last executing test programs:

3m50.833150827s ago: executing program 1 (id=2713):
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, 0x0)
socket$unix(0x1, 0x1, 0x0)
r3 = accept4(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r3)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) (fail_nth: 4)

3m49.832859042s ago: executing program 1 (id=2726):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x20004090)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0)
getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000380)=0x300)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r5=>0x0})
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r7 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r6, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x4000)
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4043}, 0x4040)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x70}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x810)
r10 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003200010000000000010800af0000010000"], 0x18}], 0x1}, 0x0)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async)
socket(0x10, 0x803, 0x0) (async)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x20004090) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
socket$nl_xfrm(0x10, 0x3, 0x6) (async)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, 0x0, 0x0) (async)
getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000000380)=0x300) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r6, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x4000) (async)
sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4043}, 0x4040) (async)
sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x70}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r10, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) (async)
sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080202000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001"], 0x38}}, 0x0) (async)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="180000003200010000000000010800af0000010000"], 0x18}], 0x1}, 0x0) (async)

3m49.69158285s ago: executing program 1 (id=2729):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x10084, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="0800260090150000080057"], 0x2c}}, 0x808)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38)
r4 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r4, 0x3)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
ioctl$sock_SIOCGSKNS(0xffffffffffffffff, 0x894c, &(0x7f0000000040)=0x2)
connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
socket$unix(0x1, 0x1, 0x0)
r7 = accept4(r4, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r7)
sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
sendmsg$IPVS_CMD_GET_SERVICE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7)

3m48.788201626s ago: executing program 1 (id=2743):
r0 = socket$inet6(0xa, 0x806, 0x0)
r1 = socket(0x1e, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'macvlan1\x00', &(0x7f0000000080)=@ethtool_cmd={0x19, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x5]}})
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4)
sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
listen(r3, 0x1)
r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, 0x0)
socket$unix(0x1, 0x1, 0x0)
r6 = accept4(r0, 0x0, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r6)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r9, 0x1, 0x4c, &(0x7f0000000000), 0x4)
recvmsg$unix(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [<r10=>0xffffffffffffffff]}}], 0x18}, 0x2000)
r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {0x7, 0x0, 0x8}}]}, &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xd, 0x10, r10, 0x8259d000)
sendmsg$IPVS_CMD_GET_SERVICE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRESHEX=r7, @ANYRES64=r2, @ANYBLOB="3b15c73f639b81143c23479dff1cc5f1ac803c136462492db2655a03a6d87be70d750014a6c4b0cbd8e8532b2e18ff68b6438b701b271168e9e3975e528f6d6b6e4c92e1bc9166817379dce00df6b161fe8cd996f5961dcb9d66912565b23fec2d7e59bd66225f8597030c4b985a8dd426a85f09477593c54ada3005db55795d5a36ffae46c7b7db", @ANYRESHEX=r10, @ANYRES8=0x0, @ANYRES16=r8, @ANYRES8=r10, @ANYRES16=r5], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x8000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x1, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x1c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0xfd}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0x5}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0xfb, 0x8}}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x20000000)
getsockopt$inet_buf(r6, 0x0, 0x2a, &(0x7f0000000380)=""/85, &(0x7f0000000400)=0x55)

3m47.771593326s ago: executing program 1 (id=2762):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x9, 0xc, 0x9, 0x1, 0x2, 0x10}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x3, 0x8, 0xacf0, 0x2, 0x1, 0x1, 0x1}}, {0x6, 0x2, [0x5e00]}}]}]}, 0x6c}}, 0x0) (fail_nth: 2)

3m47.44749011s ago: executing program 1 (id=2765):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x9, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/34, &(0x7f0000000180)=0x22)

3m43.728015693s ago: executing program 4 (id=2810):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
r3 = socket$packet(0x11, 0x2, 0x300)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0x1}, 0x1c)
syz_emit_ethernet(0x82, &(0x7f0000000740)={@local, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x2}, {0x8100, 0x4, 0x1, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "8dd327", 0x44, 0x2f, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x8001, {{0x5, 0x1, 0x2, 0x3, 0x0, 0x0, 0x1, 0x4}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x3, 0x3, 0x0, 0x1, 0x4, 0x3}, 0x2, {0x2, 0x1, 0x0, 0x1e, 0x0, 0x1, 0x0, 0x0, 0x1}}}}}}}}}, 0x0)
writev(r2, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

3m42.568201141s ago: executing program 4 (id=2812):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140))
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x12000}, 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="84000000", @ANYRES64=r0, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x24000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETTXFILTER(r4, 0x400454d1, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26, 0x0, 0x0, @void, @value}, 0x10)
r8 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c001080080008000a01010008000200", @ANYRES32, @ANYBLOB="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"], 0x30}}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff)
r9 = socket$kcm(0x10, 0x2, 0x4)
close(r9)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r9, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m40.4940869s ago: executing program 0 (id=2818):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x6, [@struct={0xe, 0x9, 0x0, 0x4, 0x1, 0xfff, [{0x5}, {0x3, 0x5, 0x80}, {0x6, 0x1, 0x3}, {0x6, 0x2, 0xef5}, {0x8, 0x4, 0x7ff}, {0x6, 0x5, 0x80000000}, {0xb, 0x4, 0xffff}, {0xb, 0x5, 0x9}, {0x0, 0x2, 0x400}]}]}, {0x0, [0x0, 0x41, 0x2e, 0x5f]}}, 0x0, 0x96, 0x0, 0x1, 0x1c17, 0x0, @void, @value}, 0x28)

3m40.4327504s ago: executing program 3 (id=2819):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='a', 0x1}, {0x0, 0x10}], 0x2)
socket$kcm(0x29, 0x7, 0x0)

3m40.394534165s ago: executing program 4 (id=2820):
socket(0x40000000015, 0x5, 0x0) (async)
r0 = socket(0x40000000015, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0xec, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x15}}}}]}]}, 0xec}}, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000980), 0xe)
setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10)

3m40.338542834s ago: executing program 4 (id=2821):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000ac0)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r3, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4)
sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000f00)=ANY=[@ANYRES32=r4, @ANYRES32=r0, @ANYBLOB="02"], 0x10)

3m40.267925525s ago: executing program 3 (id=2822):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0)
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x700, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010003000100100001800c0004800800020000000000100001"], 0x44}}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e20, @empty}, {0x2, 0x4e23, @multicast2}, 0x13, 0x0, 0x0, 0x0, 0x9, 0x0, 0x7fffffff, 0x8, 0x5})
r5 = socket(0x200000000000011, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r6=>0x0})
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, 0x0, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r6, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0)

3m40.265949572s ago: executing program 0 (id=2823):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000740), 0x4)
r2 = socket$inet6(0xa, 0x2, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r3=>0x0})
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@loopback, r3}, 0x14)
sendto$inet6(r2, &(0x7f0000000400)="800034ca269bb23c", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
socket$isdn_base(0x22, 0x3, 0x0) (async)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, 0x0) (async)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000740), 0x4) (async)
socket$inet6(0xa, 0x2, 0x3a) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async)
setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@loopback, r3}, 0x14) (async)
sendto$inet6(r2, &(0x7f0000000400)="800034ca269bb23c", 0x8, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async)

3m39.876699877s ago: executing program 0 (id=2825):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc010)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x48, 0x40}, {0x20, 0x1, 0x0, 0xfffff010}, {0x16, 0x7, 0x2, 0x6}]}, 0x10)
sendmmsg(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001040)="e7337703a4", 0x5}], 0x1}}], 0x1, 0x4c818)

3m39.846722465s ago: executing program 0 (id=2827):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_emit_ethernet(0xe6, &(0x7f0000000280)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@llc={0x4, {@snap={0xaa, 0xab, "97", "218087", 0x88fb, "dd4af445c4f2be3edc234ef1e1ba595fa685257b54a08ce2965e1454090f2f4a5c2d4889ce14449dfc75d2768a6696b891a072f46d2dfc302c427fafd6995760a113391a920bd3be43912e9f804149eee0717d2cbcb469b5f9c7b8f74c71a58de99c55aa25b06f3d849937e8a643109dd9604cbd055e55d656c994aeac3d91a125ed62178d04027006b1d39d350ed7ebf4e8b2b5b4cf05cf33b6592a802dbbf5c2b1f02e7802f948b79f0643638d3c51dcfdc12980205fdbc03f9d0ffe7c14455af26ab8e7a67276615d8f0e1e269026"}}}}}, &(0x7f0000000000)={0x0, 0x4, [0xf3d, 0x367, 0x1f4, 0x7d7]})
r1 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x6e21, 0xfffc, 0xa, 0x0, 0x10}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x2b}, 0x0, @in=@dev, 0x0, 0xbcfbddc4f0d79c8f}}, 0xe8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@ipv6_newroute={0x30, 0x18, 0x105, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}}, 0x0)
sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x78}, 0x0)

3m39.84548127s ago: executing program 4 (id=2828):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
getpeername$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r1, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x46}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000)
r2 = accept$unix(0xffffffffffffffff, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e)
recvfrom$unix(r2, &(0x7f0000000280)=""/52, 0x34, 0x2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x12, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0xdfd3}, [@printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @generic={0x7, 0x2, 0x8, 0x7, 0xb}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f00000003c0)='GPL\x00', 0x3, 0x11, &(0x7f0000000400)=""/17, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x3, 0xc, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0x1, r2], &(0x7f0000000500)=[{0x0, 0x2, 0x0, 0x7}, {0x4, 0x1, 0xe, 0xc}, {0x4, 0x2, 0x10, 0x9}, {0x3, 0x1, 0xb, 0x8}, {0x1, 0x5, 0x3, 0x5}, {0x0, 0x4, 0xc, 0x5}], 0x10, 0x9, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000002c0)='task_newtask\x00', r3, 0x0, 0x401}, 0x18)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), 0xffffffffffffffff)
sendmsg$NLBL_UNLABEL_C_STATICLIST(r4, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x805}, 0x20000000)
ioctl$F2FS_IOC_SEC_TRIM_FILE(r2, 0x4018f514, &(0x7f00000007c0)={0x1810, 0x400, 0x3})
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r4)
sendmsg$NLBL_UNLABEL_C_ACCEPT(r6, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x28, r7, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x20048000)
r8 = socket$l2tp(0x2, 0x2, 0x73)
setsockopt$inet_buf(r8, 0x0, 0x4, &(0x7f0000000940), 0x0)
r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000009c0), r6)
sendmsg$NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f0000000c00)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x1c0, r9, 0x100, 0x70bd27, 0x9, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x48, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x69f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x99a1ad2}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6523}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7b57}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742a321e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb83028c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x563}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xca8732c}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0xb1ae644bfdc5f95f}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x104, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ac5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6cbc2feb}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa9ed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd9c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2570}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3244}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2176}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb18d274}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3eba}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2aba845f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d7ce0ae}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x31ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7bca}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3e943abc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x16d57a58}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2e30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9bd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x412a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xac56}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x969f492}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3f99}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7853}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe5a4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x39feb7b4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x250e3723}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd73a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a1b53ff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x681a}]}]}]}, 0x1c0}}, 0x4)
r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x418200, 0x0)
ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000c80)={'veth0_to_hsr\x00', 0x1})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(r11, &(0x7f0000000ec0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d40)={0x108, r12, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0xec, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffa}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffff7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2c}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xeab}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xc0000}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x83b}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x10}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xb}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x800}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x108}}, 0x0)
getpeername$l2tp(r8, &(0x7f0000000f00)={0x2, 0x0, @broadcast}, &(0x7f0000000f40)=0x10)
sendto$inet(r8, &(0x7f0000000f80)="d95980504c911360b8a366b371f65b1b4a6f3effa1c240fa33205b9b993a653613a7c3a2e62b02a2c763b81cb43f9cf9847b0a37cb444707a55149548b3d013c311a2d5e2191a8b78cfbd1cfaaa9ad3a473dd282829bf832fa8424ba26d5fd373f47f8ed245fc6437cc8ea0471c2f69c0d2e5232727d8ad76dde5001f8738e0b05b38d834b7da51405bc584ec62576088cd829bdda7f0733c79621b39ef60039e73a89f25bb1e55bcd3fecd0305661ec98917b5160a883d1fbd622d6716c4cf6cddebf78795d757afecb2d3bf364696fdefc1a5974c239", 0xd7, 0x20024000, &(0x7f0000001080)={0x2, 0x4e22, @remote}, 0x10)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000010c0)=@gcm_256={{0x303}, "6a8aeb6ae2162fcc", "34d35d273de69119add6dc679746bf47d3f7d6c8de152cf5e9836daf0e6e9dec", "e363ec0d", "6d5db6e74e7781da"}, 0x38)
setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r11, 0x114, 0xa, &(0x7f0000001100), 0x1)
socket$nl_generic(0x10, 0x3, 0x10)

3m32.261365871s ago: executing program 2 (id=2832):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000008c0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050008000300"/18, @ANYRES32=r4, @ANYBLOB="0800050003000000"], 0x24}}, 0x0)
r5 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r6=>0x0})
r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
r8 = gettid()
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, <r9=>0x0}, &(0x7f0000000780)=0xc)
r10 = gettid()
getsockopt$inet_IP_IPSEC_POLICY(r7, 0x0, 0x10, &(0x7f0000000fc0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r11=>0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000800)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000940)={0x0, 0x0, <r12=>0x0}, &(0x7f0000000980)=0xc)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000009c0)=<r13=>0x0)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b00)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r14=>0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000a00)=0xe8)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000a40)={<r15=>0x0}, &(0x7f0000000c00)=0xc)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c40)=<r16=>0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c80)={0x0, 0x0, <r17=>0x0}, &(0x7f0000000cc0)=0xc)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000d00)=<r18=>0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000d40)=<r19=>0x0)
sendmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="ced88788c78da9cd0bf6ac4dfdca474f98be58b3530d3efe6bdbcef61a058279297ca7c46e132ee738dac5ad693b0dd73384665935fc1c0676da386df07ff594ad3831621ffbefe9f5173ca5009d611a09a85d7662d0316e759a401b068c6337eddce57d68142ebe71d803d64801b05238e7a8e189cfe009592c9c5719d98c35925145aea5f90d6c8dca1b2d8d3e4cc47fcf266cce62e04e73a8ed376a29307120bdbfb14f4faad1746f343d1385d6d0de2bb4888748c1e1a1bed9c592ab749672a7a1713601fe94290a0bc273c0dae7c5a21c9ef2ab461e7e7bac6034d003da8a86b1b8e86740", 0xe7}, {&(0x7f00000004c0)="a81f8a4766cad8e49d4bcdae84a0055f1f988a576bd7b2e7640796e9bbecba79dc356f258c1b6fcf3c1fd0c6ad501780e2cfe0ad3335bc26bfce88fc9c6d2ec22b8abbd40d373d8b96a8b2731a9c32648b6ab88d98ac52da703516bdfd0cff3dc482ae6a40566d4e178e2c95c9047b7c2d0eb4bdd343fd96fbf81735caea50c2f52ff155b04c87b9aec9e94ea1f18d5909712f104cbaafb0b08d07ca59c12806c8cdfb392f", 0xa5}, {&(0x7f0000000580)="18db40d307c01363e4bbbb3e07b0d2ac63b5ffb0d783e7342453b872efb3f62618de19e84215fa6d788f30207fd342f6bda4bcce6738cee5ce86a334bedddadb92dc500ce35f3d64d4146dbc7856616de10000492196845b11c2ae7b26e504b5e123bdb5b422db788d73b1cf87180d0cec0bb19e1fe7daaed45c72735613974f148c718ac49c456e65de9561b7953a93063f61e939ad24f079794a329d06f04ca7997fac97e8778a575dbaa4057c581f6d539ebfe39c1b2b677ec3d345e163b8262249de07a3548ff744f4f0520f2ef5d7de1cd563d5fa27c92ad9fc0c6b02554a4f06553336c51eb80f3473cedac92f7d1cdd1836d9cc", 0xf7}, {&(0x7f0000000680)="ac3ce87f3f160ae68a24d1d09c6074b94df0cedc08da5937d72fbcfdd74f09e4581d5911583023c586301e4c1e274f2be01ca9dd8fdba480f348a6b3edfe44c090e072b8bbead847749dd7c0646a3de7602f69512e1f8a38d55d79712959916153ba81f72588daaf62e098943e71937becde", 0x72}], 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="8d410b020c5c13078a56d4b8da08e60000000014", @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=0xee00, @ANYBLOB='\x00\x00\x00\x00'], 0xf8, 0x800}, 0x0)
r20 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r20, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r20, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
connect$phonet_pipe(r20, &(0x7f0000000340)={0x23, 0x7, 0x5, 0x6}, 0x10)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0080010}, 0xc, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00032bbd7000fcdbdf250600000008000300", @ANYRES32=r4, @ANYBLOB="0c009900040000002e000000"], 0x28}}, 0x4800)
sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=r4, @ANYRES32=r4, @ANYBLOB="28000e0080000000ffffffffffff080211000000080211000000000000004d34503115c18d320100080026006c09000008000c006400000008000d00000000000a00340002020202020200000800350000df00"], 0x74}}, 0x0)

3m32.19297469s ago: executing program 3 (id=2833):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)=0x5, 0x4)
recvmsg(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001280)=[{&(0x7f00000000c0)=""/3, 0x3}, {&(0x7f0000000100)=""/45, 0x2d}, {&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/248, 0xf8}], 0x5, &(0x7f0000001300)=""/173, 0xad}, 0x10020)
r0 = socket$inet6_dccp(0xa, 0x6, 0x0)
sendto$inet6(r0, &(0x7f0000001400)="be8876d3fb06c50818ba5a1d37a10fe05da0dbaf3dad9e153f58cb702267d12d579d48b6cb6bf9fa8d88bd3234fb54d18d5140d79007fa881d1739d0958bd7cc9304b887c9b997aa9613afc64c7338dcef7281edd2f7195661691a6662f43cc34ebfceb63df0b07944a78969957c47eaad", 0x71, 0x0, 0x0, 0x0)
r1 = bpf$ITER_CREATE(0x21, &(0x7f0000001480), 0x8)
getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000014c0)={<r2=>0x0, @in={{0x2, 0x4e23, @broadcast}}}, &(0x7f0000001580)=0x84)
getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000015c0)={0x0, 0x5, 0x25, 0x156a, <r3=>0x0}, &(0x7f0000001600)=0x10)
getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000001640)={r2, 0x10000, 0xffff7fff, 0x4, 0xb5, 0x1, 0x1, 0x0, {r3, @in6={{0xa, 0x4e21, 0x1000, @empty, 0x4}}, 0x8, 0x0, 0x401, 0x66d, 0x3}}, &(0x7f0000001700)=0xb0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000001740)={0x2, 'veth1_virt_wifi\x00', 0x4}, 0x18)
syz_emit_ethernet(0x15f, &(0x7f0000001780)={@remote, @empty, @void, {@ipv4={0x800, @udp={{0x4c, 0x4, 0x0, 0x2, 0x151, 0x66, 0x0, 0x9, 0x11, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x7c, 0x3, 0x3, [{@broadcast, 0x3}, {@empty, 0x4fb}, {@local, 0xfffffe01}, {@private=0xa010102, 0x5}, {@rand_addr=0x64010100, 0xfffffffd}, {@empty, 0x3}]}, @timestamp_addr={0x44, 0x4c, 0x93, 0x1, 0x8, [{@broadcast, 0x7}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2c}, {@private=0xa010102, 0x4}, {@broadcast, 0x80000000}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x6}, {@empty, 0xb}, {@empty, 0xfd}]}, @cipso={0x86, 0x74, 0x0, [{0x5, 0x6, "6c52c075"}, {0x1, 0x11, "5502be516e3e64dca4c9d476a237ec"}, {0x6, 0x11, "a122eef376cf53088aae6de027acca"}, {0x0, 0x9, "82e9700e83ce7a"}, {0x5, 0x9, "a9be920234c168"}, {0x7, 0x5, "a53439"}, {0x5, 0xf, "b6a465778ca0f32026e7da5bf3"}, {0x5, 0xa, "a2a513ab583a9e27"}, {0x1, 0xe, "48fcf9bfc7c172f66dd9d031"}, {0x7, 0x8, "daf632ca04cf"}]}, @lsrr={0x83, 0x23, 0xa1, [@broadcast, @empty, @private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast1, @multicast2]}]}}, {0x4e22, 0x4e21, 0x21, 0x0, @gue={{0x2, 0x1, 0x3, 0x9, 0x0, @val=0x80}, "0f1c37c8cc2de2967643d630a5a45a671f"}}}}}}, &(0x7f0000001900)={0x1, 0x2, [0x6e7, 0x73b, 0x36e, 0xb2f]})
ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000001940)={0x7fff, 0x7, 0x1, @random="1141baf81a5f", 'geneve1\x00'})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000001980)=0x10000, 0x4)
write$cgroup_subtree(r1, &(0x7f00000019c0)={[{0x2d, 'pids'}, {0x2b, 'freezer'}, {0x2d, 'rdma'}, {0x2d, 'perf_event'}, {0x2d, 'net'}, {0x2b, 'net_cls'}]}, 0x2f)
r5 = accept(r4, &(0x7f0000001a00)=@can, &(0x7f0000001a80)=0x80)
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000001ac0)={r3, @in6={{0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}}}, 0x84)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001b80)={'wpan0\x00'})
clock_gettime(0x0, &(0x7f0000001c00)={<r6=>0x0, <r7=>0x0})
ppoll(&(0x7f0000001bc0)=[{r0, 0x80}, {r4, 0x1000}, {r5, 0x4}, {r0, 0x8028}, {r1, 0x2000}], 0x5, &(0x7f0000001c40)={r6, r7+60000000}, &(0x7f0000001c80)={[0xc]}, 0x8)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d00), r1)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001d40)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000001f40)={&(0x7f0000001cc0), 0xc, &(0x7f0000001f00)={&(0x7f0000001d80)={0x150, r8, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x5d}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x175}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x170c}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_DURATION={0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15d}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x377}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000001}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x95}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27f}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x306}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x8004000)
ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000001f80))
sendto$inet6(r5, &(0x7f0000001fc0)="54a6c739d955c8689affcb2d92abef458e14fb745286a2ae535a77547f6886e2389254952ad1a78111cf527729d1d8ebd45fb79ef3938b4a1954bcf087e12b651458e33425b6f5bc2e2d93a1ee9e41c996bafee1efe4facf5966c15ab8ad5fe110892f8f81703d607b23cf5902afdbbc892bba6bf55eedf32dae2dec8194017260f6e6e439b550122e1048b850a52319107ee83110bc1ee01a3cfd37ac5bf81594322568", 0xa4, 0x8000, &(0x7f0000002080)={0xa, 0x4e21, 0x5, @private0, 0x2}, 0x1c)
r10 = socket(0x10, 0x800, 0x7)
ioctl$SIOCX25GCALLUSERDATA(r10, 0x89e4, &(0x7f00000020c0)={0x1b, "5110d9e3f78edce57812f4b1b74f2c6531c2433ec35cc690fc3f05a2069fe430e8ecacc8f24e8de7a49f658ace2bc3f68b25579be29a02d7380c2935b98b7a4d52bd73c670aac44bf67e961cb2d12a3976fab7b781c3f87418764c8c6a378ca1317a9ba1794ed80d6ce8bd6be1efa4c1f02c6c99b409aaaa7689fda2a8a181ee"})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000002180), r11)
r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002200), r11)
sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x68, r12, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0xb, 0x1, 'E\\{--.\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010102}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x84)

