last executing test programs:

6m4.434324173s ago: executing program 0 (id=3083):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xa, 0x1, 0x0, 0x0, @str='wlan0\x00'}]}, 0x20}}, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000001e000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00T'], 0x24}}, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x3}, 0x10}, 0x94)

6m3.995717116s ago: executing program 0 (id=3085):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r2=>0x0})
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000017000000000000000010000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r2}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r3, r2, 0x25, 0x8, @void}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000940)={'batadv_slave_1\x00', <r4=>0x0})
sendmmsg$inet(r0, &(0x7f0000001700)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)="f43fba", 0x3}, {&(0x7f0000000100)="91a790019a840416e6b44f6916c8e824a96cf467c90128badd93e7f75385dc55a0fcd0675ffcbb6b7dd086b5016a0d74225bad741dc1c3d9ec1186a6f60fdf1973f5e5e803e05e370a561c3a52dcb8e55c838212e8bc86b234eb3cc9aa26c6878d2bbdc422016a41877199c16aed2aaf41c1471ce57b33868ea1b1299b2175083d2b", 0x82}, {&(0x7f00000001c0)="1511316b3f4b50aa5e23372360cdf5a6adc7417a555d7cacd68e58a330379eb97999b0d1e800a7225d89611df09aeb0898f2b4d4028aed433b8972c751362bed08d6008b02b15077e0278257d20c0034f9b39fef54190df78e66200a4c5cc56aafc97cf6d15516baa08cc1340f7ac2963f68cd7cd9d64d543fb3a4b01a526d41b4b14a64ad9ca53ea3db1e9f636b52e62f5c3607f4", 0x95}, {&(0x7f0000000300)="da4d167ce85e6eae3fd70537d36144b8166b377aea5b142b", 0x18}], 0x4, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010102, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_retopts={{0x38, 0x0, 0x7, {[@lsrr={0x83, 0x17, 0x1f, [@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @empty]}, @timestamp={0x44, 0xc, 0x76, 0x0, 0x7, [0x6, 0x2]}, @timestamp={0x44, 0x4, 0xdc, 0x0, 0x6}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x14, 0x0, 0x7, {[@noop]}}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000440)="f352e3d7f03936121d9b4c6ae156df6aece1c485d2891a6f9ac61ede0d7a9698105cb250efb55433cf7ecffe1453654a17fb043b109abb8a9450368a7061641cb14144646d0f3bae5f28106cb7d3b551f41f3dceccc547277a32aada174ac1e184499e5d704a2ceb2bee379cea2cc8b56edcbd8ed2abb9d8843d0f9bbb06c76a234c6d1c2281da418a507221af12050ead1e8043fcd1ce0275964a2fece8d9b4ad3855a72145c18f8b13663a2cef93fc13971b52b7fed98986c32ec839c7498bd0315edb0f6fb4fe2e53b148863750aa60d20b7d39d76fadc7a45577c97bc32a0ca79c602f8911", 0xe7}, {&(0x7f0000000540)="42f39cde68f9d61f0413ab7c67e40aeef2add4cc08d92fc8b2a20cdbec69daffbb2fb3b07a45c2af2caa7fb4ea9307b420e0eb61cefb89818ff5e4539abfbe4172579cd17c71683959d09eb35cbeb7eb0cea147885bfe169f291ce9c272ca1516bec15bfece2d717263091545034495d68d63de4658156740d5945a2906d559a891ddfd43bb63e4218ad84c7ca849987533580385919fe785d0e73e0d2a183438a9baf101740aa77ce9f26865944a31cb1c49367559a94d9577d8a9a08d057499c751db6", 0xc4}, {&(0x7f0000000640)="c9f04cc1d73133d37e6eecc8786f1cc752bdb90545f2cb55dd310124668e4ac006473d6ca8e3b85a16947ef811e41441e06f349d66cac702fdda520ec4313b968cfc8913a0", 0x45}, {&(0x7f00000006c0)="0b75b9f925fca806ed49cc0fd7075531b12db57438f718614ee9327f163ae261e13e43c2ae6a31bfd4fd80ba6dce8328f09fc72f8ee860375e072c8a7405b18b9bb2d73a03f0837b0216db7bee915b766092a67892645959d54f4fc64775b97f5a3aef2ea6a6df35bb", 0x69}, {&(0x7f0000000740)="c8666ed096c8492c1d4e52631af9dfe260122a3474789798766d4b13f0920863d8fa990369856789e682701403b46da92e6a67f2b9cefbfd132cc881efdb3baf6134b96db389699848b849bad2a72443d2c183030123b3bfde973b17e3276097edc25d210b1b5818912e", 0x6a}], 0x5, &(0x7f0000000840)}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)="086478ec07ecd1b2962d226abf47ea6e09cd384490fd1f9232c1236b066b69405e4d2cc73be878de73ec341dcfd5307994d046a1a98c220f3f213f00cae8608e19607a677dbdc3c74ac029f9a134146836122ac57b1258cb03ca513757291b96277d686843f3b9f408d3be37b69b5bca75cd8e4fb6a2fd", 0x77}], 0x1, &(0x7f0000000980)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x23, [@dev={0xac, 0x14, 0x14, 0x26}, @loopback, @private=0xa010101]}, @noop, @end, @cipso={0x86, 0xc, 0x1, [{0x7, 0x6, "e7d5856c"}]}, @generic={0x94, 0xe, "5399df0fa564da07948209d1"}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4e2}}], 0xf0}}, {{&(0x7f0000000a80)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000ac0)="575694536f3760a1bb930028fc1f2c7c2965cd48f0188c8d8aba92cbabe597b36b8a3fae060f3bc08afac24a", 0x2c}, {&(0x7f0000000b00)="bda76439f5f5000804f802bc0f1a18a9ea61fdda4446bdb3b66b4a619ecd0b0784cd92fd96a184ec6f7fcb9022d6602699ab73ffee9e22f01d9302d0762d742e5081045dd1d7a41cc4d6eb878775b24a03b5ec4c24985f38044e771f829e6a9acde10b3ef77265951232f77f4b9c0adaaa3d8de21fdb99d7845fc2b8a643935a5036db209b52392eab6b1e7e0519599862d79b483c1f4d1b0d1317b6cc2c4468ff3a29575bca7f8ada65f24cd48a61c92bbfcfbd8935f7", 0xb7}, {&(0x7f0000000bc0)="df1fb6e39b502e2ab6a70d4ed8fe758b9624b779", 0x14}, {&(0x7f0000000c00)="c61138f48423fb75c66adbca8313e2c02f0bc43d82da9e525a8a8ffd3b29e7ae6b05a17caa25d1f94113242a14642f518512ae8281c7933ec1adae8129142fcfa1cec4d0e2b75e290f145ad4a148f6a26f428c3f036435bc1be437698b9fbe9eb2effcbcdd8bf3f53db80f211ff5f2595bcfdf065a07624e6bc0c90c5fa552a23db5222ca7081eb0941c8c301497c18a25f4ed170df9ed5264c8de9c406231e48d0b04df2c87cecb", 0xa8}, {&(0x7f0000000cc0)="fa5ef4d5de758fc53949f730ff02c72bfb99fd886323f412d637ad03a379fa6e35a816213be2ed5ca01ff2e96576217e294e97d78a0cb286820e7bcf4315efe0ec7d75ca598c243e88de916691578b93cbb1fc7323213a94da8b6ea96a1c57ab8dcc60cbcb158842f4b41bd580841a04bbd92877bcc8c48ece0fdde557b0006e4ae7312dc8558b73317c41a3e8cfccda7128df73ec18b1007456c1dfb1cce0b0367cbeeaadff327aed325414439d50b1eb454c754ef90495fc766305f0", 0xbd}, {&(0x7f0000000d80)="3388b71be8038038edd46919", 0xc}], 0x6, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xcdbb}}], 0x18}}, {{&(0x7f0000000e80)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)="a748bd822387ff3933d4c1af589dc666aca847e7ff768aa1a66418f64d96b57e945b858e8051757e635b3a", 0x2b}, {&(0x7f0000000f00)="d3", 0x1}, {&(0x7f0000000f40)="c74d096780c6ea7b5372d98f0082e3e7f21ad6272f12f4ff58f737dc95a31d94e864b8954aaaf8e7a38d013a943a7cf6582008e76e441a22b615c5541032d65e0c4ca9fe41d5e713b91a14889b5dc4e764c3a3665dc56242d029e9973be630004228b2e61f1f584d9ab84b49fdd4f8ab", 0x70}], 0x3, &(0x7f0000001000)=[@ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote}}}], 0x98}}, {{&(0x7f00000010c0)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000001180)=[{&(0x7f0000001100)="df18485d706587eea4fde312a6635b91d4fa981e36082f70911dfeada9d48a9af7af335b2fe604c9cb478dcf8bd81b2b0d24cdf03f60f265143e3c980a7eca3cd42ff14c66e699ef73477e32580e3305a5d79e8a4edee950307cd86bbe898083cadf9efec36a8abe89ac6df29a0307f61b31967ba97c40cb14461f", 0x7b}], 0x1, &(0x7f00000011c0)=[@ip_retopts={{0xac, 0x0, 0x7, {[@lsrr={0x83, 0x13, 0x87, [@broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @rr={0x7, 0xb, 0xb3, [@broadcast, @local]}, @cipso={0x86, 0x7b, 0x3, [{0x7, 0x10, "0ff7d005db099fa590c3fde4552c"}, {0x0, 0x10, "d7cc35646ca12dd31dddcd3a2ae9"}, {0x0, 0x10, "9cf33a907dff445bba34ba819c2e"}, {0x6, 0x9, "53c2f37e648af7"}, {0x7, 0xd, "e6ae4ef5b235f45d76e5d5"}, {0x1, 0xf, "6661e929007a8a38bb1261d67a"}, {0x5, 0xb, "2321e1700673c08c5b"}, {0x7, 0x6, "dde63744"}, {0x7, 0xf, "dcf96a1a658d5af6fb11b5a09e"}]}]}}}, @ip_retopts={{0x10}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x13, 0xbb, [@dev={0xac, 0x14, 0x14, 0x3d}, @private=0xa010102, @empty, @multicast2]}, @lsrr={0x83, 0xf, 0xb4, [@loopback, @private=0xa010102, @broadcast]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x24, 0x1, 0x7, [{@loopback, 0x3}, {@local, 0x1}]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_retopts={{0x40, 0x0, 0x7, {[@cipso={0x86, 0x2e, 0x0, [{0x7, 0xf, "fb946008f1ec9491dab7f8f6df"}, {0x1, 0x3, 'd'}, {0x5, 0x9, "90627f0e6589d1"}, {0x0, 0xd, "aa8f7ef15855f0bea94f56"}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x1a, 0x1, 0x2, [{@local, 0x200}, {@loopback, 0xfffffc00}, {@empty, 0x9}]}]}}}], 0x1e0}}, {{&(0x7f00000013c0)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001400)="e1a0bf53c7f7f7a291037559ef58f79c1e5f43c9a7acbe7bef8610f893270be7183813e8ca56ff76adff9165270fef3e8e160b73c24aa76794fd227e155e631d53a1ccc33b42bd45c95cc16b0f9c66873b48f77065f51adcc37cefb3b9b4ef32187e41e0255e67821c5158b4401100b5b6c3e473e7fdaa08ab407b163afde99db987ed7ac251a79981ca69d73ffdabaf609ed3ee2e630fe708c52755617536aadb1cc2a4ebe8a864ce6892b2bee91d54fcaae4e63f40147d10f20e18ace125159d01e202115f", 0xc6}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001540)}, {&(0x7f0000001580)="ac89bbb5c6616b1a3ebf26936e69f32bb9d7e4b99be2e5da5cee11aa0c02ba8d3896b713f7c97b41e04c87504bbbc187a66a1b4490e2cbb3b2dcdee5d537b308ff7dea7c4a854bba960f6800517fd4319e4b3b5eaf55fbb32d257a6d6f78fc74cfa48a09a436bc605fd7ff0bef60ca029f65903029517dcfd4da209a10397f448e59158c4f96e22891f788b3b1ec829eccf4c2d954336b86b9bce70919470ee52d2933e17f202d4dcc2409021c90fb1add16dfcbc0bdbdae920c1fd049e6c06e6ad01a5bae6d235427", 0xc9}, {&(0x7f0000001680)="39fd6dad180178f0ecdf196709cb407b532e7976af2338a241312fcacb36", 0x1e}], 0x3}}], 0x8, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0)

6m3.287234353s ago: executing program 0 (id=3088):
r0 = socket(0x2a, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x12)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x24}, 0x24}}, 0x1)
getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0xe4, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x5, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xb8, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xc, 0x6}}, @TCA_U32_SEL={0xa4, 0x5, {0x7, 0x2, 0x9, 0x0, 0x8, 0x200, 0x9, 0x2, [{0xffff0001, 0xffff, 0x9, 0x7}, {0xe, 0x2c3, 0xb526, 0x110}, {0xc, 0x6, 0xfffff65d, 0x4000002}, {0x3, 0xc, 0x3ff, 0x6}, {0x7, 0x5b, 0x8, 0x6}, {0x4, 0x7, 0x0, 0x1}, {0x6, 0x4, 0x7, 0x4}, {0x4, 0x2, 0xffff6d1b, 0x3}, {0x3, 0x1, 0xaf, 0x401}]}}, @TCA_U32_LINK={0x8, 0x3, 0x9}]}}]}, 0xe4}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6m2.964838645s ago: executing program 0 (id=3089):
r0 = socket(0x2d, 0x2, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
recvmmsg(r4, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="6eedfc1c20e8df29b3418db5cc40211e94ad773ec787207748758e06fd3e4efeb330ba753c33b803b5cde60bfc8b0797a2e3b8b77a4670d0596b611a5496b87e4796137d5b77ae45672c25e1d1da1e65174904fe67164992c4873cc4b15803de6f7a4b4469", @ANYBLOB="010000000000ffffffff39000000f1629900012000005600000018000d80140001800d0001001b5c450b163004186c0000001627dd1019cf6c01812ac05827fe2bb027844b"], 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x7d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000080}, 0x8000)
socket(0x2d, 0x2, 0x0) (async)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async)
socket(0x10, 0x3, 0x0) (async)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async)
recvmmsg(r4, &(0x7f000001ef40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x20, 0x0) (async)
write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) (async)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="6eedfc1c20e8df29b3418db5cc40211e94ad773ec787207748758e06fd3e4efeb330ba753c33b803b5cde60bfc8b0797a2e3b8b77a4670d0596b611a5496b87e4796137d5b77ae45672c25e1d1da1e65174904fe67164992c4873cc4b15803de6f7a4b4469", @ANYBLOB="010000000000ffffffff39000000f1629900012000005600000018000d80140001800d0001001b5c450b163004186c0000001627dd1019cf6c01812ac05827fe2bb027844b"], 0x38}, 0x1, 0x0, 0x0, 0x4008075}, 0x6) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x7d}}}}, [@NL80211_ATTR_MCAST_RATE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000080}, 0x8000) (async)

6m2.498096634s ago: executing program 0 (id=3093):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x800, 0x70bd25, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8014)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r4, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x3, 0x5, @udp='udp:syz1\x00'}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x81)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x148, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x118, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xcc, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x80}, 0x0)

6m1.836727919s ago: executing program 0 (id=3096):
unshare(0x62000000) (async)
unshare(0x62000000)
socket$inet6(0xa, 0x80001, 0x0) (async)
r0 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="81207f84771580df491dacabb904bc12071c4bd4202b76b8848b37bef7d31cd46c3ee8ff1af193103921095b572f33ec771fbdbc2f6e98d5e20da110237797ba08858d43dba21aa6384bab6336a00478d540bee7a3b3603387f93187b02437d592ab67ad35dc5a84b252459b1a9cc1c7e159e0b9028befac6d381bc8c36abbb1753f95739ea793f30f53ca20dc170eef0d009d0a0b7e8135d322a3bc3e7298f265b9fcc7eb5f4da32f76b1a0633da6b8046f1f76cf33bf26f1977a0b8fd9049723220cbc574638853388f082b7e3c9d0e526e18b946d0878fb022f1b2aa18be0f9ad57bcee9404e44fa701", 0xeb}, {&(0x7f0000000040)="80a1d1c8819f636e5764cd8a295f9c256d84899d30bb159b19104309cbedc9dad062b91074659e1ba803", 0x2a}, {&(0x7f0000000380)="2b0888f515413ef7aabd1eaf85732a0047dde0cce9a501f0248e73542df27c07f914d34230414ffb21f26e4db06a1bf5de7b7abcd944fb5699cdea510e3fcdf3058dcc5d03bbe4e2a9cdf5f3fd5ddcf056dc12568360235cace694b46bf7a3c2083c6c2ab9ebcd9525657859a2f791326384", 0x72}, {&(0x7f0000000400)="7652204810669d608f5abc936799b19650b3fe13982f9819f5a312ef494a50cc5586f4a679eb930904ddf6f611cce4211be21e90c9dd1f7092a6c250d9fdc39d18af040a4d52dbc140dce16817d9490b627eaa00150c752ebaed1fefd8af2603621f59f08e231eeff678d1a9d65f3199405fb772c02cc7b968faf82ab0da911a861f4bb42c976ef3549e92f865b777b5eb4155945f7bbf205e7aa8b93521fb94cd2701153f3e39238d52ab61673bb323be109ff7b12ac0612f9fcc36d9039c", 0xbf}], 0x4, 0x7)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x1)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)

4m55.461924388s ago: executing program 32 (id=3096):
unshare(0x62000000) (async)
unshare(0x62000000)
socket$inet6(0xa, 0x80001, 0x0) (async)
r0 = socket$inet6(0xa, 0x80001, 0x0)
getsockopt$bt_hci(r0, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0)
vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="81207f84771580df491dacabb904bc12071c4bd4202b76b8848b37bef7d31cd46c3ee8ff1af193103921095b572f33ec771fbdbc2f6e98d5e20da110237797ba08858d43dba21aa6384bab6336a00478d540bee7a3b3603387f93187b02437d592ab67ad35dc5a84b252459b1a9cc1c7e159e0b9028befac6d381bc8c36abbb1753f95739ea793f30f53ca20dc170eef0d009d0a0b7e8135d322a3bc3e7298f265b9fcc7eb5f4da32f76b1a0633da6b8046f1f76cf33bf26f1977a0b8fd9049723220cbc574638853388f082b7e3c9d0e526e18b946d0878fb022f1b2aa18be0f9ad57bcee9404e44fa701", 0xeb}, {&(0x7f0000000040)="80a1d1c8819f636e5764cd8a295f9c256d84899d30bb159b19104309cbedc9dad062b91074659e1ba803", 0x2a}, {&(0x7f0000000380)="2b0888f515413ef7aabd1eaf85732a0047dde0cce9a501f0248e73542df27c07f914d34230414ffb21f26e4db06a1bf5de7b7abcd944fb5699cdea510e3fcdf3058dcc5d03bbe4e2a9cdf5f3fd5ddcf056dc12568360235cace694b46bf7a3c2083c6c2ab9ebcd9525657859a2f791326384", 0x72}, {&(0x7f0000000400)="7652204810669d608f5abc936799b19650b3fe13982f9819f5a312ef494a50cc5586f4a679eb930904ddf6f611cce4211be21e90c9dd1f7092a6c250d9fdc39d18af040a4d52dbc140dce16817d9490b627eaa00150c752ebaed1fefd8af2603621f59f08e231eeff678d1a9d65f3199405fb772c02cc7b968faf82ab0da911a861f4bb42c976ef3549e92f865b777b5eb4155945f7bbf205e7aa8b93521fb94cd2701153f3e39238d52ab61673bb323be109ff7b12ac0612f9fcc36d9039c", 0xbf}], 0x4, 0x7)
getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x34}}, 0x1)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0)

3.186293382s ago: executing program 3 (id=6282):
r0 = accept$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000000))
getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@initdev, @in6=@local}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000040)=0xe8)
r1 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$MRT6_TABLE(r1, 0x29, 0xcf, &(0x7f00000000c0)=0xfe, 0x4) (async)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private2, 0x800, 0x0, 0x1, 0x1, 0x7}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000100)={@private0, 0x800, 0x0, 0xff}, 0x20)

