last executing test programs:

8m1.522233366s ago: executing program 0 (id=557):
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x18, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffc}, 0x10, 0xffffffffffffffff}, 0x94)

8m1.520529532s ago: executing program 0 (id=558):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r2)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0xc014}, 0x0)
sendmsg$NFT_MSG_GETRULE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000d80)=ANY=[@ANYBLOB="14000000070a0102000f000053b8696401000003"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4804)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0xc, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000000c000000bca30000000000002403000020feffff620af8fff8ffffff71a4f8ff000000001f03000000000000e5000200000000002604fdffff02000014010000033800001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r5, 0xffffd000)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r6, 0x0, 0x31, 0x0, &(0x7f0000001840))
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r9 = accept4(r8, 0x0, 0x0, 0x800)
sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52", 0xa}], 0x1}], 0x1, 0x40800)
splice(r9, 0x0, r7, 0x0, 0x9, 0x1200000000000000)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x6f, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94)
getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, 0x0, &(0x7f0000000100))
setsockopt$inet_sctp6_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x5}, 0x8)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x1fe})

8m1.392570964s ago: executing program 0 (id=562):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240)=@int=0x4, 0x4)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x4030582a, 0x0)
sendmsg$key(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)={0x2, 0x10, 0x4, 0x5, 0x14, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_policy={0x8, 0x12, 0x2, 0x0, 0x0, 0x6e6bb5, 0x7, {0x6, 0x110f9ed3dde05fab, 0xed, 0xca, 0x0, 0x38, 0x0, @in6=@mcast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_x_filter={0x5, 0x1a, @in=@local, @in=@broadcast, 0x8, 0x0, 0x10}, @sadb_x_sa2={0x2, 0x13, 0x90, 0x0, 0x0, 0x70bd2b, 0x3502}]}, 0xa0}}, 0x8000)
r2 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r2, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x3, 0x3}}, 0x10)
bind$tipc(r2, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x0, 0x3}}}, 0x10, &(0x7f0000000240), 0x0, &(0x7f0000000280)="42b0c405f735cfaade351a9736a279dc6a0a05ccb8f45ac16125059f67df80e0a549cb076b1f2da91db8e5d4c0ac797932d45d0111dcf3d1fc21fe41d9f423", 0x3f, 0x4}, 0x8000004)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800)
recvfrom$netrom(0xffffffffffffffff, 0x0, 0x0, 0x12000, 0x0, 0x0)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
unshare(0x48000280)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000053c0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x004\x00'], 0x70}}], 0x1, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94)

8m1.174497715s ago: executing program 0 (id=567):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x5)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r4 = socket(0x10, 0x803, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000400)=r3, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0x0, &(0x7f0000000180), &(0x7f0000000200)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0)
setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000140)=0x7fc, 0x4)
r5 = socket$igmp6(0xa, 0x3, 0x2)
getsockopt$inet6_int(r5, 0x29, 0x7, 0x0, &(0x7f0000000100))
setsockopt$inet6_tcp_int(r2, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4)
bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r6, 0x1, 0x26, &(0x7f00000002c0)=0x20000001, 0x4)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000040)="0d000000010001", 0x7)
sendmmsg$inet6(r2, &(0x7f0000000ac0)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x101, @empty, 0x5}, 0x1c, &(0x7f0000000c40)=[{&(0x7f0000000340)="5cec3c469fe7b97ff8f56eb554aedc54a3192eed8e6288cf23ac3ac64e91bd55a20b762737b29255b3099a5e9ef87ebbda1c54505ae08e1598def6825a4e1eb22a03beb76739c11780927cf4e1c726078808c960df09b44f9c621884683159f6caf68f83fd1433c98a3e3d14f34b3d48288eb78afa90ec611bd8a131591ffa084b748f9998ee185f8d11a1f02754021fec6ef4b18a6edc346e5b51029eb7ef445e773e31ed7ab77da9cce76e629bad", 0xaf}], 0x1}}], 0x1, 0x20084018)
close(0x3)
r8 = socket$netlink(0x10, 0x3, 0x9)
sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x3f9, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3ec}}, 0x28}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x8, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x4804)
socket(0x400000000010, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000202000000000000000000000b030000000000000000000002"], 0x0, 0x3e}, 0x20)

8m0.754294624s ago: executing program 1 (id=577):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0x1}, 0x38)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000000014000000110001"], 0xac}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a497f75241d4e1deb00000500000614000000110001"], 0x3c}, 0x1, 0x0, 0x0, 0x2040000}, 0xc050)

8m0.749708442s ago: executing program 1 (id=579):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) (async)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf2504"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
recvfrom(r1, 0x0, 0x0, 0x40002000, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r3 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_int(r3, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4)
r4 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async)
getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@deltclass={0x78, 0x29, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xb}, {0x2, 0xa}, {0xfff2, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x1}}, @tclass_kind_options=@c_sfq={0x8}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}, @TCA_RATE={0x6, 0x5, {0x5, 0xf}}, @tclass_kind_options=@c_mqprio={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x14, 0x2, [@TCA_HFSC_USC={0x10, 0x3, {0x4, 0x6, 0x3ff}}]}}]}, 0x78}}, 0x20040089) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x4}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xf370}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1ae4d}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x44004}, 0x4008880)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x0, 0x2, 0x1, 0x4, 0x4}, 0x0) (async)
r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)
ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100))
sendto$inet6(r3, 0x0, 0x0, 0x884, &(0x7f0000000300)={0xa, 0x4e21, 0x9, @empty, 0x3}, 0x1c)
setsockopt$inet6_group_source_req(r2, 0x29, 0x5, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff}) (async)
r9 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r9, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x4000, 0x3}, 0x0, 0x0) (async)
connect$unix(r8, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1)

8m0.749304482s ago: executing program 1 (id=580):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000091043b000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r4 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x14, 0x42, 0x601, 0x0, 0x25dfdbff, "", [@typed={0x4, 0x200}]}, 0x14}], 0x1, 0x0, 0x0, 0x800}, 0x800)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYRES64=r2, @ANYRES32=r3, @ANYBLOB="ee0700000000000000000700000008000300", @ANYRES8=r1, @ANYRES16=r2, @ANYRES16=0x0, @ANYRES32=r1], 0x138}, 0x1, 0x0, 0x0, 0x44010}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r1)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2040000}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)={0x244, r6, 0x20, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8e1e}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0xd0}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xd}, {0x6, 0x11, 0xf}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x7ff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0xfff5}, {0x8, 0x15, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x92}}, {0x8}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x100}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7f}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xd5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0x8001}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x8}, {0x8, 0x15, 0x1ff}}]}, 0x244}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44801}, 0x80)

8m0.74888373s ago: executing program 1 (id=581):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x100, 0x20b, 0x9, 0x7, <r1=>0x0}, &(0x7f0000000040)=0x10)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r1, 0x3}, 0x8)
r2 = accept(r0, 0x0, &(0x7f00000000c0))
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000100)={r1, 0x3}, 0x8) (async)
getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={<r3=>r1, 0xea, "7cf6707e6850733c7628c58c243b84543255a4fb5354bf09069525439800deafbae492eef4e33fcf969a968e4ae2b4fc6c54fe1933141957c170fadd1c2272ea720cfd5d13d5e84581080f1382b66e7b4e6ffd6d7e844ef0a8d5ef169c9ece648f908191c7dffeb35d03639501ccc4eec0fd449f4bf18a2a146004c122750bb9d019ecad15d3fd2ea8841a3261c29c13d7a5711d90f6f39c9d1c778dad8280cec099cfa67a6bb58ce76735d12f367b5ad5e631fc8a4d665c4197c4135c2c2034c1a16dd29bafcf4a48cfaaed51cd93ed2f31811de051d15bbfd68fc86f4c806b2c2e7f934b291d765127"}, &(0x7f0000000240)=0xf2)
getsockname$ax25(r2, &(0x7f0000000280)={{0x3, @bcast}, [@null, @rose, @netrom, @bcast, @rose, @default, @bcast, @default]}, &(0x7f0000000300)=0x48) (async)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000340)={<r4=>r1, 0xfff8, 0x7f, 0x4, 0x8, 0x40}, &(0x7f0000000380)=0x14)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000003c0)={0x1, [0x1000]}, 0x6) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000400)={r3, 0x66d, 0x9, [0x3, 0x0, 0x4, 0x1000, 0x1, 0x0, 0x7, 0x4, 0x9]}, 0x1a)
getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000440)={<r5=>r1, 0x2}, &(0x7f0000000480)=0x8) (async)
getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000004c0), &(0x7f0000000500)=0x4) (async, rerun: 64)
shutdown(r2, 0x1) (rerun: 64)
getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000540), &(0x7f0000000580)=0x8)
sendmsg$sock(r2, &(0x7f0000000900)={&(0x7f00000005c0)=@nl=@unspec, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)="f7d38f64995915c4aa2f2b30df37d91d53076c43f656bba2d3254dabdeb77079fc46a6fc8ebd3ba6807ab98dfbde9e4cba95adc7bb02b72451da4dc2bb63ce4e7bdde307afbfbae6b2fffb803f03b4f46ec3e79f6ae5bc63a88364db0bea7294e23b9e0d0ecf01bbdf39a4d8b19b9bb7c04bc9c46a2e227327cb892e34a8", 0x7e}, {&(0x7f00000006c0)="0dfbec6d3aa3d5f24c3ab40a25dcdd7b1a441e37f6b6a0094311d7057960aeb25e32b1955e9e99ff9896890697a56f88e7da88a3577a67586e10338ab3f83ab47adf9d40921f6cdb5714fa43525cc37949564af58aadf1659b93b94c16cd7ee09b017590a5ddc5cafb3237d157ed492fafd8f0f08816fe52c3f430bab9e825d0316a20411b78de1ede24da41ad191253e6ea2b0367bea5542cc0f210deea3720b69d6e10ba457ba018c5999c68e284d90008c8719a760cbf6c28ce61f90d47d1d4c70e8958158fcac2f7deb8ae006b6af26a91892f8d7a7f82a676ebf48f9c5ba49517d6e63f924ada7f", 0xea}, {&(0x7f00000007c0)="46b32ba74ffa3a2f04c25d4d0b408880e6e4866a391b92fe1b52a5a9e9698006035f9f7ad56a39eea5cf0372e085dd279c2e04cb0b085123cf0014facd8e38bc696db3ba5d7bb7ef8f06409dcab9b328fb71b9a5620ec0c061ae058389c9e4e6f13b1f0a838e194d2b7b7df43f311e6b76", 0x71}], 0x3, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}], 0x60}, 0x20008000) (async)
sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x84, 0x0, 0x60a, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pimreg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffff9}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async)
getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000ac0)=@assoc_value={r4, 0x4}, &(0x7f0000000b00)=0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000b40)={r5, 0x1, 0x3, [0xb, 0x8, 0x10]}, &(0x7f0000000b80)=0xe)
bind$inet6(r0, &(0x7f0000000bc0)={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) (async)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000c00)={0x6, 0x8202, 0x1, 0x40, r4}, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f0000000c40), r7) (async, rerun: 64)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r7, 0x8982, &(0x7f0000000c80)) (async, rerun: 64)
pipe(&(0x7f0000000cc0)={0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$FITHAW(r7, 0xc0045878) (async, rerun: 32)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000d00)={'ipvlan1\x00'}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000001240)={'vcan0\x00', <r9=>0x0})
sendmmsg$sock(r2, &(0x7f00000019c0)=[{{&(0x7f0000000d40)=@phonet={0x23, 0x1, 0x2}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000dc0)="6ba94448656a9ec36498fb329a4136f845b30d282c7d3022c6891ec443029a15782d8195f165e53c002c6d9e764143ba4e33d8ed2f24d22452cebabf70a7140bb4b86d54da7674dd13192e76af8702415c2e9fd1520367ff4ac0", 0x5a}], 0x1, &(0x7f0000000e80)=[@mark={{0x14, 0x1, 0x24, 0xe}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xfff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x90}}, {{&(0x7f0000000f40)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x1, 0x0, 0x3, 0x2, {0xa, 0x4e20, 0x19f4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x100}}}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000fc0)="7c812416bf2227180a3cda3bee33e90524e55d341c190e836534b5a9f7aa0b55b0dcbbd4eab8261f9a901f8d4ffbcbf88af6f7a4db96827b1b31aef0eaa3222dc1965e5986b8be4f9554718f61fb018fba8988a67dfecf856276f5a1cd02815f48ed219d7212208f13576a2471435d5642c15b0c0cd5b54ed4562a1f13af7bda4780c6f9b9c8abffaaa8f117ff8dfd22a225fcd33e971270d3e4415768d8610e993503594f97d6027771d3b81f97524325c9ddad9b57ecbb46eec362cd9f06c68118f320d1d9a3b023b4c65c2481c8c6198bfe1a3928358f317cea0367", 0xdd}, {&(0x7f00000010c0)="5ae33baaf36dc7b738bfbfa72e14671d887b944db319b68abf091122d778c8dcb91bb669f3fa8eb0", 0x28}, {&(0x7f0000001100)="501c1a0a96d8c573d9ae91f3cb96e462215b64096f9813d05a25e43dcfe66e35d6b87d1de97427e6421406cc4c1bddd2a12fa081b3de43ee0ffdc30d8c8702ad31fda9b42cb883a2e6d5d788de25c2a3d56c33", 0x53}, {&(0x7f0000001180)="308f13523df302b292723367a9a9dd7cb74469f611d2c69b10896abc7d4f0fb06d53bb169c7645d2cc7c008a137180fb7c01a423df2317a9eff056829d5061ba9d58971474905823e00d6ed599fa", 0x4e}], 0x4}}, {{&(0x7f0000001280)=@can={0x1d, r9}, 0x80, &(0x7f0000001440)=[{&(0x7f0000001300)="113aee1fdbf287a0c459953bd864c8e5e458699108a1d3995fdcdf4802aea23c6991bed14d3c06cef737e8b9612fa33f6f6306b3c87bf253136459bce2ba45521682e1f5e34485d0ab8d519c6a0d87792b6d1e4a0de2f959a17b89011330984fb4e93d15d283360a149b5e99b575b59263501f4eb8d3c281b6b9c20458962b62e2a1d4c52598ad9ad6ee8cfe1cf2ace4c3d1c20f671ff23b8731aedc996108fcf0921afffd920956380294ab64ab2c61c15836673b6add73ff59b9388b2f221c316d56bb9ed9668876da05a7122e519818917781bd66a4ac4132175ad588", 0xde}, {&(0x7f0000001400)="b96b1a7e5152832c0bea4244d596e4faf2cf1982db7057f84316b9556c5a7b7ac0a69a1e78087b5b1513cba07429", 0x2e}], 0x2}}, {{&(0x7f0000001480)=@in={0x2, 0x4e22, @private=0xa010101}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001500)="0102dc1b4145b4ad3c76ff29b61468dd906cec12b0c67a41e7d5da6ce7134597392d376a7d11310e5c70a558b1e38b972da545bd3be62b2a4f22e5a73264c21fba07881c4d59cddfe56527183a7b23336e7f9a43a9e37d4a9b10dff6e7e82a9f3f3556520cb0e2eca2aae5e8fc1176778f0a426810ec3a9481b915608439fdd15ff721b648f2fcc786777c2159f712c6d01665068a8f6931a7c76c3ef4e7fb5c7381a07a9f35ef694d4a295ccd79e83b551ef4b70ff15e25a09424", 0xbb}], 0x1, &(0x7f0000001600)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x87}}, @mark={{0x14, 0x1, 0x24, 0x3f6}}, @txtime={{0x18, 0x1, 0x3d, 0xa80000000000000}}, @txtime={{0x18, 0x1, 0x3d, 0x10}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xa8}}, {{&(0x7f00000016c0)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001740)="0d19c80213827687daff58704f8b8d7ff1b02ba48031769f5a7330b5d50dd01d846efe4f0f91744766336d9b73c972e1dc9f8aede69707cc958b595c236cfc7c4c98df51a7e52c697da98520cb8393e02a877acbc39eff030936bf89c25f9db6b3641f08735b1c27e0c9e6e953e0504fd85be93bfb8ef9fc1711975ec664ce978d2a6dcdbd03c92b7450ef8a18a8b3ccc6f85addda785b610b524e98a7e5059b490058640bad2469ccdabb1cf3ba51f67f3f01", 0xb3}, {&(0x7f0000001800)="1e78d936a50117903d1370c20a6850d6c8543ae663f4b530e8b0fc44a5f6978a88d64f1b49a74f77db5379a2f942bd33c725a02582f8d5e11d14c0ab295c8374eead858a4567b09a98d06f096b636c3291b39595d84f293261817073bd75434699d05d625c3a9e08f7a8fe4202afd08b1cb9e3300914b0c8dcea9f5fde554752a82e9cd38de91534700dff54a80548fcabd26c09b4fe8a09fd15ba3b3ae1ccb3be879e0fd5f9045a83ed8a31b74a87c5a0db1e4b", 0xb4}, {&(0x7f00000018c0)="ffd69ddf697888e504c8083a9190602b3ab62bbbc06e2ed334bc30669522c96c23d574f03e0ef964eaa80ee9af361bb567ca9974f85c", 0x36}], 0x3, &(0x7f0000001940)=[@txtime={{0x18}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x272504b}}], 0x48}}], 0x5, 0x4008001) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000124d40)={0x5, [], 0x5, "3b0235350f33cf"})

8m0.664404012s ago: executing program 1 (id=583):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x90, 0x2, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xba}, @IPSET_ATTR_MARK={0x8}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffff6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x29}}}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x90}}, 0x40488a3)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004014}, 0x8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={<r3=>r0})
sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, 0x8, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20040840}, 0x4000000)
sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x8}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040885)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x24, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0xc440}, 0x80000)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x6, &(0x7f0000000680)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffeff}, @exit, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000006c0)='GPL\x00', 0xffffffff, 0x1000, &(0x7f0000000700)=""/4096, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000001700)=[0xffffffffffffffff], &(0x7f0000001740)=[{0x0, 0x5, 0x7}, {0x3, 0x2, 0x41000000, 0xb}, {0x1, 0x4, 0xc, 0x4}, {0x0, 0x3, 0x10, 0x4}, {0x3, 0x4, 0x10, 0x4}, {0x5, 0x5, 0x10}], 0x10, 0x5}, 0x94)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001980)={@fallback=<r7=>r1, 0x3, 0x0, 0x4, &(0x7f0000001880)=[0x0], 0x1, 0x0, &(0x7f00000018c0)=[0x0, 0x0, 0x0], &(0x7f0000001900)=[0x0, 0x0, 0x0], &(0x7f0000001940)=[0x0], <r8=>0x0}, 0x40)
r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001a00)='syz1\x00', 0x200002, 0x0)
r10 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001a40), 0x4)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000019c0)={@cgroup=r9, r6, 0x32, 0x2010, 0x0, @value=r10, @void, @void, @void, r8}, 0x20)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$smc(&(0x7f0000001ac0), r1)
sendmsg$SMC_PNETID_GET(r11, &(0x7f0000001c00)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x8c, r12, 0x1, 0x1, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vxcan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0)
sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r1, &(0x7f0000001d40)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c80)={0x80, r2, 0x2, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x73}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x26}]}, 0x80}, 0x1, 0x0, 0x0, 0x85}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r13 = bpf$MAP_CREATE(0x0, &(0x7f00000020c0)=@base={0x9, 0x5, 0x4, 0x3, 0x40201, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, r0, 0x2, 0x3, 0x2}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002140)={&(0x7f0000001d80)="8bb496a78d808cf7bf6f81e913d25218a1e0a72dca39cad44c629ff26f2651413fc066b517a1adc298902660eed21adbe2ff5c4dde5b264d01c4df2cd8ec7a149eae3ca94cd6d2c3d8db74b5f859563bdc5b77a69d6660405f924f5d5538b86b78268032be084de6d02188f1ecdb3bd4d6e26a0e1a38a70068d9515d593963f2ddab5c9f4995994ffa116b8ff116004e7133e18f9abd76f990fe8182483c36d09337289b35897f519a6030350f40de99fa8ecab9af55bab40f5c0c78f4b0c4dff6242bc7d1dfb319ce871f48a18d79196c0792fd206994ce4df2b904210369b8d10e6fc1737e75e50488a1", &(0x7f0000001e80)=""/246, &(0x7f0000001f80)="1469db4c274ffcb6e5b48f43e1e6e42ccbe54a88eca3552d49058643e9a7333114ea16fac788adb3fa20ab6e3f653107969aaa63ac08a60018d46ae4ab9622b081bb4816609f21d961a959205af3865d25a826f60ad82ab120204ac1902c390ddaa4bca47375353fd47d760fb43c785959311fb1beadbb9ee05360ebdd2de239c77f8658e31bfd3dca00279167194620ffd6927e0cdd3cd5f9ecd46bfe9e1c5193409e4c246a17a531fcff36eb9e19936f519111a8f0485f26faa828dc9f8da42288dce698c086bf22011ffe", &(0x7f0000002080)="b8b810f57214bca5d9601d16c293d6b97939e669131ad9f0d554479bfa13838fe938f182a0ca092db48deb", 0x8, r13, 0x4}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f0000002180)=@bloom_filter={0x1e, 0xffff0000, 0x1ff, 0x6, 0x80000, r13, 0x7, '\x00', 0x0, r6, 0x4, 0x0, 0x0, 0x4}, 0x50)
r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r1)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000002300)={'syztnl1\x00', &(0x7f0000002280)={'tunl0\x00', <r15=>0x0, 0x8000, 0x10, 0x6, 0x3, {{0xe, 0x4, 0x2, 0x5, 0x38, 0x68, 0x0, 0x9, 0x2f, 0x0, @multicast2, @empty, {[@noop, @cipso={0x86, 0x21, 0x2, [{0x2, 0x6, "819a40e3"}, {0x7, 0xf, "6bff2975ee42d647a474255469"}, {0x2, 0x6, "4f14f563"}]}]}}}}})
getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000002340)=<r16=>0x0, &(0x7f0000002380)=0x4)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000024c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002480)={&(0x7f00000023c0)={0x98, r14, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40}, 0x800)
r17 = syz_genetlink_get_family_id$devlink(&(0x7f0000002540), r1)
sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000002640)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)={0x70, r17, 0x800, 0x70bd28, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x40)