3m32.119894768s ago: executing program 2 (id=2834):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x20)
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESHEX], 0x24}}, 0x0)
recvmmsg$unix(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/27, 0x1b}, {&(0x7f00000007c0)=""/109, 0x6d}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000ac0)=""/116, 0x74}, {&(0x7f0000000d40)=""/139, 0x7f}], 0x9, 0x0, 0x3e}}], 0x1, 0x10000, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

3m32.107146618s ago: executing program 3 (id=2835):
socket$inet6(0xa, 0x3, 0x3)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="2f0003000000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r3, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x3f7, 0x8, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40000)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000026000000080007000000000018000180140002007465616d5f736c6176655f30"], 0x34}}, 0x4004080)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

3m32.105601737s ago: executing program 0 (id=2836):
r0 = socket$kcm(0x10, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164636173742d6c696e6b0000130007800800050000000000"], 0x38}}, 0x0)
setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000100)=0x1, 0x4)
connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48)
r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
listen(0xffffffffffffffff, 0x1ad72f7)
accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000)
recvmmsg(0xffffffffffffffff, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="5c00000011006bcc9e3be35c6e1700800000876c1d0000007ea60864160af36514001ac00ccbe0d66d92651a91b5e6003121b46f3f84c765f51aac9db0ca548ee50669ddd4733870f5c779251b115a44b0b0eefe9fb5ced46861b00d1eb20c6bb3ddaed3c1a8dcd8caa7d79c36f96b6c452a131fcc789160738e6cfb716fd3d919ddc02c5ac039b9ebd430d2f51b0f90b875768041a58b249eba0215c87dee8c01c965dc13606725c0a6b2ba3d4a20de8404b3af73a1c32dd76bc7a2e354d116328282a253018a25bac61701f863566ed8b2a52f90cda6d2be26ac696b504c", 0xdf}, {&(0x7f0000000100)="9b25af20af07241a63c3d9234521d167ed6b03ca231e3703d082cbfe1aaff26cbd0b5691fdd5b7308b9f84668f548d34c5f3aacebeae2bf1", 0x38}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0)

3m32.082062886s ago: executing program 2 (id=2837):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', <r1=>0x0})
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f0000000280)=0x40, 0x4)
sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=ANY=[@ANYBLOB="200000006a00010000000000000000000a00000000000000080001"], 0x20}}, 0x0)

3m32.027928393s ago: executing program 4 (id=2838):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4004804}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r2)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan0\x00'})
sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080080)
r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', <r5=>0x0})
r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8)
r7 = gettid()
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000)

3m31.764888873s ago: executing program 2 (id=2839):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58)
r2 = accept4(r1, 0x0, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x39}, @loopback, 0x2006, 0xfffd}})
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) (async)
setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100), 0x4)

3m31.764479121s ago: executing program 3 (id=2840):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f00000000c0)={'c', ' *:* ', 'rwm\x00'}, 0xa)
ioctl$BTRFS_IOC_QGROUP_LIMIT(r4, 0x8030942b, &(0x7f0000000000)={0x6b, {0x8, 0x6, 0xfffffffffffffff9, 0x9, 0x7}})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x9, 0xc, 0x9, 0x1, 0x2, 0x10}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x3, 0x8, 0xacf0, 0x2, 0x1, 0x1, 0x1}}, {0x6, 0x2, [0x5e00]}}]}]}, 0x6c}}, 0x0)

3m31.715145795s ago: executing program 0 (id=2841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x303, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xa}}}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r9, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r7, @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000080005000400000005000200fc0000000500060000000000"], 0x44}}, 0x0)
r10 = socket(0xa, 0x1, 0x0)
close(r10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x8, 0x0, &(0x7f0000003c00))
bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0xffffffffffffff39)

3m31.535917038s ago: executing program 3 (id=2842):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @link_local}, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x40000)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
syz_emit_ethernet(0x7c, &(0x7f0000000400)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0000e4", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x2}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="186000000500000000000000080000001848000003000000000000000000b7080000000000007b8af8ff000000f6b60800000c0000007b8af0ff00000000bfa1007191621a2d93b55009466c374f38000000000007010000ffbfa400000000000007040000f0ffffffb702000008000010182300006d1b6f65ec7b75b24dfed4034e3775f7dd35c01ab6fbff6800bc57f8bf94a547f6692c36085331427870abcd83f009b1", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xe, &(0x7f0000000200)=""/14, 0x41100, 0x47, '\x00', r5, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x45, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000380)=[0x1, 0x1, 0x1], &(0x7f00000003c0)=[{0x3, 0x4, 0x8, 0x9}, {0x4, 0x1, 0x10, 0xa}, {0x2, 0x5, 0x10, 0x8}, {0x4, 0x1, 0x9, 0x4}, {0x1, 0x2, 0xb, 0x3}], 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000611468000000000005000000000000009500000000000000779f9fa2e91cfa4af1ccc92c5a388253597a5af4a7db3b1ebf2645589098a327d63ecbd5e23c039b1c21acc73ea3ce5a35ff5c8d9aecbb8bbb1ce5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20400}, [@IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x0, 0x3, 0x2}, @IFLA_XDP_FLAGS, @IFLA_XDP_FD={0x0, 0x1, r6}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x1}, @IFLA_XDP_FD, @IFLA_XDP_EXPECTED_FD={0x0, 0x8, r7}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x8}]}, @IFLA_LINK={0x43, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}}, 0x0)

3m31.444334813s ago: executing program 2 (id=2843):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000005c0)="3504000040000511d25a35400c0002000200002037153e370c04018006041000450000002a560000e7ff00000000", 0x2e}, {&(0x7f0000000a40)="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"/1031, 0x407}], 0x2}, 0x10049014) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x98, 0x453, 0x10, 0x70bd26, 0x25dfdbff, "61877de9f379090b18fd1e096a130317459a31ca7854ecdc08c402e894e9f90651d00763f19055e93e6696967520430041794910aaa179369a21cde80f7253bcaa273bf2824a953ae99b51e30b06b427bb599f5abfa411240dbda133e0e795181a100feda51d97df458e98e18fd7f9dd5663af7cda65e7c3a498634735c1b7385bb24b586e4b", ["", "", ""]}, 0x98}, 0x1, 0x0, 0x0, 0x20000010}, 0x4c884) (async)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x1000, {}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8, 0x2, 0xffffffff}]}, 0x38}}, 0x0) (async)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c00018006000600800a0000100004"], 0x34}}, 0x0)

3m30.927222186s ago: executing program 2 (id=2844):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x3)
socket$caif_stream(0x25, 0x1, 0x3)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

3m12.126009526s ago: executing program 32 (id=2841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x303, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xa}}}, 0x24}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
close(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'})
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', <r9=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r9, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r7, @ANYRES16=r4, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000080005000400000005000200fc0000000500060000000000"], 0x44}}, 0x0)
r10 = socket(0xa, 0x1, 0x0)
close(r10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x8, 0x0, &(0x7f0000003c00))
bind$bt_hci(r10, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0xffffffffffffff39)

3m12.125923635s ago: executing program 33 (id=2844):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
close(0x3)
socket$caif_stream(0x25, 0x1, 0x3)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848290000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

3m12.124743876s ago: executing program 34 (id=2842):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x80, 0x6, @link_local}, 0x14)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x40, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x40000)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
syz_emit_ethernet(0x7c, &(0x7f0000000400)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "0000e4", 0x46, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x0, [0x0]}, {}, {}, {0x8, 0x88be, 0x2}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x1}}}}}}}}}, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="186000000500000000000000080000001848000003000000000000000000b7080000000000007b8af8ff000000f6b60800000c0000007b8af0ff00000000bfa1007191621a2d93b55009466c374f38000000000007010000ffbfa400000000000007040000f0ffffffb702000008000010182300006d1b6f65ec7b75b24dfed4034e3775f7dd35c01ab6fbff6800bc57f8bf94a547f6692c36085331427870abcd83f009b1", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0xe, &(0x7f0000000200)=""/14, 0x41100, 0x47, '\x00', r5, @flow_dissector=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x10, 0x45, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000380)=[0x1, 0x1, 0x1], &(0x7f00000003c0)=[{0x3, 0x4, 0x8, 0x9}, {0x4, 0x1, 0x10, 0xa}, {0x2, 0x5, 0x10, 0x8}, {0x4, 0x1, 0x9, 0x4}, {0x1, 0x2, 0xb, 0x3}], 0x10, 0x4, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000000611468000000000005000000000000009500000000000000779f9fa2e91cfa4af1ccc92c5a388253597a5af4a7db3b1ebf2645589098a327d63ecbd5e23c039b1c21acc73ea3ce5a35ff5c8d9aecbb8bbb1ce5"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[], 0x32600)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20400}, [@IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x0, 0x3, 0x2}, @IFLA_XDP_FLAGS, @IFLA_XDP_FD={0x0, 0x1, r6}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x1}, @IFLA_XDP_FD, @IFLA_XDP_EXPECTED_FD={0x0, 0x8, r7}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x0, 0x3, 0x8}]}, @IFLA_LINK={0x43, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}}, 0x0)

0s ago: executing program 5 (id=2845):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e)
syz_emit_ethernet(0x46, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65b5c8d9b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\b\x00', 0x10, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x83, 0x0, @val=0x300}}}}}}}}, 0x0)
r2 = socket(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r2, 0x29, 0xc8, &(0x7f0000000000)=0x1, 0x4)
r3 = socket(0xa, 0x3, 0x3a)
close(r3)
r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', <r7=>0x0})
r8 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(r8, 0x0, 0x60, 0x0, &(0x7f0000000f00))
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x6, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x3c}}, 0x10)
getsockopt$sock_int(r4, 0x1, 0xc, 0x0, &(0x7f0000000400))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