3.079286572s ago: executing program 3 (id=6284):
socketpair(0x1, 0x4, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000000c0)={0x314, r2, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x60, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff8}]}, @TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1e89}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1fc0}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xec}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff2721}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x60}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffffd}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x32}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}]}, @TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "1322e3ad441a0005541d28886c2604b718466b92e5bf392c9d68d94190cf"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r0)
sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000006c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x150, r4, 0x100, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc00}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffa}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x48080}, 0x40004)
socketpair(0xf, 0x2, 0x0, &(0x7f0000000700)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1e}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8800)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000008c0), r5)
sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0xd8, r7, 0x8, 0x70bd28, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x801)
sendmsg$TIPC_NL_BEARER_SET(r5, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x2a4, r4, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x80, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8fb}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe0e}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd67e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x57ab2bb}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x70000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xcc}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x173}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x144, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "affabe07da2ef796682eaad85cb3cff784f3eb86d66a8834606b7ee188789fc0d6d8e9"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xa4, 0x3, "2fb11fd4807afac7a5913b6f8fc63259c37bd8b6b6949f43ce0166465b596df4220959a71bfb91ccbd5f69ad82b252aa5327f0463aa9969fa9ffc8a11bd8f4486ce32219997fbaa012c4ceb2f5699c8407db527aaccebe9bab2323e5fa78e8f529ab4fd31ec981931f80ca4d0d55a9fb4516d03db10389cc94fac495727ff0a2a722c0b9f4748f8027c2e0e9755c1b5029dfad25dd4e4441e72e19b325865b78"}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "ecd88eafcaec2ec27820e734dcdc2655659d608d1659"}}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x404800c}, 0x4050)
bind$rxrpc(r6, &(0x7f0000000e00)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @rand_addr=0x64010100}}, 0x24)
r8 = accept(r1, 0x0, &(0x7f0000000e40))
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r3)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000f00)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r8, &(0x7f0000001000)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x58, r9, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfb21, 0x62}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xabf}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0xf7dba79d827d1b6f}, 0x4002044)
r11 = socket$phonet(0x23, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000001040)={'wlan1\x00'})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000010c0)={0x4, &(0x7f0000001080)=[{0x7, 0x3, 0xe1, 0x81}, {0x8, 0x40, 0x7, 0x6}, {0x1, 0xff, 0x6, 0xd}, {0x7, 0x80, 0x4, 0x9}]}, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001140), 0xffffffffffffffff)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x14, r12, 0x20, 0x70bd27, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4010)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$TIPC_NL_KEY_FLUSH(r8, &(0x7f0000001480)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001440)={&(0x7f0000001280)={0x188, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x39}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80000000}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x691}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffa}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x73}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xed}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffc}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xa}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x40000000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000001}, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000001600)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x110082050}, 0xc, &(0x7f00000015c0)={&(0x7f0000001500)={0x88, 0x0, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4400080d}, 0x4000010)
socket$netlink(0x10, 0x3, 0x12)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002980)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002940)={&(0x7f0000001680)={0x12b4, 0x0, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [{{0x254, 0x1, {{}, 0x5, 0x3, 0x2, 0x72ab, 0x1c, 'syz1\x00', "62c0c237731be1299805cf34429995a03272c4f267753e6140bbb5fc48363695", "db7748226208a559a0336dacfb6ea6edfcd8b054b27a1186fc16f1786d33e9f8", [{0x4, 0x3, {0x1, 0xfff}}, {0x8, 0x400, {0x1, 0x8}}, {0x7, 0x1, {0x2, 0x5}}, {0x0, 0x8, {0x1, 0x3}}, {0x1, 0x9, {0x1, 0x6}}, {0x9, 0x8, {0x1, 0x80000001}}, {0x3, 0xa, {0x3, 0x2}}, {0x0, 0x905, {0x2, 0x2}}, {0xb, 0x9, {0x0, 0xfff}}, {0x7, 0x5e2, {0x2, 0x2}}, {0x8, 0x40, {0x2, 0xc6}}, {0x9, 0xc18b, {0x1, 0xf}}, {0x8000, 0x4c8f, {0x2, 0xc7}}, {0x7, 0x35d1, {0x3, 0x250}}, {0x5, 0xae, {0x2, 0x5}}, {0xfff9, 0x8001, {0x0, 0x2b}}, {0x2, 0xff, {0x1, 0x2}}, {0xa, 0x10, {0x3, 0xd4e6}}, {0x0, 0xe3a2, {0x4, 0x4}}, {0x7, 0x7fff, {0x1, 0x3}}, {0x8, 0x4, {0x1, 0x7}}, {0x800, 0x56af, {0x2, 0x9}}, {0x7, 0x59b7, {0x3, 0x2}}, {0x0, 0x9, {0x3, 0x5}}, {0x8, 0x9, {0x3, 0x7f}}, {0x1ff, 0x7, {0x3}}, {0x10, 0x9, {0x1, 0x4}}, {0x8, 0x4b50, {0x2, 0x7}}, {0x2611, 0x8, {0x2, 0x7}}, {0x6, 0x5, {0x1, 0x4}}, {0x1, 0x5, {0x1, 0x2}}, {0x1, 0x6, {0x1, 0x80000000}}, {0x4, 0x4, {0x1, 0x5}}, {0x8, 0x1, {0x1, 0x828d}}, {0x7, 0x5, {0x3, 0x1}}, {0xffff, 0x6, {0x1, 0xffffe506}}, {0x7, 0x9, {0x2, 0x3}}, {0x0, 0x9fc, {0x1, 0x2}}, {0xefbb, 0x1000, {0x2, 0x4}}, {0x3, 0xffff, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x6}, 0xf, 0x7f, 0x3, 0x400, 0x28, 'syz0\x00', "442666ab24e89703c8ce64ac39b29e3356c69ea431f29e2521fc272b7f0186e7", "35e4ae4fcb613bf3c742f914754a7e90a00f015df6827530f43d2361a56c6408", [{0xfff5, 0xcf, {0x1, 0x3}}, {0xc, 0xc55, {0x3, 0x6}}, {0x3, 0xffff, {0x0, 0x5}}, {0x8, 0x6, {0x2, 0xe8}}, {0x9, 0x8, {0x3}}, {0x1, 0x20f, {0x0, 0x4}}, {0x9, 0xe9fa, {0x1, 0x7fffffff}}, {0xfff8, 0x0, {0x3, 0x5}}, {0x9, 0x5b5, {0x2, 0x6}}, {0x37, 0x6, {0x3, 0x3}}, {0x4, 0x2, {0x0, 0x71}}, {0x2, 0x6, {0x1, 0x9}}, {0x2, 0x9ea1, {0x3, 0xff}}, {0x3, 0x7, {0x0, 0xc000}}, {0x3, 0x9, {0x1, 0x8}}, {0x240b, 0x8, {0x1, 0x5}}, {0x1, 0xe06, {0x0, 0x6}}, {0x5, 0x2, {0x3, 0x5}}, {0x0, 0xfff, {0x1, 0x7f}}, {0x6, 0x9, {0x1, 0x9}}, {0x2, 0x8, {0x3}}, {0x7, 0x2, {0x2, 0x101}}, {0xffff, 0x1ff, {0x2, 0x4}}, {0x4, 0x4, {0x0, 0xfff}}, {0x4, 0x800, {0x0, 0x7573}}, {0x81, 0x6, {0x2, 0x8}}, {0x97af, 0x5, {0x0, 0x5}}, {0x4, 0x2, {0x0, 0x8}}, {0x1c, 0xc6bd, {0x1, 0x7}}, {0x5, 0x8, {0x1, 0x1ad}}, {0x4, 0x8000, {0x981a01961c2b3909, 0x2}}, {0x6, 0x1ff, {0x0, 0x9}}, {0x40, 0xfff9, {0x1, 0x7}}, {0x7, 0xe, {0x1, 0x1}}, {0x0, 0xd, {0x0, 0x8b7}}, {0x9, 0x0, {0x3, 0x168}}, {0x0, 0x88, {0x1, 0x7}}, {0x8, 0x83a, {0x2, 0x9}}, {0xb4c0, 0x1, {0x3, 0x1}}, {0x2, 0x800, {0x0, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x7f, 0x71, 0x10, 0x1, 0x23, 'syz1\x00', "7bd40c4c4249751c4649ef1591ce1ba066d44fe402ec0b81da11e656236c5b65", "c99f9180068f133c37114a2cdbfa154e11ea1fe8f5f0eb0aa72567767eafce9a", [{0x7fff, 0x7, {0x1, 0x7fffffff}}, {0x6bb0, 0x4227, {0x3, 0x81}}, {0xfff, 0x401, {0x1, 0x6e}}, {0x2f4, 0x6, {0x0, 0x5}}, {0x3f, 0x5, {0x0, 0x1}}, {0x2, 0x4, {0x2, 0x6}}, {0x740b, 0x4925, {0x2, 0x7}}, {0x2, 0xd, {0x0, 0x7}}, {0xa, 0x7, {0x2, 0x401}}, {0x8fef, 0xb, {0x2, 0x1}}, {0x1, 0xfff1, {0x0, 0x81}}, {0x1, 0x1000, {0x1, 0x8}}, {0x806, 0xaea9, {0x3, 0x6}}, {0x0, 0xe, {0x2, 0x5}}, {0x6, 0x3, {0x1, 0x1}}, {0xbfae, 0x8, {0x0, 0x6}}, {0x7, 0x6, {0x5, 0x8}}, {0x10, 0x4, {0x3}}, {0x1, 0x6, {0x0, 0xf}}, {0x7ff, 0x504, {0x1, 0xfffffeff}}, {0x7, 0x0, {0x3, 0x8}}, {0x7fff, 0x7ff, {0x1, 0x4}}, {0x1ff, 0x3, {0x3, 0x9}}, {0x24d6, 0x7}, {0x8, 0x800, {0x3, 0x1}}, {0x7ff, 0x3, {0x3, 0x3}}, {0x6, 0x7, {0x0, 0x7}}, {0x0, 0x9, {0x3, 0x6}}, {0x0, 0xc1, {0x0, 0x9}}, {0x2, 0xec9, {0x1, 0x7}}, {0x7, 0x9, {0x0, 0x8}}, {0x0, 0x98a3, {0x0, 0x2}}, {0x0, 0x5, {0x1, 0x4}}, {0x9, 0x0, {0x2, 0x8}}, {0x3e2, 0x2b0b, {0x3, 0x9}}, {0xb2aa, 0xfe01, {0x1, 0x4}}, {0xb, 0x9, {0x2, 0x3}}, {0x4, 0x4, {0x3, 0x8}}, {0x9, 0x2, {0x0, 0x1}}, {0x7, 0x1, {0x0, 0x80000000}}]}}}, {{0x254, 0x1, {{0x2, 0x8f}, 0x0, 0x4, 0x8, 0xe5a6, 0x21, 'syz0\x00', "3691d8a4a7ebbd13381b7ff63b6fce721258125426cad66d8bbe87a526f1d774", "4f9fe2ed6818e26da9ce24ccfb6a91a8af57b536d45c0b2359b3cb562b6e336a", [{0x8, 0x2, {0x3, 0x7}}, {0x3, 0x1a53, {0x3, 0x5}}, {0xbf45, 0x4, {0x0, 0x6}}, {0x100, 0x4, {0x3, 0xffffffff}}, {0x7fff, 0x4, {0x2, 0x5}}, {0x2, 0xd2, {0x0, 0x101}}, {0xb1ab, 0x8, {0x2, 0x5}}, {0x2, 0x8000, {0x1, 0x9}}, {0x1, 0x401, {0x0, 0xff}}, {0x7, 0x7ff, {0x3}}, {0x8001, 0x833, {0x2ae5265f04087f8a, 0x10}}, {0xfffe, 0xf6, {0x2}}, {0x0, 0xfec4, {0x0, 0x3}}, {0x8, 0x2df, {0x2, 0x7}}, {0x8000, 0xd, {0x3}}, {0x6, 0x2, {0x0, 0x5}}, {0x4, 0x8001, {0x1, 0x7fff}}, {0x9, 0xfff, {0x0, 0x5}}, {0xb, 0xfffa, {0x1, 0xeb3}}, {0xfffa, 0x0, {0x0, 0x2}}, {0xffff, 0x7, {0x3, 0x6}}, {0x3, 0x6, {0x1, 0xf}}, {0x4, 0x3, {0x2, 0x9}}, {0x9, 0xfffc, {0x3, 0x74a}}, {0x5, 0x7, {0x0, 0x9}}, {0x7, 0x7, {0x2, 0xb}}, {0x6, 0x7, {0x0, 0x1}}, {0xfc00, 0x3, {0x1, 0x200}}, {0xfff8, 0x0, {0x2, 0x3b}}, {0x8, 0xf001, {0x1, 0x1}}, {0x9, 0x3, {0x0, 0xe6}}, {0x5, 0x4, {0x3, 0xfff}}, {0x6, 0x6, {0x3, 0x101}}, {0x8, 0x0, {0x3, 0x22}}, {0x4, 0x7, {0xd21961fb393ddf94, 0x3}}, {0x9, 0x8, {0x3, 0x7}}, {0x25e8, 0x80, {0x0, 0xd4}}, {0xff, 0xfff8, {0x3, 0x7}}, {0x1, 0x3, {0x0, 0x66}}, {0xa39a, 0x6000, {0x0, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x7ff}, 0xc4, 0x6, 0x0, 0x2f, 0x19b, 'syz1\x00', "1a3d52b078cea40d97583ac9388c03b7931439850ff2876077df5362950a71eb", "486862c83bd59fd8e94b645237dfb1eb21e4cf8b56fdac3ba68b385e6f7af018", [{0x8, 0xfff9, {0xd2c0256bf1bc0a41, 0x3}}, {0xeac, 0x4, {0x2, 0x9}}, {0x42, 0xff, {0x3, 0x6}}, {0x8, 0x20, {0x1, 0x1f2d6e68}}, {0x3, 0x12, {0x1}}, {0xde, 0x800, {0x2, 0xdb0}}, {0x7, 0x3, {0x2, 0x1}}, {0x6, 0x400, {0x0, 0xf5}}, {0x1, 0xfff9, {0x3, 0x2ff4}}, {0x3, 0xdc, {0x3, 0x5}}, {0x9, 0x5, {0x3, 0x1}}, {0x4, 0xfffc, {0x0, 0x40}}, {0xc, 0x101, {0x2, 0x7}}, {0xa, 0x7, {0x3, 0xfa}}, {0x8, 0xff, {0x0, 0x7}}, {0x9, 0xae0, {0x3, 0x5caf51f2}}, {0x1744, 0x6, {0x1, 0x4}}, {0x5, 0xfff, {0x3, 0x6}}, {0x6, 0x8, {0x2, 0x4}}, {0x6, 0x0, {0x3, 0x4}}, {0x2, 0x210c, {0x3, 0xe}}, {0xc, 0xac, {0x2, 0x3}}, {0x9, 0x3, {0x1, 0x5}}, {0x80, 0x9, {0x0, 0x80}}, {0x9, 0x5, {0x0, 0x9}}, {0x2, 0x9, {0x4, 0xfffffffd}}, {0x71, 0x2, {0x1, 0xc}}, {0x7fff, 0x4, {0x2, 0x6}}, {0xdf9, 0x40, {0x2, 0x9}}, {0x0, 0x3}, {0x2, 0xff, {0x3, 0x79}}, {0x5, 0x1, {0x3}}, {0xe36a, 0x401, {0x2, 0x5}}, {0x69, 0x8, {0x1, 0x1}}, {0x7f, 0xa5, {0x1, 0x357}}, {0x5, 0xfff9, {0x0, 0x1}}, {0x5, 0x7fff, {0x2, 0x100}}, {0x3, 0x5, {0x3, 0x800}}, {0xfff, 0xffff, {0x3, 0x10001}}, {0x8, 0x4, {0x1, 0x8001}}]}}}, {{0x254, 0x1, {{0x2, 0x3}, 0x3, 0xfb, 0xff, 0x1, 0x14, 'syz1\x00', "9acd86190d95e76d3f73cdceec60c5fc13c9ce46847288be146e0acabfeabd39", "8db690f7c39c2fdef3fc3f4e376f589f299c6dc5d64dc198d1552304ccbd4a53", [{0x7fff, 0x4, {0x2, 0xae4d}}, {0x5, 0xfff, {0x1, 0x80000000}}, {0x9, 0x0, {0x1, 0x6}}, {0x0, 0x3, {0x2, 0x3ff}}, {0x95b, 0x6, {0x0, 0xd4}}, {0xb9f2, 0x4, {0x3, 0x3a}}, {0x2, 0x2, {0x2, 0x7}}, {0x31df, 0x80, {0x3, 0x6}}, {0x2, 0x1, {0x0, 0x10000}}, {0x0, 0x8, {0x3}}, {0x5, 0x5, {0x3, 0x7}}, {0x80, 0x40, {0x1, 0x7}}, {0x3, 0x8, {0x0, 0x2}}, {0x4, 0xff00}, {0x2, 0x9, {0x0, 0x3d9}}, {0xae6, 0x101, {0x2, 0x3}}, {0x5, 0x811, {0x0, 0x4a76}}, {0x2, 0x0, {0x2, 0xf}}, {0xffff, 0x80, {0x2, 0x5}}, {0x9e2, 0xe, {0x3, 0x7ff}}, {0x9ef, 0x200, {0x3, 0x3}}, {0x5, 0x2, {0x1, 0x100}}, {0x1ff, 0x2, {0x0, 0x5}}, {0x0, 0x8, {0x0, 0xffff5e1c}}, {0xc0, 0x4, {0x2, 0x2}}, {0x3, 0x5, {0x0, 0xf}}, {0x5, 0xb1, {0x0, 0xfffffffa}}, {0x3, 0x4, {0x2, 0x4}}, {0x10, 0x86f3, {0x3, 0xfffffd42}}, {0x84ef, 0x53ed, {0x3, 0xb7}}, {0x610, 0x9, {0x3, 0x8080}}, {0x6d, 0xac76, {0x1, 0x6}}, {0x1, 0x3e4a, {0x0, 0x6}}, {0xf, 0xffff, {0x2, 0x6}}, {0x7, 0x40, {0x0, 0x3}}, {0xff, 0x5, {0x3}}, {0x8, 0x2, {0x1, 0x24000}}, {0x9, 0x66ef, {0x2, 0xfffffff9}}, {0x0, 0x545b, {0x3, 0x4}}, {0x2, 0x3, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0xfe, 0x1, 0x8, 0xb9a7, 0x1f, 'syz0\x00', "438b244111be667790b05d99ebf09e2914b500b11484d73021729f7b1322c68d", "3839b2b6d819a8545b6158b31687e4234cde56b2777e9ff71c79ad1b45fbee7d", [{0x35, 0x40, {0x3, 0xaa5e}}, {0xe7, 0x3, {0x0, 0x6}}, {0x40, 0x2, {0x0, 0x8}}, {0x9, 0x0, {0x0, 0x4}}, {0x800, 0x401, {0x0, 0x6}}, {0x0, 0x5, {0x0, 0xfffff801}}, {0x0, 0x4, {0x3, 0x3}}, {0x5, 0x5, {0x3, 0x6}}, {0x6, 0x1000}, {0x4, 0x9, {0x1, 0xfa7}}, {0xfbff, 0xc, {0x2, 0x6}}, {0x3, 0x1ff, {0x3, 0x6}}, {0x7, 0x245b, {0x3, 0xfff}}, {0x2, 0x7, {0x3, 0x9}}, {0x7, 0x2, {0x1, 0x6}}, {0x310, 0x6254, {0x2, 0x6}}, {0x4, 0xe7, {0x0, 0xfffffffa}}, {0xd98, 0x22, {0x3, 0x1}}, {0x3, 0x7, {0x2, 0xfffffffb}}, {0x401, 0x2, {0x2, 0x6}}, {0xc50d, 0x5, {0x2, 0x3}}, {0x0, 0x8, {0x2, 0xe53}}, {0x9, 0xe4, {0x2, 0x90}}, {0x0, 0x22c8, {0x3, 0xf65}}, {0x8, 0xfffa, {0x1, 0x9}}, {0x40, 0x2a, {0x3, 0x1}}, {0x5, 0x4, {0x0, 0x5}}, {0x2, 0x2, {0x2, 0x1}}, {0x6, 0xf2c, {0x2, 0x1}}, {0x5, 0x7, {0x1, 0xc1a}}, {0xb, 0x2, {0x1, 0xeb9}}, {0x8, 0x6431, {0x0, 0xe}}, {0x4, 0x3, {0x3, 0x400}}, {0x0, 0x5, {0x3, 0x8}}, {0x9, 0xb, {0x2, 0x5}}, {0x8, 0x7, {0x1}}, {0x6, 0xb939, {0x2, 0x617}}, {0x8, 0x1, {0x2, 0x4}}, {0x8, 0x2, {0x3, 0x2}}, {0xea, 0x8, {0x2, 0xc84b}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x4, 0x5, 0x1ff, 0xf, 0xf, 'syz1\x00', "2b6491415b6faf0282070690f7bc8bcce036ca754a8709f27bb33903b2636629", "3a29fb12fde00d158bc56bd6ec3732ac8b1dbc4ee83e2928e7316d8ea22b6f65", [{0x9e74, 0x7}, {0x400, 0x6, {0x3, 0x390000}}, {0x1, 0x5, {0x1, 0x2}}, {0x5, 0x48, {0x1, 0x8001}}, {0x10, 0x0, {0x3, 0xffff}}, {0x8000, 0xf, {0x3, 0x80}}, {0x7, 0x401, {0x1, 0x9}}, {0x1ff, 0x955, {0x2}}, {0x8, 0x4, {0x0, 0x9}}, {0xfd52, 0x8, {0x1, 0x4}}, {0x80, 0x0, {0x3, 0x10000}}, {0x2c6b, 0x4, {0x0, 0x6}}, {0x251, 0x6, {0x0, 0x3}}, {0x9, 0x7, {0x3, 0x3}}, {0x5e8, 0x5, {0x2, 0x4}}, {0xfffd, 0x0, {0x0, 0x3}}, {0x3ff, 0x5, {0x1, 0x5}}, {0x8, 0x2, {0x1, 0x1}}, {0x96, 0x3, {0x3, 0x2}}, {0x5, 0xbf81, {0x0, 0x16}}, {0xa0c9, 0xff, {0x2, 0xb}}, {0xd, 0x8, {0x3, 0x3}}, {0x2, 0x9, {0x0, 0x7f}}, {0xffff, 0x5, {0x1, 0xc}}, {0xfff9, 0xf000, {0x0, 0x1}}, {0x7, 0x3fc, {0x0, 0x8}}, {0x81, 0x32, {0x0, 0x2}}, {0x7ff, 0x7, {0x3, 0xfffffff7}}, {0x143d, 0x80, {0x2, 0x800}}, {0x2, 0x10, {0x0, 0x1}}, {0x2, 0x3ff, {0x0, 0x2}}, {0x0, 0x49f, {0x2, 0x94}}, {0x1, 0xc013, {0x1}}, {0x8001, 0xe2, {0x3, 0x8}}, {0x5, 0x7, {0x2, 0x7}}, {0x200, 0x6, {0x3, 0x6}}, {0x8001, 0x5, {0x3, 0x80000001}}, {0x0, 0xbdda, {0x0, 0x7fff}}, {0x2, 0x1, {0x2}}, {0x1, 0x3, {0x2, 0x5}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x20048091}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002a00), r0)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r13, &(0x7f0000002ac0)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x28, r14, 0x200, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x1000, 0x3}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000081)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000002b00)=0x1)

2.902498986s ago: executing program 3 (id=6288):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x2b, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c)
getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x6b}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0)

2.802342954s ago: executing program 3 (id=6289):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a14000000020a010200000000000000000000000814000000110001000000000000000000000051f739ff58606ee22b693567b0cb7353d7dce3c60f447df716bf8a93"], 0x3c}, 0x1, 0x0, 0x0, 0x4008004}, 0x4000000) (async)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) (async)
r1 = socket$igmp6(0xa, 0x3, 0x2)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'sit0\x00', @link_local}) (async)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) (async)
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48)

2.408944632s ago: executing program 3 (id=6296):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=@RTM_NEWNSID={0x2c, 0x58, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NETNSA_NSID={0x8, 0x1, 0x3}, @NETNSA_FD={0x8, 0x3, r1}, @NETNSA_NSID={0x8, 0x1, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8004)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x14, 0x14, 0x1, 0x0, 0x0, {0x28}}, 0x14}}, 0x0)
r2 = socket(0x11, 0x2, 0x0)
close(r2)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
r4 = socket(0x2, 0x80805, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x270, 0x0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1a0, 0x20a, 0x278, 0x1a0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000], [0x0, 0xffffffff], 'ip6gre0\x00', 'team_slave_0\x00', {}, {0xff}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x25af}}}, {{@ipv6={@mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xffffff00, 0xffffff00, 0xffffff00], 'veth0_macvtap\x00', 'vxcan1\x00', {}, {0xff}, 0x29, 0x0, 0x2, 0x36}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2d0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r8}, &(0x7f0000000040), &(0x7f0000000140)=r6}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r9=>0x0]}, &(0x7f0000000040)=0x8)
ioctl$BTRFS_IOC_FS_INFO(r3, 0x8400941f, &(0x7f0000000440))
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r9, 0x2}, 0xc)
r10 = socket$key(0xf, 0x3, 0x2)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00')
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x20028000)
r13 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0), r12)
sendmsg$NET_DM_CMD_STOP(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r13, 0x1, 0x0, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x9, 0x2, 0x6, 0x2, 0x0, 0x0, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

2.188846798s ago: executing program 4 (id=6300):
ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @null, @netrom={'nr', 0x0}, 0x2, 'syz0\x00', @default, 0x2, 0x3, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20)
ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)={0x2, 0x4b, "68b611a916b93896272be29324feeb9dc73262ec53c6a0aac5599e11754df637286a3d252aa6608980e33cc07dea610d7d79bcf8e82317959ae2c8b3126f56d4224ad4e0c48db510619e2a"})
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f00000001c0))
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000200)=0x9, 0x4)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={<r1=>0x0, @broadcast, @multicast1}, &(0x7f0000000340)=0xc)
sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="d74e4a41632f3fd5c7eb4887f29d8ea9a6a7348b5df489fe9063161b2752660ff49f088b9265395d3b256ee00f2566d0626af6f5df120fa693f961da1c9e4087f4efa7c69688055362d7626eb5e60870958c9cd7666230ffe89ae9b7cc09a35973cb67b6493c1225ff92b93515601a231c7da784c250cacc9423e934d92927e919659cdb30282fbecbb5cb290ce28d3ed5", 0x91, 0x80, &(0x7f0000000380)={0x11, 0x18, r1, 0x1, 0x7f, 0x6, @multicast}, 0x14)
ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000003c0)={0x0, 0x5, [0x0, 0x7ff, 0x9, 0x8, 0x3, 0x2]})
r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000440)=0x1)
r3 = socket(0x1e, 0x1, 0x7)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000480)={0x5, 0xfffb, 0x3, 0x6, 0x6, 0x6, 0xe}, 0xc)
ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f00000004c0)=@generic={0x3, 0x4, 0x101})
ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f0000000500))
setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000540)=0x4, 0x4)
ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000580)='batadv0\x00')
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
sendmsg$sock(r4, &(0x7f00000007c0)={&(0x7f00000005c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x2, {0xa, 0x4e24, 0x3d, @remote, 0x1}}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000640)="04a161d22356d0683edea01768db31ac2d1aa123aee36ba91b91c773210369f247937d3fb0bf83347f5dcf55d7059460579a20e7af31207ebd63a42b7a3336343caf6b17e9d9f84f8496e33f0fe543a8b36e0bbd4f2e16a524ec9dd9f9ad47cacbc5a234797c50bfaa0b5f800d147678a2abdb479763c23beee9013b9302815463b0e4d1102ee179db84c3e329cf1068028c44e827ddc3d26061b1618bdd64b41b410974dc2d19", 0xa7}], 0x1, &(0x7f0000000740)=[@mark={{0x14, 0x1, 0x24, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x48}, 0x480)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r3)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x40)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000000980)={{r2}, 0x5, &(0x7f0000000940)=[0x14000000000, 0x3, 0xe733, 0x2, 0x8a9], 0x8, 0xc, 0x5})
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IP_VS_SO_GET_TIMEOUT(r6, 0x0, 0x486, &(0x7f0000000a00), &(0x7f0000000a40)=0xc)
bind$can_raw(r3, &(0x7f0000000a80)={0x1d, r1}, 0x10)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000b00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000ac0), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@local, @local, @private=0xa010102, 0x8, 0x1}}}, {{@arp={@remote, @loopback, 0xff, 0xff000000, 0xc, 0x4, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, {[0x0, 0x0, 0xff, 0xff]}}, 0x1, 0x1000, 0x4, 0x2, 0x7f, 0x10, 'veth0_macvtap\x00', 'ip6erspan0\x00', {0xff}, {}, 0x0, 0x16}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="dc675d3ae0a4", @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0x2, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f80), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x34, r8, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0xf, 0x0, @l2={'eth', 0x3a, 'caif0\x00'}}}}, ["", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4048041}, 0x40010)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4840}, 0x44)

2.187962771s ago: executing program 3 (id=6301):
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async)
getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@delqdisc={0x54, 0x25, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0xa, 0x3}, {0x0, 0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x1}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) (async)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async)
r5 = accept4(r4, 0x0, 0x0, 0x80800)
sendmmsg$alg(r5, &(0x7f0000007f40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[@ANYBLOB="18000000000000001701000003000000000000000000000088000000000000001701000002000000730020"], 0x118, 0x40880}], 0x1, 0x40c5) (async)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f9, 0xd6, 0x2, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x5, 0x9, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x2, 0x1, 0x4, 0x7ff, 0x100008, 0x7, 0x7fffffff, 0x400, 0x71c5, 0xfffffa72, 0x3, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xb, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x6d, 0x2, 0xfffffffa, 0x1, 0x10001, 0x8000, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x457, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0xd, 0xa3, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x40004, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x6, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xfbffffff, 0x6, 0x3ff, 0x3, 0x0, 0x0, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0xc2, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x8001, 0x0, 0x200, 0x10000009, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x1003, 0x8, 0x8, 0x53, 0x8, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xffff8983, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x2, 0xa, 0x2, 0x7b, 0xfffffeff, 0x6, 0x7, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f0000000440)={"bafb600ee94dfe596ad57a11f9d479fe", 0x0, <r9=>0x0, {0x8000000000000000, 0x6}, {0xfffffffffffffeff, 0x6}, 0x38cf, [0x3, 0x8, 0x1, 0xe, 0x6, 0x5, 0x4, 0x3, 0x7, 0x7, 0x9b2d, 0x3, 0x800, 0x2d, 0x5, 0x5]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r7, 0x50009417, &(0x7f00000023c0)={{r0}, r9, 0x10, @inherit={0x50, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000000000000001000000000000003894000000000000090000000000000000000000000000000000008000000000060000000000000001000023000000000300000000000000ff07000000000000"]}, @name="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"}) (async)
r10 = socket$kcm(0x11, 0x3, 0x0) (async)
r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r11)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r10, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r12}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5)

