds
[ 1391.666626][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 146 seconds
[ 1391.666730][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 146 seconds
[ 1391.666834][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 146 seconds
[ 1392.882674][T11646] wg2 speed is unknown, defaulting to 1000
[ 1393.598503][T11711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8664'.
[ 1394.058395][T11720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8667'.
[ 1394.073012][T11720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8667'.
[ 1394.795209][T11728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8668'.
[ 1394.868673][T11646] wg2 speed is unknown, defaulting to 1000
[ 1395.015088][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 148 seconds
[ 1395.015604][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 148 seconds
[ 1395.015689][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 148 seconds
[ 1395.015770][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 148 seconds
[ 1395.150615][T11733] nftables ruleset with unbound chain
[ 1395.173173][T11732] netlink: 164 bytes leftover after parsing attributes in process `syz.0.8670'.
[ 1396.384363][T11762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8676'.
[ 1396.414787][T11646] wg2 speed is unknown, defaulting to 1000
[ 1397.596907][T11646] wg2 speed is unknown, defaulting to 1000
[ 1398.400192][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 150 seconds
[ 1398.400474][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 150 seconds
[ 1398.400718][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 150 seconds
[ 1398.400952][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 150 seconds
[ 1398.473053][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1398.473556][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8684'.
[ 1398.474531][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1398.474573][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8684'.
[ 1398.475711][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1398.475753][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8684'.
[ 1398.476888][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1398.476929][T11805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8684'.
[ 1398.478095][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1398.479237][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1398.480344][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1398.481120][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1398.481597][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1398.482066][T11805] netlink: 'syz.3.8684': attribute type 2 has an invalid length.
[ 1399.829210][T11833] __nla_validate_parse: 19 callbacks suppressed
[ 1399.831116][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8692'.
[ 1400.188902][T11829] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1400.293673][T11840] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8693'.
[ 1400.328510][T11836] bond11 (unregistering): Released all slaves
[ 1400.340762][T11846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8694'.
[ 1400.366603][T11843] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8693'.
[ 1400.379340][T11847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8693'.
[ 1400.643860][T11843] vxlan2: entered promiscuous mode
[ 1400.655320][T11843] vxlan2: entered allmulticast mode
[ 1400.967152][T11847] vxlan2: entered promiscuous mode
[ 1400.976392][T11847] vxlan2: entered allmulticast mode
[ 1401.490645][T11871] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8697'.
[ 1401.494655][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8697'.
[ 1401.546160][T11868] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8697'.
[ 1401.623098][T11871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8697'.
[ 1401.652753][T11878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8699'.
[ 1401.744766][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 152 seconds
[ 1401.745029][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 152 seconds
[ 1401.745272][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 152 seconds
[ 1401.745500][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 152 seconds
[ 1402.817151][T11909] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1404.550622][T11932] bond5: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms
[ 1404.550998][T11932] bond5: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms
[ 1404.560373][T11932] bond5: entered allmulticast mode
[ 1404.574393][T11932] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1405.184628][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 154 seconds
[ 1405.185133][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 154 seconds
[ 1405.185221][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 154 seconds
[ 1405.185305][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 154 seconds
[ 1405.392184][T11948] validate_nla: 18 callbacks suppressed
[ 1405.392267][T11948] netlink: 'syz.0.8716': attribute type 8 has an invalid length.
[ 1405.392309][T11948] __nla_validate_parse: 3 callbacks suppressed
[ 1405.392362][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8716'.
[ 1405.429449][T11948] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1405.429987][T11948] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1406.371217][T11959] 
@0Ù: renamed from bond_slave_1
[ 1406.908514][T11974] bridge0: port 1(bond0) entered blocking state
[ 1406.909321][T11974] bridge0: port 1(bond0) entered disabled state
[ 1406.909902][T11974] bond0: entered allmulticast mode
[ 1406.910105][T11974] netdevsim netdevsim4 netdevsim1: entered allmulticast mode
[ 1406.993945][T11974] bond0: entered promiscuous mode
[ 1406.994378][T11974] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[ 1407.042751][T11974] bridge0: port 1(bond0) entered blocking state
[ 1407.043024][T11974] bridge0: port 1(bond0) entered forwarding state
[ 1408.034923][T11983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8724'.
[ 1408.124254][T11987] netlink: 712 bytes leftover after parsing attributes in process `syz.0.8726'.
[ 1408.133447][T11987] netlink: 5504 bytes leftover after parsing attributes in process `syz.0.8726'.
[ 1408.146596][T11987] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8726'.
[ 1408.206355][T11987] bond11: option all_slaves_active: invalid value (255)
[ 1408.421212][T11987] bond11 (unregistering): Released all slaves
[ 1408.555176][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 156 seconds
[ 1408.555762][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 156 seconds
[ 1408.555859][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 156 seconds
[ 1408.555951][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 156 seconds
[ 1408.617042][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8729'.
