last executing test programs:

3m46.687354353s ago: executing program 4 (id=25259):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000001800200000000000000000000000600120002"], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="12"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000006d000100000900235b20000100000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350067656e6576653000000000000000000018003480140035006d6163766c616e300000000000000000"], 0x4c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x121}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000001a80))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0)
shutdown(r7, 0x1)
setsockopt(r7, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c)
r9 = socket$kcm(0xa, 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
close(r6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

3m46.416170169s ago: executing program 4 (id=25263):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bpf$MAP_CREATE(0xb00000000000014, &(0x7f0000000480)=ANY=[@ANYRES16=r1], 0x48)
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000001840)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001800)={&(0x7f0000001300)=ANY=[@ANYBLOB="bfa25231", @ANYRES16=0x0, @ANYBLOB="00012bbd7000ffdbdf258800000008000300", @ANYRES32=r3, @ANYBLOB="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"], 0x4f8}, 0x1, 0x0, 0x0, 0x805}, 0x4804)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', <r4=>0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0x84, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x5c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xd}}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x6900, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x85ba, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10001, 0x2b96}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x400}}]}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x84}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x4004)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000600)={'wpan1\x00', <r9=>0x0})
r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r10, &(0x7f0000000180)={0x1f, 0x0, @none}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0x7, &(0x7f0000000100)=0xf7fffffd, 0x4)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000940), r8)
sendmsg$NL802154_CMD_GET_INTERFACE(r11, 0x0, 0x20000010)
syz_genetlink_get_family_id$ieee802154(0x0, r8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="01002dbd7000fddbdf25110000000800dd30", @ANYRES32=r9, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4894}, 0x80)
sendmsg$NFC_CMD_SE_IO(r13, 0x0, 0x20000000)
setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r4, 0x3, 0x6, @random="7c6a97bead69"}, 0x10)
r14 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r4, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090)

3m45.802278092s ago: executing program 4 (id=25272):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001800dd8d00000000000001800200000000000000000000000600120002"], 0x24}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="12"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="4c0000006d000100000900235b20000100000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350067656e6576653000000000000000000018003480140035006d6163766c616e300000000000000000"], 0x4c}}, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r3)
sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x121}]}, 0x24}, 0x1, 0x0, 0x0, 0x850}, 0x20040880)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r5, 0x400448e0, &(0x7f0000001a80))
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0)
r7 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r7, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0)
shutdown(r7, 0x1)
setsockopt(r7, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)
r8 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f00000000c0)={0x84, @dev={0xac, 0x14, 0x14, 0x9}, 0x19, 0x3, 'sh\x00', 0x29, 0x10000, 0x10800008}, 0x2c)
r9 = socket$kcm(0xa, 0x2, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)
sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
close(r6)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

3m45.549678179s ago: executing program 4 (id=25276):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=<r2=>0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3)
sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="1c000000", @ANYRES16=<r5=>r4, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=<r6=>r2], 0x1c}}, 0x0)
write$nci(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="61050908030301e3010634f12562b0512ba5b643252008888588e3c658680b05d9fc7f4ec2cb70feccfee009d04e24202a65a764517631b259fc68309ae5170009f6d2aaf17fda95e6ceabaf8c33beb3281ea21b4b74677854bb67f6c9ab4fc03679343f98e3e3975ca44d3b1ceb1c27e65c79125fc77868ae70752195"], 0xee)
r7 = socket(0x5, 0x4, 0x3)
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x44}}, 0x0)
r8 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000300)=ANY=[@ANYBLOB="920c46794e0afddfda957aa5a71f9f495c24b97214495a00a48cb6f91a9c6392ec06aa7df878c25555784ebdd65a9947e0f516d8a1628654d006c9d82c1f53ce5e1da03c09427c34dcc3152e2e2ffd41e6b440704378add43ee727f47fa5a39a5c95fc54f16164b8dd908e2e43124c970f7f57d0d7f0597688e3587e00f7ece358593d458253d61ca8d720251c0af5f37f656f873e9d0f2a0929a89aca831a8598b82daa9bf00c292c45ed7bc9c139a9427d99a6040eef2822", @ANYBLOB="dffa3c8a1fda31705eda883bdc98248b60e73c6d8f3ce18e777f7e6912551dd2dd5c8e95c1b75df47157bc264202fbe449791f3ba0eff41b940d9e10954ab81d2df620a4f4a226b3a35cbadcca003fbb47be5d733622a46d6efe964cfed66d85ecbfd43866dfd927cd9f4bb98b8ee4747d9b479b6625223932f249de06105fa7039296e0051049b33447dadc82bc67a3585eadd2572e9cbcc6e3f67f919c12ed173cadf7d5d6b4dd48d387590cdc4911", @ANYRES8=r6, @ANYRESDEC=r0, @ANYRES8=r7, @ANYRESDEC=r5], 0x10)
r9 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r9, &(0x7f00000000c0), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000001c0)={'vcan0\x00', <r10=>0x0})
sendmsg$can_bcm(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r10}, 0x10, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="010000009b0500000800000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="fc2ccfa89cc8ee0fe721000004000001193cdc79ed17ed0b385e9be3f868893be4"], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)

3m42.358047232s ago: executing program 4 (id=25282):
r0 = socket(0x1e, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$sock(r1, &(0x7f0000000300)={&(0x7f0000000100)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x40}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)="2c4704dd9baa4b97fb526052ff3529ceb5b4d99d02f0bb1070a1fa710487b133fce2e8586ce758ba6e064ea69e783e91d6ac7a839f1becff19be9292064313d1986fdb293f4421", 0x47}, {&(0x7f0000000200)="ddff887969e1703acabf8ca2a5027aa5ec82a87dec28ea602585f22ab364766e9415d059", 0x24}], 0x2, &(0x7f0000000280)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffff80000001}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}], 0x48}, 0x4000884)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f000000040000000400000015"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4, <r5=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20)
recvmsg$unix(r3, &(0x7f0000000940)={0x0, 0x20, &(0x7f00000001c0)=[{&(0x7f0000000840)=""/170, 0xaa}], 0x1}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5}, &(0x7f0000000000), &(0x7f00000000c0)}, 0xa)
sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000000)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
getsockopt$inet6_int(r6, 0x29, 0x35, 0x0, &(0x7f000000bac0))
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r8 = accept4$llc(r0, &(0x7f0000000580)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000005c0)=0x10, 0x80000)
ioctl$XFS_IOC_FD_TO_HANDLE(r7, 0xc038586a, &(0x7f0000000700)={<r9=>r8, &(0x7f0000000600)='},^&\x00', 0x600880, &(0x7f0000000640)={@_ha_fsid={[0xcf, 0x3]}, {0x6, 0x80, 0xffc2, 0x81}}, 0xc, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)=0xffff})
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="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"], 0x944}, 0x1, 0x0, 0x0, 0x50}, 0x0)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
r11 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r11, 0x6, 0x14, 0x0, 0x0)
ioctl$int_in(r11, 0x5421, &(0x7f0000000000)=0x10100)
connect$inet(r11, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10)
splice(r11, 0x0, r10, 0x0, 0x5, 0xa)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syzkaller1\x00', &(0x7f00000004c0)=@ethtool_modinfo={0x42, 0xf29, 0x3ca}})
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r12=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000000980)="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", 0xfa}, {&(0x7f0000000a80)="91b83039bbcba3", 0x7}, {&(0x7f0000000ac0)="277c11a254e723b63999e550fbd62368b4ba187dbb97dadfc6241f86e8eb1e3143e1a90301845821df2553c3c1e2591ab112e9227b28ceb70137e01875b7ef7fed8cfbac93c3417520392a5c0e26cfcedd46662f19cc1242bfc00d901f38d94bb6959cc3c891f0095e76e33acac143c2d717f69b2a1ea530e96c020e", 0x7c}, {&(0x7f0000000b40)="7acd58fafb18e8b88c6492a2f35c39a1155dc3b6408dc08e95", 0x19}, {&(0x7f0000000b80)="4760071d07c71dfa3a9b70aa232ed1718283eca0c2d565164bb017ee96d1622118c89c42fc8f8d0589acd8bd1502de263b07fdb941c44dfbbfadd2b08045ca43c194c26e989d9ea6b2821569958733cfa9554c2061e2cd", 0x57}, {&(0x7f0000000c00)="db616c81d295533e88a82e291b9bc23821a5d7db8b2c95d98c8715e85279893a502c2c54", 0x24}, {&(0x7f0000003000)="5d860dbb673e6cac77d2a65efd810a29a5366cd245dbb66b15cf1a9c03324d3a0d5f94fde16ce1a0511c34d53afc7a198fff21bf68a2cffbc956bc3bb3432195d8a5a9b36ca39087c2591a0fd83c3193b5d7762774b7aa37c0f8ad7a69478dde074ed3a579c8e2cc706557e06ba97d9964a88033806a825451c8b7af55f26c39b36d7bc708d3691c8129bb64b0a7ef1ad60867bf2bf864ed25cf3fb90111ae147ee8c4af339598ef6d0395ee86181f7afe2feefe526bf820bec657c7c724bf5c817af8b64eae333ebfb822c02e7e20e19633836ccc828045ab274a7b966b130864a296b83c71e4433cddae85c96885fc5909803350f287ccaf4218d0b7a7795bd4a31d39cb4151a0d9d115dbfae7bc4d744ebc17081837cdaad269108088edbf85b339bffb1e5e1c05cb248cbdb92db390e0f8aa540d9094a8e3d4640ef6c81d7f7d7c483b7a4523e2ed0cf6d498941d6cfb0e5d6e85214c1e9c38e033f8c31a7ed409ba081ebbacbc18198c9fbd0b4ec0616885b863eb5df53e1c59174cc2f35153276dc07b171618923dd8e97f4f7a60823b580e6f0283e8946c7b24bd380e53b0541e54c7bb2d7f15d99e30e54b78d6c2ab9bc62a30c20e13337e5a8827a5e918a9bc564d6711087752bb596a171b952390567905efc0fe4d4d005585c680e9b33a4b89c7bd1cb5554a784d07ed97f505646c1e53bd945a2a747fe8ea804d989b0610c0567b34a46d571aafdde380588de4e187c700ff7289525aa63da8510fe3e759b6afcabae21367f1444f31430ca6151b8df0c982f76737a65f530c6c3b390f21c6f0cfc9b64ebaaff03b8ba1aa0792649bb5037f740f196137a8a2f1a379b6769bdb31981ec5fa36623e216850eba64e95bf89d07bd6b41dbeedf718ad555e4af299043d792a145756926651f373138f108f77e16cd4cef11b0b1528200936a8fc9ef7c5dd03a345b85651ede5cad7c8d6ffff7b252c8f42e6bdc353c7aa672564a8f7a12765f49f28d8228b4e6a4c2a26d9a2b8d9c026a8aec5a3ca8911ea992ae32270eabab1fda744a09d8950726643eeb4e2ebf50f4b89fb1c6c80b9b49801b7422a98ef18fa9807657f7d8799587cb9763afbfb341f3e6f3964fb51433390bb05bfb7944a80d9c61f3f84934fb4dc37f576e12d8ffd5c585896e5a25f518c71330560a5ec000ee44f6575bc6c5f144ebc7f0bce1f715769975f44c8405ea5ed55dc5189ea1448f4f517406091bf8ed3a8db6b88d57bbf4ffda71c89aba2a13dbb3958241ac5524f8cc04639186cf4db8f9ca06372d6eca087f9a600b357822dac204e8f234d1eb0e5ce6fbb4e0956b35acf78cba389af2881232e67a42d1dea166116e3d73e7b70cfc1ee84dfe691abbb943fb82ffff10b84b42f2f1f885006ecdf44be0beceacc74df75d80ca63eefba4b17980f27fe40034dc569f8082c670b055736d6bbdf52f34ddd6fc72dff1b33f7c4933f30d574f22e2c557bc23279503ecb6d7283bfad4e982743f0a6e3cb7fb14eb78e8a558acf888ba8bd387f7b030d05949f05a04708f2bfded97b9953aacb2ca6dc054aef4d9c4a0f7da449068e2fd525d4ea8f32e8017bcc2db58f8260ec63e8cf4e3aeaefed28aac825a6ecc766a3e49052f14505fa27ba486f598e8befd37a1acbf1920a4d32a439923577d3f6d347c2c5e258dbc008c8c6a3274be3fbdbfd7f5fd9bf5bec61d357040dd62769e9d9024b2ba1cbfbdaa4027f5fb609db5c4c461560e4c0bb683d1a9f70622792495d771cf709b9da137921b88c8d8017f49c149e523bbfe7f205e89c1d205b8f1a08b41b3d26600d836d6697fff1450ea89dee2c0ccd38bd24a645c72c7b416086077afdf4293b9c9651ba23bad3a1b6326b954aa54bfbb9e4526aca489ca43fd7f666542d2014e07224d2a15bf066bebf023ce3a53ed159652522c7307c3fa0db782fd821b7700650e21034e7749e7d47cfbddc4f0eb06f9bd448e72cc97d5c2183273e889fe540315c3a832a66a45bb023bd577130ca9849db967f64cf6fb87ed0d672238778adac8331abc63bd878e3d456a71448ce972d68dc155fa657b21a4d54e9f63804232dbf794459ea27b153fd21f74142e12c8d9a33d5283a2292b1d80b961307004a670aa90e7bfffec8f5bb3364bc7e035fdac6d1a4e639aecea717e9334f380a2ea3410f3f4f77f0d45abd926443be4a8f74279b848116535bf27fdb699ddc8f2742048dd772e80f8119b6066b0879de6bccb6da0a2aa6b3e6753e5880161a2a7191f1f8a9b902e8bcd7e71e6594316dd94a6b2dff0966f5bef496be1b36998baec82d5322e3647403341aa9054d13e69c5ccba542ae38b26aebba527d8a9ea6d8b28b7a2cb2ab7acb14af0d7dc9572771e9ee95b9ff2e73a9f04f295e9e7a238977235730d20f9b9c5f5bd621627123c2bc2a287ab1556aad9eb7bee5dafc494a645b1e6b97c092bb9ae99c8fd3e5262dcef5e520312151cb95e44f133d463d08e6d5098c63b429f50ccba3fc281d5532efa09ddf864ef5d20fb88016bd973f0c28a169f8f0ca348acb2676c2f2aa246b02fa451d1577e0daad5c08bd050fb9253377a7fa3b8bf1afa738953b4e5d98f7645ca4fd3a9a7b59de90d2fd75c254f2e5ee6e6798aabea7828adcaabcd6011d767a8e15c9159102c58b025b8bf53ff046b0022df14e749d5be2c3cae86f57b0540ef47f9d25c4fb0bae189e2f89b07cee16ef5f1650efe4d68105f8c985588b2a1c56c3c857eb52c17b033b9ddd389a95bb90f0aa66ec33ac2c33cf9c6fd388af9aea88ac11af76148f34f7d8d27774a5cd5e10ef50d3b27d5c940ef48a6be51eac424a35151db43fc227252fb826578908790f86d57c01ef533bc14307de86e47d546e5cd36da8c6e33ec784a1cb01b6204b641a5fc6d9a6655f955f8b2f6d7404b6c99f477c4fd8200f6cfbf7ce522b7c3f9f073d2834d8cf534900e63b46bf674dd0355d1da387b3cea8424ea8ff020e6b1ffd3862711512f58e7c78222eb8b79255a0477965bf6cbd2be2c604a45e85b9dd8dbae9ecbf57ef4619d684b418e235834344a9661d364c60a778969ab5e1e56768ada7ddb1111a21170df57c32c8201906c93764232e021c12f4f7e97d22c50fc6b013c33ae0e0986d0bb68205c2ba99569f24e1c96a476a69281e9cb602bcceec2015e491bd94820bbe6ed4404b100c49a2babe6dd0da1eac9b631e7199d9f5f6b0e031634d3ff17c56290f461ec2783efa7f6d5119b1d93b669156a93cad277df770cc039c04a038a864882bdf9bfcba850c6590644b3991a9d693c892704e893103163874b0e35221249c48109c71c05809be1828e290903def221cc9f3b1845f53296f2baff7c69781979fa0eef26df30a72299529b226bc854ad022b0821fd5d1448c352fb0d60732079ea3a2ce556e949748c815f555d3fbb72bc0dc700e35f4519fb2719abe3f70fbf659df1f02e306856e830f8fe36bffda6aa12fb9c4c571b9ee00d9bef214116d630b388f2458b2d84f3d3b6c8dacfbfd3307eface8ca3d7fc48c3530d9c0d873aaaa8259f4b11c2093a95bc30bbb3a5cea30ab265d3887904072c8a3a404268d3ac75da14ce103a2ad6788dcceb4f1bfcad60e6cde2a2e2b9985e84e490fef40f094c45a382d6e845b3893dc72b01c0a558aef8a4c8d3889c125733fc4fd8ef5400adda563a6e542d86099df9b7979ada4c12023473d5af81153e926986fc4d49f70375084f107190cadf23499929938b7eb05085134ccb1d8892a883e5629f94f86eb4fca9b24a9659ca22aa7a45a5e83de42aa0c7ea36d669c1216dc901abb1f789011ce2cd87b046e5bb4e9663e720a6278dc5865541b9864128c08069ab891fdf6d0003d2a3026ac2bbc85f7b86ff21de8c64a0e4472303f835442116014df688b33f091315ab610eddca86f5a8e559012ea069b8fcd32adca73d100386d250b4ab2ef949caabf428fdb979beea3b0ffd6235260a43d828d00f6e88537f6828570640c030cf795e1ef517767aba543ac63b17b4e110042f0ba9f9ae1845d556596382c074ca5599b441fda271bff8f1900d35643d8498f18521635c588bfcb67395e1ec6aaac11c32d258d29c56e104c97b448f5be0bb5114e2adcfd1ac51752e7bf8e5d995d1523c3bc3214eaf18cbfd57581cdb25d1e157ff54ccc41a26e1f4f0303153cbb95492da253cbb2368413291570215647a7b466224c6afdde13f854e5cf63d77eb1c11639488d506ada418016a5d282b666555d02c3b7fe571395ec3e35dea58c3b4534d8283ec98cd4bcd99968e4e3d10d28abab1b186b51e734af14ce0c21fe50423caedfd0dba30f55c40e77614e8baa980081efa80952aee88ffb7b0438f37bbdfa8da3e3836afd7231592f4982d084cb12c81250db5550c5055763976ea5aa9eb3c65ad53e6e8d018cf471b3978c17223fe82401b555c6ecbb4cb559e685b118f520cb26855396dad418894cf14431fa1277347d6ab503d4a6d0e2b77a194348edc1daf907704f07dd344dc6e75b82896388b9c0092afc6965381b66108bbeb7f51b6ec579e6638f4396405d0e4e0f7e70c61118a051a6bb63ae06783a62f599e8ffb4e5a2b4c91901a61a9b14b007dc4a558f71869ff1c6904ab1ca7be852088005a71e158135553ff8bcd84c0b294d5b106942f9e80464cea8c64160e74069dc95115a8b75b4601008792328b96263ce44b479896ca00626c44ca2917437d6548678a817fb6f97afd909bf776832fe123c9f04f762d288a522eb61a439e171a7ba386dde30e562b00cf2f364a152741285c693436379d7b37c880d5e57cfa7fed68413a565559d0f0dac5a976813b10edda6021d07d8073ee01b95448725214b89dfdf22ad626686221ef4b7bc09fee888a25e565dd5e6400a3c996b41f7c6a93eafd5c09944fc3dbb7cf4b09fa310ce2ae0f785454d9ded615dea091f113da3fdefd787b09e3e70aba3c483f07443c4c5fdceabba07b1d98f04b3f82ad4cb987c6a7963135fc73c111863279afed2fecdd1e8c084a18559420df894e15557f0afdc1c787dfb2e793fc91c89089ca68b28ff0e389f6d0946e06b51a1d97b799c16d105e464ae201ccb96ce59f7ca95d8183d76ff2b915cd5e4b8ae4cb2ae67d73a7a6890cc1fac220e07ce32b1618c1cc3d3a4bec66495777e1813f1b5e38e23f156a23652b93de52bddd69908efd028ed7f8d65534ee5988b12e54e12260d3fb1c0296c1b7a0a606e299e66c85237ea5dd9ba35737267bee9b98d99615bbdc4435de0cde45e61dab1bed425836336afcd40652a87850049f315627962b898319951654a1b1f21b577ad4f2e3b1a24b4d87a5a8d8a85450f52621ddec73961049fbf043efac1e5e62655eb0f7bb33753523d74a45f7cc4ff577828efe551f3ed6c924ace2413e41c99a01b47a35fc51d01c77c6d1f395edc80b7047f7ea185a63f0ea2c302b86eaf607b8001a9b5c5cf2c8858a4d62a3f6bcd9612b6ac004a9a7f3653f83581d15492bc04ba76000977407d73519431ed54e94f68b6721b3d212e1d5f197326759df0a241cd5418b1d3d76bdf0fd758df0232cd6e4ad1de4356a0959789d5ebfdbea24a894e8110394adeb5b88b3fa31f2c4bcfced7473afaf222cab8ea1bd62373b0dc1e2eebd66d438bd6a14446bb12dd62bf1c2bf52a610c33e1e5ca8024950df54eaccb8d13c675d79b6f6d23225e01d10cf1d7545c65ad93b89d07eff10b672e461adae8c521e9a7fe166214e102ef22bfc02c06415c760227fe0d", 0x100f}, {&(0x7f0000002ec0)="807b4b29c892f61f1ecd6318901bc101467983aa3b59e003c30cd94f2d0c5da90a7f453af4f3c2664aa30eba5dcab391fdb31374aad5744e4239a6eb6c039d66518331bdacb57efe176b67f6d799bada13628b50e50fcdf0b9545cf5f14cc3ab2c1d05d9705219a666213d56fe877c6c550942431a48ceb5c8a5dc5043bdf774ab980026661566b75b931795c21a31c1e17651973cfce8e774c4474684abebc62e3319027f38d456bdc5c6897e4eb04da28cc4ced3117af95f99", 0xba}], 0x8, 0x0, 0x0, 0x8014}, 0x0)
recvmsg(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x400060df)
sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000007060101000000000c0000000a0000000800064000000011"], 0x1c}, 0x1, 0x0, 0x0, 0x4008881}, 0x20040000)
accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c, 0x0)
r13 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r13, 0x0, 0x83, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9aa904991771e83b702f3717cf38ed0e92e83ae490758991fa1174a75fa8c45db732026d3de611ffbd09b683e2f08812d695dd9b87f08711c02bb5d2cbac05022bee8aee5339fb6eba21e534e43b9960f470bf9c075368c6a7ee0b6ef641feb6967490ae07547819adcf47330679551ae2bd7009b31", 0x0, 0x375, 0x0, 0x0, 0x9a, &(0x7f0000000000), &(0x7f0000000e00)="2fda8e7aa8d9cecae13bcbb35230d1cf1f1b23e33fcbd1aa1bea454b04650cecef80daa91af6e7ee8cdb5e5139a51d5400000000000000"}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)