1.965133613s ago: executing program 4 (id=6302):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000211000118004000100"], 0xd4}}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r0], 0x20}}, 0x0)
accept4(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @broadcast}}, &(0x7f0000000000)=0x80, 0x80000)

1.880098207s ago: executing program 5 (id=6304):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000740)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x11, @loopback, 0x8000002}, 0x1c, &(0x7f0000001b40)=[{&(0x7f0000001200)="01", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001400)="cf", 0x1}], 0x1}}], 0x1, 0x24000005)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty}}}, 0x84)

1.757602562s ago: executing program 5 (id=6306):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x10, 0x9}}}, 0x24}}, 0x0) (async)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newneigh={0x5c, 0x1c, 0x400, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x0, r2, 0x40, 0x64, 0x8}, [@NDA_VLAN={0x6, 0x5, 0x2}, @NDA_FDB_EXT_ATTRS={0x20, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9b}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x7}]}, @NDA_FLAGS_EXT={0x8}, @NDA_VNI={0x8, 0x7, 0x1ff}, @NDA_PROTOCOL={0x5, 0xc, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100001042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000014310000300012800bd4bbcfb4428a3851000100697036746e6c00002000028014000200fc020000000000000000000000000001"], 0x50}}, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="8750a754ac0000007c0012800b000100697036746e6c00106c000280140002000000000000000000000000000000000114000200fe8000000000000000000000000000aa14000300fe8000000000000000000000000000bb08bc550973263549", @ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090)

1.756334194s ago: executing program 2 (id=6307):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
r2 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5)
connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0)
recvfrom$l2tp(r1, &(0x7f00000007c0)=""/110, 0x6e, 0x0, 0x0, 0x0)
bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10)
recvmmsg(r0, &(0x7f0000002fc0)=[{{&(0x7f0000000140)=@isdn, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000240)=""/145, 0x91}, {&(0x7f00000001c0)}, {&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/52, 0x34}, {&(0x7f00000003c0)=""/189, 0xbd}, {&(0x7f0000000480)}, {&(0x7f00000004c0)=""/250, 0xfa}], 0x7, &(0x7f0000000640)=""/148, 0x94}, 0x3}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000700)=""/33, 0x21}, {&(0x7f0000000740)=""/183, 0xb7}, {&(0x7f0000000800)=""/161, 0xa1}, {&(0x7f00000008c0)=""/212, 0xd4}], 0x4, &(0x7f0000000a00)=""/183, 0xb7}, 0x1}, {{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000ac0)=""/187, 0xbb}, {&(0x7f0000000b80)=""/203, 0xcb}, {&(0x7f0000000c80)=""/41, 0x29}, {&(0x7f0000000cc0)=""/254, 0xfe}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/76, 0x4c}], 0x7}}, {{0x0, 0x0, &(0x7f0000002f80)=[{&(0x7f0000002ec0)=""/171, 0xab}], 0x1}, 0x800}], 0x4, 0x1, &(0x7f00000030c0)={0x0, 0x989680})
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0)

1.753108534s ago: executing program 4 (id=6308):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$kcm(0x10, 0x2, 0x0) (async)
r0 = socket$kcm(0x10, 0x2, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x25e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x8, 'netdevsim0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6_vti0\x00', @random="df0befd05447", [0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:udev_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000003}]}, 0x2d6) (async)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x25e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x8, 'netdevsim0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6_vti0\x00', @random="df0befd05447", [0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:udev_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000003}]}, 0x2d6)
socket(0x10, 0x3, 0x0) (async)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/209, 0xd4}], 0x1}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8401000010"], 0x184}}, 0x0) (async)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8401000010"], 0x184}}, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x5, 0x0) (async)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) (async)
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ipvlan1\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884)

1.554274169s ago: executing program 5 (id=6310):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3}, 0xc) (async)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x18, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) (async)

1.487726507s ago: executing program 2 (id=6311):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@ipv4_newroute={0x42c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0x408, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x404, 0x1, {{}, [@dev, @loopback, @private0, @ipv4={'\x00', '\xff\xff', @private}, @local, @mcast2, @empty, @mcast2, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, @mcast1, @local, @remote, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @empty, @mcast2, @mcast2, @private0, @private2, @mcast2, @dev, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @loopback, @local, @loopback, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast1, @empty, @local, @private1, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @ipv4, @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev]}}}]}, 0x42c}}, 0x0)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700))
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r2, 0x405, 0x70bd2b, 0x25dfdc02}, 0xffffffffffffffaa}, 0x1, 0x0, 0x0, 0x4000400}, 0x20004084)

1.309747386s ago: executing program 5 (id=6313):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000012c0)=ANY=[@ANYBLOB="063e467e00205792a82d791cb2cdc1a0b6a780b16466ba0ad153a57da901b28b9891803d39cca7f68e69f4268148c4a1292bce12d32ee415c359aaa2589ec1171179a90aeed29094a7eefe7f39fed46d2f233aa0e4eb"], 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x2, [0x5, 0x6]}, &(0x7f0000000040)=0x8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1900000004000000080000000500000000000000", @ANYRES32, @ANYBLOB="810000a326698c00", @ANYRES8=r2, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = socket$kcm(0x2, 0x922000000001, 0x106)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0)
r5 = socket$kcm(0x2, 0x200000000000001, 0x106)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001400)={r6, r7, 0x5, 0x0, @val=@uprobe_multi={&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)=[0x8000], &(0x7f00000013c0)=[0xed3e, 0x2, 0x2, 0x1], 0xb80000000, 0x1, 0x1}}, 0x40)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r8, 0x4)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r6, 0x4, r6}, 0x6)
r9 = socket(0x10, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_WOL_SET(r9, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r10, 0x6, 0x19, &(0x7f0000000100)=0x100000001, 0x4)
connect$unix(r10, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2400c8c1)
setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f00000002c0)=r4, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0xac}, 0x10}, 0x94)
r11 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r11, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8)

1.210443874s ago: executing program 2 (id=6314):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(r1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000100000008000100", @ANYRES16=r2], 0x1c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x79}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x90)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_pressure(r3, &(0x7f0000000140)='io.pressure\x00', 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x31e, 0x3, 0xfffffffffffffff8, 0x0, 0x80, 0x1, 0xffffffff}, 0x0, &(0x7f00000000c0)={0x3ff, 0xffffffffffffffff, 0x8, 0x9, 0x0, 0x201, 0x7fffffff}, 0x0, 0x0)

1.170233439s ago: executing program 1 (id=6315):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x140, 0x1170, 0x1398, 0x0, 0x1170, 0x2c8, 0x1398, 0x1398, 0x2c8, 0x1398, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xffffffff], [0x0, 0xff000000], 'veth1_to_bridge\x00', 'veth0_to_hsr\x00', {}, {0xff}, 0x2b, 0x3b, 0x3}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@hbh={{0x48}, {0x6, 0x5, 0x1, [0x8, 0x2, 0x1, 0x3, 0x9, 0x1, 0x8, 0x100, 0x273, 0x9, 0x6, 0x6, 0x5, 0x6, 0x800, 0xffff], 0x9}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0xfffe, 0x10, 0x2}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh1={{0x90}, {0x1, 0x2, 0x0, 0x0, 0x0, @loopback, @private0, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], [0xffffff, 0x0, 0xff000000, 0xffffffff], 0x6d3784e3f74c6113, 0x803}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
r10 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
syz_emit_ethernet(0xcf, &(0x7f0000000200)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x99, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "0000000500000000260004"}, {0x0, 0x5, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f7564"}]}}}}}}, 0x0)
r11 = socket$kcm(0x11, 0x3, 0x0)
pwrite64(r10, &(0x7f0000000140)="1abb75389c1754d5ff6df5a05bab84a834d92301ec148a70ddc45ad45cf0d0bc21a20711086e13cdc3d49e3766118ad7cba38cf9ba1f5c88c4baeae6fdc550c68b0396cb8f73068255cab66c9548bd3cc17c413018d9463311b35444b1ea57a4a8d3a771c9870c71062ae9b7a815a2f198e0861db4b34ee260524de8", 0x7c, 0x5)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r12=>0x0})
sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4)

1.102718555s ago: executing program 2 (id=6316):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_MASQ_REG_PROTO_MAX={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0)
sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)={0xb4, 0xa, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_DATA={0x80, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x401}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}, @IPSET_ATTR_IFACE={0x14, 0x17, 'wg1\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8000}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x800c)
r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x80800)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x8}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x7}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x3c}, 0x1, 0x0, 0x0, 0x819}, 0xc8c0)
getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, &(0x7f0000000740))
getsockopt$packet_buf(r1, 0x107, 0x2, &(0x7f00000000c0)=""/141, &(0x7f0000000180)=0x8d)
syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x20, 0x2, 0x0, 0xff, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x0, {[@exp_smc]}}}}}}}, 0x0)

1.102024749s ago: executing program 4 (id=6317):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0)
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0xf}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) (async)
socket(0x400000000010, 0x3, 0x0) (async)
socket$unix(0x1, 0x2, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001300)=@newtfilter={0xa0, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r4, {0x5, 0xf}, {}, {0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x74, 0x2, [@TCA_U32_SEL={0x64, 0x5, {0xe, 0x9, 0x5, 0x5, 0x7de, 0x74, 0xe, 0xdc, [{0x80000001, 0x2, 0x9, 0x1ff}, {0x3ee, 0x1, 0x4}, {0x9, 0xf12, 0x7f, 0xa}, {0x7ff, 0x2, 0x1, 0x8000}, {0x3, 0x1, 0x3, 0x3e}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffe0}}, @TCA_U32_POLICE={0x4}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) (async)

1.02091167s ago: executing program 5 (id=6318):
r0 = socket$alg(0x26, 0x5, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
tee(r1, r2, 0x81, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x20008000)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r5 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r5, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000001d80)=""/51, 0x33}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f00000030c0)=""/66, 0x42}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x5}, 0x1}, {{0x0, 0x0, &(0x7f0000005480)=[{&(0x7f0000004480)=""/4096, 0x1000}], 0x1}, 0xc82}], 0x2, 0x40000001, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0)

965.624773ms ago: executing program 2 (id=6319):
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4)
r1 = socket(0x10, 0x3, 0x0)
getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x303, &(0x7f0000000080)=0x2)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000020000000000000018e8ffff1f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c000000020000000000000018e8ffff1f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
socket$igmp6(0xa, 0x3, 0x2) (async)
r3 = socket$igmp6(0xa, 0x3, 0x2)
r4 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) (async)
write$tun(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
write(r1, &(0x7f0000000040)="1300000032001f00030300f9002304000a04d6", 0x13)
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x8, 0x8, 0x4, 0x7f, 0xc}, &(0x7f00000002c0)=0x98) (async)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000001c0)={<r5=>0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x8, 0x8, 0x4, 0x7f, 0xc}, &(0x7f00000002c0)=0x98)
setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000340)={r5, @in={{0x2, 0x4, @private=0xa010102}}, 0x4, 0x2}, 0x90)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x8)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001180)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x4, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffd, 0x20, 0xb, 0xff, 0x6, 0xca11, 0x6}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x200400d0}, 0x24008004)
r9 = accept$ax25(r1, &(0x7f00000000c0)={{}, [@netrom, @remote, @remote, @default, @netrom, @rose, @null, @null]}, &(0x7f0000000140)=0x48)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000280)=@ethtool_ts_info}) (async)
ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f0000000280)=@ethtool_ts_info})

726.568244ms ago: executing program 1 (id=6320):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000080)=0x1ff, 0x4) (async)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) (async)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001840)=@newtaction={0xea8, 0x30, 0x25, 0x0, 0x0, {}, [{0xe94, 0x1, [@m_pedit={0xe90, 0x1, 0x0, 0x0, {{0xa}, {0xe64, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x3}, [{}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0xfffffffc, 0x0, 0x0, 0x9}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3cf}, {0x0, 0x7}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3}, {}, {}, {}, {0x0, 0x0, 0x4000}, {}, {0xfffffffd}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0x200}, {}, {0x8, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x7f, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0xfffffffd}, {0x0, 0xffffff01}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0xdf}, {0x0, 0xfffffff2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x2, 0xf}, {}, {}, {}, {0x0, 0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x100}, {}, {0xfffffffc, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2, 0x0, 0x0, 0x4000000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x40, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xea8}}, 0x0) (async)

715.216636ms ago: executing program 4 (id=6321):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$PPPIOCATTACH(r0, 0x4004743d, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801c}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'bond0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000850)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001})
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0x14, 0x8, {0x8}}, @RTA_FLOW={0x4, 0x10}]}, 0x30}}, 0x0)

579.211067ms ago: executing program 2 (id=6322):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2d, &(0x7f0000000000)=0x80000001, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r1, 0x107, 0x14, 0x0, &(0x7f0000000500))
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000001440)={0xffffffffffffffff, 0x18, [0x3, 0x400, 0x6, 0x2], &(0x7f0000001400)=[0x0, 0x0, 0x0]})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="210329bd7000a7dbdf2501"], 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4)
recvmmsg(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/115, 0x73}, {&(0x7f0000000400)=""/4083, 0xff3}], 0x2}, 0x8}], 0x4, 0x180, 0x0)
r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000ffdbdf2505000000060028000300000008003c000600000008002c0007000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc041}, 0x48010)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000010a000000000010000000000000", @ANYRES32=0x0, @ANYBLOB="29b000004a04000008001b000000000014001680100001800c00090009000080"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x40)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x24044832}, 0xa840)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x18}]}]}, 0x30}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001580)={'syz_tun\x00', <r10=>0x0})
r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r12 = socket(0x10, 0x3, 0x0)
recvfrom$packet(r12, &(0x7f0000000080)=""/148, 0x94, 0x2, &(0x7f0000000240)={0x11, 0x9, r10, 0x1, 0x0, 0x6, @multicast}, 0x14)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r14 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r15 = openat$cgroup(0xffffffffffffffff, &(0x7f00000015c0)='syz1\x00', 0x200002, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r14, r10, 0x25, 0x0, @val=@iter={&(0x7f0000001600)=@cgroup={0x4, r15, 0xfffffffffffffffa}, 0x10}}, 0x20)
r16 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r16, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0x9, 0x8, 0x6, 0x0, 0x70bd2d, 0x5, [@sadb_lifetime={0x4, 0x3, 0x80, 0x7, 0x8, 0x6ebb}]}, 0x30}}, 0x4040800)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f00000001c0)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', r10, 0x7800, 0x700, 0x7, 0xf63, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x64, 0x0, 0xc4, 0x0, 0x0, @remote, @remote, {[@lsrr={0x83, 0xf, 0xdc, [@multicast1, @rand_addr=0x64010102, @remote]}]}}}}})

510.660997ms ago: executing program 1 (id=6323):
syz_emit_ethernet(0xca, &(0x7f0000000900)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @dest_unreach={0xc, 0x0, 0x0, 0x0, 0xfc, 0x0, {0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @local, {[@end, @generic={0x0, 0xd, "ee0dd9de36ed4bcc5b4e23"}, @timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@private}]}, @ssrr={0x89, 0xf, 0x0, [@multicast1, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {}, {@local}, {@loopback}, {@private}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@broadcast}, {@broadcast}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) (async)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {}, [@CTA_ZONE={0x6}]}, 0x1c}}, 0x0)
setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="020000000000000002000000e00000010000000000000000000000000000008000"/144], 0x90) (async)
r2 = socket(0x2a, 0x2, 0x0)
r3 = socket$isdn(0x22, 0x2, 0x21)
close(r3) (async)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async)
getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x200000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) (async)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000180)="0b036814e0ff64000200475400f6a13bb1000000080086dd4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r8}, 0x14)
r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r2)
sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="4802000048808aed9b22f9cc1077", @ANYRES16=r9, @ANYBLOB="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"], 0x248}, 0x1, 0x0, 0x0, 0x4}, 0x1)
r10 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) (async)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0700000000000000050005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e"], 0x44}}, 0x0) (async)
r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000060000000bf0900000000000055090100000000009500000000000000bf91000000000000b5020000000000008500000000000000b70000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

465.572621ms ago: executing program 4 (id=6324):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r2=>0x0}) (async)
setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000280)=0x1, 0x4) (async, rerun: 32)
sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd2b, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}}, 0x0) (rerun: 32)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) (async, rerun: 32)
bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (rerun: 32)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x1, 0x8}, {0xfff1, 0xa}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2400c840}, 0x4000850) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0}) (async)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$MRT_DEL_VIF(r7, 0x0, 0x1a, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x90, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3b, 0xe, {{{}, {}, @broadcast, @broadcast}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x106}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0xf, 0xa1, 0x4}}, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xb2, 0x60}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffe9f}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async)
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x14}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3f7, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x44, 0x10, &(0x7f0000000040)}, 0x48)

405.144251ms ago: executing program 1 (id=6325):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001980"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040))
bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r1, &(0x7f0000000000)="2e000300010000", 0x7)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffdb7}, 0x48)

66.685592ms ago: executing program 1 (id=6326):
sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="38000000031401003b8a7000fcdbdf250900020073797a32000000000800410073707700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x850)
socket$nl_audit(0x10, 0x3, 0x9) (async)
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_TRIM(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f6, 0x8, 0x70bd27, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x814}, 0x20000001)

36.496454ms ago: executing program 1 (id=6327):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919bcfc44a90ffd680200000091f842a91c977f6075d07e39e669b0713af0498a99bf5261cb3269d499a5202d7a08b33ade7b38829b9bd39619688d5e9af22170ef83e5b92cbb32b655c45de1c154aad81bf64351668a3f76d5afa958aff76249e0ffdf8e45155536a1a44bfcbfbfd232af000052f9002a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0)
close(r4)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYBLOB="00000100"])
sendto$packet(r7, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x11, 0xc, r6, 0x1, 0xd8, 0x6, @link_local}, 0x14)
shutdown(r2, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x1e, 0x0, 0x80000000, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], <r9=>0x0}, 0x40)
r10 = socket$netlink(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r11=>0x0})
sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000000d00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x58, 0x1409, 0x10, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xde38}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000801}, 0x10000000)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x300, {0x7, 0x0, 0x0, r11, 0x1, 0x8012}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x6, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x0, 0xfffffff9}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x2e, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @alu={0x4, 0x0, 0x9, 0x0, 0x5, 0x20, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0xf5, &(0x7f0000000580)=""/245, 0x40f00, 0x50, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x9, 0x9, 0x7}, 0x10, 0x0, r1, 0x1, &(0x7f0000000700)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000740)=[{0x1, 0x1, 0xd, 0x5}], 0x10, 0x8}, 0x94)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex=r11, r1, 0x21, 0xc, 0x0, @void, @value=r12, @void, @void, r9}, 0x20)
setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r8, 0x4)
getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, 0x0, 0x0)

0s ago: executing program 5 (id=6328):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0)
write$cgroup_int(r0, &(0x7f0000000040)=0x1, 0x12)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@empty, @rand_addr=0x64010100, @empty}, 0xc) (async)
setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@empty, @rand_addr=0x64010100, @empty}, 0xc)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x1, [0x15f]}, &(0x7f0000000100)=0x6)
getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000140)={<r1=>0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x2, 0x1}, &(0x7f0000000200)=0x90)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3ff}}}, 0x84) (async)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x3ff}}}, 0x84)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x10001, 0x3c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x8d0) (async)
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x10001, 0x3c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x8d0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x52, 0x52, 0x3, [@datasec={0x8, 0x0, 0x0, 0xf, 0x2, [], "0f53"}, @fwd={0xd}, @float={0xf, 0x0, 0x0, 0x10, 0x2}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @const={0x8, 0x0, 0x0, 0xa, 0x2}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x9}]}]}, {0x0, [0x2e]}}, &(0x7f0000000500)=""/68, 0x6f, 0x44, 0x1, 0x7}, 0x28) (async)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x52, 0x52, 0x3, [@datasec={0x8, 0x0, 0x0, 0xf, 0x2, [], "0f53"}, @fwd={0xd}, @float={0xf, 0x0, 0x0, 0x10, 0x2}, @const={0x4, 0x0, 0x0, 0xa, 0x1}, @const={0x8, 0x0, 0x0, 0xa, 0x2}, @enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x5, 0x9}]}]}, {0x0, [0x2e]}}, &(0x7f0000000500)=""/68, 0x6f, 0x44, 0x1, 0x7}, 0x28)
accept4$llc(r0, &(0x7f00000005c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000600)=0x10, 0x800)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) (async)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0)
getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000640)={@initdev, @remote, @dev}, &(0x7f0000000680)=0xc)
writev(r2, &(0x7f00000008c0)=[{&(0x7f00000006c0)="657814948fbb19f06608f6cdc59504ba8a4758b158a4b65673d7685dfe8ad25a3fea47563574631dbc1dc6ca2fc44652814bb171b5764d0e5a02906b6cef444825a28703ac57daaacebcbca926f943d38f9042f92f5dd9fb19f713e7c67c4605e06116ae9237551d49c74d56c54787e1", 0x70}, {&(0x7f0000000740)="c159308f728c7c272258da9c90f6ed478057dba7badd934b0a1de39f6acfe9312b546547c27202c309460127913d3c120fe6ebf3d331621a57438860ea0fd990a3281f76201c6e901551c7fbb6cf2868e7b1b854ec0308013e8c9b55166501e6e7f432ff6a2e2c07479c3c4df7b98869eeb1bc90129cdae1487d49885516e6652ee3e052ee8caf23131e8be3cb9ad8ee4b7d3fa6aa212a5dccf963e96d3be18b96ec81e9cca37dca6fd78a", 0xab}, {&(0x7f0000000800)="68d2d81086489ec9d9f58ef69139a2d6feae2e4bcd5dd360649d0bc50745803e7562896af139c5c19a0861709a452bbfc9e63d1a7af50e5c56f64995c3f4de8c89f28f92d4947e132c46ebab983c57c19495284a8f79f50f666ed449eabcf29ccc4f1c83135af7d9ae2fa061986e1a37c8e566f28a864399334995e28ed7167a57d8b78f8f3342c3fb7f066a0ce1af9014108c65eae603ba458474ecb891bf48335d", 0xa2}], 0x3) (async)
writev(r2, &(0x7f00000008c0)=[{&(0x7f00000006c0)="657814948fbb19f06608f6cdc59504ba8a4758b158a4b65673d7685dfe8ad25a3fea47563574631dbc1dc6ca2fc44652814bb171b5764d0e5a02906b6cef444825a28703ac57daaacebcbca926f943d38f9042f92f5dd9fb19f713e7c67c4605e06116ae9237551d49c74d56c54787e1", 0x70}, {&(0x7f0000000740)="c159308f728c7c272258da9c90f6ed478057dba7badd934b0a1de39f6acfe9312b546547c27202c309460127913d3c120fe6ebf3d331621a57438860ea0fd990a3281f76201c6e901551c7fbb6cf2868e7b1b854ec0308013e8c9b55166501e6e7f432ff6a2e2c07479c3c4df7b98869eeb1bc90129cdae1487d49885516e6652ee3e052ee8caf23131e8be3cb9ad8ee4b7d3fa6aa212a5dccf963e96d3be18b96ec81e9cca37dca6fd78a", 0xab}, {&(0x7f0000000800)="68d2d81086489ec9d9f58ef69139a2d6feae2e4bcd5dd360649d0bc50745803e7562896af139c5c19a0861709a452bbfc9e63d1a7af50e5c56f64995c3f4de8c89f28f92d4947e132c46ebab983c57c19495284a8f79f50f666ed449eabcf29ccc4f1c83135af7d9ae2fa061986e1a37c8e566f28a864399334995e28ed7167a57d8b78f8f3342c3fb7f066a0ce1af9014108c65eae603ba458474ecb891bf48335d", 0xa2}], 0x3)
ioctl$int_in(r2, 0x5421, &(0x7f0000000900)=0x1f5)
accept4(r0, &(0x7f0000000940)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000009c0)=0x80, 0x80800) (async)
r3 = accept4(r0, &(0x7f0000000940)=@pppoe={0x18, 0x0, {0x0, @local}}, &(0x7f00000009c0)=0x80, 0x80800)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x54, r4, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x200080c1)
bind$bt_hci(r0, &(0x7f0000000b80)={0x1f, 0x2, 0x3}, 0x6) (async)
bind$bt_hci(r0, &(0x7f0000000b80)={0x1f, 0x2, 0x3}, 0x6)
r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$SIOCNRDECOBS(r5, 0x89e2)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c00), r0)
sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x1c, r6, 0x400, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4881}, 0x0)
sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7309}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000e00)={0x3, 0x6, 0x1, 0x2, 0x10, 0xd0, 0x1, 0xb4, 0x10, 0x80, 0x4, 0x9, 0x8, 0xe}, 0xe)
sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xc0, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x38, r8, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x2004c840)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001100)) (async)
ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001100))
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001240)={&(0x7f0000001180)={0xa8, r4, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x20}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xcc}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1b}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a1}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8001}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x40800}, 0x4084)

kernel console output (not intermixed with test programs):