[ 1408.787778][T11999] netlink: 'syz.1.8729': attribute type 30 has an invalid length.
[ 1408.796741][T11995] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1408.892222][T11995] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 1408.981489][T12001] netlink: 124 bytes leftover after parsing attributes in process `syz.0.8730'.
[ 1409.108141][T12005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8732'.
[ 1411.248098][T12050] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1411.895300][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 158 seconds
[ 1411.895567][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 158 seconds
[ 1411.895828][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 158 seconds
[ 1411.896056][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 158 seconds
[ 1412.825091][T12081] lo speed is unknown, defaulting to 1000
[ 1412.971050][T12081] lo speed is unknown, defaulting to 1000
[ 1412.981691][T12081] wg2 speed is unknown, defaulting to 1000
[ 1415.264881][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 160 seconds
[ 1415.265085][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 160 seconds
[ 1415.265331][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 160 seconds
[ 1415.265553][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 160 seconds
[ 1415.980810][T12161] netlink: 160 bytes leftover after parsing attributes in process `syz.3.8764'.
[ 1417.086120][T12181] bridge0: port 2(veth0) entered blocking state
[ 1417.089854][T12181] bridge0: port 2(veth0) entered disabled state
[ 1417.090971][T12181] veth0: entered allmulticast mode
[ 1417.369205][T12181] veth0: entered promiscuous mode
[ 1417.411767][T12182] bridge0: port 3(veth1) entered blocking state
[ 1417.412102][T12182] bridge0: port 3(veth1) entered disabled state
[ 1417.412660][T12182] veth1: entered allmulticast mode
[ 1417.445119][T12182] veth1: entered promiscuous mode
[ 1417.491932][T12181] netlink: Conntrack attr has 8 unknown bytes
[ 1417.498179][T12181] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1417.589489][T12192] netlink: 'syz.2.8771': attribute type 10 has an invalid length.
[ 1417.877534][T12204] netlink: 'syz.3.8775': attribute type 13 has an invalid length.
[ 1417.912347][T12202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8776'.
[ 1417.990770][T12209] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8776'.
[ 1418.013001][T12205] tc_dump_action: action bad kind
[ 1418.644917][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 162 seconds
[ 1418.645177][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 162 seconds
[ 1418.645420][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 162 seconds
[ 1418.645652][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 162 seconds
[ 1418.813727][T12226] netlink: 'syz.0.8779': attribute type 1 has an invalid length.
[ 1418.814676][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8779'.
[ 1419.769569][T12231] lo speed is unknown, defaulting to 1000
[ 1419.779411][T12231] lo speed is unknown, defaulting to 1000
[ 1419.793567][T12231] wg2 speed is unknown, defaulting to 1000
[ 1419.972167][T12246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8782'.
[ 1421.453012][T12217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1421.986384][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 164 seconds
[ 1421.986954][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 164 seconds
[ 1421.987035][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 164 seconds
[ 1421.987117][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 164 seconds
[ 1422.242806][T12269] syzkaller0: entered promiscuous mode
[ 1422.243237][T12269] syzkaller0: entered allmulticast mode
[ 1422.377262][T12269] tipc: Started in network mode
[ 1422.377801][T12269] tipc: Node identity d62ec4a85e76, cluster identity 4711
[ 1422.381989][T12269] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1422.657595][T12267] tipc: Resetting bearer <eth:syzkaller0>
[ 1422.749825][T23482] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1422.772687][T23482] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1422.789101][T23482] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1422.796374][T23482] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1422.807281][T23482] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1423.223606][T12280] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8792'.
[ 1423.318024][T12267] tipc: Disabling bearer <eth:syzkaller0>
[ 1423.350537][T12282] ip6erspan0: default FDB implementation only supports local addresses
[ 1424.122695][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8797'.
[ 1424.133261][T12296] netlink: 'syz.1.8797': attribute type 7 has an invalid length.
[ 1424.141452][T12296] netlink: 'syz.1.8797': attribute type 8 has an invalid length.
[ 1424.152837][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8797'.
[ 1424.438054][T12308] netlink: 'syz.0.8800': attribute type 1 has an invalid length.
[ 1424.934150][ T9115] Bluetooth: hci4: command tx timeout
[ 1425.035741][T12275] lo speed is unknown, defaulting to 1000
[ 1425.048547][T12275] lo speed is unknown, defaulting to 1000
[ 1425.071556][T12275] wg2 speed is unknown, defaulting to 1000
[ 1425.357880][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 166 seconds
[ 1425.358161][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 166 seconds
[ 1425.358968][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 166 seconds
[ 1425.359058][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 166 seconds
[ 1425.746107][T12328] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8804'.