8m0.566260642s ago: executing program 1 (id=584):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6c, @empty, 0x4e21, 0x0, 'ovf\x00', 0x30, 0x9, 0x3c}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6c, @empty, 0x4e21, 0x0, 'ovf\x00', 0x30, 0x9, 0x3c}, 0x2c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f000001000000000000feff1300020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) (async)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', <r11=>0x0, 0x2f, 0x1, 0x10, 0xfffff001, 0x58, @private1, @remote, 0x700, 0x8, 0x8000, 0x5}})
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r13=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', <r14=>0x0, 0xff0f, 0x0, 0x6, 0x2, {{0xc, 0x4, 0x0, 0x35, 0x30, 0x66, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, {[@timestamp={0x44, 0x10, 0xf4, 0x0, 0x4, [0x81, 0x9, 0x7fff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x68, [@dev={0xac, 0x14, 0x14, 0xc}]}]}}}}})
r15 = socket(0x11, 0x3, 0x0)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'gre0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'gre0\x00', <r17=>0x0})
bind$packet(r15, &(0x7f0000000180)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
bind$packet(r15, &(0x7f0000000180)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', <r18=>0x0, 0x2f, 0xdb, 0x43, 0xc, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x80, 0x10, 0x8000, 0x10000}})
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x18c}}, 0x8000)
r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r19, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a04fe00000000b509000001000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000015e4a2d08008aaddc67ca1f32d80000bf9800000000008500000007000000b7000000000000009500"/64], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8m0.524517333s ago: executing program 32 (id=584):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6c, @empty, 0x4e21, 0x0, 'ovf\x00', 0x30, 0x9, 0x3c}, 0x2c) (async)
setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6c, @empty, 0x4e21, 0x0, 'ovf\x00', 0x30, 0x9, 0x3c}, 0x2c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001802c00040014000100020000007f000001000000000000feff1300020002000000e000000200000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
socket$can_bcm(0x1d, 0x2, 0x2) (async)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r5}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'gretap0\x00', <r8=>0x0})
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) (async)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4)
sendto$packet(r7, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl0\x00', <r11=>0x0, 0x2f, 0x1, 0x10, 0xfffff001, 0x58, @private1, @remote, 0x700, 0x8, 0x8000, 0x5}})
getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00', <r13=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000280)={'syztnl2\x00', <r14=>0x0, 0xff0f, 0x0, 0x6, 0x2, {{0xc, 0x4, 0x0, 0x35, 0x30, 0x66, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast1, {[@timestamp={0x44, 0x10, 0xf4, 0x0, 0x4, [0x81, 0x9, 0x7fff]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x68, [@dev={0xac, 0x14, 0x14, 0xc}]}]}}}}})
r15 = socket(0x11, 0x3, 0x0)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'gre0\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000340)={'gre0\x00', <r17=>0x0})
bind$packet(r15, &(0x7f0000000180)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @remote}, 0x14) (async)
bind$packet(r15, &(0x7f0000000180)={0x11, 0x0, r17, 0x1, 0x0, 0x6, @remote}, 0x14)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', <r18=>0x0, 0x2f, 0xdb, 0x43, 0xc, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, 0x80, 0x10, 0x8000, 0x10000}})
sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x18c, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x18c}}, 0x8000)
r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000100"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r19, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b509020002000000739a04fe00000000b509000001000000c39a04fee1000000bf8700000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000015e4a2d08008aaddc67ca1f32d80000bf9800000000008500000007000000b7000000000000009500"/64], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

8m0.108757674s ago: executing program 0 (id=586):
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000200)=@ethtool_regs={0x4, 0x6, 0x5f, "8a4a4f0dc8081fee62806eb99b7d2a98f36932a230c77ed202933c1e8efada0a698cf5fe27c368909fef9e0f4f75ce0ab200ba9972ff4fc03f1c09f806236d2104b86ea268c8be0532b25900510df111d15f57a4d99e1ae43ca2b492293e4b"}})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES8=0x0], 0x3261e)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000200)=@ethtool_regs={0x4, 0x6, 0x5f, "8a4a4f0dc8081fee62806eb99b7d2a98f36932a230c77ed202933c1e8efada0a698cf5fe27c368909fef9e0f4f75ce0ab200ba9972ff4fc03f1c09f806236d2104b86ea268c8be0532b25900510df111d15f57a4d99e1ae43ca2b492293e4b"}}) (async)
socket$inet6_tcp(0xa, 0x1, 0x0) (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES8=0x0], 0x3261e) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan0\x00', 0x0}) (async)

7m59.872324641s ago: executing program 0 (id=587):
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001900290029bd7000fbdbdf2102201000fd03"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000010000000000000008000b00000000002c001300e0000001007e00000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x70}}, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
unshare(0x400)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000500)=0xa, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5595, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x200}, 0x8)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000100)="3606106cf43c43cf11c3f9afdf96a560cd83b368944f90bd250683003f429a2ab86328ed00920aade30e4fcb3fcc6e4fff2352150b678501e4cffe230b0270aa043448540c2f4d7825ef10171e7f3089602b6ed87a95", &(0x7f0000000200)=""/37, &(0x7f0000000240)="9df75dfc3a6570fc8b4dd7bab5cffa00", &(0x7f0000000340)="9470db117fa9b3857f94b2d07775592784ffa383b423eb97711f333df4d3891ba57b7f1c7a866f7ba01205640815ff2c0b65b3b6721cf639dd8065da342f58ba756fd351274c1970c86c446c8c0c31475928c631d6323595d30672ce4e66f537ac3b0d3f13ba5ace0736fbb7b252d09750eb2e271f261017cb559264203c1408aa4d77b0d9b539f996818b0eb29ffc17dca7b36612f750ba2ae592335d0000031ea381533024f5f2859fa89ecf8608f06c64c87becc90252d4cddc74607cfe4e8b36b54bae9a30382f0afcfff36732f118b80d32143e352825a5d0d5ae8f1ca0234137", 0x8, r6, 0x4}, 0x38)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
sendmsg$inet6(r5, &(0x7f0000000680)={&(0x7f0000000480)={0xa, 0x4e24, 0x4, @loopback, 0x80000000}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000700)="368df5d1561425718cbcafdeff40fa5e96cc5cd000b83a8065c8c24db35fd88e838846c5887ceaa2b2ab09c214566e9e8fbb9cde1be5db41bb45be11ef78c3fc230b9458fd6afdc6501c1c7891d9fac8139edb2bdd0234f95401e32dbe31fe5d027bb8f92cff8c50", 0x68}, {&(0x7f0000000780)="19db3c1471a156e0faa36083054060a4f010d11dedf7781d0cf631fd4989434072fe56e42f73d62a51a38a7d883b1df86e33818599fbe44a0bd5f0822909d3586d26a57c1521a866f5f242a24d8145b9b475f619eccb338e65249db68f9a5f471f23bb22b095a1f30cf70e7c", 0x6c}, {&(0x7f0000000540)="5c198abbebeccabf812fca", 0xb}, {&(0x7f0000000600)="e381b8a3faca2102d4ed", 0xa}, {&(0x7f0000000800)="7f72d306c3afda07eaa617a9ab0b05091b7c4bef1a891501482cafed353179857900bde2abefedd2d2ca1603114c784b8727b62178cd2656c85f059ae93bfc38a572237f3210e4f744af2914fe8fed0567fe4c0927892b9efcaa0b564cd2c62f30a09299568febc7f8cf31754fac1a3e975d02018afc9adf110296aeeda9df185310a31ce23cd13a18501d1befce90d3599a7d9cc2ebb2a2afcd34ca9f2b831fed81b8736fd673d0fe56e84d16587e82c77f700edbc6973dba89750660adc5f89ef3d5fdd7afcccda2a4cba0575db1a48c73da", 0xd3}, {&(0x7f0000000900)="b8a8dd280b058341c17a63d3deb53f301ccdb2d7c2d4d6d8884e3b7a8954cb90fe087f5602b4222cde6263ca735ccda71ede75c11104a1f2f6491652d47e6c6d65", 0x41}], 0x6, &(0x7f0000000a00)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x936}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x4e0475336a4c48fd, 0x10, 0x3, 0xf, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0x2, 0x9, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6c}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x67, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xcc}, @enc_lim={0x4, 0x1, 0x1}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x72, 0x9, '\x00', [@generic={0xe, 0x41, "3581b6c1d371f10984c93c178cf0be59dac585ef807f6af08b09e2144522805101112892b43a217c528ac5ca2083229037f278ac5d22f5b22e72b2e24b99fe287b"}, @ra, @jumbo={0xc2, 0x4, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0xe, 0x10, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xadaa}, @calipso={0x7, 0x18, {0x1, 0x4, 0xfc, 0xb2, [0x9, 0x5]}}, @calipso={0x7, 0x58, {0x2, 0x14, 0x4, 0x9, [0x8000, 0x6d31, 0x81, 0x8, 0x2, 0x5, 0x8, 0x0, 0x2, 0x6]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x280}, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000)

7m59.871957358s ago: executing program 33 (id=587):
r0 = socket$netlink(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="2c0000001900290029bd7000fbdbdf2102201000fd03"], 0x2c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="68020000210001000000000000000000ff0200000000000000000000000000017f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000a001000010000000000000008000b00000000002c001300e0000001007e00000000000000000000fc0000000000000000000000000000000000000000000000cc0111"], 0x268}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2c}, @NFTA_SET_DESC={0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa4}]}], {0x14, 0x10}}, 0x70}}, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0)
unshare(0x400)
bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x7fd, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
r3 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000500)=0xa, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5595, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x200}, 0x8)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={&(0x7f0000000100)="3606106cf43c43cf11c3f9afdf96a560cd83b368944f90bd250683003f429a2ab86328ed00920aade30e4fcb3fcc6e4fff2352150b678501e4cffe230b0270aa043448540c2f4d7825ef10171e7f3089602b6ed87a95", &(0x7f0000000200)=""/37, &(0x7f0000000240)="9df75dfc3a6570fc8b4dd7bab5cffa00", &(0x7f0000000340)="9470db117fa9b3857f94b2d07775592784ffa383b423eb97711f333df4d3891ba57b7f1c7a866f7ba01205640815ff2c0b65b3b6721cf639dd8065da342f58ba756fd351274c1970c86c446c8c0c31475928c631d6323595d30672ce4e66f537ac3b0d3f13ba5ace0736fbb7b252d09750eb2e271f261017cb559264203c1408aa4d77b0d9b539f996818b0eb29ffc17dca7b36612f750ba2ae592335d0000031ea381533024f5f2859fa89ecf8608f06c64c87becc90252d4cddc74607cfe4e8b36b54bae9a30382f0afcfff36732f118b80d32143e352825a5d0d5ae8f1ca0234137", 0x8, r6, 0x4}, 0x38)
connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94)
sendmsg$inet6(r5, &(0x7f0000000680)={&(0x7f0000000480)={0xa, 0x4e24, 0x4, @loopback, 0x80000000}, 0x1c, &(0x7f0000000980)=[{&(0x7f0000000700)="368df5d1561425718cbcafdeff40fa5e96cc5cd000b83a8065c8c24db35fd88e838846c5887ceaa2b2ab09c214566e9e8fbb9cde1be5db41bb45be11ef78c3fc230b9458fd6afdc6501c1c7891d9fac8139edb2bdd0234f95401e32dbe31fe5d027bb8f92cff8c50", 0x68}, {&(0x7f0000000780)="19db3c1471a156e0faa36083054060a4f010d11dedf7781d0cf631fd4989434072fe56e42f73d62a51a38a7d883b1df86e33818599fbe44a0bd5f0822909d3586d26a57c1521a866f5f242a24d8145b9b475f619eccb338e65249db68f9a5f471f23bb22b095a1f30cf70e7c", 0x6c}, {&(0x7f0000000540)="5c198abbebeccabf812fca", 0xb}, {&(0x7f0000000600)="e381b8a3faca2102d4ed", 0xa}, {&(0x7f0000000800)="7f72d306c3afda07eaa617a9ab0b05091b7c4bef1a891501482cafed353179857900bde2abefedd2d2ca1603114c784b8727b62178cd2656c85f059ae93bfc38a572237f3210e4f744af2914fe8fed0567fe4c0927892b9efcaa0b564cd2c62f30a09299568febc7f8cf31754fac1a3e975d02018afc9adf110296aeeda9df185310a31ce23cd13a18501d1befce90d3599a7d9cc2ebb2a2afcd34ca9f2b831fed81b8736fd673d0fe56e84d16587e82c77f700edbc6973dba89750660adc5f89ef3d5fdd7afcccda2a4cba0575db1a48c73da", 0xd3}, {&(0x7f0000000900)="b8a8dd280b058341c17a63d3deb53f301ccdb2d7c2d4d6d8884e3b7a8954cb90fe087f5602b4222cde6263ca735ccda71ede75c11104a1f2f6491652d47e6c6d65", 0x41}], 0x6, &(0x7f0000000a00)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @tclass={{0x14, 0x29, 0x43, 0x936}}, @rthdr_2292={{0x98, 0x29, 0x39, {0x4e0475336a4c48fd, 0x10, 0x3, 0xf, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @local, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1c}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0x2, 0x9, 0x0, [@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast2}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6c}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x67, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xcc}, @enc_lim={0x4, 0x1, 0x1}]}}}, @dstopts={{0x68, 0x29, 0x37, {0x72, 0x9, '\x00', [@generic={0xe, 0x41, "3581b6c1d371f10984c93c178cf0be59dac585ef807f6af08b09e2144522805101112892b43a217c528ac5ca2083229037f278ac5d22f5b22e72b2e24b99fe287b"}, @ra, @jumbo={0xc2, 0x4, 0x8}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6}}, @dstopts_2292={{0xa0, 0x29, 0x4, {0xe, 0x10, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0xadaa}, @calipso={0x7, 0x18, {0x1, 0x4, 0xfc, 0xb2, [0x9, 0x5]}}, @calipso={0x7, 0x58, {0x2, 0x14, 0x4, 0x9, [0x8000, 0x6d31, 0x81, 0x8, 0x2, 0x5, 0x8, 0x0, 0x2, 0x6]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}], 0x280}, 0x10)
r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_SESSION_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000)

9.611177608s ago: executing program 3 (id=9379):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000098ccf11e83609f6e00000085100000faffffff00000000a000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x6}, 0x94)
r1 = socket(0x2a, 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108)
setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x0, @private=0xa010101}}}, 0x108)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
unshare(0x400)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4)
getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xff4b)
r4 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000200))
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4)
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000128bd7000fcdbdf250c0000000800390007000000060028000000000008002c000200000008000300", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x8046}, 0x20000000)
socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', <r6=>0x0})
close(r4)
r7 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', r8, 0x29, 0xf, 0xb, 0x1, 0x10, @private0, @mcast2, 0x10, 0x7, 0x5b, 0x4}})
sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x17fbe57}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x5004)

9.492484658s ago: executing program 3 (id=9380):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'\x00', <r1=>0x0})
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r2}, 0x18)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000280))
close(0x3)
r5 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
sendmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10)
connect$inet(r7, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32)
sendmmsg(r6, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
recvmmsg(r3, &(0x7f0000000d00), 0xf000, 0x10002, 0x0)
recvmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x12000)
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r0)
sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="25000000dacf8f6d13b066809ee3e1e42cd0ad9f6b7379cddca91e59d02ca3c66f65c284d116947a6ccef7dce6f208e21d82c142f82844f66c", @ANYRES16=r8, @ANYBLOB="01002cbd7000ffdbdf25040000000900010073797a3100000000140002006e696376663000"/46], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x400c0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c000100000000000000000008000500", @ANYRES32=r1, @ANYBLOB="8100000000f51b008fb0babc34"], 0x38}}, 0x0)

9.413088794s ago: executing program 4 (id=9382):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000007000000e27f000003"], 0x50) (async, rerun: 64)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x7, 0x6, 0x8, 0x0, 0x1}, 0x50) (rerun: 64)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f0000000880), &(0x7f00000008c0)=r0}, 0x20)
r3 = socket$inet6(0xa, 0x2, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25GETINFO(r4, 0x89ed, &(0x7f0000000000)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x34)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (rerun: 32)
bind(r8, &(0x7f00000002c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x80) (async)
bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70)
sendmmsg$inet6(r3, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

9.412414622s ago: executing program 3 (id=9383):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @remote})
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, <r3=>0x0, 0x0}}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xf, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x583e}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1b, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r3, r4, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014)
recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x14, 0x30, 0x2, 0x70bd25}, 0x14}}, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0)
r8 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000b95000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x40)
r9 = socket(0x10, 0x80003, 0x0)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'lo\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x1}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x10b}]}}]}, 0x40}}, 0x0)
connect$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0xffffffff}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe18}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

9.303082908s ago: executing program 3 (id=9384):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
pselect6(0x0, 0x0, &(0x7f0000000180)={0x9, 0x2, 0x7fff, 0x22c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x7fffffff, 0x9, 0x81, 0xa1, 0x3, 0xff, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, 0x0)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @empty}, 0x3ff, 0x0, 0x2}}, 0x2e)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80)
ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e1e, @empty}, {0x2, 0x4e23, @multicast1}, 0x67, 0x0, 0x0, 0x0, 0xff80, 0x0, 0xffffffff9fcc7cfb, 0x100009, 0xead})
r6 = socket$inet6(0xa, 0x6, 0x6)
ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x3, 0x5, 0x1})
socket$inet6_mptcp(0xa, 0x1, 0x106)
r7 = socket$nl_route(0x10, 0x3, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0)
getsockname$packet(r9, &(0x7f0000000300)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0xa)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x9}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST_MASK={0x14, 0x22, [0xffff00, 0xffffffff, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @empty}]}}]}, 0x5c}}, 0x4040004)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x12, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000020000000000000006000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018120000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xc, 0x6c, &(0x7f0000000380)=""/108, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x3, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r6], &(0x7f0000000480), 0x10, 0x6}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x50)

9.302165509s ago: executing program 4 (id=9385):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1b, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x80, 0x7}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x0, 0x40}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}, 0x88}}, 0x40088)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x1a, 0x0, &(0x7f0000000000))
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}, @IFLA_BOND_TLB_DYNAMIC_LB={0x5}]}}}]}, 0x44}}, 0x0)

9.221925628s ago: executing program 4 (id=9386):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="180001801400020064756d6d7930"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r3, &(0x7f0000000300)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x8, 0x24, 0x68, 0x0, 0x3, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0x6, 0x7, "ee4ed3", 0x4, "16532e"}}}}}}}, 0x36)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)=@o_path={&(0x7f0000000080)='./file0\x00', r5, 0x4000, r4}, 0x18)
r6 = socket(0x2b, 0x803, 0x1800003)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000150012800b0001006970766c616e00000400028708000500", @ANYRES32=r7], 0x44}}, 0x8000)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x11, 0x80a, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bond0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r10, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0)

9.099126375s ago: executing program 4 (id=9388):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={<r2=>0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r2, 0xfffffff7}, &(0x7f0000000140)=0x8)
writev(r0, 0xffffffffffffffff, 0x1)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001080000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xb1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000340)={'vcan0\x00', <r6=>0x0})
bind$can_raw(0xffffffffffffffff, &(0x7f0000000380)={0x1d, r6}, 0x10)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r7}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wg1\x00'}]}, 0x50}}, 0x0)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000000), &(0x7f0000000040))

8.44181452s ago: executing program 3 (id=9395):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000140)={0x34, r1, 0x301, 0x1000000, 0xffffffff, {0x4e}, [@handle=@nsim={{0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0)

8.434635832s ago: executing program 3 (id=9396):
ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000140)={0x9d, 0xfd}) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030700006200190000000b0000000800030048"], 0x1c}}, 0x0) (async)
r2 = socket(0x840000000002, 0x3, 0xff) (async, rerun: 32)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800) (async, rerun: 32)
socket(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x34}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (async)
sendmmsg$inet(r2, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0xc044) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0xf, 0x2, 0x6, 0x7f}, 0x10) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000020000000068ee66fd7139ce985b6ffe"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000003c0007010004000000000000047c00000400fc80c32c194b0ca791c924d878081983d9491e0146938f7a3d6f8329c5e37443dbca62fa911123a591838fa7fd2073076345a3b9ede146550f44af37231bda8764aae1cdb21e4214dab80883cbde9827fa8c8c5af646fa1cdf51735daa3b5aafd53fa3fa82eb9d62714c65c791966cd11623175137c92999871edf339dd45472e294828635c6a7372c449777a5d0d45ea22ec3afd57ea5d16a08099ed82cdd12"], 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000) (async, rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (rerun: 64)
syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64)
r10 = accept$alg(r9, 0x0, 0x0) (rerun: 64)
recvmmsg(r10, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4081, 0xff1}], 0x1}, 0x10f}], 0x1, 0x2101, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0)