0000298 R09: 0000000000000000
[  158.910316][T10174] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000
[  158.910327][T10174] R13: 0000000000000000 R14: 00007f24083a5fa0 R15: 00007ffdb6310968
[  158.910355][T10174]  </TASK>
[  158.910361][T10174] Mem-Info:
[  159.278155][T10174] active_anon:4035 inactive_anon:0 isolated_anon:0
[  159.278155][T10174]  active_file:1387 inactive_file:38337 isolated_file:0
[  159.278155][T10174]  unevictable:768 dirty:81 writeback:0
[  159.278155][T10174]  slab_reclaimable:10727 slab_unreclaimable:113458
[  159.278155][T10174]  mapped:28420 shmem:1411 pagetables:910
[  159.278155][T10174]  sec_pagetables:0 bounce:0
[  159.278155][T10174]  kernel_misc_reclaimable:0
[  159.278155][T10174]  free:1314822 free_pcp:369 free_cma:0
[  159.285164][T10318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'.
[  159.372896][T10174] Node 0 active_anon:16040kB inactive_anon:0kB active_file:5548kB inactive_file:153276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113680kB dirty:320kB writeback:0kB shmem:4108kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11052kB pagetables:3140kB sec_pagetables:0kB all_unreclaimable? no
[  159.478392][T10174] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  159.514150][T10174] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  159.564393][T10329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'.
[  159.587772][T10174] lowmem_reserve[]: 0 2491 2491 0 0
[  159.593371][T10174] Node 0 DMA32 free:1344784kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:15996kB inactive_anon:0kB active_file:5548kB inactive_file:152712kB unevictable:1536kB writepending:320kB present:3129332kB managed:2551120kB mlocked:0kB bounce:0kB free_pcp:1316kB local_pcp:1084kB free_cma:0kB
[  159.658810][T10174] lowmem_reserve[]: 0 0 0 0 0
[  159.665115][T10174] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:564kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB
[  159.709311][T10174] lowmem_reserve[]: 0 0 0 0 0
[  159.714463][T10174] Node 1 Normal free:3900700kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  159.757193][T10174] lowmem_reserve[]: 0 0 0 0 0
[  159.761988][T10174] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  159.775835][T10174] Node 0 DMA32: 90*4kB (UME) 196*8kB (UME) 97*16kB (M) 107*32kB (UME) 264*64kB (UME) 383*128kB (UME) 250*256kB (UM) 180*512kB (UM) 85*1024kB (UM) 28*2048kB (UME) 237*4096kB (UM) = 1344120kB
[  159.829068][T10174] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  159.895015][T10174] Node 1 Normal: 213*4kB (UME) 59*8kB (UME) 47*16kB (UME) 199*32kB (UME) 99*64kB (UME) 29*128kB (UME) 15*256kB (UME) 7*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3900732kB
[  159.946363][T10340] syz_tun: Device is already in use.
[  159.970537][T10174] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  159.982869][T10174] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  159.995579][T10174] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  160.024772][T10174] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  160.041382][T10174] 41135 total pagecache pages
[  160.051565][T10174] 0 pages in swap cache
[  160.073889][T10174] Free swap  = 124996kB
[  160.078800][T10174] Total swap = 124996kB
[  160.085070][T10174] 2097051 pages RAM
[  160.092321][T10174] 0 pages HighMem/MovableOnly
[  160.102702][T10174] 427485 pages reserved
[  160.113942][T10174] 0 pages cma reserved
[  161.005294][T10365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1439'.
[  161.391771][T10374] netlink: 'syz.3.1442': attribute type 21 has an invalid length.
[  161.436222][T10374] netlink: 'syz.3.1442': attribute type 20 has an invalid length.
[  161.463583][T10374] IPv6: NLM_F_CREATE should be specified when creating new route
[  162.315476][T10413] IPv6: Can't replace route, no match found
[  162.499950][T10422] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1465'.
[  162.961240][T10442] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1472'.
[  163.109891][T10442] bridge0: port 3(gretap0) entered disabled state
[  163.720975][T10470] netlink: 'syz.0.1485': attribute type 13 has an invalid length.
[  163.750276][T10333] Set syz1 is full, maxelem 65536 reached
[  163.799890][T10470] bridge0: port 3(gretap0) entered blocking state
[  163.807421][T10470] bridge0: port 3(gretap0) entered forwarding state
[  163.884564][T10470] gretap0: refused to change device tx_queue_len
[  163.892312][T10470] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  164.199694][T10496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1496'.
[  164.330904][T10492] infiniband syz!: set down
[  164.349334][T10492] infiniband syz!: added team_slave_0
[  164.430513][T10508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1503'.
[  164.443269][T10492] RDS/IB: syz!: added
[  164.478158][T10492] smc: adding ib device syz! with port count 1
[  164.495334][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1502'.
[  164.505114][T10492] smc:    ib device syz! port 1 has pnetid 
[  165.053518][T10534] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1512'.
[  165.884961][T10564] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  166.179304][T10560] tipc: Resetting bearer <eth:syzkaller0>
[  168.074251][T10560] tipc: Disabling bearer <eth:syzkaller0>
[  168.093643][T10588] netlink: 'syz.1.1535': attribute type 21 has an invalid length.
[  168.101719][T10588] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1535'.
[  168.111509][T10592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1536'.
[  168.149638][T10592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1536'.
[  168.349115][T10604] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.471981][T10604] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.573043][T10604] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.698014][T10604] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.841105][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1554'.
[  168.870518][T10628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1554'.
[  168.967837][T10604] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.002896][T10604] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.046150][T10604] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.094319][T10604] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.168086][T10643] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1561'.
[  169.454942][T10662] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1571'.
[  169.740803][T10678] dummy0: entered promiscuous mode
[  169.788468][T10678] dummy0: left promiscuous mode
[  170.421926][T10709] atomic_op ffff888032069198 conn xmit_atomic 0000000000000000
[  170.453324][T10715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1597'.
[  170.663704][T10726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1600'.
[  170.705045][T10726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1600'.
[  170.742027][T10726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1600'.
[  170.752852][T10726] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1600'.
[  171.167057][T10746] batadv0: entered promiscuous mode
[  171.195457][T10746] macvtap1: entered promiscuous mode
[  171.200943][T10746] macvtap1: entered allmulticast mode
[  171.234850][T10746] batadv0: entered allmulticast mode
[  171.241332][T10746] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  171.305233][T10757] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1618'.
[  171.351917][T10758] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1617'.
[  171.999744][T10800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1639'.
[  172.031527][T10801] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1636'.
[  172.201527][T10812] IPv6: Can't replace route, no match found
[  173.354443][T10877] netlink: 'syz.2.1675': attribute type 7 has an invalid length.
[  173.991743][T10915] netlink: 'syz.1.1691': attribute type 20 has an invalid length.
[  174.120277][T10911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.131473][T10911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.143247][T10911] bond0 (unregistering): (slave macvlan0): Releasing backup interface
[  174.152079][T10911] veth1_vlan: left allmulticast mode
[  174.160981][T10911] bond0 (unregistering): Released all slaves
[  174.270637][T10922] bond_slave_0: entered promiscuous mode
[  174.276429][T10922] bond_slave_1: entered promiscuous mode
[  174.282121][T10922] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  174.305073][T10922] macsec1: entered promiscuous mode
[  174.310598][T10922] bond0: entered promiscuous mode
[  174.321744][T10922] macsec1: entered allmulticast mode
[  174.327699][T10922] bond0: entered allmulticast mode
[  174.340619][T10922] bond_slave_0: entered allmulticast mode
[  174.347754][T10922] bond_slave_1: entered allmulticast mode
[  174.354158][T10922] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  174.369144][T10922] syz_tun: entered allmulticast mode
[  174.385541][T10922] bond0: left allmulticast mode
[  174.395126][T10922] bond_slave_0: left allmulticast mode
[  174.415026][T10922] bond_slave_1: left allmulticast mode
[  174.428358][T10922] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  174.439867][T10922] syz_tun: left allmulticast mode
[  174.445496][T10922] bond0: left promiscuous mode
[  174.451381][T10922] bond_slave_0: left promiscuous mode
[  174.456922][T10922] bond_slave_1: left promiscuous mode
[  174.462415][T10922] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  174.496487][T10891] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  174.502763][T10896] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  174.888553][T10947] __nla_validate_parse: 7 callbacks suppressed
[  174.888572][T10947] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1700'.
[  175.432620][T10977] lo speed is unknown, defaulting to 1000
[  176.108139][T11000] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1720'.
[  176.172795][T11005] xt_NFQUEUE: number of queues (65532) out of range (got 66665)
[  176.232335][T11009] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1721'.
[  176.295997][T11011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1723'.
[  176.344931][T11011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1723'.
[  176.411033][T11024] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1722'.
[  176.673775][T11034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1725'.
[  176.890956][T11043] mac80211_hwsim hwsim7 syzkaller0: Caught tx_queue_len zero misconfig
[  176.916195][T11046] openvswitch: netlink: IPv4 tun info is not correct
[  176.989058][T11046] netlink: 'syz.1.1730': attribute type 12 has an invalid length.
[  177.004866][T11046] netlink: 'syz.1.1730': attribute type 29 has an invalid length.
[  177.021349][T11046] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1730'.
[  177.033944][ T5837] Bluetooth: hci4: link tx timeout
[  177.033999][T11046] netlink: 'syz.1.1730': attribute type 1 has an invalid length.
[  177.039724][ T5837] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa
[  177.074481][T11056] dccp_invalid_packet: pskb_may_pull failed
[  177.094966][T11046] netlink: 'syz.1.1730': attribute type 2 has an invalid length.
[  177.102931][T11046] netlink: 39 bytes leftover after parsing attributes in process `syz.1.1730'.
[  177.494196][T11074] netlink: 'syz.0.1739': attribute type 11 has an invalid length.
[  177.682662][T11090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1742'.
[  177.701397][T11090] netlink: 'syz.4.1742': attribute type 1 has an invalid length.
[  177.762833][T11090] 8021q: adding VLAN 0 to HW filter on device bond5
[  177.779590][T11092] bond5: (slave gretap1): making interface the new active one
[  177.791894][T11092] bond5: (slave gretap1): Enslaving as an active interface with an up link
[  178.084473][T11118] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.095099][T11118] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.175908][T11120] team0: Failed to send options change via netlink (err -105)
[  178.219098][T11120] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  178.242470][T11120] team0: Port device team_slave_1 removed
[  178.263812][T11118] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.291782][T11118] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.363823][T11118] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.380597][T11118] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.440952][T11118] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  178.451484][T11118] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.596763][T11118] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  178.637536][T11118] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.674046][T11118] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  178.699216][T11118] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.731664][T11118] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  178.740073][T11118] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.774446][T11118] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  178.799822][T11118] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.819284][T11143] netlink: 'syz.0.1760': attribute type 4 has an invalid length.
[  179.083818][ T5837] Bluetooth: hci4: command 0x0405 tx timeout
[  179.110910][T11166] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535)
[  179.121484][T11166] C: renamed from lo (while UP)
[  179.142979][T11168] netlink: 'syz.1.1770': attribute type 10 has an invalid length.
[  179.176574][T11166] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  179.216908][T11168] team0: Cannot enslave team device to itself
[  179.825469][T11215] IPv6: NLM_F_CREATE should be specified when creating new route
[  179.861039][T11218] openvswitch: netlink: Multiple metadata blocks provided
[  179.876533][T11220] netlink: 'syz.3.1787': attribute type 4 has an invalid length.
[  179.977036][T11229] __nla_validate_parse: 42 callbacks suppressed
[  179.977055][T11229] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1788'.
[  180.439657][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1799'.
[  180.669854][T11276] No such timeout policy "syz0"
[  181.011702][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'.
[  181.024161][T11291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'.
[  181.199028][T11300] netlink: 'syz.1.1807': attribute type 1 has an invalid length.
[  181.224866][T11256] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  181.231359][T11261] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  181.345869][T11309] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  181.489664][T11316] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1812'.
[  181.499247][T11316] smc: net device bond0 applied user defined pnetid S
[  181.784230][T11336] netlink: 'syz.1.1820': attribute type 10 has an invalid length.
[  181.812551][T11336] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  181.826103][T11336] batman_adv: batadv0: Removing interface: batadv_slave_0
[  181.837003][T11336] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link
[  182.047452][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'.
[  182.056876][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1824'.
[  182.581161][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1832'.
[  182.609776][T11373] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.662740][T11373] batadv0 (unregistering): left allmulticast mode
[  182.673046][T11378] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1831'.
[  182.725620][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1834'.
[  182.918577][T11347] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  182.947075][T11351] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  182.978272][T11397] netlink: 'syz.1.1839': attribute type 1 has an invalid length.
[  183.092263][T11397] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.156149][T11407] 8021q: adding VLAN 0 to HW filter on device bond1
[  183.163036][T11407] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address
[  183.185819][T11412] netlink: zone id is out of range
[  183.190983][T11412] netlink: zone id is out of range
[  183.195749][T11407] bond1: (slave wireguard1): Error -95 calling set_mac_address
[  183.210439][T11412] netlink: zone id is out of range
[  183.240660][T11412] netlink: zone id is out of range
[  183.257900][T11412] netlink: zone id is out of range
[  183.263157][T11412] netlink: zone id is out of range
[  183.271777][T11412] netlink: zone id is out of range
[  183.506610][T11429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  183.570845][T11438] x_tables: duplicate underflow at hook 1
[  183.667893][T11444] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767)
[  183.695325][T11444] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255
[  184.022199][T11467] x_tables: ip_tables: ipcomp match: only valid for protocol 108
[  184.979594][T11498] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.010560][T11501] syzkaller1: entered promiscuous mode
[  185.017276][T11501] syzkaller1: entered allmulticast mode
[  185.032816][T11505] netlink: 'syz.4.1871': attribute type 6 has an invalid length.
[  185.044905][T11505] __nla_validate_parse: 4 callbacks suppressed
[  185.044921][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1871'.
[  185.078718][T11501] netlink: 'syz.3.1869': attribute type 3 has an invalid length.
[  185.613394][T11543] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1882'.
[  185.670212][T11549] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1881'.
[  185.694478][T11548] IPv6: syztnl0: Disabled Multicast RS
[  185.889891][T11563] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1888'.
[  186.114864][ T5843] Bluetooth: hci4: command 0x0405 tx timeout
[  186.116347][T11575] Unknown options in mask 1f4
[  186.215863][T11584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1894'.
[  186.365404][T11590] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1895'.
[  186.369444][ T5845] Bluetooth: hci2: command 0x0406 tx timeout
[  186.374478][ T5843] Bluetooth: hci3: command 0x0406 tx timeout
[  186.380354][ T5147] Bluetooth: hci1: command 0x0406 tx timeout
[  186.496774][T11599] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1898'.
[  186.509461][T11596] macvlan3: entered promiscuous mode
[  186.515678][T11596] macvlan3: entered allmulticast mode
[  186.580131][T11605] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1898'.
[  186.653899][T11606] netlink: 'syz.3.1899': attribute type 1 has an invalid length.
[  186.667723][T11606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1899'.
[  187.094141][T11635] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1909'.
[  187.251852][T11648] team0: Port device team_slave_1 removed
[  187.701005][T11655] netlink: 'syz.3.1917': attribute type 10 has an invalid length.
[  187.725255][T11654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  187.726070][T11668] netlink: 'syz.4.1922': attribute type 10 has an invalid length.
[  187.927765][T11679] netlink: 'syz.4.1923': attribute type 1 has an invalid length.
[  188.907008][T11687] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  189.144042][T11755] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  189.639341][T11789] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0
[  189.783876][T11799] FAULT_INJECTION: forcing a failure.
[  189.783876][T11799] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  189.812759][T11799] CPU: 1 UID: 0 PID: 11799 Comm: syz.3.1964 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  189.812786][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  189.812796][T11799] Call Trace:
[  189.812801][T11799]  <TASK>
[  189.812808][T11799]  dump_stack_lvl+0x241/0x360
[  189.812835][T11799]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.812851][T11799]  ? __pfx__printk+0x10/0x10
[  189.812875][T11799]  ? __pfx_lock_release+0x10/0x10
[  189.812903][T11799]  should_fail_ex+0x40a/0x550
[  189.812925][T11799]  _copy_from_iter+0x1e9/0x1c20
[  189.812947][T11799]  ? __virt_addr_valid+0x183/0x530
[  189.812978][T11799]  ? __alloc_skb+0x28f/0x440
[  189.812999][T11799]  ? __pfx__copy_from_iter+0x10/0x10
[  189.813020][T11799]  ? __virt_addr_valid+0x183/0x530
[  189.813040][T11799]  ? __virt_addr_valid+0x183/0x530
[  189.813059][T11799]  ? __virt_addr_valid+0x45f/0x530
[  189.813081][T11799]  ? __phys_addr_symbol+0x2f/0x70
[  189.813100][T11799]  ? __check_object_size+0x47a/0x730
[  189.813127][T11799]  netlink_sendmsg+0x73d/0xcb0
[  189.813162][T11799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.813186][T11799]  ? aa_sock_msg_perm+0x91/0x160
[  189.813211][T11799]  ? __pfx_netlink_sendmsg+0x10/0x10
[  189.813231][T11799]  __sock_sendmsg+0x221/0x270
[  189.813253][T11799]  ____sys_sendmsg+0x52a/0x7e0
[  189.813283][T11799]  ? __pfx_____sys_sendmsg+0x10/0x10
[  189.813303][T11799]  ? __fget_files+0x2a/0x410
[  189.813323][T11799]  ? __fget_files+0x2a/0x410
[  189.813348][T11799]  __sys_sendmsg+0x269/0x350
[  189.813382][T11799]  ? __pfx___sys_sendmsg+0x10/0x10
[  189.813416][T11799]  ? do_sys_openat2+0x17a/0x1d0
[  189.813457][T11799]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  189.813478][T11799]  ? do_syscall_64+0x100/0x230
[  189.813500][T11799]  ? do_syscall_64+0xb6/0x230
[  189.813521][T11799]  do_syscall_64+0xf3/0x230
[  189.813540][T11799]  ? clear_bhb_loop+0x35/0x90
[  189.813564][T11799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.813582][T11799] RIP: 0033:0x7fb775b8cde9
[  189.813598][T11799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  189.813612][T11799] RSP: 002b:00007fb7769f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  189.813630][T11799] RAX: ffffffffffffffda RBX: 00007fb775da6080 RCX: 00007fb775b8cde9
[  189.813642][T11799] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  189.813652][T11799] RBP: 00007fb7769f7090 R08: 0000000000000000 R09: 0000000000000000
[  189.813662][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.813672][T11799] R13: 0000000000000001 R14: 00007fb775da6080 R15: 00007ffc688e4598
[  189.813698][T11799]  </TASK>
[  190.170445][T11809] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) !
[  190.201080][T11812] __nla_validate_parse: 3 callbacks suppressed
[  190.201100][T11812] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1968'.
[  190.333732][T11819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1970'.
[  190.611781][T11841] FAULT_INJECTION: forcing a failure.
[  190.611781][T11841] name failslab, interval 1, probability 0, space 0, times 0
[  190.624623][T11841] CPU: 0 UID: 0 PID: 11841 Comm: syz.1.1978 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  190.624638][T11841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  190.624645][T11841] Call Trace:
[  190.624650][T11841]  <TASK>
[  190.624655][T11841]  dump_stack_lvl+0x241/0x360
[  190.624680][T11841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  190.624696][T11841]  ? __pfx__printk+0x10/0x10
[  190.624728][T11841]  should_fail_ex+0x40a/0x550