 0] type 1 family 0 port 8472 - 0
[  766.345260][T24171] netlink: 'syz.4.4722': attribute type 39 has an invalid length.
[  766.909562][T24204] __nla_validate_parse: 8 callbacks suppressed
[  766.909584][T24204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4728'.
[  766.979823][T24204] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  767.043201][T24204] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  767.062435][T24204] gretap1: entered promiscuous mode
[  767.079477][T24204] gretap1: entered allmulticast mode
[  767.259228][T24226] netlink: 'syz.4.4735': attribute type 39 has an invalid length.
[  767.403338][T24231] Cannot find add_set index 2 as target
[  767.426890][T24231] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4736'.
[  767.529600][T24235] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4737'.
[  767.544714][T24235] block nbd3: Unsupported socket: should be TCP or UNIX.
[  767.624225][T24240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4737'.
[  768.282596][T24270] netlink: 'syz.5.4746': attribute type 39 has an invalid length.
[  768.609467][T24291] netem: incorrect gi model size
[  768.615135][T24291] netem: change failed
[  769.041704][   T52] Bluetooth: hci2: command 0x0405 tx timeout
[  769.979720][T24315] pim6reg: entered allmulticast mode
[  769.985800][T24315] pim6reg: left allmulticast mode
[  770.303042][T24326] netlink: 'syz.5.4761': attribute type 6 has an invalid length.
[  770.312738][T24326] netlink: 'syz.5.4761': attribute type 6 has an invalid length.
[  771.118143][T24263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  771.647666][T24353] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4768'.
[  771.730891][T24353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4768'.
[  771.798717][T24353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  771.923490][T24353] syzkaller0: entered promiscuous mode
[  771.939822][T24353] syzkaller0: entered allmulticast mode
[  772.001959][T24371] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1500) !
[  772.478334][T24405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4779'.
[  772.568407][T24412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4780'.
[  774.218599][T24353] tipc: Resetting bearer <eth:syzkaller0>
[  774.226789][T24352] tipc: Resetting bearer <eth:syzkaller0>
[  774.273166][T24352] tipc: Disabling bearer <eth:syzkaller0>
[  774.290754][T24421] netlink: 'syz.5.4783': attribute type 1 has an invalid length.
[  774.299203][T24421] netlink: 'syz.5.4783': attribute type 2 has an invalid length.
[  774.307547][T24421] netlink: 'syz.5.4783': attribute type 1 has an invalid length.
[  774.316412][T24421] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4783'.
[  774.545104][T24426] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4786'.
[  774.578270][T24426] ip6gre2: entered promiscuous mode
[  774.611863][T24426] ip6gre2: entered allmulticast mode
[  774.645844][T24425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  774.719694][T24437] netlink: 'syz.4.4788': attribute type 39 has an invalid length.
[  774.982845][T24446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4791'.
[  775.290561][T24461] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2
[  775.313583][T24461] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0
[  775.689376][T24482] netlink: 'syz.5.4800': attribute type 13 has an invalid length.
[  775.723639][T24491] netlink: 940 bytes leftover after parsing attributes in process `syz.2.4802'.
[  775.805089][T24482] lec:lec_start_xmit: lec0:No lecd attached
[  776.041575][T24498] macvlan0: Caught tx_queue_len zero misconfig
[  776.535558][T24518] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4811'.
[  776.578102][T24511] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  776.766550][T24511] syzkaller0: entered promiscuous mode
[  776.793776][T24511] syzkaller0: entered allmulticast mode
[  776.799855][T24511] tipc: Resetting bearer <eth:syzkaller0>
[  776.876228][T24528] vlan2: entered allmulticast mode
[  776.881608][T24528] hsr_slave_1: entered allmulticast mode
[  776.943960][T24510] tipc: Resetting bearer <eth:syzkaller0>
[  777.342438][T24554] netlink: 'syz.3.4817': attribute type 1 has an invalid length.
[  779.392594][T24510] tipc: Disabling bearer <eth:syzkaller0>
[  779.426162][T24539] syzkaller0: entered promiscuous mode
[  779.435921][T24539] syzkaller0: entered allmulticast mode
[  779.542073][T24551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4812'.
[  779.569584][T24551] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4812'.
[  779.580787][T24545] syzkaller1: entered promiscuous mode
[  779.589396][T24545] syzkaller1: entered allmulticast mode
[  779.616431][T24554] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR
[  779.622642][T24564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4819'.
[  779.746902][T24573] netlink: 'syz.3.4821': attribute type 10 has an invalid length.
[  779.797035][T24573] bridge_slave_1: left allmulticast mode
[  779.820088][T24573] bridge_slave_1: left promiscuous mode
[  779.826119][T24573] bridge0: port 2(bridge_slave_1) entered disabled state
[  779.846481][T24573] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  780.262655][T24591] netlink: 'syz.5.4827': attribute type 2 has an invalid length.
[  780.291946][T24591] netlink: 'syz.5.4827': attribute type 8 has an invalid length.
[  780.299821][T24591] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4827'.
[  780.313780][T24592] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  780.578759][T24607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4831'.
[  780.996536][T24634] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.4839'.
[  781.276521][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5460 ms
[  781.284655][    C0] lec:lec_tx_timeout: lec0
[  781.290063][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  781.564049][T24657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4845'.
[  781.599294][T24657] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4845'.
[  781.601516][T24652] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  781.653411][T24664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  781.721925][T24657] xt_CT: No such helper "syz1"
[  781.754543][T24667] xt_ipcomp: unknown flags 1D
[  781.794080][T24672] unsupported nla_type 33542
[  781.945613][T24674] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048)
[  781.981633][T24678] syzkaller1: entered promiscuous mode
[  782.002073][T24678] syzkaller1: entered allmulticast mode
[  782.012631][T24678] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 1647
[  782.275341][T24696] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4857'.
[  782.596903][T24720] openvswitch: netlink: Missing key (keys=40, expected=100)
[  783.107442][T24756] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  783.756775][T24783] sctp: [Deprecated]: syz.1.4876 (pid 24783) Use of struct sctp_assoc_value in delayed_ack socket option.
[  783.756775][T24783] Use struct sctp_sack_info instead
[  783.934596][T24787] syzkaller0: entered promiscuous mode
[  783.940122][T24787] syzkaller0: entered allmulticast mode
[  784.324655][T24814] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4884'.
[  784.556068][T24830] netlink: 'syz.2.4889': attribute type 1 has an invalid length.
[  784.587347][T24830] netlink: 'syz.2.4889': attribute type 4 has an invalid length.
[  784.628661][T24830] __nla_validate_parse: 2 callbacks suppressed
[  784.628683][T24830] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4889'.
[  784.790364][T12247] IPVS: starting estimator thread 0...
[  784.891209][T24845] IPVS: using max 30 ests per chain, 72000 per kthread
[  785.040117][T24858] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4896'.
[  785.097032][T24860] bond5: entered promiscuous mode
[  785.104792][T24860] bond5: entered allmulticast mode
[  785.110730][T24860] 8021q: adding VLAN 0 to HW filter on device bond5
[  785.168951][T24860] bond6: entered promiscuous mode
[  785.174161][T24860] bond6: entered allmulticast mode
[  785.180525][T24860] 8021q: adding VLAN 0 to HW filter on device bond6
[  785.226587][T24860] bond7: entered promiscuous mode
[  785.233695][T24860] bond7: entered allmulticast mode
[  785.239592][T24860] 8021q: adding VLAN 0 to HW filter on device bond7
[  785.293112][T24860] bond8: entered promiscuous mode
[  785.299033][T24860] bond8: entered allmulticast mode
[  785.305437][T24860] 8021q: adding VLAN 0 to HW filter on device bond8
[  785.313043][T24871] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[  785.356612][T24860] bond9: entered promiscuous mode
[  785.379164][T24860] bond9: entered allmulticast mode
[  785.401919][T24860] 8021q: adding VLAN 0 to HW filter on device bond9
[  785.574020][T24860] bond10: entered promiscuous mode
[  785.580599][T24860] bond10: entered allmulticast mode
[  785.593479][T24860] 8021q: adding VLAN 0 to HW filter on device bond10
[  785.607297][T24877] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  785.665867][T24860] bond11: entered promiscuous mode
[  785.671630][T24860] bond11: entered allmulticast mode
[  785.677433][T24860] 8021q: adding VLAN 0 to HW filter on device bond11
[  785.716516][T24860] bond12: entered promiscuous mode
[  785.722412][T24860] bond12: entered allmulticast mode
[  785.728255][T24860] 8021q: adding VLAN 0 to HW filter on device bond12
[  785.748359][T24899] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4903'.
[  785.774466][T24887] tipc: Resetting bearer <eth:syzkaller0>
[  785.825462][T24860] bond13: entered promiscuous mode
[  785.830610][T24860] bond13: entered allmulticast mode
[  785.878106][T24860] 8021q: adding VLAN 0 to HW filter on device bond13
[  785.886780][T24874] tipc: Disabling bearer <eth:syzkaller0>
[  786.159378][T24918] netlink: 'syz.5.4907': attribute type 11 has an invalid length.
[  786.330449][T24928] tipc: Failed to remove unknown binding: 66,0,0/3054383358:3502157874/3502157875
[  786.442974][T24936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  786.998312][T24962] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  787.031130][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms
[  787.039268][    C0] lec:lec_tx_timeout: lec0
[  788.957598][   T56] block nbd2: Possible stuck request ffff8880258b0000: control (read@0,1024B). Runtime 90 seconds
[  788.968431][   T56] block nbd2: Possible stuck request ffff8880258b0200: control (read@1024,1024B). Runtime 90 seconds
[  788.980200][   T56] block nbd2: Possible stuck request ffff8880258b0400: control (read@2048,1024B). Runtime 90 seconds
[  788.991590][   T56] block nbd2: Possible stuck request ffff8880258b0600: control (read@3072,1024B). Runtime 90 seconds
[  789.296390][T24925] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  789.727543][T24996] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4931'.
[  790.009144][T25015] bridge0: left allmulticast mode
[  790.025181][T25014] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4932'.
[  790.042993][T25014] ip6gre0: Caught tx_queue_len zero misconfig
[  790.079839][T25018] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  790.084457][T25020] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.4935'.
[  790.098309][T25023] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  790.209317][T25027] netlink: 'syz.1.4938': attribute type 13 has an invalid length.
[  790.217631][T25027] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4938'.
[  790.416042][T25037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4942'.
[  790.436719][T25037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4942'.
[  790.635604][T25053] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4946'.
[  790.844104][T25066] netlink: 'syz.5.4951': attribute type 1 has an invalid length.
[  790.886991][T25066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4951'.
[  790.935858][T25066] netlink: 658 bytes leftover after parsing attributes in process `syz.5.4951'.
[  790.951750][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  790.992957][T25066] netlink: 'syz.5.4951': attribute type 1 has an invalid length.
[  791.354692][T25102] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4955'.
[  792.198925][T25156] veth0: entered promiscuous mode
[  792.509874][T21398] bond0: (slave ÿÿÿÿÿÿ): link status definitely down, disabling slave
[  792.610033][T25177] netem: change failed
[  792.922822][T25196] bond4: entered allmulticast mode
[  793.704862][T25227] netlink: 'syz.4.4995': attribute type 10 has an invalid length.
[  793.761268][T25228] xt_TCPMSS: Only works on TCP SYN packets
[  794.079672][  T123] block nbd4: Possible stuck request ffff888025930000: control (read@0,1024B). Runtime 300 seconds
[  794.090756][  T123] block nbd4: Possible stuck request ffff888025930200: control (read@1024,1024B). Runtime 300 seconds
[  794.104653][  T123] block nbd4: Possible stuck request ffff888025930400: control (read@2048,1024B). Runtime 300 seconds
[  794.104797][T25240] netlink: 'syz.2.4998': attribute type 21 has an invalid length.
[  794.118154][  T123] block nbd4: Possible stuck request ffff888025930600: control (read@3072,1024B). Runtime 300 seconds
[  794.185339][T25240] netlink: 'syz.2.4998': attribute type 6 has an invalid length.
[  794.448102][T25263] lo: Caught tx_queue_len zero misconfig
[  794.594126][T25270] SET target dimension over the limit!
[  794.690615][T25268] erspan0: entered promiscuous mode
[  794.701733][T25268] erspan0: entered allmulticast mode
[  794.770762][T25263] bond0: entered promiscuous mode
[  794.804302][T25263] bond_slave_0: entered promiscuous mode
[  794.810270][T25263] bond_slave_1: entered promiscuous mode
[  794.865195][T25263] bond0: left promiscuous mode
[  794.888229][T25263] bond_slave_0: left promiscuous mode
[  794.904953][T25263] bond_slave_1: left promiscuous mode
[  794.947439][T25276] netlink: 'syz.5.5009': attribute type 2 has an invalid length.
[  794.971238][T25276] netlink: 'syz.5.5009': attribute type 8 has an invalid length.
[  794.979267][T25276] __nla_validate_parse: 6 callbacks suppressed
[  794.979292][T25276] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5009'.
[  795.138163][T25297] FAULT_INJECTION: forcing a failure.
[  795.138163][T25297] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  795.171239][T25297] CPU: 1 UID: 0 PID: 25297 Comm: syz.1.5015 Not tainted syzkaller #0 PREEMPT(full) 
[  795.171268][T25297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  795.171279][T25297] Call Trace:
[  795.171287][T25297]  <TASK>
[  795.171296][T25297]  dump_stack_lvl+0xe8/0x150
[  795.171338][T25297]  should_fail_ex+0x412/0x560
[  795.171368][T25297]  _copy_to_user+0x31/0xb0
[  795.171398][T25297]  simple_read_from_buffer+0xe1/0x170
[  795.171423][T25297]  proc_fail_nth_read+0x1bb/0x230
[  795.171447][T25297]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  795.171471][T25297]  ? rw_verify_area+0x2a6/0x4d0
[  795.171491][T25297]  ? __local_bh_enable_ip+0xd0/0x130
[  795.171503][T25297]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  795.171526][T25297]  vfs_read+0x20c/0xa70
[  795.171544][T25297]  ? fdget_pos+0x246/0x320
[  795.171565][T25297]  ? __pfx___mutex_lock+0x10/0x10
[  795.171583][T25297]  ? __pfx_vfs_read+0x10/0x10
[  795.171604][T25297]  ? __fget_files+0x2a/0x420
[  795.171624][T25297]  ? __fget_files+0x3a0/0x420
[  795.171639][T25297]  ? __fget_files+0x2a/0x420
[  795.171662][T25297]  ksys_read+0x150/0x270
[  795.171684][T25297]  ? __pfx_ksys_read+0x10/0x10
[  795.171715][T25297]  do_syscall_64+0xe2/0xf80
[  795.171731][T25297]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.171745][T25297]  ? trace_irq_disable+0x37/0x100
[  795.171758][T25297]  ? clear_bhb_loop+0x60/0xb0
[  795.171776][T25297]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.171791][T25297] RIP: 0033:0x7ff57095b78e
[  795.171806][T25297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  795.171818][T25297] RSP: 002b:00007ff5717d7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  795.171835][T25297] RAX: ffffffffffffffda RBX: 00007ff5717d86c0 RCX: 00007ff57095b78e
[  795.171846][T25297] RDX: 000000000000000f RSI: 00007ff5717d80a0 RDI: 0000000000000003
[  795.171855][T25297] RBP: 00007ff5717d8090 R08: 0000000000000000 R09: 0000000000000000
[  795.171864][T25297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  795.171873][T25297] R13: 00007ff570c16038 R14: 00007ff570c15fa0 R15: 00007fffb235b008
[  795.171898][T25297]  </TASK>
[  795.771918][T25321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5022'.
[  795.965787][T25333] ksmbd: Unknown IPC event: 3, ignore.
[  795.991232][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5040 ms
[  795.999387][    C0] lec:lec_tx_timeout: lec0
[  796.005244][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  796.017264][T25339] netlink: 'syz.1.5027': attribute type 83 has an invalid length.
[  796.107600][T25339] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR
[  796.269312][T25351] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  796.341424][T25361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5034'.
[  796.375663][T25357] bond5 (unregistering): Released all slaves
[  796.447751][T25366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5034'.
[  796.543069][T25351] syzkaller0: entered promiscuous mode
[  796.555229][T25351] syzkaller0: entered allmulticast mode
[  796.569550][T25351] tipc: Resetting bearer <eth:syzkaller0>
[  796.721953][T25369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5035'.
[  796.835815][ T1161] tipc: Resetting bearer <eth:syzkaller0>
[  796.872842][T25350] tipc: Resetting bearer <eth:syzkaller0>
[  798.555055][    C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)
[  798.805066][T25350] tipc: Disabling bearer <eth:syzkaller0>
[  798.828285][T25384] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  799.087213][T25423] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5045'.
[  799.448600][T25444] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5049'.
[  800.310217][T25483] veth1_macvtap: left promiscuous mode
[  800.340202][T25493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5061'.
[  800.356147][T25493] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5061'.
[  800.366421][T25493] netlink: 'syz.2.5061': attribute type 5 has an invalid length.
[  800.388587][T25493] sctp: [Deprecated]: syz.2.5061 (pid 25493) Use of struct sctp_assoc_value in delayed_ack socket option.
[  800.388587][T25493] Use struct sctp_sack_info instead
[  800.436116][T25495] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5062'.
[  800.509016][T25498] veth0_vlan: left promiscuous mode
[  800.748120][T25506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5065'.
[  800.758586][T25508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5065'.
[  800.772599][T25509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5066'.
[  801.031802][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  801.039957][    C0] lec:lec_tx_timeout: lec0
[  801.140963][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5072'.
[  801.185797][T25529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5072'.
[  801.212041][T25529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5072'.
[  801.281022][T25529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5072'.
[  801.283543][ T6971] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  801.339332][ T6971] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  801.366977][ T6971] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  801.543023][ T6971] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  801.558023][T25550] netem: unknown loss type 0
[  801.587767][T25550] netem: change failed
[  801.653595][T25542] bridge0: port 1(bridge_slave_0) entered disabled state
[  801.664800][T25542] bridge0: port 2(bridge_slave_1) entered disabled state
[  802.014820][ T5490] veth1_macvtap: entered promiscuous mode
[  802.268602][T25593] netlink: 'syz.4.5087': attribute type 39 has an invalid length.
[  802.783578][T25623] nbd: couldn't find device at index 63744
[  802.985746][T25587] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  803.018109][T25587] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  803.551268][T25659] veth0: entered promiscuous mode
[  803.567380][T25659] veth0: left promiscuous mode
[  803.925209][T25672] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003
[  804.053218][T25684] netlink: 'syz.4.5107': attribute type 25 has an invalid length.
[  804.338189][T25693] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4
[  804.380902][T25693] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4
[  804.410841][T25693] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s
[  804.557798][T25703] openvswitch: netlink: Flow actions attr not present in new flow.
[  805.033736][T25733] xt_socket: unknown flags 0xe4
[  805.056754][T25732] netlink: 'syz.1.5124': attribute type 11 has an invalid length.
[  805.267286][T25746] ip6gre1: entered promiscuous mode
[  805.281218][T25746] ip6gre1: entered allmulticast mode
[  805.290332][T25750] netlink: 'syz.5.5129': attribute type 39 has an invalid length.
[  805.303963][ T6969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  805.317288][T25747] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  805.326349][ T6969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  805.334965][ T5948] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  805.462204][ T5948] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  805.494277][T25758] __nla_validate_parse: 11 callbacks suppressed
[  805.494302][T25758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5132'.
[  806.071592][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  806.122176][T25788] xt_hashlimit: size too large, truncated to 1048576
[  806.212547][T25794] –: renamed from vxcan1 (while UP)
[  806.313804][T12246] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  806.743373][T25820] x_tables: duplicate underflow at hook 2
[  806.770819][T25822] syzkaller0: entered promiscuous mode
[  806.776897][T25822] syzkaller0: entered allmulticast mode
[  806.804232][T25826] netlink: 'syz.2.5153': attribute type 4 has an invalid length.
[  807.107814][T25848] openvswitch: netlink: Tunnel attr 179 out of range max 16
[  807.250479][T25856] netlink: 'syz.1.5162': attribute type 1 has an invalid length.
[  807.408584][T25867] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5167'.
[  807.423305][T25867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5167'.
[  807.611357][T25876] netlink: 'syz.4.5168': attribute type 1 has an invalid length.
[  807.943965][T25896] siw: device registration error -23
[  808.014136][T25899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5177'.
[  808.248721][T25919] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5182'.
[  808.259924][T25921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5184'.
[  808.279415][T25921] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5184'.
[  808.292624][T25923] netlink: 'syz.3.5183': attribute type 11 has an invalid length.
[  808.370739][T25925] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5185'.
[  808.485713][T25928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5186'.
[  808.598846][T25928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  808.615557][T25928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  808.628979][T25928] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  808.644719][T25928] bond0 (unregistering): Released all slaves
[  808.646299][T25944] netlink: 'syz.2.5188': attribute type 10 has an invalid length.
[  808.757656][T25946] bridge0: port 2(bridge_slave_1) entered disabled state
[  808.765721][T25946] bridge0: port 1(bridge_slave_0) entered disabled state
[  809.186953][T25944] team0: Port device hsr0 added
[  809.228546][T25959] IPVS: set_ctl: invalid protocol: 103 224.0.0.1:20001
[  809.233366][   T59] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0
[  809.270360][   T59] netdevsim netdevsim1 ÿÿÿÿÿÿ: unset [1, 1] type 2 family 0 port 19999 - 0
[  809.294451][   T59] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  809.323847][   T59] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0
[  809.395072][   T59] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  809.430555][   T59] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0
[  809.496655][T25980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5199'.
[  809.511286][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  809.515684][T25983] netlink: 'syz.4.5200': attribute type 39 has an invalid length.
[  809.529513][T21398] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  809.541534][T21398] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0
[  809.586047][T25980] macvtap1: entered allmulticast mode
[  809.596923][T25980] veth0_macvtap: entered allmulticast mode
[  809.607594][T25983] veth0_macvtap: left promiscuous mode
[  809.708754][T25990] Unknown options in mask b7f2
[  810.443241][T26037] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  810.450227][T26037] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  810.485790][T26037] netlink: 'syz.3.5213': attribute type 11 has an invalid length.
[  810.565306][T26040] __nla_validate_parse: 3 callbacks suppressed
[  810.565327][T26040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5212'.
[  810.585851][T26045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5214'.
[  811.081822][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  811.089989][    C0] lec:lec_tx_timeout: lec0
[  811.094806][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  811.493011][T26096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5229'.
[  811.528629][T26096] netlink: 181328 bytes leftover after parsing attributes in process `syz.4.5229'.
[  811.654010][T26105] xt_policy: too many policy elements
[  811.780809][T26108] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  811.797628][T26107] tipc: Disabling bearer <eth:syzkaller0>
[  811.830728][T26112] netlink: 52 bytes leftover after parsing attributes in process `syz.5.5233'.
[  812.004049][T26120] openvswitch: netlink: IPv4 tunnel dst address is zero
[  812.208491][T26131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5241'.
[  812.247808][T26132] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5240'.
[  812.404118][T26142] netlink: 'syz.3.5244': attribute type 1 has an invalid length.
[  812.441593][T26142] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5244'.
[  812.621422][T26152] netlink: 'syz.5.5247': attribute type 39 has an invalid length.
[  812.637931][T26154] lo: entered allmulticast mode
[  812.652647][T26154] lo: left allmulticast mode
[  812.817198][T26170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5253'.
[  813.067811][T26180] openvswitch: netlink: Actions may not be safe on all matching packets
[  813.288732][T26185] syz.4.5256: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  813.316653][T26185] CPU: 0 UID: 0 PID: 26185 Comm: syz.4.5256 Not tainted syzkaller #0 PREEMPT(full) 
[  813.316681][T26185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  813.316691][T26185] Call Trace:
[  813.316696][T26185]  <TASK>