8.266548021s ago: executing program 34 (id=9396):
ioctl$SIOCX25SCAUSEDIAG(0xffffffffffffffff, 0x89ec, &(0x7f0000000140)={0x9d, 0xfd}) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030700006200190000000b0000000800030048"], 0x1c}}, 0x0) (async)
r2 = socket(0x840000000002, 0x3, 0xff) (async, rerun: 32)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c340", 0x8d}], 0x1}], 0x1, 0x40800) (async, rerun: 32)
socket(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0) (async)
r4 = socket(0x10, 0x803, 0x2)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x34}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (async)
sendmmsg$inet(r2, &(0x7f0000000a00)=[{{&(0x7f00000004c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000f40)="a905000000007464000100000000000000e5c01104b61aa67bf2154694dfa033fe5312e4", 0x24}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_ttl={{0x14}}], 0x18}}], 0x2, 0xc044) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000000)={0xf, 0x2, 0x6, 0x7f}, 0x10) (async)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000020000000068ee66fd7139ce985b6ffe"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="180000003c0007010004000000000000047c00000400fc80c32c194b0ca791c924d878081983d9491e0146938f7a3d6f8329c5e37443dbca62fa911123a591838fa7fd2073076345a3b9ede146550f44af37231bda8764aae1cdb21e4214dab80883cbde9827fa8c8c5af646fa1cdf51735daa3b5aafd53fa3fa82eb9d62714c65c791966cd11623175137c92999871edf339dd45472e294828635c6a7372c449777a5d0d45ea22ec3afd57ea5d16a08099ed82cdd12"], 0x18}, 0x1, 0x0, 0x0, 0x20008800}, 0xc000) (async, rerun: 64)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) (rerun: 64)
syz_init_net_socket$llc(0x1a, 0x3, 0x0) (async)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r8, 0x0) (async)
r9 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r9, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) (async, rerun: 64)
r10 = accept$alg(r9, 0x0, 0x0) (rerun: 64)
recvmmsg(r10, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4081, 0xff1}], 0x1}, 0x10f}], 0x1, 0x2101, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0)

8.221800725s ago: executing program 4 (id=9398):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) (async)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0x9) (async)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x25dfdbfe, {0xa}}, 0x14}}, 0x0)
r5 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) (async)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) (async)
sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x4000040) (async)
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = socket(0x23, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r10=>0x0})
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x2e5, 0x70bd26, 0x0, {0x7, r10}, [@MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x0, 0xffe, {@ip4=@empty}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0xe0b, 0xfefffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)
sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000440)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)

7.993329004s ago: executing program 4 (id=9399):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettaction={0x98, 0x32, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5900}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9b}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x98}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="140004006e696376663000ffffffff0000000000080005000800"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0)

7.992978405s ago: executing program 35 (id=9399):
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x44}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'gretap0\x00'})
sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@gettaction={0x98, 0x32, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5900}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9b}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x98}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="140004006e696376663000ffffffff0000000000080005000800"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x240048d0)

1.562354703s ago: executing program 2 (id=9411):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000000)={0xffff, 0xffff, 0x4, 0x1}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="c000000010000304000000000300000000000400", @ANYRES32=0x0, @ANYBLOB="0003000000000000640012800b000100677265746170000054000280050008005a000000080007000a01010008000100", @ANYBLOB="080014"], 0xc0}}, 0x0)

1.478005294s ago: executing program 2 (id=9412):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='b *:4\t\n', @ANYRESHEX=r1], 0xa)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800005b7bedf4fbb651eb1600000000000000000000000000850000006100000085000000230000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f088a8", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.476839049s ago: executing program 2 (id=9413):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='percpu_alloc_percpu\x00', r1, 0x0, 0x180000}, 0x18)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
listen(r2, 0xfffffffc)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="00010000e180000008001b000000000021b4644776a662f51ff93814bd1af87a9f0019becac5b6ad195006795ffb3042767d7c0b391681627041dc7eab9a70f459dcd6ebb86188be9d39bea5a6b96b3dc9a382f160a9a1fbacd4ce811c82fa8f9d7bfa48275325c46d24c3ddeaa6073f5a7a79662c8750f3853e15f5193e615259edba244cbae837c73b38232b12d248f322a206dfdc020df6c2fa65dca975cd64da81262c024eb4cb67340ca9d845cbb3"], 0x28}}, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x100}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
close(0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
socket$netlink(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)
socket(0x10, 0x803, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x4)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100))
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)

1.180096177s ago: executing program 2 (id=9414):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00')
unshare(0x6a040000)
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, 0x0, 0x4000)
unshare(0x2c060000)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
r1 = socket(0x2a, 0x2, 0x0)
unshare(0x30000)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=@newtfilter={0x578, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x548, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xc}}, @TCA_BASIC_POLICE={0x480, 0x4, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff7, 0xffffffffffffffff, 0xfffff688, 0xe, 0x0, {0x7f, 0x1, 0x5, 0x7, 0xd}, {0x18, 0x2, 0x9, 0xffff, 0x5, 0x1}, 0x7, 0x7, 0x8}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xae, 0x8001, 0x800, 0x6, 0x7, 0x8, 0xff, 0x6, 0x8, 0x80000001, 0x0, 0xc0000000, 0x101, 0x0, 0x8, 0x0, 0x3d, 0x1, 0x1, 0x8, 0xc3ef, 0xdae, 0x6, 0x7fff, 0x4, 0x6, 0x36, 0x3, 0xff, 0x1, 0x10000, 0x9, 0xfff, 0x5, 0xfffffff7, 0x4, 0x6, 0x1, 0xe, 0x7ff, 0x4f, 0x8, 0x26ca0f8a, 0x1049, 0xdd3e, 0x4, 0x0, 0xd, 0x10, 0x9da, 0x9, 0x30000000, 0x8, 0x40, 0xffffff80, 0x0, 0x8, 0x1, 0x6, 0x0, 0xec3b, 0x2, 0x5cc8, 0x7fffffff, 0xd, 0x5, 0x8, 0x7, 0x3, 0x7, 0x4, 0xa, 0x3, 0x1, 0x0, 0x7, 0x9, 0x5, 0x96f, 0x1, 0x3ff, 0x2, 0x3, 0x7, 0x6, 0x0, 0x1, 0xb, 0x9, 0x9, 0xffffffc0, 0x7, 0x8000, 0xd, 0x2, 0x200, 0x5a7, 0x7, 0x3, 0x9, 0x2, 0x8, 0x4, 0x6, 0xd7, 0x6, 0xa, 0xb583, 0x1, 0x1, 0x9, 0x9, 0x5, 0x2, 0x4, 0x50, 0x4, 0xd197, 0x405, 0x76, 0x1cf, 0x7fffffff, 0x6, 0x5, 0x2, 0x6, 0xd, 0x6, 0x8, 0xfff, 0xefaa, 0x1, 0x4, 0x8, 0xfffffff8, 0xfffffffa, 0x800, 0xe2a, 0x5, 0x2, 0xfffeffff, 0x0, 0xfffffffd, 0x2, 0x1, 0x5, 0x3, 0xd, 0x4, 0xbd, 0x81, 0x6, 0x7f, 0x3, 0x1, 0x3ff, 0x6, 0xfffff31c, 0x6, 0x3, 0xff, 0x9, 0x5, 0x1, 0x7ff, 0x9, 0x7, 0xb, 0x5, 0x10001, 0x1, 0x9, 0x3, 0x8000, 0xd50, 0x6, 0x0, 0x1e, 0x6, 0x9, 0x7, 0x9, 0x5, 0x5, 0x3b55, 0x4, 0x0, 0x5, 0x8, 0x3, 0x4, 0x0, 0x0, 0x200, 0x4, 0x8, 0x2, 0x7, 0x4, 0xcb2f, 0x6, 0xfffffffb, 0xfff, 0x800, 0x0, 0x4, 0x400, 0xffff, 0xa3c, 0x5, 0xffff31a2, 0x1ff, 0x0, 0x9, 0xbf, 0x291, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0x80000000, 0xfffffff8, 0xbe, 0x4, 0xffffffff, 0x7, 0x2, 0x6d96635a, 0x8, 0x7fffffff, 0x0, 0x4, 0x9, 0x4, 0x5, 0x5, 0x7, 0x6, 0xa0, 0x100, 0x200, 0x6, 0x4, 0x3, 0xb, 0x1, 0x7, 0x1, 0x9, 0x0, 0x1, 0x2]}]}, @TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xb8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xac, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x7, 0x8}, {{0x1, 0x0, 0x1}, {0x3, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x401, 0x3, 0x8001}, {0x4, 0x4, 0x8, 0x81}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x1577, 0x1, 0xfffc}, {0x4e3b238, 0x7, 0xf566, 0x4, 0x5, 0x1, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x40, 0x8, 0xfff9}, {0xffffffffffffffff, 0x6, 0x1}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x7fff}, {0x4, 0x5, 0x1}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x4, 0x1, 0x3}, {0xe1d, 0xd, 0x0, 0x1, 0x9, 0x1}}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xa}, {0x5, 0x9, 0x1, "abc00e12181f79fbda"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x578}}, 0x2000c800)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

80.145926ms ago: executing program 2 (id=9415):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000040)="11da", 0x2)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
unshare(0x22020600)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
getsockopt$bt_hci(r2, 0x118, 0x3, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x5})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000005f00)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000)
r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1)
sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r6, 0x8, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa4b}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x101}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)

0s ago: executing program 2 (id=9416):
r0 = socket(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300) (async)
r1 = socket$packet(0x11, 0x2, 0x300)
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000)
socket$inet6(0xa, 0x3, 0x8)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200200002d00091327bd70000000000006"], 0x20}}, 0x84)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffff2c, 0x8002}}]}, 0x44}}, 0x400c4) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffff2c, 0x8002}}]}, 0x44}}, 0x400c4)

kernel console output (not intermixed with test programs):

