last executing test programs:

2m31.083329932s ago: executing program 3 (id=2437):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000000680)="170000000200010000ffbe8c5ee17688a2006c000301000a000002a2576e5ed9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000fc0607bdca67a622c45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c56835382e9d969ba5149e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded241482cfe17c3778a", 0xb8)
syz_emit_ethernet(0x3e, &(0x7f0000001600)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}}}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'tunl0\x00', 0x0})

2m30.983189961s ago: executing program 3 (id=2441):
r0 = socket$kcm(0x15, 0x5, 0x0)
sendmsg$inet(r0, &(0x7f0000000cc0)={&(0x7f00000004c0)={0xa, 0x0, @multicast2}, 0x10, 0x0}, 0x4000000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', <r3=>0x0})
r4 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3}, 0x18)
bind$can_j1939(0xffffffffffffffff, 0x0, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r6=>0x0})
bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x0, {0x1, 0xf0, 0x4}, 0x1}, 0x18)
setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r9, 0x40305829, &(0x7f00000000c0)={0x604, 0x2, 0x3, 0xffffffff})
connect$can_j1939(r5, &(0x7f0000000180)={0x1d, r6, 0x2, {0x0, 0xf0, 0x4}, 0x1}, 0x18)
sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r6, {0xfff3, 0x10}, {0xfff1, 0x9}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48040}, 0x20000050)

2m30.617255259s ago: executing program 3 (id=2450):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0x0, 'syz0\x00'}) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079108700000000001e000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

2m30.468444037s ago: executing program 3 (id=2454):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newtclass={0xd10, 0x28, 0x800, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0xfff8, 0x16}, {0x8, 0xffff}}, [@tclass_kind_options=@c_htb={{0x8}, {0xce4, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x1, 0xdf, 0x8, 0x4, 0x400, 0x1, 0x6, 0x2, 0x4, 0x2, 0x19e, 0x4, 0x5, 0x28a7aa34, 0x5a0, 0x4, 0x4, 0x7, 0x4, 0x0, 0x0, 0x7, 0x2, 0x6, 0x2, 0x3, 0x9, 0x9, 0x1, 0x100, 0x1, 0x0, 0x5, 0xfffffffe, 0x7bbf, 0x5, 0x2, 0x8, 0x9, 0xe2, 0x9, 0xfffffffd, 0x10001, 0x9, 0x4, 0x8, 0xec2b, 0x80, 0xfffffeff, 0x1, 0x1, 0x5, 0xcbd, 0xc7, 0x0, 0x9, 0x6897, 0x81, 0x4, 0x2, 0x0, 0x2, 0x100, 0xffff, 0x8, 0xe, 0x2, 0x648, 0x2, 0x5, 0x1, 0x8, 0x3f, 0xfff, 0x0, 0x8, 0x16d, 0x4, 0x1, 0xec70, 0x3, 0x400, 0x4, 0x7, 0x1, 0x1000, 0x0, 0x400, 0xa, 0x5, 0x3, 0x3ff, 0x0, 0x416, 0x2, 0x2, 0x6, 0xc, 0xe, 0x5, 0x2, 0x3, 0x7fff, 0xebbb, 0x3, 0xfffffff4, 0x8, 0x9, 0x101, 0x8, 0x80, 0x100, 0xffff, 0x2, 0x2, 0x8, 0x8, 0x3, 0x4, 0x4, 0x6, 0x0, 0x1000, 0x2, 0x7719ec09, 0x2e4, 0x3, 0x1, 0x6, 0x0, 0x0, 0x7, 0x9, 0x5, 0x14, 0x0, 0xffff, 0x4, 0x3ff, 0x10001, 0xff, 0xf19, 0x7fffffff, 0x5f, 0x7fff, 0x1, 0x10, 0xc67, 0x0, 0x0, 0x2, 0x6, 0x8, 0x1e0, 0x40, 0x6948, 0x1, 0xc, 0x7fffffff, 0x7, 0x4, 0x7, 0x4, 0x100, 0xffffffff, 0x1, 0x5, 0xe0000000, 0x54b74b09, 0x7, 0x5, 0x5491d5d2, 0x5, 0x8, 0x3, 0x8, 0xffffff81, 0x2, 0xb, 0x1, 0x1, 0x81, 0xffff0000, 0x7, 0x8, 0x8, 0xf, 0x1, 0x4, 0x9a10, 0xc1, 0x0, 0x3, 0x9, 0x0, 0x9, 0x3b0, 0x101, 0x9, 0x80000001, 0xd96c, 0xd5, 0x5, 0x5, 0x2, 0x7, 0x9, 0x8, 0x2, 0x3, 0x9, 0xfffffffa, 0x7, 0x9, 0x7, 0xd, 0x6, 0x7, 0x30000000, 0x0, 0x1, 0x80, 0x3, 0x7, 0x4, 0x3, 0x2, 0x5, 0x4, 0x575e, 0x8, 0xa, 0xd, 0xcef, 0xd3, 0x1, 0xd3, 0x7fffffff, 0x0, 0x0, 0x5, 0x6, 0x5, 0x8, 0x3, 0xf, 0x9, 0x10000, 0x7fff, 0x0, 0x0, 0x1, 0x8, 0xc051, 0x1, 0x3]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x1, 0x647, 0x3, 0xd2, 0x2}, {0x0, 0x1, 0x4, 0x3, 0x7, 0xe}, 0x6, 0x5, 0x4, 0x5, 0x400}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x2, 0x1, 0x10, 0x40, 0x1, 0x6}, {0x0, 0x2, 0x8, 0x3, 0xfff, 0x101}, 0x0, 0x3, 0x1, 0x40, 0x2}}, @TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x166026d6e04abc65, 0x1c, 0x1000, 0x8, 0x4}, {0xfe, 0x6df006690a11d9d9, 0x9, 0xe, 0x8c, 0xe6}, 0xffffff6d, 0x2, 0x100, 0x8, 0x6c}}, @TCA_HTB_CTAB={0x404, 0x3, [0x3ff, 0x200, 0x9, 0x4, 0x8, 0xb8, 0x4, 0x2, 0xcb2d, 0x7f, 0x6f, 0x7fffffff, 0xfb2, 0xfffffff9, 0x7, 0x9, 0x7d, 0x4, 0x6, 0x1, 0x7, 0x3, 0x1986, 0x360, 0x1, 0x0, 0x9, 0x6, 0x7f, 0x25, 0xbd4, 0x4, 0xfffffffd, 0x5, 0x5, 0x3, 0x0, 0x9, 0xb, 0x3, 0x6, 0x4, 0x3, 0x927, 0x7ff, 0x6, 0x3, 0x4, 0x5, 0x5, 0x80000001, 0x2, 0x0, 0x3, 0xb, 0x2, 0x7, 0x0, 0x5, 0xfffffffe, 0x3, 0xc0, 0x4, 0x0, 0x4, 0xc, 0x0, 0x7, 0x6, 0x8001, 0x3, 0x9, 0x40, 0x1ff, 0x9, 0xe8, 0xa1a2, 0x4, 0x6, 0x80000001, 0xa669, 0x7, 0x8, 0x1, 0x6, 0x5, 0x8e8f, 0x1, 0x613, 0x438a, 0x7, 0x6, 0xfffffffb, 0xffff0001, 0x7, 0x5be, 0x5, 0x7, 0x69298, 0x9, 0x9, 0x8001, 0x2, 0x2, 0x1, 0x7, 0x0, 0x7ff, 0x7, 0x6, 0x6, 0x2, 0x58000000, 0x101, 0x3ff, 0x3, 0x3a97, 0x7, 0xfffffffe, 0x6, 0x99d, 0x8, 0x7, 0x4, 0x8, 0x793c, 0x7, 0xffffe2e3, 0x8, 0xfffffff8, 0x6, 0xa, 0x0, 0x9, 0x0, 0x3, 0x1, 0x5, 0x800, 0x100, 0x505, 0x100, 0x1, 0x6, 0x3, 0x0, 0x8, 0x0, 0xc4, 0x5, 0x1, 0x7, 0x6, 0xffffffff, 0xd, 0x4, 0x81, 0x1ff, 0xe, 0x0, 0xae, 0x8, 0x6, 0x1, 0x7, 0x3, 0x0, 0xffff, 0xb7, 0x9, 0xf00, 0x3, 0x2, 0xe3, 0x5, 0xb, 0x2, 0x4, 0x0, 0xfff, 0x0, 0xfff, 0x6, 0x9, 0x9, 0x7, 0x66265593, 0x0, 0x3, 0x7, 0x40, 0x7f, 0x3, 0xffffffff, 0x0, 0x200, 0x24e, 0x2, 0x3a, 0xb0e6, 0x4, 0x100, 0x9e4, 0x0, 0xf2, 0x66f0, 0x9, 0x5, 0xc, 0x7, 0x7fff, 0x5, 0x8, 0x80000001, 0x6, 0xffffdd45, 0x1, 0x0, 0x7, 0x4, 0x1, 0xa, 0x9, 0x2, 0x42, 0x4, 0x0, 0x7, 0x7, 0x6, 0x5, 0xe3, 0xe79, 0x800, 0x0, 0x1ff, 0x99, 0x6, 0xffff, 0x787b, 0x7fff, 0x8001, 0x8, 0xf, 0x8, 0x6, 0x2, 0x0, 0x5, 0x0, 0x4, 0x9, 0x2, 0x8, 0x0, 0xd]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x8c, 0x1, 0x7fff, 0x6, 0x2, 0xa2cc}, {0x2, 0x2, 0x4ed, 0x6, 0x3, 0x6}, 0xf, 0x80, 0x1ff, 0x7, 0x3}}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_CEIL64={0xc, 0x7, 0xfffffffffffff001}, @TCA_HTB_RTAB={0x404, 0x4, [0xffff, 0x1501, 0x1, 0x2, 0x5, 0x5, 0x1, 0x0, 0x7, 0x3, 0x2, 0xb, 0x2, 0xa, 0x9, 0x8, 0x7, 0x9f00, 0x80, 0x1, 0xb0, 0x5, 0x2, 0x5, 0x6, 0xf, 0x5, 0xc, 0xffff, 0x69, 0x7, 0x1, 0x4db, 0x7f, 0x10001, 0x4, 0x6, 0x8, 0x4e23, 0x31, 0x66db, 0x3, 0xf, 0xffffffff, 0x7, 0x9, 0x9, 0x40, 0x5, 0xff, 0x40, 0x7, 0x1ff, 0x9, 0xea6, 0xf67b, 0x10000, 0x5, 0x80000000, 0x98, 0x2, 0x7, 0x80, 0x7fffffff, 0x9, 0x10000, 0x2, 0x7d, 0x4, 0x0, 0x1, 0x0, 0x3, 0x80000000, 0xd, 0x9, 0x5, 0xfb, 0xfffffff8, 0x80, 0x6, 0x6, 0x7, 0x41, 0x2, 0x4, 0x7fff, 0x7, 0x5, 0x1, 0x1, 0x40, 0x1, 0x4, 0x44, 0x6, 0x1, 0x3, 0x5, 0x7fff, 0x9, 0xff, 0x64, 0xe2, 0x7, 0x6, 0x99, 0x8, 0x1, 0xfffffff8, 0x1, 0x1bcac3ba, 0x1, 0x10001, 0xcd91, 0xffffffff, 0x7, 0x7ff, 0xa633, 0x4e32, 0xb49, 0x6, 0x3c, 0x0, 0x4, 0x64, 0x2, 0x3, 0x5, 0x3, 0x4, 0x4, 0x2, 0x3, 0x3, 0xfffffffd, 0x7, 0x9, 0xac30, 0x5, 0x8001, 0x5, 0xfffffff7, 0x7fff, 0x7, 0x3, 0x3, 0x1, 0xd2, 0x8, 0x7, 0x47, 0x7, 0x1, 0x7, 0x9dd, 0x6, 0xfffff682, 0xe47, 0x8001, 0x3, 0x2, 0x0, 0x3, 0xd, 0x3ff, 0x7fff, 0x1352, 0x1ff, 0x3, 0x10001, 0x1000, 0x6878d6b, 0x3, 0x5, 0x400, 0x80, 0xff, 0xfb53, 0x7, 0x2, 0x38b672d6, 0x9, 0x5, 0x40, 0x5, 0x1, 0x0, 0x1000, 0x78, 0x5, 0xc2, 0x7, 0x5, 0x9, 0x4, 0x0, 0x4, 0x1000, 0x1c, 0x7fffffff, 0x3, 0xa6, 0x2, 0x4, 0x5, 0x0, 0x64d, 0x1, 0x0, 0x1, 0xe0, 0x1, 0xfff, 0x5, 0x7fff, 0x4a0, 0x5, 0x4, 0xce3ac884, 0x10001, 0x6, 0x9, 0xffffffff, 0xd2d1, 0x80, 0x0, 0x0, 0x5, 0x8, 0x5, 0x0, 0x80000001, 0x18, 0xfffffff8, 0x1, 0x7, 0x80000001, 0x9, 0x0, 0x8, 0x200, 0x8, 0x5, 0x0, 0x4, 0x9, 0x9, 0x5, 0x3f, 0xb, 0x5, 0xfffffffc, 0x8001, 0x100, 0x2]}]}}]}, 0xd10}}, 0x20040084)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000f80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000f40)={&(0x7f0000000100)={0x68, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x8, @link='syz1\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000fc0), &(0x7f0000001000)=0x8)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000017c00000400c2800c00018006000600843b0000971b0280540214"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0x20008054)