3m42.039117335s ago: executing program 4 (id=25285):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) (async)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001cd03f600cda11905040baa25673cf8ca44df017de625872331cca63804f0b6462dcaf221dc2b1826432da0e9d55684d5e7af9c27331bb625aae5fc1e4f44671dbf8c5ee4210015c176424a3a7977c86e45d56e817f04084f7c"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async)
sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) (async)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000180)={0x0, @local, 0x4e21, 0x0, 'lc\x00', 0x0, 0xa, 0x76}, 0x2c) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r8 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x1ffffffffffffe6d, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a3000"], 0x54}}, 0x0) (async)
r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000400)=[0x4, 0x401, 0x1, 0x9, 0x8, 0x7ff, 0x1], 0x0, 0xd0b, 0x7}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r12, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/17, 0x11}}, 0x10)

3m26.991200338s ago: executing program 32 (id=25285):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1}]}}}]}, 0x38}}, 0x0) (async)
sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r2, 0x0, 0x0)
getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) (async)
r3 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r3, &(0x7f0000000080), 0x10)
sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001cd03f600cda11905040baa25673cf8ca44df017de625872331cca63804f0b6462dcaf221dc2b1826432da0e9d55684d5e7af9c27331bb625aae5fc1e4f44671dbf8c5ee4210015c176424a3a7977c86e45d56e817f04084f7c"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) (async)
sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x4, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) (async)
setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000180)={0x0, @local, 0x4e21, 0x0, 'lc\x00', 0x0, 0xa, 0x76}, 0x2c) (async)
r4 = socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14, 0x14, 0x0, 0x7f}, [@FRA_SRC={0x8}]}, 0x24}}, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000190000000100800e000f01"}}}]}, 0x48}}, 0x0)
socket$rds(0x15, 0x5, 0x0) (async)
r8 = socket$kcm(0x29, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMUNATTACH(r8, 0x89e1, &(0x7f0000000100)) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan0\x00'}) (async)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x1ffffffffffffe6d, &(0x7f0000000480)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a3000"], 0x54}}, 0x0) (async)
r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000400)=[0x4, 0x401, 0x1, 0x9, 0x8, 0x7ff, 0x1], 0x0, 0xd0b, 0x7}}, 0x40)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={r12, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/17, 0x11}}, 0x10)

2m36.528535555s ago: executing program 3 (id=26384):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e24, @multicast1}}, 0x3, 0x1}, 0x90)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r5 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2m34.546309513s ago: executing program 3 (id=26410):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @private1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa42123972"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94)
r1 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r3 = socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x1e, 0x4, 0x0)
ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000200)=0x2)
r5 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0x20}, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket(0x2b, 0x1, 0x1)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x18, @private1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x58}}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4000000000000007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa42123972"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async)
socket(0x10, 0x803, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) (async)
getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async)
sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
socket$igmp(0x2, 0x3, 0x2) (async)
socket(0x1e, 0x4, 0x0) (async)
ioctl$SIOCPNADDRESOURCE(r4, 0x89e0, &(0x7f0000000200)=0x2) (async)
socket(0x10, 0x803, 0x2) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) (async)
sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0xe}, @dev={0xac, 0x14, 0x14, 0x32}}}}], 0x20}, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24}, 0x94) (async)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async)
socket(0x2b, 0x1, 0x1) (async)

2m34.524046997s ago: executing program 3 (id=26414):
r0 = socket(0x2b, 0x1, 0x0)
listen(r0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x2c000010)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000088a8ffff894fee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)="97452a307eb495fe2236000000000000006bfadf302e815cb994e6d0", 0x1c}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast}}}], 0x20}, 0x2400c804)

2m34.518917726s ago: executing program 3 (id=26420):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x402)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8)
r3 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r3, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x1, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r4=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={r4, 0x1}, 0x8)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000004c0)={r4, @in={{0x2, 0x4e24, @multicast1}}, 0x3, 0x1}, 0x90)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r5 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

2m33.644369592s ago: executing program 3 (id=26437):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x3c, 0x0, 0x8, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_REQUEST={0x8, 0x1, 0x1, 0x0, 0x22d6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xdada}]}, 0x3c}}, 0x0)
r2 = socket(0x11, 0xa, 0x0)
getsockname$packet(r2, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000048104002c0012800900010062016e64000000001c00028008000700f4000000050001000500000008000200", @ANYRES32=0x0, @ANYRES8=r0], 0x4c}}, 0x0)

2m33.591201445s ago: executing program 3 (id=26438):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="93822ea6a009d252bb3b1983c60e68d8322638094f0a75b68de68b2eca247e6ae9f51cdb999e586dbe57bc9d709f818094699e9f5a8b15161991feee159a8686fb1036c12b4fa3e8848918b47737713b39706af1badbc04e5c23c19314b87478855259e882fe79ab80726b2d6a3b4a85f8", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000)
sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000400900000200df0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="030000c001"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20008814)
sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r5, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

2m18.534662523s ago: executing program 33 (id=26438):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="93822ea6a009d252bb3b1983c60e68d8322638094f0a75b68de68b2eca247e6ae9f51cdb999e586dbe57bc9d709f818094699e9f5a8b15161991feee159a8686fb1036c12b4fa3e8848918b47737713b39706af1badbc04e5c23c19314b87478855259e882fe79ab80726b2d6a3b4a85f8", @ANYRES64=0x0], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r4, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r5=>0x0})
sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r5}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca0000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000004"], 0x20000600}}, 0x40000)
sendmsg$can_bcm(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x1d, r5}, 0x10, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000000400900000200df0000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64, @ANYBLOB="030000c001"], 0x80}, 0x1, 0x0, 0x0, 0x4001}, 0x20008814)
sendmsg$can_bcm(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r5, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001)
sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)
r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r7 = socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x3, 0x6)
sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r10, &(0x7f00000002c0)={0x11, 0x0, <r11=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r11, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
getsockname$packet(r8, &(0x7f00000002c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@newqdisc={0x24, 0x24, 0xf1d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {}, {0x9, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x4000800)
sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0)

26.788338522s ago: executing program 6 (id=27953):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vti={{0x8}, {0x14, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x40}, 0x1, 0x2000000000000000}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}}, 0x24040800)
r2 = socket$inet(0x2, 0x800, 0x5)
r3 = socket$kcm(0x11, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xb8c8d6488e80433f, 0x0, 0x6}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40880}, 0x40)
sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r5, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="f7c8e8aa0337b72c6e19c3", 0xb}], 0x1}, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x152c44e9eb9c8313}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x5}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x54}, @CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x17}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x19}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8808}, 0x40000)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', r5, 0x700, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @broadcast, @initdev={0xac, 0x1e, 0xe9, 0x0}}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x7800, 0x80, 0x80000000, 0x98a1, {{0x5, 0x4, 0x3, 0x1, 0x14, 0x65, 0x0, 0x6d, 0x29, 0x0, @private=0xa010100, @empty}}}})

26.08895717s ago: executing program 6 (id=27961):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x310, 0x168, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3c0, 0xffffffff, 0xffffffff, 0x3c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x148, 0x168, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x810001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x370)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r2, 0x30, 0x0, @void}, 0x10)
r4 = socket(0x2, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={r5, &(0x7f0000000340), &(0x7f0000000200)=@tcp6=r4}, 0x20)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x7c}}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r5, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r4}, 0x20)
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5f8, 0x0, 0x0, 0x0, 0x200, 0x528, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, &(0x7f0000000080), {[{{@ipv6={@private2, @private1, [0xffffff00, 0xff, 0xffffff00], [0xffffffff, 0xff000000, 0xffffffff, 0xffffff00], 'veth0_virt_wifi\x00', 'ip6erspan0\x00', {}, {}, 0x2b, 0x2, 0x5, 0x4}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private2, @ipv6=@private1, 0x23, 0x20, 0x2}}}, {{@ipv6={@mcast2, @empty, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0x100fffe00, 0x0, 0xffff00], 'dummy0\x00', 'veth1\x00', {}, {0xff}, 0x3b, 0x6, 0x4, 0x38}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xff, 0xa4, @ipv4=@multicast1, 0x4e24}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x37}, 'veth1_to_bridge\x00', {0x8}}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x87}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x40}}}, {{@ipv6={@private1, @empty, [0xff000000, 0xffffffff], [0xff000000, 0xffffff00, 0xffffffff], 'pim6reg0\x00', 'vlan0\x00', {}, {}, 0x0, 0x9, 0x0, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1a}, 0x40, 0x36, 0xf800}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffff, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@local, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0xb, 0x7fffffff, 0x543}, {0x4, 0x8000000000000002}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0)

25.931870814s ago: executing program 6 (id=27964):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bind$bt_sco(r1, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x4}}, 0x8)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = epoll_create1(0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000480)={0xb})
writev(r2, &(0x7f0000000680)=[{&(0x7f0000000380)="6492510a0ce1aca340c317d2e6d268c09c9a8fd4f244eb74a6c30b60d2b8056a77b7ffa8f10a0f896cd17117bc299672d49226e12b94ad3a92601af45ebb7585a89be77856a24337cea8af10419b29e616890836183229", 0x57}, {&(0x7f0000000400)="bd3044431dbf722a461f1ef461cc1796204e8ed94271c53b26a9887e9e7c4350e4d9957144944f620772c75450ece65e782d0ec4832d97febfbcf8da031290101c510f85276817a19d293559b6d64d8c335927bf5d82ce7c6affb769baeb1ce53e830ec17b9b425c3e181b274ac43323372f603eaec10abd3035e9797677a1bff4f3240b23ea57bf9c6687301ea829309e", 0x91}, {&(0x7f00000004c0)="ea694835f1b50ac8aef8e6d0018c0136af83a534b5aba6e525c0737b24f412d98042eb1e4b9a3c4de715a3e31bfdb17447c7a158ad2426bec13812b53db764e8696361b4178c556ac253d6eae5a4edddb488cf4536f82e684a2a1ed468631dc23ed321a990231cf08536bd5d37c710d9a0732e92418b00653bc90903a83cea87e60bbb6b5632996a5faa41f7bfa2a28c213d1246302e3d29a17fd0319a4b9fca4797eea7f198f5cf870e225e9aeed7ecedcaa42b750a92ceaa19ece54fe11637446b59bd99d049a128f21596a7f314684598d0284b6a94428dfd64ab2efa4cad11abd607a669303d45901cf2e1", 0xed}, {&(0x7f00000005c0)="c6df5578d72296deef8fbf53fae7c20ea539f23226d6cdc8bd30c499807ead27fb8d13d1cb6dbe10e0afb890ef9e2970557844ba5c1fb1b28db424a2e0fcd1b5d6bdaf7388e5ac4f80a6e08e963c74bca4b91ad83a8f93d7a285d25da5042a774a4bea82fa128a7780e827bffb8194816d8fa4e1c6b5c735583cc5a956f5cec519a26672b39c05c894c5fad52f1e99799a3c0ebd6734d0ecd9e28c14637bf5f0f15ec2bb", 0xa4}], 0x4)
setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000000)={0x80000000, {{0xa, 0x4e21, 0x3296000, @loopback, 0x3}}, {{0xa, 0x0, 0xbffffffa, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, 0x108)
getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)
listen(r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', <r8=>0x0})
r9 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r8, @ANYBLOB="00000000000000001c001a801800048014000680"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0ab800001000050000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6fd14e48616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000001400000000000000000ada1ed15ddd1434d0fd9af07f9fdba50a6ce977bdda8f5b5b30839e0abdf7f3a83e0aaaca0a7ed083d778fcfd94f713fd60a4"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
sendmsg$NFT_BATCH(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000180a01080000000000000000020000050c00054000000000000000020800074000000002140000001100010000080000000000000300000a"], 0x50}, 0x1, 0x0, 0x0, 0x28008000}, 0x20000800)
ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x10, 0x3, 0x951, 0x5775, 0xa, 0x9, 0x52a, 0x346, 0x5}})
sendmsg$nl_route(r10, &(0x7f0000000700)={0x0, 0x57, &(0x7f00000010c0)={&(0x7f0000000700)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x10)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@dev={0xfe, 0x80, '\x00', 0x16}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f, 0x8, 0x1, 0x100, 0x7, 0x200, r6})
setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000012c0), 0x4)
sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)=ANY=[@ANYRES8=r1], 0x118}, {&(0x7f0000000040)={0x1c, 0x38, 0x100, 0x70bd25, 0x25dfdbfe, "", [@typed={0x9, 0x122, 0x0, 0x0, @str='\xaa\xaa\xaa\xaa\xaa'}]}, 0x1c}, {&(0x7f0000000100)={0x14c, 0x30, 0x100, 0x70bd29, 0x25dfdbfd, "", [@generic="b5c8363132c8e4739680f3725d8ed7d975f5283b256dacce05f21b023c8cadb08c41730e969fb35b156ef45dbc03760dddad723dd1479c070c7e7dad32e888a1a135755694f33ce0b5592426bb515eb070b558369756a4fcfd92bef21b5a7a4b7ad8cdfa3edd1049e7217e3db35be798699dc5035b636ce0d8d2ca3220d5289f0acdeb0377a71efca631ba0f20e4ed3e4bac250dc5bb3fd2cca414477cf0a7f06f86cd1081cd91808694bec01d8b58f71c", @typed={0x85, 0x12b, 0x0, 0x0, @binary="6d59cbd7b1d156efcb15e0e75d789203406ef35686119d21771f28cf8c95d883656746192bb0c9666e3a9b2f03a5fd263c5a6c17dd2beda13f9150b552a895b5f7818cfafba6131860ee3d3c0a68ed40bff1003d238bbe571f3474e8c638de0c5fc149cc30414784ae6bbcd01a2bd5f1885d000a1b29b5c0a46f7034a76534377f"}]}, 0x14c}], 0x3, 0x0, 0x0, 0x20008805}, 0x54)

25.820429854s ago: executing program 6 (id=27967):
r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b4000000f1ffffffdd0a00000000000073019e00000000009500000000000000ece69e0aa39b23ac2d61fb9a6d88764c97479609f8e38c78da7cad0d3338a5363ddec5ec60e0e279fe452b80d7fbcecb2e65082679"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x10}, 0x94)
r1 = socket(0x2f, 0x6, 0xfffffffa)
getsockopt(r1, 0x1114, 0x2720, 0x0, &(0x7f0000000000))

25.747152451s ago: executing program 6 (id=27969):
r0 = socket(0x2b, 0x1, 0x0)
listen(r0, 0x0)
ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan0\x00'})
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="b8000000190020000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x2c000010)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$l2tp6(0xa, 0x2, 0x73)
getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000040))
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000088", 0x17}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r5 = socket(0x840000000002, 0x3, 0xff)
sendmsg$inet(r5, &(0x7f0000000900)={&(0x7f00000006c0)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000040)="97452a307eb495fe2236000000000000006bfadf302e815cb994e6d0", 0x1c}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x37}, @broadcast}}}], 0x20}, 0x2400c804)

25.652083725s ago: executing program 6 (id=27971):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x68, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4c, 0x1, 0x0, 0x1, [@typed={0x3d, 0x6, 0x0, 0x0, @binary="d81961d3f3cb81b149e79dbdd22f89883220343b903d71324514a418fbe1d866048961f950cb01b924cdeb2a5b91fe61b49a358f87bd733abd"}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x48815}, 0xc010)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000d59b2ac90fe1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x68, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4c, 0x1, 0x0, 0x1, [@typed={0x3d, 0x6, 0x0, 0x0, @binary="d81961d3f3cb81b149e79dbdd22f89883220343b903d71324514a418fbe1d866048961f950cb01b924cdeb2a5b91fe61b49a358f87bd733abd"}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x48815}, 0xc010) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000d59b2ac90fe1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) (async)

10.391310193s ago: executing program 34 (id=27971):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x68, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4c, 0x1, 0x0, 0x1, [@typed={0x3d, 0x6, 0x0, 0x0, @binary="d81961d3f3cb81b149e79dbdd22f89883220343b903d71324514a418fbe1d866048961f950cb01b924cdeb2a5b91fe61b49a358f87bd733abd"}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x48815}, 0xc010)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000d59b2ac90fe1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x68, 0x40, 0x107, 0xfffffefe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4c, 0x1, 0x0, 0x1, [@typed={0x3d, 0x6, 0x0, 0x0, @binary="d81961d3f3cb81b149e79dbdd22f89883220343b903d71324514a418fbe1d866048961f950cb01b924cdeb2a5b91fe61b49a358f87bd733abd"}, @typed={0x6, 0xc, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x68}, 0x1, 0x0, 0x0, 0x48815}, 0xc010) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x26, 0x1, 0x7fffd, 0x1000, {0x4}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000d59b2ac90fe1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r2, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f0000000300)='GPL\x00', 0x6, 0xff6, &(0x7f0000001e00)=""/4086}, 0x94) (async)

4.583040284s ago: executing program 0 (id=28243):
r0 = socket$rds(0x15, 0x5, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c4000001a00fbbe00000000000000000a00000000000000000000004947ee29c853495c38b05458f51d1edd6b0b4174dfcada22896121e58c384614294ea4af831613d51c08c872c424b83845ee582c51b4899a4e15fe86401a48ca0900000000000000aba6a109c47f85258ea00a2d47def9c78a99b1ceb7b90a5c7f7c0923a93a7b9d0a8cc552"], 0x1c}}, 0x0)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000080)=ANY=[], 0x8)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001800090400000000000000000a000000000000000000000008001e80"], 0x2c}}, 0x0)
close(r0)
r5 = accept4(r2, 0x0, 0x0, 0x800)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r5, @ANYBLOB="483aa86af74d913da988dc9b66985c736ee403e9aaefc752bf37d25aaf5edc9af36d7a4d8adfc5b2b811751c74626559c106dc97ac9d4588ac2436679e8feb8ebc3550754409ed0b313decfcd4d7055b9573"], 0x1c}}, 0x20000080)
sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0)

4.470756272s ago: executing program 0 (id=28246):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0xffffff7f00000000, 0x0, 0x4000850}, 0x40)

4.288794358s ago: executing program 7 (id=28249):
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x4)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@o_path={&(0x7f0000000000)='./file0\x00', r0, 0x4000, r1}, 0x18)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f0000000240)={&(0x7f00000000c0)=""/76, 0x4c, 0x0, &(0x7f0000000140)=""/241, 0xf1}}, 0x10)
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={<r2=>r1, 0x73, 0x2, 0x4f0})
r3 = openat$cgroup_ro(r2, &(0x7f0000000300)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x2, &(0x7f00000003c0)=""/200, &(0x7f00000004c0)=0xc8)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r3)
sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xc8, r7, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x80}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x73}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xb}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008001)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000700)='pim6reg1\x00', 0x10)
ioctl$EXT4_IOC_CHECKPOINT(r4, 0x4004662b, &(0x7f0000000740)=0x2)
r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x22, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6d3f, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xa}, @alu={0x4, 0x0, 0x6, 0x6, 0x2, 0x30, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1893}, @map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x18000000}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}, @map_idx={0x18, 0x755d1c03512b46f, 0x5, 0x0, 0x9}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x5, 0x5e, &(0x7f0000000900)=""/94, 0x41000, 0x60, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0xf, 0x54, 0x10000}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000009c0)=[{0x2, 0x3, 0xa, 0x9}], 0x10, 0x4fa}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c40)={r8, 0x0, 0xef, 0x1000, &(0x7f0000000ac0)="3baa86faf029d183db4c3d19646fc44c03e0106bcbc0682b35d49fff2136e1fbaa5e5f53a6e456099375968f3ee40f0085428a78821decb2fd4ab825a239ada408bf30b1bf1891577c1e71ea1c09e7c3b545b3716f072a50517ef8514b308bc900dd177763498da6a1074c363d3c4cb895be1ab90f0c8bb819c43e42451b791860ef1bd72a319a9a40cc5a558ac5276f86b16ef721b5411965127626cbae4f9048fa4854d6fd6d88b22054d90a25b1da9d1a8f7c37f7bce3f96d72bb9b1ddf9bb9945de602b61e39609e5f6e0f706bbfdcffdc81396dedc83f3fcbb0013efed1cff0c38685d135741f0b17587cddfe", &(0x7f0000000bc0)=""/4096, 0x1ff, 0x0, 0x75, 0x1000, &(0x7f0000001bc0)="466d023721b7c8a5a5efcf7532e6a3e32db07d040eff895ad56a3cf427e3c770f1c9a60bc7169f6e3800b0c243b6a3268eb4d5ebcdb8a3a179e7b3d6d5087fd6fd5c1a7598c06a74f6fd75dba2c020308a2907a9628b175c713739c44ce710de184660ad5bacbc64a237ec85c08fcc6db6789ac993", &(0x7f0000001c40)="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", 0x2, 0x0, 0x7}, 0x50)
ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f0000002cc0)={0x70, "26316c2d44c04c11914263a34f5147039b52f78ee3db2bed007a9458c8cdb9c36c82f7fc7fcf0bd51dab07045a2d6efb8a644e39f410ec0eb0d55335cac4e7ed0d21101cda3b58b224c2a1dbbe3e85ac6ca34aa504381437d1356f315b28b01c95945a9833851896743e29d7a51d2971cd7452b2dc5586c5c14c647ea2c29960"})
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000002d80), 0x4)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002e00), r3)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000002ec0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002e80)={&(0x7f0000002e40)={0x24, r9, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040811}, 0x20000000)
setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000002f00)=0xfd, 0x4)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002f80), r2)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x38, r10, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffff7f, 0x7f}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x15}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
ioctl$OCFS2_IOC_GROUP_ADD64(r6, 0x40186f03, &(0x7f0000003080)={0x5, 0x5, 0x4})
ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f00000030c0)={0x3, 0xa, 0x1, 0x7fff, 0x3, [0x81, 0x725, 0x8, 0x1]})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000003100), r11)
ioctl$NILFS_IOCTL_CHANGE_CPMODE(r11, 0x40106e80, &(0x7f0000003140)={0x327})
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000033c0)={0x6, "a4dcd3"}, 0x6)