0 to HW filter on device bond46
[  447.839294][T30706] bond44: (slave bond46): Enslaving as an active interface with an up link
[  447.909788][T30734] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  448.262437][T30739] netlink: del zone limit has 4 unknown bytes
[  448.290360][T30754] __nla_validate_parse: 21 callbacks suppressed
[  448.290370][T30754] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7229'.
[  448.866853][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.869617][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.884278][T30781] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7235'.
[  448.887595][T30774] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7235'.
[  448.986161][T30778] pim6reg1: entered allmulticast mode
[  449.034408][T30778] validate_nla: 7 callbacks suppressed
[  449.034418][T30778] netlink: 'syz.3.7237': attribute type 1 has an invalid length.
[  449.040623][T30778] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7237'.
[  449.221329][T30797] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7242'.
[  449.232559][T30797] netlink: 'syz.3.7242': attribute type 1 has an invalid length.
[  449.236243][T30796] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  449.265319][T30800] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7243'.
[  449.358083][T30814] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7247'.
[  449.411549][T30822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7250'.
[  449.584583][T30835] ip6gretap0 speed is unknown, defaulting to 1000
[  449.587648][T30835] C speed is unknown, defaulting to 1000
[  449.592591][T30836] ip6gretap0 speed is unknown, defaulting to 1000
[  449.595888][T30836] C speed is unknown, defaulting to 1000
[  449.622252][T30839] vlan1: entered promiscuous mode
[  449.624011][T30839] bridge0: entered promiscuous mode
[  449.671575][T30835] lo speed is unknown, defaulting to 1000
[  449.833994][T30836] lo speed is unknown, defaulting to 1000
[  449.896851][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  449.899575][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.240349][T30848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7256'.
[  450.283506][T30852] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled
[  450.342372][T30854] netlink: 'syz.4.7258': attribute type 3 has an invalid length.
[  450.345184][T30854] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7258'.
[  450.449803][T30870] netlink: 'syz.4.7264': attribute type 1 has an invalid length.
[  450.680684][T30897] netlink: 'syz.2.7274': attribute type 1 has an invalid length.
[  450.688244][T30897] netlink: 'syz.2.7274': attribute type 1 has an invalid length.
[  450.691551][T30902] syzkaller1: entered promiscuous mode
[  450.694532][T30902] syzkaller1: entered allmulticast mode
[  450.760269][T30906] netlink: 'syz.2.7277': attribute type 1 has an invalid length.
[  450.768049][T30906] netlink: 'syz.2.7277': attribute type 1 has an invalid length.
[  450.773160][T30906] netlink: 'syz.2.7277': attribute type 1 has an invalid length.
[  450.779383][T30906] netlink: 'syz.2.7277': attribute type 1 has an invalid length.
[  450.834354][T30915] veth1_to_team: entered allmulticast mode
[  450.939401][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.168597][T30941] tun0: tun_chr_ioctl cmd 2148045848
[  451.171762][T30941] tun0: tun_chr_ioctl cmd 21731
[  451.450834][T30959] gretap6: entered allmulticast mode
[  451.455628][T30959] bond37: (slave gretap6): making interface the new active one
[  451.461141][T30959] bond37: (slave gretap6): Enslaving as an active interface with an up link
[  451.976833][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  451.979576][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  452.010172][T31039] syzkaller1: entered promiscuous mode
[  452.011977][T31039] syzkaller1: entered allmulticast mode
[  452.019753][T31039] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  452.119669][T31042] syzkaller1: entered promiscuous mode
[  452.121589][T31042] syzkaller1: entered allmulticast mode
[  452.193455][T31051] syzkaller1: entered promiscuous mode
[  452.195627][T31051] syzkaller1: entered allmulticast mode
[  452.220072][T31058] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  452.364386][T31065] bond23: (slave bridge20): Releasing active interface
[  452.370752][T31065] bond27: left allmulticast mode
[  452.372977][T31065] bridge23: port 1(bond27) entered disabled state
[  453.016896][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  453.113286][T31088] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  453.189930][T31092] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  453.313731][T31102] bridge0: Device is already in use.
[  453.409592][T31121] tipc: Enabling of bearer <eth:netpci0> rejected, max 3 bearers permitted
[  453.489941][T31131] __nla_validate_parse: 86 callbacks suppressed
[  453.489952][T31131] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7344'.
[  453.499388][T31134] netlink: 84 bytes leftover after parsing attributes in process `syz.4.7345'.
[  453.504608][T31135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7346'.
[  453.589461][T31149] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  453.642939][T31146] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7349'.
[  453.698218][T31161] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  453.708622][T31162] ip6gretap0 speed is unknown, defaulting to 1000
[  453.709240][T31161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7353'.
[  453.715023][T31162] C speed is unknown, defaulting to 1000
[  453.916350][T31162] lo speed is unknown, defaulting to 1000
[  453.946395][T31175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7357'.
[  453.955199][T31175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7357'.
[  454.066809][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.069640][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  454.150313][T31182] wg1: left promiscuous mode
[  454.154223][T31182] wg1: left allmulticast mode
[  454.156508][T31182] veth0_to_team: left promiscuous mode
[  454.159822][T31182] veth0_to_team: left allmulticast mode
[  454.166176][T31182] vlan0: left promiscuous mode
[  454.186358][T31182] syzkaller0: left promiscuous mode
[  454.189564][T31182] syzkaller0: left allmulticast mode
[  454.265783][T31184] siw: device registration error -23
[  454.416173][T31186] validate_nla: 68 callbacks suppressed
[  454.416183][T31186] netlink: 'syz.3.7361': attribute type 1 has an invalid length.
[  454.481007][T31186] bond29: (slave bridge24): making interface the new active one
[  454.484072][T31186] bond29: (slave bridge24): Enslaving as an active interface with an up link
[  454.567356][T31200] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7365'.
[  454.621014][T31207] netlink: 'syz.4.7368': attribute type 10 has an invalid length.
[  454.629436][T31207] syzkaller0: left promiscuous mode
[  454.631180][T31207] syzkaller0: left allmulticast mode
[  454.745612][T31217] netlink: 'syz.4.7371': attribute type 1 has an invalid length.
[  454.763811][T31219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7372'.
[  454.812054][T31228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7374'.
[  454.824332][   T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  454.828033][   T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  454.831491][   T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  454.834692][   T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  454.879124][T31222] pim6reg: entered allmulticast mode
[  455.096952][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.100417][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  455.541520][T31276] bond0: Device is already in use.
[  455.616892][T31221] pim6reg: left allmulticast mode
[  455.760984][T31302] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  455.967702][T31328] dvmrp0: entered allmulticast mode
[  456.146842][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  456.274895][T31360] netlink: 'syz.3.7414': attribute type 4 has an invalid length.
[  456.653567][T31376] pim6reg1: entered promiscuous mode
[  456.655756][T31376] pim6reg1: entered allmulticast mode
[  457.047296][T31404] netlink: 'syz.4.7429': attribute type 1 has an invalid length.
[  457.064219][T31404] 8021q: adding VLAN 0 to HW filter on device bond38
[  457.075972][T31404] bond38: (slave gretap7): making interface the new active one
[  457.081944][T31404] bond38: (slave gretap7): Enslaving as an active interface with an up link
[  457.177058][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.180187][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  457.314178][T31426] sysfs: cannot create duplicate filename '/class/ieee80211/^>>Mv^侦Kc'A_xDpj8TT!'
[  457.320699][T31426] CPU: 1 UID: 0 PID: 31426 Comm: syz.4.7433 Not tainted syzkaller #0 PREEMPT(full) 
[  457.320717][T31426] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  457.320726][T31426] Call Trace:
[  457.320731][T31426]  <TASK>
[  457.320737][T31426]  dump_stack_lvl+0x189/0x250
[  457.320757][T31426]  ? __pfx_dump_stack_lvl+0x10/0x10
[  457.320766][T31426]  ? __pfx__printk+0x10/0x10
[  457.320778][T31426]  ? kernfs_path_from_node+0x2f/0x290
[  457.320787][T31426]  ? kernfs_path_from_node+0x250/0x290
[  457.320793][T31426]  ? kernfs_path_from_node+0x2f/0x290
[  457.320802][T31426]  sysfs_warn_dup+0x8e/0xa0
[  457.320810][T31426]  sysfs_do_create_link_sd+0xc0/0x110
[  457.320819][T31426]  device_add_class_symlinks+0x1cf/0x240
[  457.320829][T31426]  device_add+0x475/0xb50
[  457.320838][T31426]  wiphy_register+0x1ba6/0x28d0
[  457.320865][T31426]  ? __pfx_wiphy_register+0x10/0x10
[  457.320879][T31426]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  457.320896][T31426]  ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  457.320917][T31426]  ieee80211_register_hw+0x3425/0x4080
[  457.320942][T31426]  ? ieee80211_register_hw+0x1441/0x4080
[  457.320960][T31426]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  457.320975][T31426]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  457.320996][T31426]  ? __hrtimer_setup+0x187/0x210
[  457.321007][T31426]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  457.321028][T31426]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  457.321095][T31426]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  457.321112][T31426]  ? trace_kmalloc+0x1f/0xd0
[  457.321125][T31426]  ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0
[  457.321141][T31426]  ? kstrndup+0xbf/0x160
[  457.321161][T31426]  hwsim_new_radio_nl+0xea4/0x1b10
[  457.321178][T31426]  ? __pfx___nla_validate_parse+0x10/0x10
[  457.321207][T31426]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  457.321232][T31426]  ? __nla_parse+0x40/0x60
[  457.321251][T31426]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  457.321268][T31426]  genl_family_rcv_msg_doit+0x215/0x300
[  457.321278][T31426]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  457.321291][T31426]  ? bpf_lsm_capable+0x9/0x20
[  457.321300][T31426]  ? security_capable+0x7e/0x2e0
[  457.321313][T31426]  genl_rcv_msg+0x60e/0x790
[  457.321327][T31426]  ? __pfx_genl_rcv_msg+0x10/0x10
[  457.321338][T31426]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  457.321362][T31426]  netlink_rcv_skb+0x208/0x470
[  457.321377][T31426]  ? __lock_acquire+0xab9/0xd20
[  457.321394][T31426]  ? __pfx_genl_rcv_msg+0x10/0x10
[  457.321408][T31426]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  457.321441][T31426]  ? down_read+0x1ad/0x2e0
[  457.321461][T31426]  genl_rcv+0x28/0x40
[  457.321473][T31426]  netlink_unicast+0x82f/0x9e0
[  457.321497][T31426]  ? __pfx_netlink_unicast+0x10/0x10
[  457.321515][T31426]  ? netlink_sendmsg+0x642/0xb30
[  457.321531][T31426]  ? skb_put+0x11b/0x210
[  457.321546][T31426]  netlink_sendmsg+0x805/0xb30
[  457.321571][T31426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  457.321591][T31426]  ? aa_sock_msg_perm+0xf1/0x1d0
[  457.321614][T31426]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  457.321626][T31426]  ? __pfx_netlink_sendmsg+0x10/0x10
[  457.321644][T31426]  __sock_sendmsg+0x21c/0x270
[  457.321664][T31426]  ____sys_sendmsg+0x505/0x830
[  457.321680][T31426]  ? __pfx_____sys_sendmsg+0x10/0x10
[  457.321699][T31426]  ? import_iovec+0x74/0xa0
[  457.321713][T31426]  ___sys_sendmsg+0x21f/0x2a0
[  457.321722][T31426]  ? __pfx____sys_sendmsg+0x10/0x10
[  457.321745][T31426]  ? __fget_files+0x2a/0x420
[  457.321760][T31426]  ? __fget_files+0x3a0/0x420
[  457.321783][T31426]  __x64_sys_sendmsg+0x19b/0x260
[  457.321797][T31426]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  457.321819][T31426]  ? rcu_is_watching+0x15/0xb0
[  457.321835][T31426]  ? do_syscall_64+0xbe/0x3b0
[  457.321854][T31426]  do_syscall_64+0xfa/0x3b0
[  457.321867][T31426]  ? lockdep_hardirqs_on+0x9c/0x150
[  457.321880][T31426]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.321891][T31426]  ? exc_page_fault+0x9f/0xf0
[  457.321907][T31426]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  457.321918][T31426] RIP: 0033:0x7ff75dd8ebe9
[  457.321929][T31426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  457.321939][T31426] RSP: 002b:00007ff75eba6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  457.321950][T31426] RAX: ffffffffffffffda RBX: 00007ff75dfb6090 RCX: 00007ff75dd8ebe9
[  457.321955][T31426] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 000000000000000a
[  457.321959][T31426] RBP: 00007ff75de11e19 R08: 0000000000000000 R09: 0000000000000000
[  457.321963][T31426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  457.321967][T31426] R13: 00007ff75dfb6128 R14: 00007ff75dfb6090 R15: 00007ffcc2154bc8
[  457.321979][T31426]  </TASK>
[  457.571794][T31437] bond0: default FDB implementation only supports local addresses
[  457.642094][T31441] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  457.644701][T31441] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  457.746481][T31453] xfrm3: entered promiscuous mode
[  457.748324][T31453] xfrm3: entered allmulticast mode
[  457.860344][T31470] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  457.864367][T31470] syzkaller0: entered promiscuous mode
[  457.866643][T31470] syzkaller0: entered allmulticast mode
[  457.901757][T31473] syzkaller0: entered promiscuous mode
[  457.904310][T31473] syzkaller0: entered allmulticast mode
[  457.925336][T31479] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  457.972579][T31481] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  457.990858][T31481] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  458.028371][T31487] netlink: 'syz.4.7459': attribute type 1 has an invalid length.
[  458.044771][T31487] 8021q: adding VLAN 0 to HW filter on device bond39
[  458.057886][T31487] 8021q: adding VLAN 0 to HW filter on device bond39
[  458.060202][T31487] bond39: (slave vxcan3): The slave device specified does not support setting the MAC address
[  458.064633][T31487] bond39: (slave vxcan3): Error -95 calling set_mac_address
[  458.078467][T31489] syzkaller1: entered promiscuous mode
[  458.080793][T31489] syzkaller1: entered allmulticast mode
[  458.113328][T31491] veth59: entered promiscuous mode
[  458.119366][T31491] bond39: (slave veth59): Enslaving as an active interface with a down link
[  458.124453][T31491] 8021q: adding VLAN 0 to HW filter on device bond39
[  458.304481][T31507] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.415302][T31523] netlink: 'syz.4.7469': attribute type 9 has an invalid length.
[  458.421741][T31523] macvlan5: entered promiscuous mode
[  458.423544][T31523] hsr0: entered promiscuous mode
[  458.425357][T31523] macvlan5: entered allmulticast mode
[  458.428232][T31523] hsr0: entered allmulticast mode
[  458.430165][T31523] hsr_slave_0: entered allmulticast mode
[  458.432261][T31523] hsr_slave_1: entered allmulticast mode
[  458.439748][T31525] netlink: 'syz.4.7469': attribute type 9 has an invalid length.
[  458.449230][T31525] macvlan6: entered promiscuous mode
[  458.453271][T31525] macvlan6: entered allmulticast mode
[  458.532842][T31531] __nla_validate_parse: 38 callbacks suppressed
[  458.532858][T31531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7471'.
[  458.539479][T31531] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7471'.
[  458.689215][T31539] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7475'.
[  458.701385][T31542] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  458.734445][T31545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7477'.
[  458.742103][T31546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7477'.
[  458.760702][T31544] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7477'.
[  458.764266][T31544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7477'.
[  459.000507][T31570] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  459.139886][T31576] ip6gretap0 speed is unknown, defaulting to 1000
[  459.143850][T31576] C speed is unknown, defaulting to 1000
[  459.317162][T31576] lo speed is unknown, defaulting to 1000
[  459.609564][T31604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7497'.
[  459.612621][T31604] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7497'.
[  459.615679][T31606] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  459.728466][T31604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7497'.
[  459.763123][T31617] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  459.783907][T31623] netlink: 'syz.3.7502': attribute type 2 has an invalid length.
[  460.000137][T31648] nbd: couldn't find device at index 536870912
[  460.032632][T31654] netlink: 'syz.4.7512': attribute type 9 has an invalid length.
[  460.035459][T31654] netlink: 'syz.4.7512': attribute type 7 has an invalid length.
[  460.039247][T31654] netlink: 'syz.4.7512': attribute type 8 has an invalid length.
[  460.084599][T31658] netlink: 'syz.4.7514': attribute type 1 has an invalid length.
[  460.097829][T31661] netlink: 'syz.2.7515': attribute type 29 has an invalid length.
[  460.113249][T31662] netlink: 'syz.2.7515': attribute type 29 has an invalid length.
[  460.116216][T31661] netlink: 'syz.2.7515': attribute type 29 has an invalid length.
[  460.876643][T31712] netlink: 'syz.3.7525': attribute type 10 has an invalid length.
[  460.945122][T31724] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  461.263685][T31749] team0: Unable to change to the same mode the team is in
[  461.291337][T31756] netlink: 'syz.2.7541': attribute type 1 has an invalid length.
[  461.419830][T31771] pim6reg99999999: entered allmulticast mode
[  461.765023][T31807] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  462.302058][   T33] audit: type=1800 audit(1756440903.278:17): pid=31838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7565" name=5D80CEFF4AA6DC5F710E8DF1F7582C892AF8D26C5BD9C07CAA9E7DED20F3F5CE5E3A882A02450DCF19 dev="tmpfs" ino=11421 res=0 errno=0
[  462.769655][T31888] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  462.841518][T31892] bond47: entered promiscuous mode
[  462.843325][T31892] bond47: entered allmulticast mode
[  462.845340][T31892] 8021q: adding VLAN 0 to HW filter on device bond47
[  462.883721][ T8282] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  462.896004][ T8282] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  462.907673][ T8282] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  462.910394][ T8282] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  462.995214][T31908] x9: renamed from bridge_slave_0
[  463.156647][T31921] sctp: [Deprecated]: syz.4.7591 (pid 31921) Use of int in max_burst socket option.
[  463.156647][T31921] Use struct sctp_assoc_value instead
[  463.235175][T31923] IPVS: Error connecting to the multicast addr
[  463.240875][T31923] sch_tbf: burst 0 is lower than device vlan0 mtu (1514) !
[  463.705741][T31928] __nla_validate_parse: 40 callbacks suppressed
[  463.705756][T31928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7593'.
[  463.720134][T31928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7593'.
[  463.814388][T31932] ip6gretap0 speed is unknown, defaulting to 1000
[  463.819826][T31932] C speed is unknown, defaulting to 1000
[  463.943380][T31932] lo speed is unknown, defaulting to 1000
[  464.180729][T31950] netlink: 264 bytes leftover after parsing attributes in process `syz.3.7601'.
[  464.255373][T31958] netlink: 212364 bytes leftover after parsing attributes in process `syz.2.7604'.
[  464.265271][T31958] openvswitch: netlink: Message has 5 unknown bytes.
[  464.291320][T31954] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7602'.
[  464.391315][T31974] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  464.398550][T31974] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7610'.
[  464.401692][T31974] nbd: must specify at least one socket
[  464.569153][T31993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7615'.
[  464.607531][T32003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7617'.
[  464.744823][T32014] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  464.755544][T32014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7622'.
[  464.759284][T32014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7622'.
[  464.800264][T32017] ip6gretap0 speed is unknown, defaulting to 1000
[  464.803147][T32017] C speed is unknown, defaulting to 1000
[  464.910636][T32017] lo speed is unknown, defaulting to 1000
[  465.015832][T32037] validate_nla: 10 callbacks suppressed
[  465.015843][T32037] netlink: 'syz.4.7627': attribute type 1 has an invalid length.
[  465.381157][T32060] ip6gretap0 speed is unknown, defaulting to 1000
[  465.384133][T32060] C speed is unknown, defaulting to 1000
[  465.430406][T32063] sock: sock_timestamping_bind_phc: sock not bind to device
[  465.480999][T32060] lo speed is unknown, defaulting to 1000
[  466.235325][T32066] netlink: 'syz.3.7636': attribute type 83 has an invalid length.
[  466.477886][T32089] netlink: 'syz.3.7642': attribute type 11 has an invalid length.
[  466.481262][T32089] netlink: 'syz.3.7642': attribute type 11 has an invalid length.
[  466.522053][T32093] gretap0: mtu less than device minimum
[  466.647394][T32101] IPVS: set_ctl: invalid protocol: 89 10.1.1.1:20001
[  466.652063][T32101] IPVS: set_ctl: invalid protocol: 103 100.1.1.0:20000
[  466.778769][T32107] netlink: 'syz.4.7649': attribute type 5 has an invalid length.
[  466.781540][T32107] netlink: 'syz.4.7649': attribute type 7 has an invalid length.
[  466.835374][T32113] netlink: 'syz.4.7652': attribute type 1 has an invalid length.
[  466.863517][T32113] 8021q: adding VLAN 0 to HW filter on device bond40
[  466.897550][T32113] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  467.362040][T32143] netlink: 'syz.2.7662': attribute type 39 has an invalid length.
[  467.362042][T32144] netlink: 'syz.2.7662': attribute type 39 has an invalid length.
[  467.770064][T32189] syzkaller0: left promiscuous mode
[  467.772309][T32189] syzkaller0: left allmulticast mode
[  467.969024][T32191] syzkaller1: entered allmulticast mode
[  468.115483][T32211] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  468.570507][T32248] 8021q: adding VLAN 0 to HW filter on device bond48
[  468.581923][T32248] macvlan3: entered promiscuous mode
[  468.583688][T32248] macvlan3: entered allmulticast mode
[  468.586260][T32248] bond48: entered promiscuous mode
[  468.589478][T32248] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  468.593767][T32248] bond48: left promiscuous mode
[  468.912273][T32277] __nla_validate_parse: 27 callbacks suppressed
[  468.912341][T32277] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7700'.
[  468.979896][T32268] ip6gretap0 speed is unknown, defaulting to 1000
[  468.982823][T32268] C speed is unknown, defaulting to 1000
[  469.124188][T32268] lo speed is unknown, defaulting to 1000
[  469.604002][T32309] syzkaller0: entered promiscuous mode
[  469.606187][T32309] syzkaller0: entered allmulticast mode
[  469.611723][T32309] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  469.787040][T32327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7714'.
[  470.023303][T32349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7721'.
[  470.033815][T32349] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.044336][T32349] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7721'.
[  470.329448][T32378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7730'.
[  470.340081][T32381] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.7729'.
[  470.353478][T32378] bond49: entered promiscuous mode
[  470.356230][T32378] 8021q: adding VLAN 0 to HW filter on device bond49
[  470.443224][T32378] bond49 (unregistering): Released all slaves
[  470.452413][T32381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7729'.
[  470.456034][T32383] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  470.522958][T32388] netlink: 'syz.3.7731': attribute type 3 has an invalid length.
[  470.533627][T32388] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7731'.
[  470.618721][T32406] netlink: 1 bytes leftover after parsing attributes in process `syz.4.7735'.
[  470.758268][T32420] netlink: 'syz.3.7741': attribute type 2 has an invalid length.
[  470.812883][T32423] netlink: 'syz.3.7741': attribute type 2 has an invalid length.
[  470.818683][T32423] netlink: 'syz.3.7741': attribute type 3 has an invalid length.
[  470.828547][T32425] @: renamed from veth0_vlan
[  471.515941][T32472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7747'.