2m30.290856403s ago: executing program 3 (id=2455):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c00000002ee03000000001569b23c0000000002c8280527dbd697a091b75a6abd7535314e001267593611b4e6c72e818bbe59ab666f88c60faab147df81910bde8379600d6b8c8e4084bd094e16ae14fe0773851d6fbff422b5e11fa30f7858a4111287789188c0ac824005cc1e63a4fa2296aa8b24bad15f5851a959c7b604129c04bcd4e34876bb327bdf7c3c1aa4532d7d228ed2cfe1bf8faaf81e49b84cb66275f0af0a1ff539e065e0663c59", @ANYRESDEC=r0, @ANYRESDEC], 0x1c}}, 0x20000090)
sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000580)={0x14, 0x1, 0x3, 0x801}, 0x14}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000)
r2 = socket(0x14, 0x2, 0x4)
ioctl$sock_SIOCGIFINDEX(r2, 0x61d0, 0x0)
ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100))
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETVNETHDRSZ(r4, 0x400454d8, 0xfffffffffffffffd)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)

2m29.354018246s ago: executing program 3 (id=2468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x138, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf2}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x88f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x404c014}, 0xc000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000ffdbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)

2m14.315460038s ago: executing program 32 (id=2468):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x34}}, 0x0)
sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x138, r2, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf2}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xc2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_SERVICE={0x74, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x88f}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x80000000}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x1}}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x4c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x404c014}, 0xc000)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x9d}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10)
sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="11072abd7000ffdbdf2505"], 0x1c}, 0x1, 0x0, 0x0, 0x28008000}, 0x40000)

2.033763827s ago: executing program 4 (id=4578):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000100)={<r4=>0xffffffffffffffff})
tee(r4, r3, 0xffffffffffffffff, 0x2)
epoll_wait(r3, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0)
r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x114}, {&(0x7f0000000000)=ANY=[@ANYBLOB="00000000320000041f765081df43c360b793528c7815eadbdf25"], 0x10}], 0x2, 0x0, 0x0, 0x400c445}, 0x0)