[  190.624748][T11841]  should_failslab+0xac/0x100
[  190.624773][T11841]  ? skb_clone+0x20c/0x390
[  190.624787][T11841]  kmem_cache_alloc_noprof+0x70/0x380
[  190.624810][T11841]  skb_clone+0x20c/0x390
[  190.624828][T11841]  __netlink_deliver_tap+0x3cc/0x7f0
[  190.624857][T11841]  ? netlink_deliver_tap+0x2e/0x1b0
[  190.624877][T11841]  netlink_deliver_tap+0x19d/0x1b0
[  190.624898][T11841]  netlink_unicast+0x7c4/0x990
[  190.624925][T11841]  ? __pfx_netlink_unicast+0x10/0x10
[  190.624942][T11841]  ? __virt_addr_valid+0x45f/0x530
[  190.624964][T11841]  ? __phys_addr_symbol+0x2f/0x70
[  190.624985][T11841]  ? __check_object_size+0x47a/0x730
[  190.625011][T11841]  netlink_sendmsg+0x8e4/0xcb0
[  190.625043][T11841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.625067][T11841]  ? aa_sock_msg_perm+0x91/0x160
[  190.625093][T11841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  190.625112][T11841]  __sock_sendmsg+0x221/0x270
[  190.625134][T11841]  ____sys_sendmsg+0x52a/0x7e0
[  190.625166][T11841]  ? __pfx_____sys_sendmsg+0x10/0x10
[  190.625186][T11841]  ? __fget_files+0x2a/0x410
[  190.625208][T11841]  ? __fget_files+0x2a/0x410
[  190.625234][T11841]  __sys_sendmsg+0x269/0x350
[  190.625261][T11841]  ? __pfx___sys_sendmsg+0x10/0x10
[  190.625305][T11841]  ? do_sys_openat2+0x17a/0x1d0
[  190.625349][T11841]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  190.625372][T11841]  ? do_syscall_64+0x100/0x230
[  190.625395][T11841]  ? do_syscall_64+0xb6/0x230
[  190.625417][T11841]  do_syscall_64+0xf3/0x230
[  190.625436][T11841]  ? clear_bhb_loop+0x35/0x90
[  190.625460][T11841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.625480][T11841] RIP: 0033:0x7fc68c58cde9
[  190.625495][T11841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  190.625508][T11841] RSP: 002b:00007fc68d473038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  190.625527][T11841] RAX: ffffffffffffffda RBX: 00007fc68c7a5fa0 RCX: 00007fc68c58cde9
[  190.625539][T11841] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  190.625548][T11841] RBP: 00007fc68d473090 R08: 0000000000000000 R09: 0000000000000000
[  190.625558][T11841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  190.625567][T11841] R13: 0000000000000000 R14: 00007fc68c7a5fa0 R15: 00007ffd0a62f798
[  190.625594][T11841]  </TASK>
[  190.914941][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1978'.
[  191.088177][T11864] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1982'.
[  191.143045][T11859] netdevsim netdevsim0: Direct firmware load for  failed with error -2
[  191.175153][T11859] netdevsim netdevsim0: Falling back to sysfs fallback for: 
[  191.272572][T11877] netlink: 'syz.1.1985': attribute type 4 has an invalid length.
[  191.287551][T11872] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1985'.
[  191.407611][T11884] netlink: 1036 bytes leftover after parsing attributes in process `syz.4.1989'.
[  191.417325][T11884] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  191.641250][T11898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1993'.
[  191.808250][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1998'.
[  192.181273][T11932] xt_CT: No such helper "snmp"
[  192.194586][T11927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2003'.
[  192.297420][T11937] set match dimension is over the limit!
[  192.336890][T11941] netlink: 'syz.3.2006': attribute type 5 has an invalid length.
[  192.358763][T11944] IPv6: sit2: Disabled Multicast RS
[  192.425483][T11945] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2009'.
[  192.780567][T11967] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  192.903744][T11973] netlink: 'syz.2.2020': attribute type 5 has an invalid length.
[  193.010473][T11981] netlink: 'syz.3.2023': attribute type 1 has an invalid length.
[  193.169507][T11989] FAULT_INJECTION: forcing a failure.
[  193.169507][T11989] name failslab, interval 1, probability 0, space 0, times 0
[  193.215237][T11989] CPU: 1 UID: 0 PID: 11989 Comm: syz.2.2027 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  193.215263][T11989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  193.215273][T11989] Call Trace:
[  193.215279][T11989]  <TASK>
[  193.215286][T11989]  dump_stack_lvl+0x241/0x360
[  193.215310][T11989]  ? __pfx_dump_stack_lvl+0x10/0x10
[  193.215328][T11989]  ? __pfx__printk+0x10/0x10
[  193.215351][T11989]  ? __kmalloc_noprof+0xb5/0x4c0
[  193.215368][T11989]  ? __pfx___might_resched+0x10/0x10
[  193.215391][T11989]  should_fail_ex+0x40a/0x550
[  193.215414][T11989]  should_failslab+0xac/0x100
[  193.215439][T11989]  __kmalloc_noprof+0xdd/0x4c0
[  193.215455][T11989]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  193.215479][T11989]  genl_family_rcv_msg_attrs_parse+0xa3/0x290
[  193.215505][T11989]  genl_rcv_msg+0x802/0xec0
[  193.215531][T11989]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.215575][T11989]  ? __pfx_lock_acquire+0x10/0x10
[  193.215594][T11989]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  193.215611][T11989]  ? __pfx_nl80211_get_station+0x10/0x10
[  193.215626][T11989]  ? __pfx_nl80211_post_doit+0x10/0x10
[  193.215645][T11989]  ? __pfx___might_resched+0x10/0x10
[  193.215672][T11989]  netlink_rcv_skb+0x1e3/0x430
[  193.215695][T11989]  ? __pfx_genl_rcv_msg+0x10/0x10
[  193.215716][T11989]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  193.215750][T11989]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  193.215785][T11989]  genl_rcv+0x28/0x40
[  193.215802][T11989]  netlink_unicast+0x7f6/0x990
[  193.215831][T11989]  ? __pfx_netlink_unicast+0x10/0x10
[  193.215849][T11989]  ? __virt_addr_valid+0x45f/0x530
[  193.215871][T11989]  ? __phys_addr_symbol+0x2f/0x70
[  193.215891][T11989]  ? __check_object_size+0x47a/0x730
[  193.215919][T11989]  netlink_sendmsg+0x8e4/0xcb0
[  193.215953][T11989]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.215992][T11989]  ? aa_sock_msg_perm+0x91/0x160
[  193.216018][T11989]  ? __pfx_netlink_sendmsg+0x10/0x10
[  193.216038][T11989]  __sock_sendmsg+0x221/0x270
[  193.216061][T11989]  ____sys_sendmsg+0x52a/0x7e0
[  193.216091][T11989]  ? __pfx_____sys_sendmsg+0x10/0x10
[  193.216110][T11989]  ? __fget_files+0x2a/0x410
[  193.216129][T11989]  ? __fget_files+0x2a/0x410
[  193.216154][T11989]  __sys_sendmsg+0x269/0x350
[  193.216179][T11989]  ? __pfx___sys_sendmsg+0x10/0x10
[  193.216211][T11989]  ? do_sys_openat2+0x17a/0x1d0
[  193.216255][T11989]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  193.216278][T11989]  ? do_syscall_64+0x100/0x230
[  193.216300][T11989]  ? do_syscall_64+0xb6/0x230
[  193.216321][T11989]  do_syscall_64+0xf3/0x230
[  193.216340][T11989]  ? clear_bhb_loop+0x35/0x90
[  193.216363][T11989]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  193.216382][T11989] RIP: 0033:0x7f7ab238cde9
[  193.216398][T11989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  193.216411][T11989] RSP: 002b:00007f7ab325f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  193.216430][T11989] RAX: ffffffffffffffda RBX: 00007f7ab25a5fa0 RCX: 00007f7ab238cde9
[  193.216442][T11989] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  193.216452][T11989] RBP: 00007f7ab325f090 R08: 0000000000000000 R09: 0000000000000000
[  193.216461][T11989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.216471][T11989] R13: 0000000000000000 R14: 00007f7ab25a5fa0 R15: 00007ffc7f969058
[  193.216498][T11989]  </TASK>
[  193.833996][T12014] xt_time: unknown flags 0x4
[  194.074268][T12032] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  194.516676][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  194.731547][T12081] lo speed is unknown, defaulting to 1000
[  195.260002][T12097] netlink: 'syz.2.2059': attribute type 10 has an invalid length.
[  195.278944][T12096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  195.438619][T12112] netlink: 'syz.0.2062': attribute type 12 has an invalid length.
[  195.566234][T12115] netlink: 'syz.0.2063': attribute type 21 has an invalid length.
[  195.863691][T12123] netlink: 'syz.3.2066': attribute type 10 has an invalid length.
[  195.878289][T12123] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.904400][T12123] €: (slave batadv0): Enslaving as an active interface with an up link
[  195.927129][T12126] __nla_validate_parse: 6 callbacks suppressed
[  195.927147][T12126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2067'.
[  195.955568][T12128] macsec0: entered promiscuous mode
[  195.965149][T12129] veth1_macvtap: entered promiscuous mode
[  195.981349][T12129] macsec0: left promiscuous mode
[  196.085770][T12136] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2071'.
[  196.095182][T12136] nbd: illegal input index 61504
[  196.246034][T12147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2074'.
[  254.446842][    T9] IPVS: starting estimator thread 0...
[  254.471040][T12174] netlink: 'syz.4.2081': attribute type 10 has an invalid length.
[  254.496021][T12174] vlan0: entered allmulticast mode
[  254.507313][T12174] veth0_vlan: entered allmulticast mode
[  254.531717][T12174] team0: Port device vlan0 added
[  254.554849][T12173] IPVS: using max 24 ests per chain, 57600 per kthread
[  254.631505][T12182] bond2: entered promiscuous mode
[  254.637178][T12182] bond2: entered allmulticast mode
[  254.642967][T12182] 8021q: adding VLAN 0 to HW filter on device bond2
[  254.823445][T12196] xt_nat: multiple ranges no longer supported
[  254.833907][T12196] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  254.903538][T12199] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2088'.
[  254.934072][T12199] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2088'.
[  254.953661][T12199] netlink: 1000 bytes leftover after parsing attributes in process `syz.3.2088'.
[  254.964382][T12206] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2092'.
[  255.087322][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'.
[  255.106498][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2094'.
[  255.117078][T12183] netlink: 'syz.0.2083': attribute type 10 has an invalid length.
[  255.131087][T12181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.343342][T12232] netlink: 'syz.2.2102': attribute type 2 has an invalid length.
[  255.351490][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'.
[  255.598334][T12244] netlink: 'syz.1.2106': attribute type 1 has an invalid length.
[  255.756497][T12259] bond_slave_0: entered promiscuous mode
[  255.762243][T12259] bond_slave_1: entered promiscuous mode
[  255.768060][T12259] batadv0: entered promiscuous mode
[  255.825273][T12259] bond_slave_0: left promiscuous mode
[  255.830748][T12259] bond_slave_1: left promiscuous mode
[  255.836444][T12259] batadv0: left promiscuous mode
[  255.958740][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  256.206147][T12283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2120'.
[  256.251296][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2122'.
[  256.424384][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2125'.
[  256.647456][T12316] ax25_connect(): syz.0.2130 uses autobind, please contact jreuter@yaina.de
[  256.691450][T12308] netlink: 'syz.2.2126': attribute type 10 has an invalid length.
[  256.703454][T12307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  257.010440][T12343] FAULT_INJECTION: forcing a failure.
[  257.010440][T12343] name failslab, interval 1, probability 0, space 0, times 0
[  257.028797][T12343] CPU: 1 UID: 0 PID: 12343 Comm: syz.1.2139 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  257.028823][T12343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  257.028833][T12343] Call Trace:
[  257.028840][T12343]  <TASK>
[  257.028848][T12343]  dump_stack_lvl+0x241/0x360
[  257.028875][T12343]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.028893][T12343]  ? __pfx__printk+0x10/0x10
[  257.028918][T12343]  ? __kmalloc_node_noprof+0xb9/0x4d0
[  257.028937][T12343]  ? __pfx___might_resched+0x10/0x10
[  257.028963][T12343]  should_fail_ex+0x40a/0x550
[  257.028986][T12343]  should_failslab+0xac/0x100
[  257.029011][T12343]  __kmalloc_node_noprof+0xe1/0x4d0
[  257.029028][T12343]  ? __kasan_kmalloc+0x98/0xb0
[  257.029047][T12343]  ? __kvmalloc_node_noprof+0x72/0x190
[  257.029072][T12343]  __kvmalloc_node_noprof+0x72/0x190
[  257.029093][T12343]  page_pool_create_percpu+0x2e8/0xa90
[  257.029122][T12343]  __veth_napi_enable_range+0x1cf/0x820
[  257.029153][T12343]  ? __pfx___veth_napi_enable_range+0x10/0x10
[  257.029187][T12343]  ? netif_napi_add_weight_locked+0xa47/0xda0
[  257.029213][T12343]  veth_napi_enable_range+0xf7/0x200
[  257.029240][T12343]  veth_set_features+0x1d1/0x2b0
[  257.029259][T12343]  ? __pfx_veth_set_features+0x10/0x10
[  257.029280][T12343]  __netdev_update_features+0x9fc/0x1980
[  257.029315][T12343]  ? __pfx___netdev_update_features+0x10/0x10
[  257.029347][T12343]  ? __pfx___might_resched+0x10/0x10
[  257.029366][T12343]  ? __might_fault+0xaa/0x120
[  257.029383][T12343]  ? trace_contention_end+0x3c/0x120
[  257.029400][T12343]  ? __pfx_lock_release+0x10/0x10
[  257.029421][T12343]  ? aa_get_newest_label+0xff/0x6f0
[  257.029446][T12343]  ? __might_fault+0xaa/0x120
[  257.029471][T12343]  ethtool_set_one_feature+0x2d6/0x340
[  257.029495][T12343]  ? __pfx_ethtool_set_one_feature+0x10/0x10
[  257.029516][T12343]  ? bpf_lsm_capable+0x9/0x10
[  257.029533][T12343]  ? security_capable+0x7e/0x2d0
[  257.029559][T12343]  dev_ethtool+0x1605/0x1bc0
[  257.029588][T12343]  ? __pfx_dev_ethtool+0x10/0x10
[  257.029606][T12343]  ? tomoyo_path_number_perm+0x679/0x860
[  257.029638][T12343]  ? dev_load+0x21/0x1f0
[  257.029657][T12343]  dev_ioctl+0x785/0x1340
[  257.029677][T12343]  sock_do_ioctl+0x240/0x460
[  257.029702][T12343]  ? __pfx_sock_do_ioctl+0x10/0x10
[  257.029742][T12343]  sock_ioctl+0x626/0x8e0
[  257.029763][T12343]  ? __pfx_sock_ioctl+0x10/0x10
[  257.029783][T12343]  ? __fget_files+0x2a/0x410
[  257.029803][T12343]  ? __fget_files+0x2a/0x410
[  257.029825][T12343]  ? __pfx_sock_ioctl+0x10/0x10
[  257.029852][T12343]  __se_sys_ioctl+0xf5/0x170
[  257.029874][T12343]  do_syscall_64+0xf3/0x230
[  257.029895][T12343]  ? clear_bhb_loop+0x35/0x90
[  257.029919][T12343]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.029939][T12343] RIP: 0033:0x7fc68c58cde9
[  257.029955][T12343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.029968][T12343] RSP: 002b:00007fc68d473038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  257.029987][T12343] RAX: ffffffffffffffda RBX: 00007fc68c7a5fa0 RCX: 00007fc68c58cde9
[  257.029999][T12343] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 0000000000000003
[  257.030010][T12343] RBP: 00007fc68d473090 R08: 0000000000000000 R09: 0000000000000000
[  257.030020][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.030030][T12343] R13: 0000000000000000 R14: 00007fc68c7a5fa0 R15: 00007ffd0a62f798
[  257.030057][T12343]  </TASK>
[  257.030133][T12343] page_pool_create_percpu() gave up with errno -12
[  257.138293][T12349] FAULT_INJECTION: forcing a failure.
[  257.138293][T12349] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  257.396267][T12343] veth0_to_team: set_features() failed (-12); wanted 0x000061164fdd49e9, left 0x000061164fdd09e9
[  257.407854][T12349] CPU: 1 UID: 0 PID: 12349 Comm: syz.0.2141 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  257.407878][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  257.407889][T12349] Call Trace:
[  257.407895][T12349]  <TASK>
[  257.407902][T12349]  dump_stack_lvl+0x241/0x360
[  257.407927][T12349]  ? __pfx_dump_stack_lvl+0x10/0x10
[  257.407945][T12349]  ? __pfx__printk+0x10/0x10
[  257.407970][T12349]  ? __pfx_lock_release+0x10/0x10
[  257.407998][T12349]  should_fail_ex+0x40a/0x550
[  257.408021][T12349]  _copy_from_iter+0x1e9/0x1c20
[  257.408043][T12349]  ? __virt_addr_valid+0x183/0x530
[  257.408075][T12349]  ? __alloc_skb+0x28f/0x440
[  257.408096][T12349]  ? __pfx__copy_from_iter+0x10/0x10
[  257.408118][T12349]  ? __virt_addr_valid+0x183/0x530
[  257.408139][T12349]  ? __virt_addr_valid+0x183/0x530
[  257.408158][T12349]  ? __virt_addr_valid+0x45f/0x530
[  257.408180][T12349]  ? __phys_addr_symbol+0x2f/0x70
[  257.408200][T12349]  ? __check_object_size+0x47a/0x730
[  257.408228][T12349]  netlink_sendmsg+0x73d/0xcb0
[  257.408261][T12349]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.408288][T12349]  ? aa_sock_msg_perm+0x91/0x160
[  257.408313][T12349]  ? __pfx_netlink_sendmsg+0x10/0x10
[  257.408333][T12349]  __sock_sendmsg+0x221/0x270
[  257.408356][T12349]  ____sys_sendmsg+0x52a/0x7e0
[  257.408385][T12349]  ? __pfx_____sys_sendmsg+0x10/0x10
[  257.408406][T12349]  ? __fget_files+0x2a/0x410
[  257.408427][T12349]  ? __fget_files+0x2a/0x410
[  257.408452][T12349]  __sys_sendmsg+0x269/0x350
[  257.408479][T12349]  ? __pfx___sys_sendmsg+0x10/0x10
[  257.408512][T12349]  ? do_sys_openat2+0x17a/0x1d0
[  257.408554][T12349]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  257.408583][T12349]  ? do_syscall_64+0x100/0x230
[  257.408606][T12349]  ? do_syscall_64+0xb6/0x230
[  257.408628][T12349]  do_syscall_64+0xf3/0x230
[  257.408647][T12349]  ? clear_bhb_loop+0x35/0x90
[  257.408671][T12349]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  257.408690][T12349] RIP: 0033:0x7f240818cde9
[  257.408705][T12349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  257.408718][T12349] RSP: 002b:00007f2409021038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  257.408737][T12349] RAX: ffffffffffffffda RBX: 00007f24083a5fa0 RCX: 00007f240818cde9
[  257.408749][T12349] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  257.408760][T12349] RBP: 00007f2409021090 R08: 0000000000000000 R09: 0000000000000000
[  257.408771][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  257.408780][T12349] R13: 0000000000000000 R14: 00007f24083a5fa0 R15: 00007ffdb6310968
[  257.408806][T12349]  </TASK>
[  257.887040][T12368] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  257.914968][T12368] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  258.322451][T12393] netlink: 'syz.2.2156': attribute type 10 has an invalid length.
[  258.335851][T12392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  259.757337][T12485] FAULT_INJECTION: forcing a failure.
[  259.757337][T12485] name failslab, interval 1, probability 0, space 0, times 0
[  259.762661][T12488] Bluetooth: MGMT ver 1.23
[  259.790779][T12485] CPU: 0 UID: 0 PID: 12485 Comm: syz.1.2189 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  259.790805][T12485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  259.790815][T12485] Call Trace:
[  259.790822][T12485]  <TASK>
[  259.790829][T12485]  dump_stack_lvl+0x241/0x360
[  259.790855][T12485]  ? __pfx_dump_stack_lvl+0x10/0x10
[  259.790872][T12485]  ? __pfx__printk+0x10/0x10
[  259.790898][T12485]  ? __kmalloc_cache_noprof+0x48/0x390
[  259.790918][T12485]  ? __pfx___might_resched+0x10/0x10
[  259.790935][T12485]  ? netdev_run_todo+0xeac/0xf30
[  259.790978][T12485]  ? smc_pnet_add+0x416/0x13e0
[  259.790997][T12485]  should_fail_ex+0x40a/0x550
[  259.791021][T12485]  should_failslab+0xac/0x100
[  259.791046][T12485]  __kmalloc_cache_noprof+0x70/0x390
[  259.791062][T12485]  ? smc_pnet_add+0x46b/0x13e0
[  259.791083][T12485]  smc_pnet_add+0x46b/0x13e0
[  259.791114][T12485]  ? __pfx_smc_pnet_add+0x10/0x10
[  259.791134][T12485]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  259.791158][T12485]  genl_rcv_msg+0xb14/0xec0
[  259.791183][T12485]  ? __pfx_genl_rcv_msg+0x10/0x10
[  259.791232][T12485]  ? __pfx_lock_acquire+0x10/0x10
[  259.791253][T12485]  ? __pfx_smc_pnet_add+0x10/0x10
[  259.791269][T12485]  ? __pfx___might_resched+0x10/0x10
[  259.791298][T12485]  netlink_rcv_skb+0x1e3/0x430
[  259.791322][T12485]  ? __pfx_genl_rcv_msg+0x10/0x10
[  259.791342][T12485]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  259.791392][T12485]  genl_rcv+0x28/0x40
[  259.791408][T12485]  netlink_unicast+0x7f6/0x990
[  259.791439][T12485]  ? __pfx_netlink_unicast+0x10/0x10
[  259.791457][T12485]  ? __virt_addr_valid+0x45f/0x530
[  259.791479][T12485]  ? __phys_addr_symbol+0x2f/0x70
[  259.791500][T12485]  ? __check_object_size+0x47a/0x730
[  259.791529][T12485]  netlink_sendmsg+0x8e4/0xcb0
[  259.791565][T12485]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.791591][T12485]  ? aa_sock_msg_perm+0x91/0x160
[  259.791617][T12485]  ? __pfx_netlink_sendmsg+0x10/0x10
[  259.791638][T12485]  __sock_sendmsg+0x221/0x270
[  259.791661][T12485]  ____sys_sendmsg+0x52a/0x7e0
[  259.791692][T12485]  ? __pfx_____sys_sendmsg+0x10/0x10
[  259.791713][T12485]  ? __fget_files+0x2a/0x410
[  259.791734][T12485]  ? __fget_files+0x2a/0x410
[  259.791761][T12485]  __sys_sendmsg+0x269/0x350
[  259.791789][T12485]  ? __pfx___sys_sendmsg+0x10/0x10
[  259.791824][T12485]  ? do_sys_openat2+0x17a/0x1d0
[  259.791870][T12485]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  259.791892][T12485]  ? do_syscall_64+0x100/0x230
[  259.791916][T12485]  ? do_syscall_64+0xb6/0x230
[  259.791939][T12485]  do_syscall_64+0xf3/0x230
[  259.791958][T12485]  ? clear_bhb_loop+0x35/0x90
[  259.791981][T12485]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  259.791999][T12485] RIP: 0033:0x7fc68c58cde9
[  259.792013][T12485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  259.792025][T12485] RSP: 002b:00007fc68d473038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  259.792043][T12485] RAX: ffffffffffffffda RBX: 00007fc68c7a5fa0 RCX: 00007fc68c58cde9
[  259.792053][T12485] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  259.792062][T12485] RBP: 00007fc68d473090 R08: 0000000000000000 R09: 0000000000000000
[  259.792071][T12485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  259.792081][T12485] R13: 0000000000000000 R14: 00007fc68c7a5fa0 R15: 00007ffd0a62f798
[  259.792112][T12485]  </TASK>
[  260.336060][T12505] macsec2: entered promiscuous mode
[  260.341327][T12505] macsec2: entered allmulticast mode
[  260.359081][T12507] vxcan1: tx address claim with different name
[  260.499492][T12518] __nla_validate_parse: 12 callbacks suppressed
[  260.499511][T12518] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2201'.
[  260.552726][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2203'.
[  260.592656][T12518] netlink: 'syz.2.2201': attribute type 1 has an invalid length.
[  260.602696][T12523] FAULT_INJECTION: forcing a failure.
[  260.602696][T12523] name failslab, interval 1, probability 0, space 0, times 0
[  260.620936][T12518] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2201'.
[  260.635019][T12527] xfrm0 speed is unknown, defaulting to 1000
[  260.643443][T12527] xfrm0 speed is unknown, defaulting to 1000
[  260.652708][T12527] xfrm0 speed is unknown, defaulting to 1000
[  260.659524][T12523] CPU: 0 UID: 0 PID: 12523 Comm: syz.1.2203 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  260.659548][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  260.659557][T12523] Call Trace:
[  260.659564][T12523]  <TASK>
[  260.659571][T12523]  dump_stack_lvl+0x241/0x360