[  471.848608][T32515] syzkaller1: entered promiscuous mode
[  471.850445][T32515] syzkaller1: entered allmulticast mode
[  471.979110][T32529] netlink: 'syz.4.7764': attribute type 4 has an invalid length.
[  471.998101][ T5881] lo speed is unknown, defaulting to 1000
[  472.000467][ T5881] syz1: Port: 1 Link ACTIVE
[  472.044833][T32541] netlink: 'syz.4.7768': attribute type 2 has an invalid length.
[  472.132368][T32553] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  472.161209][T32555] netlink: 'syz.4.7772': attribute type 83 has an invalid length.
[  473.397392][T32595] netlink: 'syz.3.7786': attribute type 2 has an invalid length.
[  473.448012][T32602] ip6gretap0 speed is unknown, defaulting to 1000
[  473.451508][T32602] C speed is unknown, defaulting to 1000
[  473.565825][T32614] sch_tbf: burst 6 is lower than device team_slave_0 mtu (1514) !
[  473.629478][T32602] lo speed is unknown, defaulting to 1000
[  473.715970][T32623] netlink: 'syz.2.7792': attribute type 9 has an invalid length.
[  473.723220][T32623] netlink: 'syz.2.7792': attribute type 6 has an invalid length.
[  473.757295][   T11] block nbd2: Possible stuck request ffff888048320000: control (read@0,1024B). Runtime 60 seconds
[  473.761062][   T11] block nbd2: Possible stuck request ffff888048320200: control (read@1024,1024B). Runtime 60 seconds
[  473.764425][   T11] block nbd2: Possible stuck request ffff888048320400: control (read@2048,1024B). Runtime 60 seconds
[  473.769623][   T11] block nbd2: Possible stuck request ffff888048320600: control (read@3072,1024B). Runtime 60 seconds
[  473.921270][T32638] __nla_validate_parse: 10 callbacks suppressed
[  473.921279][T32638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7795'.
[  474.315284][T32672] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  474.323536][T32672] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7803'.
[  474.469023][T32686] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7807'.
[  474.565028][T32692] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7809'.
[  474.626029][T32696] siw: device registration error -23
[  474.630188][T32696] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7811'.
[  474.722405][T32706] netlink: 248 bytes leftover after parsing attributes in process `syz.3.7816'.
[  474.793332][T32706] syzkaller1: entered promiscuous mode
[  474.795163][T32706] syzkaller1: entered allmulticast mode
[  474.812203][T32710] 8021q: adding VLAN 0 to HW filter on device bond42
[  474.837692][T32710] 8021q: adding VLAN 0 to HW filter on device bond42
[  474.841091][T32710] bond42: (slave vxcan3): The slave device specified does not support setting the MAC address
[  474.845649][T32710] bond42: (slave vxcan3): Error -95 calling set_mac_address
[  474.873407][T32719] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7817'.
[  474.891844][T32719] 8021q: adding VLAN 0 to HW filter on device bond42
[  474.907887][T32710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7817'.
[  474.982000][T32726] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7821'.
[  475.042803][T32734] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  475.087508][T32736] openvswitch: netlink: Duplicate or invalid key (type 0).
[  475.089920][T32736] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  475.290443][T32751] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7830'.
[  475.534222][  T320] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (8)
[  475.569046][  T322] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  475.627626][  T329] validate_nla: 1 callbacks suppressed
[  475.627637][  T329] netlink: 'syz.4.7841': attribute type 13 has an invalid length.
[  476.002196][  T364] pim6reg1: entered promiscuous mode
[  476.004247][  T364] pim6reg1: entered allmulticast mode
[  476.101379][  T371] ip6gretap0 speed is unknown, defaulting to 1000
[  476.105731][  T371] C speed is unknown, defaulting to 1000
[  476.222352][  T371] lo speed is unknown, defaulting to 1000
[  476.234556][  T374] syzkaller1: entered promiscuous mode
[  476.237509][  T374] syzkaller1: entered allmulticast mode
[  476.568879][  T397] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  476.755798][  T411] ip6gretap0 speed is unknown, defaulting to 1000
[  476.761159][  T411] C speed is unknown, defaulting to 1000
[  476.883394][  T416] ip6gretap0 speed is unknown, defaulting to 1000
[  476.886294][  T416] C speed is unknown, defaulting to 1000
[  476.888171][  T411] lo speed is unknown, defaulting to 1000
[  477.009974][  T424] pim6reg: entered allmulticast mode
[  477.021956][  T423] pim6reg: left allmulticast mode
[  477.084726][  T416] lo speed is unknown, defaulting to 1000
[  477.305032][  T445] veth64: entered allmulticast mode
[  477.332746][  T447] netlink: 'syz.2.7868': attribute type 1 has an invalid length.
[  477.362579][  T450] netdevsim netdevsim4 netdevsim0: left allmulticast mode
[  477.365093][  T450] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  477.387203][  T450] tipc: Resetting bearer <eth:syzkaller0>
[  477.390101][  T450] syzkaller0: left promiscuous mode
[  477.391860][  T450] syzkaller0: left allmulticast mode
[  477.418383][  T450] gretap6: left allmulticast mode
[  477.449047][  T450] veth59: left promiscuous mode
[  477.463073][  T450] macvlan5: left promiscuous mode
[  477.464787][  T450] macvlan5: left allmulticast mode
[  477.470778][  T450] hsr0: left allmulticast mode
[  477.472414][  T450] hsr_slave_0: left allmulticast mode
[  477.475485][  T450] hsr_slave_1: left allmulticast mode
[  477.477711][  T450] hsr0: left promiscuous mode
[  477.479521][  T450] macvlan6: left promiscuous mode
[  477.481300][  T450] macvlan6: left allmulticast mode
[  477.493243][T27663] lo speed is unknown, defaulting to 1000
[  477.495307][T27663] syz1: Port: 1 Link DOWN
[  477.532405][  T463] sctp: [Deprecated]: syz.4.7872 (pid 463) Use of int in max_burst socket option.
[  477.532405][  T463] Use struct sctp_assoc_value instead
[  477.625317][  T476] openvswitch: netlink: Unknown VXLAN extension attribute 0
[  477.654888][  T478] netlink: 'syz.3.7878': attribute type 1 has an invalid length.
[  477.663742][  T478] netlink: 'syz.3.7878': attribute type 11 has an invalid length.
[  477.669166][  T478] nbd: must specify an index to disconnect
[  477.706370][  T480] netlink: 'syz.3.7879': attribute type 1 has an invalid length.
[  477.738669][  T480] 8021q: adding VLAN 0 to HW filter on device bond32
[  477.785614][  T486] mac80211_hwsim hwsim77 wlan1: entered allmulticast mode
[  477.792419][  T486] bond37: (slave gretap6): Releasing active interface
[  477.796211][  T486] bond38: (slave gretap7): Releasing active interface
[  477.800413][  T486] bond39: (slave veth59): Releasing active interface
[  477.814836][  T486] netlink: 'syz.4.7881': attribute type 10 has an invalid length.
[  477.938615][  T501] netlink: 'syz.4.7886': attribute type 1 has an invalid length.
[  477.953782][  T501] 8021q: adding VLAN 0 to HW filter on device bond43
[  477.975968][  T501] 8021q: adding VLAN 0 to HW filter on device bond43
[  477.978779][  T501] bond43: (slave vxcan3): The slave device specified does not support setting the MAC address
[  477.983139][  T501] bond43: (slave vxcan3): Error -95 calling set_mac_address
[  478.014834][  T503] sctp: [Deprecated]: syz.4.7886 (pid 503) Use of int in max_burst socket option.
[  478.014834][  T503] Use struct sctp_assoc_value instead
[  478.234112][  T523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.235906][  T522] netlink: 'syz.2.7890': attribute type 26 has an invalid length.
[  478.244862][  T523] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  478.263504][  T523] bond44: entered promiscuous mode
[  478.265385][  T523] bond44: entered allmulticast mode
[  478.267809][  T523] 8021q: adding VLAN 0 to HW filter on device bond44
[  478.332281][  T533] netlink: 'syz.4.7894': attribute type 2 has an invalid length.
[  478.395286][  T536] syzkaller0: entered promiscuous mode
[  478.400255][  T536] syzkaller0: entered allmulticast mode
[  478.444477][   T33] audit: type=1800 audit(1756440919.418:18): pid=534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7893" name="memory.events" dev="tmpfs" ino=13526 res=0 errno=0
[  479.076071][  T567] __nla_validate_parse: 20 callbacks suppressed
[  479.076081][  T567] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7906'.
[  479.125291][  T571] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  479.178732][  T577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7910'.
[  479.182821][  T577] netlink: 'syz.3.7910': attribute type 4 has an invalid length.
[  479.190664][ T7172] C speed is unknown, defaulting to 1000
[  479.192758][ T7172] syz2: Port: 1 Link ACTIVE
[  479.302397][  T584] syzkaller1: entered promiscuous mode
[  479.304303][  T584] syzkaller1: entered allmulticast mode
[  479.427704][  T586] syzkaller1: entered promiscuous mode
[  479.429978][  T586] syzkaller1: entered allmulticast mode
[  479.552883][  T603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7920'.
[  479.692007][  T614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7922'.
[  479.697775][  T614] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  479.763829][  T619] batadv_slave_0: entered promiscuous mode
[  479.765966][  T619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7923'.
[  480.142142][  T630] vxcan2: entered promiscuous mode
[  480.297308][  T633] netlink: 2 bytes leftover after parsing attributes in process `syz.4.7927'.
[  480.419636][  T640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7930'.
[  480.429458][  T640] vlan1: entered allmulticast mode
[  480.431212][  T640] bridge0: entered allmulticast mode
[  480.480057][  T641] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  480.729370][  T654] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.7933'.
[  480.770850][  T659] validate_nla: 66 callbacks suppressed
[  480.770864][  T659] netlink: 'syz.3.7935': attribute type 1 has an invalid length.
[  480.776373][  T659] netlink: 224 bytes leftover after parsing attributes in process `syz.3.7935'.
[  480.831008][  T667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7938'.
[  481.019026][  T684] sock: sock_timestamping_bind_phc: sock not bind to device
[  481.050700][  T688] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  481.094911][  T690] syzkaller1: entered promiscuous mode
[  481.097326][  T690] syzkaller1: entered allmulticast mode
[  481.270338][  T714] ip6gretap0 speed is unknown, defaulting to 1000
[  481.276260][  T714] C speed is unknown, defaulting to 1000
[  481.319584][  T723] netlink: 'syz.2.7953': attribute type 1 has an invalid length.
[  481.326847][  T723] netlink: 'syz.2.7953': attribute type 3 has an invalid length.
[  481.329737][  T723] NCSI netlink: No device for ifindex 246
[  481.351279][  T727] IPv6: Can't replace route, no match found
[  481.405060][  T734] nbd: must specify at least one socket
[  481.411670][  T733] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  481.429671][  T714] lo speed is unknown, defaulting to 1000
[  481.623066][  T758] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes.
[  481.713183][  T769] smc: net device bond0 applied user defined pnetid SYZ2
[  482.105651][  T787] syzkaller1: entered promiscuous mode
[  482.107751][  T787] syzkaller1: entered allmulticast mode
[  482.311990][  T795] ip6gretap0 speed is unknown, defaulting to 1000
[  482.314926][  T795] C speed is unknown, defaulting to 1000
[  482.395427][  T795] lo speed is unknown, defaulting to 1000
[  482.431538][  T800] ip6gretap0 speed is unknown, defaulting to 1000
[  482.436299][  T800] C speed is unknown, defaulting to 1000
[  482.544591][  T800] lo speed is unknown, defaulting to 1000
[  483.071371][  T864] netlink: 'syz.3.7986': attribute type 4 has an invalid length.
[  483.096146][  T864] netlink: 'syz.3.7986': attribute type 4 has an invalid length.
[  483.098923][T29743] C speed is unknown, defaulting to 1000
[  483.100762][T29743] syz2: Port: 1 Link DOWN
[  483.110520][T29743] C speed is unknown, defaulting to 1000
[  483.112382][T29743] syz2: Port: 1 Link ACTIVE
[  483.331382][  T894] only policy match revision 0 supported
[  483.331392][  T894] unable to load match
[  483.366200][  T901] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.396529][  T904] openvswitch: netlink: Multiple metadata blocks provided
[  483.429792][  T910] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  483.491947][  T926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.584141][  T944] ip6gretap0 speed is unknown, defaulting to 1000
[  483.587411][  T945] ip6gretap0 speed is unknown, defaulting to 1000
[  483.593339][  T945] C speed is unknown, defaulting to 1000
[  483.597170][  T944] C speed is unknown, defaulting to 1000
[  483.625025][  T951] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  483.635158][  T951] netlink: 'syz.3.8008': attribute type 39 has an invalid length.
[  483.756606][  T945] lo speed is unknown, defaulting to 1000
[  483.907417][  T944] lo speed is unknown, defaulting to 1000
[  484.075041][  T972] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  484.126397][  T987] netlink: 'syz.3.8018': attribute type 3 has an invalid length.
[  484.140937][  T987] __nla_validate_parse: 19 callbacks suppressed
[  484.140948][  T987] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.8018'.
[  484.319671][ T1008] netlink: 'syz.4.8023': attribute type 1 has an invalid length.
[  484.331672][ T1015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8024'.
[  484.335141][ T1014] netlink: 'syz.3.8024': attribute type 1 has an invalid length.
[  484.353009][ T1021] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8025'.
[  484.361317][ T1014] 8021q: adding VLAN 0 to HW filter on device bond33
[  484.438427][ T1031] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8029'.
[  484.529781][ T1043] ip6gre3: entered allmulticast mode
[  484.534684][ T1048] netlink: 'syz.3.8033': attribute type 1 has an invalid length.
[  484.542952][ T1047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8033'.
[  484.765389][ T1100] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8040'.
[  484.809941][ T1108] openvswitch: netlink: Message has 1 unknown bytes.
[  484.812308][ T1108] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  485.052529][ T1128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8048'.
[  485.461495][ T1158] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8058'.
[  485.494692][ T1162] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8059'.
[  485.562370][ T1168] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8061'.
[  485.576405][ T1168] ip6gretap0 speed is unknown, defaulting to 1000
[  485.592998][ T1168] C speed is unknown, defaulting to 1000
[  485.758227][ T1168] lo speed is unknown, defaulting to 1000
[  485.899774][ T1181] validate_nla: 3 callbacks suppressed
[  485.899783][ T1181] netlink: 'syz.4.8065': attribute type 1 has an invalid length.
[  486.304020][ T1212] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  486.481094][ T1226] bridge26: port 1(veth0_to_bond) entered blocking state
[  486.484117][ T1226] bridge26: port 1(veth0_to_bond) entered disabled state
[  486.490397][ T1226] veth0_to_bond: entered allmulticast mode
[  486.495391][ T1226] veth0_to_bond: entered promiscuous mode
[  486.497258][ T1228] netlink: 'syz.2.8080': attribute type 1 has an invalid length.
[  486.520751][ T1226] vlan2: entered allmulticast mode
[  486.522967][ T1226] veth1: entered allmulticast mode
[  486.525341][ T1226] bridge26: port 2(vlan2) entered blocking state
[  486.528814][ T1226] bridge26: port 2(vlan2) entered disabled state
[  486.532640][ T1226] vlan2: entered promiscuous mode
[  486.534344][ T1226] veth1: entered promiscuous mode
[  486.635138][ T1243] netlink: 'syz.2.8085': attribute type 13 has an invalid length.
[  486.639739][ T1243] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (6)
[  486.695540][ T1245] ip6gretap0 speed is unknown, defaulting to 1000
[  486.705576][ T1245] C speed is unknown, defaulting to 1000
[  486.766203][ T1256] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  486.824426][ T1245] lo speed is unknown, defaulting to 1000
[  487.211664][ T1271] vlan1: entered allmulticast mode
[  487.213432][ T1271] bond50: entered allmulticast mode
[  487.792583][ T1306] sctp: [Deprecated]: syz.4.8097 (pid 1306) Use of struct sctp_assoc_value in delayed_ack socket option.
[  487.792583][ T1306] Use struct sctp_sack_info instead
[  487.980281][ T1331] openvswitch: netlink: Unknown nsh attribute 0
[  487.983525][ T1331] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  488.108859][ T1340] vlan1: entered allmulticast mode
[  488.110643][ T1340] bond51: entered allmulticast mode
[  488.169914][ T1350] netlink: 'syz.4.8111': attribute type 1 has an invalid length.
[  488.172654][ T1350] netlink: 'syz.4.8111': attribute type 1 has an invalid length.
[  488.208009][ T1358] batadv0: entered promiscuous mode
[  488.209876][ T1358] batadv0: entered allmulticast mode
[  488.221327][ T1361] 8021q: VLANs not supported on wg2
[  488.272814][ T1368] netlink: 'syz.2.8115': attribute type 1 has an invalid length.
[  488.281639][ T1368] sit7: entered promiscuous mode
[  488.293468][ T1368] netlink: 'syz.2.8115': attribute type 2 has an invalid length.
[  488.299424][ T1368] netlink: 'syz.2.8115': attribute type 1 has an invalid length.
[  488.310499][ T1367] delete_channel: no stack
[  488.701251][ T1394] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  488.704790][ T1394] netlink: 'syz.3.8123': attribute type 5 has an invalid length.
[  488.831410][ T1409] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  489.052968][ T1422]  (unregistering): Released all slaves
[  489.163210][ T1426] ip6gretap0 speed is unknown, defaulting to 1000
[  489.165988][ T1426] C speed is unknown, defaulting to 1000
[  489.201063][ T1430] __nla_validate_parse: 23 callbacks suppressed
[  489.201073][ T1430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8134'.
[  489.279328][ T1437] sctp: [Deprecated]: syz.4.8136 (pid 1437) Use of int in max_burst socket option.
[  489.279328][ T1437] Use struct sctp_assoc_value instead
[  489.281240][ T1426] lo speed is unknown, defaulting to 1000
[  489.339501][ T1442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8138'.
[  489.361135][ T1446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8139'.
[  489.452202][ T1459] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8143'.
[  489.501075][ T1465] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8145'.
[  489.518368][ T1461] ip6gretap0 speed is unknown, defaulting to 1000
[  489.536983][ T1461] C speed is unknown, defaulting to 1000
[  489.660349][ T1473] netlink: 'syz.3.8149': attribute type 21 has an invalid length.
[  489.663397][ T1473] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8149'.
[  489.666505][ T1473] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8149'.
[  489.719256][ T1461] lo speed is unknown, defaulting to 1000
[  489.765491][ T1485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8153'.
[  489.771041][ T1485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8153'.
[  489.840480][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.844326][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.849859][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.852352][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.854272][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.856220][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.859666][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.861661][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.863458][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.865341][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.868348][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.870218][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.872051][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.874943][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.884016][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.885868][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.895293][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.897434][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.903105][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.905061][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.907744][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.909706][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.912180][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.915179][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.917496][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.919752][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.928197][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.929968][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.931713][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.933512][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.935295][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.945969][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.949442][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.951276][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.953814][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.955938][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.958675][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.960683][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.962624][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.964574][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.966656][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.968997][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.970872][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.973011][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.975148][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.981614][ T1505] siw: device registration error -23
[  489.983873][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.985741][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.988365][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.991087][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.993030][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  489.995288][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.001142][ T1505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8159'.
[  490.005144][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.007191][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.024516][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.026412][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.028431][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.030236][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.033597][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.045677][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.048938][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.050686][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.052359][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.057476][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.062571][ T1494] tun0: tun_chr_ioctl cmd 1074025673
[  490.169738][ T1528] veth1_vlan: left promiscuous mode
[  490.250519][ T1538] ip6gretap0 speed is unknown, defaulting to 1000
[  490.257563][ T1538] C speed is unknown, defaulting to 1000
[  490.380163][ T1538] lo speed is unknown, defaulting to 1000
[  490.587010][   T33] audit: type=1800 audit(1756440931.558:19): pid=1566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8174" name=14 dev="tmpfs" ino=14050 res=0 errno=0
[  490.753167][ T1586] xt_socket: unknown flags 0xfc
[  490.799370][ T1594] siw: device registration error -23
[  490.841738][ T1604] IPVS: length: 168 != 24
[  490.941798][ T1617] validate_nla: 2 callbacks suppressed
[  490.941807][ T1617] netlink: 'syz.2.8191': attribute type 13 has an invalid length.
[  490.980623][ T1626] syzkaller1: entered promiscuous mode
[  490.982552][ T1626] syzkaller1: entered allmulticast mode
[  491.082404][ T1636] netlink: 'syz.3.8196': attribute type 11 has an invalid length.
[  491.139859][ T1650] netlink: 'syz.4.8199': attribute type 1 has an invalid length.
[  491.244757][ T1667] netlink: 'syz.3.8203': attribute type 10 has an invalid length.
[  491.445490][ T1684] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  491.885705][ T1714] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20003
[  491.926219][ T1718] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  491.926278][ T1719] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  493.243733][ T1739] 8021q: adding VLAN 0 to HW filter on device bond35
[  493.248703][ T1739] bond34: (slave bond35): Enslaving as an active interface with an up link
[  493.254603][ T1739] 8021q: adding VLAN 0 to HW filter on device bond34
[  493.417023][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  493.837636][ T1815] batadv_slave_0: entered promiscuous mode
[  493.853526][ T1818] netlink: 'syz.3.8246': attribute type 6 has an invalid length.
[  493.856359][ T1818] IPv6: NLM_F_CREATE should be specified when creating new route
[  493.974808][ T1831] netlink: 'syz.4.8251': attribute type 13 has an invalid length.
[  493.977775][ T1831] netlink: 'syz.4.8251': attribute type 17 has an invalid length.
[  493.996293][ T1831] 8021q: adding VLAN 0 to HW filter on device team0