4.075954538s ago: executing program 0 (id=28250):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0)
r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414210000000000000000000000a9d9d088006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200010000000000000000003210"], 0x128}}, 0x70080)
socket(0x10, 0x3, 0x0)
ppoll(&(0x7f00000002c0)=[{r0, 0x9791}, {r2, 0x4200}], 0x2, 0x0, 0x0, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000007b030000000000008500000083000000790900000000000055090100000000009500000000000000bf91000000000000b70200000200000b8500000069000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) (async)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) (async)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) (async)
sendmsg$nl_xfrm(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414210000000000000000000000a9d9d088006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200010000000000000000003210"], 0x128}}, 0x70080) (async)
socket(0x10, 0x3, 0x0) (async)
ppoll(&(0x7f00000002c0)=[{r0, 0x9791}, {r2, 0x4200}], 0x2, 0x0, 0x0, 0x0) (async)

1.420577196s ago: executing program 0 (id=28255):
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x14}}, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000020601080000000000000000000000001400071140000000000500150003000000050005000a000000050001000720000005000400000000000900020007007a310000000014000300686173683a69702c706f72742c697000"], 0x60}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0))
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000090900010073797a31000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a31000000002c000000050a01020000000000000000010000000c00024000000000000000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a31000000000800024000000001"], 0xc8}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000013c0)={'erspan0\x00', &(0x7f0000001380)=@ethtool_stats={0x1d, 0x4, [0x275, 0x16, 0x100000000, 0xe97]}})
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0xd833, 0x200, 0x0, 0x7}, &(0x7f0000000040)=0x10)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r6)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf2528000000060006000300000005002b00000000000a0001007770616e31000000"], 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x20048040)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x8, 0x5, 0x5, 0x4, 0x0, 0x3ff, 0x8000, 0x2, 0x0, 0x10, 0x8, 0x6, 0xffffffff, 0x7f, 0x1, 0xfff, 0x6, 0x514f, 0x401, 0x6, 0x9, 0x2}})

1.412168047s ago: executing program 7 (id=28257):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000068a00000000c000040000001801000020696c2500000000002020207b1ad8ff00000000bfa10000000000000701000004feffffb702000008000000b703000002000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94)

1.360077056s ago: executing program 1 (id=28258):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x18}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)

1.260408366s ago: executing program 7 (id=28260):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0xffffffffffffff83, 0x0, 0x4000850}, 0x40)

1.220858595s ago: executing program 1 (id=28261):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x8001, 0x8, 0x3, 0x80000001}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000100)={0x0, @isdn={0x22, 0x0, 0x8, 0x1, 0xa}, @isdn={0x22, 0x1b, 0x8, 0x2, 0x5}, @hci={0x1f, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)='veth1_to_hsr\x00', 0xd, 0xbb, 0x1}) (async)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
accept4$alg(r2, 0x0, 0x0, 0x0)
bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia-asm)\x00'}, 0x58) (async, rerun: 32)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001140)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x6, 0x20, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0xff}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (rerun: 32)

1.068375424s ago: executing program 7 (id=28264):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xd170}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x1}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}}, 0x38000000)

1.060071737s ago: executing program 1 (id=28266):
socket$inet_sctp(0x2, 0x1, 0x84) (async)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x49478}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4000040)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) (async)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) (async)
recvfrom$inet(r2, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c0000000a0601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000340)=@ethtool_gfeatures}) (async)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x110, 0xffffffffffffffff, 0x6f5b4000) (async)
r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async)
r6 = socket$packet(0x11, 0x3, 0x300) (async)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r7)
sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r8, @ANYBLOB="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"], 0x184}}, 0x0)
r9 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', <r10=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r5, r10, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20)
syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106)

951.995217ms ago: executing program 7 (id=28268):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94)

934.759606ms ago: executing program 0 (id=28269):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT], 0x44}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x1, 0x9, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x41010)

882.304446ms ago: executing program 7 (id=28270):
socket$can_raw(0x1d, 0x3, 0x1)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000071000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010105, 0x4e20, 0x3, 'ovf\x00', 0x30, 0x660f537e, 0x3}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000440)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44)
sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)
setsockopt$inet_int(r3, 0x0, 0x32, &(0x7f0000000740)=0xffffffbf, 0x4)
r6 = socket$can_raw(0x1d, 0x3, 0x1)
r7 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r7, 0xffffffff)
r8 = accept4(r7, 0x0, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000740)={0x0, @in6={{0xa, 0x4e24, 0xf29e, @empty, 0x5}}, 0xfff7, 0x9}, &(0x7f0000000000)=0x90)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
ioctl$XFS_IOC_GOINGDOWN(r6, 0x8004587d, &(0x7f0000000080))
setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28)
recvfrom(r9, &(0x7f0000002ac0)=""/4097, 0xffffffce, 0x117, 0x0, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001000030501bd70000000000200000000", @ANYRES32=0x0, @ANYBLOB="0100000030620000080028006a550000"], 0x28}}, 0x0)

779.618522ms ago: executing program 0 (id=28272):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
getsockopt$bt_BT_DEFER_SETUP(r1, 0x12, 0x7, 0x0, &(0x7f00000000c0))
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0)

547.905198ms ago: executing program 5 (id=28277):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b0000000800000000000074faffffffffffff000000000900000000311cddf70d61324c2e2e00"], &(0x7f0000000200)=""/201, 0x3b, 0xc9, 0x1}, 0x20)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040)
r4 = socket(0x10, 0x3, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x3, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', <r8=>0x0})
sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=@canfd={{0x0, 0x0, 0x1}, 0x2b, 0x0, 0x0, 0x0, "94c47a1204f10e941d2171c20839626cde6454918c1bb0157a7a9ed18db4c3a6b41f4fbf2dd2c161772ec63af9558a01158deafe8b5e84fcb7578db99d4a89f5"}, 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x20040800)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000b0000000800000000000074faffffffffffff000000000900000000311cddf70d61324c2e2e00"], &(0x7f0000000200)=""/201, 0x3b, 0xc9, 0x1}, 0x20) (async)
socket(0x10, 0x3, 0x0) (async)
socket$alg(0x26, 0x5, 0x0) (async)
bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x48) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000610200000000000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) (async)
accept4(r1, 0x0, 0x0, 0x800) (async)
sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) (async)
socket(0x10, 0x3, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket(0x400000000010, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) (async)
sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {}, {0x3, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffffb}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) (async)
sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async)
sendmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000340)=@canfd={{0x0, 0x0, 0x1}, 0x2b, 0x0, 0x0, 0x0, "94c47a1204f10e941d2171c20839626cde6454918c1bb0157a7a9ed18db4c3a6b41f4fbf2dd2c161772ec63af9558a01158deafe8b5e84fcb7578db99d4a89f5"}, 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x20040800) (async)

459.422333ms ago: executing program 5 (id=28279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x1f, 0x2, 0xbf22, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, &(0x7f00000000c0)="b7d38fd4ac58e1e44230ffa6cd5226871edfab37f6f618701cd1aff56b9bf0b7b351ad1464bedb243ec5016b2053f53aeefcc10f710bc9dc73e3c7028a0eb60892", &(0x7f0000000200)=""/38}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r0, 0x0, 0xa002a0}, 0x38) (async)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080)="15", &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r0}, 0x38)

457.441806ms ago: executing program 2 (id=28280):
sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0)
r0 = socket(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={<r1=>r0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r3)
r6 = socket$kcm(0x10, 0x2, 0x4)
recvmsg$kcm(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x102)
sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x81, 0x9, 0x2, 0x11, 0x3, 0x9]}}]}]}]}, 0x38}}, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x7, 0x2, 0x3, 0x1, 0x4, 0x9}, 0x20)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r8, 0x8b32, &(0x7f0000000040))
sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r7, 0x10, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x40)
syz_emit_ethernet(0x103, &(0x7f0000000500)={@local, @random, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0xf5, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x7, 0xdf, [@local]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x6, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"3394876cd3a486ad6942fc861bfec66fcd139613d62dd1045e0a5a836722d8249a357ef22ec76bd21f9b1b407545bad8d5b19f42d547da0485149f24126f5da1de468da8616075720e09707d1a22d8ca5634b113662333c879a35f9af9ee2f5dabed05880f2822c80407066e25d6ce95c80ac96273de5d6709449f6a1f29f885c9a8bf8a6e5fa5a1842c514b4ff261c079b263060b4f440ab27cc6ef757d94715d91e7a97b2b2144a4da9a35e297765dfa"}}}}}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000640)=@ethernet={0x1, @local}, 0x80, &(0x7f0000000800)=[{&(0x7f00000006c0)="fe36497a424e2fd3d63d134c4360ccf90e1d07c7fa7b4d8f4dca10bb3ddb4ddd1da32121fad52dc857dfcc6bd8e9c90245be2b14c3e8ef15d465558d5abce424c50db0240330d7e66b99fe6c217a9220e107ec92297eaccc1d06a2d2bd0c6f434756ca765aadfd64e7e700e497de86f430cc2816ecd319f1c1aff4d9ccceaddb066d3a7de8", 0x85}, {&(0x7f0000000780)="73d1d4535f0e908b7dbe836a603d11c6e2e8910f1fc7ef79160289fc78628f902a30bcdd05adc86ff70fabfed354fd046c43c07e0ac3eb18f9e810966f44ba9801baeba6067ff1e42fc5c982cc0df5ffb425759a9afa93379e7fc00f5a37", 0x5e}], 0x2, &(0x7f0000000840)=[{0x20, 0x1, 0x6, "127d89e8579ff9e7db28feed68"}, {0x90, 0x11, 0x7f, "07357a39d99cc257b3cfd683e33dc0f29836365a0e6d99d1418e90c19ea230de067377a31309248cbb4c02088fc213dfa8662e380e774137f1f7960fea61b730d20586614924f3092afef7af266afed98bb0f1d472bdd0df915a55c0b00edeee9464bcbce469284143a8a6eee6158875cdc8634ad4b83396737c3c"}, {0x80, 0x114, 0xb42, "117098dd02fa7e3d955c95ac8a432d507df651e7f3b3ecf01a794b579cef262331f754bd579502dc7921ed3eb5b1e881af7297d34b46484692aae8fd885789eeddfcec1bf8772cfaaf76fd0c0607901fb77d205b22e7edee3efa958d26cddd6cfc5fc0ff78e67a740a8477c942"}, {0x30, 0x3a, 0x7ff, "c8690d92bf04bbaac4c3a67967bfe9a75880ca2c3b5c3b0916d5e2d3284772"}, {0x38, 0x117, 0x2, "370cecc0e7d5b9a0a8593b89661e986ee66a33b2cbe1dc2bf900080db54080bca029a94b2a2a0490"}], 0x198}, 0x40000)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0xe3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9bad1a25568f481671ae09427be9da5e68193644e13963c9d22fa0769c1f8fdca40592bcb71f30f0e534ac2002c739ed4f1a8acb1a3ec3a77a549d8c0e388d88541067", @ANYRESHEX=r2, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024", @ANYRESHEX=r2], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x80)

414.620682ms ago: executing program 5 (id=28281):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000002060300000000000000000005000100070000000900020073797a32000000000c00078005001500000000000500050002000000050004000000000014000300686173683a69702c706f72742c69700000000000"], 0x58}}, 0x800)
setsockopt(r0, 0xff, 0x9, &(0x7f0000000100)="1c6a6b72db98d06c8d8dd307913ac7bc54176964c480fc7632070cc3cac62e7d4bdae3b023152b1c7b640945bae6455e8024176c9c755ad5a8f63f72325cfa5b688b4745a7289b436af99d09be5bb6521078f00b33e1cc558c5837116a27f3483e7507515eac292cd6053a9b1d7047c58853814d44cec6cf4f9378064868f1814339ef45f2b18e78dcd6648a962490117944908942ba9ac54c10e2e7c99c0732b59356513c61235e136bbeae8da58f6a73551f2a941eb0995fb0922041fd66da316716dab013073275f3b6cfcce5f086ac690b42c70be5bbab6f225cb2abcae23f2be4ae71db4f42be9b", 0xea)

324.230741ms ago: executing program 5 (id=28282):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x380000, @loopback}, 0x1c)
sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESOCT], 0x44}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, r2, 0x1, 0x9, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004000}, 0x41010)

305.514324ms ago: executing program 5 (id=28283):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000004060102000000000000000002000007364f7ba84704c92585f44d8890840900020073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x8040)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xffdffffe, 0x2}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x4c801, 0x0)
ioctl$FIOCLEX(r3, 0x5451)
close(r6)
socket$unix(0x1, 0x2, 0x0)
r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x19, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r8, r7, 0x18, 0x0, @val=@kprobe_multi=@syms={0x0, 0x60, 0x0}}, 0x30)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x4)
setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10)
getsockopt$sock_buf(r9, 0x1, 0x19, 0x0, &(0x7f0000000280))
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
r10 = socket$kcm(0x11, 0x3, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r12, 0x5}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)='(', 0x1}], 0x1}, 0x20008110)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

290.009101ms ago: executing program 2 (id=28284):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x16, 0x701, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x854) (fail_nth: 2)

204.675604ms ago: executing program 2 (id=28285):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000780), 0x4)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0xe}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1)
socket$kcm(0x29, 0x0, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94)
r1 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'})
socket$netlink(0x10, 0x3, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r2)
r3 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r3, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r3, 0xffffffff)
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000100)=0x3, 0x4)
ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"})

204.203531ms ago: executing program 2 (id=28286):
unshare(0x22020000)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="18000000250001"], 0x18}, 0x1, 0x0, 0x0, 0x4888}, 0x4040)
recvmmsg(r0, 0x0, 0x0, 0x102, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x90)

144.370538ms ago: executing program 5 (id=28287):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f00000005c0), 0x10)
ioctl$SIOCGSTAMP(r1, 0x8906, 0x0)
recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x10002, 0x0)
sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4)
recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0)
write$tun(r0, &(0x7f00000004c0)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x9, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x44, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x3}, {0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0xa888, 0x88be, 0x2, {{0x6, 0x1, 0x9, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0xc, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x7a)

144.21208ms ago: executing program 2 (id=28288):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

131.844666ms ago: executing program 1 (id=28289):
r0 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES64=r1, @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010)

110.26788ms ago: executing program 2 (id=28290):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]})
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0xc4}, 0x4824)

262.372µs ago: executing program 1 (id=28291):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x0, 0x28}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xa, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, @jmp={0x5, 0x1, 0x4, 0x0, 0xdad1124f55525050, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x27}, 0x94)

0s ago: executing program 1 (id=28292):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) (async)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0xd0) (async)
syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94)

kernel console output (not intermixed with test programs):