[  813.316703][T26185]  dump_stack_lvl+0xe8/0x150
[  813.316725][T26185]  warn_alloc+0x249/0x340
[  813.316741][T26185]  ? stack_trace_save+0xa9/0x100
[  813.316759][T26185]  ? __pfx_warn_alloc+0x10/0x10
[  813.316776][T26185]  ? kasan_save_track+0x4f/0x80
[  813.316787][T26185]  ? kasan_save_track+0x3e/0x80
[  813.316797][T26185]  ? __kasan_kmalloc+0x93/0xb0
[  813.316808][T26185]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  813.316819][T26185]  ? xskq_create+0x56/0x170
[  813.316831][T26185]  ? xsk_setsockopt+0x54c/0x990
[  813.316846][T26185]  ? do_sock_setsockopt+0x17c/0x1b0
[  813.316860][T26185]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  813.316875][T26185]  ? do_syscall_64+0xe2/0xf80
[  813.316893][T26185]  __vmalloc_node_range_noprof+0x132/0x1730
[  813.316924][T26185]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  813.316941][T26185]  ? __kasan_kmalloc+0x93/0xb0
[  813.316957][T26185]  vmalloc_user_noprof+0xad/0xe0
[  813.316970][T26185]  ? xskq_create+0xbf/0x170
[  813.316982][T26185]  xskq_create+0xbf/0x170
[  813.316995][T26185]  xsk_init_queue+0xad/0x110
[  813.317015][T26185]  xsk_setsockopt+0x54c/0x990
[  813.317034][T26185]  ? __pfx_xsk_setsockopt+0x10/0x10
[  813.317051][T26185]  ? __pfx_aa_sk_perm+0x10/0x10
[  813.317067][T26185]  ? aa_sock_opt_perm+0xff/0x1a0
[  813.317084][T26185]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  813.317097][T26185]  ? __pfx_xsk_setsockopt+0x10/0x10
[  813.317115][T26185]  do_sock_setsockopt+0x17c/0x1b0
[  813.317142][T26185]  __x64_sys_setsockopt+0x13d/0x1b0
[  813.317161][T26185]  do_syscall_64+0xe2/0xf80
[  813.317176][T26185]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.317187][T26185]  ? trace_irq_disable+0x37/0x100
[  813.317199][T26185]  ? clear_bhb_loop+0x60/0xb0
[  813.317214][T26185]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.317226][T26185] RIP: 0033:0x7fedcb59aeb9
[  813.317240][T26185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  813.317251][T26185] RSP: 002b:00007fedcc415028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  813.317265][T26185] RAX: ffffffffffffffda RBX: 00007fedcb816270 RCX: 00007fedcb59aeb9
[  813.317274][T26185] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c
[  813.317282][T26185] RBP: 00007fedcb608c1f R08: 0000000000000004 R09: 0000000000000000
[  813.317290][T26185] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  813.317302][T26185] R13: 00007fedcb816308 R14: 00007fedcb816270 R15: 00007ffd4af2cc18
[  813.317336][T26185]  </TASK>
[  813.317345][T26185] Mem-Info:
[  813.600802][T26185] active_anon:6914 inactive_anon:14 isolated_anon:0
[  813.600802][T26185]  active_file:2620 inactive_file:41129 isolated_file:0
[  813.600802][T26185]  unevictable:768 dirty:86 writeback:0
[  813.600802][T26185]  slab_reclaimable:12275 slab_unreclaimable:117789
[  813.600802][T26185]  mapped:31819 shmem:1376 pagetables:1826
[  813.600802][T26185]  sec_pagetables:0 bounce:0
[  813.600802][T26185]  kernel_misc_reclaimable:0
[  813.600802][T26185]  free:1298706 free_pcp:11572 free_cma:0
[  813.620137][T26189] netlink: 'syz.2.5258': attribute type 25 has an invalid length.
[  813.649466][T26185] Node 0 active_anon:27656kB inactive_anon:56kB active_file:10480kB inactive_file:164308kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127276kB dirty:340kB writeback:0kB shmem:3968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14616kB pagetables:7300kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  813.711273][T26176] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5253'.
[  813.804375][T26185] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  813.853787][T26185] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  813.919564][T26192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  813.951376][T26185] lowmem_reserve[]: 0 2494 2495 2495 2495
[  813.957223][T26185] Node 0 DMA32 free:1297224kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27356kB inactive_anon:56kB active_file:10480kB inactive_file:164308kB unevictable:1536kB writepending:340kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:33644kB local_pcp:13568kB free_cma:0kB
[  814.011145][T26185] lowmem_reserve[]: 0 0 1 1 1
[  814.016127][T26185] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  814.058920][T26198] netlink: 'syz.1.5260': attribute type 2 has an invalid length.
[  814.079655][T26185] lowmem_reserve[]: 0 0 0 0 0
[  814.102215][T26185] Node 1 Normal free:3897632kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9952kB local_pcp:5696kB free_cma:0kB
[  814.116561][T26201] netlink: 'syz.5.5262': attribute type 39 has an invalid length.
[  814.162691][T26185] lowmem_reserve[]: 0 0 0 0 0
[  814.173273][T26185] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  814.191988][T26185] Node 0 DMA32: 9197*4kB (UME) 6270*8kB (UME) 3607*16kB (UME) 396*32kB (UM) 88*64kB (UM) 806*128kB (UM) 616*256kB (UM) 364*512kB (UME) 217*1024kB (UME) 45*2048kB (UME) 91*4096kB (UM) = 1297300kB
[  814.237979][T26185] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  814.304991][T26185] Node 1 Normal: 190*4kB (UME) 49*8kB (UME) 42*16kB (UME) 216*32kB (UME) 64*64kB (UM) 22*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3897632kB
[  814.350785][T26185] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  814.373789][T26185] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  814.420561][T26185] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  814.485698][T26185] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  814.513963][T26185] 45121 total pagecache pages
[  814.519084][T26185] 0 pages in swap cache
[  814.539654][T26185] Free swap  = 124996kB
[  814.549328][T26185] Total swap = 124996kB
[  814.562525][T26185] 2097051 pages RAM
[  814.566519][T26185] 0 pages HighMem/MovableOnly
[  814.576612][T26185] 426624 pages reserved
[  814.580836][T26185] 0 pages cma reserved
[  814.884000][T26238] openvswitch: netlink: Actions may not be safe on all matching packets
[  815.227501][T26260] netlink: 'syz.5.5278': attribute type 16 has an invalid length.
[  815.254047][T26260] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  815.430250][T26260] syzkaller0: entered promiscuous mode
[  815.446444][T26260] syzkaller0: entered allmulticast mode
[  815.455245][T26260] tipc: Resetting bearer <eth:syzkaller0>
[  815.583578][T26270] __nla_validate_parse: 8 callbacks suppressed
[  815.583601][T26270] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5281'.
[  815.621755][T26259] tipc: Resetting bearer <eth:syzkaller0>
[  816.013873][T26285] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5282'.
[  816.101371][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  816.109474][    C0] lec:lec_tx_timeout: lec0
[  816.151574][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  816.262514][T26302] netlink: 'syz.2.5286': attribute type 15 has an invalid length.
[  817.848141][T26259] tipc: Disabling bearer <eth:syzkaller0>
[  817.872491][T26275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5282'.
[  818.015987][T26308] netlink: 'syz.3.5287': attribute type 39 has an invalid length.
[  818.112212][T26315] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5288'.
[  818.176837][T26315] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[  818.308602][T26329] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security
[  818.391511][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  818.452867][T26339] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5295'.
[  818.492112][T26342] openvswitch: netlink: Actions may not be safe on all matching packets
[  818.543484][T26343] IPVS: set_ctl: invalid protocol: 255 172.30.0.5:20003
[  818.702762][T26351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5297'.
[  818.782491][T26351] team1: entered promiscuous mode
[  818.800197][T26351] team1: entered allmulticast mode
[  818.968105][T26370] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5301'.
[  819.044041][   T56] block nbd2: Possible stuck request ffff8880258b0000: control (read@0,1024B). Runtime 120 seconds
[  819.058101][   T56] block nbd2: Possible stuck request ffff8880258b0200: control (read@1024,1024B). Runtime 120 seconds
[  819.069964][   T56] block nbd2: Possible stuck request ffff8880258b0400: control (read@2048,1024B). Runtime 120 seconds
[  819.081560][   T56] block nbd2: Possible stuck request ffff8880258b0600: control (read@3072,1024B). Runtime 120 seconds
[  819.121032][T26374] netlink: 84 bytes leftover after parsing attributes in process `syz.4.5301'.
[  819.517570][T26394] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5309'.
[  819.582412][T26394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  819.608331][T26394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  819.624257][T26394] bond0 (unregistering): (slave ÿÿÿÿÿÿ): Releasing backup interface
[  819.635257][T26394] bond0 (unregistering): Released all slaves
[  819.655970][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5311'.
[  819.691723][T26398] bridge0: port 1(bridge_slave_0) entered disabled state
[  820.092924][T26421] openvswitch: netlink: Actions may not be safe on all matching packets
[  820.596654][T26450] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5328'.
[  820.610067][T26447] IPVS: set_ctl: invalid protocol: 29 172.20.20.187:20001
[  820.755231][T26460] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5332'.
[  820.775083][T26460] netlink: zone id is out of range
[  820.784218][T26460] netlink: zone id is out of range
[  820.790138][T26460] netlink: zone id is out of range
[  820.796683][T26460] netlink: zone id is out of range
[  820.802735][T26460] netlink: zone id is out of range
[  820.808696][T26460] netlink: zone id is out of range
[  820.814758][T26460] netlink: zone id is out of range
[  820.820471][T26460] netlink: zone id is out of range
[  820.872358][T26465] C: renamed from lo (while UP)
[  821.023682][T26481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5336'.
[  821.162946][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  821.171131][    C0] lec:lec_tx_timeout: lec0
[  821.176027][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  821.410912][T26490] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5339'.
[  821.444500][T26494] macsec1: entered promiscuous mode
[  821.614481][T26502] netlink: 'syz.5.5344': attribute type 4 has an invalid length.
[  821.623486][T26498] netlink: 'syz.3.5342': attribute type 2 has an invalid length.
[  821.754131][T26509] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5348'.
[  821.799646][T26514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5347'.
[  821.839623][T26514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5347'.
[  821.855513][T26514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5347'.
[  821.879447][T26519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5349'.
[  821.888842][T26514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5347'.
[  821.943271][T26522] netlink: 'syz.5.5350': attribute type 9 has an invalid length.
[  822.322169][T26547] macvtap2: entered allmulticast mode
[  822.704422][T26569] netlink: 'syz.2.5358': attribute type 4 has an invalid length.
[  822.923675][T26575] netlink: 'syz.1.5359': attribute type 1 has an invalid length.
[  823.093018][T26592] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  823.564918][T26611] 8021q: VLANs not supported on lo
[  823.716346][T26622] x_tables: duplicate underflow at hook 2
[  823.727606][T26622] netlink: 'syz.3.5370': attribute type 1 has an invalid length.
[  824.029318][T26637] netlink: 'syz.4.5378': attribute type 39 has an invalid length.
[  824.081516][ T5841] Bluetooth: hci2: command 0x0405 tx timeout
[  824.156666][  T123] block nbd4: Possible stuck request ffff888025930000: control (read@0,1024B). Runtime 330 seconds
[  824.181782][  T123] block nbd4: Possible stuck request ffff888025930200: control (read@1024,1024B). Runtime 330 seconds
[  824.195010][  T123] block nbd4: Possible stuck request ffff888025930400: control (read@2048,1024B). Runtime 330 seconds
[  824.206276][  T123] block nbd4: Possible stuck request ffff888025930600: control (read@3072,1024B). Runtime 330 seconds
[  824.356227][T26654] netlink: 'syz.2.5383': attribute type 50 has an invalid length.
[  824.402719][T26653] net_ratelimit: 49 callbacks suppressed
[  824.402742][T26653] netlink: zone id is out of range
[  824.441452][T26653] netlink: zone id is out of range
[  824.457181][T26653] netlink: zone id is out of range
[  824.501766][T26653] netlink: zone id is out of range
[  824.507006][T26653] netlink: zone id is out of range
[  824.534273][T26653] netlink: zone id is out of range
[  824.544602][T26653] netlink: zone id is out of range
[  824.561398][T26653] netlink: zone id is out of range
[  824.583424][T26653] netlink: zone id is out of range
[  824.598937][T26653] netlink: zone id is out of range
[  824.600164][T26668] netlink: 'syz.5.5386': attribute type 13 has an invalid length.
[  825.004543][T26675] nbd: illegal input index -8454144
[  825.010438][T26676] nbd: illegal input index -8454144
[  825.109274][T26675] : entered promiscuous mode
[  825.303451][T26686] netlink: 'syz.1.5392': attribute type 21 has an invalid length.
[  825.357543][T26686] netlink: 'syz.1.5392': attribute type 1 has an invalid length.
[  825.652414][T26707] __nla_validate_parse: 14 callbacks suppressed
[  825.652436][T26707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5398'.
[  826.188996][T26743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5407'.
[  826.191308][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms
[  826.206129][    C0] lec:lec_tx_timeout: lec0
[  826.232083][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  826.232468][T26743] bridge6: port 1(veth3) entered blocking state
[  826.257349][T26743] bridge6: port 1(veth3) entered disabled state
[  826.278959][T26743] veth3: entered allmulticast mode
[  826.289645][T26743] veth3: entered promiscuous mode
[  826.339287][T26746] bridge6: port 2(veth0_to_bond) entered blocking state
[  826.349045][T26746] bridge6: port 2(veth0_to_bond) entered disabled state
[  826.359346][T26746] veth0_to_bond: entered allmulticast mode
[  826.369805][T26746] veth0_to_bond: entered promiscuous mode
[  827.165902][T26786] bond5 (unregistering): Released all slaves
[  827.773670][T26817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5424'.
[  828.060561][T26835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5430'.
[  828.064140][T26836] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5431'.
[  828.070927][T26835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5430'.
[  828.732682][T26867] netlink: 'syz.5.5436': attribute type 83 has an invalid length.
[  828.819401][T26873] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5438'.
[  828.831594][T26877] netlink: 'syz.2.5439': attribute type 1 has an invalid length.
[  828.871313][T26877] bond4: entered promiscuous mode
[  828.876931][T26877] 8021q: adding VLAN 0 to HW filter on device bond4
[  828.899726][T26877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5439'.
[  828.995426][T26877] bond4: (slave bridge4): making interface the new active one
[  829.016569][T26877] bridge4: entered promiscuous mode
[  829.027976][T26877] bond4: (slave bridge4): Enslaving as an active interface with an up link
[  829.317170][T26903] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5448'.
[  829.332990][T26904] sctp: [Deprecated]: syz.2.5447 (pid 26904) Use of struct sctp_assoc_value in delayed_ack socket option.
[  829.332990][T26904] Use struct sctp_sack_info instead
[  829.533101][T26925] netlink: 'syz.2.5452': attribute type 10 has an invalid length.
[  829.638515][T26925] team0: Device veth0_vlan failed to register rx_handler
[  830.120942][T26957] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5459'.
[  830.285242][T26967] team0: Caught tx_queue_len zero misconfig
[  830.746747][T26996] netlink: 'syz.3.5469': attribute type 1 has an invalid length.
[  830.755053][T26996] __nla_validate_parse: 5 callbacks suppressed
[  830.755072][T26996] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5469'.
[  830.865148][T27004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5472'.
[  830.932699][T27004] sctp: [Deprecated]: syz.2.5472 (pid 27004) Use of int in maxseg socket option.
[  830.932699][T27004] Use struct sctp_assoc_value instead
[  831.105108][T27017] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5474'.
[  831.244073][T27024] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5476'.
[  831.277800][T27027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5477'.
[  831.304244][T27024] vxcan5: entered allmulticast mode
[  831.340617][T27027] : entered promiscuous mode
[  831.787524][T27054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5482'.
[  831.991095][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5760 ms
[  831.999185][    C0] lec:lec_tx_timeout: lec0
[  832.005051][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  832.257511][T27076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5487'.
[  832.353282][T27083] netlink: 165 bytes leftover after parsing attributes in process `syz.2.5487'.
[  832.470923][T27093] netlink: 'syz.4.5490': attribute type 18 has an invalid length.
[  832.499505][T27095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5493'.
[  832.520615][T27088] netlink: 'syz.4.5490': attribute type 18 has an invalid length.
[  832.804610][T27115] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5496'.
[  832.928122][T27123] tls_set_device_offload_rx: netdev not found
[  833.112164][ T5913] net_ratelimit: 45 callbacks suppressed
[  833.112188][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  833.258189][T27143] netlink: 'syz.2.5501': attribute type 4 has an invalid length.
[  833.287474][T27143] gtp1: entered promiscuous mode
[  833.303795][T27143] gtp1: entered allmulticast mode
[  833.315618][T27130] lo speed is unknown, defaulting to 1000
[  833.804044][T27165] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  833.845941][T27170] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  834.269182][T27194] nbd: illegal input index -8454144
[  834.892413][T27210] xt_hashlimit: overflow, rate too high: 0
[  834.965302][T27210] openvswitch: netlink: IP tunnel dst address not specified
[  835.964093][T27275] __nla_validate_parse: 8 callbacks suppressed
[  835.964116][T27275] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5541'.
[  836.088457][T27281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5544'.
[  836.137024][T27278] bond0: option arp_all_targets: invalid value (18446744073709551613)
[  836.151881][T27284] netlink: 'syz.5.5545': attribute type 1 has an invalid length.
[  836.173977][T27278] bond0 (unregistering): Released all slaves
[  836.282262][T27294] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5545'.
[  836.357025][T27290] bond0: (slave xfrm1): The slave device specified does not support setting the MAC address
[  836.406252][T27290] bond0: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  836.456971][T27290] bond0: (slave xfrm1): making interface the new active one
[  836.467442][T27290] bond0: (slave xfrm1): Enslaving as an active interface with an up link
[  836.566724][T27281] bond6: entered promiscuous mode
[  836.573585][T27281] bond6: entered allmulticast mode
[  836.579441][T27281] 8021q: adding VLAN 0 to HW filter on device bond6
[  836.726235][T27308] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5551'.
[  836.748815][T27308] netlink: 11 bytes leftover after parsing attributes in process `syz.3.5551'.
[  836.758158][T27314] netlink: 'syz.5.5553': attribute type 39 has an invalid length.
[  836.855403][T27316] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5552'.
[  836.945114][T27312] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5554'.
[  836.970236][T27321] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  837.008700][T27324] netlink: 'syz.5.5555': attribute type 1 has an invalid length.
[  837.031288][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  837.039457][    C0] lec:lec_tx_timeout: lec0
[  837.051639][T27304] netlink: 'syz.1.5552': attribute type 1 has an invalid length.
[  837.052417][T27325] netlink: 'syz.5.5555': attribute type 1 has an invalid length.
[  837.138909][T27324] bond14: entered promiscuous mode
[  837.145990][T27324] bond14: entered allmulticast mode
[  837.161744][T27324] 8021q: adding VLAN 0 to HW filter on device bond14
[  837.268437][T27333] netlink: 'syz.4.5557': attribute type 10 has an invalid length.
[  837.347783][T27340] xt_ecn: cannot match TCP bits for non-tcp packets
[  837.358572][T27340] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5561'.
[  837.483117][T27347] bridge0: entered allmulticast mode
[  837.520433][T27349] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5564'.
[  837.711962][T27360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5568'.
[  838.906346][T27420] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  839.041555][T27422] netlink: 'syz.4.5585': attribute type 13 has an invalid length.
[  839.544124][T27442] netlink: 'syz.5.5590': attribute type 39 has an invalid length.
[  840.340821][T27484] netlink: 'syz.1.5604': attribute type 39 has an invalid length.
[  841.114850][T27524] __nla_validate_parse: 7 callbacks suppressed
[  841.114873][T27524] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5618'.
[  841.190063][T27529] vlan1: entered promiscuous mode
[  841.199179][T27529] bridge0: entered promiscuous mode
[  841.351337][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  841.398803][T27536] netlink: 'syz.2.5622': attribute type 1 has an invalid length.
[  841.432518][T27536] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5622'.
[  841.476847][T27542] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000
[  841.531261][T27539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5610'.
[  841.540459][T27539] tipc: Invalid UDP bearer configuration
[  841.540520][T27539] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  841.686872][T27552] GUP no longer grows the stack in syz.2.5626 (27552): 200000003000-20000000a000 (200000001000)
[  841.711257][T27552] CPU: 0 UID: 0 PID: 27552 Comm: syz.2.5626 Not tainted syzkaller #0 PREEMPT(full) 
[  841.711288][T27552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  841.711300][T27552] Call Trace:
[  841.711311][T27552]  <TASK>
[  841.711320][T27552]  dump_stack_lvl+0xe8/0x150
[  841.711351][T27552]  __get_user_pages+0x2453/0x29d0
[  841.711401][T27552]  ? __gup_longterm_locked+0xc4e/0x1630
[  841.711427][T27552]  ? down_read_killable+0x1bb/0x340
[  841.711451][T27552]  ? try_get_folio+0xec/0x650
[  841.711484][T27552]  __gup_longterm_locked+0xdcf/0x1630
[  841.711539][T27552]  gup_fast_fallback+0x1d82/0x22e0
[  841.711602][T27552]  ? __pfx_gup_fast_fallback+0x10/0x10
[  841.711642][T27552]  ? is_valid_gup_args+0x11f/0x200
[  841.711671][T27552]  ? get_user_pages_fast+0x4d/0xb0
[  841.711700][T27552]  __iov_iter_get_pages_alloc+0x3b6/0xb10
[  841.711737][T27552]  ? __pfx_pipe_clear_nowait+0x10/0x10
[  841.711768][T27552]  iov_iter_get_pages2+0x5e/0xa0
[  841.711799][T27552]  __se_sys_vmsplice+0x7b3/0x1490
[  841.711842][T27552]  ? __pfx___se_sys_vmsplice+0x10/0x10
[  841.711865][T27552]  ? __pfx_futex_wait+0x10/0x10
[  841.711899][T27552]  ? lockdep_hardirqs_on+0x7a/0x110
[  841.711980][T27552]  do_syscall_64+0xe2/0xf80
[  841.712000][T27552]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.712020][T27552]  ? clear_bhb_loop+0x60/0xb0
[  841.712044][T27552]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  841.712063][T27552] RIP: 0033:0x7f712059aeb9
[  841.712083][T27552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  841.712099][T27552] RSP: 002b:00007f712148f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116
[  841.712122][T27552] RAX: ffffffffffffffda RBX: 00007f7120815fa0 RCX: 00007f712059aeb9
[  841.712137][T27552] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006
[  841.712150][T27552] RBP: 00007f7120608c1f R08: 0000000000000000 R09: 0000000000000000
[  841.712164][T27552] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  841.712177][T27552] R13: 00007f7120816038 R14: 00007f7120815fa0 R15: 00007ffc1a3bf638
[  841.712215][T27552]  </TASK>
[  842.288334][T27562] macsec0: entered promiscuous mode
[  842.317905][T27572] netlink: 'syz.4.5631': attribute type 13 has an invalid length.
[  842.381832][T27577] netlink: 'syz.2.5634': attribute type 2 has an invalid length.
[  842.437720][T27577] netlink: 244 bytes leftover after parsing attributes in process `syz.2.5634'.
[  842.708883][T27583] syzkaller0: entered promiscuous mode
[  842.715894][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  842.727919][T27583] syzkaller0: entered allmulticast mode
[  842.805657][T27585] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  842.818826][T27583] tipc: Resetting bearer <eth:syzkaller0>
[  842.989613][T27610] netlink: 'syz.1.5644': attribute type 3 has an invalid length.
[  843.014733][T27581] tipc: Resetting bearer <eth:syzkaller0>
[  843.050020][T27614] netlink: 'syz.2.5646': attribute type 4 has an invalid length.
[  843.093498][T27581] tipc: Disabling bearer <eth:syzkaller0>
[  843.146988][T27608] syzkaller1: entered promiscuous mode
[  843.152785][T27608] syzkaller1: entered allmulticast mode
[  843.449870][T27636] netlink: 'syz.5.5651': attribute type 9 has an invalid length.
[  843.544377][T27641] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5653'.
[  844.074045][T27674] netlink: 'syz.2.5663': attribute type 18 has an invalid length.
[  844.338792][T27687] syzkaller0: entered promiscuous mode
[  844.396945][T27687] syzkaller0: entered allmulticast mode
[  844.416999][T27689] netlink: 'syz.2.5667': attribute type 10 has an invalid length.
[  844.478980][T27689] team0: Port device dummy0 added
[  844.496499][T27693] lo: Caught tx_queue_len zero misconfig
[  844.718766][T27702] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5670'.
[  844.805286][T27705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5671'.
[  845.046340][T27722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5676'.
[  845.082896][T27722] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5676'.
[  845.182896][T27733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5676'.
[  845.255111][T27731] netlink: 'syz.2.5677': attribute type 1 has an invalid length.
[  845.498995][T27749] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  845.588176][T27757] netlink: 'syz.2.5685': attribute type 1 has an invalid length.
[  845.773037][T27763] FAULT_INJECTION: forcing a failure.
[  845.773037][T27763] name failslab, interval 1, probability 0, space 0, times 0
[  845.798205][T27763] CPU: 0 UID: 0 PID: 27763 Comm: syz.3.5688 Not tainted syzkaller #0 PREEMPT(full) 
[  845.798236][T27763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  845.798248][T27763] Call Trace:
[  845.798257][T27763]  <TASK>
[  845.798265][T27763]  dump_stack_lvl+0xe8/0x150
[  845.798297][T27763]  should_fail_ex+0x412/0x560
[  845.798328][T27763]  should_failslab+0xa8/0x100
[  845.798353][T27763]  __kmalloc_noprof+0xde/0x7e0
[  845.798373][T27763]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  845.798408][T27763]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  845.798444][T27763]  genl_family_rcv_msg_doit+0xd9/0x330