1.907674675s ago: executing program 4 (id=4580):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x10f, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x101}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r3=>0x0})
r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'virt_wifi0\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x180, 0x180, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xfffffff9}}, @float={0x10, 0x0, 0x0, 0x10, 0x2}, @enum={0x5, 0x5, 0x0, 0x6, 0x4, [{0x9, 0xfffffffb}, {0x3, 0x2}, {0x0, 0x1ff}, {0x9, 0x5}, {0xe, 0xd}]}, @struct={0xe, 0x8, 0x0, 0x4, 0x1, 0xf7, [{0xb, 0x5, 0x8}, {0xa, 0x2, 0xf831}, {0x8, 0x4, 0x5}, {0x2, 0x2, 0x8001}, {0x7, 0x4}, {0x5, 0x5}, {0x9, 0x0, 0x26}, {0x2, 0x3, 0x7}]}, @union={0x0, 0xa, 0x0, 0x5, 0x0, 0x8, [{0x8, 0x1, 0xd7f2}, {0xe, 0x3, 0xff}, {0x10, 0x0, 0x8}, {0x0, 0x3, 0xfffff4b7}, {0x6, 0x5, 0x2}, {0xc, 0x5, 0x6}, {0x2, 0x3, 0xde8}, {0xa, 0x4, 0xfffffffe}, {0xc, 0x2, 0x3}, {0x7, 0x2, 0x200}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x3, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x3}, @typedef={0x1, 0x0, 0x0, 0x8, 0x4}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x1}]}, {0x0, [0x61, 0x7f, 0x0, 0x61, 0x61, 0x30, 0x2e]}}, &(0x7f00000005c0)=""/160, 0x1a1, 0xa0, 0x1, 0x8}, 0x28)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x0, 0x0, r4, 0x8, '\x00', r5, r6, 0x3, 0x2}, 0x50)
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=ANY=[@ANYBLOB="343b072e28ced010d45ec9edc4b5bd5724b5e2be8d55116fb0fe103d75577950c57784a61a53a467979a499a066b0da238f7759c460f4354e2c131335793436a9b7df3b858530a1306c04b0f10bea8157233cc2638abc7a443704c4394abb1b93935fe40c3a8d26df3dd8832ddda139627f751a2ed8d480c3f783fbc8b5f1609ac9d97211ee817ae01d9932f204517cfbada6f2e33b01768fe820f9c82653f22e868025bd4a8673f609608db70178489a8405cdaacb9b6440f3f589b7f6ecb4986ce4defa3b17aaf0f6d995d3f79f4b5ec529e3bde7cb72ab475e9abee1e50c5", @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="0400130006001200000000000600ab00030000000a00060008021100000000000600b5008e070000"], 0x44}}, 0x4004004)

1.730914017s ago: executing program 4 (id=4585):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$nl_rdma(0x10, 0x3, 0x14)
pipe(&(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$alg(0x26, 0x5, 0x0)
listen(r2, 0x0)
bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000040)=0xb8)
socket$kcm(0x29, 0x5, 0x0)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmsg$kcm(r5, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="10011dfd02000000"], 0x10}, 0x20000001)
pipe(&(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
splice(r1, 0x0, r7, 0x0, 0x400000008000f28, 0x0)
splice(r6, 0x0, r3, 0x0, 0x114, 0xe)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9)
write(r0, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff807000000000000000000ffa6080009000d000000", 0x24)

1.448969777s ago: executing program 4 (id=4589):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="300000001014d9ec29bda7b5fcd9df2508000300010000004b001300000008004a00010000000000000000000000000059013ef1e6b7c49e80b0b78e3e43dff7c62751cfa55ea0c52b407493a8c1198ade35db37e9c022626b757369c9e766883d717a3b4437902ab46c441781a76c8e2094623c7c31d1bc63eab3216877988c01aa77535b"], 0x30}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000400020303000000000000000000010000000800010001000000"], 0x1c}}, 0x0)
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x25, 0x5, @val=@tracing={0xffffffffffffffff, 0x4}}, 0x20)
bpf$ITER_CREATE(0x21, &(0x7f0000000840)={r3}, 0x8)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000020303000000000000009a220000001008000100010000005f89e5d77add27dcd302b85202dc80e2381156424994e22afdbe4bc1e2ea83835848c6efb466f78d031aff7250bbd5c19d74826ad06807c335755b7e4a914f69169d70e620bb9dc9cc14acab8df7e7619776a91c7ecbb78d3be23f10a7fb8377f1466f9262937c9c27343e0a20a874185bb3806f290267c2b7d6ca627e7b17753285b37c57abd804054b912ca5321b56f2f5811b8f46e8ab414c0311c186f276f8bed0c324b1f515ad09027478da0c2921b0a9e8f515267d2bb294fbe014e81ec53979659ad6f0b250a9e6239f59f501dc60f9a52cad72f48ff7a4128f358798672a962e7744794957da4ccc4f53bbbee39a4c288318"], 0x1c}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, &(0x7f0000000080)=0x10, 0x4)
r4 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xfffffffffffffe7c, 0x2, {0x0, "000000001000000000040200050000ff"}}}]}, 0x48}}, 0x0)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r8=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="8402020100"], 0x18)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="4400000002030101000000000000000003000004080005400000001009000200000000020100000008000100010000020800044000000000090002000000000801000000187f110f3d2c9b5d8f39973a1f5c6589ebbd8fff022198a159e9308b06930408f9e413ca72362ac37c153e70062231d5a5d1902720805ea48d6b13a31c35bf19b08a9178c7868c239aef315d68c8b1bd1e29cfde0a08f35873d391df56eb847c715f2f46e73c6b93cee92a3e225eca5ff88262"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20000040)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
sendmsg$tipc(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000280)="f035e65454db25fc26f8c2f251cc4ee374aca0d28a6bba4fa8eeccb0e1515fa2381f74f4f58ab464e8c2199feae292", 0x2f}, {&(0x7f0000000640)="f9d61592c30ffe27aa96f5f8a0b5bfe56fd260ab80c33cda6e93af0ceab3d2000000008bac7869a2a1b51bb30d57489bfaf7eff5945be3a3436976cbe6280db4eb89d2817f5db28bd0cce5ffca10e0fa0aff42e292dae46a0720", 0x5a}, {&(0x7f00000006c0)="36113f09eb29cf6018b5a4710ab1d4cda06c99930a28935e1414b5798cab9771a5141fcda620b85cf357baaa39eddfe240a30a1833c42b", 0x37}, {&(0x7f0000000700)="81a74af57f3b790bf02a3db75af0cf0e9d0462613d2e6114ea787026ce9f17620944dd59dd2b1365e21f2522f3fc080361b32ce62bf9d220197e7348e5c911770a9fdc74a9cb40f429ae4cef2bccd84ccfdfe591aac14fbfd5a546ff37deaedfa093df4017d9f70963b6a36b3a048bfd5ac93e8d2815405366d42e995eea9d5cca76fe51b3dc3b01", 0x88}], 0x4, 0x0, 0x0, 0x81}, 0x0)
setsockopt$sock_attach_bpf(r9, 0x1, 0x21, &(0x7f0000000540), 0x4)
sendmsg$tipc(r10, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
sendmsg$tipc(r9, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062019c000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90)