[  494.003863][ T1831] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  494.010040][T15658] lo speed is unknown, defaulting to 1000
[  494.012412][T15658] syz1: Port: 1 Link ACTIVE
[  494.017016][T15658] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  494.030114][ T1829] ip6gretap0 speed is unknown, defaulting to 1000
[  494.033290][ T1829] C speed is unknown, defaulting to 1000
[  494.154224][ T1832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  494.197145][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  494.200085][   T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  494.335486][ T1829] lo speed is unknown, defaulting to 1000
[  494.697347][T29743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  494.778984][ T2288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  494.815694][ T1850] __nla_validate_parse: 76 callbacks suppressed
[  494.815705][ T1850] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8257'.
[  494.847709][ T1852] RDS: rds_bind could not find a transport for ::ffff:172.30.0.3, load rds_tcp or rds_rdma?
[  494.888734][ T1857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8260'.
[  494.891668][ T1857] nbd: couldn't find a device at index 0
[  494.893730][ T1857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8260'.
[  494.931592][ T1869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8263'.
[  494.934536][ T1869] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8263'.
[  495.443347][ T1890] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8268'.
[  495.542575][ T1893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8269'.
[  495.546016][ T1893] netlink: 128 bytes leftover after parsing attributes in process `syz.4.8269'.
[  495.795962][ T1900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8271'.
[  495.954613][ T1929] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8280'.
[  495.962142][ T1929] sctp: [Deprecated]: syz.2.8280 (pid 1929) Use of int in max_burst socket option.
[  495.962142][ T1929] Use struct sctp_assoc_value instead
[  496.733732][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.738521][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.741344][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.744093][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.747664][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.750421][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.753234][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.756226][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.759025][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.761731][ T1964] netlink: 'syz.4.8290': attribute type 1 has an invalid length.
[  496.787238][T29743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  496.967025][T29743] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  497.112753][ T2005] tipc: MTU too low for tipc bearer
[  497.289121][ T2029] bridge41: entered allmulticast mode
[  497.319261][ T2034] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  497.564799][ T2062] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[  498.138614][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  498.170911][ T2080] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  498.560316][ T2103] dvmrp0: left allmulticast mode
[  498.726894][ T5298] udevd[5298]: worker [25114] /devices/virtual/block/nbd2 is taking a long time
[  498.938837][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  498.941033][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  499.334796][ T2143] macvtap0: entered allmulticast mode
[  499.341986][ T2143] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode
[  499.357545][ T2143] mac80211_hwsim hwsim65 wlan0: left allmulticast mode
[  499.520021][ T2157] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  499.754571][ T2180] bond36 (unregistering): Released all slaves
[  499.798566][ T2189] netlink: ct family unspecified
[  499.800742][ T2189] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  499.929169][ T2197] __nla_validate_parse: 301 callbacks suppressed
[  499.929179][ T2197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8362'.
[  500.078814][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8370'.
[  500.081900][ T2226] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  500.118988][ T2235] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8373'.
[  500.122046][ T2235] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8373'.
[  500.125051][ T2235] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8373'.
[  500.290042][ T2255] openvswitch: netlink: IPv4 tunnel dst address is zero
[  500.401847][ T2269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8381'.
[  500.472223][ T2273] syzkaller1: entered promiscuous mode
[  500.474509][ T2273] syzkaller1: entered allmulticast mode
[  500.572998][ T2279] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  500.786563][ T2304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8394'.
[  500.815299][ T2304] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  501.120896][ T2341] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8407'.
[  501.170892][ T2346] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8409'.
[  501.179518][ T2347] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8408'.
[  501.568770][ T2371] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode
[  501.571319][ T2371] mac80211_hwsim hwsim24 wlan0: left allmulticast mode
[  502.220182][ T2412] validate_nla: 269 callbacks suppressed
[  502.220191][ T2412] netlink: 'syz.3.8431': attribute type 21 has an invalid length.
[  502.619647][ T2453] IPVS: Unknown mcast interface: veth1_to_bridge
[  502.831262][ T2484] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  502.876495][ T2488] ip6gretap0 speed is unknown, defaulting to 1000
[  502.882959][ T2488] C speed is unknown, defaulting to 1000
[  503.014609][ T2488] lo speed is unknown, defaulting to 1000
[  503.614137][ T2538] netlink: 'syz.2.8463': attribute type 2 has an invalid length.
[  503.830125][   T11] block nbd2: Possible stuck request ffff888048320000: control (read@0,1024B). Runtime 90 seconds
[  503.835059][   T11] block nbd2: Possible stuck request ffff888048320200: control (read@1024,1024B). Runtime 90 seconds
[  503.839676][   T11] block nbd2: Possible stuck request ffff888048320400: control (read@2048,1024B). Runtime 90 seconds
[  503.843695][   T11] block nbd2: Possible stuck request ffff888048320600: control (read@3072,1024B). Runtime 90 seconds
[  504.217824][ T2590] netlink: 'syz.3.8478': attribute type 11 has an invalid length.
[  504.379318][ T2604] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (6)
[  504.699548][ T2630] netlink: 'syz.2.8487': attribute type 1 has an invalid length.
[  504.740856][ T2645] GUP no longer grows the stack in syz.4.8489 (2645): 200000003000-20000000a000 (200000001000)
[  504.746568][ T2645] CPU: 1 UID: 0 PID: 2645 Comm: syz.4.8489 Not tainted syzkaller #0 PREEMPT(full) 
[  504.746587][ T2645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  504.746594][ T2645] Call Trace:
[  504.746600][ T2645]  <TASK>
[  504.746606][ T2645]  dump_stack_lvl+0x189/0x250
[  504.746628][ T2645]  ? __pfx_dump_stack_lvl+0x10/0x10
[  504.746643][ T2645]  ? __pfx__printk+0x10/0x10
[  504.746659][ T2645]  ? find_vma+0xe7/0x160
[  504.746733][ T2645]  __get_user_pages+0x24d0/0x2ce0
[  504.746751][ T2645]  ? __bpf_trace_mmap_lock_acquire_returned+0x13b/0x190
[  504.746774][ T2645]  ? rcu_is_watching+0x15/0xb0
[  504.746784][ T2645]  __gup_longterm_locked+0xde9/0x1660
[  504.746798][ T2645]  ? sanity_check_pinned_pages+0x123a/0x1300
[  504.746810][ T2645]  gup_fast_fallback+0x1e6a/0x2010
[  504.746833][ T2645]  ? __pfx_gup_fast_fallback+0x10/0x10
[  504.746840][ T2645]  ? stack_trace_save+0x9c/0xe0
[  504.746848][ T2645]  ? __pfx_stack_trace_save+0x10/0x10
[  504.746857][ T2645]  ? kernel_text_address+0xa5/0xe0
[  504.746869][ T2645]  ? pin_user_pages_fast+0x4d/0xb0
[  504.746878][ T2645]  iov_iter_extract_pages+0x35a/0x5e0
[  504.746891][ T2645]  extract_iter_to_sg+0xe46/0x24e0
[  504.746908][ T2645]  ? __pfx_extract_iter_to_sg+0x10/0x10
[  504.746926][ T2645]  ? __asan_memset+0x22/0x50
[  504.746935][ T2645]  af_alg_get_rsgl+0x436/0x810
[  504.746951][ T2645]  aead_recvmsg+0x4cc/0x13f0
[  504.746970][ T2645]  ? __pfx_aead_recvmsg+0x10/0x10
[  504.746980][ T2645]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  504.746989][ T2645]  ? __pfx_aead_recvmsg+0x10/0x10
[  504.746999][ T2645]  sock_recvmsg_nosec+0x186/0x1c0
[  504.747011][ T2645]  ____sys_recvmsg+0x3aa/0x460
[  504.747022][ T2645]  ? __pfx_____sys_recvmsg+0x10/0x10
[  504.747036][ T2645]  ? import_iovec+0x74/0xa0
[  504.747045][ T2645]  ___sys_recvmsg+0x1b5/0x510
[  504.747055][ T2645]  ? __pfx____sys_recvmsg+0x10/0x10
[  504.747076][ T2645]  ? __might_fault+0xb0/0x130
[  504.747087][ T2645]  do_recvmmsg+0x307/0x770
[  504.747098][ T2645]  ? __pfx_do_recvmmsg+0x10/0x10
[  504.747111][ T2645]  ? __pfx_do_futex+0x10/0x10
[  504.747127][ T2645]  __x64_sys_recvmmsg+0x190/0x240
[  504.747137][ T2645]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  504.747145][ T2645]  ? rcu_is_watching+0x15/0xb0
[  504.747154][ T2645]  ? do_syscall_64+0xbe/0x3b0
[  504.747166][ T2645]  do_syscall_64+0xfa/0x3b0
[  504.747174][ T2645]  ? lockdep_hardirqs_on+0x9c/0x150
[  504.747183][ T2645]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.747190][ T2645]  ? exc_page_fault+0x9f/0xf0
[  504.747199][ T2645]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  504.747206][ T2645] RIP: 0033:0x7ff75dd8ebe9
[  504.747214][ T2645] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  504.747220][ T2645] RSP: 002b:00007ff75ebc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  504.747229][ T2645] RAX: ffffffffffffffda RBX: 00007ff75dfb5fa0 RCX: 00007ff75dd8ebe9
[  504.747234][ T2645] RDX: 0000000000000002 RSI: 0000200000000180 RDI: 0000000000000008
[  504.747241][ T2645] RBP: 00007ff75de11e19 R08: 0000000000000000 R09: 0000000000000000
[  504.747245][ T2645] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000000
[  504.747249][ T2645] R13: 00007ff75dfb6038 R14: 00007ff75dfb5fa0 R15: 00007ffcc2154bc8
[  504.747261][ T2645]  </TASK>
[  504.913586][ T2660] batadv_slave_0: entered promiscuous mode
[  505.719804][ T2694] netlink: 'syz.3.8501': attribute type 1 has an invalid length.
[  505.722542][ T2694] __nla_validate_parse: 18 callbacks suppressed
[  505.722550][ T2694] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8501'.
[  505.730134][ T2694] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8501'.
[  505.839246][ T2706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8503'.
[  505.862410][ T2708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8505'.
[  506.114399][ T2678] syz.2.8498 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000
[  506.123884][ T2678] CPU: 0 UID: 0 PID: 2678 Comm: syz.2.8498 Not tainted syzkaller #0 PREEMPT(full) 
[  506.123902][ T2678] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  506.123910][ T2678] Call Trace:
[  506.123915][ T2678]  <TASK>
[  506.123921][ T2678]  dump_stack_lvl+0x189/0x250
[  506.123941][ T2678]  ? __pfx_dump_stack_lvl+0x10/0x10
[  506.123954][ T2678]  ? __pfx__printk+0x10/0x10
[  506.123982][ T2678]  dump_header+0xd3/0x480
[  506.124001][ T2678]  oom_kill_process+0x387/0x920
[  506.124015][ T2678]  out_of_memory+0xf09/0x12a0
[  506.124036][ T2678]  ? __pfx_out_of_memory+0x10/0x10
[  506.124054][ T2678]  mem_cgroup_out_of_memory+0x145/0x240
[  506.124068][ T2678]  ? __pfx_mem_cgroup_out_of_memory+0x10/0x10
[  506.124086][ T2678]  ? _raw_spin_unlock+0x28/0x50
[  506.124099][ T2678]  ? memcg1_oom_prepare+0x37f/0x450
[  506.124115][ T2678]  try_charge_memcg+0xdff/0x1290
[  506.124144][ T2678]  ? __pfx_try_charge_memcg+0x10/0x10
[  506.124173][ T2678]  charge_memcg+0x9f/0x180
[  506.124188][ T2678]  ? mem_cgroup_swapin_charge_folio+0x33/0x390
[  506.124202][ T2678]  mem_cgroup_swapin_charge_folio+0x262/0x390
[  506.124220][ T2678]  __read_swap_cache_async+0x28c/0x510
[  506.124243][ T2678]  swap_cluster_readahead+0x305/0x5f0
[  506.124269][ T2678]  ? __pfx_swap_cluster_readahead+0x10/0x10
[  506.124292][ T2678]  ? get_vma_policy+0x27c/0x3c0
[  506.124312][ T2678]  swapin_readahead+0x17d/0xb50
[  506.124324][ T2678]  ? __pfx_filemap_get_entry+0x10/0x10
[  506.124344][ T2678]  ? __pfx_swapin_readahead+0x10/0x10
[  506.124359][ T2678]  ? __filemap_get_folio+0x9a6/0xaf0
[  506.124399][ T2678]  ? swap_cache_get_folio+0xae/0x3b0
[  506.124417][ T2678]  do_swap_page+0x525/0x5ac0
[  506.124437][ T2678]  ? __lock_acquire+0xab9/0xd20
[  506.124464][ T2678]  ? do_swap_page+0x184/0x5ac0
[  506.124478][ T2678]  ? __pfx_do_swap_page+0x10/0x10
[  506.124491][ T2678]  ? __lock_acquire+0xab9/0xd20
[  506.124507][ T2678]  ? __pfx_default_wake_function+0x10/0x10
[  506.124526][ T2678]  ? ___pte_offset_map+0x1cf/0x250
[  506.124544][ T2678]  ? pte_offset_map_rw_nolock+0xea/0x160
[  506.124562][ T2678]  __handle_mm_fault+0xe55/0x5440
[  506.124576][ T2678]  ? __lock_acquire+0xab9/0xd20
[  506.124604][ T2678]  ? __pfx___handle_mm_fault+0x10/0x10
[  506.124631][ T2678]  ? lock_vma_under_rcu+0xdf/0x3d0
[  506.124647][ T2678]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[  506.124670][ T2678]  handle_mm_fault+0x40a/0x8e0
[  506.124718][ T2678]  do_user_addr_fault+0xa81/0x1390
[  506.124745][ T2678]  ? rcu_is_watching+0x15/0xb0
[  506.124758][ T2678]  ? trace_page_fault_user+0x84/0x1e0
[  506.124777][ T2678]  exc_page_fault+0x76/0xf0
[  506.124794][ T2678]  asm_exc_page_fault+0x26/0x30
[  506.124807][ T2678] RIP: 0033:0x7f4da7a4d9ef
[  506.124819][ T2678] Code: 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 22 46 35 00 89 f0 4c 8d 05 19 26 35 00 89 c2 81 e2 ff 1f 00 00 <49> 8b 0c d1 48 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0
[  506.124830][ T2678] RSP: 002b:00007fffde136d28 EFLAGS: 00010202
[  506.124842][ T2678] RAX: 0000000084c815c7 RBX: 00007f4da88e5720 RCX: 0000000000000020
[  506.124850][ T2678] RDX: 00000000000015c7 RSI: ffffffff84c815c7 RDI: 000000000000000a
[  506.124858][ T2678] RBP: ffffffff84c815c7 R08: 00007f4da7da0000 R09: 00007f4da7da2000
[  506.124866][ T2678] R10: 0000000084c815cb R11: 000000000000000a R12: 000000000000000a
[  506.124873][ T2678] R13: 0000000000000000 R14: ffffffff84c815c7 R15: 0000000000000020
[  506.124882][ T2678]  ? _copy_from_user+0x17/0xb0
[  506.124896][ T2678]  ? _copy_from_user+0x17/0xb0
[  506.124913][ T2678]  ? _copy_from_user+0x17/0xb0
[  506.124930][ T2678]  </TASK>
[  506.126160][ T2678] memory: usage 307200kB, limit 307200kB, failcnt 572
[  506.260419][ T2678] memory+swap: usage 307424kB, limit 9007199254740988kB, failcnt 0
[  506.272109][ T2678] kmem: usage 305300kB, limit 9007199254740988kB, failcnt 0
[  506.286829][ T2678] Memory cgroup stats for /syz2:
[  506.286982][ T2678] cache 0
[  506.289876][ T2678] rss 0
[  506.290827][ T2678] rss_huge 0
[  506.292823][ T2678] shmem 0
[  506.293956][ T2678] mapped_file 0
[  506.295164][ T2678] dirty 0
[  506.296147][ T2678] writeback 0
[  506.297574][ T2678] workingset_refault_anon 28
[  506.299206][ T2678] workingset_refault_file 5
[  506.300868][ T2678] swap 229376
[  506.302043][ T2678] swapcached 40960
[  506.303328][ T2678] pgpgin 282013
[  506.304498][ T2678] pgpgout 282003
[  506.305717][ T2678] pgfault 572855
[  506.307054][ T2678] pgmajfault 14
[  506.308233][ T2678] inactive_anon 40960
[  506.309582][ T2678] active_anon 0
[  506.310774][ T2678] inactive_file 0
[  506.312091][ T2678] active_file 0
[  506.313291][ T2678] unevictable 0
[  506.314464][ T2678] hierarchical_memory_limit 314572800
[  506.316243][ T2678] hierarchical_memsw_limit 9223372036854771712
[  506.334782][ T2678] total_cache 0
[  506.335998][ T2678] total_rss 0
[  506.337765][ T2678] total_rss_huge 0
[  506.339432][ T2678] total_shmem 0
[  506.340623][ T2678] total_mapped_file 0
[  506.341978][ T2678] total_dirty 0
[  506.343242][ T2678] total_writeback 0
[  506.344551][ T2678] total_workingset_refault_anon 28
[  506.346257][ T2678] total_workingset_refault_file 5
[  506.348041][ T2678] total_swap 229376
[  506.349379][ T2678] total_swapcached 40960
[  506.350838][ T2678] total_pgpgin 282013
[  506.352196][ T2678] total_pgpgout 282003
[  506.354995][ T2678] total_pgfault 572855
[  506.356369][ T2678] total_pgmajfault 14
[  506.363148][ T2678] total_inactive_anon 40960
[  506.364720][ T2678] total_active_anon 0
[  506.366143][ T2678] total_inactive_file 0
[  506.369163][ T2678] total_active_file 0
[  506.370558][ T2678] total_unevictable 0
[  506.371920][ T2678] anon_cost 0
[  506.373166][ T2678] file_cost 0
[  506.375134][ T2678] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.8498,pid=2678,uid=0
[  506.377477][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  506.381439][ T2678] Memory cgroup out of memory: Killed process 2678 (syz.2.8498) total-vm:102092kB, anon-rss:956kB, file-rss:22884kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000
[  506.430187][ T2726] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8510'.
[  506.745282][ T2739] ip6gretap0 speed is unknown, defaulting to 1000
[  506.749502][ T2739] C speed is unknown, defaulting to 1000
[  506.975090][ T2739] lo speed is unknown, defaulting to 1000
[  507.301651][ T2749] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8515'.
[  507.459169][ T2776] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  507.461722][ T2776] IPv6: NLM_F_CREATE should be set when creating new route
[  507.464201][ T2776] IPv6: NLM_F_CREATE should be set when creating new route
[  507.467006][ T2776] IPv6: NLM_F_CREATE should be set when creating new route
[  507.519036][ T2782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8522'.
[  507.580492][ T2788] netlink: 'syz.3.8524': attribute type 3 has an invalid length.
[  507.589425][ T2788] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8524'.
[  507.744259][ T2803] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  508.376434][ T2807] syzkaller1: entered promiscuous mode
[  508.379652][ T2807] syzkaller1: entered allmulticast mode
[  508.533803][ T2810] ip6gretap0 speed is unknown, defaulting to 1000
[  508.537252][ T2810] C speed is unknown, defaulting to 1000
[  508.656445][ T2810] lo speed is unknown, defaulting to 1000
[  508.798523][ T2835] netlink: 'syz.3.8533': attribute type 1 has an invalid length.
[  509.142888][ T2855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8538'.
[  509.192360][ T2857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8539'.
[  509.262125][ T2859] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  509.465551][ T2882] ip6gretap0 speed is unknown, defaulting to 1000
[  509.472083][ T2882] C speed is unknown, defaulting to 1000
[  509.579944][ T2904] ip6gretap0 speed is unknown, defaulting to 1000
[  509.587061][ T2904] C speed is unknown, defaulting to 1000
[  509.647828][ T2882] lo speed is unknown, defaulting to 1000
[  509.756183][ T2904] lo speed is unknown, defaulting to 1000
[  510.486965][ T2938] tipc: MTU too low for tipc bearer
[  510.971362][ T2964] openvswitch: netlink: VXLAN extension 274 out of range max 1
[  511.110074][ T2980] __nla_validate_parse: 7 callbacks suppressed
[  511.110084][ T2980] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8570'.
[  511.148262][ T2983] netlink: 161716 bytes leftover after parsing attributes in process `syz.4.8569'.
[  511.151565][ T2983] netlink: zone id is out of range
[  511.155484][ T2983] netlink: zone id is out of range
[  511.157728][ T2983] netlink: zone id is out of range
[  511.159636][ T2983] netlink: zone id is out of range
[  511.161566][ T2983] netlink: zone id is out of range
[  511.163430][ T2983] netlink: zone id is out of range
[  511.165098][ T2983] netlink: zone id is out of range
[  511.168924][ T2983] netlink: zone id is out of range
[  511.221621][ T2992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8574'.
[  511.224137][ T2994] netlink: 108 bytes leftover after parsing attributes in process `syz.2.8575'.
[  511.372350][ T3006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8581'.
[  511.402031][ T3012] netlink: 'syz.4.8582': attribute type 1 has an invalid length.
[  511.421134][ T3012] 8021q: adding VLAN 0 to HW filter on device bond47
[  511.704837][ T3038] delete_channel: no stack
[  511.832484][ T3049] ip6gretap0 speed is unknown, defaulting to 1000
[  511.835440][ T3049] C speed is unknown, defaulting to 1000
[  511.847285][ T3051] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004
[  511.934168][ T3049] lo speed is unknown, defaulting to 1000
[  512.089257][ T3058] macvtap0: entered allmulticast mode
[  512.094627][ T3058] mac80211_hwsim hwsim65 wlan0: entered allmulticast mode
[  512.106025][ T3058] mac80211_hwsim hwsim65 wlan0: left allmulticast mode
[  512.456289][ T3061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8595'.
[  512.553301][ T3070] siw: device registration error -23
[  512.684492][ T3083] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8603'.
[  512.920779][ T3108] netlink: 'syz.2.8610': attribute type 8 has an invalid length.
[  512.929258][ T3108] IPv6: sit8: Disabled Multicast RS
[  512.989751][ T3115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8612'.
[  513.015956][ T3118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8613'.
[  513.173625][ T3136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8619'.
[  513.210980][ T3141] ip6gretap0 speed is unknown, defaulting to 1000
[  513.213959][ T3141] C speed is unknown, defaulting to 1000
[  513.319542][ T3148] ip6gretap0 speed is unknown, defaulting to 1000
[  513.319975][ T3141] lo speed is unknown, defaulting to 1000
[  513.336036][ T3148] C speed is unknown, defaulting to 1000
[  513.586846][    C0] net_ratelimit: 6 callbacks suppressed
[  513.586855][    C0] TC_ACT_REPEAT abuse ?
[  513.720294][ T3148] lo speed is unknown, defaulting to 1000
[  514.055605][ T3198] netlink: 'syz.3.8628': attribute type 1 has an invalid length.
[  514.096596][ T3204] syzkaller1: entered promiscuous mode
[  514.098541][ T3204] syzkaller1: entered allmulticast mode
[  514.253605][ T3208] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  514.277765][ T2288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  514.574048][ T3235] syz!: rxe_newlink: already configured on team_slave_0
[  514.616981][    C0] TC_ACT_REPEAT abuse ?
[  514.777456][ T8282] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  514.781254][ T8282] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  514.806909][ T2288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  514.948328][ T2288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  515.073466][ T3284] ip6gretap0 speed is unknown, defaulting to 1000
[  515.076371][ T3284] C speed is unknown, defaulting to 1000
[  515.172492][ T3284] lo speed is unknown, defaulting to 1000
[  515.247569][ T2288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  515.610841][ T3308] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  515.613996][ T3308] netlink: 'syz.2.8660': attribute type 1 has an invalid length.
[  515.656841][    C0] TC_ACT_REPEAT abuse ?
[  516.314093][ T3320] __nla_validate_parse: 8 callbacks suppressed
[  516.314103][ T3320] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8662'.
[  516.460741][ T3329] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  516.469729][ T3329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8665'.
[  516.474507][ T3329] sock: sock_set_timeout: `syz.2.8665' (pid 3329) tries to set negative timeout
[  516.507735][ T3331] netlink: 'syz.2.8666': attribute type 4 has an invalid length.
[  516.517910][ T3331] netlink: 'syz.2.8666': attribute type 4 has an invalid length.
[  516.519945][ T3333] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8667'.
[  516.524209][ T3333] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8667'.
[  516.528205][ T3333] netlink: 'syz.4.8667': attribute type 6 has an invalid length.
[  516.532327][ T3333] netlink: 43 bytes leftover after parsing attributes in process `syz.4.8667'.
[  516.540119][ T3333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8667'.
[  516.556243][ T3333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8667'.
[  516.573499][ T3338] netlink: 'syz.2.8668': attribute type 7 has an invalid length.
[  516.576040][ T3338] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8668'.
[  516.620561][ T3333] netlink: 830 bytes leftover after parsing attributes in process `syz.4.8667'.
[  516.671513][ T3346] netlink: 'syz.4.8670': attribute type 9 has an invalid length.
[  516.674763][ T3346] netlink: 'syz.4.8670': attribute type 6 has an invalid length.
[  516.697026][    C0] TC_ACT_REPEAT abuse ?
[  516.711448][ T3351] atomic_op ffff88803a696198 conn xmit_atomic 0000000000000000
[  516.715879][ T3351] netlink: 'syz.2.8672': attribute type 30 has an invalid length.
[  516.767125][ T3355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8673'.
[  517.747014][    C0] TC_ACT_REPEAT abuse ?
[  517.820481][ T3412] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  518.385516][ T3489] ip6gretap0 speed is unknown, defaulting to 1000
[  518.390056][ T3489] C speed is unknown, defaulting to 1000
[  518.481033][ T3489] lo speed is unknown, defaulting to 1000
[  518.708953][ T3506] validate_nla: 1 callbacks suppressed
[  518.708966][ T3506] netlink: 'syz.2.8717': attribute type 39 has an invalid length.
[  518.786845][    C0] TC_ACT_REPEAT abuse ?
[  518.835938][ T3523] syzkaller1: entered promiscuous mode
[  518.838488][ T3523] syzkaller1: entered allmulticast mode