[  260.659596][T12523]  ? __pfx_dump_stack_lvl+0x10/0x10
[  260.659614][T12523]  ? __pfx__printk+0x10/0x10
[  260.659640][T12523]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  260.659659][T12523]  ? __pfx___might_resched+0x10/0x10
[  260.659683][T12523]  should_fail_ex+0x40a/0x550
[  260.659706][T12523]  should_failslab+0xac/0x100
[  260.659730][T12523]  kmem_cache_alloc_node_noprof+0x77/0x380
[  260.659748][T12523]  ? __alloc_skb+0x1c3/0x440
[  260.659772][T12523]  __alloc_skb+0x1c3/0x440
[  260.659798][T12523]  ? __pfx___alloc_skb+0x10/0x10
[  260.659823][T12523]  ? netlink_ack_tlv_len+0x6e/0x200
[  260.659848][T12523]  netlink_ack+0x145/0xa50
[  260.659872][T12523]  ? __pfx___might_resched+0x10/0x10
[  260.659901][T12523]  netlink_rcv_skb+0x262/0x430
[  260.659924][T12523]  ? __pfx_genl_rcv_msg+0x10/0x10
[  260.659944][T12523]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  260.659996][T12523]  genl_rcv+0x28/0x40
[  260.660012][T12523]  netlink_unicast+0x7f6/0x990
[  260.660039][T12523]  ? __pfx_netlink_unicast+0x10/0x10
[  260.660056][T12523]  ? __virt_addr_valid+0x45f/0x530
[  260.660086][T12523]  ? __phys_addr_symbol+0x2f/0x70
[  260.660105][T12523]  ? __check_object_size+0x47a/0x730
[  260.660132][T12523]  netlink_sendmsg+0x8e4/0xcb0
[  260.660165][T12523]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.660191][T12523]  ? aa_sock_msg_perm+0x91/0x160
[  260.660217][T12523]  ? __pfx_netlink_sendmsg+0x10/0x10
[  260.660237][T12523]  __sock_sendmsg+0x221/0x270
[  260.660257][T12523]  ____sys_sendmsg+0x52a/0x7e0
[  260.660286][T12523]  ? __pfx_____sys_sendmsg+0x10/0x10
[  260.660305][T12523]  ? __fget_files+0x2a/0x410
[  260.660324][T12523]  ? __fget_files+0x2a/0x410
[  260.660349][T12523]  __sys_sendmsg+0x269/0x350
[  260.660375][T12523]  ? __pfx___sys_sendmsg+0x10/0x10
[  260.660409][T12523]  ? do_sys_openat2+0x17a/0x1d0
[  260.660448][T12523]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  260.660470][T12523]  ? do_syscall_64+0x100/0x230
[  260.660492][T12523]  ? do_syscall_64+0xb6/0x230
[  260.660513][T12523]  do_syscall_64+0xf3/0x230
[  260.660532][T12523]  ? clear_bhb_loop+0x35/0x90
[  260.660556][T12523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  260.660574][T12523] RIP: 0033:0x7fc68c58cde9
[  260.660588][T12523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  260.660602][T12523] RSP: 002b:00007fc68d473038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  260.660620][T12523] RAX: ffffffffffffffda RBX: 00007fc68c7a5fa0 RCX: 00007fc68c58cde9
[  260.660632][T12523] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000004
[  260.660642][T12523] RBP: 00007fc68d473090 R08: 0000000000000000 R09: 0000000000000000
[  260.660652][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.660662][T12523] R13: 0000000000000000 R14: 00007fc68c7a5fa0 R15: 00007ffd0a62f798
[  260.660688][T12523]  </TASK>
[  261.017979][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2207'.
[  261.335532][T12537] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2208'.
[  261.418743][T12527] infiniband syz1: set active
[  261.423488][T12527] infiniband syz1: added xfrm0
[  261.432087][ T2152] xfrm0 speed is unknown, defaulting to 1000
[  261.443261][T12527] syz1: rxe_create_cq: returned err = -12
[  261.457256][T12527] infiniband syz1: Couldn't create ib_mad CQ
[  261.485076][T12527] infiniband syz1: Couldn't open port 1
[  261.537655][T12527] RDS/IB: syz1: added
[  261.541746][T12527] smc: adding ib device syz1 with port count 1
[  261.594794][T12527] smc:    ib device syz1 port 1 has pnetid 
[  261.601573][T12527] xfrm0 speed is unknown, defaulting to 1000
[  261.636646][ T2152] xfrm0 speed is unknown, defaulting to 1000
[  261.989257][T12567] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.111545][T12569] team0: Failed to send options change via netlink (err -105)
[  262.122686][T12569] team0: Failed to send port change of device team_slave_1 via netlink (err -105)
[  262.140079][T12569] team0: Port device team_slave_1 removed
[  262.155601][T12527] xfrm0 speed is unknown, defaulting to 1000
[  262.225779][T12567] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.258696][T12578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2219'.
[  262.324946][T12567] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.398368][T12567] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.461329][T12527] xfrm0 speed is unknown, defaulting to 1000
[  262.600163][T12567] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  262.672608][T12567] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  262.737190][T12567] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  262.784936][T12527] xfrm0 speed is unknown, defaulting to 1000
[  262.800937][T12567] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  263.032605][T12527] xfrm0 speed is unknown, defaulting to 1000
[  263.046187][T12610] netlink: 'syz.2.2232': attribute type 11 has an invalid length.
[  263.282122][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'.
[  263.463355][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2239'.
[  263.506604][T12632] Unsupported ieee802154 address type: 0
[  263.539547][T12637] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.552977][T12637] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.629799][T12637] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.663289][T12637] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.736731][T12637] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.747195][T12637] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.786914][T12637] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  263.797973][T12637] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.887551][T12637] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  263.900124][T12637] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.920981][T12637] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  263.935189][T12637] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.959646][T12637] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  263.974073][T12637] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.998543][T12637] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  264.007481][T12637] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.185006][T12662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2251'.
[  264.440217][T12678] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2254'.
[  264.464531][T12676] ieee802154 phy0 wpan0: encryption failed: -90
[  264.497776][T12676] ieee802154 phy0 wpan0: encryption failed: -22
[  264.690802][T12692] macsec2: entered allmulticast mode
[  264.944060][T12703] lo speed is unknown, defaulting to 1000
[  264.961692][T12712] netlink: 'syz.4.2270': attribute type 1 has an invalid length.
[  265.109518][T12712] lo speed is unknown, defaulting to 1000
[  265.158853][T12704] netlink: 'syz.4.2270': attribute type 1 has an invalid length.
[  265.366118][T12729] netlink: 'syz.2.2275': attribute type 2 has an invalid length.
[  265.393349][T12732] netlink: 'syz.2.2275': attribute type 2 has an invalid length.
[  265.786103][T12750] ipt_REJECT: TCP_RESET invalid for non-tcp
[  266.078317][T12703] xfrm0 speed is unknown, defaulting to 1000
[  266.738257][T12791] __nla_validate_parse: 5 callbacks suppressed
[  266.738275][T12791] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2298'.
[  267.132588][T12803] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  267.448271][T12814] 8021q: adding VLAN 0 to HW filter on device bond4
[  267.521443][T12820] 8021q: adding VLAN 0 to HW filter on device bond4
[  267.531200][T12820] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address
[  267.560004][T12820] bond4: (slave wireguard0): Error -95 calling set_mac_address
[  267.578078][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2311'.
[  267.595625][T12827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2311'.
[  267.623410][T12827] netem: incorrect ge model size
[  267.635184][T12827] netem: change failed
[  268.391202][T12863] dvmrp8: entered allmulticast mode
[  268.443614][T12862] dvmrp8: left allmulticast mode
[  268.564006][T12882] xt_l2tp: wrong L2TP version: 0
[  268.599405][T12877] netlink: 'syz.1.2326': attribute type 12 has an invalid length.
[  268.874163][T12901] netlink: 'syz.4.2333': attribute type 1 has an invalid length.
[  268.896125][T12902] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2333'.
[  268.964200][T12908] netlink: 'syz.3.2335': attribute type 7 has an invalid length.
[  268.972669][T12908] netlink: 'syz.3.2335': attribute type 8 has an invalid length.
[  268.982778][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2334'.
[  269.086415][T12922] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0
[  269.109652][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2337'.
[  269.319392][T12938] FAULT_INJECTION: forcing a failure.
[  269.319392][T12938] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  269.342478][T12938] CPU: 1 UID: 0 PID: 12938 Comm: syz.3.2340 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  269.342503][T12938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  269.342513][T12938] Call Trace:
[  269.342519][T12938]  <TASK>
[  269.342526][T12938]  dump_stack_lvl+0x241/0x360
[  269.342550][T12938]  ? __pfx_dump_stack_lvl+0x10/0x10
[  269.342565][T12938]  ? __pfx__printk+0x10/0x10
[  269.342588][T12938]  ? __pfx_lock_release+0x10/0x10
[  269.342616][T12938]  should_fail_ex+0x40a/0x550
[  269.342637][T12938]  _copy_from_user+0x2d/0xb0
[  269.342653][T12938]  copy_msghdr_from_user+0xae/0x680
[  269.342677][T12938]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  269.342693][T12938]  ? __fget_files+0x2a/0x410
[  269.342713][T12938]  ? __fget_files+0x2a/0x410
[  269.342738][T12938]  __sys_sendmsg+0x209/0x350
[  269.342765][T12938]  ? __pfx___sys_sendmsg+0x10/0x10
[  269.342797][T12938]  ? do_sys_openat2+0x17a/0x1d0
[  269.342838][T12938]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  269.342860][T12938]  ? do_syscall_64+0x100/0x230
[  269.342879][T12938]  ? do_syscall_64+0xb6/0x230
[  269.342898][T12938]  do_syscall_64+0xf3/0x230
[  269.342918][T12938]  ? clear_bhb_loop+0x35/0x90
[  269.342942][T12938]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  269.342962][T12938] RIP: 0033:0x7fb775b8cde9
[  269.342976][T12938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  269.342987][T12938] RSP: 002b:00007fb7769f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  269.343004][T12938] RAX: ffffffffffffffda RBX: 00007fb775da6080 RCX: 00007fb775b8cde9
[  269.343016][T12938] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  269.343025][T12938] RBP: 00007fb7769f7090 R08: 0000000000000000 R09: 0000000000000000
[  269.343033][T12938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  269.343042][T12938] R13: 0000000000000001 R14: 00007fb775da6080 R15: 00007ffc688e4598
[  269.343064][T12938]  </TASK>
[  269.638703][T12942] 8021q: adding VLAN 0 to HW filter on device bond5
[  269.674655][T12946] 8021q: adding VLAN 0 to HW filter on device bond5
[  269.682300][T12946] bond5: (slave wireguard0): The slave device specified does not support setting the MAC address
[  269.696054][T12946] bond5: (slave wireguard0): Error -95 calling set_mac_address
[  269.770305][T12955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2348'.
[  270.297611][T12995] FAULT_INJECTION: forcing a failure.
[  270.297611][T12995] name failslab, interval 1, probability 0, space 0, times 0
[  270.311289][T12995] CPU: 0 UID: 0 PID: 12995 Comm: syz.0.2358 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  270.311313][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  270.311323][T12995] Call Trace:
[  270.311329][T12995]  <TASK>
[  270.311335][T12995]  dump_stack_lvl+0x241/0x360
[  270.311359][T12995]  ? __pfx_dump_stack_lvl+0x10/0x10
[  270.311375][T12995]  ? __pfx__printk+0x10/0x10
[  270.311399][T12995]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  270.311417][T12995]  ? __pfx___might_resched+0x10/0x10
[  270.311437][T12995]  should_fail_ex+0x40a/0x550
[  270.311459][T12995]  should_failslab+0xac/0x100
[  270.311481][T12995]  kmem_cache_alloc_node_noprof+0x77/0x380
[  270.311496][T12995]  ? __alloc_skb+0x1c3/0x440
[  270.311520][T12995]  __alloc_skb+0x1c3/0x440
[  270.311544][T12995]  ? __pfx___alloc_skb+0x10/0x10
[  270.311565][T12995]  ? netlink_autobind+0xd6/0x2f0
[  270.311581][T12995]  ? netlink_autobind+0x2b0/0x2f0
[  270.311600][T12995]  netlink_sendmsg+0x638/0xcb0
[  270.311633][T12995]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.311658][T12995]  ? aa_sock_msg_perm+0x91/0x160
[  270.311681][T12995]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.311701][T12995]  __sock_sendmsg+0x221/0x270
[  270.311723][T12995]  ____sys_sendmsg+0x52a/0x7e0
[  270.311752][T12995]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.311771][T12995]  ? __fget_files+0x2a/0x410
[  270.311788][T12995]  ? __fget_files+0x2a/0x410
[  270.311810][T12995]  __sys_sendmsg+0x269/0x350
[  270.311834][T12995]  ? __pfx___sys_sendmsg+0x10/0x10
[  270.311865][T12995]  ? do_sys_openat2+0x17a/0x1d0
[  270.311907][T12995]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  270.311928][T12995]  ? do_syscall_64+0x100/0x230
[  270.311949][T12995]  ? do_syscall_64+0xb6/0x230
[  270.311969][T12995]  do_syscall_64+0xf3/0x230
[  270.311987][T12995]  ? clear_bhb_loop+0x35/0x90
[  270.312009][T12995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.312027][T12995] RIP: 0033:0x7f240818cde9
[  270.312042][T12995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.312054][T12995] RSP: 002b:00007f2409021038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.312072][T12995] RAX: ffffffffffffffda RBX: 00007f24083a5fa0 RCX: 00007f240818cde9
[  270.312083][T12995] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  270.312094][T12995] RBP: 00007f2409021090 R08: 0000000000000000 R09: 0000000000000000
[  270.312103][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.312113][T12995] R13: 0000000000000000 R14: 00007f24083a5fa0 R15: 00007ffdb6310968
[  270.312135][T12995]  </TASK>
[  270.529965][T13006] netlink: 'syz.4.2359': attribute type 21 has an invalid length.
[  270.581679][T13006] netlink: 'syz.4.2359': attribute type 1 has an invalid length.
[  270.651749][T13008] netlink: 452 bytes leftover after parsing attributes in process `syz.3.2363'.
[  270.659460][T13013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2361'.
[  270.664315][T13010] ieee802154 phy0 wpan0: encryption failed: -90
[  270.682572][T13008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2363'.
[  270.818803][T13023] netlink: 'syz.0.2365': attribute type 10 has an invalid length.
[  270.832411][T13023] team0: Device veth1_macvtap failed to register rx_handler
[  270.952390][T13034] netlink: 'syz.1.2369': attribute type 2 has an invalid length.
[  271.046913][T13038] openvswitch: netlink: Message has 2 unknown bytes.
[  271.053673][T13038] openvswitch: netlink: Actions may not be safe on all matching packets
[  271.158831][T13045] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222)
[  271.320056][T13053] tc_dump_action: action bad kind
[  271.370704][T13056] 8021q: adding VLAN 0 to HW filter on device bond2
[  271.412184][T13056] 8021q: adding VLAN 0 to HW filter on device bond2
[  271.423903][T13056] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address
[  271.455628][T13056] bond2: (slave wireguard1): Error -95 calling set_mac_address
[  271.468730][T13063] set match dimension is over the limit!
[  271.555993][T13069] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  271.621138][T13068] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  271.679213][T13073] FAULT_INJECTION: forcing a failure.
[  271.679213][T13073] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  271.694986][T13073] CPU: 1 UID: 0 PID: 13073 Comm: syz.0.2385 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  271.695009][T13073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  271.695019][T13073] Call Trace:
[  271.695024][T13073]  <TASK>
[  271.695031][T13073]  dump_stack_lvl+0x241/0x360
[  271.695055][T13073]  ? __pfx_dump_stack_lvl+0x10/0x10
[  271.695072][T13073]  ? __pfx__printk+0x10/0x10
[  271.695097][T13073]  ? __pfx_lock_release+0x10/0x10
[  271.695124][T13073]  should_fail_ex+0x40a/0x550
[  271.695146][T13073]  _copy_from_iter+0x1e9/0x1c20
[  271.695167][T13073]  ? __virt_addr_valid+0x183/0x530
[  271.695196][T13073]  ? __alloc_skb+0x28f/0x440
[  271.695216][T13073]  ? __pfx__copy_from_iter+0x10/0x10
[  271.695237][T13073]  ? __virt_addr_valid+0x183/0x530
[  271.695256][T13073]  ? __virt_addr_valid+0x183/0x530
[  271.695273][T13073]  ? __virt_addr_valid+0x45f/0x530
[  271.695294][T13073]  ? __phys_addr_symbol+0x2f/0x70
[  271.695315][T13073]  ? __check_object_size+0x47a/0x730
[  271.695343][T13073]  netlink_sendmsg+0x73d/0xcb0
[  271.695375][T13073]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.695399][T13073]  ? aa_sock_msg_perm+0x91/0x160
[  271.695422][T13073]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.695441][T13073]  __sock_sendmsg+0x221/0x270
[  271.695462][T13073]  ____sys_sendmsg+0x52a/0x7e0
[  271.695490][T13073]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.695510][T13073]  ? __fget_files+0x2a/0x410
[  271.695529][T13073]  ? __fget_files+0x2a/0x410
[  271.695553][T13073]  __sys_sendmsg+0x269/0x350
[  271.695579][T13073]  ? __pfx___sys_sendmsg+0x10/0x10
[  271.695611][T13073]  ? do_sys_openat2+0x17a/0x1d0
[  271.695648][T13073]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  271.695669][T13073]  ? do_syscall_64+0x100/0x230
[  271.695690][T13073]  ? do_syscall_64+0xb6/0x230
[  271.695711][T13073]  do_syscall_64+0xf3/0x230
[  271.695729][T13073]  ? clear_bhb_loop+0x35/0x90
[  271.695752][T13073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.695772][T13073] RIP: 0033:0x7f240818cde9
[  271.695787][T13073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.695801][T13073] RSP: 002b:00007f2409021038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.695820][T13073] RAX: ffffffffffffffda RBX: 00007f24083a5fa0 RCX: 00007f240818cde9
[  271.695831][T13073] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  271.695841][T13073] RBP: 00007f2409021090 R08: 0000000000000000 R09: 0000000000000000
[  271.695851][T13073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.695860][T13073] R13: 0000000000000000 R14: 00007f24083a5fa0 R15: 00007ffdb6310968
[  271.695884][T13073]  </TASK>
[  271.798794][T13078] __nla_validate_parse: 7 callbacks suppressed
[  271.798817][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2387'.
[  272.322020][T13107] FAULT_INJECTION: forcing a failure.
[  272.322020][T13107] name failslab, interval 1, probability 0, space 0, times 0
[  272.365123][T13107] CPU: 1 UID: 0 PID: 13107 Comm: syz.0.2398 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  272.365149][T13107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  272.365159][T13107] Call Trace:
[  272.365165][T13107]  <TASK>
[  272.365172][T13107]  dump_stack_lvl+0x241/0x360
[  272.365198][T13107]  ? __pfx_dump_stack_lvl+0x10/0x10
[  272.365215][T13107]  ? __pfx__printk+0x10/0x10
[  272.365252][T13107]  should_fail_ex+0x40a/0x550
[  272.365276][T13107]  should_failslab+0xac/0x100
[  272.365300][T13107]  ? skb_clone+0x20c/0x390
[  272.365315][T13107]  kmem_cache_alloc_noprof+0x70/0x380
[  272.365338][T13107]  skb_clone+0x20c/0x390
[  272.365358][T13107]  __netlink_deliver_tap+0x3cc/0x7f0
[  272.365391][T13107]  ? netlink_deliver_tap+0x2e/0x1b0
[  272.365412][T13107]  netlink_deliver_tap+0x19d/0x1b0
[  272.365436][T13107]  netlink_unicast+0x7c4/0x990
[  272.365464][T13107]  ? __pfx_netlink_unicast+0x10/0x10
[  272.365483][T13107]  ? __virt_addr_valid+0x45f/0x530
[  272.365506][T13107]  ? __phys_addr_symbol+0x2f/0x70
[  272.365526][T13107]  ? __check_object_size+0x47a/0x730
[  272.365555][T13107]  netlink_sendmsg+0x8e4/0xcb0
[  272.365589][T13107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.365615][T13107]  ? aa_sock_msg_perm+0x91/0x160
[  272.365641][T13107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  272.365661][T13107]  __sock_sendmsg+0x221/0x270
[  272.365684][T13107]  ____sys_sendmsg+0x52a/0x7e0
[  272.365715][T13107]  ? __pfx_____sys_sendmsg+0x10/0x10
[  272.365735][T13107]  ? __fget_files+0x2a/0x410
[  272.365756][T13107]  ? __fget_files+0x2a/0x410
[  272.365782][T13107]  __sys_sendmsg+0x269/0x350
[  272.365808][T13107]  ? __pfx___sys_sendmsg+0x10/0x10
[  272.365843][T13107]  ? do_sys_openat2+0x17a/0x1d0
[  272.365887][T13107]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  272.365910][T13107]  ? do_syscall_64+0x100/0x230
[  272.365933][T13107]  ? do_syscall_64+0xb6/0x230
[  272.365955][T13107]  do_syscall_64+0xf3/0x230
[  272.365974][T13107]  ? clear_bhb_loop+0x35/0x90
[  272.365997][T13107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  272.366017][T13107] RIP: 0033:0x7f240818cde9
[  272.366032][T13107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  272.366045][T13107] RSP: 002b:00007f2409021038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  272.366070][T13107] RAX: ffffffffffffffda RBX: 00007f24083a5fa0 RCX: 00007f240818cde9
[  272.366082][T13107] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  272.366091][T13107] RBP: 00007f2409021090 R08: 0000000000000000 R09: 0000000000000000
[  272.366100][T13107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  272.366109][T13107] R13: 0000000000000000 R14: 00007f24083a5fa0 R15: 00007ffdb6310968
[  272.366134][T13107]  </TASK>
[  272.638578][T13103] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'.
[  272.754308][T13103] bridge0: port 3(bond0) entered disabled state
[  272.760812][T13115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2401'.
[  272.761960][T13103] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.771610][T13114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2400'.
[  272.794912][T13111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2399'.
[  272.798212][T13116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2399'.
[  272.855562][T13111] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2399'.
[  272.920506][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2402'.
[  272.928639][T13120] netlink: 'syz.1.2403': attribute type 10 has an invalid length.
[  272.949089][T13125] netlink: 'syz.3.2404': attribute type 142 has an invalid length.
[  273.072602][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2405'.
[  273.153463][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2406'.
[  273.493133][T13110] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  273.691470][T13161] veth0: entered promiscuous mode
[  273.787776][T13160] veth0: left promiscuous mode
[  274.117242][T13194] validate_nla: 1 callbacks suppressed
[  274.117261][T13194] netlink: 'syz.2.2423': attribute type 1 has an invalid length.
[  274.151782][T13194] lo speed is unknown, defaulting to 1000
[  274.381899][T13211] delete_channel: no stack
[  274.547414][T13215] bond_slave_0: entered promiscuous mode
[  274.553225][T13215] bond_slave_1: entered promiscuous mode