1.321576675s ago: executing program 2 (id=4591):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c0012804f7cc25c626f6e64000000000c00028005001d008a"], 0x3c}}, 0x54)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, <r2=>0x0}, &(0x7f0000000140)=0xc)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x101, 0x0, 0x5}, "0fdf77"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000200)={{{@in=@initdev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}}, {{@in=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8)
sendmsg$nl_xfrm(r1, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=@acquire={0x28c, 0x17, 0x2, 0x70bd2b, 0x25dfdbfe, {{@in=@local, 0x4d5, 0x33}, @in6=@private1, {@in=@dev={0xac, 0x14, 0x14, 0x1a}, @in6=@mcast1, 0x4e24, 0x1, 0x4e21, 0x3, 0xa, 0xa0, 0x80, 0x3a, 0x0, r2}, {{@in=@rand_addr=0x64010101, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x4e22, 0x74e, 0x4e22, 0x9, 0x2, 0x20, 0x80, 0xb2, r5, r6}, {0x6, 0x2, 0x200, 0xffff, 0x9, 0x94, 0x0, 0x7}, {0xc398, 0x80, 0x10, 0x2}, 0x1000, 0x0, 0x2, 0x0, 0x3, 0x3}, 0x6, 0x8, 0x5, 0x70bd29}, [@etimer_thresh={0x8}, @tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d2, 0x3c}, 0x2, @in=@empty, 0x3506, 0x3, 0x3, 0x7, 0x9, 0x8, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0xf}, 0x2, @in=@loopback, 0x3507, 0x3, 0x0, 0x9, 0x9, 0x1, 0x1}]}, @replay_thresh={0x8, 0xb, 0x4}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_auth={0xc0, 0x1, {{'sha1_mb\x00'}, 0x3c0, "610088d35a589e96b2c87b658f817cb96dec18294d5a729ab28e7052091c94525dc190faff7c60f7dcd3409130efcbdcb16b3b8cfa6a5998a77ffb143adfe84fe1d3aa3d5dd3c7de7fdfdba0149a9f010eb2eb02e2fc4c9f2733bcb756d63136c0ea07f12825ca106b8fbf77be31534f7d7cebcfb0b56018"}}, @proto={0x5, 0x19, 0xff}]}, 0x28c}, 0x1, 0x0, 0x0, 0x40}, 0x4004080)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000)

1.149322683s ago: executing program 5 (id=4594):
syz_emit_ethernet(0xf1, &(0x7f00000006c0)={@local, @link_local, @void, {@x25={0x805, {0x0, 0x5, 0xf9, "b6c1a5af247888cc902c703d6d51efe5c41b8b6ac8918c228c781b70828ba08d297e780024c532225e7f011f6211a2b8e0341fd3aadfe27c78f72c6dae93d640e6cb9a0ef8d76e0bbe338a1ad13292272e0b289ca8dd4ebdfa8e9064cfe46607a7c64a9708d7b13db6dfd4589cfeda4fda97d6355470c630595b5d39afbd1df70fef111407a580d9ca65aae46809d6441a44b177a5024386b40424c33b7e161d002b913148a8b96346ba39f223aacb5d05aa33fdd35f850cbd39f3bccbb90222c646aac9e8d9022e682586ec8884bf4d0c7cbf99420a5cbaf62ad2daeff78734"}}}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x40}}, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x800}, 0x8)
write(r3, &(0x7f0000000000)="240000001a00110414f9f4070009040080fffffffe110001000000000800040001000000", 0x24)
sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='illinois', 0x8)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, 0x0, 0x0)
sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000300))
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000e27f000001"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000134c2651638af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r6, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000080)=0x3, 0x4)
connect$netlink(r6, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
setsockopt$sock_int(r6, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4)
sendmmsg(r6, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="681d235f45", 0x5}], 0x1}}], 0x1, 0x40060)
ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f0000000000)={'veth0_to_bridge\x00', {0x2, 0x4e22, @multicast2}})

1.023529247s ago: executing program 4 (id=4595):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket$unix(0x1, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4040800)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48)
r2 = socket(0x11, 0x3, 0x0)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10)
setsockopt$inet6_int(r4, 0x29, 0x2b, 0x0, 0xfff3)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000500), r2)
sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="015327bd7068dad3df2501"], 0x34}, 0x1, 0x0, 0x0, 0x44004}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000005c0)={'gre0\x00', <r7=>0x0})
bind$packet(r2, &(0x7f0000000180)={0x11, 0x3, r7, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@getqdisc={0x28, 0x26, 0x10, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xa, 0x9db2aa12dc3ae8a5}, {0xa, 0x5}, {0x6, 0xd}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4080)
sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000380)=ANY=[@ANYRES8=r6, @ANYRES16=r1], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200, 0xfc0c0000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0xcfc}, 0x28)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6)
sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r8, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r9, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x8000)