[ 1425.746642][T12331] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8804'.
[ 1427.015185][ T9115] Bluetooth: hci4: command tx timeout
[ 1427.324385][T12346] ip_tables: iptables: counters copy to user failed while replacing table
[ 1428.627910][T12356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8811'.
[ 1428.700702][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 168 seconds
[ 1428.701221][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 168 seconds
[ 1428.701317][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 168 seconds
[ 1428.701387][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 168 seconds
[ 1429.094607][ T9115] Bluetooth: hci4: command tx timeout
[ 1429.920786][T12369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8814'.
[ 1430.152456][T12377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8815'.
[ 1431.067976][T12275] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1431.068940][T12275] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1431.071677][T12275] bridge_slave_0: entered allmulticast mode
[ 1431.127259][T12275] bridge_slave_0: entered promiscuous mode
[ 1431.152409][T12275] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1431.155212][T12275] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1431.156143][T12275] bridge_slave_1: entered allmulticast mode
[ 1431.176000][ T9115] Bluetooth: hci4: command tx timeout
[ 1431.183361][T12275] bridge_slave_1: entered promiscuous mode
[ 1431.471675][T12389] veth10: entered allmulticast mode
[ 1431.491290][T12393] netlink: 'syz.2.8818': attribute type 29 has an invalid length.
[ 1432.302227][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 170 seconds
[ 1432.302852][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 170 seconds
[ 1432.302948][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 170 seconds
[ 1432.303023][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 170 seconds
[ 1432.443717][T12275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1432.447259][T12275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1432.584670][T12275] team0: Port device team_slave_0 added
[ 1432.612222][T12275] team0: Port device team_slave_1 added
[ 1433.152978][T12405] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8820'.
[ 1433.265851][T12405] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8820'.
[ 1433.278066][T12405] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8820'.
[ 1433.278118][T12405] netlink: 'syz.2.8820': attribute type 6 has an invalid length.
[ 1433.278140][T12405] netlink: 'syz.2.8820': attribute type 5 has an invalid length.
[ 1433.278160][T12405] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8820'.
[ 1433.322612][T12275] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1433.322650][T12275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1433.322699][T12275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1433.324736][T12275] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1433.324759][T12275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1433.324794][T12275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1433.449880][T12405] netlink: 'syz.2.8820': attribute type 13 has an invalid length.
[ 1434.367138][T12275] hsr_slave_0: entered promiscuous mode
[ 1434.388344][T12275] hsr_slave_1: entered promiscuous mode
[ 1434.389237][T12275] debugfs: 'hsr0' already exists in 'hsr'
[ 1434.389268][T12275] Cannot create hsr debugfs directory
[ 1435.145401][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8827'.
[ 1435.166026][T12275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1435.271048][T12436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8827'.
[ 1435.521594][T12442] netlink: 'syz.3.8828': attribute type 4 has an invalid length.
[ 1435.560575][T12442] netlink: 'syz.3.8828': attribute type 4 has an invalid length.
[ 1435.731363][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 172 seconds
[ 1435.731656][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 172 seconds
[ 1435.731901][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 172 seconds
[ 1435.732133][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 172 seconds
[ 1435.969291][T12275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1435.979710][T12275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[ 1435.994440][T12275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1436.181890][  T149] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1436.274480][T12275] bond0: (slave netdevsim1): Releasing backup interface
[ 1436.310395][T12275] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode
[ 1436.310471][T12275] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode
[ 1436.531360][T12275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1436.531523][T12275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[ 1436.543315][T12275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1436.932534][ T2600] bridge0: port 1(bond0) entered disabled state
[ 1437.266701][T12275] bridge0: port 3(netdevsim0) entered disabled state
[ 1437.598031][T12275] netdevsim netdevsim4 netdevsim0 (unregistering): left allmulticast mode
[ 1437.598119][T12275] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode
[ 1437.613605][T12275] bridge0: port 3(netdevsim0) entered disabled state
[ 1437.891668][T12275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1437.891746][T12275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 4352 - 0
[ 1437.915954][T12275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1438.835789][T12460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1438.878277][T12275] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1438.995349][T12275] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1438.997725][T12275] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1439.037845][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 174 seconds
[ 1439.038100][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 174 seconds
[ 1439.038337][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 174 seconds
[ 1439.038580][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 174 seconds
[ 1439.087920][T12275] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1439.090467][T12275] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1439.223124][T12275] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1439.233954][T12275] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1439.276453][T12275] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1439.342633][T12515] netlink: ct family unspecified
[ 1439.342693][T12515] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1439.502950][T12529] sctp_setsockopt_delayed_ack: 23 callbacks suppressed
[ 1439.503016][T12529] sctp: [Deprecated]: syz.0.8840 (pid 12529) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1439.503016][T12529] Use struct sctp_sack_info instead
[ 1439.946277][T12275] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1440.098712][T12275] 8021q: adding VLAN 0 to HW filter on device team0
[ 1440.151124][T11784] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1440.151264][T11784] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1440.158469][T11784] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1440.158575][T11784] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1440.506537][T12539] macsec0: entered promiscuous mode
[ 1440.506661][T12539] veth1_macvtap: entered promiscuous mode
[ 1440.553954][T12539] veth1_macvtap: left promiscuous mode
[ 1440.578165][T12548] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8843'.