12.522150][T12509] netlink: 'syz.1.26678': attribute type 29 has an invalid length.
[ 1513.529455][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1513.660591][T12527] syzkaller1: entered promiscuous mode
[ 1513.667769][T12527] syzkaller1: entered allmulticast mode
[ 1513.757743][T12534] Cannot find set identified by id 0 to match
[ 1513.808415][T12538] openvswitch: netlink: Flow key attr not present in new flow.
[ 1513.880699][T12544] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:20004
[ 1513.933200][T12553] IPVS: Error connecting to the multicast addr
[ 1514.015163][T12553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1514.022514][T12553] IPv6: NLM_F_CREATE should be set when creating new route
[ 1514.029846][T12553] IPv6: NLM_F_CREATE should be set when creating new route
[ 1514.049239][T12563] netlink: 'syz.0.26696': attribute type 24 has an invalid length.
[ 1514.096483][T12564] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1514.104048][T12564] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1514.174641][T12564] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1514.243944][T12571] __nla_validate_parse: 11 callbacks suppressed
[ 1514.243965][T12571] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.26698'.
[ 1514.316179][T12565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1514.326937][T12565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1514.340821][T12565] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0
[ 1514.356504][T23233] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1514.366042][T23233] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1514.375454][T23233] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[ 1514.385215][T23233] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1514.394395][T23233] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1514.405318][T23233] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[ 1514.630765][T32037] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1514.691894][T12588] netlink: 256 bytes leftover after parsing attributes in process `syz.2.26706'.
[ 1514.850708][T12588] netlink: 212 bytes leftover after parsing attributes in process `syz.2.26706'.
[ 1515.131313][T12624] Cannot find set identified by id 0 to match
[ 1515.276700][T12633] netlink: 252 bytes leftover after parsing attributes in process `syz.2.26720'.
[ 1515.318624][T12638] netlink: 'syz.2.26721': attribute type 1 has an invalid length.
[ 1515.500907][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26727'.
[ 1515.683724][T12674] FAULT_INJECTION: forcing a failure.
[ 1515.683724][T12674] name failslab, interval 1, probability 0, space 0, times 0
[ 1515.696496][T12674] CPU: 0 UID: 0 PID: 12674 Comm: syz.2.26733 Not tainted syzkaller #0 PREEMPT(full) 
[ 1515.696525][T12674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1515.696540][T12674] Call Trace:
[ 1515.696554][T12674]  <TASK>
[ 1515.696561][T12674]  dump_stack_lvl+0xe8/0x150
[ 1515.696586][T12674]  should_fail_ex+0x40c/0x560
[ 1515.696604][T12674]  should_failslab+0xa8/0x100
[ 1515.696643][T12674]  ? skb_clone+0x212/0x3a0
[ 1515.696663][T12674]  kmem_cache_alloc_noprof+0x87/0x650
[ 1515.696694][T12674]  skb_clone+0x212/0x3a0
[ 1515.696720][T12674]  bpf_clone_redirect+0x170/0x4b0
[ 1515.696743][T12674]  ? bpf_test_run+0x1d1/0x830
[ 1515.696765][T12674]  bpf_prog_bf2aacce0757c8a7+0x65/0x7d
[ 1515.696779][T12674]  ? rescuer_thread+0xd20/0x10b0
[ 1515.696801][T12674]  ? __kernel_text_address+0xd/0x30
[ 1515.696816][T12674]  ? unwind_get_return_address+0x4d/0x90
[ 1515.696833][T12674]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1515.696855][T12674]  ? arch_stack_walk+0xfb/0x150
[ 1515.696874][T12674]  ? ktime_get+0x45/0x220
[ 1515.696896][T12674]  ? rcu_is_watching+0x15/0xb0
[ 1515.696912][T12674]  ? rcu_is_watching+0x15/0xb0
[ 1515.696927][T12674]  ? ktime_get+0x45/0x220
[ 1515.696945][T12674]  ? rcu_is_watching+0x15/0xb0
[ 1515.696959][T12674]  ? ktime_get+0x45/0x220
[ 1515.696977][T12674]  ? trace_irq_enable+0x3b/0x140
[ 1515.696997][T12674]  ? ktime_get+0x45/0x220
[ 1515.697015][T12674]  ? ktime_get+0x45/0x220
[ 1515.697033][T12674]  ? seqcount_lockdep_reader_access+0xea/0x100
[ 1515.697053][T12674]  ? bpf_test_run+0x1d1/0x830
[ 1515.697075][T12674]  ? bpf_test_timer_continue+0x10c/0x320
[ 1515.697090][T12674]  bpf_test_run+0x354/0x830
[ 1515.697120][T12674]  ? __pfx_bpf_test_run+0x10/0x10
[ 1515.697145][T12674]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1515.697163][T12674]  ? __kasan_krealloc+0xec/0x110
[ 1515.697186][T12674]  ? skb_dst_set+0x72/0x140
[ 1515.697208][T12674]  bpf_prog_test_run_skb+0xe35/0x2230
[ 1515.697237][T12674]  ? __fget_files+0x3a2/0x420
[ 1515.697253][T12674]  ? __fget_files+0x2a/0x420
[ 1515.697271][T12674]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1515.697292][T12674]  bpf_prog_test_run+0x2c5/0x340
[ 1515.697316][T12674]  __sys_bpf+0x643/0x950
[ 1515.697336][T12674]  ? __pfx___sys_bpf+0x10/0x10
[ 1515.697362][T12674]  ? ksys_write+0x242/0x270
[ 1515.697388][T12674]  ? __pfx_ksys_write+0x10/0x10
[ 1515.697410][T12674]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1515.697424][T12674]  __x64_sys_bpf+0x7c/0x90
[ 1515.697443][T12674]  do_syscall_64+0x174/0x580
[ 1515.697464][T12674]  ? trace_irq_disable+0x3b/0x140
[ 1515.697483][T12674]  ? clear_bhb_loop+0x40/0x90
[ 1515.697500][T12674]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1515.697514][T12674] RIP: 0033:0x7f2dfd19ce59
[ 1515.697528][T12674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1515.697541][T12674] RSP: 002b:00007f2dfdf74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1515.697558][T12674] RAX: ffffffffffffffda RBX: 00007f2dfd415fa0 RCX: 00007f2dfd19ce59
[ 1515.697569][T12674] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a
[ 1515.697579][T12674] RBP: 00007f2dfdf74090 R08: 0000000000000000 R09: 0000000000000000
[ 1515.697589][T12674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1515.697598][T12674] R13: 00007f2dfd416038 R14: 00007f2dfd415fa0 R15: 00007fffe526d3e8
[ 1515.697616][T12674]  </TASK>
[ 1516.032481][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1516.210807][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26737'.
[ 1516.219991][T12690] block nbd4: Unsupported socket: should be TCP or UNIX.
[ 1516.606748][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.5.26746'.
[ 1516.703689][T12724] netlink: 132 bytes leftover after parsing attributes in process `syz.2.26748'.
[ 1516.735605][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.26748'.
[ 1516.809766][T12732] netlink: 'syz.1.26752': attribute type 1 has an invalid length.
[ 1516.847540][T12732] ip6gretap1: entered promiscuous mode
[ 1516.865213][T12732] ip6gretap1: entered allmulticast mode
[ 1516.879938][T12732] bond1: (slave ip6gretap1): making interface the new active one
[ 1516.892635][T12737] netlink: 128 bytes leftover after parsing attributes in process `syz.2.26753'.
[ 1516.923188][T12732] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1516.938521][T12732] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1516.947843][T12732] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1517.048586][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1517.063280][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1517.070798][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1517.085647][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1517.096310][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1517.159495][T11997] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1517.426238][T12774] netlink: 'syz.2.26763': attribute type 83 has an invalid length.
[ 1517.446565][T12774] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1517.634565][T12744] lo speed is unknown, defaulting to 1000
[ 1517.924564][T12804] syzkaller1: entered promiscuous mode
[ 1517.945837][T12804] syzkaller1: entered allmulticast mode
[ 1518.080697][T12816] netlink: 'syz.1.26776': attribute type 1 has an invalid length.
[ 1518.111627][T12816] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1518.144950][T12816] macvlan0: entered promiscuous mode
[ 1518.159478][T12816] macvlan0: entered allmulticast mode
[ 1518.172983][T12816] bond2: entered promiscuous mode
[ 1518.178773][T12816] 8021q: adding VLAN 0 to HW filter on device macvlan0
[ 1518.192188][T12816] bond2: left promiscuous mode
[ 1518.270717][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1518.406225][T12830] gtp0: left allmulticast mode
[ 1518.414299][T12830] gretap1: left allmulticast mode
[ 1518.425041][T12830] ip6gretap1: left allmulticast mode
[ 1518.516685][T12841] IPVS: Unknown mcast interface: dvmrp1
[ 1518.770722][T12859] netlink: 'syz.1.26791': attribute type 1 has an invalid length.
[ 1518.823546][T12864] netlink: 'syz.5.26792': attribute type 3 has an invalid length.
[ 1518.846582][T12859] ip6gre1: entered allmulticast mode
[ 1518.861652][T12744] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1518.872638][T12744] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1518.880891][T12744] bridge_slave_0: entered allmulticast mode
[ 1518.888214][T12744] bridge_slave_0: entered promiscuous mode
[ 1518.897760][T12744] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1518.905563][T12744] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1518.913111][T12744] bridge_slave_1: entered allmulticast mode
[ 1518.920976][T12744] bridge_slave_1: entered promiscuous mode
[ 1518.957436][T12744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1518.983701][T12744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1519.076617][T12878] bridge0: port 3(team0) entered disabled state
[ 1519.104323][T12878] team0 (unregistering): left promiscuous mode
[ 1519.119266][T12878] team_slave_0: left promiscuous mode
[ 1519.135144][T12878] team_slave_1: left promiscuous mode
[ 1519.141697][ T5626] Bluetooth: hci0: command tx timeout
[ 1519.155152][T12878] bridge0: port 3(team0) entered disabled state
[ 1519.173851][T12878] team_slave_0: left allmulticast mode
[ 1519.185924][T12878] team0 (unregistering): Port device team_slave_0 removed
[ 1519.194517][T12878] team_slave_1: left allmulticast mode
[ 1519.204309][T12878] team0 (unregistering): Port device team_slave_1 removed
[ 1519.217186][T12744] team0: Port device team_slave_0 added
[ 1519.230283][T12887] netlink: 'syz.1.26800': attribute type 1 has an invalid length.
[ 1519.233880][T12744] team0: Port device team_slave_1 added
[ 1519.301871][T12892] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1519.305507][T12887] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1519.322195][T12744] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1519.330304][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1519.357154][T12744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1519.373824][T12744] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1519.384251][T12744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1519.392906][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1519.411570][T12744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1519.514126][T12893] bond3: (slave veth7): Enslaving as an active interface with a down link
[ 1519.566869][T12887] bond3: (slave veth0_to_bond): making interface the new active one
[ 1519.580713][T12887] veth0_to_bond: entered promiscuous mode
[ 1519.602573][T12887] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1519.618647][T12903] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[ 1519.671641][T12910] xt_hashlimit: size too large, truncated to 1048576
[ 1519.728587][T12744] hsr_slave_0: entered promiscuous mode
[ 1519.758218][T12744] hsr_slave_1: entered promiscuous mode
[ 1519.786843][T12744] debugfs: 'hsr0' already exists in 'hsr'
[ 1519.803235][T12744] Cannot create hsr debugfs directory
[ 1519.823840][T12920] __nla_validate_parse: 11 callbacks suppressed
[ 1519.823860][T12920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26809'.
[ 1520.042543][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.26813'.
[ 1520.081762][T12935] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26814'.
[ 1520.091369][T12936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.26814'.
[ 1520.165592][T12945] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26815'.
[ 1520.179474][T12744] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1520.195142][T12744] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1520.223940][T12744] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1520.243119][T12744] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1520.262917][T12744] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1520.302377][T12744] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1520.311545][T12950] netlink: 32 bytes leftover after parsing attributes in process `syz.0.26817'.
[ 1520.323373][T12744] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1520.337968][T12744] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1520.388983][T12955] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4)
[ 1520.402925][T12955] bond6 (unregistering): Released all slaves
[ 1520.539725][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1520.578755][T12971] netlink: 'syz.5.26822': attribute type 1 has an invalid length.
[ 1520.601248][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.5.26822'.
[ 1520.613669][T12971] netlink: 658 bytes leftover after parsing attributes in process `syz.5.26822'.
[ 1520.625928][T12971] netlink: 'syz.5.26822': attribute type 1 has an invalid length.
[ 1520.647254][T12744] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1520.693310][T12744] 8021q: adding VLAN 0 to HW filter on device team0
[ 1520.703070][T12968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26821'.
[ 1520.732917][T11996] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1520.740131][T11996] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1520.760767][T23233] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1520.767951][T23233] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1520.837742][T12980] lo: Caught tx_queue_len zero misconfig
[ 1521.137788][T13006] netlink: 'syz.5.26831': attribute type 10 has an invalid length.
[ 1521.187801][T13000] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1521.220178][ T5626] Bluetooth: hci0: command tx timeout
[ 1521.413716][T12744] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1521.484818][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26838'.
[ 1521.532925][T13027] ip6tnl0: Caught tx_queue_len zero misconfig
[ 1521.670516][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1521.794329][T12744] veth0_vlan: entered promiscuous mode
[ 1521.808029][T12744] veth1_vlan: entered promiscuous mode
[ 1521.883847][T12744] veth0_macvtap: entered promiscuous mode
[ 1521.903915][T12744] veth1_macvtap: entered promiscuous mode
[ 1521.914633][T13058] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1521.977653][T12744] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1522.013089][T12744] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1522.057744][T11996] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.080740][T13065] netlink: 'syz.1.26849': attribute type 3 has an invalid length.
[ 1522.088761][T11996] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.102745][T11996] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.128080][T11996] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.251948][T13077] xfrm1: entered allmulticast mode
[ 1522.290959][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1522.308440][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1522.377150][T11996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1522.392274][T13081] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[ 1522.402789][T11996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1522.493662][T13086] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1522.502461][T13086] 8021q: adding VLAN 0 to HW filter on device team0
[ 1522.513284][T13086] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1522.542068][T13086] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1522.558685][T13086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1522.571249][T13086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1522.598477][T13086] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1522.607818][T13097] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1522.616516][T13086] veth1_vlan: left promiscuous mode
[ 1522.624896][T13086] veth0_vlan: left promiscuous mode
[ 1522.631257][T13086] veth0_vlan: entered promiscuous mode
[ 1522.640068][T13086] veth1_vlan: entered promiscuous mode
[ 1522.650305][T13086] veth0_macvtap: left promiscuous mode
[ 1522.656817][T13086] veth0_macvtap: entered promiscuous mode
[ 1522.664679][T13086] veth1_macvtap: entered promiscuous mode
[ 1522.670592][T13086] veth1_macvtap: entered allmulticast mode
[ 1522.704586][T13086] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1522.713666][T13086] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1522.723552][T13086] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check.
[ 1522.746819][T11996] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1522.754015][T11996] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1522.765725][T11996] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1522.772930][T11996] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1522.789541][T32037] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1522.838462][T23233] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.854911][T23233] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.864071][T23233] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.885396][T23233] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1523.143271][T13118] syzkaller1: entered promiscuous mode
[ 1523.148982][T13118] syzkaller1: entered allmulticast mode
[ 1523.160438][T13118] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received
[ 1523.300057][ T5626] Bluetooth: hci0: command tx timeout
[ 1523.677381][T13157] syzkaller0: entered promiscuous mode
[ 1523.687101][T13157] syzkaller0: entered allmulticast mode
[ 1523.717903][T13160] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1523.899390][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1524.131704][T13193] netlink: 'syz.6.26889': attribute type 1 has an invalid length.
[ 1524.178546][T13193] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[ 1524.211545][T13202] bridge6: entered promiscuous mode
[ 1524.217124][T13202] bridge6: entered allmulticast mode
[ 1524.293667][T13211] netlink: 'syz.2.26894': attribute type 1 has an invalid length.
[ 1524.334038][T13211] bond5: option mode: invalid value (7)
[ 1524.348293][T13211] bond5 (unregistering): Released all slaves
[ 1524.776959][T32037] smc: removing ib device syz1
[ 1524.886792][T32037] smbdirect: ib_dev[syz1] removed
[ 1524.915649][T13241] netlink: 'syz.5.26903': attribute type 12 has an invalid length.
[ 1525.019189][T11997] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1525.081731][T13255] __nla_validate_parse: 10 callbacks suppressed
[ 1525.081754][T13255] netlink: 36 bytes leftover after parsing attributes in process `syz.0.26908'.
[ 1525.101795][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26908'.
[ 1525.164176][T13255] bond2: entered promiscuous mode
[ 1525.187662][T13255] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1525.259370][T13260] FAULT_INJECTION: forcing a failure.
[ 1525.259370][T13260] name failslab, interval 1, probability 0, space 0, times 0
[ 1525.272112][T13260] CPU: 1 UID: 0 PID: 13260 Comm: syz.6.26907 Not tainted syzkaller #0 PREEMPT(full) 
[ 1525.272140][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1525.272152][T13260] Call Trace:
[ 1525.272161][T13260]  <TASK>
[ 1525.272168][T13260]  dump_stack_lvl+0xe8/0x150
[ 1525.272195][T13260]  should_fail_ex+0x40c/0x560
[ 1525.272219][T13260]  should_failslab+0xa8/0x100
[ 1525.272248][T13260]  ? dst_alloc+0x105/0x170
[ 1525.272269][T13260]  kmem_cache_alloc_noprof+0x87/0x650
[ 1525.272297][T13260]  ? __pfx_fib6_table_lookup+0x10/0x10
[ 1525.272403][T13260]  ? __pfx_ip6_dst_gc+0x10/0x10
[ 1525.272433][T13260]  dst_alloc+0x105/0x170
[ 1525.272456][T13260]  ip6_pol_route+0xba1/0x14d0
[ 1525.272475][T13260]  ? ip6_pol_route+0x163/0x14d0
[ 1525.272495][T13260]  ? __pfx_ip6_pol_route+0x10/0x10
[ 1525.272512][T13260]  ? ip6t_do_table+0x1d1/0x15b0
[ 1525.272533][T13260]  ? trace_irq_enable+0x3b/0x140
[ 1525.272561][T13260]  ? ip6t_do_table+0x1d1/0x15b0
[ 1525.272579][T13260]  ? ip6t_do_table+0x1d1/0x15b0
[ 1525.272598][T13260]  ? ip6t_do_table+0x13c4/0x15b0
[ 1525.272618][T13260]  fib6_rule_lookup+0x556/0x730
[ 1525.272713][T13260]  ? __pfx_ip6_pol_route_input+0x10/0x10
[ 1525.272734][T13260]  ? __pfx_fib6_rule_lookup+0x10/0x10
[ 1525.272764][T13260]  ? inet6_ehashfn+0x2f/0x3b0
[ 1525.272794][T13260]  ? __inet6_lookup_established+0xbc2/0xc60
[ 1525.272830][T13260]  ip6_route_input+0x78d/0xb20
[ 1525.272854][T13260]  ? __pfx_ip6_route_input+0x10/0x10
[ 1525.272879][T13260]  ? nf_nat_ipv6_in+0x200/0x2c0
[ 1525.272970][T13260]  ? tcp_v6_early_demux+0x56e/0x970
[ 1525.273049][T13260]  ? ip6_rcv_finish_core+0x222/0x420
[ 1525.273077][T13260]  ip6_rcv_finish+0x141/0x280
[ 1525.273104][T13260]  NF_HOOK+0x336/0x3c0
[ 1525.273128][T13260]  ? __pfx_sock_wfree+0x10/0x10
[ 1525.273159][T13260]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1525.273183][T13260]  ? NF_HOOK+0x9e/0x3c0
[ 1525.273206][T13260]  ? __pfx_NF_HOOK+0x10/0x10
[ 1525.273229][T13260]  ? ip6_rcv_core+0xa1/0x1870
[ 1525.273255][T13260]  ? __pfx_ip6_rcv_finish+0x10/0x10
[ 1525.273284][T13260]  ? netif_receive_skb+0x102/0xbf0
[ 1525.273306][T13260]  netif_receive_skb+0x278/0xbf0
[ 1525.273331][T13260]  ? __pfx_netif_receive_skb+0x10/0x10
[ 1525.273354][T13260]  ? tun_rx_batched+0x185/0x790
[ 1525.273379][T13260]  tun_rx_batched+0x1de/0x790
[ 1525.273406][T13260]  ? __pfx_tun_rx_batched+0x10/0x10
[ 1525.273431][T13260]  ? tun_get_user+0x26ca/0x4350
[ 1525.273454][T13260]  ? rcu_is_watching+0x15/0xb0
[ 1525.273477][T13260]  ? lock_acquire+0x5f/0x350
[ 1525.273505][T13260]  ? tun_get_user+0x2373/0x4350
[ 1525.273529][T13260]  ? rcu_is_watching+0x15/0xb0
[ 1525.273551][T13260]  ? trace_irq_enable+0x3b/0x140
[ 1525.273580][T13260]  tun_get_user+0x2b04/0x4350
[ 1525.273606][T13260]  ? is_bpf_text_address+0x292/0x2b0
[ 1525.273638][T13260]  ? tun_get_user+0x718/0x4350
[ 1525.273666][T13260]  ? tun_get_user+0x26ca/0x4350
[ 1525.273704][T13260]  ? aa_file_perm+0x4ed/0x15f0
[ 1525.273726][T13260]  ? __pfx_tun_get_user+0x10/0x10
[ 1525.273760][T13260]  ? ref_tracker_alloc+0x341/0x4b0
[ 1525.273783][T13260]  ? get_pid_task+0x20/0x1f0
[ 1525.273802][T13260]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1525.273828][T13260]  ? rcu_is_watching+0x15/0xb0
[ 1525.273849][T13260]  ? tun_get+0x1c/0x2f0
[ 1525.273871][T13260]  ? tun_get+0x1c/0x2f0
[ 1525.273896][T13260]  ? rcu_is_watching+0x15/0xb0
[ 1525.273915][T13260]  ? tun_get+0x1c/0x2f0
[ 1525.273939][T13260]  ? lock_release+0x4b/0x3c0
[ 1525.273969][T13260]  ? apparmor_file_permission+0x1f4/0x300
[ 1525.273997][T13260]  ? tun_get+0x1c/0x2f0
[ 1525.274025][T13260]  tun_chr_write_iter+0x113/0x200
[ 1525.274051][T13260]  vfs_write+0x612/0xba0
[ 1525.274084][T13260]  ? __pfx_vfs_write+0x10/0x10
[ 1525.274116][T13260]  ? __fget_files+0x2a/0x420
[ 1525.274142][T13260]  ksys_write+0x150/0x270
[ 1525.274169][T13260]  ? __pfx_ksys_write+0x10/0x10
[ 1525.274199][T13260]  ? rcu_is_watching+0x15/0xb0
[ 1525.274221][T13260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1525.274243][T13260]  do_syscall_64+0x174/0x580
[ 1525.274270][T13260]  ? trace_irq_disable+0x3b/0x140
[ 1525.274297][T13260]  ? clear_bhb_loop+0x40/0x90
[ 1525.274320][T13260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1525.274340][T13260] RIP: 0033:0x7fd00eb5d68e
[ 1525.274359][T13260] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1525.274378][T13260] RSP: 002b:00007fd00fa70fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1525.274399][T13260] RAX: ffffffffffffffda RBX: 00007fd00fa716c0 RCX: 00007fd00eb5d68e
[ 1525.274416][T13260] RDX: 000000000000004e RSI: 00002000000006c0 RDI: 00000000000000c8
[ 1525.274429][T13260] RBP: 00007fd00fa71090 R08: 0000000000000000 R09: 0000000000000000
[ 1525.274443][T13260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1525.274455][T13260] R13: 00007fd00ee16218 R14: 00007fd00ee16180 R15: 00007ffe2e3017d8
[ 1525.274481][T13260]  </TASK>
[ 1525.760844][ T5626] Bluetooth: hci0: command tx timeout
[ 1526.063388][T13283] FAULT_INJECTION: forcing a failure.
[ 1526.063388][T13283] name failslab, interval 1, probability 0, space 0, times 0
[ 1526.076162][T13283] CPU: 0 UID: 0 PID: 13283 Comm: syz.6.26914 Not tainted syzkaller #0 PREEMPT(full) 
[ 1526.076190][T13283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1526.076203][T13283] Call Trace:
[ 1526.076211][T13283]  <TASK>
[ 1526.076221][T13283]  dump_stack_lvl+0xe8/0x150
[ 1526.076248][T13283]  should_fail_ex+0x40c/0x560
[ 1526.076274][T13283]  should_failslab+0xa8/0x100
[ 1526.076305][T13283]  ? skb_clone+0x212/0x3a0
[ 1526.076324][T13283]  kmem_cache_alloc_noprof+0x87/0x650
[ 1526.076351][T13283]  ? __pfx_netif_rx_internal+0x10/0x10
[ 1526.076382][T13283]  skb_clone+0x212/0x3a0
[ 1526.076403][T13283]  bpf_clone_redirect+0x170/0x4b0
[ 1526.076433][T13283]  ? bpf_test_run+0x1d1/0x830
[ 1526.076463][T13283]  bpf_prog_bf2aacce0757c8a7+0x65/0x7d
[ 1526.076483][T13283]  ? rescuer_thread+0xd20/0x10b0
[ 1526.076513][T13283]  ? __kernel_text_address+0xd/0x30
[ 1526.076534][T13283]  ? unwind_get_return_address+0x4d/0x90
[ 1526.076558][T13283]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1526.076587][T13283]  ? arch_stack_walk+0xfb/0x150
[ 1526.076615][T13283]  ? ktime_get+0x45/0x220
[ 1526.076641][T13283]  ? rcu_is_watching+0x15/0xb0