993.353417ms ago: executing program 5 (id=4597):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x1, 0x0, 0x8000, 0xffffffff, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x8, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x7fff, 0xffff, 0x7, 0x1, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff7c, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x60000000, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x7fffffff, 0xff, 0xa0, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0xfe, 0x10, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x1dd6, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc10, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x0, 0x2, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0xefcc, 0x1, 0x8, 0x42b9, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x3, 0x4, 0x400, 0xa000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x20009, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x2, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x400, 0xffff8001, 0x10001, 0xe, 0xc000, 0x8, 0x8001, 0xff, 0x9, 0x3, 0x1ff, 0x4, 0x80, 0x1, 0x1000, 0x2, 0x83, 0xfffffffa, 0x8, 0x10001, 0x6, 0x2, 0x2, 0xa, 0x5, 0x80, 0x8, 0x3, 0x5, 0x9, 0x1, 0x76, 0x6, 0x1, 0x6b63, 0x10001, 0x13b, 0x4, 0x1, 0x0, 0x7, 0x2, 0x100000, 0x7, 0x0, 0x9, 0xc, 0x3, 0x7, 0x80000001, 0x4, 0x4, 0x6, 0xff, 0x6, 0xb261, 0x4, 0x8c6, 0x6, 0x4, 0xc, 0x9631, 0x6d8ff6b2, 0x0, 0x6, 0x8, 0x7c, 0x8001, 0x9, 0x0, 0x107, 0x6, 0x389, 0x6, 0x0, 0x0, 0x9fd, 0x8, 0x3b1, 0x0, 0x9, 0x2, 0xfffffff1, 0x1, 0x8, 0xa, 0x4, 0x7d, 0x8, 0xfffffffa, 0x8, 0x595, 0x9, 0x4, 0x8, 0xb, 0x5, 0x57a, 0x1, 0xe, 0x35660892, 0x9, 0x9a0, 0x6, 0x401, 0x400, 0x7ff, 0x289, 0x7, 0x4, 0xffffff10, 0x8, 0x8, 0x8001, 0x3, 0x3, 0xa, 0x96, 0x6, 0x6, 0x4, 0x5, 0x7, 0x0, 0x8, 0x2, 0x2, 0x8, 0x7, 0x202, 0x511, 0x6, 0x8, 0xff, 0x1, 0x5, 0x4a, 0x9, 0x200, 0x9, 0x4, 0x4, 0x6821, 0x9, 0x4fb, 0x4, 0x6, 0xfffeffff, 0x0, 0xf4f, 0x3, 0x8, 0x7, 0x800, 0x8, 0x2, 0x8e1, 0x2, 0x3, 0xc3a23ac, 0x3, 0x8, 0x0, 0x4, 0x8, 0x4, 0x5, 0x3ff, 0x25, 0x2, 0x10000, 0x3, 0x3, 0x7, 0xb871, 0x2, 0x9, 0x0, 0x81, 0x9, 0x0, 0x2533, 0x4, 0x2, 0x7fff, 0x0, 0x80000000, 0x8, 0x2, 0x6, 0x6, 0x6, 0x7, 0x7, 0x0, 0x19, 0x40, 0x7fff, 0x6, 0x7, 0xd, 0x40, 0x6, 0xf12, 0x8, 0xfffffffa, 0xd67, 0x9, 0x10, 0x4, 0x9, 0x400, 0xfa, 0x5, 0x604d, 0x24000, 0x6, 0x800, 0x8, 0x4, 0x9, 0x10001, 0xd, 0x3ff, 0x6, 0xd, 0x6, 0x4, 0x0, 0x7, 0x40000000, 0x8, 0x4, 0x8001, 0x10001, 0x2, 0xc357, 0x3, 0x37fbabab, 0x2, 0x7, 0x9, 0x10, 0x6, 0x5, 0xa, 0x200, 0xfffffffb, 0x9, 0x1, 0xfffd, 0x9, 0xe32a, 0x2, 0x2]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
close(r1) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
socket$unix(0x1, 0x1, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async)
sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x6, 0x1, 0x0, 0x8000, 0xffffffff, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x8, 0x80000001, 0x400, 0x800, 0xfffffffe, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0x7, 0x7fff, 0xffff, 0x7, 0x1, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x1000, 0x2, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x5, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x7, 0x8, 0xfffffa72, 0xcd, 0xffffff7c, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x7, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x5, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x60000000, 0x1, 0x1, 0x1, 0x7, 0x7fffffff, 0x7, 0xe, 0x8000, 0x1, 0x45c, 0x80, 0x3, 0x7fffffff, 0xff, 0xa0, 0xa7, 0xf, 0x2, 0xfffffffd, 0x3, 0x1000, 0xfe, 0x10, 0xf8a, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0x2, 0x80000000, 0x1966f9ab, 0x5, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x1dd6, 0x485e, 0xa89, 0x40, 0x2, 0x7, 0x7, 0x101, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0xed, 0x32, 0xf04, 0x0, 0x2, 0x5, 0xfffffc10, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffe, 0x5, 0x8, 0x3, 0x4, 0x800, 0x2, 0x8, 0x7ff, 0x0, 0x2, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x5, 0xefcc, 0x1, 0x8, 0x42b9, 0x4, 0x9, 0x3, 0x8, 0x8, 0x57, 0x3, 0x4, 0x400, 0xa000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x20009, 0x0, 0x4, 0x10, 0x143, 0x5, 0x2, 0x7b, 0x6, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x2, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x7, 0x400, 0xffff8001, 0x10001, 0xe, 0xc000, 0x8, 0x8001, 0xff, 0x9, 0x3, 0x1ff, 0x4, 0x80, 0x1, 0x1000, 0x2, 0x83, 0xfffffffa, 0x8, 0x10001, 0x6, 0x2, 0x2, 0xa, 0x5, 0x80, 0x8, 0x3, 0x5, 0x9, 0x1, 0x76, 0x6, 0x1, 0x6b63, 0x10001, 0x13b, 0x4, 0x1, 0x0, 0x7, 0x2, 0x100000, 0x7, 0x0, 0x9, 0xc, 0x3, 0x7, 0x80000001, 0x4, 0x4, 0x6, 0xff, 0x6, 0xb261, 0x4, 0x8c6, 0x6, 0x4, 0xc, 0x9631, 0x6d8ff6b2, 0x0, 0x6, 0x8, 0x7c, 0x8001, 0x9, 0x0, 0x107, 0x6, 0x389, 0x6, 0x0, 0x0, 0x9fd, 0x8, 0x3b1, 0x0, 0x9, 0x2, 0xfffffff1, 0x1, 0x8, 0xa, 0x4, 0x7d, 0x8, 0xfffffffa, 0x8, 0x595, 0x9, 0x4, 0x8, 0xb, 0x5, 0x57a, 0x1, 0xe, 0x35660892, 0x9, 0x9a0, 0x6, 0x401, 0x400, 0x7ff, 0x289, 0x7, 0x4, 0xffffff10, 0x8, 0x8, 0x8001, 0x3, 0x3, 0xa, 0x96, 0x6, 0x6, 0x4, 0x5, 0x7, 0x0, 0x8, 0x2, 0x2, 0x8, 0x7, 0x202, 0x511, 0x6, 0x8, 0xff, 0x1, 0x5, 0x4a, 0x9, 0x200, 0x9, 0x4, 0x4, 0x6821, 0x9, 0x4fb, 0x4, 0x6, 0xfffeffff, 0x0, 0xf4f, 0x3, 0x8, 0x7, 0x800, 0x8, 0x2, 0x8e1, 0x2, 0x3, 0xc3a23ac, 0x3, 0x8, 0x0, 0x4, 0x8, 0x4, 0x5, 0x3ff, 0x25, 0x2, 0x10000, 0x3, 0x3, 0x7, 0xb871, 0x2, 0x9, 0x0, 0x81, 0x9, 0x0, 0x2533, 0x4, 0x2, 0x7fff, 0x0, 0x80000000, 0x8, 0x2, 0x6, 0x6, 0x6, 0x7, 0x7, 0x0, 0x19, 0x40, 0x7fff, 0x6, 0x7, 0xd, 0x40, 0x6, 0xf12, 0x8, 0xfffffffa, 0xd67, 0x9, 0x10, 0x4, 0x9, 0x400, 0xfa, 0x5, 0x604d, 0x24000, 0x6, 0x800, 0x8, 0x4, 0x9, 0x10001, 0xd, 0x3ff, 0x6, 0xd, 0x6, 0x4, 0x0, 0x7, 0x40000000, 0x8, 0x4, 0x8001, 0x10001, 0x2, 0xc357, 0x3, 0x37fbabab, 0x2, 0x7, 0x9, 0x10, 0x6, 0x5, 0xa, 0x200, 0xfffffffb, 0x9, 0x1, 0xfffd, 0x9, 0xe32a, 0x2, 0x2]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async)
socket$packet(0x11, 0x3, 0x300) (async)
sendto$packet(r7, &(0x7f00000005c0)="24785466124cebc6c81c38c136a9", 0xe, 0x40000c0, &(0x7f00000001c0)={0x11, 0xf8, r6, 0x1, 0xd8, 0x6, @remote}, 0x14) (async)

945.70802ms ago: executing program 0 (id=4598):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async, rerun: 64)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x26}}}, {{0x2, 0xffff, @rand_addr=0x64010101}}}, 0x108) (async, rerun: 64)
getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1)

855.586405ms ago: executing program 2 (id=4599):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0305000000000000300012800c0001006d6163766c616e002000020000000000aaaabaaaaaaa000008000300031d4340abbc2facd100000008000500", @ANYRES32=r3, @ANYBLOB="0a000100aaaaaaaaaa180000"], 0x64}}, 0x0) (async)
r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r4)
r5 = socket(0x28, 0x5, 0x0) (async)
r6 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r6, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r6, 0x4) (async)
connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="000000000000000000004fc8536d75df4f46b3842e2b54b300"/34, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20)
recvmmsg$unix(r5, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x6cfc686d3553f0e1, 0x0) (async)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x40, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8}, @CTA_TIMEOUT_DCCP_OPEN={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x40}}, 0x0) (async)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

854.803863ms ago: executing program 1 (id=4600):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
socket(0x10, 0x2, 0x5) (async)
socket(0x10, 0x2, 0x5)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x94) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x9c}, [@ldst={0x4, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x94)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
r4 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r6, r5, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}}) (async)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_sset_info={0x31, 0xe, 0xffffffff}})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000240)=r7)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b40000000000140014a610414e18b5a140895cd4e0757910480000000000690035fffff6000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4)
close(r10)
socket$unix(0x1, 0x1, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1) (async)
socket$inet_icmp(0x2, 0x2, 0x1)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_GET(r11, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000840)=ANY=[@ANYBLOB="800000000109010400000000000000000500fffe100002000c000280a4c08f4f1476620aa6050000002f0000004ebb020b233afd77bd94067852864c96cdef13bb40180faa7b79ac040bb4868c63497f"], 0x24}}, 0x0) (async)
sendmsg$NFNL_MSG_CTHELPER_GET(r11, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000000840)=ANY=[@ANYBLOB="800000000109010400000000000000000500fffe100002000c000280a4c08f4f1476620aa6050000002f0000004ebb020b233afd77bd94067852864c96cdef13bb40180faa7b79ac040bb4868c63497f"], 0x24}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)

818.040604ms ago: executing program 0 (id=4601):
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000040601020000000000000000050000090900020073797a32000000000900020073797a30000000000d000100070000000500010007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0)

685.900279ms ago: executing program 2 (id=4602):
r0 = socket$packet(0x11, 0x3, 0x300) (async)
pipe(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000048000480440001800b0001006578746864720000340002800800074000000000050002000000000008000340000000000800064000000001080004", @ANYRES64=r1, @ANYRES32=r2], 0x9c}}, 0x4000000) (async)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x80802, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000040))
ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) (async)
r5 = socket$l2tp(0x2, 0x2, 0x73)
read(r5, 0x0, 0x29) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r6=>0x0]}, &(0x7f0000000240)=0x8) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r8, 0x1, 0x70bd26, 0x0, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x1}}}}, 0x30}}, 0x4) (async)
setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r6, 0x4}, 0x8)
getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000080)={r6, 0x496}, &(0x7f00000000c0)=0x8) (async, rerun: 32)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) (rerun: 32)
close(r0)