[ 1440.703172][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8844'.
[ 1440.714848][T12552] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8844'.
[ 1440.767501][T12552] netlink: 'syz.2.8844': attribute type 10 has an invalid length.
[ 1440.767549][T12552] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8844'.
[ 1440.767961][T12552] dummy0: entered promiscuous mode
[ 1441.796755][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8849'.
[ 1442.375505][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 176 seconds
[ 1442.375771][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 176 seconds
[ 1442.387205][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 176 seconds
[ 1442.387244][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 176 seconds
[ 1443.163538][T12597] netlink: 'syz.3.8851': attribute type 21 has an invalid length.
[ 1443.317764][T12597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8851'.
[ 1443.327653][T12597] netlink: 'syz.3.8851': attribute type 1 has an invalid length.
[ 1443.768913][T12275] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1445.735162][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 178 seconds
[ 1445.735640][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 178 seconds
[ 1445.735885][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 178 seconds
[ 1445.736110][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 178 seconds
[ 1445.785793][T12656] netlink: 'syz.1.8863': attribute type 1 has an invalid length.
[ 1445.861473][T12275] veth0_vlan: entered promiscuous mode
[ 1445.867743][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8863'.
[ 1445.955877][T12275] veth1_vlan: entered promiscuous mode
[ 1445.987341][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8863'.
[ 1446.287766][T12663] netlink: 'syz.2.8865': attribute type 4 has an invalid length.
[ 1446.296062][T12663] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8865'.
[ 1446.323076][T12275] veth0_macvtap: entered promiscuous mode
[ 1446.339011][T12662] batadv_slave_1: entered promiscuous mode
[ 1446.362711][T12275] veth1_macvtap: entered promiscuous mode
[ 1446.576524][T12275] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1446.600450][T12275] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1446.783886][ T2600] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1446.784202][ T2600] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1446.784487][ T2600] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1446.784725][ T2600] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1446.966846][T12669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8866'.
[ 1447.057423][T12661] batadv_slave_1: left promiscuous mode
[ 1447.283253][T12689] netlink: 'syz.1.8867': attribute type 1 has an invalid length.
[ 1447.388582][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8869'.
[ 1447.479287][T12694] netlink: 'syz.2.8869': attribute type 2 has an invalid length.
[ 1447.540502][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8869'.
[ 1447.572776][T12694] netlink: 'syz.2.8869': attribute type 2 has an invalid length.
[ 1447.590296][T12688] veth25: entered allmulticast mode
[ 1447.666250][  T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1447.666756][  T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1447.728109][T12695] 8021q: VLANs not supported on ip_vti0
[ 1448.095958][T12707] bridge0: port 4(vlan2) entered blocking state
[ 1448.104024][T12707] bridge0: port 4(vlan2) entered disabled state
[ 1448.112586][T12707] vlan2: entered allmulticast mode
[ 1448.117810][T12707] geneve0: entered allmulticast mode
[ 1448.125313][T12707] vlan2: entered promiscuous mode
[ 1448.133261][T12707] geneve0: entered promiscuous mode
[ 1448.179503][T11782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1448.191955][T11782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1448.237153][T12709] netlink: 'syz.3.8871': attribute type 1 has an invalid length.
[ 1449.144401][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 180 seconds
[ 1449.144869][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 180 seconds
[ 1449.145095][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 180 seconds
[ 1449.145313][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 180 seconds
[ 1450.077370][T12734] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8876'.
[ 1450.437506][T23482] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1450.444601][T23482] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1450.445583][T23482] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1450.446600][T23482] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1450.467698][T23482] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1451.877895][T12753] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.8878'.
[ 1451.913253][T12750] netlink: 'syz.1.8879': attribute type 1 has an invalid length.
[ 1452.124267][T12757] sctp: [Deprecated]: syz.4.8880 (pid 12757) Use of int in max_burst socket option deprecated.