[ 1526.076665][T13283]  ? rcu_is_watching+0x15/0xb0
[ 1526.076686][T13283]  ? ktime_get+0x45/0x220
[ 1526.076713][T13283]  ? rcu_is_watching+0x15/0xb0
[ 1526.076733][T13283]  ? ktime_get+0x45/0x220
[ 1526.076759][T13283]  ? trace_irq_enable+0x3b/0x140
[ 1526.076786][T13283]  ? ktime_get+0x45/0x220
[ 1526.076812][T13283]  ? ktime_get+0x45/0x220
[ 1526.076838][T13283]  ? seqcount_lockdep_reader_access+0xea/0x100
[ 1526.076868][T13283]  ? bpf_test_run+0x1d1/0x830
[ 1526.076899][T13283]  ? bpf_test_timer_continue+0x10c/0x320
[ 1526.076921][T13283]  bpf_test_run+0x354/0x830
[ 1526.076962][T13283]  ? __pfx_bpf_test_run+0x10/0x10
[ 1526.077004][T13283]  ? trace_kmem_cache_alloc+0x29/0xe0
[ 1526.077036][T13283]  ? __kasan_krealloc+0xec/0x110
[ 1526.077070][T13283]  ? skb_dst_set+0x72/0x140
[ 1526.077101][T13283]  bpf_prog_test_run_skb+0xe35/0x2230
[ 1526.077142][T13283]  ? __fget_files+0x3a2/0x420
[ 1526.077165][T13283]  ? __fget_files+0x2a/0x420
[ 1526.077190][T13283]  ? __pfx_bpf_prog_test_run_skb+0x10/0x10
[ 1526.077220][T13283]  bpf_prog_test_run+0x2c5/0x340
[ 1526.077253][T13283]  __sys_bpf+0x643/0x950
[ 1526.077281][T13283]  ? __pfx___sys_bpf+0x10/0x10
[ 1526.077317][T13283]  ? ksys_write+0x242/0x270
[ 1526.077346][T13283]  ? __pfx_ksys_write+0x10/0x10
[ 1526.077376][T13283]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1526.077398][T13283]  __x64_sys_bpf+0x7c/0x90
[ 1526.077423][T13283]  do_syscall_64+0x174/0x580
[ 1526.077452][T13283]  ? trace_irq_disable+0x3b/0x140
[ 1526.077479][T13283]  ? clear_bhb_loop+0x40/0x90
[ 1526.077503][T13283]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1526.077524][T13283] RIP: 0033:0x7fd00eb9ce59
[ 1526.077542][T13283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1526.077560][T13283] RSP: 002b:00007fd00fab3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1526.077583][T13283] RAX: ffffffffffffffda RBX: 00007fd00ee15fa0 RCX: 00007fd00eb9ce59
[ 1526.077599][T13283] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a
[ 1526.077612][T13283] RBP: 00007fd00fab3090 R08: 0000000000000000 R09: 0000000000000000
[ 1526.077626][T13283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1526.077642][T13283] R13: 00007fd00ee16038 R14: 00007fd00ee15fa0 R15: 00007ffe2e3017d8
[ 1526.077667][T13283]  </TASK>
[ 1526.822525][T13289] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1526.882119][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1527.038899][T13304] netlink: 212304 bytes leftover after parsing attributes in process `syz.5.26921'.
[ 1527.074715][T13304] openvswitch: netlink: Message has 6 unknown bytes.
[ 1527.137327][T13302] netlink: 6 bytes leftover after parsing attributes in process `syz.1.26920'.
[ 1527.280603][T13315] netlink: 'syz.5.26924': attribute type 268 has an invalid length.
[ 1527.402902][T13321] tipc: Started in network mode
[ 1527.415637][T13321] tipc: Node identity 2a2769eeb20e, cluster identity 4711
[ 1527.444552][T13321] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1527.465498][T13325] syzkaller0: entered promiscuous mode
[ 1527.485115][T13325] syzkaller0: entered allmulticast mode
[ 1527.528733][T13325] tipc: Resetting bearer <eth:syzkaller0>
[ 1527.566345][T13325] tipc: Disabling bearer <eth:syzkaller0>
[ 1527.840463][T13333] netlink: 40 bytes leftover after parsing attributes in process `syz.6.26929'.
[ 1528.003259][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1528.163097][T13350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.26934'.
[ 1528.188868][T13348] Cannot find set identified by id 0 to match
[ 1528.235626][T13354] syzkaller1: entered promiscuous mode
[ 1528.245968][T13354] syzkaller1: entered allmulticast mode
[ 1528.306469][T13358] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1528.618643][T13379] syzkaller0: entered promiscuous mode
[ 1528.636231][T13379] syzkaller0: entered allmulticast mode
[ 1528.738792][T13390] bridge_slave_0: invalid flags given to default FDB implementation
[ 1528.774500][T13390] veth0_virt_wifi: Caught tx_queue_len zero misconfig
[ 1528.782573][T13364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.26942'.
[ 1528.842412][T13394] Cannot find set identified by id 0 to match
[ 1529.140829][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1529.823049][T13445] netlink: 4 bytes leftover after parsing attributes in process `syz.6.26965'.
[ 1529.926923][T13457] netlink: 'syz.5.26971': attribute type 1 has an invalid length.
[ 1529.982495][T13457] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1529.998602][T13464] bond4: (slave veth0_to_bond): Releasing active interface
[ 1530.041368][T13464] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1530.055840][T13467] netlink: 28 bytes leftover after parsing attributes in process `syz.6.26965'.
[ 1530.086668][T13457] macvlan2: entered promiscuous mode
[ 1530.102468][T13457] macvlan2: entered allmulticast mode
[ 1530.120355][T13457] bond6: entered promiscuous mode
[ 1530.128860][T13457] veth0_to_bond: entered promiscuous mode
[ 1530.136387][T13457] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1530.144682][T13457] bond6: left promiscuous mode
[ 1530.150235][T13457] veth0_to_bond: left promiscuous mode
[ 1530.262389][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1530.322883][T13471] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1530.335542][T13471] bond4 (unregistering): Released all slaves
[ 1530.524817][T13503] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:0
[ 1531.094604][T13544] ¾x9ÿ: renamed from bridge_slave_0 (while UP)
[ 1531.135892][T13546] veth1_macvtap: left allmulticast mode
[ 1531.144772][T13546] macsec0: entered promiscuous mode
[ 1531.160155][T13546] veth1_macvtap: entered allmulticast mode
[ 1531.160228][T13548] sctp: [Deprecated]: syz.1.27002 (pid 13548) Use of int in max_burst socket option deprecated.
[ 1531.160228][T13548] Use struct sctp_assoc_value instead
[ 1531.175293][T13546] macsec0: left promiscuous mode
[ 1531.199747][T13546] macsec0: left allmulticast mode
[ 1531.213256][T13546] veth1_macvtap: left allmulticast mode
[ 1531.228611][T13548] x_tables: duplicate underflow at hook 3
[ 1531.258599][T13551] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1531.335856][T13551] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1531.379806][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1531.467015][T13551] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1531.482858][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1531.500298][   T36] veth0_to_bond: left promiscuous mode
[ 1531.505223][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1531.568005][T13551] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1531.602418][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1531.625002][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1531.711966][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1531.728846][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1531.768029][T32039] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.801051][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1531.825283][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1531.836797][T13588] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1531.898325][T13588] bond4 (unregistering): Released all slaves
[ 1531.938178][T32037] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1531.977916][   T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1532.005237][   T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1532.015805][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1532.036784][T13569] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27009'.
[ 1532.060545][T13602] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1532.135796][T13607] lo: entered promiscuous mode
[ 1532.156516][T13607] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1532.529170][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1532.633080][T13635] xt_hashlimit: size too large, truncated to 1048576
[ 1532.831000][T13648] team0 (unregistering): Port device team_slave_0 removed
[ 1532.881745][T13648] team0 (unregistering): Port device team_slave_1 removed
[ 1533.021979][T13656] netlink: 'syz.6.27037': attribute type 1 has an invalid length.
[ 1533.029088][ T5626] Bluetooth: hci3: link tx timeout
[ 1533.035153][ T5626] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.046809][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.052141][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.065355][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.072195][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.080266][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.085465][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.093272][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.098548][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.107831][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.113206][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.121078][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.126263][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.135922][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.144238][T13659] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1533.160301][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.168023][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.173826][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.181627][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.186778][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.194969][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.200358][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.208177][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.213447][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.221959][ T2759] Bluetooth: hci3: link tx timeout
[ 1533.227146][ T2759] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1533.345268][T13670] syzkaller0: entered promiscuous mode
[ 1533.370007][T13670] syzkaller0: entered allmulticast mode
[ 1533.660133][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1533.762527][T13706] netlink: 'syz.6.27051': attribute type 13 has an invalid length.
[ 1534.058704][T13729] netlink: 'syz.2.27057': attribute type 5 has an invalid length.
[ 1534.250758][T13736] openvswitch: netlink: Key 2 has unexpected len 0 expected 4
[ 1534.426793][T13742] tc action pedit unable to extract header offset for header type (0x4)
[ 1534.551112][T13755] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1534.565669][T13755] bond5 (unregistering): Released all slaves
[ 1534.703345][T13758] syzkaller1: entered promiscuous mode
[ 1534.719182][T13758] syzkaller1: entered allmulticast mode
[ 1534.781423][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1535.061176][ T2759] Bluetooth: hci3: command 0x041b tx timeout
[ 1535.405307][T13793] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1535.426263][T13793] bond7 (unregistering): Released all slaves
[ 1535.577620][T13808] netlink: 'syz.5.27083': attribute type 1 has an invalid length.
[ 1535.604610][T13806] netlink: 'syz.0.27082': attribute type 1 has an invalid length.
[ 1535.853853][T13830] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1535.861222][T13830] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1535.919597][T32037] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1535.956750][T13840] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1535.996294][T13840] bond5 (unregistering): Released all slaves
[ 1536.194464][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1536.211355][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1536.218002][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1536.469553][T13862] infiniband syz1: set down
[ 1536.474201][ T5801] xfrm0 speed is unknown, defaulting to 1000
[ 1536.489496][T13862] infiniband syz1: added xfrm0
[ 1536.502680][T13884] __nla_validate_parse: 84 callbacks suppressed
[ 1536.502701][T13884] netlink: 72 bytes leftover after parsing attributes in process `syz.5.27108'.
[ 1536.531697][T13862] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[ 1536.549940][T13862] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[ 1536.582972][T13862] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[ 1536.603727][T13862] RDS/IB: syz1: added
[ 1536.607837][T13862] smc: adding ib device syz1 with port count 1
[ 1536.617821][T13862] smc:    ib device syz1 port 1 has no pnetid
[ 1536.624284][T31844] xfrm0 speed is unknown, defaulting to 1000
[ 1536.633652][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1536.648079][T13890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27111'.
[ 1536.777668][T13896] netlink: 'syz.5.27113': attribute type 83 has an invalid length.
[ 1536.806082][T13896] tcf_pedit_act: 7 callbacks suppressed
[ 1536.806102][T13896] tc action pedit offset must be on 32 bit boundaries
[ 1536.949648][T13902] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1536.957222][T13902] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1537.041706][T11997] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1537.128304][T13902] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1537.143235][ T5626] Bluetooth: hci3: command 0x041b tx timeout
[ 1537.158442][T13902] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1537.352311][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1537.388607][T23233] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1537.410181][T23233] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1537.420476][T23233] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1537.477370][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27118'.
[ 1537.533558][T13933] netlink: 'syz.5.27119': attribute type 1 has an invalid length.
[ 1537.546954][T23233] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1537.590764][T13933] bond7: entered promiscuous mode
[ 1537.596276][T13933] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1537.610360][T13928] netlink: 'syz.1.27117': attribute type 4 has an invalid length.
[ 1537.631783][T13936] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1537.639700][T13936] bond7: (slave vti0): The slave device specified does not support setting the MAC address
[ 1537.650077][T13936] bond7: (slave vti0): Setting fail_over_mac to active for active-backup mode
[ 1537.662617][T13936] bond7: (slave vti0): making interface the new active one
[ 1537.672982][T13936] vti0: entered promiscuous mode
[ 1537.683668][T13936] vti0: left promiscuous mode
[ 1537.754114][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1537.786989][T13940] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27121'.
[ 1537.917632][T13947] netlink: 48 bytes leftover after parsing attributes in process `syz.6.27124'.
[ 1537.967351][T13949] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1537.987481][T13949] bond3 (unregistering): Released all slaves
[ 1538.000725][T13944] netlink: 72 bytes leftover after parsing attributes in process `syz.5.27123'.
[ 1538.026954][T13947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27124'.
[ 1538.027932][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1538.063711][T13947] sit0: Caught tx_queue_len zero misconfig
[ 1538.137725][T13957] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1538.165237][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1538.209658][T13961] netlink: 'syz.6.27128': attribute type 4 has an invalid length.
[ 1538.227643][T13962] netlink: 'syz.6.27128': attribute type 4 has an invalid length.
[ 1538.265324][T13961] netlink: 'syz.6.27128': attribute type 4 has an invalid length.
[ 1538.274273][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1538.529220][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1538.566759][T13979] netlink: 'syz.6.27135': attribute type 1 has an invalid length.
[ 1538.585083][T13978] netlink: 24 bytes leftover after parsing attributes in process `syz.5.27134'.
[ 1538.615201][T13979] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1538.705967][T13979] vlan2: entered promiscuous mode
[ 1538.711668][T13979] bond2: entered promiscuous mode
[ 1538.716958][T13979] vlan2: entered allmulticast mode
[ 1538.724359][T13979] bond2: entered allmulticast mode
[ 1538.731193][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1538.756157][T13982] netlink: 'syz.0.27136': attribute type 1 has an invalid length.
[ 1538.844216][T13982] bond3: entered promiscuous mode
[ 1538.855207][T13982] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1538.885662][T13993] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1538.925231][T13982] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1538.951447][T13982] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address
[ 1538.968548][T13982] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[ 1538.984422][T13982] bond3: (slave ip6gre1): making interface the new active one
[ 1538.992363][T13982] ip6gre1: entered promiscuous mode
[ 1539.000472][T13982] bond3: (slave ip6gre1): Enslaving as an active interface with an up link
[ 1539.010795][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1539.125622][T14003] vlan0: Caught tx_queue_len zero misconfig
[ 1539.161895][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27141'.
[ 1539.197663][T14003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27141'.
[ 1539.223956][ T5626] Bluetooth: hci3: command 0x041b tx timeout
[ 1539.280737][T11997] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1539.306629][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1539.422486][T14018] netlink: 'syz.1.27147': attribute type 2 has an invalid length.
[ 1539.479672][T14016] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1539.504701][T14016] bond8 (unregistering): Released all slaves
[ 1539.556042][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1539.775982][T14032] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1539.799215][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1539.824023][T14041] syzkaller0: entered promiscuous mode
[ 1539.842079][T14041] syzkaller0: entered allmulticast mode
[ 1540.018265][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1540.352834][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1540.459986][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1540.485045][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1540.773493][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1540.890748][T14073] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1540.905204][T14073] bond4 (unregistering): Released all slaves
[ 1540.948443][T13862] xfrm0 speed is unknown, defaulting to 1000
[ 1541.299570][ T5626] Bluetooth: hci3: command 0x041b tx timeout
[ 1541.579504][T16868] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1542.689295][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1543.244685][T14054] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1543.461253][T14093] netlink: 'syz.5.27169': attribute type 10 has an invalid length.
[ 1543.496230][T14096] __nla_validate_parse: 7 callbacks suppressed
[ 1543.496247][T14096] netlink: 64 bytes leftover after parsing attributes in process `syz.1.27167'.
[ 1543.514382][T14098] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1543.542279][T14093] bond0 (unregistering): left promiscuous mode
[ 1543.561334][T14093] bond_slave_0: left promiscuous mode
[ 1543.577136][T14093] bond_slave_1: left promiscuous mode
[ 1543.590268][T14102] netlink: 4 bytes leftover after parsing attributes in process `syz.5.27169'.
[ 1543.615488][T14093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1543.638297][T14093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1543.666220][T14093] bond0 (unregistering): Released all slaves
[ 1543.799141][T14105] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1543.800586][T16868] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1543.855737][T14118] tunl0: Caught tx_queue_len zero misconfig
[ 1543.879157][T14119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27175'.
[ 1543.903200][T14122] netlink: 208240 bytes leftover after parsing attributes in process `syz.2.27177'.
[ 1544.017229][T14126] netlink: 'syz.6.27179': attribute type 21 has an invalid length.
[ 1544.069090][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27179'.
[ 1544.097108][T14136] netlink: 'syz.6.27179': attribute type 21 has an invalid length.
[ 1544.139110][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27179'.
[ 1544.172342][   T36] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1544.182016][T14136] netlink: 'syz.6.27179': attribute type 21 has an invalid length.
[ 1544.190589][   T36] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1544.208135][T14126] netlink: 'syz.6.27179': attribute type 21 has an invalid length.
[ 1544.212020][T14144] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1544.228373][   T36] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1544.238694][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27179'.
[ 1544.253115][   T36] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1544.269952][T14126] netlink: 4 bytes leftover after parsing attributes in process `syz.6.27179'.
[ 1544.416556][T14280] IPVS: starting estimator thread 0...
[ 1544.452998][T14160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.27189'.
[ 1544.473638][T14160] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[ 1544.482732][T14160] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1544.492297][T14165] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1544.509821][T14160] netlink: 152 bytes leftover after parsing attributes in process `syz.2.27189'.
[ 1544.532488][T14158] IPVS: using max 41 ests per chain, 98400 per kthread
[ 1544.822273][T14191] ksmbd: Unknown IPC event: 3, ignore.
[ 1544.969470][T14203] lo: Caught tx_queue_len zero misconfig
[ 1544.999343][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1545.067117][T14213] openvswitch: netlink: Geneve option length err (len 256, max 255).
[ 1545.641582][T14250] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1545.884038][T14295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1545.941920][T14298] set match dimension is over the limit!
[ 1545.987621][T14302] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1546.044564][T16868] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1546.058109][T16868] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1546.132146][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1546.232589][T14310] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1546.442588][T14259] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1546.466892][T14259] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1546.501909][T14259] tipc: Resetting bearer <eth:syzkaller0>
[ 1546.512734][T14331] set match dimension is over the limit!
[ 1546.607957][T14337] netlink: 'syz.6.27241': attribute type 30 has an invalid length.
[ 1546.666537][T14337] bond3: option arp_missed_max: invalid value (0)
[ 1546.673478][T14337] bond3: option arp_missed_max: allowed values 1 - 255
[ 1546.688107][T14337] bond3 (unregistering): Released all slaves
[ 1546.815589][T14352] gretap1: entered promiscuous mode
[ 1546.857087][T14352] batman_adv: batadv0: Adding interface: gretap1
[ 1546.873160][T14352] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[ 1546.904210][T14352] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active
[ 1547.039644][T14367] Cannot find set identified by id 0 to match
[ 1547.075834][T14369] netlink: 'syz.0.27253': attribute type 1 has an invalid length.
[ 1547.215191][T14384] syzkaller1: entered promiscuous mode
[ 1547.222118][T14384] syzkaller1: entered allmulticast mode
[ 1547.241554][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1547.538849][T14410] netlink: 'syz.0.27265': attribute type 11 has an invalid length.
[ 1547.556546][T14412] Cannot find set identified by id 0 to match
[ 1547.617589][T14415] netdevsim netdevsim6: Direct firmware load for . failed with error -2
[ 1547.636117][T14415] netdevsim netdevsim6: Falling back to sysfs fallback for: .
[ 1547.891570][T14433] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1548.339657][T12984] Bluetooth: hci5: command 0x0405 tx timeout
[ 1548.347414][T14259] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1548.359464][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1548.372047][T14259] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1548.393776][T14259] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1548.404016][T14259] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1548.490659][T14259] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1548.516401][T14259] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[ 1548.558153][T14259] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1548.588643][T14259] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1548.677157][T14259] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1548.712084][T14259] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1548.796824][T14492] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1548.856457][T14483] syzkaller0: entered promiscuous mode
[ 1548.868908][T14483] syzkaller0: entered allmulticast mode
[ 1549.209675][T14527] netlink: 'syz.5.27305': attribute type 8 has an invalid length.
[ 1549.234654][T14522] syzkaller1: entered promiscuous mode
[ 1549.252963][T14522] syzkaller1: entered allmulticast mode
[ 1549.371214][T14537] netlink: 'syz.5.27308': attribute type 11 has an invalid length.
[ 1549.499530][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1549.531026][T14548] __nla_validate_parse: 11 callbacks suppressed
[ 1549.531062][T14548] netlink: 28 bytes leftover after parsing attributes in process `syz.6.27310'.
[ 1549.533008][T14547] netlink: 'syz.1.27309': attribute type 3 has an invalid length.