634.808941ms ago: executing program 0 (id=4603):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_proto_private(r0, 0x89e9, &(0x7f0000000080)="6b68c4008b60626e976e7578e44e3b1b908f289234422210e860ddb1adb042aa9846daae550a724b8738e173a8b63b0b6d27617ca7cbed05780ed928c3517d3cbd2b340c8157a3740517de94d44bb809327f46a89caaea92aa07c16d11093702357574b727a6e3e264ceeab99eb03f6d6ed96b7d58e4f952f9b0268adfac26b1774d09d23871f2b385d844f3")
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0)

620.433085ms ago: executing program 0 (id=4604):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000100001c0016801800018014000a00ff03acb172310000000008e7ffffffff08001b"], 0x44}}, 0x0)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x200}}, 0x14}, 0x1, 0x0, 0x0, 0x26040085}, 0x8004)

608.876339ms ago: executing program 5 (id=4605):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x11}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008040}, 0x24000000)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

519.426051ms ago: executing program 1 (id=4606):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001780)={{0x1, <r0=>0xffffffffffffffff}, &(0x7f0000001700), &(0x7f0000001740)}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000018c0)=ANY=[@ANYBLOB="0000004c142800000000181100"/28, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000820000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000002c0)=@o_path={&(0x7f0000000640)='./file0\x00', r4}, 0x18)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r4}, &(0x7f0000000080), &(0x7f0000001840)='%pS    \x00'}, 0x20)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000400)={0x0, 0xfffffffffffffefc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00a7cd", @ANYRES16=r2, @ANYBLOB="010000000000ffdbdf25420000000e0001006e657464657673696d0000000f0002006e657464657673696d300000360087006c325f64726f70730000000005008e0001000000"], 0x4c}}, 0x8000)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vcan0\x00', <r5=>0x0})
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0xc, [@volatile={0x4}, @enum64={0x1, 0x2, 0x0, 0x13, 0x0, 0xe, [{0xd, 0x80000000}, {0xe, 0x1}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1, 0x2ce}}, @datasec={0x1, 0x2, 0x0, 0xf, 0x2, [{0x4, 0x4, 0x10}, {0x1, 0x17, 0xffffffff}], "be7c"}, @fwd={0x6}]}, {0x0, [0x2e, 0x5f, 0x61, 0x2e, 0x61, 0x5f, 0x0, 0x0, 0x61, 0x61]}}, &(0x7f00000003c0)=""/75, 0xa0, 0x4b, 0x0, 0x9, 0x10000}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000015c0)={0xffffffffffffffff, 0x20, &(0x7f0000001580)={&(0x7f0000000500)=""/70, 0x46, <r7=>0x0, &(0x7f0000000580)=""/4096, 0x1000}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0xfe320078f8556c65, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="184a000003000000002310000000000095000000000000000000000000000000000000000050b763"], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xf1, &(0x7f00000001c0)=""/241, 0x41000, 0x3, '\x00', r5, @fallback=0x3, r6, 0x8, &(0x7f0000000480)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x4, 0xf, 0x1, 0x400}, 0x10, r7, r1, 0x2, 0x0, &(0x7f0000001600)=[{0x0, 0x1, 0xb, 0x3}, {0x2, 0x5, 0x7}], 0x10, 0x200}, 0x94)

518.233019ms ago: executing program 0 (id=4607):
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x10, 0x3, 0x0) (async)
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r2, 0x1, 0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) (async)
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20)
setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ipvlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', <r4=>0x0})
setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4)
setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
r5 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
socket$nl_route(0x10, 0x3, 0x0) (async)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x54, 0x2c, 0xd27, 0xffffffff, 0x1, {0x0, 0x0, 0x0, r6, {0x4, 0xd}, {}, {0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x3}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_BOS={0x5, 0x3, 0x3}]}}, @TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40081}, 0x24000084)
bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10)
write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24)
r8 = socket$netlink(0x10, 0x3, 0x400000000000004)
writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1)

486.845519ms ago: executing program 2 (id=4608):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x1c, &(0x7f00000000c0)=""/28, 0x41100, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x0, 0x1, 0x80000000, 0xf34}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000140)=[0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000180)=[{0x3, 0x2, 0x10, 0x4}, {0x4, 0x4, 0x1, 0x7}, {0x0, 0x5, 0x0, 0x7}, {0x3, 0x1, 0x7, 0xa}, {0x0, 0x2, 0xb, 0x8}], 0x10, 0xa}, 0x94)
read(r0, &(0x7f00000002c0)=""/236, 0xec)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, 0x1409, 0x300, 0x70bd2c, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x884}, 0x8011)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000540), &(0x7f0000000580)=0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000005c0))
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x9c, 0x1, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFQA_CT={0x10, 0xb, 0x0, 0x1, [@CTA_TUPLE_MASTER={0xc, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, @NFQA_CT={0x4c, 0xb, 0x0, 0x1, [@CTA_PROTOINFO={0x40, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x3c, 0x1, 0x0, 0x1, [@CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x2, 0x9}}, @CTA_PROTOINFO_TCP_FLAGS_REPLY={0x6, 0x5, {0x8, 0x2a}}, @CTA_PROTOINFO_TCP_FLAGS_ORIGINAL={0x6, 0x4, {0x5, 0x10}}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x2}, @CTA_PROTOINFO_TCP_WSCALE_ORIGINAL={0x5, 0x2, 0xa9}, @CTA_PROTOINFO_TCP_WSCALE_REPLY={0x5, 0x3, 0x1}, @CTA_PROTOINFO_TCP_STATE={0x5, 0x1, 0x8}]}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x9}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xe}, @NFQA_CT={0x1c, 0xb, 0x0, 0x1, [@CTA_LABELS={0x18, 0x16, 0x1, 0x0, [0xc0000000, 0x3, 0x8000, 0x2, 0xfff]}]}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}]}, 0x9c}}, 0xc4)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000780))
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000007c0)={'wlan1\x00'})
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000800))
r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @broadcast}, &(0x7f0000000880)=0x10)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f00000008c0)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58)
r7 = socket$isdn(0x22, 0x3, 0x2)
getsockopt$MISDN_TIME_STAMP(r7, 0x0, 0x1, &(0x7f0000000940), &(0x7f0000000980)=0x4)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000009c0)={<r8=>r5})
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1fcc8034bccb98c}, 0xc, &(0x7f0000000b80)={&(0x7f0000000a80)={0x100, r9, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1c}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8848}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4}], @NL80211_ATTR_HE_OBSS_PD={0x7c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x13}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7f}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x11}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x12}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xb}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x72}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "001272e9437bd22d"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x5}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "222da575c4e6f58a"}, @NL80211_HE_OBSS_PD_ATTR_BSS_COLOR_BITMAP={0xc, 0x4, "a0464c37c080b782"}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1ff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1707}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31a}], @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x1)
r10 = socket$inet6_sctp(0xa, 0x3, 0x84)
ioctl$BTRFS_IOC_SNAP_CREATE(r8, 0x50009401, &(0x7f0000000c00)={{r10}, "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"})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001c40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001c80)={'wpan0\x00', <r13=>0x0})
sendmsg$IEEE802154_LIST_IFACE(r11, &(0x7f0000001d40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x40, r12, 0x200, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0xc050}, 0xc0)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001e00)=@nat={'nat\x00', 0x1b, 0x5, 0x448, 0x1b0, 0x0, 0xffffffff, 0x1b0, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, &(0x7f0000001d80), {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff, 0xffffff00, 'vlan0\x00', 'veth0\x00', {}, {0xff}, 0x6, 0x2, 0x10}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x14, @multicast2, @empty, @port=0x4e24, @gre_key=0x401}}}}, {{@ip={@rand_addr=0x64010100, @remote, 0x0, 0xffffff00, 'bond_slave_0\x00', 'vcan0\x00', {0xff}, {}, 0x0, 0x0, 0x8}, 0x0, 0xa0, 0xe8, 0x0, {}, [@common=@ah={{0x30}, {[0xfffff801, 0x40], 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv6=@empty, @ipv4=@rand_addr=0x64010100, @icmp_id=0x64, @gre_key}}}, {{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@addrtype={{0x30}, {0x230, 0x1a2, 0x1}}, @common=@addrtype={{0x30}, {0x11, 0x114, 0x1, 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x2, @remote, @broadcast, @port=0x4e20, @port=0x4e23}}}}, {{@ip={@private=0xa010101, @multicast1, 0xff, 0xffffffff, 'wlan0\x00', 'veth0_to_batadv\x00', {0xff}, {}, 0x2f, 0x2}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@addrtype={{0x30}, {0x4b0, 0x208, 0x0, 0x1}}, @common=@socket0={{0x20}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x28}, @icmp_id=0x66, @gre_key=0x9e6d}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8)
sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f00000023c0)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x42000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002300)={0x54, r9, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x14}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x21c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x280}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x8000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002400))
setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r6, 0x84, 0x5, &(0x7f0000002540)={0x0, @in6={{0xa, 0x4e21, 0x5, @mcast1, 0x1}}}, 0x84)