[ 1452.124267][T12757] Use struct sctp_assoc_value instead
[ 1452.149790][T12750] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1452.253358][T12755] bond7: (slave veth0_to_bond): Enslaving as an active interface with a down link
[ 1452.348452][T12758] bond7: entered promiscuous mode
[ 1452.348500][T12758] bond7: entered allmulticast mode
[ 1452.544749][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 182 seconds
[ 1452.557794][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 182 seconds
[ 1452.569269][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 182 seconds
[ 1452.569309][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 182 seconds
[ 1452.642078][T23482] Bluetooth: hci0: command tx timeout
[ 1452.808444][T12758] macvlan5: entered promiscuous mode
[ 1452.808506][T12758] macvlan5: entered allmulticast mode
[ 1452.834944][T12758] 8021q: adding VLAN 0 to HW filter on device macvlan5
[ 1453.064556][T12755] lo speed is unknown, defaulting to 1000
[ 1453.069630][T12755] lo speed is unknown, defaulting to 1000
[ 1453.078152][T12755] wg2 speed is unknown, defaulting to 1000
[ 1453.609634][T12736] lo speed is unknown, defaulting to 1000
[ 1453.644400][T12736] lo speed is unknown, defaulting to 1000
[ 1454.158311][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8886'.
[ 1454.410994][T12789] dummy0: left promiscuous mode
[ 1454.521503][T12750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1454.602000][T12789] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[ 1454.615475][T12789] geneve2: left promiscuous mode
[ 1454.621308][T12789] bridge1: left promiscuous mode
[ 1454.626380][T12789] bridge1: left allmulticast mode
[ 1454.656594][T12789] bridge3: left promiscuous mode
[ 1454.700751][T23482] Bluetooth: hci0: command tx timeout
[ 1454.733813][T12789] bond4: left allmulticast mode
[ 1454.817298][T12789] syzkaller0: left promiscuous mode
[ 1454.817345][T12789] syzkaller0: left allmulticast mode
[ 1454.820032][T12789] bond5: left allmulticast mode
[ 1454.911093][T12736] wg2 speed is unknown, defaulting to 1000
[ 1455.708928][   T31] audit: type=1804 audit(1789038513.109:69): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8889" name="/newroot/527/memory.events" dev="tmpfs" ino=2731 res=1 errno=0
[ 1456.081496][T12813] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1456.322631][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 184 seconds
[ 1456.323073][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 184 seconds
[ 1456.323160][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 184 seconds
[ 1456.323244][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 184 seconds
[ 1456.775313][T23482] Bluetooth: hci0: command tx timeout
[ 1457.846569][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.259268][T12834] 8021q: adding VLAN 0 to HW filter on device bond10
[ 1458.272273][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.307065][T12839] tipc: Started in network mode
[ 1458.312066][T12839] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[ 1458.331711][T12839] tipc: Enabled bearer <eth:team0>, priority 0
[ 1458.340552][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.340753][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.340914][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.341064][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.341215][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.341365][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.341517][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.341692][T12834] netlink: 'syz.2.8896': attribute type 1 has an invalid length.
[ 1458.858077][T23482] Bluetooth: hci0: command tx timeout
[ 1459.314987][T12850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8899'.
[ 1459.331525][T12854] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8899'.
[ 1459.655282][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 186 seconds
[ 1459.655561][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 186 seconds
[ 1459.655811][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 186 seconds
[ 1459.656039][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 186 seconds
[ 1459.778400][T12845] syzkaller0: entered promiscuous mode
[ 1459.778464][T12845] syzkaller0: entered allmulticast mode
[ 1459.816997][T10704] tipc: Node number set to 11578026
[ 1459.850854][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8900'.
[ 1463.033861][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 188 seconds
[ 1463.034119][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 188 seconds
[ 1463.034361][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 188 seconds
[ 1463.034605][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 188 seconds
[ 1466.654495][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 190 seconds
[ 1466.654760][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 190 seconds
[ 1466.655012][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 190 seconds
[ 1466.655234][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 190 seconds
[ 1467.291966][T12893] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8908'.
[ 1468.209767][T12736] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1468.218403][T12736] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1468.226040][T12736] bridge_slave_0: entered allmulticast mode
[ 1468.236787][T12736] bridge_slave_0: entered promiscuous mode
[ 1468.266482][T12736] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1468.285273][T12736] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1468.296466][T12736] bridge_slave_1: entered allmulticast mode
[ 1468.317956][T12736] bridge_slave_1: entered promiscuous mode
[ 1468.468302][T12907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8910'.
[ 1468.490370][T12908] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8910'.
[ 1468.510440][T12911] mac80211_hwsim hwsim94 wlan0: left promiscuous mode
[ 1468.520912][T12911] mac80211_hwsim hwsim94 wlan0: left allmulticast mode
[ 1468.562611][T12736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1468.591024][T12736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1468.654909][T12736] team0: Port device team_slave_0 added
[ 1468.664138][T12736] team0: Port device team_slave_1 added
[ 1468.709761][T12736] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1468.716834][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1468.748500][T12736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1468.785956][T12736] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1468.793141][T12736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1468.824937][T12736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1468.941760][T12736] hsr_slave_0: entered promiscuous mode
[ 1468.948872][T12736] hsr_slave_1: entered promiscuous mode
[ 1468.949736][T12736] debugfs: 'hsr0' already exists in 'hsr'
[ 1468.949766][T12736] Cannot create hsr debugfs directory
[ 1469.076780][T12911] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8910'.