[  518.907231][ T3526] syzkaller0: left promiscuous mode
[  518.909278][ T3526] syzkaller0: left allmulticast mode
[  519.052344][ T3530] macvtap1: entered allmulticast mode
[  519.054328][ T3530] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode
[  519.060078][ T3530] mac80211_hwsim hwsim24 wlan0: left allmulticast mode
[  519.177146][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  519.198571][ T3534] netlink: 'syz.2.8726': attribute type 30 has an invalid length.
[  519.388109][ T3552] ip6gretap0 speed is unknown, defaulting to 1000
[  519.391566][ T3552] C speed is unknown, defaulting to 1000
[  519.486264][ T3552] lo speed is unknown, defaulting to 1000
[  519.827037][    C0] TC_ACT_REPEAT abuse ?
[  519.906063][ T3580] syzkaller1: entered promiscuous mode
[  519.911928][ T3580] syzkaller1: entered allmulticast mode
[  520.268462][ T3609] netlink: 'syz.4.8746': attribute type 1 has an invalid length.
[  520.304712][ T3609] 8021q: adding VLAN 0 to HW filter on device bond48
[  520.856844][    C0] TC_ACT_REPEAT abuse ?
[  521.081224][ T3653] gtp3: entered promiscuous mode
[  521.083301][ T3653] gtp3: entered allmulticast mode
[  521.279363][ T3669] bond36: entered promiscuous mode
[  521.281219][ T3669] 8021q: adding VLAN 0 to HW filter on device bond36
[  521.331057][ T3681] netlink: 'syz.3.8767': attribute type 1 has an invalid length.
[  521.333765][ T3681] netlink: 'syz.3.8767': attribute type 1 has an invalid length.
[  521.365684][ T3687] netlink: 'syz.4.8769': attribute type 2 has an invalid length.
[  521.375450][ T3687] k*]: entered promiscuous mode
[  521.379842][ T3687] __nla_validate_parse: 20 callbacks suppressed
[  521.379851][ T3687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8769'.
[  521.388376][ T3681] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8767'.
[  521.395041][ T3687] veth0_to_team: entered promiscuous mode
[  521.406289][ T3687] veth0_to_team: entered allmulticast mode
[  521.512334][ T3692] wireguard1: entered promiscuous mode
[  521.514320][ T3692] wireguard1: entered allmulticast mode
[  521.666909][ T3704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8774'.
[  521.670728][ T3706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8775'.
[  521.729332][ T3706] syzkaller0: Caught tx_queue_len zero misconfig
[  521.830609][ T3717] netlink: 'syz.2.8779': attribute type 1 has an invalid length.
[  521.896895][    C0] TC_ACT_REPEAT abuse ?
[  521.946478][ T3727] netlink: 'syz.2.8783': attribute type 15 has an invalid length.
[  522.016486][ T3732] netlink: 'syz.2.8784': attribute type 10 has an invalid length.
[  522.020947][ T3732] netlink: 'syz.2.8784': attribute type 10 has an invalid length.
[  522.023961][ T3732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8784'.
[  522.233244][ T3754] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8789'.
[  522.355718][ T3764] IPv6: sit8: Disabled Multicast RS
[  522.360835][ T3764] sit8: entered allmulticast mode
[  522.455837][ T3773] openvswitch: netlink: Missing key (keys=44, expected=200000)
[  522.536483][ T3778] 8021q: VLANs not supported on ip6tnl0
[  522.720504][ T3797] 8021q: adding VLAN 0 to HW filter on device bond38
[  522.733423][ T3797] veth59: entered promiscuous mode
[  522.737416][ T3797] bond38: (slave veth59): Enslaving as an active interface with an up link
[  522.806403][ T3803] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8804'.
[  522.811655][ T3803] A link change request failed with some changes committed already. Interface 0! may have been left with an inconsistent configuration, please check.
[  522.947042][    C0] TC_ACT_REPEAT abuse ?
[  523.610938][ T3822] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8811'.
[  523.646418][ T3822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8811'.
[  523.668222][ T3824] syzkaller1: entered allmulticast mode
[  523.695511][ T3824] netlink: 9 bytes leftover after parsing attributes in process `syz.3.8812'.
[  523.976904][    C0] TC_ACT_REPEAT abuse ?
[  524.758146][ T3865] validate_nla: 2 callbacks suppressed
[  524.758157][ T3865] netlink: 'syz.2.8822': attribute type 1 has an invalid length.
[  524.800482][ T3876] IPVS: Unknown mcast interface: veth1_to_bridge
[  524.898687][ T3874] nbd3: detected capacity change from 0 to 63
[  524.901805][ T3883] block nbd3: NBD_DISCONNECT
[  524.904308][ T3883] block nbd3: Disconnected due to user request.
[  524.906645][ T3883] block nbd3: shutting down sockets
[  524.918850][    C0] blk_print_req_error: 138 callbacks suppressed
[  524.918861][    C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.924426][    C0] buffer_io_error: 138 callbacks suppressed
[  524.924433][    C0] Buffer I/O error on dev nbd3, logical block 0, async page read
[  524.929868][    C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.932946][    C0] Buffer I/O error on dev nbd3, logical block 1, async page read
[  524.935668][    C0] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.938964][    C0] Buffer I/O error on dev nbd3, logical block 2, async page read
[  524.941488][    C0] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.944465][    C0] Buffer I/O error on dev nbd3, logical block 3, async page read
[  524.958193][T29514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.961387][T29514] Buffer I/O error on dev nbd3, logical block 0, async page read
[  524.964400][T29514] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.968305][T29514] Buffer I/O error on dev nbd3, logical block 1, async page read
[  524.971126][T29514] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.974277][T29514] Buffer I/O error on dev nbd3, logical block 2, async page read
[  524.977432][T29514] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.980456][T29514] Buffer I/O error on dev nbd3, logical block 3, async page read
[  524.983025][T29514] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.990658][T29514] Buffer I/O error on dev nbd3, logical block 0, async page read
[  524.993340][T29514] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  524.996611][T29514] Buffer I/O error on dev nbd3, logical block 1, async page read
[  525.001096][T29514] ldm_validate_partition_table(): Disk read failed.
[  525.004167][T29514] Dev nbd3: unable to read RDB block 0
[  525.008644][T29514]  nbd3: unable to read partition table
[  525.017239][    C0] TC_ACT_REPEAT abuse ?
[  525.022687][T29514] ldm_validate_partition_table(): Disk read failed.
[  525.027786][T29514] Dev nbd3: unable to read RDB block 0
[  525.030510][T29514]  nbd3: unable to read partition table
[  525.375328][ T3942] sctp: [Deprecated]: syz.3.8846 (pid 3942) Use of struct sctp_assoc_value in delayed_ack socket option.
[  525.375328][ T3942] Use struct sctp_sack_info instead
[  525.587292][ T3953] netlink: 'syz.4.8849': attribute type 21 has an invalid length.
[  525.590038][ T3953] netlink: 'syz.4.8849': attribute type 4 has an invalid length.
[  525.594847][ T3953] netlink: 'syz.4.8849': attribute type 3 has an invalid length.
[  525.670577][T29743] C speed is unknown, defaulting to 1000
[  525.673041][T29743] syz2: Port: 1 Link DOWN
[  525.678582][ T3958] netlink: 'syz.3.8852': attribute type 4 has an invalid length.
[  526.011303][ T3991] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  526.095434][ T3999] openvswitch: netlink: Port 622073004 exceeds max allowable 65535
[  526.176052][ T4011] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  526.339052][ T4014] ip6gretap0 speed is unknown, defaulting to 1000
[  526.343434][ T4014] C speed is unknown, defaulting to 1000
[  526.505905][ T4014] lo speed is unknown, defaulting to 1000
[  526.826432][ T4021] __nla_validate_parse: 49 callbacks suppressed
[  526.826444][ T4021] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8868'.
[  526.837776][ T4021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8868'.
[  526.877280][ T4021] veth67: entered promiscuous mode
[  527.108149][ T4028] tipc: Enabling of bearer <udp:syz0> rejected, max 3 bearers permitted
[  527.240531][ T4038] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[  527.251914][ T4038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8872'.
[  527.255518][ T4038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8872'.
[  527.265318][ T4041] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8873'.
[  527.292375][ T4045] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  527.398743][ T4057] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8876'.
[  527.405015][ T4057] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.489845][ T4069] bridge0: port 1(wlan0) entered blocking state
[  527.492223][ T4069] bridge0: port 1(wlan0) entered disabled state
[  527.494742][ T4069] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode
[  527.507854][ T4069] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  527.520746][ T4069] bond0: Error: Cannot enslave bond to itself.
[  527.525219][ T4072] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8882'.
[  527.528553][ T4073] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8882'.
[  527.554102][ T4080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8883'.
[  527.583156][ T4082] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  527.586596][ T4082] syzkaller0: entered promiscuous mode
[  527.588690][ T4082] syzkaller0: entered allmulticast mode
[  527.626387][ T4088] pim6reg1: entered promiscuous mode
[  527.629621][ T4088] pim6reg1: entered allmulticast mode
[  527.727474][ T4091] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8887'.
[  527.789488][ T4098] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  527.963886][ T8282] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  527.969331][ T8282] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  527.972873][ T8282] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  527.976572][ T4109] bond0: option use_carrier: invalid value (255)
[  527.979812][ T8282] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  528.029183][ T4111] 8021q: adding VLAN 0 to HW filter on device bond39
[  528.055772][ T4114] veth0_to_bond: left promiscuous mode
[  528.059400][ T4114] bridge26: port 1(veth0_to_bond) entered disabled state
[  528.064037][ T4114] bond29: (slave bridge24): Releasing active interface
[  528.067943][ T4114] vlan2: left promiscuous mode
[  528.069667][ T4114] veth1: left promiscuous mode
[  528.071597][ T4114] bridge26: port 2(vlan2) entered disabled state
[  528.076622][ T4114] bond34: (slave bond35): Releasing backup interface
[  528.083311][ T4114] bond38: (slave veth59): Releasing backup interface
[  528.138130][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  528.241618][ T4125] netlink: 'syz.3.8896': attribute type 5 has an invalid length.
[  528.593850][ T4161] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  528.770942][ T4179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  529.257126][ T5848] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  529.259955][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  529.398427][ T4196] pim6reg1: entered promiscuous mode
[  529.400353][ T4196] pim6reg1: entered allmulticast mode
[  529.464396][ T4197] mac80211_hwsim hwsim14 wlan0: left allmulticast mode
[  529.467810][ T4197] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  529.471511][ T4197] bridge0: port 1(wlan0) entered disabled state
[  529.489551][ T4197] rdma_op ffff888125e151f0 conn xmit_rdma 0000000000000000
[  529.494344][ T2288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  529.577551][ T2288] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  530.330445][ T4236] pim6reg1: entered promiscuous mode
[  530.332243][ T4236] pim6reg1: entered allmulticast mode
[  530.721024][ T4266] veth0_to_bond: left allmulticast mode
[  530.723471][ T4266] batadv_slave_0: left promiscuous mode
[  530.737237][ T4266] syzkaller0: left promiscuous mode
[  530.739056][ T4266] syzkaller0: left allmulticast mode
[  530.744193][ T4266] xfrm3: left promiscuous mode
[  530.745837][ T4266] xfrm3: left allmulticast mode
[  530.749429][ T4266] vlan2: left allmulticast mode
[  530.751057][ T4266] veth1: left allmulticast mode
[  530.753256][ T4266] bond36: left promiscuous mode
[  530.755152][ T4266] veth59: left promiscuous mode
[  531.095132][ T4309] netlink: 'syz.2.8955': attribute type 1 has an invalid length.
[  531.271423][ T4332] sctp: [Deprecated]: syz.2.8960 (pid 4332) Use of struct sctp_assoc_value in delayed_ack socket option.
[  531.271423][ T4332] Use struct sctp_sack_info instead
[  531.678004][ T4370] netlink: 'syz.3.8970': attribute type 21 has an invalid length.
[  531.753103][ T4377] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  531.975392][ T4384] vlan3: entered allmulticast mode
[  531.977687][ T4384] bridge_slave_0: entered allmulticast mode
[  532.623451][ T4404] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[  532.655925][ T4391] ip6gretap0 speed is unknown, defaulting to 1000
[  532.666435][ T4391] C speed is unknown, defaulting to 1000
[  532.698075][ T4401] __nla_validate_parse: 21 callbacks suppressed
[  532.698089][ T4401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8977'.
[  532.768885][ T4391] lo speed is unknown, defaulting to 1000
[  532.894836][ T4431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8985'.
[  532.979774][ T4436] team0: Refused to change device type
[  533.021685][ T4436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8987'.
[  533.106063][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8988'.
[  533.179564][ T4456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8992'.
[  533.360811][ T4469] ip6gretap0 speed is unknown, defaulting to 1000
[  533.364579][ T4469] C speed is unknown, defaulting to 1000
[  533.406103][ T4475] netlink: 132 bytes leftover after parsing attributes in process `syz.4.9000'.
[  533.474545][ T4469] lo speed is unknown, defaulting to 1000
[  533.573148][ T4490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9005'.
[  533.599783][ T4490] netlink: 'syz.3.9005': attribute type 58 has an invalid length.
[  533.602344][ T4490] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9005'.
[  533.706314][ T4503] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  533.759887][ T4509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  533.777901][ T4509] sctp: [Deprecated]: syz.2.9013 (pid 4509) Use of int in max_burst socket option.
[  533.777901][ T4509] Use struct sctp_assoc_value instead
[  533.898348][   T11] block nbd2: Possible stuck request ffff888048320000: control (read@0,1024B). Runtime 120 seconds
[  533.902716][   T11] block nbd2: Possible stuck request ffff888048320200: control (read@1024,1024B). Runtime 120 seconds
[  533.907177][   T11] block nbd2: Possible stuck request ffff888048320400: control (read@2048,1024B). Runtime 120 seconds
[  533.911655][   T11] block nbd2: Possible stuck request ffff888048320600: control (read@3072,1024B). Runtime 120 seconds
[  533.935801][ T4530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9019'.
[  533.943655][ T4530] netlink: 3 bytes leftover after parsing attributes in process `syz.4.9019'.
[  534.148510][ T4539] tipc: Enabling of bearer <eth:syzkaller0> rejected, max 3 bearers permitted
[  534.152545][ T4539] syzkaller0: entered promiscuous mode
[  534.154552][ T4539] syzkaller0: entered allmulticast mode
[  534.210078][ T4541] ip6gretap0 speed is unknown, defaulting to 1000
[  534.213000][ T4541] C speed is unknown, defaulting to 1000
[  534.324886][ T4541] lo speed is unknown, defaulting to 1000
[  534.866354][   T33] audit: type=1800 audit(1756440975.838:20): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9036" name="0600000000000000000000004" dev="tmpfs" ino=15622 res=0 errno=0
[  534.907283][   T33] audit: type=1804 audit(1756440975.858:21): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.9036" name="0600000000000000000000004" dev="tmpfs" ino=15622 res=1 errno=0
[  535.550741][ T4613] IPVS: Scheduler module ip_vs_ not found
[  535.693858][ T4616] ip6gretap0 speed is unknown, defaulting to 1000
[  535.711955][ T4616] C speed is unknown, defaulting to 1000
[  535.918620][ T4616] lo speed is unknown, defaulting to 1000
[  535.945357][ T4617] netlink: 'syz.2.9048': attribute type 13 has an invalid length.
[  535.956815][ T4617] netlink: 'syz.2.9048': attribute type 17 has an invalid length.
[  535.966566][ T4617] 8021q: adding VLAN 0 to HW filter on device team0
[  535.969722][ T4617] tipc: Resetting bearer <eth:team0>
[  535.972420][ T4617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  536.216609][ T4638] netlink: 'syz.2.9055': attribute type 2 has an invalid length.
[  536.273858][ T4645] ip6gretap0 speed is unknown, defaulting to 1000
[  536.294705][ T4645] C speed is unknown, defaulting to 1000
[  536.369748][ T4653] netlink: 'syz.3.9058': attribute type 32 has an invalid length.
[  536.372558][ T4653] (unnamed net_device) (uninitialized): option coupled_control: invalid value (71)
[  536.466516][ T4645] lo speed is unknown, defaulting to 1000
[  537.185379][ T4670] sctp: [Deprecated]: syz.2.9063 (pid 4670) Use of struct sctp_assoc_value in delayed_ack socket option.
[  537.185379][ T4670] Use struct sctp_sack_info instead
[  537.469843][ T4682] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  537.682869][ T4691] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  537.772210][ T4691] netlink: 'syz.4.9071': attribute type 11 has an invalid length.
[  537.775206][ T4691] __nla_validate_parse: 14 callbacks suppressed
[  537.775215][ T4691] netlink: 44 bytes leftover after parsing attributes in process `syz.4.9071'.
[  537.815111][ T4695] bridge38: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  538.415478][ T4735] netlink: 'syz.2.9087': attribute type 8 has an invalid length.
[  538.481829][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9089'.
[  538.586199][ T4743] netlink: 'syz.2.9090': attribute type 11 has an invalid length.
[  538.591687][ T4743] pim6reg1: entered promiscuous mode
[  538.593628][ T4743] pim6reg1: entered allmulticast mode
[  538.650306][ T4745] netlink: 'syz.2.9091': attribute type 1 has an invalid length.
[  538.663344][ T4745] bond54: entered promiscuous mode
[  538.665390][ T4745] 8021q: adding VLAN 0 to HW filter on device bond54
[  538.675175][ T4745] bond54: (slave bridge45): making interface the new active one
[  538.677906][ T4745] bridge45: entered promiscuous mode
[  538.680166][ T4745] bond54: (slave bridge45): Enslaving as an active interface with an up link
[  538.713781][ T4748] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9092'.
[  538.718265][ T4748] netlink: 'syz.2.9092': attribute type 5 has an invalid length.
[  538.721551][ T4748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9092'.
[  538.728633][ T4748] geneve0: entered promiscuous mode
[  538.730467][ T4748] geneve0: entered allmulticast mode
[  538.733144][ T8282] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0
[  538.736032][ T8282] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0
[  538.740680][ T8282] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0
[  538.744506][ T8282] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0
[  538.958015][ T4759] netlink: 14 bytes leftover after parsing attributes in process `syz.4.9096'.
[  539.000566][ T4762] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9095'.
[  539.394253][ T4803] sctp: [Deprecated]: syz.3.9105 (pid 4803) Use of int in max_burst socket option.
[  539.394253][ T4803] Use struct sctp_assoc_value instead
[  539.590232][ T4819] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  539.623425][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9110'.
[  539.707877][ T4825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9111'.
[  539.711501][ T4825] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9111'.
[  539.802407][ T4828] netlink: 104 bytes leftover after parsing attributes in process `syz.2.9112'.
[  540.288014][ T4838] rdma_op ffff88803b33c9f0 conn xmit_rdma 0000000000000000
[  540.293904][ T4838] netlink: 'syz.4.9114': attribute type 10 has an invalid length.
[  540.310701][ T5881] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  540.633413][ T4840] netlink: 'syz.3.9115': attribute type 7 has an invalid length.
[  540.636269][ T4840] netlink: 'syz.3.9115': attribute type 8 has an invalid length.
[  540.910585][ T4866] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  540.916339][ T5881] C speed is unknown, defaulting to 1000
[  540.920021][ T5881] syz2: Port: 1 Link ACTIVE
[  540.921229][ T7172] ip6gretap0 speed is unknown, defaulting to 1000
[  540.924165][ T7172] syz0: Port: 1 Link ACTIVE
[  540.939036][ T7172] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  541.053994][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  541.059181][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  541.107745][ T4878] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  541.110843][ T4878] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  541.140656][ T4881] 8021q: adding VLAN 0 to HW filter on device bond50
[  541.162374][ T4881] bond50: (slave bridge39): making interface the new active one
[  541.168730][ T4881] bond50: (slave bridge39): Enslaving as an active interface with an up link
[  541.177823][ T4881] bond50: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  541.336986][ T7172] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  541.337282][T15658] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  541.403945][ T4906] validate_nla: 3 callbacks suppressed
[  541.403959][ T4906] netlink: 'syz.4.9133': attribute type 10 has an invalid length.
[  541.436966][T15658] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  542.211602][ T4919] netlink: 'syz.4.9137': attribute type 1 has an invalid length.
[  542.215078][ T4919] netlink: 'syz.4.9137': attribute type 1 has an invalid length.
[  542.222694][ T4919] netlink: 'syz.4.9137': attribute type 1 has an invalid length.
[  542.702595][ T4963] ip6gretap0 speed is unknown, defaulting to 1000
[  542.707010][ T4963] C speed is unknown, defaulting to 1000
[  542.849410][ T4963] lo speed is unknown, defaulting to 1000
[  543.322306][ T4997] __nla_validate_parse: 15 callbacks suppressed
[  543.322316][ T4997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9163'.
[  543.402257][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9165'.
[  543.494454][ T5011] netlink: 260 bytes leftover after parsing attributes in process `syz.2.9169'.
[  543.541450][ T5013] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9170'.
[  543.604865][ T5026] nbd: must specify a device to reconfigure
[  543.772916][ T5045] openvswitch: netlink: Missing valid actions attribute.
[  543.775715][ T5045] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  543.795521][ T5881] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  543.842126][ T5051] tipc: Enabling of bearer <udp:s> rejected, already enabled
[  543.932085][ T5071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9184'.
[  543.936187][ T5071] netlink: 'syz.3.9184': attribute type 12 has an invalid length.
[  543.984944][ T5085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9187'.
[  543.989840][ T5085] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5)
[  544.019049][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9188'.
[  544.022164][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9188'.
[  544.025046][ T5088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9188'.
[  544.029157][ T5090] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9189'.
[  544.143037][ T5104] syzkaller1: entered promiscuous mode
[  544.144803][ T5104] syzkaller1: entered allmulticast mode
[  544.191360][ T5110] netlink: 'syz.4.9197': attribute type 12 has an invalid length.
[  544.193901][ T5110] netlink: 'syz.4.9197': attribute type 18 has an invalid length.
[  544.196573][ T5110] netlink: 'syz.4.9197': attribute type 21 has an invalid length.
[  544.199192][ T5110] netlink: 'syz.4.9197': attribute type 26 has an invalid length.
[  544.436981][T15658] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  544.857103][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  545.327489][ T5159] netlink: 'syz.3.9216': attribute type 12 has an invalid length.
[  545.470812][ T5186] ip6gretap0 speed is unknown, defaulting to 1000
[  545.474196][ T5186] C speed is unknown, defaulting to 1000
[  545.512301][ T5189] ip6gretap0 speed is unknown, defaulting to 1000
[  545.516177][ T5189] C speed is unknown, defaulting to 1000
[  545.583100][ T5186] lo speed is unknown, defaulting to 1000
[  545.674529][ T5189] lo speed is unknown, defaulting to 1000
[  546.060988][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  546.171587][ T5264] syzkaller1: entered promiscuous mode
[  546.178950][ T5264] syzkaller1: entered allmulticast mode
[  547.101014][ T5320] validate_nla: 1 callbacks suppressed
[  547.101028][ T5320] netlink: 'syz.2.9252': attribute type 4 has an invalid length.
[  547.146508][ T5329] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[  547.185908][ T5329] erspan0: mtu less than device minimum
[  547.212105][ T5337] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  547.415168][ T5357] 8021q: VLANs not supported on bond0
[  548.696848][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  549.109520][ T5405] __nla_validate_parse: 36 callbacks suppressed
[  549.109529][ T5405] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9273'.
[  549.115747][ T5405] netem: change failed
[  549.139665][ T5408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9274'.