481.915684ms ago: executing program 5 (id=4609):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff}, 0x6)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1\x00', <r6=>0x0}) (rerun: 64)
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) (async)
sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd893c9cf412ecb4e90000a9af0300", @ANYRES32=r3, @ANYBLOB="0c009900200d000065000000"], 0x28}, 0x1, 0x0, 0x0, 0x44010}, 0x4000000)

427.46418ms ago: executing program 1 (id=4610):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0xfffffffffffffe57)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="4b6a1bc33f6364cd8cfa6f0035e78321403825b1f336e4ba06f1dd123809ae8b32db03e4f1373a42a7a66637065c3578", 0x30)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xfff1, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newqdisc={0x6c, 0x24, 0x4, 0x30bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xb, 0xe}, {0xd, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xc9}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x800, 0x8, 0x5}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7c64}, @TCA_RATE={0x6, 0x5, {0x7, 0x15}}, @TCA_RATE={0x6, 0x5, {0x5, 0xce}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4c005}, 0x20044000)
sendmmsg(r1, &(0x7f0000007fc0), 0x6, 0x2200c810)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000080)=0xfffffffc, 0x4)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x9, 0x4)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="840000001000f5a400000000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="00000000000000006400128009000100626f6e640000000054000280050001000500000005000d000200000008000200", @ANYRESHEX], 0x84}}, 0x0)

360.54165ms ago: executing program 1 (id=4611):
r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r1=>0x0}) (async)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r2=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r0, 0x4, 0x70bd2b, 0x13de, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x7f}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 32)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r4, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x40) (async, rerun: 32)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000380), r3) (rerun: 32)
sendmsg$NLBL_MGMT_C_REMOVE(r3, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x48, r5, 0x8, 0x70bd28, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40041}, 0x40) (async, rerun: 64)
sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pimreg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20008001) (rerun: 64)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000005c0)={'wpan4\x00', <r7=>0x0})
sendmsg$NLBL_CIPSOV4_C_LIST(r6, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x3}, {0x5, 0x3, 0x2}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000840)
sendmsg$NLBL_MGMT_C_LISTDEF(r6, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ')/\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @broadcast}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040871}, 0x804) (async, rerun: 64)
r8 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={0xffffffffffffffff, &(0x7f0000000840)="3356e94b822a70591f6a2c07c5561fb0e42de74e14c0", &(0x7f0000000880)=@udp=r8, 0x1}, 0x20)
r9 = socket$inet6(0xa, 0x80000, 0x0)
bind$inet6(r9, &(0x7f0000000900)={0xa, 0x4e24, 0x3, @empty, 0x1}, 0x1c) (async)
sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x2c, r0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x40080) (async)
sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, r4, 0x810, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) (async)
r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_SCAN_REQ(r10, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x12}, @IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x63}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0xa}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0xf9}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x2}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3f}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x8) (async, rerun: 32)
sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x50, r5, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x9}]}, 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x4884) (async, rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e00)=<r11=>0x0) (async)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e40)=<r12=>0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000e80)=<r13=>0x0) (async, rerun: 32)
ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000ec0)=<r14=>0x0) (rerun: 32)
sendmsg$NFC_CMD_DEP_LINK_DOWN(r6, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x5c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001000)={<r15=>r9})
sendmsg$TIPC_NL_MEDIA_SET(r15, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)={0x5c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c0d4)

349.090045ms ago: executing program 0 (id=4612):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000600)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)={0x134, 0x2, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_NAT={0x5c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x1c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_NAT={0xa0, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x84, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x81}, 0x800) (async)
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000030101030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async)
socket(0x9, 0x7e67755fc11ea131, 0x0) (async)
sendmsg$nl_route(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002000)=@ipv6_delrule={0x54, 0x21, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0x2, 0x8, 0x0, 0x0, 0x3, 0x3}, [@FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x6c9b}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="f8000000160001000000000000000000fe8000000000000000000000000000aae000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000005500000000010000000000000000000000000000000a00001000"/176], 0xf8}}, 0x0) (async)
sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0)

295.64476ms ago: executing program 5 (id=4613):
r0 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETDEVINFO(r0, 0x80044942, 0xfffffffffffffffe) (async)
ioctl$IMGETDEVINFO(r0, 0x80044942, 0xfffffffffffffffe)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a2000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

295.148424ms ago: executing program 2 (id=4614):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
unshare(0x22020400)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x7fff}, {0x6}]}, 0x10)
sendmsg$inet(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bde49a54", 0xe4bd}], 0x1}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
sendmmsg$unix(r2, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="620ac4ff000000007110ac000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90)

173.724277ms ago: executing program 5 (id=4615):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001480), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000f30f5bc00003b2daf7a966260523b50017c154600ab9d6a2c0392fc834b465603ef4f8623f9754cc645d371f7f2d03f5cf0df5e28f5cb2c429b6b3f5c0cdecfa64250030c96912cbf754f2a02b6", @ANYRES16=r1, @ANYBLOB="010000000000000000000900000004000380"], 0x18}}, 0x0)
sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250f000000080005000800000008000400020000002400028006000f00070000000800040007000000080009009309000006000e004e200000080005fb040000002000038014000200697036746e6c30000000000000000000080001000000000008000600ae000000"], 0x78}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000080)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r2) (async, rerun: 32)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000140)={'wpan0\x00', <r5=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800010050dcbebe8ea5f5821e75bce4afaa92f6a6deeaae9767957a26c8d05928854fe974604c48ff72e1197831f3358cef6ca798544ef9c810c15de7013f29d850c544a046ed1eb6d8399af6fd829edef290b6c11472180f86", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf25210000001c002d8008000200030000000500010009000000050004000100000008000300", @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0xc0)

91.860294ms ago: executing program 1 (id=4616):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x200}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280)={r3}, &(0x7f0000000380)=0x8)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x90)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0xa, [@func_proto, @var={0xb, 0x0, 0x0, 0xe, 0x3}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x56}, 0x28)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe0}]}, &(0x7f0000000180)=0x10)

35.520365ms ago: executing program 2 (id=4617):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5c8, 0x0, 0x220, 0x150, 0x220, 0x220, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x4f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@hashlimit1={{0x58}, {'\x00', {0x7, 0x8001, 0x9, 0x40000009, 0x539, 0x8, 0xe92c, 0x20, 0x8}, {0x1}}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@loopback, 0x0, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xd8, 0x118, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x1], 0xffff, 0x24, 0x2}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x628)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r1, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r5}, @void}}}, 0x24}}, 0x240040c0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r6, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a0004"], 0x24}}, 0x0) (async)
sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000005001a0004"], 0x24}}, 0x0)
epoll_create1(0x0)
socket(0x10, 0x80002, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) (async)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
close(0x4)
sendmmsg(r0, &(0x7f0000000340), 0x222874f4405e5c0, 0x40840)