[ 1469.111128][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8914'.
[ 1469.132737][T12925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8914'.
[ 1469.975140][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 192 seconds
[ 1469.975396][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 192 seconds
[ 1469.975853][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 192 seconds
[ 1469.976080][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 192 seconds
[ 1470.187292][T12940] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1470.213550][T12942] validate_nla: 56 callbacks suppressed
[ 1470.221876][T12942] netlink: 'syz.1.8921': attribute type 1 has an invalid length.
[ 1470.683711][T12736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1470.705368][T12736] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1471.404825][T12950] bridge3: entered promiscuous mode
[ 1471.480764][T12950] bond8: (slave bridge3): making interface the new active one
[ 1471.528900][T12950] bond8: (slave bridge3): Enslaving as an active interface with an up link
[ 1471.611613][T12961] bridge4: entered promiscuous mode
[ 1471.645708][T12961] bond8: (slave bridge4): Enslaving as a backup interface with an up link
[ 1471.662262][T12967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8925'.
[ 1471.678054][T12967] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8925'.
[ 1471.988098][T12736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1471.988162][T12736] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1473.374338][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 194 seconds
[ 1473.374610][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 194 seconds
[ 1473.374860][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 194 seconds
[ 1473.375088][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 194 seconds
[ 1473.669801][T12997] netlink: 144 bytes leftover after parsing attributes in process `syz.1.8931'.
[ 1473.962957][T12736] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode
[ 1474.015749][T12736] team0: Port device netdevsim1 removed
[ 1474.253544][T12736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1474.253940][T12736] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1474.549363][T12736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1474.549433][T12736] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1474.584789][T13032] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1474.716795][T13030] syzkaller0: entered promiscuous mode
[ 1474.771163][T13030] syzkaller0: entered allmulticast mode
[ 1474.824681][T13030] 0: reclassify loop, rule prio 0, protocol 800
[ 1475.063852][T13030] macvtap1: entered allmulticast mode
[ 1475.063903][T13030] veth0_to_bridge: entered allmulticast mode
[ 1475.248333][T13030] veth0_to_bridge: left allmulticast mode
[ 1475.575706][T13042] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1475.640587][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8936'.
[ 1476.086366][T13050] netlink: 'syz.2.8940': attribute type 1 has an invalid length.
[ 1476.203015][T13050] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1476.238054][T13050] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1476.289687][T13062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8941'.
[ 1476.361312][T13056] bond11: (slave geneve5): making interface the new active one
[ 1476.363184][T13056] bond11: (slave geneve5): Enslaving as an active interface with an up link
[ 1476.445077][  T149] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1476.446635][  T149] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1476.446892][  T149] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1476.447133][  T149] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1476.532876][T12736] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1476.575266][T12736] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1476.592890][T12736] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1476.629159][T13068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8943'.
[ 1476.642607][T13058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8941'.
[ 1476.667915][T12736] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1476.684357][T12736] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1476.697327][ T1704] block nbd3: Possible stuck request ffff888027b5a2c0: control (read@0,1024B). Runtime 196 seconds
[ 1476.697835][ T1704] block nbd3: Possible stuck request ffff888027b5a480: control (read@1024,1024B). Runtime 196 seconds
[ 1476.697925][ T1704] block nbd3: Possible stuck request ffff888027b5a640: control (read@2048,1024B). Runtime 196 seconds
[ 1476.698001][ T1704] block nbd3: Possible stuck request ffff888027b5a800: control (read@3072,1024B). Runtime 196 seconds
[ 1476.791918][T12736] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1476.828072][T12736] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1477.106620][T12736] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1477.332298][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8945'.