[  845.798478][T27763]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  845.798513][T27763]  ? apparmor_capable+0x137/0x1a0
[  845.798545][T27763]  ? bpf_lsm_capable+0x9/0x20
[  845.798570][T27763]  ? security_capable+0x7e/0x2c0
[  845.798599][T27763]  genl_rcv_msg+0x61c/0x7a0
[  845.798631][T27763]  ? __pfx_genl_rcv_msg+0x10/0x10
[  845.798653][T27763]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  845.798676][T27763]  ? __pfx_nl80211_connect+0x10/0x10
[  845.798694][T27763]  ? __pfx_nl80211_post_doit+0x10/0x10
[  845.798723][T27763]  ? __pfx_ref_tracker_free+0x10/0x10
[  845.798756][T27763]  netlink_rcv_skb+0x232/0x4b0
[  845.798777][T27763]  ? __pfx_genl_rcv_msg+0x10/0x10
[  845.798804][T27763]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  845.798821][T27763]  ? genl_rcv+0x19/0x40
[  845.798875][T27763]  ? down_read+0x272/0x2e0
[  845.798895][T27763]  ? genl_rcv+0xd/0x40
[  845.798919][T27763]  genl_rcv+0x28/0x40
[  845.798940][T27763]  netlink_unicast+0x80f/0x9b0
[  845.798993][T27763]  ? __pfx_netlink_unicast+0x10/0x10
[  845.799020][T27763]  ? __alloc_skb+0x193/0x390
[  845.799056][T27763]  ? netlink_sendmsg+0x650/0xb40
[  845.799075][T27763]  ? skb_put+0x11b/0x210
[  845.799102][T27763]  netlink_sendmsg+0x813/0xb40
[  845.799133][T27763]  ? __pfx_netlink_sendmsg+0x10/0x10
[  845.799157][T27763]  ? aa_sock_msg_perm+0xf1/0x1b0
[  845.799182][T27763]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  845.799207][T27763]  ? __pfx_netlink_sendmsg+0x10/0x10
[  845.799228][T27763]  ____sys_sendmsg+0xa68/0xad0
[  845.799254][T27763]  ? __might_fault+0xaf/0x130
[  845.799292][T27763]  ? __pfx_____sys_sendmsg+0x10/0x10
[  845.799327][T27763]  ? import_iovec+0x73/0xa0
[  845.799360][T27763]  ___sys_sendmsg+0x2a5/0x360
[  845.799385][T27763]  ? __lock_acquire+0x6b5/0x2cf0
[  845.799416][T27763]  ? __pfx____sys_sendmsg+0x10/0x10
[  845.799477][T27763]  ? __fget_files+0x2a/0x420
[  845.799499][T27763]  ? __fget_files+0x3a0/0x420
[  845.799533][T27763]  __x64_sys_sendmsg+0x1bd/0x2a0
[  845.799562][T27763]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  845.799598][T27763]  ? __pfx_ksys_write+0x10/0x10
[  845.799641][T27763]  do_syscall_64+0xe2/0xf80
[  845.799662][T27763]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  845.799681][T27763]  ? trace_irq_disable+0x37/0x100
[  845.799701][T27763]  ? clear_bhb_loop+0x60/0xb0
[  845.799725][T27763]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  845.799742][T27763] RIP: 0033:0x7f6f0759aeb9
[  845.799761][T27763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  845.799777][T27763] RSP: 002b:00007f6f0842e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  845.799800][T27763] RAX: ffffffffffffffda RBX: 00007f6f07815fa0 RCX: 00007f6f0759aeb9
[  845.799815][T27763] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  845.799828][T27763] RBP: 00007f6f0842e090 R08: 0000000000000000 R09: 0000000000000000
[  845.799850][T27763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  845.799863][T27763] R13: 00007f6f07816038 R14: 00007f6f07815fa0 R15: 00007fff76c7cb18
[  845.799898][T27763]  </TASK>
[  846.445553][T27771] __nla_validate_parse: 2 callbacks suppressed
[  846.445575][T27771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5691'.
[  846.671405][T27793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  846.907010][T27804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5698'.
[  847.031317][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms
[  847.039621][    C0] lec:lec_tx_timeout: lec0
[  847.044902][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  847.258935][T27825] IPVS: set_ctl: invalid protocol: 58 172.20.20.57:20001
[  848.410348][T27847] bond7: entered allmulticast mode
[  848.425478][T27847] bridge7: entered promiscuous mode
[  848.431183][T27847] bridge7: entered allmulticast mode
[  848.439735][T27847] bond7: (slave bridge7): Enslaving as an active interface with an up link
[  848.620674][T27859] netlink: 'syz.4.5711': attribute type 11 has an invalid length.
[  849.126597][   T56] block nbd2: Possible stuck request ffff8880258b0000: control (read@0,1024B). Runtime 150 seconds
[  849.137676][   T56] block nbd2: Possible stuck request ffff8880258b0200: control (read@1024,1024B). Runtime 150 seconds
[  849.148978][   T56] block nbd2: Possible stuck request ffff8880258b0400: control (read@2048,1024B). Runtime 150 seconds
[  849.160400][   T56] block nbd2: Possible stuck request ffff8880258b0600: control (read@3072,1024B). Runtime 150 seconds
[  849.920439][T27808] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  850.138518][T27865] netdevsim netdevsim3: Direct firmware load for .. failed with error -2
[  850.174164][T27865] netdevsim netdevsim3: Falling back to sysfs fallback for: ..
[  850.206402][T27862] netlink: 'syz.5.5712': attribute type 12 has an invalid length.
[  850.433088][T27862] bond15: option primary_reselect: invalid value (255)
[  850.510246][T27862] bond15 (unregistering): Released all slaves
[  850.611824][T27875] vcan0: entered allmulticast mode
[  850.859359][T27909] netlink: 'syz.4.5720': attribute type 1 has an invalid length.
[  851.152962][T27924] netlink: 'syz.3.5725': attribute type 3 has an invalid length.
[  851.389793][T27929] bond15: Unable to set up delay as MII monitoring is disabled
[  851.475109][T27929] bond15 (unregistering): Released all slaves
[  851.484401][T27942] netlink: 171940 bytes leftover after parsing attributes in process `syz.4.5729'.
[  852.048078][T27972] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check.
[  852.064179][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  852.064216][    C0] lec:lec_tx_timeout: lec0
[  852.349262][T27994] veth0_macvtap: Caught tx_queue_len zero misconfig
[  852.492716][T27999] netlink: 'syz.5.5744': attribute type 1 has an invalid length.
[  852.579145][T28004] netlink: 'syz.3.5746': attribute type 1 has an invalid length.
[  852.985098][T28027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5754'.
[  853.219175][T28035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5757'.
[  853.380782][T28050] openvswitch: netlink: Tunnel attr 32 out of range max 16
[  853.434974][T28050] syzkaller1: entered promiscuous mode
[  853.442834][T28050] syzkaller1: entered allmulticast mode
[  853.698636][T28071] gtp0: entered promiscuous mode
[  853.879248][T28088] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  853.996013][T28095] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.5774'.
[  854.022040][T28095] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  854.032248][T28096] netlink: 'syz.1.5772': attribute type 10 has an invalid length.
[  854.046851][T28095] syzkaller0: entered promiscuous mode
[  854.053415][T28096] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5772'.
[  854.062657][T28095] syzkaller0: entered allmulticast mode
[  854.071016][T28098] netlink: 'syz.4.5775': attribute type 39 has an invalid length.
[  854.075301][T28043] Bluetooth: hci2: Opcode 0x0401 failed: -4
[  854.187476][T28102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5776'.
[  854.234986][  T123] block nbd4: Possible stuck request ffff888025930000: control (read@0,1024B). Runtime 360 seconds
[  854.247189][  T123] block nbd4: Possible stuck request ffff888025930200: control (read@1024,1024B). Runtime 360 seconds
[  854.262890][  T123] block nbd4: Possible stuck request ffff888025930400: control (read@2048,1024B). Runtime 360 seconds
[  854.262946][T28105] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  854.274043][  T123] block nbd4: Possible stuck request ffff888025930600: control (read@3072,1024B). Runtime 360 seconds
[  854.375758][T28107] bridge6: port 1(veth1) entered blocking state
[  854.382902][T28107] bridge6: port 1(veth1) entered disabled state
[  854.399864][T28107] veth1: entered allmulticast mode
[  854.413948][T28107] veth1: entered promiscuous mode
[  854.737223][T28131] netlink: 'syz.2.5785': attribute type 1 has an invalid length.
[  854.772068][T28130] openvswitch: netlink: IP tunnel dst address not specified
[  854.805763][T28125] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  854.890577][T28125] bond5 (unregistering): Released all slaves
[  855.039932][T28131] bond5: entered promiscuous mode
[  855.057543][T28131] bond5: entered allmulticast mode
[  855.115847][T28131] 8021q: adding VLAN 0 to HW filter on device bond5
[  855.352721][   T52] Bluetooth: hci2: command 0x0405 tx timeout
[  855.561404][T28164] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5796'.
[  855.598981][T28170] netlink: 'syz.2.5798': attribute type 39 has an invalid length.
[  855.775634][T28181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5800'.
[  856.014293][T28194] macsec2: entered allmulticast mode
[  856.116309][T28200] netlink: 'syz.3.5807': attribute type 39 has an invalid length.
[  856.208965][T28203] xt_hashlimit: size too large, truncated to 1048576
[  856.218945][T28212] netlink: 'syz.1.5811': attribute type 39 has an invalid length.
[  856.226173][T28214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5808'.
[  856.471679][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  856.544467][T28221] debugfs: 'KŠŸu™crµ±K:‘£ÿˆÌ¥ÝB�ßÝ£|“¼ÚÞlS·œ-!' already exists in 'ieee80211'
[  856.605815][T28227] syz.5.5812: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  856.622970][T28226] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5815'.
[  856.632569][T28227] CPU: 1 UID: 0 PID: 28227 Comm: syz.5.5812 Not tainted syzkaller #0 PREEMPT(full) 
[  856.632599][T28227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  856.632612][T28227] Call Trace:
[  856.632620][T28227]  <TASK>
[  856.632630][T28227]  dump_stack_lvl+0xe8/0x150
[  856.632664][T28227]  warn_alloc+0x249/0x340
[  856.632688][T28227]  ? stack_trace_save+0xa9/0x100
[  856.632718][T28227]  ? __pfx_warn_alloc+0x10/0x10
[  856.632749][T28227]  ? kasan_save_track+0x4f/0x80
[  856.632775][T28227]  ? kasan_save_track+0x3e/0x80
[  856.632791][T28227]  ? __kasan_kmalloc+0x93/0xb0
[  856.632809][T28227]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  856.632826][T28227]  ? xskq_create+0x56/0x170
[  856.632844][T28227]  ? xsk_setsockopt+0x54c/0x990
[  856.632866][T28227]  ? do_sock_setsockopt+0x17c/0x1b0
[  856.632886][T28227]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  856.632908][T28227]  ? do_syscall_64+0xe2/0xf80
[  856.632934][T28227]  __vmalloc_node_range_noprof+0x132/0x1730
[  856.632985][T28227]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  856.633014][T28227]  ? __kasan_kmalloc+0x93/0xb0
[  856.633043][T28227]  vmalloc_user_noprof+0xad/0xe0
[  856.633064][T28227]  ? xskq_create+0xbf/0x170
[  856.633085][T28227]  xskq_create+0xbf/0x170
[  856.633107][T28227]  xsk_init_queue+0xad/0x110
[  856.633139][T28227]  xsk_setsockopt+0x54c/0x990
[  856.633169][T28227]  ? __pfx_xsk_setsockopt+0x10/0x10
[  856.633194][T28227]  ? __pfx_aa_sk_perm+0x10/0x10
[  856.633218][T28227]  ? aa_sock_opt_perm+0xff/0x1a0
[  856.633244][T28227]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  856.633264][T28227]  ? __pfx_xsk_setsockopt+0x10/0x10
[  856.633291][T28227]  do_sock_setsockopt+0x17c/0x1b0
[  856.633323][T28227]  __x64_sys_setsockopt+0x13d/0x1b0
[  856.633352][T28227]  do_syscall_64+0xe2/0xf80
[  856.633372][T28227]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.633392][T28227]  ? trace_irq_disable+0x37/0x100
[  856.633408][T28227]  ? clear_bhb_loop+0x60/0xb0
[  856.633432][T28227]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  856.633450][T28227] RIP: 0033:0x7fc03e99aeb9
[  856.633470][T28227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  856.633487][T28227] RSP: 002b:00007fc03f87a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  856.633510][T28227] RAX: ffffffffffffffda RBX: 00007fc03ec16090 RCX: 00007fc03e99aeb9
[  856.633525][T28227] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008
[  856.633538][T28227] RBP: 00007fc03ea08c1f R08: 0000000000000004 R09: 0000000000000000
[  856.633550][T28227] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  856.633563][T28227] R13: 00007fc03ec16128 R14: 00007fc03ec16090 R15: 00007ffce91df6a8
[  856.633597][T28227]  </TASK>
[  856.636971][T28227] Mem-Info:
[  856.729016][T28223] syzkaller0: entered promiscuous mode
[  856.754447][T28227] active_anon:7054 inactive_anon:14 isolated_anon:0
[  856.754447][T28227]  active_file:2620 inactive_file:41146 isolated_file:0
[  856.754447][T28227]  unevictable:768 dirty:76 writeback:0
[  856.754447][T28227]  slab_reclaimable:12372 slab_unreclaimable:122964
[  856.754447][T28227]  mapped:29787 shmem:1383 pagetables:1638
[  856.754447][T28227]  sec_pagetables:0 bounce:0
[  856.754447][T28227]  kernel_misc_reclaimable:0
[  856.754447][T28227]  free:1295151 free_pcp:12190 free_cma:0
[  856.765788][T28223] syzkaller0: entered allmulticast mode
[  856.768827][T28227] Node 0 active_anon:28116kB inactive_anon:56kB active_file:10480kB inactive_file:164376kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119148kB dirty:304kB writeback:0kB shmem:3996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14784kB pagetables:6448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  857.016784][T28227] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  857.048308][T28241] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  857.063840][T28238] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5816'.
[  857.076319][T28227] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  857.108287][T28226] vcan0 (unregistering): left allmulticast mode
[  857.120611][T28227] lowmem_reserve[]: 0 2494 2495 2495 2495
[  857.151367][T28227] Node 0 DMA32 free:1266364kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28252kB inactive_anon:56kB active_file:10480kB inactive_file:164376kB unevictable:1536kB writepending:304kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:40124kB local_pcp:19236kB free_cma:0kB
[  857.201265][T28227] lowmem_reserve[]: 0 0 1 1 1
[  857.206205][T28227] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  857.237673][T28227] lowmem_reserve[]: 0 0 0 0 0
[  857.245678][T28227] Node 1 Normal free:3898400kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9184kB local_pcp:4256kB free_cma:0kB
[  857.279338][T28227] lowmem_reserve[]: 0 0 0 0 0
[  857.284614][T28227] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  857.300681][T28227] Node 0 DMA32: 10011*4kB (UM) 6426*8kB (UM) 3994*16kB (UME) 125*32kB (M) 52*64kB (UM) 779*128kB (UM) 616*256kB (UM) 360*512kB (UME) 218*1024kB (UM) 38*2048kB (UE) 88*4096kB (UM) = 1265916kB
[  857.335530][T28227] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  857.381706][T28227] Node 1 Normal: 190*4kB (UME) 49*8kB (UME) 42*16kB (UME) 224*32kB (UME) 70*64kB (UM) 23*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3898400kB
[  857.422096][T28227] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  857.451522][T28227] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  857.471805][T28227] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  857.491368][T28227] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  857.500830][T28227] 45145 total pagecache pages
[  857.523751][T28227] 0 pages in swap cache
[  857.528317][T28227] Free swap  = 124996kB
[  857.534600][T28227] Total swap = 124996kB
[  857.539975][T28227] 2097051 pages RAM
[  857.547873][T28227] 0 pages HighMem/MovableOnly
[  857.553250][T28227] 426624 pages reserved
[  857.557503][T28227] 0 pages cma reserved
[  859.512053][T28269] netlink: 'syz.5.5824': attribute type 28 has an invalid length.
[  859.867721][T28291] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5832'.
[  860.045631][T28303] bridge: RTM_NEWNEIGH with invalid state 0x8
[  860.356531][T28322] netlink: 'syz.3.5841': attribute type 3 has an invalid length.
[  860.462730][T28326] netlink: 'syz.2.5842': attribute type 11 has an invalid length.
[  860.470933][T28326] netlink: 199788 bytes leftover after parsing attributes in process `syz.2.5842'.
[  860.566609][ T5913] IPVS: starting estimator thread 0...
[  860.655824][T28342] netdevsim netdevsim4: Firmware load for './file0/file0/..' refused, path contains '..' component
[  860.671810][T28333] IPVS: using max 26 ests per chain, 62400 per kthread
[  860.708969][T28347] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5845'.
[  860.718170][T28349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5849'.
[  860.742994][T28347] netlink: 'syz.2.5845': attribute type 1 has an invalid length.
[  860.811365][T28347] bond6: entered promiscuous mode
[  860.818334][T28347] 8021q: adding VLAN 0 to HW filter on device bond6
[  860.837587][T28347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5845'.
[  860.847475][T28347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5845'.
[  860.867304][T28347] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5845'.
[  861.053312][T28359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5852'.
[  861.095964][T28361] dvmrp6: entered allmulticast mode
[  861.408582][T28352] mpoa:mpoad_close: (<unknown>) going down
[  861.627029][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  861.642852][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  861.652224][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  861.661285][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  861.670865][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  861.777925][T28378] lo speed is unknown, defaulting to 1000
[  861.846830][T28386] __nla_validate_parse: 1 callbacks suppressed
[  861.846851][T28386] netlink: 808 bytes leftover after parsing attributes in process `syz.5.5860'.
[  862.000760][T28391] netlink: 'syz.2.5862': attribute type 8 has an invalid length.
[  862.008781][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms
[  862.008815][    C0] lec:lec_tx_timeout: lec0
[  862.017573][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  862.211940][T28396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5864'.
[  862.290248][T28398] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  862.297593][T28398] IPv6: NLM_F_CREATE should be set when creating new route
[  862.304990][T28398] IPv6: NLM_F_CREATE should be set when creating new route
[  862.312264][T28398] IPv6: NLM_F_CREATE should be set when creating new route
[  862.324039][T28404] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  862.386265][T28394] tap0: tun_chr_ioctl cmd 1074025676
[  862.392179][T28394] tap0: owner set to 0
[  862.426707][T28394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5863'.
[  862.517536][T28407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  862.606466][T28411] bridge_slave_0: entered promiscuous mode
[  862.769582][T28378] chnl_net:caif_netlink_parms(): no params data found
[  862.784719][T28422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5870'.
[  862.830587][T28422] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5870'.
[  862.928253][T28422] gretap0: entered promiscuous mode
[  862.941437][T28422] gretap0: left promiscuous mode
[  863.299391][T28378] bridge0: port 1(bridge_slave_0) entered blocking state
[  863.311305][T28378] bridge0: port 1(bridge_slave_0) entered disabled state
[  863.329490][T28378] bridge_slave_0: entered allmulticast mode
[  863.346998][T28378] bridge_slave_0: entered promiscuous mode
[  863.373597][T28378] bridge0: port 2(bridge_slave_1) entered blocking state
[  863.385520][T28378] bridge0: port 2(bridge_slave_1) entered disabled state
[  863.414341][T28378] bridge_slave_1: entered allmulticast mode
[  863.448866][T28378] bridge_slave_1: entered promiscuous mode
[  863.472901][T28457] erspan0: mtu less than device minimum
[  863.602110][T28462] netlink: 'syz.2.5879': attribute type 3 has an invalid length.
[  863.614778][T28378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  863.673244][T28378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  863.751765][   T52] Bluetooth: hci1: command tx timeout
[  864.024513][T28378] team0: Port device team_slave_0 added
[  864.052241][T28378] team0: Port device team_slave_1 added
[  864.057968][T28488] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  864.069305][T28488] netlink: 'syz.5.5882': attribute type 83 has an invalid length.
[  864.127058][T28378] batman_adv: batadv0: Adding interface: batadv_slave_0
[  864.141437][T28378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  864.202270][T28378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  864.216280][T28488] syzkaller1: entered promiscuous mode
[  864.231775][T28488] syzkaller1: entered allmulticast mode
[  864.300281][T28378] batman_adv: batadv0: Adding interface: batadv_slave_1
[  864.310656][T28378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  864.341232][T28378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  864.368620][T28497] bond0: (slave gre0): Error: Device type is different from other slaves
[  864.462073][T28501] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  864.489983][T28378] hsr_slave_0: entered promiscuous mode
[  864.517403][T28378] hsr_slave_1: entered promiscuous mode
[  864.528192][T28378] debugfs: 'hsr0' already exists in 'hsr'
[  864.534691][T28378] Cannot create hsr debugfs directory
[  864.542253][T28498] bond0: (slave rose0): Error: Device is in use and cannot be enslaved
[  864.982866][T28525] x_tables: ip_tables: udp match: only valid for protocol 17
[  865.068288][T28532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5892'.
[  865.087332][T28378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  865.119671][T28378] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.347113][T28378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  865.348730][T28550] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5899'.
[  865.374297][T28378] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.481628][T28555] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5900'.
[  865.567840][T28378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  865.590570][T28378] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  865.787576][T28569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5905'.
[  865.832891][   T52] Bluetooth: hci1: command tx timeout
[  865.968733][T28577] xt_hashlimit: max too large, truncated to 1048576
[  866.263583][T28586] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  866.276334][T28586] bond8 (unregistering): Released all slaves
[  866.300981][T28587] team0: Device gtp2 is up. Set it down before adding it as a team port
[  866.311869][T28595] netlink: 'syz.5.5913': attribute type 32 has an invalid length.
[  866.319814][T28595] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5913'.
[  866.449066][T28595] bond15: option coupled_control: invalid value (52)
[  866.478155][T28596] xt_cluster: node mask cannot exceed total number of nodes
[  866.494877][T28595] bond15 (unregistering): Released all slaves
[  866.625051][T28378] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  866.698364][T28378] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  866.709881][T28378] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  866.812974][T28378] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  866.866524][T28611] netlink: 'syz.1.5918': attribute type 1 has an invalid length.
[  866.893385][T28611] netlink: 'syz.1.5918': attribute type 1 has an invalid length.
[  866.929066][T28628] netlink: 'syz.3.5920': attribute type 61 has an invalid length.
[  866.937089][T28618] team0: Port device team_slave_0 removed
[  866.948726][T28631] __nla_validate_parse: 1 callbacks suppressed
[  866.948747][T28631] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5918'.
[  866.968760][T28618] team0: Port device team_slave_1 removed
[  866.972619][T28628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5920'.
[  866.989790][T28618] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  866.997964][T28618] batman_adv: batadv0: Removing interface: batadv_slave_0
[  867.006835][T28618] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  867.016971][T28618] batman_adv: batadv0: Removing interface: batadv_slave_1
[  867.025973][T28618] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  867.042948][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5030 ms
[  867.042980][    C0] lec:lec_tx_timeout: lec0
[  867.096385][T28614] syzkaller1: entered promiscuous mode
[  867.102574][T28614] syzkaller1: entered allmulticast mode
[  867.279617][T28378] 8021q: adding VLAN 0 to HW filter on device bond0
[  867.324580][T28378] 8021q: adding VLAN 0 to HW filter on device team0
[  867.358226][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state
[  867.365498][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state
[  867.413416][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state
[  867.420687][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state
[  867.512595][T28652] sctp: [Deprecated]: syz.2.5927 (pid 28652) Use of struct sctp_assoc_value in delayed_ack socket option.
[  867.512595][T28652] Use struct sctp_sack_info instead
[  867.597123][T28378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  867.915748][   T52] Bluetooth: hci1: command tx timeout
[  867.941535][T28669] syz.1.5932 (28669) used obsolete PPPIOCDETACH ioctl
[  867.975932][T28674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5934'.
[  868.082934][T28678] netlink: 'syz.2.5935': attribute type 61 has an invalid length.
[  868.105016][T28678] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5935'.
[  868.124187][T28378] 8021q: adding VLAN 0 to HW filter on device batadv0
[  868.195995][T28684] netlink: 'syz.3.5936': attribute type 13 has an invalid length.
[  868.384330][T28700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5940'.
[  868.458199][T28706] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5940'.
[  868.747936][T28716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5941'.
[  868.943705][T28378] veth0_vlan: entered promiscuous mode
[  868.979068][T28378] veth1_vlan: entered promiscuous mode
[  869.024583][T28378] veth0_macvtap: entered promiscuous mode
[  869.038626][T28378] veth1_macvtap: entered promiscuous mode
[  869.103582][T28378] batman_adv: batadv0: Interface activated: batadv_slave_0
[  869.163331][T28378] batman_adv: batadv0: Interface activated: batadv_slave_1
[  869.230173][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  869.270359][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  869.314974][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  869.354782][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  869.367931][T28736] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5947'.
[  869.406742][T28737] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5948'.
[  869.565728][T28737] bond7: entered promiscuous mode
[  869.597454][T28737] bond7: entered allmulticast mode
[  869.623705][T28737] 8021q: adding VLAN 0 to HW filter on device bond7
[  869.677270][T28738] veth0: entered promiscuous mode
[  869.744486][T28735] veth0: left promiscuous mode
[  869.757911][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.774927][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  869.874781][T21398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  869.895009][T21398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  869.992095][   T52] Bluetooth: hci1: command tx timeout