[  549.200626][ T5410] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9275'.
[  549.209819][ T5412] netlink: 232 bytes leftover after parsing attributes in process `syz.3.9276'.
[  550.182878][ T5442] netlink: 'syz.4.9286': attribute type 5 has an invalid length.
[  550.251993][ T5451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9289'.
[  550.294945][ T5454] syzkaller1: entered promiscuous mode
[  550.298910][ T5454] syzkaller1: entered allmulticast mode
[  550.396312][ T5470] nbd: nbd4 already in use
[  550.458109][ T5474] netlink: 'syz.4.9294': attribute type 2 has an invalid length.
[  550.519136][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9296'.
[  550.522331][ T5480] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9296'.
[  550.525925][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9296'.
[  550.603726][ T5499] bridge31: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  550.718484][ T5508] netlink: 'syz.3.9303': attribute type 1 has an invalid length.
[  550.725655][ T5517] netlink: 'syz.2.9304': attribute type 1 has an invalid length.
[  550.735424][ T5508] 8021q: adding VLAN 0 to HW filter on device bond40
[  550.748303][ T5509] veth63: entered promiscuous mode
[  550.776977][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  550.820166][   T33] audit: type=1800 audit(1756440991.798:22): pid=5527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9308" name=CB dev="tmpfs" ino=15286 res=0 errno=0
[  550.854285][ T5534] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9310'.
[  550.858984][ T5533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9310'.
[  550.931871][ T5907] nci: nci_ntf_packet: unknown ntf opcode 0x127
[  551.808733][ T5557] netlink: 'syz.3.9314': attribute type 11 has an invalid length.
[  552.218650][ T5609] netlink: 'syz.4.9329': attribute type 1 has an invalid length.
[  552.240432][ T5606] netlink: 'syz.3.9328': attribute type 8 has an invalid length.
[  552.456801][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  552.856965][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  552.882142][ T5653] netlink: 'syz.2.9342': attribute type 1 has an invalid length.
[  552.895708][ T5653] 8021q: adding VLAN 0 to HW filter on device bond55
[  552.942751][ T5658] netlink: 'syz.2.9343': attribute type 1 has an invalid length.
[  552.945381][ T5658] netlink: 'syz.2.9343': attribute type 1 has an invalid length.
[  552.956024][ T5658] 0X: renamed from caif0
[  552.960441][ T5658] 0X: entered allmulticast mode
[  552.962390][ T5658] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  553.046790][ T5665] netlink: 'syz.2.9346': attribute type 1 has an invalid length.
[  553.070665][ T5665] 8021q: adding VLAN 0 to HW filter on device bond56
[  553.162825][ T5675] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode
[  553.166030][ T5675] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode
[  553.986467][ T5729] veth71: entered promiscuous mode
[  554.403123][ T5758] ip6gretap0 speed is unknown, defaulting to 1000
[  554.406097][ T5758] C speed is unknown, defaulting to 1000
[  554.509723][ T5758] lo speed is unknown, defaulting to 1000
[  554.572820][ T5765] __nla_validate_parse: 14 callbacks suppressed
[  554.572830][ T5765] netlink: 464 bytes leftover after parsing attributes in process `syz.3.9372'.
[  554.805733][ T5777] netlink: 'syz.3.9377': attribute type 1 has an invalid length.
[  554.937922][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  555.010019][ T5793] netlink: 91 bytes leftover after parsing attributes in process `syz.4.9381'.
[  555.211444][ T5806] 8021q: adding VLAN 0 to HW filter on device bond52
[  555.247463][ T5808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9384'.
[  555.270923][ T5812] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9386'.
[  555.372450][ T5814] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  555.414966][ T5818] wg1: entered promiscuous mode
[  555.418768][ T5818] wg1: entered allmulticast mode
[  555.461274][ T5824] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9390'.
[  555.514299][ T5830] netlink: 180 bytes leftover after parsing attributes in process `syz.2.9392'.
[  555.520138][ T5830] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9392'.
[  556.017992][ T5841] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9395'.
[  556.384025][ T5907] tipc: Resetting bearer <ib:ip6gre0>
[  556.387549][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  556.390456][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  556.430302][ T5907] tipc: Disabling bearer <ib:ip6gre0>
[  556.642791][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  556.646528][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  556.662872][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  556.678668][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  556.687693][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  556.722016][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  556.725404][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  556.732220][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  556.737794][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  556.740664][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  557.020990][ T5848] Bluetooth: hci2: command 0x0405 tx timeout
[  557.048058][ T5907] dvmrp0 (unregistering): left allmulticast mode
[  557.426893][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  557.430227][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  558.456975][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  558.459507][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  558.777157][ T5848] Bluetooth: hci0: command tx timeout
[  558.777193][   T54] Bluetooth: hci1: command tx timeout
[  559.041689][ T5907] bond1 (unregistering): Released all slaves
[  559.101183][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  559.137845][ T5907] bond2 (unregistering): Released all slaves
[  559.224870][ T5907] bond3 (unregistering): Released all slaves
[  559.231767][ T5907] bond4 (unregistering): Released all slaves
[  559.239254][ T5907] bond5 (unregistering): Released all slaves
[  559.325545][ T5907] bond6 (unregistering): Released all slaves
[  559.409572][ T5907] bond7 (unregistering): Released all slaves
[  559.492366][ T5907] bond8 (unregistering): Released all slaves
[  559.496982][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  559.500086][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  559.508754][ T5907] bond0 (unregistering): Released all slaves
[  559.519978][ T5907] bond9 (unregistering): Released all slaves
[  559.528099][ T5907] bond10 (unregistering): Released all slaves
[  559.536626][ T5907] bond11 (unregistering): Released all slaves
[  559.544745][ T5907] bond12 (unregistering): Released all slaves
[  559.561107][ T5907] bond13 (unregistering): Released all slaves
[  559.656209][ T5907] bond14 (unregistering): Released all slaves
[  559.766099][ T5907] bond15 (unregistering): Released all slaves
[  559.777330][ T5907] bond16 (unregistering): Released all slaves
[  559.786407][ T5907] bond17 (unregistering): Released all slaves
[  559.792971][ T5907] bond18 (unregistering): Released all slaves
[  559.804022][ T5907] bond19 (unregistering): Released all slaves
[  559.816402][ T5907] bond20 (unregistering): Released all slaves
[  559.920098][ T5907] bond21 (unregistering): Released all slaves
[  560.016037][ T5907] bond22 (unregistering): Released all slaves
[  560.109772][ T5907] bond23 (unregistering): Released all slaves
[  560.116625][ T5907] bond24 (unregistering): Released all slaves
[  560.210050][ T5907] bond25 (unregistering): Released all slaves
[  560.216530][ T5907] bond26 (unregistering): Released all slaves
[  560.302937][ T5907] bond27 (unregistering): Released all slaves
[  560.309863][ T5907] bond28 (unregistering): Released all slaves
[  560.316588][ T5907] bond29 (unregistering): Released all slaves
[  560.323727][ T5907] bond30 (unregistering): Released all slaves
[  560.331401][ T5907] bond31 (unregistering): Released all slaves
[  560.445648][ T5907] bond32 (unregistering): Released all slaves
[  560.537033][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  560.540123][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  560.551010][ T5907] bond33 (unregistering): Released all slaves
[  560.634390][ T5907] bond34 (unregistering): Released all slaves
[  560.723734][ T5907] bond35 (unregistering): Released all slaves
[  560.813276][ T5907] bond36 (unregistering): Released all slaves
[  560.820268][ T5907] bond37 (unregistering): Released all slaves
[  560.858412][   T54] Bluetooth: hci1: command tx timeout
[  560.870338][   T54] Bluetooth: hci0: command tx timeout
[  560.913765][ T5907] bond38 (unregistering): Released all slaves
[  560.998716][ T5907] bond39 (unregistering): Released all slaves
[  561.088768][ T5907] bond40 (unregistering): Released all slaves
[  561.098272][ T2288] ip6gretap0 speed is unknown, defaulting to 1000
[  561.100457][ T2288] infiniband syz0: ib_query_port failed (-19)
[  561.120723][ T5864] C speed is unknown, defaulting to 1000
[  561.133904][ T5860] C speed is unknown, defaulting to 1000
[  561.159701][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9402'.
[  561.176923][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  561.255592][ T5864] lo speed is unknown, defaulting to 1000
[  561.329631][ T5907] : left promiscuous mode
[  561.398001][ T5860] lo speed is unknown, defaulting to 1000
[  561.423839][ T5907] : left promiscuous mode
[  561.529160][ T5907] _Z`Ԁ@: left promiscuous mode
[  561.561239][ T5864] chnl_net:caif_netlink_parms(): no params data found
[  561.580405][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  561.582720][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  561.613322][ T5907] k*]: left promiscuous mode
[  561.674722][ T5907] tipc: Disabling bearer <udp:s>
[  561.684330][ T5907] tipc: Disabling bearer <udp:syz2>
[  561.687581][ T5907] tipc: Left network mode
[  561.806580][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state
[  561.810462][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[  561.813551][ T5864] bridge_slave_0: entered allmulticast mode
[  561.817879][ T5864] bridge_slave_0: entered promiscuous mode
[  561.830561][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state
[  561.833500][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[  561.836192][ T5864] bridge_slave_1: entered allmulticast mode
[  561.839675][ T5864] bridge_slave_1: entered promiscuous mode
[  561.902562][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  561.906127][ T5860] chnl_net:caif_netlink_parms(): no params data found
[  561.924909][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  561.941829][ T5896] C speed is unknown, defaulting to 1000
[  561.969951][ T5864] team0: Port device team_slave_0 added
[  561.977814][ T5864] team0: Port device team_slave_1 added
[  561.984652][ T5904] netlink: 'syz.2.9407': attribute type 1 has an invalid length.
[  561.989843][ T5904] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9407'.
[  562.038513][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.040811][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.049606][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.064603][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.068799][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.077648][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.115407][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state
[  562.117882][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[  562.120191][ T5860] bridge_slave_0: entered allmulticast mode
[  562.122892][ T5860] bridge_slave_0: entered promiscuous mode
[  562.156490][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state
[  562.159034][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[  562.161372][ T5860] bridge_slave_1: entered allmulticast mode
[  562.164094][ T5860] bridge_slave_1: entered promiscuous mode
[  562.166935][ T5896] lo speed is unknown, defaulting to 1000
[  562.194216][ T5864] hsr_slave_0: entered promiscuous mode
[  562.197474][ T5864] hsr_slave_1: entered promiscuous mode
[  562.233963][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  562.263256][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  562.317502][ T5860] team0: Port device team_slave_0 added
[  562.334391][ T5860] team0: Port device team_slave_1 added
[  562.360481][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.363517][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.374384][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.397372][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.400103][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.409967][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.503106][ T5860] hsr_slave_0: entered promiscuous mode
[  562.506394][ T5860] hsr_slave_1: entered promiscuous mode
[  562.509843][ T5860] debugfs: 'hsr0' already exists in 'hsr'
[  562.512176][ T5860] Cannot create hsr debugfs directory
[  562.626996][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  562.630069][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  562.653046][ T5864] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  562.730990][ T5864] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  562.754237][ T5864] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  562.770719][ T5864] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  562.891947][ T5860] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  562.899770][ T5860] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  562.904829][ T5928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9411'.
[  562.905009][ T5860] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  562.911480][ T5928] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9411'.
[  562.917057][ T5860] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  562.928095][ T5928] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5
[  562.932128][ T5928] gretap5: entered promiscuous mode
[  562.933859][ T5928] gretap5: entered allmulticast mode
[  562.937243][   T54] Bluetooth: hci0: command tx timeout
[  562.940213][ T5848] Bluetooth: hci1: command tx timeout
[  562.988033][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.019248][ T5864] 8021q: adding VLAN 0 to HW filter on device team0
[  563.067857][ T5938] tipc: Resetting bearer <eth:team0>
[  563.219130][   T13] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  563.228227][   T13] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 256 - 0
[  563.234582][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  563.237655][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  563.259663][   T13] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  563.263256][   T13] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 256 - 0
[  563.266758][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  563.293097][T11040] bridge0: port 2(bridge_slave_1) entered blocking state
[  563.295985][T11040] bridge0: port 2(bridge_slave_1) entered forwarding state
[  563.306584][   T13] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  563.316785][   T13] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 256 - 0
[  563.324666][   T13] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  563.333388][   T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 256 - 0
[  563.397431][ T5943] C speed is unknown, defaulting to 1000
[  563.405362][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0
[  563.452674][ T5907] hsr_slave_0: left promiscuous mode
[  563.459396][ T5907] hsr_slave_1: left promiscuous mode
[  563.602671][ T5907] pim6reg (unregistering): left allmulticast mode
[  563.656914][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  563.659390][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  563.986895][   T11] block nbd2: Possible stuck request ffff888048320000: control (read@0,1024B). Runtime 150 seconds
[  563.991126][   T11] block nbd2: Possible stuck request ffff888048320200: control (read@1024,1024B). Runtime 150 seconds
[  563.994766][   T11] block nbd2: Possible stuck request ffff888048320400: control (read@2048,1024B). Runtime 150 seconds
[  563.999540][   T11] block nbd2: Possible stuck request ffff888048320600: control (read@3072,1024B). Runtime 150 seconds
[  564.211013][ T5940] C speed is unknown, defaulting to 1000
[  564.211061][ T5943] lo speed is unknown, defaulting to 1000
[  564.213133][ T5940] syz2: Port: 1 Link DOWN
[  564.269632][ T5860] 8021q: adding VLAN 0 to HW filter on device team0
[  564.278993][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.282063][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.322948][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.325955][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.440976][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.465200][ T5860] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  564.469673][ T5860] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  564.657446][ T5907] ------------[ cut here ]------------
[  564.659840][ T5907] WARNING: CPU: 1 PID: 5907 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  564.664488][ T5907] Modules linked in:
[  564.666651][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  564.670794][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  564.673083][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0
[  564.674225][ T5907] Workqueue: netns cleanup_net
[  564.679604][ T5907] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  564.681953][ T5907] Code: 68 44 df f7 4b 83 3c 2c 00 75 19 e8 3c d6 7b f7 49 81 fd f8 07 00 00 74 1d e8 2e d6 7b f7 49 83 c5 08 eb c9 e8 23 d6 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  564.688518][ T5907] RSP: 0018:ffffc90003ddf8b0 EFLAGS: 00010293
[  564.690590][ T5907] RAX: ffffffff8a43d56d RBX: ffff888110f98000 RCX: ffff88801ff65640
[  564.693476][ T5907] RDX: 0000000000000000 RSI: ffffffff8d9b6cc2 RDI: ffff888110f98000
[  564.696142][ T5907] RBP: ffffc90003ddf9b0 R08: ffffffff8fa37937 R09: 1ffffffff1f46f26
[  564.699111][ T5907] R10: dffffc0000000000 R11: fffffbfff1f46f27 R12: ffff888110f98000
[  564.701902][ T5907] R13: 0000000000000000 R14: ffff88810ed7a440 R15: dffffc0000000000
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  564.704996][ T5907] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  564.708424][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  564.708510][    C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  564.714218][ T5907] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  564.717847][ T5907] CR2: 00007febbed57fe4 CR3: 000000003c820000 CR4: 00000000000006f0
[  564.721197][ T5907] Call Trace:
[  564.723432][ T5907]  <TASK>
[  564.724444][ T5907]  ops_undo_list+0x49a/0x990
[  564.725954][ T5907]  ? __pfx_ops_undo_list+0x10/0x10
[  564.728037][ T5907]  ? do_raw_spin_unlock+0x4d/0x240
[  564.729860][ T5907]  cleanup_net+0x4c5/0x800
[  564.731576][ T5907]  ? __pfx_cleanup_net+0x10/0x10
[  564.733603][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  564.735653][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  564.738180][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  564.740371][ T5907]  process_scheduled_works+0xae1/0x17b0
[  564.742541][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  564.744880][ T5907]  worker_thread+0x8a0/0xda0
[  564.746879][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  564.749378][ T5907]  ? __kthread_parkme+0x7b/0x200
[  564.751359][ T5907]  kthread+0x711/0x8a0
[  564.753039][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  564.755078][ T5907]  ? __pfx_kthread+0x10/0x10
[  564.757104][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  564.759160][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.761228][ T5907]  ? __pfx_kthread+0x10/0x10
[  564.763069][ T5907]  ret_from_fork+0x3fc/0x770
[  564.764875][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  564.766959][ T5907]  ? __switch_to_asm+0x39/0x70
[  564.769026][ T5907]  ? __switch_to_asm+0x33/0x70
[  564.770719][ T5907]  ? __pfx_kthread+0x10/0x10
[  564.772334][ T5907]  ret_from_fork_asm+0x1a/0x30
[  564.774006][ T5907]  </TASK>
[  564.776154][ T5907] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  564.778985][ T5907] CPU: 1 UID: 0 PID: 5907 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  564.782197][ T5907] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  564.785543][ T5907] Workqueue: netns cleanup_net
[  564.787161][ T5907] Call Trace:
[  564.788368][ T5907]  <TASK>
[  564.789450][ T5907]  dump_stack_lvl+0x99/0x250
[  564.791180][ T5907]  ? __asan_memcpy+0x40/0x70
[  564.792897][ T5907]  ? __pfx_dump_stack_lvl+0x10/0x10
[  564.794825][ T5907]  ? __pfx__printk+0x10/0x10
[  564.796505][ T5907]  vpanic+0x281/0x750
[  564.798106][ T5907]  ? __pfx__printk+0x10/0x10
[  564.799955][ T5907]  ? __pfx_vpanic+0x10/0x10
[  564.801826][ T5907]  ? is_bpf_text_address+0x292/0x2b0
[  564.804003][ T5907]  panic+0xb9/0xc0
[  564.805535][ T5907]  ? __pfx_panic+0x10/0x10
[  564.807376][ T5907]  __warn+0x31b/0x4b0
[  564.809050][ T5907]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  564.811212][ T5907]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  564.813417][ T5907]  report_bug+0x2be/0x4f0
[  564.815148][ T5907]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  564.817360][ T5907]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  564.819507][ T5907]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  564.821528][ T5907]  handle_bug+0x84/0x160
[  564.823307][ T5907]  exc_invalid_op+0x1a/0x50
[  564.824877][ T5907]  asm_exc_invalid_op+0x1a/0x20
[  564.826614][ T5907] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  564.829013][ T5907] Code: 68 44 df f7 4b 83 3c 2c 00 75 19 e8 3c d6 7b f7 49 81 fd f8 07 00 00 74 1d e8 2e d6 7b f7 49 83 c5 08 eb c9 e8 23 d6 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  564.835112][ T5907] RSP: 0018:ffffc90003ddf8b0 EFLAGS: 00010293
[  564.837240][ T5907] RAX: ffffffff8a43d56d RBX: ffff888110f98000 RCX: ffff88801ff65640
[  564.839934][ T5907] RDX: 0000000000000000 RSI: ffffffff8d9b6cc2 RDI: ffff888110f98000
[  564.842853][ T5907] RBP: ffffc90003ddf9b0 R08: ffffffff8fa37937 R09: 1ffffffff1f46f26
[  564.845729][ T5907] R10: dffffc0000000000 R11: fffffbfff1f46f27 R12: ffff888110f98000
[  564.848396][ T5907] R13: 0000000000000000 R14: ffff88810ed7a440 R15: dffffc0000000000
[  564.850929][ T5907]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  564.852751][ T5907]  ops_undo_list+0x49a/0x990
[  564.854534][ T5907]  ? __pfx_ops_undo_list+0x10/0x10
[  564.856516][ T5907]  ? do_raw_spin_unlock+0x4d/0x240
[  564.858201][ T5907]  cleanup_net+0x4c5/0x800
[  564.859739][ T5907]  ? __pfx_cleanup_net+0x10/0x10
[  564.861418][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  564.863183][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  564.865218][ T5907]  ? process_scheduled_works+0x9ef/0x17b0
[  564.867359][ T5907]  process_scheduled_works+0xae1/0x17b0
[  564.869379][ T5907]  ? __pfx_process_scheduled_works+0x10/0x10
[  564.871844][ T5907]  worker_thread+0x8a0/0xda0
[  564.873765][ T5907]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  564.876365][ T5907]  ? __kthread_parkme+0x7b/0x200
[  564.878435][ T5907]  kthread+0x711/0x8a0
[  564.880118][ T5907]  ? __pfx_worker_thread+0x10/0x10
[  564.881946][ T5907]  ? __pfx_kthread+0x10/0x10
[  564.883470][ T5907]  ? _raw_spin_unlock_irq+0x23/0x50
[  564.885136][ T5907]  ? lockdep_hardirqs_on+0x9c/0x150
[  564.887002][ T5907]  ? __pfx_kthread+0x10/0x10
[  564.888658][ T5907]  ret_from_fork+0x3fc/0x770
[  564.890165][ T5907]  ? __pfx_ret_from_fork+0x10/0x10
[  564.891994][ T5907]  ? __switch_to_asm+0x39/0x70
[  564.893547][ T5907]  ? __switch_to_asm+0x33/0x70
[  564.895122][ T5907]  ? __pfx_kthread+0x10/0x10
[  564.896864][ T5907]  ret_from_fork_asm+0x1a/0x30
[  564.898912][ T5907]  </TASK>
[  564.900931][ T5907] Kernel Offset: disabled
[  564.902667][ T5907] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:16:45  Registers:
info registers vcpu 0

CPU#0
RAX=00000000000a0007 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000003
RSI=0000000000000000 RDI=ffff8881097e5640 RBP=0000000000000000 RSP=ffffc9000762e4a8
R8 =0000000000000000 R9 =ffffffff8172c195 R10=ffffc9000762e6f8 R11=ffffffff81ac3820
R12=0000000000000000 R13=0000000000000001 R14=ffff8881097e6180 R15=0000000000000002
RIP=ffffffff819d62cc RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00005555684c2500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f261091c440 CR3=00000000386fa000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000100000001 0000001600000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00ff000000000000 XMM05=0000000000000000 00007f5039c12e53
XMM06=0000000000000000 00007f5039c12e4d XMM07=0000000000000000 00007f5039c12e61
XMM08=0000000000000000 00007f5039c12ee7 XMM09=0000000000000000 00007f5039c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003ddf050
R8 =ffff8880207b8237 R9 =1ffff110040f7046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8cb R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007febbed57fe4 CR3=000000003c820000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=000000000000ff00 0000000000000000 XMM01=ffffffffffff00ff ffffffffffffffff
XMM02=5f4342494c470033 2e325f4342494c47 XMM03=0000000000000000 00005f6570797463
XMM04=695f796669746f6e 616600636f6c5f62 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