[ 1549.590066][T14547] netlink: 'syz.1.27309': attribute type 3 has an invalid length.
[ 1549.622895][T14547] netlink: 81 bytes leftover after parsing attributes in process `syz.1.27309'.
[ 1549.918506][T14583] netlink: 'syz.6.27319': attribute type 1 has an invalid length.
[ 1549.949514][T14583] netlink: 'syz.6.27319': attribute type 4 has an invalid length.
[ 1549.976135][T14583] netlink: 9491 bytes leftover after parsing attributes in process `syz.6.27319'.
[ 1549.994177][T14585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.27320'.
[ 1550.283461][T14601] netlink: 'syz.0.27324': attribute type 1 has an invalid length.
[ 1550.308534][T14616] netlink: 36 bytes leftover after parsing attributes in process `syz.5.27327'.
[ 1550.314102][T14615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27325'.
[ 1550.332462][T14614] netlink: 52 bytes leftover after parsing attributes in process `syz.6.27328'.
[ 1550.341992][T14614] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27328'.
[ 1550.373083][T14614] syzkaller0: entered promiscuous mode
[ 1550.382699][T14614] syzkaller0: entered allmulticast mode
[ 1550.438707][T14620] netlink: 48 bytes leftover after parsing attributes in process `syz.1.27329'.
[ 1550.651042][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1550.749213][T14646] netlink: 'syz.5.27336': attribute type 2 has an invalid length.
[ 1550.772420][T14646] netlink: 'syz.5.27336': attribute type 2 has an invalid length.
[ 1550.780238][T14647] team0: Device ipvlan0 is already an upper device of the team interface
[ 1550.838587][T14646] netlink: 67 bytes leftover after parsing attributes in process `syz.5.27336'.
[ 1551.058628][T14659] gretap2: entered promiscuous mode
[ 1551.082461][T14659] gretap2: entered allmulticast mode
[ 1551.425904][T14693] syzkaller1: entered promiscuous mode
[ 1551.454107][T14693] syzkaller1: entered allmulticast mode
[ 1551.743695][T14730] set match dimension is over the limit!
[ 1551.793196][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1551.879998][T12984] block nbd5: Receive control failed (result -107)
[ 1551.909694][T14726] nbd5: detected capacity change from 0 to 63
[ 1551.921855][T14745] syzkaller0: entered promiscuous mode
[ 1551.965936][T14745] syzkaller0: entered allmulticast mode
[ 1551.972530][ T2759] block nbd5: Receive control failed (result -104)
[ 1552.615170][T14799] gtp1: entered promiscuous mode
[ 1552.632787][T14799] gtp1: entered allmulticast mode
[ 1552.650244][T14798] syzkaller1: entered promiscuous mode
[ 1552.663510][T14798] syzkaller1: entered allmulticast mode
[ 1552.678537][T14804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1552.832782][T14815] syzkaller0: entered promiscuous mode
[ 1552.847965][T14815] syzkaller0: entered allmulticast mode
[ 1552.857274][T14817] syzkaller0: entered promiscuous mode
[ 1552.864453][T14817] syzkaller0: entered allmulticast mode
[ 1552.929745][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1553.094499][T14834] netlink: 'syz.2.27394': attribute type 11 has an invalid length.
[ 1553.128703][T14832] syzkaller0: entered promiscuous mode
[ 1553.152337][T14832] syzkaller0: entered allmulticast mode
[ 1553.181716][T14831] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1553.233186][T14843] netlink: 'syz.0.27397': attribute type 9 has an invalid length.
[ 1553.283249][T14841] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1553.295308][T14841] bond3 (unregistering): Released all slaves
[ 1553.323186][T14831] tipc: Resetting bearer <eth:syzkaller0>
[ 1553.346569][T14831] tipc: Disabling bearer <eth:syzkaller0>
[ 1553.531307][T14860] syzkaller1: entered promiscuous mode
[ 1553.554432][T14860] syzkaller1: entered allmulticast mode
[ 1553.764011][T14884] sch_tbf: burst 0 is lower than device lo mtu (143) !
[ 1553.784495][T14883] syz_tun: entered allmulticast mode
[ 1553.883680][T14892] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1553.899605][T14892] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1554.062516][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1554.128159][T14910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1554.147259][T14910] bridge_slave_1 (unregistering): left allmulticast mode
[ 1554.166974][T14910] bridge_slave_1 (unregistering): left promiscuous mode
[ 1554.199172][T14910] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1554.461029][T14937] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1554.618722][T14942] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1555.006903][T14965] syzkaller0: entered promiscuous mode
[ 1555.015856][T14965] syzkaller0: entered allmulticast mode
[ 1555.023489][T14963] __nla_validate_parse: 13 callbacks suppressed
[ 1555.023510][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.27438'.
[ 1555.042226][T14970] netlink: 20 bytes leftover after parsing attributes in process `syz.5.27440'.
[ 1555.042873][T14965] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1555.117989][T14962] tipc: Resetting bearer <eth:syzkaller0>
[ 1555.201864][T16868] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1555.214910][T14962] tipc: Disabling bearer <eth:syzkaller0>
[ 1555.216209][T14981] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1555.284917][T14986] netlink: 224 bytes leftover after parsing attributes in process `syz.5.27446'.
[ 1555.296975][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.5.27446'.
[ 1555.378701][T14990] netlink: 28 bytes leftover after parsing attributes in process `syz.2.27450'.
[ 1555.533589][T14993] validate_nla: 1 callbacks suppressed
[ 1555.533612][T14993] netlink: 'syz.1.27448': attribute type 9 has an invalid length.
[ 1555.706505][T15018] netlink: 36 bytes leftover after parsing attributes in process `syz.0.27456'.
[ 1555.719863][T15017] netlink: 'syz.6.27457': attribute type 83 has an invalid length.
[ 1555.747684][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27456'.
[ 1555.887299][T15037] set match dimension is over the limit!
[ 1555.901014][T15039] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27464'.
[ 1555.924446][T15039] netlink: 'syz.6.27464': attribute type 1 has an invalid length.
[ 1555.961081][T15039] netlink: 36 bytes leftover after parsing attributes in process `syz.6.27464'.
[ 1555.985968][T15047] netlink: 'syz.1.27467': attribute type 1 has an invalid length.
[ 1556.014104][T15047] bond4: entered promiscuous mode
[ 1556.020245][T15047] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1556.065284][T15054] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1556.087890][T15055] mac80211_hwsim hwsim118 ÿ
: renamed from wlan1
[ 1556.171450][T15062] netlink: 'syz.5.27469': attribute type 1 has an invalid length.
[ 1556.181346][T15062] netlink: 'syz.5.27469': attribute type 1 has an invalid length.
[ 1556.298033][T15070] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1556.323550][T15070] bond0 (unregistering): Released all slaves
[ 1556.340175][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1556.391570][T15077] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27475'.
[ 1556.590083][T15086] netlink: 'syz.6.27479': attribute type 10 has an invalid length.
[ 1556.612574][T15086] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1556.635378][T15086] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[ 1557.003398][T15104] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1557.023858][T15119] netlink: 'syz.1.27489': attribute type 4 has an invalid length.
[ 1557.035085][T15104] bond4 (unregistering): Released all slaves
[ 1557.257169][T15132] syzkaller1: entered promiscuous mode
[ 1557.264171][T15132] syzkaller1: entered allmulticast mode
[ 1557.462391][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1557.584243][T15160] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1557.692769][T15166] veth1_to_bond: entered allmulticast mode
[ 1557.760591][T15177] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1557.913474][T15187] syzkaller0: entered promiscuous mode
[ 1557.929961][T15187] syzkaller0: entered allmulticast mode
[ 1557.962376][T15191] ip6_vti0: Caught tx_queue_len zero misconfig
[ 1558.375634][T15216] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1558.475589][T15225] syzkaller1: entered promiscuous mode
[ 1558.487260][T15225] syzkaller1: entered allmulticast mode
[ 1558.590723][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1558.730374][T15248] set match dimension is over the limit!
[ 1558.890785][T15259] netlink: 'syz.6.27530': attribute type 1 has an invalid length.
[ 1558.991110][T15259] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1559.005515][T15268] bond5: (slave ip6gretap1): making interface the new active one
[ 1559.014510][T15268] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[ 1559.027575][T15275] xt_recent: Unsupported userspace flags (000000b1)
[ 1559.545667][T15290] lo speed is unknown, defaulting to 1000
[ 1559.626069][T15304] netlink: 'syz.5.27546': attribute type 11 has an invalid length.
[ 1559.712170][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1559.741235][T15307] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1559.997976][T15327] vxcan3: entered allmulticast mode
[ 1560.051565][T15328] vxcan5: entered allmulticast mode
[ 1560.268191][T15290] xfrm0 speed is unknown, defaulting to 1000
[ 1560.291559][T15347] syzkaller1: entered promiscuous mode
[ 1560.297290][T15347] syzkaller1: entered allmulticast mode
[ 1560.552083][T15361] __nla_validate_parse: 12 callbacks suppressed
[ 1560.552107][T15361] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27564'.
[ 1560.890668][T32037] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1561.057533][T15389] veth0: entered promiscuous mode
[ 1561.070958][T15403] netlink: 'syz.6.27573': attribute type 2 has an invalid length.
[ 1561.085421][T15403] netlink: 188 bytes leftover after parsing attributes in process `syz.6.27573'.
[ 1561.146954][T15394] veth0: left promiscuous mode
[ 1561.254388][T15410] netlink: 68 bytes leftover after parsing attributes in process `syz.2.27575'.
[ 1561.806142][T15452] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27589'.
[ 1561.852931][T15452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.27589'.
[ 1561.901686][T15458] netlink: 'syz.5.27592': attribute type 8 has an invalid length.
[ 1561.956129][T15458] No such timeout policy "syz1"
[ 1561.987941][T15461] netlink: 'syz.5.27592': attribute type 8 has an invalid length.
[ 1562.019349][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1562.200158][T15475] IPVS: sh: FWM 3 0x00000003 - no destination available
[ 1562.247466][T15477] syzkaller1: entered promiscuous mode
[ 1562.262425][T15477] syzkaller1: entered allmulticast mode
[ 1562.278350][T15481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27600'.
[ 1562.307497][T15481] netlink: 27 bytes leftover after parsing attributes in process `syz.1.27600'.
[ 1562.361177][T15481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.27600'.
[ 1562.577095][T15499] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27608'.
[ 1562.721123][T15519] set match dimension is over the limit!
[ 1562.761700][T15520] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1562.887535][T15530] veth0: entered promiscuous mode
[ 1562.896743][T15533] netlink: 216 bytes leftover after parsing attributes in process `syz.1.27620'.
[ 1563.104021][T15528] veth0: left promiscuous mode
[ 1563.137437][T15550] xt_hashlimit: size too large, truncated to 1048576
[ 1563.149959][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1563.257752][T15558] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1563.275585][T15559] syzkaller0: entered promiscuous mode
[ 1563.297706][T15559] syzkaller0: entered allmulticast mode
[ 1563.717336][T15588] netlink: 'syz.5.27634': attribute type 7 has an invalid length.
[ 1563.771030][T15588] syzkaller0: entered promiscuous mode
[ 1563.784665][T15588] syzkaller0: entered allmulticast mode
[ 1563.827776][T15600] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1563.844261][T15600] bond4 (unregistering): Released all slaves
[ 1564.135137][T15630] bond0: Caught tx_queue_len zero misconfig
[ 1564.244205][T15635] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1564.265794][T15635] bond5 (unregistering): Released all slaves
[ 1564.281186][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1564.643927][T15665] netlink: 'syz.2.27656': attribute type 1 has an invalid length.
[ 1564.721723][T15665] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1564.731822][T15671] bond0: Caught tx_queue_len zero misconfig
[ 1564.770330][T15665] vlan0: entered promiscuous mode
[ 1564.776719][T15665] bond6: entered promiscuous mode
[ 1564.783335][T15665] vlan0: entered allmulticast mode
[ 1564.788539][T15665] bond6: entered allmulticast mode
[ 1564.854781][T15680] syzkaller0: entered promiscuous mode
[ 1564.873554][T15680] syzkaller0: entered allmulticast mode
[ 1564.905445][T15680] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1564.953039][T15696] xt_hashlimit: size too large, truncated to 1048576
[ 1564.957572][T15679] tipc: Resetting bearer <eth:syzkaller0>
[ 1564.997124][T15679] tipc: Disabling bearer <eth:syzkaller0>
[ 1565.409996][T32037] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1566.087909][T15735] set match dimension is over the limit!
[ 1566.212996][T15740] netlink: 'syz.5.27682': attribute type 1 has an invalid length.
[ 1566.279636][T15749] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1566.291022][T15740] bond0: entered promiscuous mode
[ 1566.297805][T15747] netlink: 'syz.0.27685': attribute type 1 has an invalid length.
[ 1566.344801][T15746] __nla_validate_parse: 204 callbacks suppressed
[ 1566.344825][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27682'.
[ 1566.361126][T15740] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1566.394397][T15740] bond0: (slave bridge5): making interface the new active one
[ 1566.402375][T15740] bridge5: entered promiscuous mode
[ 1566.409225][T15740] bond0: (slave bridge5): Enslaving as an active interface with an up link
[ 1566.422965][T15746] netlink: 12 bytes leftover after parsing attributes in process `syz.5.27682'.
[ 1566.448388][T15747] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address
[ 1566.467096][T15747] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode
[ 1566.480198][T15747] bond4: (slave ip6gre2): making interface the new active one
[ 1566.493348][T15757] netlink: 216 bytes leftover after parsing attributes in process `syz.1.27686'.
[ 1566.514024][T15747] bond4: (slave ip6gre2): Enslaving as an active interface with an up link
[ 1566.522903][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1566.689115][T15764] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27690'.
[ 1566.700326][T15763] xt_ipcomp: unknown flags 1D
[ 1566.706573][T15763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27687'.
[ 1567.619278][T32037] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1568.719249][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1569.819231][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1570.919300][T32037] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1572.019280][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1573.119292][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1574.219495][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1575.319256][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1576.429444][T32037] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1577.530615][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1578.629686][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1579.730928][T32037] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1580.829583][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1581.929739][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1582.110779][   T25] block nbd5: Connection timed out, retrying (0/2 alive)
[ 1582.118099][   T25] block nbd5: Connection timed out, retrying (0/2 alive)
[ 1582.125993][   T25] block nbd5: Connection timed out, retrying (0/2 alive)
[ 1582.133638][ T1757] block nbd5: Dead connection, failed to find a fallback
[ 1582.141404][ T1757] block nbd5: shutting down sockets
[ 1582.146676][ T1757] blk_print_req_error: 138 callbacks suppressed
[ 1582.146690][ T1757] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.162808][   T25] block nbd5: Connection timed out, retrying (0/2 alive)
[ 1582.170582][ T1757] buffer_io_error: 138 callbacks suppressed
[ 1582.170599][ T1757] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1582.185279][ T1757] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.194489][ T1757] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1582.202373][ T1757] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.212000][ T1757] Buffer I/O error on dev nbd5, logical block 3, async page read
[ 1582.220343][ T1757] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.229686][ T1757] Buffer I/O error on dev nbd5, logical block 2, async page read
[ 1582.237591][T14263] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.247319][T14263] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1582.255471][T14263] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.267077][T14263] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1582.275884][T14263] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.285296][T14263] Buffer I/O error on dev nbd5, logical block 2, async page read
[ 1582.293458][T14263] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.303229][T14263] Buffer I/O error on dev nbd5, logical block 3, async page read
[ 1582.311351][T14263] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.320566][T14263] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1582.328405][T14263] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[ 1582.338148][T14263] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1582.347728][T14263] ldm_validate_partition_table(): Disk read failed.
[ 1582.356068][T14263] Dev nbd5: unable to read RDB block 0
[ 1582.363530][T14263]  nbd5: unable to read partition table
[ 1582.374197][T14263] ldm_validate_partition_table(): Disk read failed.
[ 1582.382717][T14263] Dev nbd5: unable to read RDB block 0
[ 1582.390755][T14263]  nbd5: unable to read partition table
[ 1583.039503][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1584.139227][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1585.239702][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1586.340808][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1587.439232][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1588.539619][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1589.639457][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1590.739181][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1591.839636][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1592.939194][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1594.039386][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1595.139789][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1596.239266][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1597.339690][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1598.439756][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1599.539644][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1600.639187][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1601.739871][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1602.839507][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1603.941176][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1605.049290][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1606.149516][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1607.249323][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1608.349481][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1609.459681][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1610.559963][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1611.659338][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1612.759475][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1613.639343][T15799] netlink: 132 bytes leftover after parsing attributes in process `syz.6.27699'.
[ 1613.687573][T15802] netlink: 24 bytes leftover after parsing attributes in process `syz.0.27701'.
[ 1613.860041][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1613.977956][T15822] netlink: 116 bytes leftover after parsing attributes in process `syz.0.27704'.
[ 1614.178492][T15826] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1614.193395][T15826] bond5 (unregistering): Released all slaves
[ 1614.445855][T15841] syzkaller1: entered promiscuous mode
[ 1614.462198][T15841] syzkaller1: entered allmulticast mode
[ 1614.525037][T15847] netlink: 24 bytes leftover after parsing attributes in process `syz.6.27714'.
[ 1614.559943][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27714'.
[ 1614.645122][T15857] : entered promiscuous mode
[ 1614.804355][T15866] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1614.837306][T15866] bond8 (unregistering): Released all slaves
[ 1614.929928][T15883] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1614.984499][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1615.087610][T15892] FAULT_INJECTION: forcing a failure.
[ 1615.087610][T15892] name failslab, interval 1, probability 0, space 0, times 0
[ 1615.110027][T15892] CPU: 0 UID: 0 PID: 15892 Comm: syz.1.27730 Not tainted syzkaller #0 PREEMPT(full) 
[ 1615.110059][T15892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1615.110072][T15892] Call Trace:
[ 1615.110081][T15892]  <TASK>
[ 1615.110091][T15892]  dump_stack_lvl+0xe8/0x150
[ 1615.110123][T15892]  should_fail_ex+0x40c/0x560
[ 1615.110151][T15892]  should_failslab+0xa8/0x100
[ 1615.110184][T15892]  __kmalloc_noprof+0xe8/0x750
[ 1615.110211][T15892]  ? __pfx_dynamic_dname+0x10/0x10
[ 1615.110230][T15892]  ? tomoyo_encode+0x2ad/0x570
[ 1615.110255][T15892]  tomoyo_encode+0x2ad/0x570
[ 1615.110279][T15892]  tomoyo_realpath_from_path+0x5fa/0x640
[ 1615.110305][T15892]  ? tomoyo_path_number_perm+0x219/0x5f0
[ 1615.110334][T15892]  tomoyo_path_number_perm+0x246/0x5f0
[ 1615.110363][T15892]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1615.110391][T15892]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1615.110420][T15892]  ? preempt_count_add+0x91/0x190
[ 1615.110451][T15892]  ? rcu_is_watching+0x15/0xb0
[ 1615.110476][T15892]  ? hook_file_ioctl+0x1f0/0x5c0
[ 1615.110515][T15892]  ? lock_release+0x4b/0x3c0
[ 1615.110546][T15892]  ? __fget_files+0x2a/0x420
[ 1615.110567][T15892]  ? __fget_files+0x3a2/0x420
[ 1615.110589][T15892]  ? __fget_files+0x2a/0x420
[ 1615.110613][T15892]  security_file_ioctl+0xc3/0x2a0
[ 1615.110642][T15892]  __se_sys_ioctl+0x47/0x170
[ 1615.110671][T15892]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1615.110694][T15892]  do_syscall_64+0x174/0x580
[ 1615.110725][T15892]  ? trace_irq_disable+0x3b/0x140
[ 1615.110755][T15892]  ? clear_bhb_loop+0x40/0x90
[ 1615.110778][T15892]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1615.110800][T15892] RIP: 0033:0x7f79b1d9ce59
[ 1615.110820][T15892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1615.110839][T15892] RSP: 002b:00007f79b2c7b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1615.110863][T15892] RAX: ffffffffffffffda RBX: 00007f79b2015fa0 RCX: 00007f79b1d9ce59
[ 1615.110878][T15892] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000008
[ 1615.110892][T15892] RBP: 00007f79b2c7b090 R08: 0000000000000000 R09: 0000000000000000
[ 1615.110917][T15892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1615.110930][T15892] R13: 00007f79b2016038 R14: 00007f79b2015fa0 R15: 00007ffc8f34aff8
[ 1615.110956][T15892]  </TASK>
[ 1615.110976][T15892] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1615.333942][T15901] netlink: 'syz.0.27732': attribute type 10 has an invalid length.
[ 1615.411860][T15901] netlink: 40 bytes leftover after parsing attributes in process `syz.0.27732'.
[ 1615.431874][T15901] geneve1: left promiscuous mode
[ 1615.443265][T15901] geneve1: left allmulticast mode
[ 1615.599676][T15911] netlink: 104 bytes leftover after parsing attributes in process `syz.0.27735'.
[ 1615.653720][T15905] openvswitch: netlink: EtherType 50a is less than min 600
[ 1615.723290][T15887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1615.861233][T15927] syzkaller0: entered promiscuous mode
[ 1615.877009][T15927] syzkaller0: entered allmulticast mode
[ 1615.927414][T15927] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1615.961429][T15926] tipc: Resetting bearer <eth:syzkaller0>
[ 1615.968309][T15934] netlink: 212360 bytes leftover after parsing attributes in process `syz.5.27744'.
[ 1615.983694][T15926] tipc: Disabling bearer <eth:syzkaller0>
[ 1616.116455][T15947] FAULT_INJECTION: forcing a failure.
[ 1616.116455][T15947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1616.137436][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1616.162001][T15947] CPU: 1 UID: 0 PID: 15947 Comm: syz.2.27747 Not tainted syzkaller #0 PREEMPT(full) 
[ 1616.162032][T15947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1616.162047][T15947] Call Trace:
[ 1616.162058][T15947]  <TASK>
[ 1616.162068][T15947]  dump_stack_lvl+0xe8/0x150
[ 1616.162098][T15947]  should_fail_ex+0x40c/0x560
[ 1616.162123][T15947]  _copy_from_user+0x2d/0xb0
[ 1616.162152][T15947]  wext_handle_ioctl+0xc7/0x1d0
[ 1616.162180][T15947]  ? __pfx_wext_handle_ioctl+0x10/0x10
[ 1616.162202][T15947]  ? hook_file_ioctl+0x1f0/0x5c0
[ 1616.162241][T15947]  sock_ioctl+0x159/0x7e0
[ 1616.162264][T15947]  ? lock_release+0x4b/0x3c0
[ 1616.162295][T15947]  ? __pfx_sock_ioctl+0x10/0x10
[ 1616.162316][T15947]  ? __fget_files+0x2a/0x420
[ 1616.162339][T15947]  ? __fget_files+0x3a2/0x420
[ 1616.162361][T15947]  ? __fget_files+0x2a/0x420