[ 1477.349780][T13086] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1477.457341][T13087] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input12
[ 1478.355680][T12736] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1478.616956][T13106] ------------[ cut here ]------------
[ 1478.624763][T13106] UBSAN: array-index-out-of-bounds in kernel/bpf/disasm.c:306:6
[ 1478.635670][T13106] index 3 is out of range for type 'const char *const[3]'
[ 1478.644818][T13106] CPU: 1 UID: 0 PID: 13106 Comm: syz.2.8950 Not tainted syzkaller #0 PREEMPT(full) 
[ 1478.644850][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1478.644866][T13106] Call Trace:
[ 1478.644877][T13106]  <TASK>
[ 1478.644888][T13106]  dump_stack_lvl+0xe8/0x150
[ 1478.644935][T13106]  ubsan_epilogue+0xa/0x30
[ 1478.644996][T13106]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[ 1478.645087][T13106]  ? __pfx___ubsan_handle_out_of_bounds+0x10/0x10
[ 1478.645122][T13106]  print_bpf_insn+0x21f1/0x2910
[ 1478.645156][T13106]  ? __pfx_disasm_print+0x10/0x10
[ 1478.645193][T13106]  ? __pfx_print_bpf_insn+0x10/0x10
[ 1478.645241][T13106]  ? vscnprintf+0x5c/0x90
[ 1478.645310][T13106]  ? bpf_verifier_vlog+0x3c7/0x900
[ 1478.645357][T13106]  diag_print_insn_context+0x433/0xd00
[ 1478.645407][T13106]  ? __pfx_diag_print_insn_context+0x10/0x10
[ 1478.645449][T13106]  ? __pfx_disasm_print+0x10/0x10
[ 1478.645482][T13106]  ? __pfx_disasm_kfunc_name+0x10/0x10
[ 1478.645521][T13106]  ? diag_print_wrapped_prefixed+0x207/0x240
[ 1478.645563][T13106]  bpf_diag_source+0x639/0x18d0
[ 1478.645596][T13106]  ? vsnprintf+0xe42/0xef0
[ 1478.645638][T13106]  ? vscnprintf+0x5c/0x90
[ 1478.645668][T13106]  ? bpf_verifier_vlog+0x3c7/0x900
[ 1478.645706][T13106]  ? __pfx_bpf_diag_source+0x10/0x10
[ 1478.645755][T13106]  ? __pfx_diag_write+0x10/0x10
[ 1478.645793][T13106]  ? kfree+0x1c5/0x650
[ 1478.645827][T13106]  ? bpf_diag_program_structure+0x28a/0x430
[ 1478.645866][T13106]  bpf_diag_program_structure+0x31c/0x430
[ 1478.645905][T13106]  ? verbose+0x11d/0x1a0
[ 1478.645944][T13106]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[ 1478.645979][T13106]  ? bpf_prepare_btf_info+0x639/0x1200
[ 1478.646006][T13106]  ? rcu_is_watching+0x16/0xb0
[ 1478.646043][T13106]  check_subprogs+0x6d3/0x740
[ 1478.646085][T13106]  bpf_check+0x17ba/0x2e10
[ 1478.646125][T13106]  ? ktime_get_with_offset+0x93/0x2d0
[ 1478.646155][T13106]  ? __pfx_bpf_check+0x10/0x10
[ 1478.646184][T13106]  ? bpf_obj_name_cpy+0x194/0x1e0
[ 1478.646229][T13106]  bpf_prog_load+0x14d6/0x1c20
[ 1478.646272][T13106]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1478.646330][T13106]  __sys_bpf+0xd0d/0xd90
[ 1478.646367][T13106]  ? __pfx___sys_bpf+0x10/0x10
[ 1478.646398][T13106]  ? do_futex+0x458/0x4e0
[ 1478.646430][T13106]  ? __pfx_dim_on_top+0x10/0x10
[ 1478.646491][T13106]  ? rcu_is_watching+0x16/0
** replaying previous printk message **
[ 1478.646491][T13106]  ? rcu_is_watching+0x16/0xb0
[ 1478.646528][T13106]  __x64_sys_bpf+0xba/0xd0
[ 1478.646555][T13106]  do_syscall_64+0x166/0x520
[ 1478.646592][T13106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1478.646619][T13106]  ? clear_bhb_loop+0x70/0xc0
[ 1478.646648][T13106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1478.646673][T13106] RIP: 0033:0x7f8b2759e159
[ 1478.646697][T13106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1478.646716][T13106] RSP: 002b:00007f8b257f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1478.646743][T13106] RAX: ffffffffffffffda RBX: 00007f8b27826180 RCX: 00007f8b2759e159
[ 1478.646762][T13106] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[ 1478.646779][T13106] RBP: 00007f8b2763503b R08: 0000000000000000 R09: 0000000000000000
[ 1478.646795][T13106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1478.646811][T13106] R13: 00007f8b27826218 R14: 00007f8b27826180 R15: 00007fffbeb27f28