[  870.045901][T28760] netlink: 13340 bytes leftover after parsing attributes in process `syz.1.5954'.
[  870.099245][T28764] netlink: 'syz.4.5854': attribute type 3 has an invalid length.
[  870.143210][T28764] netlink: 'syz.4.5854': attribute type 1 has an invalid length.
[  870.177532][T28766] netlink: 'syz.5.5957': attribute type 1 has an invalid length.
[  870.240169][ T1303] lec:lec_start_xmit: lec0:No lecd attached
[  870.797143][T28808] ipvlan2: entered allmulticast mode
[  870.804592][T28808] batadv_slave_1: entered allmulticast mode
[  870.816956][T28808] batman_adv: batadv0: Adding interface: ipvlan2
[  870.824943][T28808] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  870.869184][T28808] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  870.894007][T28808] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  870.905925][T28808] batman_adv: batadv0: Interface activated: ipvlan2
[  871.058457][T28825] tipc: Enabling of bearer <ib:vcan0> rejected, failed to enable media
[  871.250183][T28837] netem: change failed
[  871.256220][T28836] netem: change failed
[  871.267477][T28842] tipc: Trying to set illegal importance in message
[  871.309697][T28837] IPVS: persistence engine module ip_vs_pe_@ not found
[  871.817034][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  871.828297][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  871.841947][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  871.853665][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  871.861892][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  872.123074][T28866] lo speed is unknown, defaulting to 1000
[  872.508055][T28886] __nla_validate_parse: 9 callbacks suppressed
[  872.508077][T28886] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5992'.
[  872.742992][T28897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5995'.
[  873.050199][T28866] chnl_net:caif_netlink_parms(): no params data found
[  873.081678][T28920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6001'.
[  873.159362][T28920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6001'.
[  873.237804][T28923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  873.295571][T28934] netlink: 'syz.1.6003': attribute type 1 has an invalid length.
[  873.394766][T28934] 8021q: adding VLAN 0 to HW filter on device bond5
[  873.424491][T28866] bridge0: port 1(bridge_slave_0) entered blocking state
[  873.437400][T28866] bridge0: port 1(bridge_slave_0) entered disabled state
[  873.445765][T28866] bridge_slave_0: entered allmulticast mode
[  873.455026][T28866] bridge_slave_0: entered promiscuous mode
[  873.474327][T28866] bridge0: port 2(bridge_slave_1) entered blocking state
[  873.481851][T28866] bridge0: port 2(bridge_slave_1) entered disabled state
[  873.489256][T28866] bridge_slave_1: entered allmulticast mode
[  873.499285][T28866] bridge_slave_1: entered promiscuous mode
[  873.577472][T28942] netlink: 108 bytes leftover after parsing attributes in process `syz.5.6005'.
[  873.642185][T28866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  873.694668][T28866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  873.760084][T28950] netlink: 'syz.4.6009': attribute type 1 has an invalid length.
[  873.766273][T28866] team0: Port device team_slave_0 added
[  873.771392][T28948] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6008'.
[  873.787662][T28945] syzkaller0: entered promiscuous mode
[  873.793747][T28945] syzkaller0: entered allmulticast mode
[  873.806562][T28866] team0: Port device team_slave_1 added
[  873.857508][T28950] bond1 (unregistering): Released all slaves
[  873.916407][   T52] Bluetooth: hci0: command tx timeout
[  874.093913][T28968] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6009'.
[  874.226277][T28866] batman_adv: batadv0: Adding interface: batadv_slave_0
[  874.251262][T28866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  874.285732][T28866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  874.300259][T28866] batman_adv: batadv0: Adding interface: batadv_slave_1
[  874.309799][T28866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  874.364013][T28975] netlink: 'syz.1.6013': attribute type 1 has an invalid length.
[  874.371610][T28866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  874.396468][T28973] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  874.479178][T28975] 8021q: adding VLAN 0 to HW filter on device bond6
[  874.519728][T28970] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  874.519896][T28975] netlink: 'syz.1.6013': attribute type 63 has an invalid length.
[  874.566934][T28979] bond6: entered promiscuous mode
[  874.573353][T28970] netlink: 'syz.1.6013': attribute type 63 has an invalid length.
[  874.573437][T28979] bond6: entered allmulticast mode
[  874.659762][T28866] hsr_slave_0: entered promiscuous mode
[  874.673357][T28866] hsr_slave_1: entered promiscuous mode
[  874.746405][T28866] debugfs: 'hsr0' already exists in 'hsr'
[  874.756333][T28991] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20001
[  874.761392][T28866] Cannot create hsr debugfs directory
[  874.793833][T28989] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6017'.
[  874.885973][T28997] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6020'.
[  874.974977][T28999] netlink: 'syz.1.6021': attribute type 39 has an invalid length.
[  875.216108][T28866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  875.230582][T28866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.426851][T28866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  875.438722][T28866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  875.636204][T29034] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6029'.
[  875.991533][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5750 ms
[  875.999722][    C0] lec:lec_tx_timeout: lec0
[  876.006354][   T52] Bluetooth: hci0: command tx timeout
[  876.006433][    C0] lec:lec_start_xmit: lec0:No lecd attached
[  876.053715][T28866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  876.091456][T28866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.177535][T29020] lo speed is unknown, defaulting to 1000
[  876.406440][T28866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0
[  876.449199][T28866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  876.511419][T29036] vlan0: entered promiscuous mode
[  876.520717][T29036] vlan0: entered allmulticast mode
[  876.534994][T29036] veth0_vlan: entered allmulticast mode
[  876.834556][T29064] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  877.268390][T28866] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  877.317260][T28866] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  877.347591][T28866] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  877.443978][T28866] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  877.464855][T29093] syzkaller0: entered promiscuous mode
[  877.470377][T29093] syzkaller0: entered allmulticast mode
[  877.539069][T29086] team0: Caught tx_queue_len zero misconfig
[  877.712551][T29104] netlink: 'syz.5.6044': attribute type 32 has an invalid length.
[  877.816168][T28866] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.874661][T28866] 8021q: adding VLAN 0 to HW filter on device team0
[  877.914168][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  877.921426][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  877.943150][T29115] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  878.035022][T21398] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.042287][T21398] bridge0: port 2(bridge_slave_1) entered forwarding state
[  878.071817][   T52] Bluetooth: hci0: command tx timeout
[  878.256042][T29120] __nla_validate_parse: 2 callbacks suppressed
[  878.256063][T29120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6048'.
[  878.513203][T29136] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  878.528843][T29138] netlink: 84 bytes leftover after parsing attributes in process `syz.5.6050'.
[  878.854670][T28866] 8021q: adding VLAN 0 to HW filter on device batadv0
[  879.054290][T28866] veth0_vlan: entered promiscuous mode
[  879.108000][T28866] veth1_vlan: entered promiscuous mode
[  879.192646][   T56] block nbd2: Possible stuck request ffff8880258b0000: control (read@0,1024B). Runtime 180 seconds
[  879.203720][   T56] block nbd2: Possible stuck request ffff8880258b0200: control (read@1024,1024B). Runtime 180 seconds
[  879.216131][   T56] block nbd2: Possible stuck request ffff8880258b0400: control (read@2048,1024B). Runtime 180 seconds
[  879.217875][T28866] veth0_macvtap: entered promiscuous mode
[  879.227278][   T56] block nbd2: Possible stuck request ffff8880258b0600: control (read@3072,1024B). Runtime 180 seconds
[  879.242498][T28866] veth1_macvtap: entered promiscuous mode
[  879.350559][T28866] batman_adv: batadv0: Interface activated: batadv_slave_0
[  879.396123][T28866] batman_adv: batadv0: Interface activated: batadv_slave_1
[  879.415261][   T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  879.434306][   T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  879.445231][   T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  879.469066][   T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  879.570937][T29181] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  879.598307][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.623800][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.707801][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  879.728341][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  879.847774][T29197] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6064'.
[  880.032146][T29206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6068'.
[  880.150422][T29215] netlink: 'syz.3.6069': attribute type 64 has an invalid length.
[  880.158457][   T52] Bluetooth: hci0: command tx timeout
[  880.328608][T29228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6074'.
[  880.460696][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6075'.
[  880.534933][T29226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6075'.
[  880.634675][T29226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6075'.
[  880.655978][T29226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6075'.
[  880.700020][T29247] netlink: 'syz.4.6077': attribute type 1 has an invalid length.
[  880.859156][T29257] netlink: 'syz.1.6081': attribute type 13 has an invalid length.
[  880.975816][T29272] IPVS: length: 243 != 8
[  881.031725][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms
[  881.039869][    C0] lec:lec_tx_timeout: lec0
[  881.319354][T29299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6089'.
[  881.534314][T29310] syzkaller1: entered promiscuous mode
[  881.539931][T29310] syzkaller1: entered allmulticast mode
[  882.057145][T29335] bond7: option arp_all_targets: invalid value (18446744073709551613)
[  882.106140][T29349] Bluetooth: MGMT ver 1.23
[  882.115153][T29335] bond7 (unregistering): Released all slaves
[  882.228036][T29351] netlink: 'syz.2.6105': attribute type 20 has an invalid length.
[  882.270406][ T6980] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  882.270909][T29351] netlink: 'syz.2.6105': attribute type 20 has an invalid length.
[  882.297023][ T6980] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  882.319388][ T6980] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  882.351463][ T6980] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  882.726099][T29378] bond0: entered promiscuous mode
[  882.770252][T29378] bond0: left promiscuous mode
[  882.982754][ T6980] bond0: (slave bond_slave_0): link status definitely down, disabling slave
[  883.343378][ T6656] lec:lec_start_xmit: lec0:No lecd attached
[  883.759294][T29442] netlink: 'syz.4.6136': attribute type 11 has an invalid length.
[  883.790869][T29442] netlink: 'syz.4.6136': attribute type 11 has an invalid length.
[  883.819351][T29442] __nla_validate_parse: 9 callbacks suppressed
[  883.819371][T29442] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6136'.
[  884.167192][T29461] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6139'.
[  884.312978][  T123] block nbd4: Possible stuck request ffff888025930000: control (read@0,1024B). Runtime 390 seconds
[  884.324257][  T123] block nbd4: Possible stuck request ffff888025930200: control (read@1024,1024B). Runtime 390 seconds
[  884.335440][  T123] block nbd4: Possible stuck request ffff888025930400: control (read@2048,1024B). Runtime 390 seconds
[  884.347131][  T123] block nbd4: Possible stuck request ffff888025930600: control (read@3072,1024B). Runtime 390 seconds
[  884.711973][T29473] netlink: 'syz.1.6147': attribute type 11 has an invalid length.
[  884.719954][T29473] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6147'.
[  884.749323][T29478] team_slave_0: entered promiscuous mode
[  884.755123][T29478] team_slave_1: entered promiscuous mode
[  884.762992][T29486] netlink: 'syz.5.6151': attribute type 1 has an invalid length.
[  884.770556][T29478] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  884.789448][T29478] team0: Device macvlan3 is already an upper device of the team interface
[  884.806768][T29486] netlink: 'syz.5.6151': attribute type 2 has an invalid length.
[  884.812225][T29478] team_slave_0: left promiscuous mode
[  884.820119][T29478] team_slave_1: left promiscuous mode
[  884.828395][T29486] netlink: 'syz.5.6151': attribute type 1 has an invalid length.
[  884.862880][T29486] netlink: 'syz.5.6151': attribute type 3 has an invalid length.
[  884.882294][T29486] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6151'.
[  884.903324][T29486] netlink: 'syz.5.6151': attribute type 1 has an invalid length.
[  884.917399][T29486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6151'.
[  884.929463][T29486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6151'.
[  884.939507][T29486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6151'.
[  884.960915][T29486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6151'.
[  884.977121][T29486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6151'.
[  885.008960][T29486] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6151'.
[  885.028644][T29495] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  885.264884][T29508] validate_nla: 96 callbacks suppressed
[  885.264908][T29508] netlink: 'syz.4.6157': attribute type 2 has an invalid length.
[  885.952154][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  885.979565][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  886.001392][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  886.031521][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  886.040305][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  886.218396][T29546] lo speed is unknown, defaulting to 1000
[  886.958916][T29582] netlink: 'syz.4.6178': attribute type 15 has an invalid length.
[  887.485747][T29603] netlink: 'syz.3.6186': attribute type 1 has an invalid length.
[  887.519069][T29603] netlink: 'syz.3.6186': attribute type 1 has an invalid length.
[  887.948626][T29546] chnl_net:caif_netlink_parms(): no params data found
[  888.073951][   T52] Bluetooth: hci5: command tx timeout
[  888.314962][T29546] bridge0: port 1(bridge_slave_0) entered blocking state
[  888.341335][T29546] bridge0: port 1(bridge_slave_0) entered disabled state
[  888.361839][T29546] bridge_slave_0: entered allmulticast mode
[  888.383354][T29546] bridge_slave_0: entered promiscuous mode
[  888.414458][T29546] bridge0: port 2(bridge_slave_1) entered blocking state
[  888.431369][T29546] bridge0: port 2(bridge_slave_1) entered disabled state
[  888.448940][T29546] bridge_slave_1: entered allmulticast mode
[  888.463364][T29546] bridge_slave_1: entered promiscuous mode
[  888.579957][T29546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  888.607093][T29546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  888.680721][T29546] team0: Port device team_slave_0 added
[  888.691825][T29546] team0: Port device team_slave_1 added
[  888.737590][T29668] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[  888.775745][T29546] batman_adv: batadv0: Adding interface: batadv_slave_0
[  888.783778][T29546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  888.813676][T29546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  888.828860][T29677] openvswitch: netlink: Key type 48 is out of range max 32
[  888.853043][T29677] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  888.884166][T29546] batman_adv: batadv0: Adding interface: batadv_slave_1
[  888.904207][T29546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  888.904648][T29681] netlink: 'syz.1.6205': attribute type 3 has an invalid length.
[  888.948069][T29546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  889.031241][    C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5690 ms
[  889.039367][    C0] lec:lec_tx_timeout: lec0
[  889.046971][T29648] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  889.218134][T29546] hsr_slave_0: entered promiscuous mode
[  889.226474][T29546] hsr_slave_1: entered promiscuous mode
[  889.235029][T29546] debugfs: 'hsr0' already exists in 'hsr'
[  889.242367][T29546] Cannot create hsr debugfs directory
[  889.644831][T29721] __nla_validate_parse: 38 callbacks suppressed
[  889.644853][T29721] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6220'.
[  889.672864][T29709] netlink: 212304 bytes leftover after parsing attributes in process `syz.1.6216'.
[  889.684830][T29723] netlink: 'syz.3.6219': attribute type 2 has an invalid length.
[  889.694117][T29709] openvswitch: netlink: Message has 6 unknown bytes.
[  889.706591][T29723] netlink: 244 bytes leftover after parsing attributes in process `syz.3.6219'.
[  889.775465][T29546] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  889.789162][T29546] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  889.791410][T29725] netlink: 194180 bytes leftover after parsing attributes in process `syz.4.6222'.
[  889.838832][T29730] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6223'.
[  889.922608][T29546] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  889.953128][T29546] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.097074][T29546] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  890.134143][T29546] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.152475][   T52] Bluetooth: hci5: command tx timeout
[  890.172091][T29745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6228'.
[  890.184553][T29744] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6229'.
[  890.216054][T29744] gretap0: entered promiscuous mode
[  890.268541][T29546] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  890.285848][T29546] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  890.317983][   T52] Bluetooth: hci0: command 0x0c1a tx timeout
[  890.372729][T29753] veth7: entered allmulticast mode
[  890.393642][T29755] syzkaller0: entered promiscuous mode
[  890.400614][T29755] syzkaller0: entered allmulticast mode
[  890.567451][T29762] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6236'.
[  890.687275][T29766] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6236'.
[  890.766586][T29546] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  890.805150][T29546] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  890.808854][T29774] xt_addrtype: ipv6 BLACKHOLE matching not supported
[  890.848817][T29546] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  890.867318][T29546] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  891.061001][T29819] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6241'.
[  892.178783][T29856] netlink: 'syz.1.6246': attribute type 39 has an invalid length.
[  892.231884][   T52] Bluetooth: hci5: command tx timeout
[  892.346553][T29863] netlink: 'syz.2.6248': attribute type 7 has an invalid length.
[  892.392727][T29870] netlink: 'syz.1.6251': attribute type 1 has an invalid length.
[  892.403541][T29871] netlink: 'syz.1.6251': attribute type 1 has an invalid length.
[  892.454847][T29875] netlink: 'syz.2.6252': attribute type 2 has an invalid length.
[  892.470364][T29875] netlink: 'syz.2.6252': attribute type 2 has an invalid length.
[  892.487862][T29875] netlink: 'syz.2.6252': attribute type 2 has an invalid length.
[  892.489982][T29873] bond8: entered promiscuous mode
[  892.502920][T29873] 8021q: adding VLAN 0 to HW filter on device bond8
[  892.654878][T29885] bond1 (unregistering): Released all slaves
[  893.715793][T29769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  893.973756][T29897] syzkaller0: entered promiscuous mode
[  893.979503][T29897] syzkaller0: entered allmulticast mode
[  894.216108][T29913] xt_CT: You must specify a L4 protocol and not use inversions on it
[  894.254345][T29913] netlink: 'syz.2.6263': attribute type 11 has an invalid length.
[  894.311136][   T52] Bluetooth: hci5: command tx timeout
[  894.387267][T29920] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  894.387877][T29546] 8021q: adding VLAN 0 to HW filter on device bond0
[  894.535878][T29546] 8021q: adding VLAN 0 to HW filter on device team0
[  894.599276][T29791] bridge0: port 1(bridge_slave_0) entered blocking state
[  894.606812][T29791] bridge0: port 1(bridge_slave_0) entered forwarding state
[  894.638564][T29929] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  894.664807][ T6991] bridge0: port 2(bridge_slave_1) entered blocking state
[  894.672051][ T6991] bridge0: port 2(bridge_slave_1) entered forwarding state
[  894.743551][T29935] __nla_validate_parse: 11 callbacks suppressed
[  894.743575][T29935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6267'.
[  894.772875][T29934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6268'.
[  894.796896][T29546] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  894.810517][T29935] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6267'.
[  894.826179][T29934] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  894.882583][T29938] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6269'.
[  894.923401][T29941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6269'.
[  895.009328][T29944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6270'.
[  895.072950][T29948] syz.1.6271: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  895.089676][T29948] CPU: 0 UID: 0 PID: 29948 Comm: syz.1.6271 Not tainted syzkaller #0 PREEMPT(full) 
[  895.089705][T29948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  895.089718][T29948] Call Trace:
[  895.089727][T29948]  <TASK>
[  895.089736][T29948]  dump_stack_lvl+0xe8/0x150
[  895.089770][T29948]  warn_alloc+0x249/0x340
[  895.089794][T29948]  ? stack_trace_save+0xa9/0x100
[  895.089825][T29948]  ? __pfx_warn_alloc+0x10/0x10
[  895.089856][T29948]  ? kasan_save_track+0x4f/0x80
[  895.089872][T29948]  ? kasan_save_track+0x3e/0x80
[  895.089888][T29948]  ? __kasan_kmalloc+0x93/0xb0
[  895.089907][T29948]  ? __kmalloc_cache_noprof+0x3d1/0x6e0
[  895.089925][T29948]  ? xskq_create+0x56/0x170
[  895.089943][T29948]  ? xsk_setsockopt+0x54c/0x990
[  895.089970][T29948]  ? do_sock_setsockopt+0x17c/0x1b0
[  895.089993][T29948]  ? __x64_sys_setsockopt+0x13d/0x1b0
[  895.090015][T29948]  ? do_syscall_64+0xe2/0xf80
[  895.090041][T29948]  __vmalloc_node_range_noprof+0x132/0x1730
[  895.090099][T29948]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  895.090129][T29948]  ? __kasan_kmalloc+0x93/0xb0
[  895.090157][T29948]  vmalloc_user_noprof+0xad/0xe0
[  895.090178][T29948]  ? xskq_create+0xbf/0x170
[  895.090199][T29948]  xskq_create+0xbf/0x170
[  895.090221][T29948]  xsk_init_queue+0xad/0x110
[  895.090255][T29948]  xsk_setsockopt+0x54c/0x990
[  895.090287][T29948]  ? __pfx_xsk_setsockopt+0x10/0x10
[  895.090326][T29948]  ? __pfx_aa_sk_perm+0x10/0x10
[  895.090357][T29948]  ? aa_sock_opt_perm+0xff/0x1a0
[  895.090386][T29948]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  895.090408][T29948]  ? __pfx_xsk_setsockopt+0x10/0x10
[  895.090440][T29948]  do_sock_setsockopt+0x17c/0x1b0
[  895.090473][T29948]  __x64_sys_setsockopt+0x13d/0x1b0
[  895.090506][T29948]  do_syscall_64+0xe2/0xf80
[  895.090527][T29948]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.090547][T29948]  ? trace_irq_disable+0x37/0x100
[  895.090567][T29948]  ? clear_bhb_loop+0x60/0xb0
[  895.090592][T29948]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  895.090611][T29948] RIP: 0033:0x7ff57099aeb9
[  895.090630][T29948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  895.090648][T29948] RSP: 002b:00007ff5717d8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  895.090671][T29948] RAX: ffffffffffffffda RBX: 00007ff570c15fa0 RCX: 00007ff57099aeb9
[  895.090686][T29948] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004
[  895.090699][T29948] RBP: 00007ff570a08c1f R08: 0000000000000004 R09: 0000000000000000
[  895.090712][T29948] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  895.090724][T29948] R13: 00007ff570c16038 R14: 00007ff570c15fa0 R15: 00007fffb235b008
[  895.090760][T29948]  </TASK>
[  895.090769][T29948] Mem-Info:
[  895.097686][T29950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6272'.
[  895.106587][T29948] active_anon:6902 inactive_anon:14 isolated_anon:0
[  895.106587][T29948]  active_file:2620 inactive_file:41165 isolated_file:0
[  895.106587][T29948]  unevictable:768 dirty:112 writeback:0
[  895.106587][T29948]  slab_reclaimable:13011 slab_unreclaimable:129869
[  895.106587][T29948]  mapped:29807 shmem:1404 pagetables:1594
[  895.106587][T29948]  sec_pagetables:0 bounce:0
[  895.106587][T29948]  kernel_misc_reclaimable:0
[  895.106587][T29948]  free:1286896 free_pcp:11811 free_cma:0
[  895.227318][T29950] syzkaller0: entered promiscuous mode
[  895.261523][T29948] Node 0 active_anon:28008kB inactive_anon:56kB active_file:10480kB inactive_file:164452kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119428kB dirty:448kB writeback:0kB shmem:4080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17988kB pagetables:6472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  895.269747][T29950] syzkaller0: entered allmulticast mode
[  895.342854][T29948] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  895.537454][T29948] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  895.562757][T29546] 8021q: adding VLAN 0 to HW filter on device batadv0
[  895.575314][T29948] lowmem_reserve[]: 0 2494 2495 2495 2495
[  895.582734][T29948] Node 0 DMA32 free:1232904kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27908kB inactive_anon:56kB active_file:10480kB inactive_file:164452kB unevictable:1536kB writepending:448kB zspages:0kB present:3129332kB managed:2554116kB mlocked:0kB bounce:0kB free_pcp:38868kB local_pcp:17484kB free_cma:0kB
[  895.623013][T29948] lowmem_reserve[]: 0 0 1 1 1
[  895.630885][T29948] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  895.673610][T29948] lowmem_reserve[]: 0 0 0 0 0
[  895.684288][T29948] Node 1 Normal free:3899220kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8352kB local_pcp:3712kB free_cma:0kB
[  895.723570][T29948] lowmem_reserve[]: 0 0 0 0 0