[  274.606637][T13215] bond_slave_0: left promiscuous mode
[  274.612181][T13215] bond_slave_1: left promiscuous mode
[  274.905990][T13224] netlink: 'syz.2.2432': attribute type 10 has an invalid length.
[  275.165277][T13242] netlink: 'syz.3.2437': attribute type 1 has an invalid length.
[  275.186675][T13242] lo speed is unknown, defaulting to 1000
[  275.532194][T13261] FAULT_INJECTION: forcing a failure.
[  275.532194][T13261] name failslab, interval 1, probability 0, space 0, times 0
[  275.594859][T13261] CPU: 0 UID: 0 PID: 13261 Comm: syz.3.2443 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  275.594885][T13261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  275.594895][T13261] Call Trace:
[  275.594901][T13261]  <TASK>
[  275.594908][T13261]  dump_stack_lvl+0x241/0x360
[  275.594933][T13261]  ? __pfx_dump_stack_lvl+0x10/0x10
[  275.594950][T13261]  ? __pfx__printk+0x10/0x10
[  275.594977][T13261]  ? ref_tracker_alloc+0x332/0x490
[  275.594996][T13261]  should_fail_ex+0x40a/0x550
[  275.595018][T13261]  should_failslab+0xac/0x100
[  275.595042][T13261]  ? skb_clone+0x20c/0x390
[  275.595055][T13261]  kmem_cache_alloc_noprof+0x70/0x380
[  275.595076][T13261]  skb_clone+0x20c/0x390
[  275.595095][T13261]  __netlink_deliver_tap+0x3cc/0x7f0
[  275.595126][T13261]  ? netlink_deliver_tap+0x2e/0x1b0
[  275.595146][T13261]  netlink_deliver_tap+0x19d/0x1b0
[  275.595168][T13261]  netlink_sendskb+0x68/0x140
[  275.595189][T13261]  netlink_unicast+0x39d/0x990
[  275.595216][T13261]  ? __pfx_netlink_unicast+0x10/0x10
[  275.595245][T13261]  netlink_rcv_skb+0x262/0x430
[  275.595267][T13261]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  275.595287][T13261]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  275.595329][T13261]  ? netlink_deliver_tap+0x2e/0x1b0
[  275.595354][T13261]  netlink_unicast+0x7f6/0x990
[  275.595383][T13261]  ? __pfx_netlink_unicast+0x10/0x10
[  275.595401][T13261]  ? __virt_addr_valid+0x45f/0x530
[  275.595423][T13261]  ? __phys_addr_symbol+0x2f/0x70
[  275.595441][T13261]  ? __check_object_size+0x47a/0x730
[  275.595469][T13261]  netlink_sendmsg+0x8e4/0xcb0
[  275.595501][T13261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.595526][T13261]  ? aa_sock_msg_perm+0x91/0x160
[  275.595551][T13261]  ? __pfx_netlink_sendmsg+0x10/0x10
[  275.595569][T13261]  __sock_sendmsg+0x221/0x270
[  275.595590][T13261]  ____sys_sendmsg+0x52a/0x7e0
[  275.595618][T13261]  ? __pfx_____sys_sendmsg+0x10/0x10
[  275.595638][T13261]  ? __fget_files+0x2a/0x410
[  275.595656][T13261]  ? __fget_files+0x2a/0x410
[  275.595681][T13261]  __sys_sendmsg+0x269/0x350
[  275.595714][T13261]  ? __pfx___sys_sendmsg+0x10/0x10
[  275.595749][T13261]  ? do_sys_openat2+0x17a/0x1d0
[  275.595793][T13261]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  275.595814][T13261]  ? do_syscall_64+0x100/0x230
[  275.595836][T13261]  ? do_syscall_64+0xb6/0x230
[  275.595856][T13261]  do_syscall_64+0xf3/0x230
[  275.595874][T13261]  ? clear_bhb_loop+0x35/0x90
[  275.595898][T13261]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  275.595917][T13261] RIP: 0033:0x7fb775b8cde9
[  275.595932][T13261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  275.595946][T13261] RSP: 002b:00007fb7769f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  275.595964][T13261] RAX: ffffffffffffffda RBX: 00007fb775da6080 RCX: 00007fb775b8cde9
[  275.595975][T13261] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  275.595985][T13261] RBP: 00007fb7769f7090 R08: 0000000000000000 R09: 0000000000000000
[  275.595994][T13261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  275.596002][T13261] R13: 0000000000000001 R14: 00007fb775da6080 R15: 00007ffc688e4598
[  275.596027][T13261]  </TASK>
[  275.676590][T13269] lo speed is unknown, defaulting to 1000
[  275.779713][T13275] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  275.968907][T13278] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.990018][T13269] lo speed is unknown, defaulting to 1000
[  276.012177][T13269] lo speed is unknown, defaulting to 1000
[  276.059798][T13269] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  276.078362][T13278] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.101366][T13269] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  276.152014][T13278] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.202843][T13269] lo speed is unknown, defaulting to 1000
[  276.228335][T13269] lo speed is unknown, defaulting to 1000
[  276.244915][T13269] lo speed is unknown, defaulting to 1000
[  276.260299][T13278] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.306808][T13269] lo speed is unknown, defaulting to 1000
[  276.314379][T13269] lo speed is unknown, defaulting to 1000
[  276.454177][T13278] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  276.472511][T13306] vxcan0: tx drop: invalid sa for name 0x0000000000000001
[  276.521796][T13278] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  276.560477][T13278] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  276.599288][T13278] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  276.861428][T13330] __nla_validate_parse: 10 callbacks suppressed
[  276.861445][T13330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2469'.
[  276.908984][T13333] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2470'.
[  277.034107][T13335] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2468'.
[  277.093733][T13343] netlink: 'syz.0.2473': attribute type 10 has an invalid length.
[  277.117840][T13343] netlink: 'syz.0.2473': attribute type 1 has an invalid length.
[  277.130760][T13343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2473'.
[  277.185255][T13343] veth3: entered promiscuous mode
[  277.416343][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2476'.
[  277.510405][T13356] netlink: 'syz.4.2478': attribute type 5 has an invalid length.
[  277.525370][T13354] netlink: 'syz.2.2477': attribute type 1 has an invalid length.
[  277.543795][T13354] netlink: 'syz.2.2477': attribute type 1 has an invalid length.
[  277.562127][T13354] netlink: 'syz.2.2477': attribute type 1 has an invalid length.
[  277.575060][T13354] netlink: 'syz.2.2477': attribute type 2 has an invalid length.
[  277.593295][T13354] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2477'.
[  277.798817][T13365] 8021q: adding VLAN 0 to HW filter on device bond3
[  277.829193][T13369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'.
[  277.922419][T13373] bond3: (slave gretap1): making interface the new active one
[  277.946763][T13373] bond3: (slave gretap1): Enslaving as an active interface with an up link
[  277.993460][T13382] openvswitch: netlink: Flow actions attr not present in new flow.
[  278.064180][T13384] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2488'.
[  278.473204][T13410] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  278.587087][T13421] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  278.639749][T13422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  278.689992][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2502'.
[  278.730010][T13421] batman_adv: batadv0: Removing interface: batadv_slave_1
[  278.870643][T13438] tipc: Started in network mode
[  278.885073][T13438] tipc: Node identity ac1414aa, cluster identity 4711
[  278.893113][T13438] tipc: Enabled bearer <udp:syz2>, priority 10
[  279.000743][T13446] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'.
[  279.099578][T13455] openvswitch: netlink: Flow key attr not present in new flow.
[  279.430078][T13478] bond_slave_0: entered promiscuous mode
[  279.435849][T13478] bond_slave_1: entered promiscuous mode
[  279.441559][T13478] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode
[  279.448634][T13478] batadv_slave_0: entered promiscuous mode
[  279.461280][T13478] macsec1: entered promiscuous mode
[  279.468122][T13478] bond0: entered promiscuous mode
[  279.474115][T13478] macsec1: entered allmulticast mode
[  279.484468][T13478] bond0: entered allmulticast mode
[  279.491797][T13478] bond_slave_0: entered allmulticast mode
[  279.505794][T13478] bond_slave_1: entered allmulticast mode
[  279.513049][T13478] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode
[  279.521300][T13478] syz_tun: entered allmulticast mode
[  279.527252][T13478] batadv_slave_0: entered allmulticast mode
[  279.541770][T13478] bond0: left allmulticast mode
[  279.546866][T13478] bond_slave_0: left allmulticast mode
[  279.552624][T13478] bond_slave_1: left allmulticast mode
[  279.558575][T13478] mac80211_hwsim hwsim3 wlan1: left allmulticast mode
[  279.565845][T13478] syz_tun: left allmulticast mode
[  279.571428][T13478] batadv_slave_0: left allmulticast mode
[  279.577678][T13478] bond0: left promiscuous mode
[  279.582965][T13478] bond_slave_0: left promiscuous mode
[  279.588480][T13478] bond_slave_1: left promiscuous mode
[  279.593912][T13478] mac80211_hwsim hwsim3 wlan1: left promiscuous mode
[  279.600745][T13478] batadv_slave_0: left promiscuous mode
[  279.801761][T13489] vcan1: entered promiscuous mode
[  279.886398][ T2152] tipc: Node number set to 2886997162
[  279.993722][T13504] openvswitch: netlink: Flow actions attr not present in new flow.
[  280.176816][T13509] delete_channel: no stack
[  280.569306][T13536] bond_slave_0: entered promiscuous mode
[  280.576187][T13536] bond_slave_1: entered promiscuous mode
[  280.582015][T13536] batadv0: entered promiscuous mode
[  280.614190][T13536] macsec2: entered promiscuous mode
[  280.634819][T13536] €: entered promiscuous mode
[  280.646041][T13536] mac80211_hwsim hwsim5 ÿ
: entered promiscuous mode
[  280.659140][T13536] macsec2: entered allmulticast mode
[  280.667260][T13536] €: entered allmulticast mode
[  280.672180][T13536] bond_slave_0: entered allmulticast mode
[  280.691348][T13536] bond_slave_1: entered allmulticast mode
[  280.702334][T13536] mac80211_hwsim hwsim5 ÿ
: entered allmulticast mode
[  280.710968][T13536] batadv0: entered allmulticast mode
[  280.734901][T13536] €: left allmulticast mode
[  280.739539][T13536] bond_slave_0: left allmulticast mode
[  280.748732][T13536] bond_slave_1: left allmulticast mode
[  280.755417][T13536] mac80211_hwsim hwsim5 ÿ
: left allmulticast mode
[  280.761964][T13536] batadv0: left allmulticast mode
[  280.767227][T13536] €: left promiscuous mode
[  280.772013][T13536] mac80211_hwsim hwsim5 ÿ
: left promiscuous mode
[  280.780255][T13536] bond_slave_0: left promiscuous mode
[  280.785936][T13536] bond_slave_1: left promiscuous mode
[  280.791412][T13536] batadv0: left promiscuous mode
[  281.024202][T13561] validate_nla: 1 callbacks suppressed
[  281.024227][T13561] netlink: 'syz.3.2547': attribute type 4 has an invalid length.
[  281.691994][T13609] netlink: 'syz.2.2562': attribute type 5 has an invalid length.
[  281.858260][T13616] x_tables: unsorted underflow at hook 4
[  282.119655][T13626] __nla_validate_parse: 10 callbacks suppressed
[  282.119674][T13626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2569'.
[  282.162758][T13626] vlan2: entered promiscuous mode
[  282.173006][T13626] erspan0: entered promiscuous mode
[  282.713673][T13668] netlink: 'syz.2.2580': attribute type 11 has an invalid length.
[  283.013085][T13672] macsec2: entered promiscuous mode
[  283.019848][T13672] macsec2: entered allmulticast mode
[  283.034557][T13674] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2583'.
[  283.090546][T13676] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2584'.
[  283.217264][T13683] netlink: 'syz.0.2586': attribute type 1 has an invalid length.
[  283.232990][T13683] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2586'.
[  283.298954][T13686] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  283.307199][T13686] netlink: 'syz.3.2587': attribute type 9 has an invalid length.
[  283.323571][T13686] xt_socket: unknown flags 0x4
[  283.565342][T13702] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2593'.
[  283.603768][T13702] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2593'.
[  283.646886][T13704] lo speed is unknown, defaulting to 1000
[  283.661101][T13708] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2594'.
[  284.209028][T13740] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2604'.
[  284.247443][T13742] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2605'.
[  284.272783][T13742] openvswitch: netlink: nsh attribute has 4 unknown bytes.
[  284.611309][T13757] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2591'.
[  284.631910][T13753] openvswitch: netlink: Flow actions attr not present in new flow.
[  284.659237][T13759] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  284.713296][T13764] xt_policy: neither incoming nor outgoing policy selected
[  284.856962][T13769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.873540][T13704] xfrm0 speed is unknown, defaulting to 1000
[  284.886798][T13773] netlink: 'syz.1.2614': attribute type 1 has an invalid length.
[  284.918600][T13773] netlink: 'syz.1.2614': attribute type 1 has an invalid length.
[  285.071330][T13704] lo speed is unknown, defaulting to 1000
[  285.216099][T13787] ieee802154 phy0 wpan0: encryption failed: -22
[  285.233976][T13793] x_tables: (null)_tables: DNAT target: only valid in nat table, not syz0
[  286.422263][ T5084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.439047][ T5084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.468453][T13850] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  286.536460][T13856] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  286.559230][T13856] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  286.687060][T13865] sch_fq: defrate 0 ignored.
[  286.941244][T13881] pim6reg: left allmulticast mode
[  287.105861][T13892] A link change request failed with some changes committed already. Interface € may have been left with an inconsistent configuration, please check.
[  287.117944][T13896] netlink: 'syz.4.2658': attribute type 30 has an invalid length.
[  287.138056][T13896] __nla_validate_parse: 7 callbacks suppressed
[  287.138073][T13896] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2658'.
[  287.154007][T13896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  287.161325][T13896] IPv6: NLM_F_CREATE should be set when creating new route
[  287.232275][T13900] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  287.293790][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2661'.
[  287.677076][T13908] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2663'.
[  287.703769][T13937] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  287.822950][T13955] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2668'.
[  288.124236][T13972] netlink: 'syz.2.2676': attribute type 29 has an invalid length.
[  288.170766][T13972] netlink: 'syz.2.2676': attribute type 29 has an invalid length.
[  288.191805][ T1212] IPVS: starting estimator thread 0...
[  288.198624][T13972] syz!: rxe_newlink: already configured on team_slave_0
[  288.201839][T13978] geneve2: entered promiscuous mode
[  288.217556][T13978] geneve2: entered allmulticast mode
[  288.221957][T13972] syz!: rxe_newlink: already configured on team_slave_0
[  288.325041][T13980] IPVS: using max 25 ests per chain, 60000 per kthread
[  288.599295][T13998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  288.622224][T14002] netlink: 'syz.4.2683': attribute type 1 has an invalid length.
[  288.758365][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2688'.
[  288.797738][T14008] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  289.034924][T14019] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2693'.
[  289.117280][T14037] netlink: 'syz.1.2696': attribute type 39 has an invalid length.
[  289.211819][T14047] xt_CT: You must specify a L4 protocol and not use inversions on it
[  289.258231][T14051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2698'.
[  289.343126][T14057] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2702'.
[  289.873119][   T80] IPVS: starting estimator thread 0...
[  289.967649][T14096] IPVS: using max 19 ests per chain, 45600 per kthread
[  290.169669][T14118] FAULT_INJECTION: forcing a failure.
[  290.169669][T14118] name failslab, interval 1, probability 0, space 0, times 0
[  290.182729][T14118] CPU: 1 UID: 0 PID: 14118 Comm: syz.1.2713 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  290.182752][T14118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  290.182762][T14118] Call Trace:
[  290.182768][T14118]  <TASK>
[  290.182775][T14118]  dump_stack_lvl+0x241/0x360
[  290.182806][T14118]  ? __pfx_dump_stack_lvl+0x10/0x10
[  290.182823][T14118]  ? __pfx__printk+0x10/0x10
[  290.182847][T14118]  ? __kmalloc_noprof+0xb5/0x4c0
[  290.182865][T14118]  ? __pfx___might_resched+0x10/0x10
[  290.182889][T14118]  should_fail_ex+0x40a/0x550
[  290.182909][T14118]  should_failslab+0xac/0x100
[  290.182933][T14118]  __kmalloc_noprof+0xdd/0x4c0
[  290.182948][T14118]  ? sk_prot_alloc+0xe0/0x210
[  290.182968][T14118]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  290.182991][T14118]  sk_prot_alloc+0xe0/0x210
[  290.183010][T14118]  ? sk_alloc+0x26/0x370
[  290.183033][T14118]  sk_alloc+0x38/0x370
[  290.183053][T14118]  ? __pfx_genl_release+0x10/0x10
[  290.183074][T14118]  __netlink_create+0x65/0x260
[  290.183097][T14118]  ? __pfx_genl_release+0x10/0x10
[  290.183114][T14118]  netlink_create+0x3ab/0x560
[  290.183133][T14118]  ? __pfx_genl_unbind+0x10/0x10
[  290.183149][T14118]  ? __pfx_genl_bind+0x10/0x10
[  290.183168][T14118]  __sock_create+0x4c0/0xa30
[  290.183203][T14118]  __sys_socket+0x150/0x3c0
[  290.183225][T14118]  ? __pfx___sys_socket+0x10/0x10
[  290.183244][T14118]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  290.183267][T14118]  ? exc_page_fault+0x590/0x8b0
[  290.183290][T14118]  __x64_sys_socket+0x7a/0x90
[  290.183311][T14118]  do_syscall_64+0xf3/0x230
[  290.183330][T14118]  ? clear_bhb_loop+0x35/0x90
[  290.183354][T14118]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  290.183373][T14118] RIP: 0033:0x7fc68c58ed07
[  290.183389][T14118] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  290.183402][T14118] RSP: 002b:00007fc68d42ffa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029
[  290.183421][T14118] RAX: ffffffffffffffda RBX: 00007fc68c7a6160 RCX: 00007fc68c58ed07
[  290.183433][T14118] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010
[  290.183444][T14118] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000
[  290.183454][T14118] R10: 0000200000000380 R11: 0000000000000286 R12: 0000000000000001
[  290.183465][T14118] R13: 0000000000000000 R14: 00007fc68c7a6160 R15: 00007ffd0a62f798
[  290.183491][T14118]  </TASK>
[  290.792832][T14138] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  290.990625][T14147] netlink: 'syz.1.2726': attribute type 1 has an invalid length.
[  291.050673][T14154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2728'.
[  291.379982][T14167] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  291.753333][T14185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2738'.
[  291.765598][T14186] netlink: 'syz.3.2738': attribute type 29 has an invalid length.
[  291.765598][T14185] netlink: 'syz.3.2738': attribute type 29 has an invalid length.
[  292.456806][T14227] __nla_validate_parse: 1 callbacks suppressed
[  292.456825][T14227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2750'.
[  292.542526][T14232] pimreg: entered allmulticast mode
[  292.718893][T14242] bond0: entered promiscuous mode
[  292.723982][T14242] bond_slave_0: entered promiscuous mode
[  292.733363][T14242] bond_slave_1: entered promiscuous mode
[  293.093158][T14269] FAULT_INJECTION: forcing a failure.
[  293.093158][T14269] name failslab, interval 1, probability 0, space 0, times 0
[  293.121215][T14269] CPU: 1 UID: 0 PID: 14269 Comm: syz.1.2762 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  293.121240][T14269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  293.121250][T14269] Call Trace:
[  293.121256][T14269]  <TASK>
[  293.121263][T14269]  dump_stack_lvl+0x241/0x360
[  293.121289][T14269]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.121306][T14269]  ? __pfx__printk+0x10/0x10
[  293.121331][T14269]  ? kmem_cache_alloc_node_noprof+0x4f/0x380
[  293.121350][T14269]  ? __pfx___might_resched+0x10/0x10
[  293.121374][T14269]  should_fail_ex+0x40a/0x550
[  293.121396][T14269]  should_failslab+0xac/0x100
[  293.121421][T14269]  kmem_cache_alloc_node_noprof+0x77/0x380
[  293.121439][T14269]  ? __alloc_skb+0x1c3/0x440
[  293.121463][T14269]  __alloc_skb+0x1c3/0x440
[  293.121488][T14269]  ? __pfx___alloc_skb+0x10/0x10
[  293.121511][T14269]  ? netlink_autobind+0xd6/0x2f0
[  293.121525][T14269]  ? netlink_autobind+0x2b0/0x2f0
[  293.121546][T14269]  netlink_sendmsg+0x638/0xcb0
[  293.121580][T14269]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.121606][T14269]  ? aa_sock_msg_perm+0x91/0x160
[  293.121631][T14269]  ? __pfx_netlink_sendmsg+0x10/0x10
[  293.121650][T14269]  __sock_sendmsg+0x221/0x270
[  293.121674][T14269]  ____sys_sendmsg+0x52a/0x7e0
[  293.121704][T14269]  ? __pfx_____sys_sendmsg+0x10/0x10
[  293.121725][T14269]  ? __fget_files+0x2a/0x410
[  293.121745][T14269]  ? __fget_files+0x2a/0x410
[  293.121771][T14269]  __sys_sendmsg+0x269/0x350
[  293.121798][T14269]  ? __pfx___sys_sendmsg+0x10/0x10
[  293.121832][T14269]  ? do_sys_openat2+0x17a/0x1d0
[  293.121875][T14269]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  293.121907][T14269]  ? do_syscall_64+0x100/0x230
[  293.121930][T14269]  ? do_syscall_64+0xb6/0x230
[  293.121951][T14269]  do_syscall_64+0xf3/0x230
[  293.121971][T14269]  ? clear_bhb_loop+0x35/0x90
[  293.121994][T14269]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.122014][T14269] RIP: 0033:0x7fc68c58cde9
[  293.122029][T14269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.122042][T14269] RSP: 002b:00007fc68d452038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  293.122061][T14269] RAX: ffffffffffffffda RBX: 00007fc68c7a6080 RCX: 00007fc68c58cde9
[  293.122073][T14269] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  293.122084][T14269] RBP: 00007fc68d452090 R08: 0000000000000000 R09: 0000000000000000
[  293.122094][T14269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.122104][T14269] R13: 0000000000000001 R14: 00007fc68c7a6080 R15: 00007ffd0a62f798
[  293.122131][T14269]  </TASK>
[  293.181966][T14276] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2763'.
[  293.419289][T14283] openvswitch: netlink: EtherType 50a is less than min 600
[  293.613616][T14288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2768'.
[  293.651155][T14291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'.
[  293.679280][T14292] xt_bpf: check failed: parse error
[  293.695453][T14291] ip6gretap0: entered promiscuous mode
[  293.715692][T14291] macvtap1: entered promiscuous mode
[  293.721220][T14291] macvtap1: entered allmulticast mode
[  293.747793][T14291] ip6gretap0: entered allmulticast mode
[  293.965218][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2772'.