[ 1478.646849][T13106]  </TASK>
[ 1478.933980][T13106] ---[ end trace ]---
[ 1478.934051][T13106] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[ 1479.055503][T13106] CPU: 0 UID: 0 PID: 13106 Comm: syz.2.8950 Not tainted syzkaller #0 PREEMPT(full) 
[ 1479.065010][T13106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 1479.075124][T13106] Call Trace:
[ 1479.078444][T13106]  <TASK>
[ 1479.081413][T13106]  vpanic+0x56d/0xa60
[ 1479.085464][T13106]  ? __pfx_vpanic+0x10/0x10
[ 1479.090034][T13106]  ? irqentry_exit+0x218/0x910
[ 1479.094883][T13106]  panic+0xc5/0xd0
[ 1479.098672][T13106]  ? __pfx_panic+0x10/0x10
[ 1479.103161][T13106]  ? __pfx__printk+0x10/0x10
[ 1479.107810][T13106]  check_panic_on_warn+0x89/0xb0
[ 1479.112935][T13106]  __ubsan_handle_out_of_bounds+0xe8/0xf0
[ 1479.118725][T13106]  ? __pfx___ubsan_handle_out_of_bounds+0x10/0x10
[ 1479.125206][T13106]  print_bpf_insn+0x21f1/0x2910
[ 1479.130123][T13106]  ? __pfx_disasm_print+0x10/0x10
[ 1479.135206][T13106]  ? __pfx_print_bpf_insn+0x10/0x10
[ 1479.140470][T13106]  ? vscnprintf+0x5c/0x90
[ 1479.144860][T13106]  ? bpf_verifier_vlog+0x3c7/0x900
[ 1479.150047][T13106]  diag_print_insn_context+0x433/0xd00
[ 1479.155586][T13106]  ? __pfx_diag_print_insn_context+0x10/0x10
[ 1479.161629][T13106]  ? __pfx_disasm_print+0x10/0x10
[ 1479.166724][T13106]  ? __pfx_disasm_kfunc_name+0x10/0x10
[ 1479.172250][T13106]  ? diag_print_wrapped_prefixed+0x207/0x240
[ 1479.178303][T13106]  bpf_diag_source+0x639/0x18d0
[ 1479.183212][T13106]  ? vsnprintf+0xe42/0xef0
[ 1479.187695][T13106]  ? vscnprintf+0x5c/0x90
[ 1479.192075][T13106]  ? bpf_verifier_vlog+0x3c7/0x900
[ 1479.197254][T13106]  ? __pfx_bpf_diag_source+0x10/0x10
[ 1479.202616][T13106]  ? __pfx_diag_write+0x10/0x10
[ 1479.207555][T13106]  ? kfree+0x1c5/0x650
[ 1479.211666][T13106]  ? bpf_diag_program_structure+0x28a/0x430
[ 1479.217611][T13106]  bpf_diag_program_structure+0x31c/0x430
[ 1479.223394][T13106]  ? verbose+0x11d/0x1a0
[ 1479.227703][T13106]  ? __pfx_bpf_diag_program_structure+0x10/0x10
[ 1479.234006][T13106]  ? bpf_prepare_btf_info+0x639/0x1200
[ 1479.239544][T13106]  ? rcu_is_watching+0x16/0xb0
[ 1479.244372][T13106]  check_subprogs+0x6d3/0x740
[ 1479.249130][T13106]  bpf_check+0x17ba/0x2e10
[ 1479.253615][T13106]  ? ktime_get_with_offset+0x93/0x2d0
[ 1479.259047][T13106]  ? __pfx_bpf_check+0x10/0x10
[ 1479.263894][T13106]  ? bpf_obj_name_cpy+0x194/0x1e0
[ 1479.268997][T13106]  bpf_prog_load+0x14d6/0x1c20
[ 1479.273823][T13106]  ? __pfx_bpf_prog_load+0x10/0x10
[ 1479.279011][T13106]  __sys_bpf+0xd0d/0xd90
[ 1479.283318][T13106]  ? __pfx___sys_bpf+0x10/0x10
[ 1479.288123][T13106]  ? do_futex+0x458/0x4e0
[ 1479.292504][T13106]  ? __pfx_dim_on_top+0x10/0x10
[ 1479.297431][T13106]  ? rcu_is_watching+0x16/0xb0
[ 1479.302257][T13106]  __x64_sys_bpf+0xba/0xd0
[ 1479.306724][T13106]  do_syscall_64+0x166/0x520
[ 1479.311370][T13106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.317489][T13106]  ? clear_bhb_loop+0x70/0xc0
[ 1479.322242][T13106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1479.328185][T13106] RIP: 0033:0x7f8b2759e159
[ 1479.332646][T13106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1479.352292][T13106] RSP: 002b:00007f8b257f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1479.360747][T13106] RAX: ffffffffffffffda RBX: 00007f8b27826180 RCX: 00007f8b2759e159
[ 1479.368747][T13106] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005
[ 1479.376745][T13106] RBP: 00007f8b2763503b R08: 0000000000000000 R09: 0000000000000000
[ 1479.384762][T13106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1479.392790][T13106] R13: 00007f8b27826218 R14: 00007f8b27826180 R15: 00007fffbeb27f28
[ 1479.400805][T13106]  </TASK>
[ 1479.405836][T13106] Kernel Offset: disabled
[ 1479.410177][T13106] Rebooting in 86400 seconds..