[ 1616.162392][T15947]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1616.162422][T15947]  ? __pfx_sock_ioctl+0x10/0x10
[ 1616.162443][T15947]  __se_sys_ioctl+0xfc/0x170
[ 1616.162471][T15947]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1616.162493][T15947]  do_syscall_64+0x174/0x580
[ 1616.162520][T15947]  ? trace_irq_disable+0x3b/0x140
[ 1616.162549][T15947]  ? clear_bhb_loop+0x40/0x90
[ 1616.162572][T15947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1616.162593][T15947] RIP: 0033:0x7f2dfd19ce59
[ 1616.162612][T15947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1616.162631][T15947] RSP: 002b:00007f2dfdf74028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1616.162654][T15947] RAX: ffffffffffffffda RBX: 00007f2dfd415fa0 RCX: 00007f2dfd19ce59
[ 1616.162670][T15947] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000008
[ 1616.162683][T15947] RBP: 00007f2dfdf74090 R08: 0000000000000000 R09: 0000000000000000
[ 1616.162697][T15947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1616.162710][T15947] R13: 00007f2dfd416038 R14: 00007f2dfd415fa0 R15: 00007fffe526d3e8
[ 1616.162736][T15947]  </TASK>
[ 1616.408211][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27749'.
[ 1616.427634][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27749'.
[ 1616.657493][T15964] mac80211_hwsim hwsim132 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1617.140666][T15995] openvswitch: netlink: Flow key attr not present in new flow.
[ 1617.399645][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1618.510605][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1619.609804][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1619.752935][T16000] FAULT_INJECTION: forcing a failure.
[ 1619.752935][T16000] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1619.767024][T16000] CPU: 1 UID: 0 PID: 16000 Comm: syz.5.27765 Not tainted syzkaller #0 PREEMPT(full) 
[ 1619.767063][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1619.767077][T16000] Call Trace:
[ 1619.767086][T16000]  <TASK>
[ 1619.767094][T16000]  dump_stack_lvl+0xe8/0x150
[ 1619.767123][T16000]  should_fail_ex+0x40c/0x560
[ 1619.767149][T16000]  _copy_from_user+0x2d/0xb0
[ 1619.767177][T16000]  do_sock_getsockopt+0x200/0x7e0
[ 1619.767211][T16000]  ? __pfx_do_sock_getsockopt+0x10/0x10
[ 1619.767239][T16000]  ? rcu_is_watching+0x15/0xb0
[ 1619.767264][T16000]  ? lock_release+0x4b/0x3c0
[ 1619.767299][T16000]  ? __fget_files+0x3a2/0x420
[ 1619.767322][T16000]  ? __fget_files+0x2a/0x420
[ 1619.767349][T16000]  __x64_sys_getsockopt+0x1a4/0x240
[ 1619.767382][T16000]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1619.767404][T16000]  do_syscall_64+0x174/0x580
[ 1619.767432][T16000]  ? trace_irq_disable+0x3b/0x140
[ 1619.767461][T16000]  ? clear_bhb_loop+0x40/0x90
[ 1619.767484][T16000]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1619.767505][T16000] RIP: 0033:0x7f49a339ce59
[ 1619.767523][T16000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1619.767542][T16000] RSP: 002b:00007f49a430d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[ 1619.767565][T16000] RAX: ffffffffffffffda RBX: 00007f49a3615fa0 RCX: 00007f49a339ce59
[ 1619.767581][T16000] RDX: 0000000000002720 RSI: 0000200000000114 RDI: 0000000000000003
[ 1619.767595][T16000] RBP: 00007f49a430d090 R08: 0000200000000040 R09: 0000000000000000
[ 1619.767609][T16000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1619.767622][T16000] R13: 00007f49a3616038 R14: 00007f49a3615fa0 R15: 00007ffcf742a198
[ 1619.767648][T16000]  </TASK>
[ 1619.997449][T16005] xt_hashlimit: size too large, truncated to 1048576
[ 1620.005306][T16006] xt_hashlimit: size too large, truncated to 1048576
[ 1620.111830][T16016] netlink: 'syz.0.27771': attribute type 23 has an invalid length.
[ 1620.394500][T16039] netlink: 'syz.6.27779': attribute type 1 has an invalid length.
[ 1620.408439][T16039] __nla_validate_parse: 4 callbacks suppressed
[ 1620.408458][T16039] netlink: 96 bytes leftover after parsing attributes in process `syz.6.27779'.
[ 1620.425538][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27782'.
[ 1620.425595][T16043] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27782'.
[ 1620.449616][T16039] netlink: 'syz.6.27779': attribute type 1 has an invalid length.
[ 1620.457614][T16039] netlink: 'syz.6.27779': attribute type 8 has an invalid length.
[ 1620.465927][T16039] netlink: 582 bytes leftover after parsing attributes in process `syz.6.27779'.
[ 1620.475655][T16039] netlink: 1 bytes leftover after parsing attributes in process `syz.6.27779'.
[ 1620.494320][T16042] syzkaller1: entered promiscuous mode
[ 1620.532995][T16042] syzkaller1: entered allmulticast mode
[ 1620.540174][T16046] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.27783'.
[ 1620.573097][T16046] netlink: Unknown conntrack attr (0)
[ 1620.604193][T16050] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1620.707718][T16057] netlink: 76 bytes leftover after parsing attributes in process `syz.2.27788'.
[ 1620.731938][T16055] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27787'.
[ 1620.746267][T16059] netlink: 'syz.6.27790': attribute type 1 has an invalid length.
[ 1620.757464][T16061] netlink: 'syz.0.27789': attribute type 24 has an invalid length.
[ 1620.802487][T16059] bond4: entered promiscuous mode
[ 1620.808126][T16059] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1620.873058][T16059] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[ 1620.896876][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1620.931258][T16059] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[ 1620.942311][T16059] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[ 1620.995515][T16072] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1621.071843][T16089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.27796'.
[ 1621.103520][T16091] netlink: 8 bytes leftover after parsing attributes in process `syz.6.27797'.
[ 1621.167892][T16091] RDS: rds_bind could not find a transport for ::ffff:172.30.1.7, load rds_tcp or rds_rdma?
[ 1621.332358][T16098] netlink: Unknown conntrack attr (0)
[ 1621.345819][T16102] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1621.360182][T16105] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048)
[ 1621.742880][T16131] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1621.788699][T16131] bond7 (unregistering): Released all slaves
[ 1621.962225][T16152] syzkaller0: entered promiscuous mode
[ 1621.975465][T16152] syzkaller0: entered allmulticast mode
[ 1622.030635][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1622.383310][T16192] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1622.466961][T16192] bond8 (unregistering): Released all slaves
[ 1622.815805][T16217] xt_hashlimit: size too large, truncated to 1048576
[ 1623.016500][T16230] netlink: 'syz.6.27842': attribute type 6 has an invalid length.
[ 1623.027942][T16230] Cannot find set identified by id 65535 to match
[ 1623.111699][T16230] xt_CHECKSUM: unsupported CHECKSUM operation 68
[ 1623.162545][T30819] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1623.384987][T16228] lo speed is unknown, defaulting to 1000
[ 1624.152496][T16307] syzkaller0: entered promiscuous mode
[ 1624.158251][T16307] syzkaller0: entered allmulticast mode
[ 1624.191537][T16228] xfrm0 speed is unknown, defaulting to 1000
[ 1624.207462][T16314] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 1624.283002][T16316] netlink: 'syz.1.27864': attribute type 2 has an invalid length.
[ 1624.296293][T16316] netlink: 'syz.1.27864': attribute type 1 has an invalid length.
[ 1624.304743][   T36] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1624.393216][T16324] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[ 1624.416673][T16324] bond5 (unregistering): Released all slaves
[ 1624.518373][T16330] xt_TCPMSS: Only works on TCP SYN packets
[ 1624.783264][T16350] syzkaller0: entered promiscuous mode
[ 1624.791477][T16350] syzkaller0: entered allmulticast mode
[ 1625.282352][T16362] openvswitch: netlink: Flow key attr not present in new flow.
[ 1625.419159][T16651] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1625.486448][T16373] syzkaller1: entered promiscuous mode
[ 1625.497386][T16373] syzkaller1: entered allmulticast mode
[ 1626.045958][T16405] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1626.115458][T16405] bond5 (unregistering): Released all slaves
[ 1626.178158][T16411] __nla_validate_parse: 16 callbacks suppressed
[ 1626.178180][T16411] netlink: 12 bytes leftover after parsing attributes in process `syz.2.27892'.
[ 1626.265968][T16415] netlink: 'syz.5.27894': attribute type 1 has an invalid length.
[ 1626.288778][T16415] netlink: 224 bytes leftover after parsing attributes in process `syz.5.27894'.
[ 1626.334341][T16417] netlink: 'syz.5.27894': attribute type 1 has an invalid length.
[ 1626.363649][T16417] netlink: 224 bytes leftover after parsing attributes in process `syz.5.27894'.
[ 1626.508325][T16434] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.27901'.
[ 1626.519802][T16434] netlink: Unknown conntrack attr (0)
[ 1626.540372][T16868] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1626.652623][T16441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.27902'.
[ 1626.874682][T16458] netlink: 'syz.6.27908': attribute type 1 has an invalid length.
[ 1626.915339][T16458] netlink: 228 bytes leftover after parsing attributes in process `syz.6.27908'.
[ 1626.950765][T16467] netlink: 44 bytes leftover after parsing attributes in process `syz.6.27908'.
[ 1626.994790][T16467] netlink: 21 bytes leftover after parsing attributes in process `syz.6.27908'.
[ 1627.016845][T16467] netlink: 21 bytes leftover after parsing attributes in process `syz.6.27908'.
[ 1627.044810][T16472] team0: Device lo is loopback device. Loopback devices can't be added as a team port
[ 1627.074235][T16472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1627.324666][T16494] netlink: 'syz.2.27921': attribute type 23 has an invalid length.
[ 1627.464261][T16502] syzkaller0: entered promiscuous mode
[ 1627.486724][T16502] syzkaller0: entered allmulticast mode
[ 1627.546667][T16509] x_tables: duplicate underflow at hook 3
[ 1627.593508][T16515] x_tables: duplicate underflow at hook 3
[ 1627.669992][T16868] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1627.731975][T16529] netlink: 'syz.0.27933': attribute type 1 has an invalid length.
[ 1627.816138][T16535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27933'.
[ 1627.944193][T16543] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[ 1627.963002][T16543] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1628.038545][T16555] netlink: Unknown conntrack attr (0)
[ 1628.048275][T16552] syzkaller0: entered promiscuous mode
[ 1628.062236][T16552] syzkaller0: entered allmulticast mode
[ 1628.084485][T16552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1628.103044][T16551] tipc: Resetting bearer <eth:syzkaller0>
[ 1628.117273][T16551] tipc: Disabling bearer <eth:syzkaller0>
[ 1628.143027][T16559] syzkaller1: entered promiscuous mode
[ 1628.148748][T16559] syzkaller1: entered allmulticast mode
[ 1628.277087][T16567] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[ 1628.351426][T16571] FAULT_INJECTION: forcing a failure.
[ 1628.351426][T16571] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1628.364713][T16571] CPU: 1 UID: 0 PID: 16571 Comm: syz.5.27950 Not tainted syzkaller #0 PREEMPT(full) 
[ 1628.364742][T16571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1628.364756][T16571] Call Trace:
[ 1628.364765][T16571]  <TASK>
[ 1628.364774][T16571]  dump_stack_lvl+0xe8/0x150
[ 1628.364803][T16571]  should_fail_ex+0x40c/0x560
[ 1628.364829][T16571]  _copy_from_user+0x2d/0xb0
[ 1628.364857][T16571]  ___sys_sendmsg+0x1c6/0x360
[ 1628.364898][T16571]  ? rcu_is_watching+0x15/0xb0
[ 1628.364919][T16571]  ? get_pid_task+0x20/0x1f0
[ 1628.364941][T16571]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1628.364974][T16571]  ? rcu_is_watching+0x15/0xb0
[ 1628.365010][T16571]  ? __fget_files+0x2a/0x420
[ 1628.365033][T16571]  ? __fget_files+0x3a2/0x420
[ 1628.365062][T16571]  __x64_sys_sendmsg+0x1b1/0x290
[ 1628.365094][T16571]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1628.365132][T16571]  ? rcu_is_watching+0x15/0xb0
[ 1628.365153][T16571]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1628.365176][T16571]  do_syscall_64+0x174/0x580
[ 1628.365202][T16571]  ? trace_irq_disable+0x3b/0x140
[ 1628.365234][T16571]  ? clear_bhb_loop+0x40/0x90
[ 1628.365257][T16571]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1628.365275][T16571] RIP: 0033:0x7f49a339ce59
[ 1628.365294][T16571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1628.365310][T16571] RSP: 002b:00007f49a430d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1628.365333][T16571] RAX: ffffffffffffffda RBX: 00007f49a3615fa0 RCX: 00007f49a339ce59
[ 1628.365348][T16571] RDX: 000000002400c804 RSI: 0000200000000900 RDI: 000000000000000b
[ 1628.365362][T16571] RBP: 00007f49a430d090 R08: 0000000000000000 R09: 0000000000000000
[ 1628.365376][T16571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1628.365389][T16571] R13: 00007f49a3616038 R14: 00007f49a3615fa0 R15: 00007ffcf742a198
[ 1628.365421][T16571]  </TASK>
[ 1628.777178][T16578] netlink: Unknown conntrack attr (0)
[ 1628.803856][T12984] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1628.814168][T12984] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1628.828718][T12984] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1628.840819][T12984] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1628.848334][T12984] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1628.903812][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1628.912205][ T2759] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1628.921997][ T2759] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1628.929677][ T2759] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1628.941458][ T2759] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1628.950291][ T2759] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1629.054001][T16584] syzkaller0: entered promiscuous mode
[ 1629.078595][T16584] syzkaller0: entered allmulticast mode
[ 1629.326927][T16868] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1629.350449][T16610] netlink: 'syz.5.27960': attribute type 9 has an invalid length.
[ 1629.589767][T16630] netlink: Unknown conntrack attr (0)
[ 1629.704343][T16632] netlink: 'syz.5.27968': attribute type 4 has an invalid length.
[ 1629.755493][T16639] openvswitch: netlink: Key 6 has unexpected len 57 expected 2
[ 1629.852086][T16579] lo speed is unknown, defaulting to 1000
[ 1629.900230][T16646] netlink: 'syz.5.27973': attribute type 1 has an invalid length.
[ 1630.044718][T16579] xfrm0 speed is unknown, defaulting to 1000
[ 1630.059664][T23233] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1630.278908][T16579] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1630.286499][T16579] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1630.294100][T16579] bridge_slave_0: entered allmulticast mode
[ 1630.301904][T16579] bridge_slave_0: entered promiscuous mode
[ 1630.310133][T16579] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1630.317286][T16579] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1630.325141][T16579] bridge_slave_1: entered allmulticast mode
[ 1630.332942][T16579] bridge_slave_1: entered promiscuous mode
[ 1630.357040][T16579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1630.369446][T16579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1630.395348][T16579] team0: Port device team_slave_0 added
[ 1630.403793][T16579] team0: Port device team_slave_1 added
[ 1630.427510][T16579] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1630.434616][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1630.461537][T16579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1630.476659][T16579] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1630.484694][T16579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1630.511477][T16579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1630.550154][T16579] hsr_slave_0: entered promiscuous mode
[ 1630.556763][T16579] hsr_slave_1: entered promiscuous mode
[ 1630.563248][T16579] debugfs: 'hsr0' already exists in 'hsr'
[ 1630.569991][T16579] Cannot create hsr debugfs directory
[ 1630.595587][    C0] vxcan1: j1939_tp_rxtimer: 0xffff888028078400: rx timeout, send abort
[ 1630.604514][    C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888028078400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[ 1630.979636][T12984] Bluetooth: hci7: command tx timeout
[ 1631.189692][ T9605] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1632.228099][T16604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1632.238393][T16579] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1632.289357][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1632.307072][T16579] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1632.325495][T16579] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1632.365773][T16579] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1632.414419][T16579] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1632.425612][T16579] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1632.443811][T16579] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1632.455652][T16579] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1632.465453][T16664] syzkaller0: entered promiscuous mode
[ 1632.472463][T16664] syzkaller0: entered allmulticast mode
[ 1632.593783][T16579] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1632.648150][T16579] 8021q: adding VLAN 0 to HW filter on device team0
[ 1632.674017][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1632.681254][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1632.743840][T30819] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1632.751125][T30819] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1632.816765][T16692] netlink: 'syz.1.27984': attribute type 2 has an invalid length.
[ 1633.031069][T16706] netlink: 'syz.0.27988': attribute type 21 has an invalid length.
[ 1633.064155][T12984] Bluetooth: hci7: command tx timeout
[ 1633.117242][T16714] syzkaller0: entered promiscuous mode
[ 1633.128815][T16714] syzkaller0: entered allmulticast mode
[ 1633.208795][T16722] Bluetooth: MGMT ver 1.23
[ 1633.375589][T16730] netlink: 'syz.5.27996': attribute type 1 has an invalid length.
[ 1633.382927][T16731] __nla_validate_parse: 9 callbacks suppressed
[ 1633.382982][T16731] netlink: 28 bytes leftover after parsing attributes in process `syz.0.27994'.
[ 1633.408497][T16731] team0: Caught tx_queue_len zero misconfig
[ 1633.429403][T32039] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1633.435109][T16733] syzkaller0: entered promiscuous mode
[ 1633.445970][T16733] syzkaller0: entered allmulticast mode
[ 1633.489691][T16733] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1633.507152][T16732] tipc: Resetting bearer <eth:syzkaller0>
[ 1633.523437][T16732] tipc: Disabling bearer <eth:syzkaller0>
[ 1633.543692][T16579] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1633.595851][T16579] veth0_vlan: entered promiscuous mode
[ 1633.631338][T16579] veth1_vlan: entered promiscuous mode
[ 1633.702769][T16579] veth0_macvtap: entered promiscuous mode
[ 1633.732798][T16579] veth1_macvtap: entered promiscuous mode
[ 1633.747988][T16747] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[ 1633.814495][T16751] netlink: 'syz.5.28003': attribute type 39 has an invalid length.
[ 1633.825150][T16579] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1633.849377][T16579] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1633.879084][T16765] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1633.946095][T16778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1633.990672][T16789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1634.001608][T16789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1634.031419][T16779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1634.041420][T16779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1634.060359][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28005'.
[ 1634.132043][T16779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1634.141807][T16779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1634.377679][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28014'.
[ 1634.393880][T16812] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1634.549159][T16775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1634.571773][T16825] netlink: 148 bytes leftover after parsing attributes in process `syz.5.28016'.
[ 1634.628217][T16827] netlink: 24 bytes leftover after parsing attributes in process `syz.5.28018'.
[ 1634.672363][T16827] xfrm2: entered allmulticast mode
[ 1634.907785][T16847] vxcan1: tx drop: invalid da for name 0x0000000000000001
[ 1634.948211][T16853] mac80211_hwsim hwsim116 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1635.106543][T16869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28029'.
[ 1635.139670][T12984] Bluetooth: hci7: command tx timeout
[ 1635.227608][T16873] veth0_to_hsr: Caught tx_queue_len zero misconfig
[ 1635.276483][T16879] netlink: 27 bytes leftover after parsing attributes in process `syz.2.28032'.
[ 1635.292269][T16869] netlink: 'syz.1.28029': attribute type 1 has an invalid length.
[ 1635.310750][T16879] 8021q: VLANs not supported on ipvlan0
[ 1635.381379][T16884] bond5: option lp_interval: invalid value (0)
[ 1635.387766][T16884] bond5: option lp_interval: allowed values 1 - 2147483647
[ 1635.403262][T16884] bond5 (unregistering): Released all slaves
[ 1635.521448][T16900] mac80211_hwsim hwsim138 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1635.597826][T16904] netlink: 'syz.5.28039': attribute type 13 has an invalid length.
[ 1635.669271][T16773] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1635.686340][T16905] netlink: 64 bytes leftover after parsing attributes in process `syz.1.28040'.
[ 1635.697248][T16905] netlink: 64 bytes leftover after parsing attributes in process `syz.1.28040'.
[ 1635.817904][T16922] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.28047'.
[ 1635.833287][T16922] netlink: Unknown conntrack attr (0)
[ 1635.922189][T16926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1635.954784][T16926] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1635.981556][T16928] mac80211_hwsim hwsim116 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[ 1636.043798][T16926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1636.056617][T16926] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1636.143672][T16926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1636.165989][T16926] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1636.223065][T16926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[ 1636.234113][T16926] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1636.320558][T16779] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1636.332337][T16779] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1636.361828][T16777] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1636.371982][T16777] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1636.390261][T16789] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1636.414526][T16789] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1636.441858][T16789] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1636.458240][T16789] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1636.523274][T16961] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[ 1636.779598][T16773] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1637.229621][T12984] Bluetooth: hci7: command tx timeout
[ 1637.889903][T16779] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1638.989355][T16779] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1639.026438][T16939] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1639.213154][T16993] tunl0: entered promiscuous mode
[ 1639.221163][T16993] netlink: 'syz.1.28069': attribute type 4 has an invalid length.
[ 1639.231897][T16993] __nla_validate_parse: 1 callbacks suppressed
[ 1639.231915][T16993] netlink: 9 bytes leftover after parsing attributes in process `syz.1.28069'.
[ 1639.347609][T16998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28071'.
[ 1639.406694][T16998] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1639.535354][T17015] netlink: 56 bytes leftover after parsing attributes in process `syz.2.28077'.
[ 1639.547198][T17015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28077'.
[ 1639.564187][T16775] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1639.574355][T17015] netlink: 31 bytes leftover after parsing attributes in process `syz.2.28077'.
[ 1639.574386][T17015] netlink: 'syz.2.28077': attribute type 2 has an invalid length.
[ 1639.574401][T17015] netlink: 31 bytes leftover after parsing attributes in process `syz.2.28077'.
[ 1639.601991][T17008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[ 1639.611685][T17015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28077'.
[ 1639.668746][T17019] netlink: 'syz.5.28078': attribute type 21 has an invalid length.
[ 1639.677155][T17019] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1639.694818][T17020] netlink: 'syz.2.28077': attribute type 4 has an invalid length.
[ 1640.098703][T17023] sctp: [Deprecated]: syz.1.28079 (pid 17023) Use of int in max_burst socket option deprecated.
[ 1640.098703][T17023] Use struct sctp_assoc_value instead
[ 1640.119932][T16789] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1640.325764][T17010] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1640.342685][T17015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.365665][T17014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1640.454427][T17027] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.28080'.