[  293.996894][T14304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2772'.
[  294.052005][ T5840] bond0: (slave syz_tun): Releasing backup interface
[  294.088845][T14304] lo speed is unknown, defaulting to 1000
[  294.099417][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  294.114045][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  294.129836][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  294.140684][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  294.155474][ T5837] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  294.162965][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  294.340023][T14310] lo speed is unknown, defaulting to 1000
[  294.555655][T14331] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[  294.591071][T14331] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[  294.715288][T14304] xfrm0 speed is unknown, defaulting to 1000
[  294.889137][T14343] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2785'.
[  295.063714][T14304] lo speed is unknown, defaulting to 1000
[  295.144784][T14310] xfrm0 speed is unknown, defaulting to 1000
[  295.155790][T14359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.203756][T14361] FAULT_INJECTION: forcing a failure.
[  295.203756][T14361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  295.228888][T14361] CPU: 0 UID: 0 PID: 14361 Comm: syz.2.2791 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  295.228916][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  295.228927][T14361] Call Trace:
[  295.228932][T14361]  <TASK>
[  295.228940][T14361]  dump_stack_lvl+0x241/0x360
[  295.228966][T14361]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.228983][T14361]  ? __pfx__printk+0x10/0x10
[  295.229008][T14361]  ? __pfx_lock_release+0x10/0x10
[  295.229037][T14361]  should_fail_ex+0x40a/0x550
[  295.229060][T14361]  _copy_from_iter+0x1e9/0x1c20
[  295.229082][T14361]  ? __virt_addr_valid+0x183/0x530
[  295.229114][T14361]  ? __alloc_skb+0x28f/0x440
[  295.229134][T14361]  ? __pfx__copy_from_iter+0x10/0x10
[  295.229157][T14361]  ? __virt_addr_valid+0x183/0x530
[  295.229178][T14361]  ? __virt_addr_valid+0x183/0x530
[  295.229198][T14361]  ? __virt_addr_valid+0x45f/0x530
[  295.229219][T14361]  ? __phys_addr_symbol+0x2f/0x70
[  295.229240][T14361]  ? __check_object_size+0x47a/0x730
[  295.229267][T14361]  netlink_sendmsg+0x73d/0xcb0
[  295.229302][T14361]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.229329][T14361]  ? aa_sock_msg_perm+0x91/0x160
[  295.229354][T14361]  ? __pfx_netlink_sendmsg+0x10/0x10
[  295.229374][T14361]  __sock_sendmsg+0x221/0x270
[  295.229395][T14361]  ____sys_sendmsg+0x52a/0x7e0
[  295.229426][T14361]  ? __pfx_____sys_sendmsg+0x10/0x10
[  295.229446][T14361]  ? __fget_files+0x2a/0x410
[  295.229466][T14361]  ? __fget_files+0x2a/0x410
[  295.229499][T14361]  __sys_sendmsg+0x269/0x350
[  295.229526][T14361]  ? __pfx___sys_sendmsg+0x10/0x10
[  295.229560][T14361]  ? do_sys_openat2+0x17a/0x1d0
[  295.229602][T14361]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  295.229624][T14361]  ? do_syscall_64+0x100/0x230
[  295.229647][T14361]  ? do_syscall_64+0xb6/0x230
[  295.229665][T14361]  do_syscall_64+0xf3/0x230
[  295.229684][T14361]  ? clear_bhb_loop+0x35/0x90
[  295.229708][T14361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.229727][T14361] RIP: 0033:0x7f7ab238cde9
[  295.229743][T14361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  295.229756][T14361] RSP: 002b:00007f7ab325f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  295.229773][T14361] RAX: ffffffffffffffda RBX: 00007f7ab25a5fa0 RCX: 00007f7ab238cde9
[  295.229786][T14361] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[  295.229797][T14361] RBP: 00007f7ab325f090 R08: 0000000000000000 R09: 0000000000000000
[  295.229807][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  295.229817][T14361] R13: 0000000000000000 R14: 00007f7ab25a5fa0 R15: 00007ffc7f969058
[  295.229843][T14361]  </TASK>
[  295.304340][T14310] lo speed is unknown, defaulting to 1000
[  295.405240][T14354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  295.532692][T14354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  296.032264][T14404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2799'.
[  296.194930][ T5838] Bluetooth: hci3: command tx timeout
[  296.227695][T14310] chnl_net:caif_netlink_parms(): no params data found
[  296.809124][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2806'.
[  297.149503][T14443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2811'.
[  298.283655][ T5838] Bluetooth: hci3: command tx timeout
[  298.543685][T14453] openvswitch: netlink: IP tunnel dst address not specified
[  299.630432][T14423] netlink: 'syz.2.2807': attribute type 2 has an invalid length.
[  299.843427][T14433] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  299.884805][T14443] bridge_slave_1: left allmulticast mode
[  299.926187][T14443] bridge_slave_1: left promiscuous mode
[  299.943219][T14443] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.024522][T14443] bridge_slave_0: left promiscuous mode
[  300.039056][T14443] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.337726][    T9] lo speed is unknown, defaulting to 1000
[  300.355109][ T5838] Bluetooth: hci3: command tx timeout
[  300.437042][T14310] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.464403][T14310] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.505528][T14310] bridge_slave_0: entered allmulticast mode
[  300.512570][T14310] bridge_slave_0: entered promiscuous mode
[  300.570743][T14310] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.585239][T14310] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.592865][T14310] bridge_slave_1: entered allmulticast mode
[  300.618301][T14310] bridge_slave_1: entered promiscuous mode
[  300.735955][T14310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  300.758061][T14310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.057641][T14508] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2829'.
[  302.434926][ T5838] Bluetooth: hci3: command tx timeout
[  308.701835][T14310] team0: Port device team_slave_0 added
[  308.726819][T14310] team0: Port device team_slave_1 added
[  308.805098][T14310] batman_adv: batadv0: Adding interface: batadv_slave_0
[  308.822266][T14310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  308.845106][T14531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2836'.
[  308.863553][T14310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  308.882134][T14531] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.938618][T14531] bridge_slave_0 (unregistering): left allmulticast mode
[  308.946157][T14531] bridge_slave_0 (unregistering): left promiscuous mode
[  308.953515][T14531] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.992927][T14310] batman_adv: batadv0: Adding interface: batadv_slave_1
[  309.001273][T14310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  309.083220][T14310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  309.134628][T14540] netlink: 'syz.2.2839': attribute type 30 has an invalid length.
[  309.253215][T14546] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2842'.
[  309.263687][T14310] hsr_slave_0: entered promiscuous mode
[  309.301602][T14310] hsr_slave_1: entered promiscuous mode
[  309.328498][T14310] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  309.362237][T14310] Cannot create hsr debugfs directory
[  309.450244][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  309.460858][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  309.471223][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  309.481130][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  309.490315][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  309.500284][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  309.540988][T14555] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2843'.
[  309.551065][T14555] netlink: zone id is out of range
[  309.559396][T14555] netlink: zone id is out of range
[  309.564832][T14555] netlink: zone id is out of range
[  309.570065][T14555] netlink: zone id is out of range
[  309.578101][T14555] netlink: zone id is out of range
[  309.583324][T14555] netlink: zone id is out of range
[  309.588712][T14555] netlink: zone id is out of range
[  309.593925][T14555] netlink: zone id is out of range
[  309.603447][T14555] netlink: zone id is out of range
[  309.608962][T14555] netlink: zone id is out of range
[  309.693942][T14560] netlink: 'syz.2.2844': attribute type 10 has an invalid length.
[  311.555070][ T5837] Bluetooth: hci0: command tx timeout
[  313.635114][ T5837] Bluetooth: hci0: command tx timeout
[  321.080063][ T5837] Bluetooth: hci0: command tx timeout
[  323.905344][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  323.914009][ T5838] Bluetooth: hci0: command tx timeout
[  324.893082][T14552] lo speed is unknown, defaulting to 1000
[  325.707139][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  325.717487][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  325.725933][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  325.735201][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  325.743885][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  325.752043][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  325.816691][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  325.826885][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  325.836468][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  325.844290][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  325.852541][ T5837] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  325.860544][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  326.116724][ T5838] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  326.126839][ T5838] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  326.135704][ T5838] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  326.143493][ T5838] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  326.151488][ T5838] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  326.159135][ T5838] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  327.794874][ T5838] Bluetooth: hci5: command tx timeout
[  327.956270][ T5838] Bluetooth: hci6: command tx timeout
[  328.195549][ T5838] Bluetooth: hci7: command tx timeout
[  330.008382][ T5838] Bluetooth: hci5: command tx timeout
[  330.035055][ T5838] Bluetooth: hci6: command tx timeout
[  330.335021][ T5838] Bluetooth: hci7: command tx timeout
[  334.304629][ T5838] Bluetooth: hci5: command tx timeout
[  334.310493][ T5838] Bluetooth: hci6: command tx timeout
[  334.316009][ T5838] Bluetooth: hci7: command tx timeout
[  337.376633][ T5837] Bluetooth: hci7: command tx timeout
[  337.382077][ T5837] Bluetooth: hci6: command tx timeout
[  337.388165][ T5837] Bluetooth: hci5: command tx timeout
[  343.797880][T14566] lo speed is unknown, defaulting to 1000
[  344.142992][T14568] lo speed is unknown, defaulting to 1000
[  344.512877][T14570] lo speed is unknown, defaulting to 1000
[  348.684713][    C0] sched: DL replenish lagged too much
[  354.205848][    C0] net_ratelimit: 74 callbacks suppressed
[  354.205873][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  354.573613][ T5837] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  354.583058][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  354.592125][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  354.601504][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  354.610698][ T5837] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  354.619944][ T5837] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  357.184770][ T5837] Bluetooth: hci1: command tx timeout
[  359.214537][ T5846] bond0: (slave syz_tun): Releasing backup interface
[  360.590175][ T5837] Bluetooth: hci1: command tx timeout
[  360.798771][ T5846] syz_tun (unregistering): left allmulticast mode
[  363.775539][ T5837] Bluetooth: hci1: command tx timeout
[  366.493572][ T5837] Bluetooth: hci1: command tx timeout
[  370.653904][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  370.666227][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  370.674082][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  370.682684][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  370.690449][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  370.699623][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  373.268840][ T5838] Bluetooth: hci2: command tx timeout
[  373.382661][T14552] xfrm0 speed is unknown, defaulting to 1000
[  373.563389][T14552] lo speed is unknown, defaulting to 1000
[  373.570435][T14566] xfrm0 speed is unknown, defaulting to 1000
[  373.760846][T14568] xfrm0 speed is unknown, defaulting to 1000
[  373.773828][T14566] lo speed is unknown, defaulting to 1000
[  374.032270][T14568] lo speed is unknown, defaulting to 1000
[  374.241522][T14568] chnl_net:caif_netlink_parms(): no params data found
[  377.668239][ T5837] Bluetooth: hci2: command tx timeout
[  380.832388][ T5837] Bluetooth: hci2: command tx timeout
[  383.889436][ T5837] Bluetooth: hci2: command tx timeout
[  383.962258][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  385.670120][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  385.687282][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  385.700803][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  385.714578][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  385.730217][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  385.739974][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  387.246481][ T5837] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  387.262539][ T5837] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  387.271257][ T5837] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  387.285003][ T5837] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  387.293395][ T5837] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  387.302704][ T5837] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  387.716575][ T5838] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  387.733905][ T5838] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  387.742509][ T5838] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  387.760630][ T5838] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  387.773688][ T5838] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  387.783364][ T5838] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  387.795087][ T5838] Bluetooth: hci4: command tx timeout
[  389.395004][   T53] Bluetooth: hci8: command tx timeout
[  389.875060][ T5837] Bluetooth: hci4: command tx timeout
[  389.883332][   T53] Bluetooth: hci9: command tx timeout
[  391.475334][   T53] Bluetooth: hci8: command tx timeout
[  391.954917][ T5837] Bluetooth: hci4: command tx timeout
[  391.961732][   T53] Bluetooth: hci9: command tx timeout
[  393.554928][ T5837] Bluetooth: hci8: command tx timeout
[  395.005499][   T53] Bluetooth: hci9: command tx timeout
[  395.011034][   T53] Bluetooth: hci4: command tx timeout
[  395.634830][ T5837] Bluetooth: hci8: command tx timeout
[  397.075317][ T5837] Bluetooth: hci9: command tx timeout
[  416.045100][   T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  416.061888][   T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  416.070948][   T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  416.079576][   T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  416.087257][   T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  416.094598][   T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  426.737203][   T53] Bluetooth: hci10: command tx timeout
[  430.174426][ T5837] Bluetooth: hci10: command tx timeout
[  432.569374][ T5837] Bluetooth: hci10: command tx timeout
[  439.835750][ T5837] Bluetooth: hci10: command tx timeout
[  439.872122][ T5838] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  439.916089][ T5147] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  439.957241][ T5838] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  439.973711][ T5838] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  439.983320][ T5838] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  439.997734][ T5838] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  443.659289][ T5838] Bluetooth: hci0: command 0x0406 tx timeout
[  443.665667][ T5838] Bluetooth: hci11: command tx timeout
[  447.974934][   T53] Bluetooth: hci11: command tx timeout
[  447.981162][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  449.008735][   T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  449.019103][   T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  449.028266][   T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  449.037654][   T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  449.046024][   T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  449.055366][   T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  449.221265][ T5838] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  452.821111][ T5838] Bluetooth: hci11: command tx timeout
[  452.826787][ T5838] Bluetooth: hci3: command tx timeout
[  452.954102][ T5838] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  452.963348][ T5838] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  452.978852][ T5838] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  452.991841][ T5838] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  453.023335][ T5838] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  453.073635][   T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  453.092732][   T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  453.101357][   T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  453.116954][   T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  453.132339][   T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  453.141748][   T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  457.854022][ T5845] Bluetooth: hci3: command tx timeout
[  457.860181][ T5845] Bluetooth: hci11: command tx timeout
[  457.865847][ T5845] Bluetooth: hci12: command tx timeout
[  457.872233][ T5845] Bluetooth: hci13: command tx timeout
[  463.423353][ T5843] Bluetooth: hci13: command tx timeout
[  463.428940][ T5843] Bluetooth: hci12: command tx timeout
[  463.434428][ T5843] Bluetooth: hci3: command tx timeout
[  463.439902][ T5843] Bluetooth: hci5: command 0x0406 tx timeout
[  463.446032][ T5843] Bluetooth: hci7: command tx timeout
[  469.658198][ T5837] Bluetooth: hci12: command tx timeout
[  469.663752][ T5837] Bluetooth: hci13: command tx timeout
[  469.673188][ T5838] Bluetooth: hci3: command tx timeout
[  473.580100][   T53] Bluetooth: hci13: command tx timeout
[  473.585834][   T53] Bluetooth: hci12: command tx timeout
[  477.184298][   T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  477.201899][   T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  477.213765][   T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  477.230287][   T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  477.242381][   T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  477.253535][   T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  489.640862][   T53] Bluetooth: hci6: command tx timeout
[  489.647271][ T5837] Bluetooth: hci1: command 0x0406 tx timeout
[  496.885740][   T53] Bluetooth: hci6: command tx timeout
[  498.931294][ T5843] Bluetooth: hci2: command 0x0406 tx timeout
[  498.938645][ T5843] Bluetooth: hci6: command tx timeout
[  498.961640][ T5843] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  498.977490][ T5843] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  498.990561][ T5843] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  499.001542][ T5843] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  499.015365][ T5843] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  499.025066][ T5843] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  501.640133][ T5838] Bluetooth: hci6: command tx timeout
[  501.646714][ T5838] Bluetooth: hci14: command tx timeout
[  504.213733][ T5843] Bluetooth: hci14: command tx timeout
[  511.049305][ T5843] Bluetooth: hci14: command tx timeout
[  514.475673][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  514.484537][ T5845] Bluetooth: hci14: command tx timeout
[  516.365326][T14570] xfrm0 speed is unknown, defaulting to 1000
[  516.577225][T14570] lo speed is unknown, defaulting to 1000
[  516.725033][   T53] Bluetooth: hci8: command 0x0406 tx timeout
[  516.731255][   T53] Bluetooth: hci4: command 0x0406 tx timeout
[  516.737600][   T53] Bluetooth: hci9: command 0x0406 tx timeout
[  516.875757][   T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  516.997608][ T5843] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  517.005787][ T5843] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  517.014538][ T5843] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  517.023416][ T5843] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  517.043963][ T5843] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  520.281710][T14630] Bluetooth: hci15: Opcode 0x0c1a failed: -110
[  520.314764][ T5838] Bluetooth: hci15: command 0x0c1a tx timeout
[  520.691234][ T5838] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  520.700697][ T5838] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  520.709163][ T5838] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  520.718721][ T5838] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  520.727102][ T5838] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  520.735480][ T5838] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  526.005186][ T5845] Bluetooth: hci15: command tx timeout
[  530.689075][ T5845] Bluetooth: hci15: command tx timeout
[  537.049713][ T5845] Bluetooth: hci15: command tx timeout
[  540.810197][ T5838] Bluetooth: hci15: command tx timeout
[  546.008019][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  546.023614][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  546.041335][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  546.051727][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  546.064918][ T5838] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  546.072202][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  549.081503][ T5838] Bluetooth: hci1: command tx timeout
[  552.232920][ T5838] Bluetooth: hci1: command tx timeout
[  552.890478][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  552.907346][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  552.921602][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  552.933215][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  552.949400][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  552.958365][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  553.005204][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  553.021918][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  553.030464][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  553.039107][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  553.047023][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  553.055321][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  563.331872][ T5838] Bluetooth: hci1: command tx timeout