[  895.728361][T29948] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  895.743439][T29948] Node 0 DMA32: 8762*4kB (UM) 6660*8kB (UM) 3094*16kB (UM) 350*32kB (UM) 175*64kB (UME) 854*128kB (UME) 690*256kB (UM) 400*512kB (UM) 236*1024kB (UM) 42*2048kB (UM) 62*4096kB (UM) = 1232616kB
[  895.821570][T29948] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  895.860302][T29948] Node 1 Normal: 187*4kB (UME) 49*8kB (UME) 42*16kB (UME) 232*32kB (UME) 77*64kB (UM) 24*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (E) 946*4096kB (M) = 3899220kB
[  895.950492][T29948] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  895.981283][T29948] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  896.025840][T29948] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  896.046328][T29948] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  896.046960][T29977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  896.070406][T29948] 45166 total pagecache pages
[  896.078599][T29948] 0 pages in swap cache
[  896.102981][T29948] Free swap  = 124996kB
[  896.115483][T29948] Total swap = 124996kB
[  896.125761][T29948] 2097051 pages RAM
[  896.139613][T29948] 0 pages HighMem/MovableOnly
[  896.152615][T29977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  896.155741][T29948] 426624 pages reserved
[  896.197490][T29546] veth0_vlan: entered promiscuous mode
[  896.215180][T29948] 0 pages cma reserved
[  896.220953][T29546] veth1_vlan: entered promiscuous mode
[  896.342983][T29546] veth0_macvtap: entered promiscuous mode
[  896.366641][T29546] veth1_macvtap: entered promiscuous mode
[  896.420895][T29546] batman_adv: batadv0: Interface activated: batadv_slave_0
[  896.455803][T29546] batman_adv: batadv0: Interface activated: batadv_slave_1
[  896.488495][T30003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6283'.
[  896.546496][T29790] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  896.594870][T29790] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  896.703598][T30007] bond2: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  896.758507][T30007] bond2 (unregistering): Released all slaves
[  896.786998][T29790] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  896.797171][T29790] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  896.835057][T30016] netlink: 88 bytes leftover after parsing attributes in process `syz.2.6287'.
[  896.845408][T30016] netem: invalid attributes len -24
[  896.857168][T30016] netem: change failed
[  896.979219][T30027] sch_fq: defrate 0 ignored.
[  897.145491][T30036] netlink: 268 bytes leftover after parsing attributes in process `syz.4.6294'.
[  897.194603][T29787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  897.214124][T29787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  897.242688][T30041] xt_TCPMSS: Only works on TCP SYN packets
[  897.296637][ T6991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  897.304845][ T6991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  897.465094][T30056] netlink: 'syz.2.6299': attribute type 8 has an invalid length.
[  897.468139][T30050] x_tables: duplicate underflow at hook 1
[  897.505174][T30052] x_tables: unsorted underflow at hook 3
[  897.965421][T30078] netlink: 'syz.4.6308': attribute type 29 has an invalid length.
[  897.974151][T30078] netlink: 'syz.4.6308': attribute type 29 has an invalid length.
[  898.168665][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  898.180732][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  898.189897][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  898.198470][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  898.207001][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  898.419409][T30088] lo speed is unknown, defaulting to 1000
[  898.761667][T30115] block nbd5: not configured, cannot reconfigure
[  898.938902][T30123] 
: renamed from bond0 (while UP)
[  899.068631][T30129] delete_channel: no stack
[  899.117630][T30126] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  899.216024][T30139] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  899.230758][T30139] Bluetooth: MGMT ver 1.23
[  899.356748][T30088] chnl_net:caif_netlink_parms(): no params data found
[  899.410537][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806757e800: rx timeout, send abort
[  899.503700][T30088] bridge0: port 1(bridge_slave_0) entered blocking state
[  899.512474][T30088] bridge0: port 1(bridge_slave_0) entered disabled state
[  899.534000][T30088] bridge_slave_0: entered allmulticast mode
[  899.553347][T30088] bridge_slave_0: entered promiscuous mode
[  899.605654][T30088] bridge0: port 2(bridge_slave_1) entered blocking state
[  899.615556][T30088] bridge0: port 2(bridge_slave_1) entered disabled state
[  899.623453][T30088] bridge_slave_1: entered allmulticast mode
[  899.634469][T30152] 
[  899.636856][T30152] ======================================================
[  899.643868][T30152] WARNING: possible circular locking dependency detected
[  899.650890][T30152] syzkaller #0 Not tainted
[  899.655304][T30152] ------------------------------------------------------
[  899.662344][T30152] syz.5.6328/30152 is trying to acquire lock:
[  899.668421][T30152] ffffffff8fb284d8 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x40c/0xf90
[  899.677601][T30152] 
[  899.677601][T30152] but task is already holding lock:
[  899.684979][T30152] ffff888142782370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  899.694232][T30152] 
[  899.694232][T30152] which lock already depends on the new lock.
[  899.694232][T30152] 
[  899.704721][T30152] 
[  899.704721][T30152] the existing dependency chain (in reverse order) is:
[  899.713738][T30152] 
[  899.713738][T30152] -> #2 (&nr_node->node_lock){+...}-{3:3}:
[  899.721912][T30152]        _raw_spin_lock_bh+0x36/0x50
[  899.727217][T30152]        nr_rt_ioctl+0x215/0xf90
[  899.732161][T30152]        sock_do_ioctl+0x101/0x320
[  899.737357][T30152]        sock_ioctl+0x5c6/0x7f0
[  899.742238][T30152]        __se_sys_ioctl+0xfc/0x170
[  899.747534][T30152]        do_syscall_64+0xe2/0xf80
[  899.752556][T30152]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.758972][T30152] 
[  899.758972][T30152] -> #1 (nr_node_list_lock){+...}-{3:3}:
[  899.766804][T30152]        _raw_spin_lock_bh+0x36/0x50
[  899.772098][T30152]        nr_rt_device_down+0xbe/0x860
[  899.777474][T30152]        nr_device_event+0x137/0x150
[  899.782850][T30152]        notifier_call_chain+0x19d/0x3a0
[  899.788654][T30152]        netif_close_many+0x2ae/0x420
[  899.794113][T30152]        netif_close+0x160/0x220
[  899.799223][T30152]        dev_close+0x10a/0x220
[  899.803988][T30152]        bpq_device_event+0x377/0x6a0
[  899.809364][T30152]        notifier_call_chain+0x19d/0x3a0
[  899.814995][T30152]        netif_close_many+0x2ae/0x420
[  899.820455][T30152]        netif_close+0x160/0x220
[  899.825393][T30152]        dev_close+0x10a/0x220
[  899.830161][T30152]        bond_setup_by_slave+0x5f/0x3d0
[  899.835713][T30152]        bond_enslave+0x847/0x3c40
[  899.840851][T30152]        bond_do_ioctl+0x6ec/0x8d0
[  899.845961][T30152]        bond_siocdevprivate+0x19c/0x1f0
[  899.851594][T30152]        dev_ifsioc+0xba6/0x1280
[  899.856532][T30152]        dev_ioctl+0x84c/0x1150
[  899.861387][T30152]        sock_ioctl+0x75f/0x7f0
[  899.866264][T30152]        __se_sys_ioctl+0xfc/0x170
[  899.871380][T30152]        do_syscall_64+0xe2/0xf80
[  899.876403][T30152]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.882822][T30152] 
[  899.882822][T30152] -> #0 (nr_neigh_list_lock){+...}-{3:3}:
[  899.890767][T30152]        __lock_acquire+0x15a5/0x2cf0
[  899.896178][T30152]        lock_acquire+0x106/0x330
[  899.901218][T30152]        _raw_spin_lock_bh+0x36/0x50
[  899.906516][T30152]        nr_rt_ioctl+0x40c/0xf90
[  899.910672][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806757ec00: rx timeout, send abort
[  899.911465][T30152]        sock_do_ioctl+0x101/0x320
[  899.911485][T30152]        sock_ioctl+0x5c6/0x7f0
[  899.911510][T30152]        __se_sys_ioctl+0xfc/0x170
[  899.921685][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806757e800: abort rx timeout. Force session deactivation
[  899.924834][T30152]        do_syscall_64+0xe2/0xf80
[  899.949849][T30152]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  899.956281][T30152] 
[  899.956281][T30152] other info that might help us debug this:
[  899.956281][T30152] 
[  899.966525][T30152] Chain exists of:
[  899.966525][T30152]   nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock
[  899.966525][T30152] 
[  899.980360][T30152]  Possible unsafe locking scenario:
[  899.980360][T30152] 
[  899.987817][T30152]        CPU0                    CPU1
[  899.993183][T30152]        ----                    ----
[  899.998553][T30152]   lock(&nr_node->node_lock);
[  900.003322][T30152]                                lock(nr_node_list_lock);
[  900.010541][T30152]                                lock(&nr_node->node_lock);
[  900.017833][T30152]   lock(nr_neigh_list_lock);
[  900.022527][T30152] 
[  900.022527][T30152]  *** DEADLOCK ***
[  900.022527][T30152] 
[  900.030684][T30152] 2 locks held by syz.5.6328/30152:
[  900.035892][T30152]  #0: ffffffff8fb28538 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_ioctl+0x15f/0xf90
[  900.045400][T30152]  #1: ffff888142782370 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_ioctl+0x215/0xf90
[  900.055071][T30152] 
[  900.055071][T30152] stack backtrace:
[  900.060966][T30152] CPU: 1 UID: 0 PID: 30152 Comm: syz.5.6328 Not tainted syzkaller #0 PREEMPT(full) 
[  900.060985][T30152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  900.060995][T30152] Call Trace:
[  900.061003][T30152]  <TASK>
[  900.061013][T30152]  dump_stack_lvl+0xe8/0x150
[  900.061039][T30152]  print_circular_bug+0x2e1/0x300
[  900.061062][T30152]  check_noncircular+0x12e/0x150
[  900.061083][T30152]  __lock_acquire+0x15a5/0x2cf0
[  900.061114][T30152]  ? nr_rt_ioctl+0x40c/0xf90
[  900.061132][T30152]  lock_acquire+0x106/0x330
[  900.061151][T30152]  ? nr_rt_ioctl+0x40c/0xf90
[  900.061171][T30152]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  900.061189][T30152]  ? nr_rt_ioctl+0x40c/0xf90
[  900.061207][T30152]  _raw_spin_lock_bh+0x36/0x50
[  900.061229][T30152]  ? nr_rt_ioctl+0x40c/0xf90
[  900.061247][T30152]  nr_rt_ioctl+0x40c/0xf90
[  900.061270][T30152]  ? __pfx_nr_rt_ioctl+0x10/0x10
[  900.061293][T30152]  ? apparmor_capable+0x137/0x1a0
[  900.061317][T30152]  ? capable+0x88/0xe0
[  900.061339][T30152]  ? nr_ioctl+0x1b1/0x3b0
[  900.061356][T30152]  sock_do_ioctl+0x101/0x320
[  900.061371][T30152]  ? __pfx_sock_do_ioctl+0x10/0x10
[  900.061384][T30152]  ? do_futex+0x333/0x420
[  900.061408][T30152]  sock_ioctl+0x5c6/0x7f0
[  900.061430][T30152]  ? __pfx_sock_ioctl+0x10/0x10
[  900.061451][T30152]  ? __fget_files+0x2a/0x420
[  900.061466][T30152]  ? __fget_files+0x3a0/0x420
[  900.061481][T30152]  ? __fget_files+0x2a/0x420
[  900.061497][T30152]  ? bpf_lsm_file_ioctl+0x9/0x20
[  900.061515][T30152]  ? __pfx_sock_ioctl+0x10/0x10
[  900.061535][T30152]  __se_sys_ioctl+0xfc/0x170
[  900.061557][T30152]  do_syscall_64+0xe2/0xf80
[  900.061572][T30152]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.061587][T30152]  ? trace_irq_disable+0x37/0x100
[  900.061600][T30152]  ? clear_bhb_loop+0x60/0xb0
[  900.061617][T30152]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.061631][T30152] RIP: 0033:0x7f2af5f9aeb9
[  900.061646][T30152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  900.061659][T30152] RSP: 002b:00007f2af6dbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  900.061675][T30152] RAX: ffffffffffffffda RBX: 00007f2af6215fa0 RCX: 00007f2af5f9aeb9
[  900.061686][T30152] RDX: 0000000000000000 RSI: 00000000000089e2 RDI: 0000000000000004
[  900.061696][T30152] RBP: 00007f2af6008c1f R08: 0000000000000000 R09: 0000000000000000
[  900.061705][T30152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  900.061715][T30152] R13: 00007f2af6216038 R14: 00007f2af6215fa0 R15: 00007ffe32ab88b8
[  900.061732][T30152]  </TASK>
[  900.325453][T30088] bridge_slave_1: entered promiscuous mode
[  900.346694][T30088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  900.358699][T30088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  900.363217][   T31] INFO: task udevd:16952 blocked for more than 144 seconds.
[  900.385338][T30088] team0: Port device team_slave_0 added
[  900.393849][T30088] team0: Port device team_slave_1 added
[  900.412689][ T5841] Bluetooth: hci3: command tx timeout
[  900.417545][   T31]       Not tainted syzkaller #0
[  900.423529][    C0] vcan0: j1939_tp_rxtimer: 0xffff88806757ec00: abort rx timeout. Force session deactivation
[  900.439124][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  900.448646][   T31] task:udevd           state:D stack:20224 pid:16952 tgid:16952 ppid:5195   task_flags:0x400140 flags:0x00080002
[  900.461596][   T31] Call Trace:
[  900.464905][   T31]  <TASK>
[  900.467917][   T31]  __schedule+0x14ea/0x5050
[  900.473188][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  900.478169][   T31]  ? __pfx___schedule+0x10/0x10
[  900.483288][   T31]  ? schedule+0x90/0x360
[  900.487539][   T31]  schedule+0x164/0x360
[  900.492174][   T31]  io_schedule+0x7f/0xd0
[  900.496507][   T31]  folio_wait_bit_common+0x6d8/0xbc0
[  900.502033][   T31]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  900.507891][   T31]  ? __pfx_wake_page_function+0x10/0x10
[  900.513606][   T31]  ? __filemap_get_folio_mpol+0x7a9/0xb00
[  900.519344][   T31]  do_read_cache_folio+0x1ad/0x590
[  900.525126][   T31]  ? __pfx_blkdev_read_folio+0x10/0x10
[  900.530676][   T31]  read_part_sector+0xb6/0x2b0
[  900.536268][   T31]  adfspart_check_POWERTEC+0x92/0xef0
[  900.541202][T30158] sctp: [Deprecated]: syz.1.6327 (pid 30158) Use of int in maxseg socket option.
[  900.541202][T30158] Use struct sctp_assoc_value instead
[  900.542154][   T31]  ? __pfx_adfspart_check_ICS+0x10/0x10
[  900.562684][   T31]  ? __pfx_adfspart_check_POWERTEC+0x10/0x10
[  900.568709][   T31]  bdev_disk_changed+0x765/0x14c0
[  900.574406][   T31]  ? bdev_open+0xe0/0xd30
[  900.578755][   T31]  ? __pfx_bdev_disk_changed+0x10/0x10
[  900.584674][   T31]  blkdev_get_whole+0x380/0x510
[  900.589537][   T31]  bdev_open+0x31e/0xd30
[  900.593922][   T31]  blkdev_open+0x470/0x610
[  900.598454][   T31]  ? __pfx_blkdev_open+0x10/0x10
[  900.603550][   T31]  do_dentry_open+0x7ce/0x1420
[  900.608419][   T31]  vfs_open+0x3b/0x340
[  900.613006][   T31]  ? path_openat+0x346e/0x3e20
[  900.617811][   T31]  path_openat+0x3486/0x3e20
[  900.622561][   T31]  ? kmem_cache_alloc_noprof+0x370/0x6e0
[  900.628231][   T31]  ? getname_flags+0xb7/0x540
[  900.633418][   T31]  ? __pfx_path_openat+0x10/0x10
[  900.638929][   T31]  ? __lock_acquire+0x6b5/0x2cf0
[  900.644393][   T31]  do_filp_open+0x22d/0x490
[  900.648912][   T31]  ? __pfx_do_filp_open+0x10/0x10
[  900.654140][   T31]  ? _raw_spin_unlock+0x28/0x50
[  900.659038][   T31]  ? alloc_fd+0x64b/0x6c0
[  900.663625][   T31]  do_sys_openat2+0x12f/0x220
[  900.668324][   T31]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  900.674366][   T31]  ? __pfx_do_sys_openat2+0x10/0x10
[  900.679604][   T31]  ? rcu_is_watching+0x15/0xb0
[  900.684501][   T31]  __x64_sys_openat+0x138/0x170
[  900.689376][   T31]  do_syscall_64+0xe2/0xf80
[  900.693983][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.700147][   T31]  ? trace_irq_disable+0x37/0x100
[  900.705669][   T31]  ? clear_bhb_loop+0x60/0xb0
[  900.710350][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.716527][   T31] RIP: 0033:0x7fd7adca7407
[  900.721195][   T31] RSP: 002b:00007fff9f0f4740 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[  900.729717][   T31] RAX: ffffffffffffffda RBX: 00007fd7ae3f0880 RCX: 00007fd7adca7407
[  900.738182][   T31] RDX: 00000000000a0800 RSI: 000055c519868520 RDI: ffffffffffffff9c
[  900.746754][   T31] RBP: 000055c519867910 R08: 0000000000000000 R09: 0000000000000000
[  900.754932][   T31] R10: 0000000000000000 R11: 0000000000000202 R12: 000055c519881320
[  900.763392][   T31] R13: 000055c519875190 R14: 0000000000000000 R15: 000055c519881320
[  900.771454][   T31]  </TASK>
[  900.777052][   T31] INFO: lockdep is turned off.
[  900.785621][T30156] syzkaller0: entered promiscuous mode
[  900.792044][T30156] syzkaller0: entered allmulticast mode
[  900.800132][   T31] NMI backtrace for cpu 0
[  900.800151][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  900.800171][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  900.800182][   T31] Call Trace:
[  900.800190][   T31]  <TASK>
[  900.800188][T30088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  900.800198][   T31]  dump_stack_lvl+0xe8/0x150
[  900.800225][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  900.800248][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  900.800274][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  900.800298][   T31]  sys_info+0x135/0x170
[  900.800316][   T31]  watchdog+0xf90/0xfe0
[  900.800336][   T31]  ? watchdog+0x209/0xfe0
[  900.800356][   T31]  kthread+0x726/0x8b0
[  900.800376][   T31]  ? __pfx_watchdog+0x10/0x10
[  900.800393][   T31]  ? __pfx_kthread+0x10/0x10
[  900.800412][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  900.800428][   T31]  ? __pfx_kthread+0x10/0x10
[  900.800446][   T31]  ret_from_fork+0x51b/0xa40
[  900.800463][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  900.800477][   T31]  ? __switch_to+0xc82/0x1410
[  900.800499][   T31]  ? __pfx_kthread+0x10/0x10
[  900.800518][   T31]  ret_from_fork_asm+0x1a/0x30
[  900.800546][   T31]  </TASK>
[  900.800553][   T31] Sending NMI from CPU 0 to CPUs 1:
[  900.804850][T30088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  900.804879][T30088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  900.806959][T30088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  900.816303][    C1] NMI backtrace for cpu 1
[  900.816319][    C1] CPU: 1 UID: 0 PID: 30088 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  900.816338][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  900.816348][    C1] RIP: 0010:io_serial_in+0x77/0xc0
[  900.816373][    C1] Code: e8 de b3 92 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 7f 03 fb fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07
[  900.816386][    C1] RSP: 0018:ffffc9000be967f0 EFLAGS: 00000002
[  900.816403][    C1] RAX: 1ffffffff3466c00 RBX: 00000000000003fd RCX: 0000000000000000
[  900.816415][    C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020
[  900.816425][    C1] RBP: ffffffff9a336530 R08: ffff888140f68237 R09: 1ffff110281ed046
[  900.816437][    C1] R10: dffffc0000000000 R11: ffffffff8531c320 R12: dffffc0000000000
[  900.816449][    C1] R13: 0000000000000000 R14: ffffffff9a3362a0 R15: 0000000000000000
[  900.816459][    C1] FS:  00005555591ad500(0000) GS:ffff8881257f5000(0000) knlGS:0000000000000000
[  900.816473][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  900.816485][    C1] CR2: 0000563508d09168 CR3: 000000007d734000 CR4: 00000000003526f0
[  900.816502][    C1] Call Trace:
[  900.816509][    C1]  <TASK>
[  900.816517][    C1]  wait_for_lsr+0x1a1/0x2f0
[  900.816541][    C1]  serial8250_console_write+0x1348/0x1ba0
[  900.816566][    C1]  ? __pfx_serial8250_console_write+0x10/0x10
[  900.816583][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.816600][    C1]  ? lock_acquire+0x5f/0x330
[  900.816621][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  900.816639][    C1]  ? console_flush_all+0x123/0xb20
[  900.816656][    C1]  console_flush_all+0x718/0xb20
[  900.816674][    C1]  ? console_flush_all+0x123/0xb20
[  900.816692][    C1]  ? __pfx_console_flush_all+0x10/0x10
[  900.816711][    C1]  ? is_printk_cpu_sync_owner+0x32/0x40
[  900.816731][    C1]  console_unlock+0xd1/0x1c0
[  900.816747][    C1]  ? __pfx_console_unlock+0x10/0x10
[  900.816762][    C1]  ? vprintk_emit+0x1d0/0x560
[  900.816777][    C1]  ? vprintk_emit+0x455/0x560
[  900.816791][    C1]  ? vprintk_emit+0x2cf/0x560
[  900.816805][    C1]  ? vprintk_emit+0x2cf/0x560
[  900.816821][    C1]  vprintk_emit+0x485/0x560
[  900.816836][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  900.816855][    C1]  _printk+0xdd/0x130
[  900.816877][    C1]  ? __pfx__printk+0x10/0x10
[  900.816899][    C1]  ? do_raw_spin_unlock+0xf5/0x210
[  900.816917][    C1]  batadv_hardif_enable_interface+0x5b7/0xa10
[  900.816940][    C1]  batadv_meshif_slave_add+0x79/0x100
[  900.816960][    C1]  do_set_master+0x533/0x6d0
[  900.817000][    C1]  do_setlink+0x1018/0x4590
[  900.817020][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  900.817044][    C1]  ? __pfx_do_setlink+0x10/0x10
[  900.817062][    C1]  ? stack_trace_save+0xa9/0x100
[  900.817080][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  900.817097][    C1]  ? stack_trace_save+0xa9/0x100
[  900.817116][    C1]  ? stack_depot_save_flags+0x33/0x810
[  900.817134][    C1]  ? try_to_wake_up+0x7f4/0x1380
[  900.817156][    C1]  ? __mutex_trylock_common+0x158/0x260
[  900.817174][    C1]  ? __pfx___mutex_trylock_common+0x10/0x10
[  900.817191][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817206][    C1]  ? trace_contention_end+0x39/0x100
[  900.817222][    C1]  ? __mutex_lock+0x319/0x1300
[  900.817239][    C1]  ? __pfx___nla_validate_parse+0x10/0x10
[  900.817263][    C1]  ? rtnl_newlink+0x8a1/0x1be0
[  900.817288][    C1]  ? __pfx___mutex_lock+0x10/0x10
[  900.817308][    C1]  ? ns_capable+0x89/0xe0
[  900.817325][    C1]  rtnl_newlink+0x15a9/0x1be0
[  900.817341][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817359][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  900.817376][    C1]  ? arch_stack_walk+0xfb/0x150
[  900.817392][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  900.817409][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817425][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817441][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  900.817456][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817470][    C1]  ? __pfx___schedule+0x10/0x10
[  900.817484][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  900.817503][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  900.817518][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817533][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  900.817549][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817564][    C1]  ? unwind_next_frame+0xa5/0x23c0
[  900.817579][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817594][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  900.817611][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817626][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817640][    C1]  ? lock_release+0x4b/0x3a0
[  900.817659][    C1]  ? lock_release+0x4b/0x3a0
[  900.817680][    C1]  ? is_bpf_text_address+0x292/0x2b0
[  900.817696][    C1]  ? is_bpf_text_address+0x26/0x2b0
[  900.817714][    C1]  ? kernel_text_address+0xa5/0xe0
[  900.817733][    C1]  ? __kernel_text_address+0xd/0x30
[  900.817751][    C1]  ? unwind_get_return_address+0x4d/0x90
[  900.817767][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  900.817785][    C1]  ? arch_stack_walk+0xfb/0x150
[  900.817802][    C1]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  900.817818][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817833][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.817847][    C1]  ? lock_release+0x4b/0x3a0
[  900.817866][    C1]  ? bpf_lsm_capable+0x9/0x20
[  900.817884][    C1]  ? security_capable+0x7e/0x2c0
[  900.817904][    C1]  ? __pfx_rtnl_newlink+0x10/0x10
[  900.817920][    C1]  rtnetlink_rcv_msg+0x7d5/0xbe0
[  900.817938][    C1]  ? rtnetlink_rcv_msg+0x1b9/0xbe0
[  900.817955][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  900.817972][    C1]  ? __netlink_lookup+0xc6/0x8b0
[  900.817988][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.818004][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.818021][    C1]  netlink_rcv_skb+0x232/0x4b0
[  900.818037][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  900.818055][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  900.818078][    C1]  netlink_unicast+0x80f/0x9b0
[  900.818102][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  900.818122][    C1]  ? __alloc_skb+0x193/0x390
[  900.818140][    C1]  ? netlink_sendmsg+0x650/0xb40
[  900.818155][    C1]  ? skb_put+0x11b/0x210
[  900.818174][    C1]  netlink_sendmsg+0x813/0xb40
[  900.818189][    C1]  ? rcu_is_watching+0x15/0xb0
[  900.818207][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  900.818224][    C1]  ? __might_fault+0xaf/0x130
[  900.818246][    C1]  ? aa_sock_msg_perm+0xf1/0x1b0
[  900.818265][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  900.818289][    C1]  __sys_sendto+0x709/0x7a0
[  900.818308][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  900.818335][    C1]  ? fput_close_sync+0x11f/0x240
[  900.818353][    C1]  ? __pfx_fput_close_sync+0x10/0x10
[  900.818374][    C1]  __x64_sys_sendto+0xde/0x100
[  900.818393][    C1]  do_syscall_64+0xe2/0xf80
[  900.818410][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.818425][    C1]  ? trace_irq_disable+0x37/0x100
[  900.818440][    C1]  ? clear_bhb_loop+0x60/0xb0
[  900.818457][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  900.818472][    C1] RIP: 0033:0x7ff3adb5b78e
[  900.818486][    C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  900.818499][    C1] RSP: 002b:00007ffe8a9dc668 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  900.818516][    C1] RAX: ffffffffffffffda RBX: 00005555591ad500 RCX: 00007ff3adb5b78e
[  900.818527][    C1] RDX: 0000000000000028 RSI: 00007ff3ae944670 RDI: 0000000000000003
[  900.818538][    C1] RBP: 0000000000000001 R08: 00007ffe8a9dc6e4 R09: 000000000000000c
[  900.818548][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003
[  900.818559][    C1] R13: 0000000000000000 R14: 00007ff3ae944670 R15: 0000000000000000
[  900.818576][    C1]  </TASK>
[  900.827888][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  900.827908][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  900.827929][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  900.827940][   T31] Call Trace:
[  900.827950][   T31]  <TASK>
[  900.827959][   T31]  vpanic+0x1e0/0x670
[  900.827988][   T31]  panic+0xc5/0xd0
[  900.828008][   T31]  ? __pfx_panic+0x10/0x10
[  900.828028][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  900.828057][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  900.828083][   T31]  watchdog+0xfda/0xfe0
[  900.828104][   T31]  ? watchdog+0x209/0xfe0
[  900.828124][   T31]  kthread+0x726/0x8b0
[  900.828145][   T31]  ? __pfx_watchdog+0x10/0x10
[  900.828162][   T31]  ? __pfx_kthread+0x10/0x10
[  900.828182][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  900.828198][   T31]  ? __pfx_kthread+0x10/0x10
[  900.828217][   T31]  ret_from_fork+0x51b/0xa40
[  900.828236][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  900.828251][   T31]  ? __switch_to+0xc82/0x1410
[  900.828275][   T31]  ? __pfx_kthread+0x10/0x10
[  900.828303][   T31]  ret_from_fork_asm+0x1a/0x30
[  900.828332][   T31]  </TASK>
[  900.831335][   T31] Kernel Offset: disabled