[ 1640.476710][T17027] netlink: Unknown conntrack attr (0)
[ 1640.522018][T17033] pim6reg1: entered promiscuous mode
[ 1640.527620][T17033] pim6reg1: entered allmulticast mode
[ 1640.541224][T17035] netlink: 64 bytes leftover after parsing attributes in process `syz.0.28083'.
[ 1640.573990][T17038] netlink: 'syz.5.28085': attribute type 1 has an invalid length.
[ 1640.759405][T17052] tunl0: entered promiscuous mode
[ 1640.765932][T17052] netlink: 'syz.5.28089': attribute type 4 has an invalid length.
[ 1640.782687][T17052] netlink: 9 bytes leftover after parsing attributes in process `syz.5.28089'.
[ 1641.038154][T17068] netlink: Unknown conntrack attr (0)
[ 1641.111433][T17075] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) !
[ 1641.173773][T17079] netlink: 'syz.2.28100': attribute type 64 has an invalid length.
[ 1641.220002][T16771] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1641.264597][T17087] h: entered promiscuous mode
[ 1641.496859][T17104] syzkaller1: entered promiscuous mode
[ 1641.509323][T17104] syzkaller1: entered allmulticast mode
[ 1641.736569][T17126] sctp: [Deprecated]: syz.1.28115 (pid 17126) Use of int in maxseg socket option.
[ 1641.736569][T17126] Use struct sctp_assoc_value instead
[ 1641.977801][T17152] netlink: 'syz.2.28123': attribute type 10 has an invalid length.
[ 1642.010940][T17152] team0: Port device geneve1 added
[ 1642.017899][T17151] syzkaller1: entered promiscuous mode
[ 1642.024399][T17151] syzkaller1: entered allmulticast mode
[ 1642.341637][T16789] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1642.505940][T17192] netlink: 'syz.5.28136': attribute type 10 has an invalid length.
[ 1642.522048][T17192] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check.
[ 1642.735171][T17208] xt_CT: No such helper "snmp"
[ 1642.790174][T17213] IPv6: Can't replace route, no match found
[ 1642.796586][T17213] IPv6: Can't replace route, no match found
[ 1643.462030][T16779] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1643.540753][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1643.810777][T17221] netlink: 'syz.1.28148': attribute type 3 has an invalid length.
[ 1644.570258][T16789] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1645.067895][ T2759] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1645.075509][ T2759] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1645.083372][ T2759] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1645.091274][ T2759] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1645.100139][ T2759] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1645.362288][T17236] lo speed is unknown, defaulting to 1000
[ 1645.466914][T17186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1645.478553][T17196] __nla_validate_parse: 13 callbacks suppressed
[ 1645.478574][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28137'.
[ 1645.565071][T17236] xfrm0 speed is unknown, defaulting to 1000
[ 1645.661416][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.5.28154'.
[ 1645.673396][T17252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.28155'.
[ 1645.683388][T16775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1645.694877][T17247] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1646.182387][T17286] netlink: 68 bytes leftover after parsing attributes in process `syz.0.28170'.
[ 1646.227412][T17293] syzkaller0: entered promiscuous mode
[ 1646.233391][T17293] syzkaller0: entered allmulticast mode
[ 1646.258692][T17293] tipc: Started in network mode
[ 1646.273858][T17296] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000
[ 1646.286787][T17293] tipc: Node identity f2ba79444881, cluster identity 4711
[ 1646.297568][T17293] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1646.312784][T17297] netlink: 24 bytes leftover after parsing attributes in process `syz.5.28171'.
[ 1646.322319][T17290] sit1: entered promiscuous mode
[ 1646.322345][T17290] sit1: entered allmulticast mode
[ 1646.334397][T17292] tipc: Resetting bearer <eth:syzkaller0>
[ 1646.347684][T17292] tipc: Disabling bearer <eth:syzkaller0>
[ 1646.388159][T17296] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1646.406924][T17296] bond6 (unregistering): Released all slaves
[ 1646.489902][T17307] netlink: 'syz.2.28174': attribute type 2 has an invalid length.
[ 1646.513351][T17307] netlink: 'syz.2.28174': attribute type 1 has an invalid length.
[ 1646.673442][T17236] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1646.681965][T17315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28176'.
[ 1646.706748][T17236] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1646.734261][T17236] bridge_slave_0: entered allmulticast mode
[ 1646.750541][T17236] bridge_slave_0: entered promiscuous mode
[ 1646.775718][T17236] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1646.787053][T17236] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1646.796208][T17236] bridge_slave_1: entered allmulticast mode
[ 1646.804271][T17236] bridge_slave_1: entered promiscuous mode
[ 1646.830909][T16789] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1646.872499][T17236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1646.894671][T17236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1646.957975][T17236] team0: Port device team_slave_0 added
[ 1646.978861][T17236] team0: Port device team_slave_1 added
[ 1647.017199][T17336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.28183'.
[ 1647.027060][T17236] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1647.043433][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1647.079785][T17236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1647.142467][ T2759] Bluetooth: hci5: command tx timeout
[ 1647.150608][T17236] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1647.168503][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1647.198709][T17236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1647.213162][T17341] IPVS: ip_vs_add_dest(): server weight less than zero
[ 1647.261227][T17344] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1647.274628][T17344] bond6 (unregistering): Released all slaves
[ 1647.296053][T17236] hsr_slave_0: entered promiscuous mode
[ 1647.304456][T17236] hsr_slave_1: entered promiscuous mode
[ 1647.311434][T17236] debugfs: 'hsr0' already exists in 'hsr'
[ 1647.317279][T17236] Cannot create hsr debugfs directory
[ 1647.506580][T17348] syzkaller0: entered promiscuous mode
[ 1647.523596][T17348] syzkaller0: entered allmulticast mode
[ 1647.546591][T17348] 0: reclassify loop, rule prio 0, protocol 700
[ 1647.557039][T17354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28191'.
[ 1647.661030][T17359] tap0: tun_chr_ioctl cmd 2148553947
[ 1647.698509][T17236] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1647.715741][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1647.730367][T17359] tap0: tun_chr_ioctl cmd 2148558363
[ 1647.737190][T17236] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1647.753873][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1647.762427][T17359] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[ 1647.772905][T17236] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1647.788394][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1647.809818][T17236] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1647.823373][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1647.930781][T17373] bridge3: entered promiscuous mode
[ 1647.936468][T17373] bridge3: entered allmulticast mode
[ 1647.962784][T16775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1648.002208][T17377] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1648.015654][T17377] bond1 (unregistering): Released all slaves
[ 1648.155316][T17236] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1648.223662][T17236] 8021q: adding VLAN 0 to HW filter on device team0
[ 1648.264503][T16777] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1648.271817][T16777] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1648.312014][T16775] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1648.319212][T16775] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1648.451970][T17409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28210'.
[ 1648.586455][T17420] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1648.601438][T17420] bond6 (unregistering): Released all slaves
[ 1648.708779][T17425] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[ 1649.102221][T16777] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1649.208578][T17449] netlink: 'syz.1.28221': attribute type 4 has an invalid length.
[ 1649.219094][ T2759] Bluetooth: hci5: command tx timeout
[ 1649.236729][T17449] netlink: 9 bytes leftover after parsing attributes in process `syz.1.28221'.
[ 1649.283731][T17236] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1649.653175][T17236] veth0_vlan: entered promiscuous mode
[ 1649.677974][T17236] veth1_vlan: entered promiscuous mode
[ 1649.740316][T17236] veth0_macvtap: entered promiscuous mode
[ 1649.754200][T17236] veth1_macvtap: entered promiscuous mode
[ 1649.816679][T17236] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1649.841088][T17236] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1649.885182][T16775] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1649.895696][T17475] block nbd6: Unsupported socket: should be TCP or UNIX.
[ 1649.912805][T16775] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1649.928905][T16775] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1649.970652][T11996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1650.099796][T16773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1650.134704][T16773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1650.208504][T16773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1650.235762][T16773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1650.244240][T11996] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1650.536549][T17495] sctp: [Deprecated]: syz.0.28238 (pid 17495) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1650.536549][T17495] Use struct sctp_sack_info instead
[ 1650.552689][T17497] netlink: 'syz.5.28239': attribute type 1 has an invalid length.
[ 1650.570877][T17500] netlink: 'syz.5.28239': attribute type 1 has an invalid length.
[ 1650.721498][T17497] bond8: (slave veth11): Enslaving as an active interface with a down link
[ 1650.756856][T17500] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1650.998615][T16779] nci: nci_add_new_protocol: the target found does not have the desired protocol
[ 1651.299292][ T2759] Bluetooth: hci5: command tx timeout
[ 1651.345071][T17535] __nla_validate_parse: 3 callbacks suppressed
[ 1651.345093][T17535] netlink: 48 bytes leftover after parsing attributes in process `syz.0.28250'.
[ 1651.389153][T16775] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1651.471650][T17409] Set syz1 is full, maxelem 65536 reached
[ 1652.500287][T16773] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1653.379900][ T2759] Bluetooth: hci5: command tx timeout
[ 1653.609313][T16777] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1653.883849][T17512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1654.041222][T17553] netlink: 56 bytes leftover after parsing attributes in process `syz.0.28255'.
[ 1654.409542][T17586] netlink: 132 bytes leftover after parsing attributes in process `syz.5.28265'.
[ 1654.428523][T17587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.28267'.
[ 1654.463252][T17592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28266'.
[ 1654.507295][T17592] netlink: 56 bytes leftover after parsing attributes in process `syz.1.28266'.
[ 1654.530192][T17592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28266'.
[ 1654.616876][T14267] IPVS: starting estimator thread 0...
[ 1654.710548][T16770] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[ 1654.719412][T17604] IPVS: using max 39 ests per chain, 93600 per kthread
[ 1654.750221][T17612] netlink: 'syz.0.28272': attribute type 4 has an invalid length.
[ 1654.788877][T17615] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[ 1654.802055][T17615] bond1 (unregistering): Released all slaves
[ 1654.993744][T17631] netlink: 60 bytes leftover after parsing attributes in process `syz.5.28281'.
[ 1655.284284][T17648] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28289'.
[ 1655.310847][T17648] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1655.391310][    C0] ------------[ cut here ]------------
[ 1655.396855][    C0] len > ((int)(~0U >> 1))
[ 1655.396888][    C0] WARNING: ./include/linux/skbuff.h:2866 at qdisc_pkt_len_segs_init+0x4b4/0xa30, CPU#0: syz.5.28287/17649
[ 1655.412758][    C0] Modules linked in:
[ 1655.416709][    C0] CPU: 0 UID: 0 PID: 17649 Comm: syz.5.28287 Not tainted syzkaller #0 PREEMPT(full) 
[ 1655.426268][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1655.436402][    C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30
[ 1655.442772][    C0] Code: 00 00 02 00 31 ff e8 1b 12 4b f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 ca 0d 4b f8 45 89 e7 e9 2c ff ff ff e8 bd 0d 4b f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 6a 0f 4b f8 41 39 dc 0f
[ 1655.462463][    C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246
[ 1655.468592][    C0] RAX: ffffffff897ae863 RBX: 0000000000000003 RCX: ffff888026881f00
[ 1655.476655][    C0] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000
[ 1655.484694][    C0] RBP: ffff888076368000 R08: ffff88808712a067 R09: 1ffff11010e2540c
[ 1655.492771][    C0] R10: dffffc0000000000 R11: ffffed1010e2540d R12: 00000000fffffffe
[ 1655.500833][    C0] R13: dffffc0000000000 R14: 1ffff1100ec6d01b R15: ffff88809fe8fc18
[ 1655.508876][    C0] FS:  00007f49a42ec6c0(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000
[ 1655.517891][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1655.524552][    C0] CR2: 00007f79a8000020 CR3: 000000005edb8000 CR4: 00000000003526f0
[ 1655.532632][    C0] Call Trace:
[ 1655.535947][    C0]  <IRQ>
[ 1655.538835][    C0]  __netif_receive_skb_core+0x13aa/0x30b0
[ 1655.544657][    C0]  ? chacha_permute+0x4ce/0xf00
[ 1655.549612][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[ 1655.555745][    C0]  ? __pfx_chacha_block_generic+0x10/0x10
[ 1655.561643][    C0]  __netif_receive_skb_list_core+0x24d/0x830
[ 1655.567674][    C0]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[ 1655.574285][    C0]  ? sched_balance_rq+0x6511/0x7020
[ 1655.579573][    C0]  netif_receive_skb_list_internal+0x995/0xcf0
[ 1655.585782][    C0]  ? netif_receive_skb_list_internal+0x501/0xcf0
[ 1655.592215][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1655.597046][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[ 1655.603822][    C0]  ? lock_release+0x4b/0x3c0
[ 1655.608473][    C0]  napi_complete_done+0x299/0x730
[ 1655.613596][    C0]  ? __pfx_napi_complete_done+0x10/0x10
[ 1655.619217][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1655.624025][    C0]  ? gro_receive_skb+0x70e/0xc30
[ 1655.629062][    C0]  gro_cell_poll+0x5ab/0x5d0
[ 1655.633813][    C0]  ? gro_cell_poll+0x175/0x5d0
[ 1655.638614][    C0]  __napi_poll+0xaa/0x330
[ 1655.643017][    C0]  net_rx_action+0x61d/0xf50
[ 1655.647751][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1655.652934][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 1655.658180][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 1655.663558][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 1655.668801][    C0]  ? sched_clock+0x3f/0x60
[ 1655.673302][    C0]  handle_softirqs+0x225/0x840
[ 1655.678110][    C0]  ? do_softirq+0x76/0xd0
[ 1655.682520][    C0]  ? tun_rx_batched+0x185/0x790
[ 1655.687507][    C0]  do_softirq+0x76/0xd0
[ 1655.691747][    C0]  </IRQ>
[ 1655.694706][    C0]  <TASK>
[ 1655.697712][    C0]  __local_bh_enable_ip+0xf8/0x130
[ 1655.702922][    C0]  ? tun_rx_batched+0x185/0x790
[ 1655.707819][    C0]  tun_rx_batched+0x616/0x790
[ 1655.712575][    C0]  ? __pfx_tun_rx_batched+0x10/0x10
[ 1655.717824][    C0]  ? tun_get_user+0x26ca/0x4350
[ 1655.722768][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1655.727668][    C0]  ? lock_acquire+0x5f/0x350
[ 1655.732335][    C0]  ? tun_get_user+0x2373/0x4350
[ 1655.737245][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1655.742099][    C0]  ? trace_irq_enable+0x3b/0x140
[ 1655.747090][    C0]  tun_get_user+0x2b04/0x4350
[ 1655.751837][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1655.756691][    C0]  ? lock_release+0x4b/0x3c0
[ 1655.761369][    C0]  ? lock_release+0x4b/0x3c0
[ 1655.766007][    C0]  ? tun_get_user+0x26ca/0x4350
[ 1655.771410][    C0]  ? aa_file_perm+0x4ed/0x15f0
[ 1655.776219][    C0]  ? __pfx_tun_get_user+0x10/0x10
[ 1655.781321][    C0]  ? __futex_wait+0x358/0x400
[ 1655.786058][    C0]  ? __pfx___futex_wait+0x10/0x10
[ 1655.791160][    C0]  ? ref_tracker_alloc+0x341/0x4b0
[ 1655.796316][    C0]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1655.801860][    C0]  ? tun_get+0x1c/0x2f0
[ 1655.806143][    C0]  ? tun_get+0x1c/0x2f0
[ 1655.810356][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1655.815156][    C0]  ? tun_get+0x1c/0x2f0
[ 1655.819383][    C0]  ? lock_release+0x4b/0x3c0
[ 1655.824034][    C0]  ? apparmor_file_permission+0x1f4/0x300
[ 1655.829841][    C0]  ? tun_get+0x1c/0x2f0
[ 1655.834134][    C0]  tun_chr_write_iter+0x113/0x200
[ 1655.839257][    C0]  vfs_write+0x612/0xba0
[ 1655.843546][    C0]  ? __pfx_vfs_write+0x10/0x10
[ 1655.848374][    C0]  ? __fget_files+0x2a/0x420
[ 1655.853036][    C0]  ksys_write+0x150/0x270
[ 1655.857425][    C0]  ? __pfx_ksys_write+0x10/0x10
[ 1655.862367][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1655.867167][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1655.873307][    C0]  do_syscall_64+0x174/0x580
[ 1655.877937][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1655.883040][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1655.887761][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1655.893733][    C0] RIP: 0033:0x7f49a339ce59
[ 1655.898190][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1655.918062][    C0] RSP: 002b:00007f49a42ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1655.926537][    C0] RAX: ffffffffffffffda RBX: 00007f49a3616090 RCX: 00007f49a339ce59
[ 1655.934581][    C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003
[ 1655.942768][    C0] RBP: 00007f49a3432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1655.950851][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1655.958861][    C0] R13: 00007f49a3616128 R14: 00007f49a3616090 R15: 00007ffcf742a198
[ 1655.966932][    C0]  </TASK>
[ 1655.970045][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1655.977374][    C0] CPU: 0 UID: 0 PID: 17649 Comm: syz.5.28287 Not tainted syzkaller #0 PREEMPT(full) 
[ 1655.986872][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 1655.996941][    C0] Call Trace:
[ 1656.000236][    C0]  <IRQ>
[ 1656.003106][    C0]  vpanic+0x56c/0xa60
[ 1656.007167][    C0]  ? __pfx__printk+0x10/0x10
[ 1656.011787][    C0]  ? __pfx_vpanic+0x10/0x10
[ 1656.016335][    C0]  ? is_bpf_text_address+0x292/0x2b0
[ 1656.021659][    C0]  ? is_bpf_text_address+0x26/0x2b0
[ 1656.026913][    C0]  panic+0xc5/0xd0
[ 1656.030678][    C0]  ? __pfx_panic+0x10/0x10
[ 1656.035163][    C0]  __warn+0x315/0x4c0
[ 1656.039289][    C0]  ? qdisc_pkt_len_segs_init+0x4b4/0xa30
[ 1656.044969][    C0]  ? qdisc_pkt_len_segs_init+0x4b4/0xa30
[ 1656.050652][    C0]  __report_bug+0x331/0x530
[ 1656.055284][    C0]  ? __local_bh_enable_ip+0xf8/0x130
[ 1656.060591][    C0]  ? tun_rx_batched+0x616/0x790
[ 1656.065457][    C0]  ? tun_get_user+0x2b04/0x4350
[ 1656.070365][    C0]  ? qdisc_pkt_len_segs_init+0x4b4/0xa30
[ 1656.076037][    C0]  ? __pfx___report_bug+0x10/0x10
[ 1656.081115][    C0]  ? qdisc_pkt_len_segs_init+0x4b4/0xa30
[ 1656.086766][    C0]  report_bug+0x16a/0x220
[ 1656.091128][    C0]  ? qdisc_pkt_len_segs_init+0x4b4/0xa30
[ 1656.096787][    C0]  ? qdisc_pkt_len_segs_init+0x4b6/0xa30
[ 1656.102452][    C0]  handle_bug+0x9c/0x200
[ 1656.106716][    C0]  exc_invalid_op+0x1a/0x50
[ 1656.111236][    C0]  asm_exc_invalid_op+0x1a/0x20
[ 1656.116108][    C0] RIP: 0010:qdisc_pkt_len_segs_init+0x4b4/0xa30
[ 1656.122392][    C0] Code: 00 00 02 00 31 ff e8 1b 12 4b f8 81 e3 00 00 02 00 0f 85 fd 00 00 00 e8 ca 0d 4b f8 45 89 e7 e9 2c ff ff ff e8 bd 0d 4b f8 90 <0f> 0b 90 e9 ee fd ff ff 44 89 e7 89 de e8 6a 0f 4b f8 41 39 dc 0f
[ 1656.142032][    C0] RSP: 0018:ffffc90000007660 EFLAGS: 00010246
[ 1656.148177][    C0] RAX: ffffffff897ae863 RBX: 0000000000000003 RCX: ffff888026881f00
[ 1656.156194][    C0] RDX: 0000000000000100 RSI: 00000000fffffffe RDI: 0000000000000000
[ 1656.164180][    C0] RBP: ffff888076368000 R08: ffff88808712a067 R09: 1ffff11010e2540c
[ 1656.172164][    C0] R10: dffffc0000000000 R11: ffffed1010e2540d R12: 00000000fffffffe
[ 1656.180149][    C0] R13: dffffc0000000000 R14: 1ffff1100ec6d01b R15: ffff88809fe8fc18
[ 1656.188138][    C0]  ? qdisc_pkt_len_segs_init+0x4b3/0xa30
[ 1656.193803][    C0]  __netif_receive_skb_core+0x13aa/0x30b0
[ 1656.199554][    C0]  ? chacha_permute+0x4ce/0xf00
[ 1656.204471][    C0]  ? __pfx___netif_receive_skb_core+0x10/0x10
[ 1656.210564][    C0]  ? __pfx_chacha_block_generic+0x10/0x10
[ 1656.216306][    C0]  __netif_receive_skb_list_core+0x24d/0x830
[ 1656.222327][    C0]  ? __pfx___netif_receive_skb_list_core+0x10/0x10
[ 1656.228866][    C0]  ? sched_balance_rq+0x6511/0x7020
[ 1656.234094][    C0]  netif_receive_skb_list_internal+0x995/0xcf0
[ 1656.240300][    C0]  ? netif_receive_skb_list_internal+0x501/0xcf0
[ 1656.246645][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1656.251450][    C0]  ? __pfx_netif_receive_skb_list_internal+0x10/0x10
[ 1656.258265][    C0]  ? lock_release+0x4b/0x3c0
[ 1656.262944][    C0]  napi_complete_done+0x299/0x730
[ 1656.268101][    C0]  ? __pfx_napi_complete_done+0x10/0x10
[ 1656.273672][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1656.278467][    C0]  ? gro_receive_skb+0x70e/0xc30
[ 1656.283426][    C0]  gro_cell_poll+0x5ab/0x5d0
[ 1656.288039][    C0]  ? gro_cell_poll+0x175/0x5d0
[ 1656.292820][    C0]  __napi_poll+0xaa/0x330
[ 1656.297182][    C0]  net_rx_action+0x61d/0xf50
[ 1656.301849][    C0]  ? __pfx_net_rx_action+0x10/0x10
[ 1656.306991][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 1656.312228][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[ 1656.317563][    C0]  ? kvm_sched_clock_read+0x11/0x20
[ 1656.322908][    C0]  ? sched_clock+0x3f/0x60
[ 1656.327354][    C0]  handle_softirqs+0x225/0x840
[ 1656.332152][    C0]  ? do_softirq+0x76/0xd0
[ 1656.336536][    C0]  ? tun_rx_batched+0x185/0x790
[ 1656.341405][    C0]  do_softirq+0x76/0xd0
[ 1656.345579][    C0]  </IRQ>
[ 1656.348518][    C0]  <TASK>
[ 1656.351461][    C0]  __local_bh_enable_ip+0xf8/0x130
[ 1656.356600][    C0]  ? tun_rx_batched+0x185/0x790
[ 1656.361493][    C0]  tun_rx_batched+0x616/0x790
[ 1656.366192][    C0]  ? __pfx_tun_rx_batched+0x10/0x10
[ 1656.371411][    C0]  ? tun_get_user+0x26ca/0x4350
[ 1656.376278][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1656.381058][    C0]  ? lock_acquire+0x5f/0x350
[ 1656.385682][    C0]  ? tun_get_user+0x2373/0x4350
[ 1656.390575][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1656.395377][    C0]  ? trace_irq_enable+0x3b/0x140
[ 1656.400366][    C0]  tun_get_user+0x2b04/0x4350
[ 1656.405059][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1656.409852][    C0]  ? lock_release+0x4b/0x3c0
[ 1656.414530][    C0]  ? lock_release+0x4b/0x3c0
[ 1656.419176][    C0]  ? tun_get_user+0x26ca/0x4350
[ 1656.424080][    C0]  ? aa_file_perm+0x4ed/0x15f0
[ 1656.428889][    C0]  ? __pfx_tun_get_user+0x10/0x10
[ 1656.433955][    C0]  ? __futex_wait+0x358/0x400
[ 1656.438660][    C0]  ? __pfx___futex_wait+0x10/0x10
[ 1656.443712][    C0]  ? ref_tracker_alloc+0x341/0x4b0
[ 1656.448840][    C0]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1656.454324][    C0]  ? tun_get+0x1c/0x2f0
[ 1656.458504][    C0]  ? tun_get+0x1c/0x2f0
[ 1656.462678][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1656.467466][    C0]  ? tun_get+0x1c/0x2f0
[ 1656.471642][    C0]  ? lock_release+0x4b/0x3c0
[ 1656.476264][    C0]  ? apparmor_file_permission+0x1f4/0x300
[ 1656.482008][    C0]  ? tun_get+0x1c/0x2f0
[ 1656.486182][    C0]  tun_chr_write_iter+0x113/0x200
[ 1656.491241][    C0]  vfs_write+0x612/0xba0
[ 1656.495519][    C0]  ? __pfx_vfs_write+0x10/0x10
[ 1656.500311][    C0]  ? __fget_files+0x2a/0x420
[ 1656.504955][    C0]  ksys_write+0x150/0x270
[ 1656.509315][    C0]  ? __pfx_ksys_write+0x10/0x10
[ 1656.514204][    C0]  ? rcu_is_watching+0x15/0xb0
[ 1656.519006][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1656.525099][    C0]  do_syscall_64+0x174/0x580
[ 1656.529718][    C0]  ? trace_irq_disable+0x3b/0x140
[ 1656.534793][    C0]  ? clear_bhb_loop+0x40/0x90
[ 1656.539506][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1656.545427][    C0] RIP: 0033:0x7f49a339ce59
[ 1656.549859][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1656.569534][    C0] RSP: 002b:00007f49a42ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1656.577995][    C0] RAX: ffffffffffffffda RBX: 00007f49a3616090 RCX: 00007f49a339ce59
[ 1656.585982][    C0] RDX: 000000000000007a RSI: 00002000000004c0 RDI: 0000000000000003
[ 1656.593966][    C0] RBP: 00007f49a3432e6f R08: 0000000000000000 R09: 0000000000000000
[ 1656.602066][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1656.610055][    C0] R13: 00007f49a3616128 R14: 00007f49a3616090 R15: 00007ffcf742a198
[ 1656.618066][    C0]  </TASK>
[ 1656.621754][    C0] Kernel Offset: disabled
[ 1656.626102][    C0] Rebooting in 86400 seconds..