[  563.337410][ T5838] Bluetooth: hci2: command tx timeout
[  563.343726][ T5838] Bluetooth: hci4: command tx timeout
[  565.917589][ T5845] Bluetooth: hci4: command tx timeout
[  565.923037][ T5845] Bluetooth: hci2: command tx timeout
[  565.928567][ T5845] Bluetooth: hci1: command tx timeout
[  566.825731][ T5845] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  568.753806][ T5845] Bluetooth: hci2: command tx timeout
[  568.761293][ T5845] Bluetooth: hci4: command tx timeout
[  570.133310][ T5837] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  570.177516][ T5837] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  570.218887][ T5837] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  570.231321][ T5837] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  570.242700][ T5837] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  575.074736][ T5838] Bluetooth: hci11: command 0x0406 tx timeout
[  575.080964][ T5838] Bluetooth: hci4: command tx timeout
[  575.086573][ T5838] Bluetooth: hci2: command tx timeout
[  575.092001][ T5838] Bluetooth: hci5: command tx timeout
[  580.894087][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  581.187755][   T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  581.203344][   T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  581.213269][   T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  581.226769][   T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  581.235111][   T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  581.242952][   T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  582.674173][ T5147] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  582.691642][ T5147] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  582.702699][ T5147] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  582.719800][ T5147] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  582.731707][ T5147] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  582.739482][ T5147] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  582.915045][   T53] Bluetooth: hci12: command 0x0406 tx timeout
[  582.922498][   T53] Bluetooth: hci13: command 0x0406 tx timeout
[  582.930485][ T5147] Bluetooth: hci3: command 0x0406 tx timeout
[  583.315127][ T5147] Bluetooth: hci8: command tx timeout
[  585.841567][ T5147] Bluetooth: hci5: command tx timeout
[  585.847590][ T5147] Bluetooth: hci9: command tx timeout
[  585.853922][ T5147] Bluetooth: hci8: command tx timeout
[  588.731581][ T5845] Bluetooth: hci8: command tx timeout
[  588.737920][ T5845] Bluetooth: hci9: command tx timeout
[  588.743340][ T5845] Bluetooth: hci5: command tx timeout
[  596.934359][   T30] INFO: task syz-executor:14609 blocked for more than 144 seconds.
[  596.942346][   T30]       Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  596.950573][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  596.959448][ T5837] Bluetooth: hci5: command tx timeout
[  596.964891][ T5837] Bluetooth: hci9: command tx timeout
[  596.970287][ T5837] Bluetooth: hci8: command tx timeout
[  596.976760][   T30] task:syz-executor    state:D stack:25984 pid:14609 tgid:14609 ppid:1      task_flags:0x400140 flags:0x00000004
[  598.296746][   T30] Call Trace:
[  598.300084][   T30]  <TASK>
[  598.303028][   T30]  __schedule+0x190e/0x4c90
[  598.312419][   T30]  ? __pfx___schedule+0x10/0x10
[  598.317602][   T30]  ? __pfx_lock_release+0x10/0x10
[  598.322650][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  598.328658][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  598.334592][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  598.341025][   T30]  ? schedule+0x90/0x320
[  598.345596][   T30]  schedule+0x14b/0x320
[  598.349788][   T30]  schedule_preempt_disabled+0x13/0x30
[  600.766642][   T30]  __mutex_lock+0x817/0x1010
[  600.771291][   T30]  ? __mutex_lock+0x602/0x1010
[  600.776581][   T30]  ? inet_rtm_newaddr+0x47e/0x1bd0
[  600.781721][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  602.624733][   T30]  ? __lock_acquire+0x1397/0x2100
[  602.629829][   T30]  ? __nla_parse+0x40/0x60
[  602.634265][   T30]  inet_rtm_newaddr+0x47e/0x1bd0
[  602.654772][   T30]  ? rcu_read_unlock+0x87/0xa0
[  602.659576][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  602.674725][   T30]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  602.680134][   T30]  rtnetlink_rcv_msg+0x791/0xcf0
[  602.694707][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  602.699845][   T30]  ? __lock_acquire+0x1397/0x2100
[  602.711466][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  602.717134][   T30]  netlink_rcv_skb+0x1e3/0x430
[  602.721919][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  602.727760][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  602.733090][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  602.738593][   T30]  netlink_unicast+0x7f6/0x990
[  602.743382][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  602.748963][   T30]  ? __virt_addr_valid+0x45f/0x530
[  602.754097][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  602.759346][   T30]  ? __check_object_size+0x47a/0x730
[  602.764660][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  602.779557][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  602.794716][   T30]  ? aa_sock_msg_perm+0x91/0x160
[  602.799699][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  602.812864][   T30]  __sock_sendmsg+0x221/0x270
[  602.817619][   T30]  __sys_sendto+0x363/0x4c0
[  602.822145][   T30]  ? __pfx___sys_sendto+0x10/0x10
[  602.834861][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  602.840880][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  602.848883][ T5843] Bluetooth: hci9: command tx timeout
[  602.854315][   T30]  ? exc_page_fault+0x590/0x8b0
[  602.864708][   T30]  __x64_sys_sendto+0xde/0x100
[  602.869499][   T30]  do_syscall_64+0xf3/0x230
[  602.874026][   T30]  ? clear_bhb_loop+0x35/0x90
[  602.886470][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  602.892397][   T30] RIP: 0033:0x7ff6ad38ec7c
[  602.897101][   T30] RSP: 002b:00007ffda3aba8e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  602.906106][   T30] RAX: ffffffffffffffda RBX: 00007ff6ae0d4620 RCX: 00007ff6ad38ec7c
[  602.914090][   T30] RDX: 0000000000000028 RSI: 00007ff6ae0d4670 RDI: 0000000000000003
[  602.922378][   T30] RBP: 0000000000000000 R08: 00007ffda3aba934 R09: 000000000000000c
[  602.930400][   T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  602.938762][   T30] R13: 0000000000000000 R14: 00007ff6ae0d4670 R15: 0000000000000000
[  602.946819][   T30]  </TASK>
[  602.949860][   T30] 
[  602.949860][   T30] Showing all locks held in the system:
[  602.957621][   T30] 1 lock held by pool_workqueue_/3:
[  602.962828][   T30]  #0: ffffffff8e93dc38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830
[  602.974050][   T30] 1 lock held by khungtaskd/30:
[  602.978982][   T30]  #0: ffffffff8e938760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  602.988936][   T30] 8 locks held by kworker/1:2/1205:
[  602.994169][   T30] 2 locks held by getty/5598:
[  602.999171][   T30]  #0: ffff88803120b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  603.009011][   T30]  #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  603.019188][   T30] 2 locks held by kworker/u8:22/13936:
[  603.024649][   T30] 2 locks held by kworker/u8:23/13939:
[  603.030137][   T30] 3 locks held by kworker/u8:28/13944:
[  603.035878][   T30]  #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  603.047656][   T30]  #1: ffffc9000be1fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  603.058717][   T30]  #2: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  603.068014][   T30] 1 lock held by syz-executor/14310:
[  603.073303][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  603.082334][   T30] 1 lock held by syz-executor/14552:
[  603.087703][   T30]  #0: ffffffff8fcb2b10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  603.097509][   T30] 1 lock held by syz-executor/14566:
[  603.102802][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  603.111969][   T30] 1 lock held by syz-executor/14568:
[  603.117285][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0
[  603.126640][   T30] 2 locks held by syz-executor/14570:
[  603.132011][   T30]  #0: ffffffff8fcb2b10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  603.141480][   T30]  #1: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: ppp_exit_net+0xe3/0x3d0
[  603.150455][   T30] 2 locks held by syz-executor/14603:
[  603.156116][   T30]  #0: ffff888011e90d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510
[  603.166141][   T30]  #1: ffff888011e90078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0
[  603.175894][   T30] 1 lock held by syz-executor/14609:
[  603.181185][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.190915][   T30] 1 lock held by syz-executor/14611:
[  603.196263][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.205772][   T30] 1 lock held by syz-executor/14612:
[  603.211069][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.220809][   T30] 1 lock held by syz-executor/14617:
[  603.226121][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.235639][   T30] 1 lock held by syz-executor/14626:
[  603.240944][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.250697][   T30] 1 lock held by syz-executor/14634:
[  603.256065][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.265560][   T30] 1 lock held by syz-executor/14637:
[  603.270854][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.280591][   T30] 1 lock held by syz-executor/14638:
[  603.286584][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.296193][   T30] 1 lock held by syz-executor/14640:
[  603.301483][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.311223][   T30] 1 lock held by syz-executor/14646:
[  603.316605][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.326098][   T30] 1 lock held by syz-executor/14649:
[  603.331384][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.341093][   T30] 1 lock held by syz-executor/14653:
[  603.346426][   T30]  #0: ffffffff8fcbf088 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  603.355917][   T30] 1 lock held by dhcpcd/14656:
[  603.360698][   T30]  #0: ffff888077d06208 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240
[  603.371243][   T30] 
[  603.373580][   T30] =============================================
[  603.373580][   T30] 
[  603.382064][   T30] NMI backtrace for cpu 0
[  603.382084][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  603.382102][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  603.382111][   T30] Call Trace:
[  603.382121][   T30]  <TASK>
[  603.382131][   T30]  dump_stack_lvl+0x241/0x360
[  603.382156][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  603.382173][   T30]  ? __pfx__printk+0x10/0x10
[  603.382207][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  603.382231][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  603.382246][   T30]  ? _printk+0xd5/0x120
[  603.382267][   T30]  ? __pfx__printk+0x10/0x10
[  603.382288][   T30]  ? __wake_up_klogd+0xcc/0x110
[  603.382307][   T30]  ? __pfx__printk+0x10/0x10
[  603.382330][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  603.382351][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  603.382371][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  603.382392][   T30]  watchdog+0x1058/0x10a0
[  603.382413][   T30]  ? watchdog+0x1ea/0x10a0
[  603.382438][   T30]  ? __pfx_watchdog+0x10/0x10
[  603.382457][   T30]  kthread+0x7a9/0x920
[  603.382476][   T30]  ? __pfx_kthread+0x10/0x10
[  603.382498][   T30]  ? __pfx_watchdog+0x10/0x10
[  603.382517][   T30]  ? __pfx_kthread+0x10/0x10
[  603.382535][   T30]  ? __pfx_kthread+0x10/0x10
[  603.382558][   T30]  ? __pfx_kthread+0x10/0x10
[  603.382576][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  603.382593][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  603.382611][   T30]  ? __pfx_kthread+0x10/0x10
[  603.382639][   T30]  ret_from_fork+0x4b/0x80
[  603.382658][   T30]  ? __pfx_kthread+0x10/0x10
[  603.382678][   T30]  ret_from_fork_asm+0x1a/0x30
[  603.382710][   T30]  </TASK>
[  603.382717][   T30] Sending NMI from CPU 0 to CPUs 1:
[  603.552845][    C1] NMI backtrace for cpu 1
[  603.552861][    C1] CPU: 1 UID: 0 PID: 1205 Comm: kworker/1:2 Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  603.552877][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  603.552887][    C1] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker
[  603.552916][    C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x18/0x90
[  603.552937][    C1] Code: 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 14 25 40 d6 03 00 65 8b 05 60 65 44 7e <25> 00 01 ff 00 74 10 3d 00 01 00 00 75 5b 83 ba 2c 16 00 00 00 74
[  603.552949][    C1] RSP: 0018:ffffc90000a17a60 EFLAGS: 00000206
[  603.552961][    C1] RAX: 0000000000000503 RBX: 0000000000000005 RCX: ffff88802741bc00
[  603.552971][    C1] RDX: ffff88802741bc00 RSI: 0000000000000005 RDI: 0000000000000005
[  603.552980][    C1] RBP: 0000000000000007 R08: ffffffff89f387c2 R09: 1ffffffff285ed24
[  603.552990][    C1] R10: dffffc0000000000 R11: fffffbfff285ed25 R12: dffffc0000000000
[  603.553000][    C1] R13: ffff88804b400000 R14: ffff88804b4133d0 R15: ffff88804b400000
[  603.553011][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  603.553023][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  603.553033][    C1] CR2: 00007ff4f7444bd0 CR3: 0000000038e98000 CR4: 00000000003526f0
[  603.553046][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  603.553055][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  603.553064][    C1] Call Trace:
[  603.553072][    C1]  <NMI>
[  603.553079][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  603.553095][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  603.553113][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  603.553127][    C1]  ? nmi_handle+0x2a/0x5a0
[  603.553152][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  603.553168][    C1]  ? nmi_handle+0x14f/0x5a0
[  603.553185][    C1]  ? nmi_handle+0x2a/0x5a0
[  603.553203][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x18/0x90
[  603.553220][    C1]  ? default_do_nmi+0x63/0x160
[  603.553233][    C1]  ? exc_nmi+0x123/0x1f0
[  603.553246][    C1]  ? end_repeat_nmi+0xf/0x53
[  603.553266][    C1]  ? cake_get_flow_quantum+0x32/0x290
[  603.553284][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x18/0x90
[  603.553301][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x18/0x90
[  603.553319][    C1]  ? __sanitizer_cov_trace_const_cmp4+0x18/0x90
[  603.553336][    C1]  </NMI>
[  603.553340][    C1]  <IRQ>
[  603.553345][    C1]  cake_get_flow_quantum+0x32/0x290
[  603.553362][    C1]  cake_dequeue+0x2b04/0x4be0
[  603.553381][    C1]  ? queued_spin_lock_slowpath+0x42/0x50
[  603.553401][    C1]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  603.553425][    C1]  ? __pfx_cake_dequeue+0x10/0x10
[  603.553443][    C1]  __qdisc_run+0x272/0x2180
[  603.553471][    C1]  __dev_queue_xmit+0x10dd/0x3f50
[  603.553492][    C1]  ? __dev_queue_xmit+0x2f4/0x3f50
[  603.553507][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  603.553526][    C1]  ? ip_push_pending_frames+0xbf/0x150
[  603.553553][    C1]  ? ip_finish_output2+0xaff/0x12b0
[  603.553568][    C1]  ? ip_finish_output2+0x44c/0x12b0
[  603.553582][    C1]  ip_finish_output2+0xd76/0x12b0
[  603.553598][    C1]  ? ip_finish_output2+0x44c/0x12b0
[  603.553615][    C1]  ? __pfx_ip_finish_output2+0x10/0x10
[  603.553630][    C1]  ? ip_fast_csum+0x1f4/0x2b0
[  603.553647][    C1]  ? ip_skb_dst_mtu+0x6ba/0x9b0
[  603.553661][    C1]  ? __ip_finish_output+0x349/0x400
[  603.553677][    C1]  ip_push_pending_frames+0xbf/0x150
[  603.553693][    C1]  __icmp_send+0x1013/0x15c0
[  603.553715][    C1]  ? __icmp_send+0x5cb/0x15c0
[  603.553730][    C1]  ? __pfx___icmp_send+0x10/0x10
[  603.553749][    C1]  ? __udp4_lib_lookup+0x78c/0xe10
[  603.553772][    C1]  ? __udp4_lib_lookup_skb+0x296/0x390
[  603.553789][    C1]  ? udp_lib_checksum_complete+0x157/0x2a0
[  603.553806][    C1]  __udp4_lib_rcv+0x1744/0x2710
[  603.553836][    C1]  ? __pfx___udp4_lib_rcv+0x10/0x10
[  603.553853][    C1]  ? __pfx_udp_rcv+0x10/0x10
[  603.553868][    C1]  ? __pfx_tcp_v4_rcv+0x10/0x10
[  603.553883][    C1]  ip_protocol_deliver_rcu+0x290/0x440
[  603.553901][    C1]  ? ip_local_deliver_finish+0x230/0x5f0
[  603.553918][    C1]  ip_local_deliver_finish+0x341/0x5f0
[  603.553937][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  603.553953][    C1]  NF_HOOK+0x3a4/0x450
[  603.553970][    C1]  ? NF_HOOK+0x9a/0x450
[  603.553985][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  603.554001][    C1]  ? __pfx_ip_local_deliver_finish+0x10/0x10
[  603.554020][    C1]  ? ip_rcv_finish+0x406/0x560
[  603.554037][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  603.554052][    C1]  NF_HOOK+0x3a4/0x450
[  603.554068][    C1]  ? NF_HOOK+0x9a/0x450
[  603.554083][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  603.554097][    C1]  ? ip_rcv_core+0x801/0xd10
[  603.554113][    C1]  ? __pfx_ip_rcv_finish+0x10/0x10
[  603.554132][    C1]  ? __pfx_ip_rcv+0x10/0x10
[  603.554148][    C1]  __netif_receive_skb+0x2bf/0x650
[  603.554165][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  603.554182][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  603.554196][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  603.554213][    C1]  ? __pfx_lock_release+0x10/0x10
[  603.554230][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  603.554251][    C1]  process_backlog+0x662/0x15b0
[  603.554273][    C1]  ? process_backlog+0x33b/0x15b0
[  603.554293][    C1]  ? __pfx_process_backlog+0x10/0x10
[  603.554310][    C1]  ? xdp_do_check_flushed+0x217/0x240
[  603.554327][    C1]  __napi_poll+0xcb/0x490
[  603.554344][    C1]  net_rx_action+0x89b/0x1240
[  603.554369][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  603.554385][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  603.554412][    C1]  ? sched_clock_cpu+0x76/0x490
[  603.554431][    C1]  handle_softirqs+0x2d4/0x9b0
[  603.554450][    C1]  ? do_softirq+0x11b/0x1e0
[  603.554465][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  603.554484][    C1]  do_softirq+0x11b/0x1e0
[  603.554497][    C1]  </IRQ>
[  603.554502][    C1]  <TASK>
[  603.554507][    C1]  ? __pfx_do_softirq+0x10/0x10
[  603.554521][    C1]  ? __pfx_lockdep_softirqs_on+0x10/0x10
[  603.554539][    C1]  ? rcu_is_watching+0x15/0xb0
[  603.554554][    C1]  __local_bh_enable_ip+0x1bb/0x200
[  603.554569][    C1]  ? wg_socket_send_skb_to_peer+0x176/0x1d0
[  603.554581][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  603.554592][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  603.554606][    C1]  ? wg_noise_handshake_begin_session+0x84e/0xb80
[  603.554627][    C1]  wg_socket_send_skb_to_peer+0x176/0x1d0
[  603.554645][    C1]  wg_packet_send_handshake_response+0x198/0x2e0
[  603.554668][    C1]  ? __pfx_wg_packet_send_handshake_response+0x10/0x10
[  603.554687][    C1]  ? wg_socket_set_peer_endpoint_from_skb+0xc9/0x120
[  603.554709][    C1]  ? wg_packet_handshake_receive_worker+0xd2/0xf50
[  603.554731][    C1]  wg_packet_handshake_receive_worker+0x5e6/0xf50
[  603.554757][    C1]  ? __pfx_wg_packet_handshake_receive_worker+0x10/0x10
[  603.554783][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  603.554800][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  603.554818][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  603.554848][    C1]  ? process_scheduled_works+0x976/0x1840
[  603.554865][    C1]  process_scheduled_works+0xa66/0x1840
[  603.554894][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  603.554914][    C1]  ? assign_work+0x364/0x3d0
[  603.554931][    C1]  worker_thread+0x870/0xd30
[  603.554950][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  603.554967][    C1]  ? __kthread_parkme+0x169/0x1d0
[  603.554984][    C1]  ? __pfx_worker_thread+0x10/0x10
[  603.555000][    C1]  kthread+0x7a9/0x920
[  603.555015][    C1]  ? __pfx_kthread+0x10/0x10
[  603.555032][    C1]  ? __pfx_worker_thread+0x10/0x10
[  603.555048][    C1]  ? __pfx_kthread+0x10/0x10
[  603.555063][    C1]  ? __pfx_kthread+0x10/0x10
[  603.555081][    C1]  ? __pfx_kthread+0x10/0x10
[  603.555096][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  603.555110][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  603.555125][    C1]  ? __pfx_kthread+0x10/0x10
[  603.555143][    C1]  ret_from_fork+0x4b/0x80
[  603.555158][    C1]  ? __pfx_kthread+0x10/0x10
[  603.555175][    C1]  ret_from_fork_asm+0x1a/0x30
[  603.555198][    C1]  </TASK>
[  603.555857][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  603.555871][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-syzkaller-09716-g02b71dc11590 #0
[  603.555890][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  603.555900][   T30] Call Trace:
[  603.555907][   T30]  <TASK>
[  603.555914][   T30]  dump_stack_lvl+0x241/0x360
[  603.555934][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  603.555953][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  603.555970][   T30]  ? __pfx__printk+0x10/0x10
[  603.555991][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  603.556018][   T30]  ? vscnprintf+0x5d/0x90
[  603.556037][   T30]  panic+0x349/0x880
[  603.556061][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  603.556080][   T30]  ? __pfx_panic+0x10/0x10
[  603.556100][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  603.556117][   T30]  ? __irq_work_queue_local+0x137/0x410
[  603.556139][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  603.556161][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  603.556177][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  603.556197][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  603.556217][   T30]  watchdog+0x1097/0x10a0
[  603.556238][   T30]  ? watchdog+0x1ea/0x10a0
[  603.556263][   T30]  ? __pfx_watchdog+0x10/0x10
[  603.556283][   T30]  kthread+0x7a9/0x920
[  603.556302][   T30]  ? __pfx_kthread+0x10/0x10
[  603.556324][   T30]  ? __pfx_watchdog+0x10/0x10
[  603.556344][   T30]  ? __pfx_kthread+0x10/0x10
[  603.556363][   T30]  ? __pfx_kthread+0x10/0x10
[  603.556386][   T30]  ? __pfx_kthread+0x10/0x10
[  603.556404][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  603.556421][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  603.556439][   T30]  ? __pfx_kthread+0x10/0x10
[  603.556461][   T30]  ret_from_fork+0x4b/0x80
[  603.556479][   T30]  ? __pfx_kthread+0x10/0x10
[  603.556499][   T30]  ret_from_fork_asm+0x1a/0x30
[  603.556530][   T30]  </TASK>
[  604.505104][   T30] Kernel Offset: disabled
[  604.509419][   T30] Rebooting in 86400 seconds..