34.681113ms ago: executing program 4 (id=4618):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet6(r0, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000340)={0xa, 0x4e23, 0x4, @private2, 0x58}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000380)="998165", 0x3}], 0x1}}], 0x2, 0x0)
shutdown(r0, 0x1)
setsockopt(r0, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)={<r1=>0x0, 0x64, 0x6, [0x100, 0x6, 0x101, 0x0, 0x2, 0x8001]}, &(0x7f0000000140)=0x14)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
close(0xffffffffffffffff)
close(0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket(0x15, 0x5, 0x0)
getsockopt(r2, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002)
r3 = socket(0x8000000010, 0x2, 0x0)
write(r3, &(0x7f00000002c0)="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", 0xfc)
r4 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r4, &(0x7f0000000400)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10)
sendmmsg$inet(r4, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})
r6 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000000c0)={0x32, @broadcast, 0x4e21, 0x0, 'rr\x00', 0x1, 0x1, 0x67}, 0x2c)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000b00)=ANY=[@ANYRESOCT=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
socket$kcm(0xa, 0x2, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffd, 0x3, {0x0, 0x0, 0x0, 0x0, 0xd126a8577c57125b, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x9, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0xfc56}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

0s ago: executing program 1 (id=4619):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x4}, 0x38)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4600, 0x0)
r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x4c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'lc\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}]}]}, 0x4c}}, 0x0)

kernel console output (not intermixed with test programs):

int in maxseg socket option.
[  446.803969][T16776] Use struct sctp_assoc_value instead
[  446.866727][T16761] bond0: (slave bond_slave_0): Releasing backup interface
[  446.903579][T16761] team0: Port device team_slave_0 removed
[  446.928829][T16761] team0: Port device team_slave_1 removed
[  446.945587][T16761] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  446.965274][T16761] batman_adv: batadv0: Removing interface: batadv_slave_0
[  446.988492][T16761] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  447.008644][T16761] batman_adv: batadv0: Removing interface: batadv_slave_1
[  447.032420][T16761] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  447.081515][T16745] ip6_vti0 speed is unknown, defaulting to 1000
[  447.204972][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2975'.
[  447.225187][T16799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2975'.
[  447.463987][T16812] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2981'.
[  447.742120][T16820] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2984'.
[  447.767880][T16830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2985'.
[  447.801002][T16831] bridge0: port 3(ipvlan2) entered blocking state
[  447.820274][T16831] bridge0: port 3(ipvlan2) entered disabled state
[  447.826945][T16831] ipvlan2: entered allmulticast mode
[  447.839681][T16831] bridge0: entered allmulticast mode
[  447.849166][T16831] ipvlan2: left allmulticast mode
[  447.860544][T16831] bridge0: left allmulticast mode
[  447.861991][T16833] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2984'.
[  447.916990][T16833] netlink: 'syz.5.2984': attribute type 1 has an invalid length.
[  447.944812][ T1326] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  447.966527][ T1326] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  447.970354][T16820] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2984'.
[  447.999210][ T1326] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  448.020764][ T1326] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  448.165401][T16850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2993'.
[  448.183063][T16850] netlink: 'syz.2.2993': attribute type 3 has an invalid length.
[  448.206811][T16850] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  448.327974][T16745] chnl_net:caif_netlink_parms(): no params data found
[  448.405680][T16862] openvswitch: netlink: Geneve opt len 17 is not a multiple of 4.
[  448.415396][T16864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2996'.
[  448.432054][T16864] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2996'.
[  448.441564][   T52] Bluetooth: hci6: command tx timeout
[  448.453282][T16864] netlink: 'syz.2.2996': attribute type 14 has an invalid length.
[  448.465248][T16862] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  448.481235][T16864] netlink: 'syz.2.2996': attribute type 13 has an invalid length.
[  448.673823][T16745] bridge0: port 1(bridge_slave_0) entered blocking state
[  448.690909][T16884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.699781][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  448.712385][T16745] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.719811][T16745] bridge_slave_0: entered allmulticast mode
[  448.732249][T16745] bridge_slave_0: entered promiscuous mode
[  448.745240][T16745] bridge0: port 2(bridge_slave_1) entered blocking state
[  448.755233][T16745] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.769169][T16745] bridge_slave_1: entered allmulticast mode
[  448.777364][T16745] bridge_slave_1: entered promiscuous mode
[  448.876290][T16745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  448.952320][T16892] tipc: Started in network mode
[  448.958362][T16892] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  448.967704][T16892] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  448.984930][T16745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  449.020412][T16897] netlink: 'syz.4.3006': attribute type 13 has an invalid length.
[  449.145728][   T36] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  449.254846][   T36] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  449.311525][T16745] team0: Port device team_slave_0 added
[  449.360527][   T36] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  449.411161][   T36] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  449.462644][T16909] netlink: 'syz.5.3008': attribute type 1 has an invalid length.
[  449.534310][T16745] team0: Port device team_slave_1 added
[  449.592394][T16919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.636614][T16919] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  449.774903][T16745] batman_adv: batadv0: Adding interface: batadv_slave_0
[  449.782131][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.839287][T16745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  449.890875][T16745] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.899051][T16745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  449.960902][T16745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.066786][T16745] hsr_slave_0: entered promiscuous mode
[  450.082658][T16745] hsr_slave_1: entered promiscuous mode
[  450.100126][T16745] debugfs: 'hsr0' already exists in 'hsr'
[  450.106015][T16745] Cannot create hsr debugfs directory
[  450.111888][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  450.222445][T16941] syzkaller0: entered promiscuous mode
[  450.233680][T16941] syzkaller0: entered allmulticast mode
[  450.510165][   T52] Bluetooth: hci6: command tx timeout
[  450.633273][   T61] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  450.650561][   T61] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  450.673324][   T61] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  450.701271][   T61] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  450.823504][T16953] syzkaller0: entered promiscuous mode
[  450.829033][T16953] syzkaller0: entered allmulticast mode
[  450.840173][T16953] netlink: 'syz.1.3020': attribute type 11 has an invalid length.
[  450.849484][T16956] xt_hashlimit: max too large, truncated to 1048576
[  450.851062][T16953] 0: reclassify loop, rule prio 0, protocol 800
[  451.127578][T16967] netlink: 'syz.1.3024': attribute type 3 has an invalid length.
[  451.291356][T16745] bond0: (slave ������): Releasing backup interface
[  451.311373][T16981] netlink: 'syz.1.3024': attribute type 7 has an invalid length.
[  451.330133][T16745] netdevsim netdevsim0 ������ (unregistering): left promiscuous mode
[  451.371595][T16973] siw: device registration error -23
[  451.535112][T16990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.551886][T16990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.571908][T16990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.581547][T16990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.724713][T16745] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  451.745952][T17002] netlink: 'syz.5.3035': attribute type 13 has an invalid length.
[  451.766811][T16745] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  451.780432][T16745] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  451.798189][T16745] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  451.912486][T17017] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  451.933822][T16745] 8021q: adding VLAN 0 to HW filter on device bond0
[  452.004807][T16745] 8021q: adding VLAN 0 to HW filter on device team0
[  452.032733][ T8779] bridge0: port 1(bridge_slave_0) entered blocking state
[  452.040040][ T8779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  452.151739][ T8779] bridge0: port 2(bridge_slave_1) entered blocking state
[  452.158907][ T8779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  452.224153][T17035] __nla_validate_parse: 17 callbacks suppressed
[  452.224174][T17035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'.
[  452.400258][T17046] netlink: 'syz.1.3047': attribute type 8 has an invalid length.
[  452.591398][   T52] Bluetooth: hci6: command tx timeout
[  452.796538][T16745] 8021q: adding VLAN 0 to HW filter on device batadv0
[  452.817157][T17080] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3053'.
[  453.003854][T16745] veth0_vlan: entered promiscuous mode
[  453.043357][T16745] veth1_vlan: entered promiscuous mode
[  453.142772][T16745] veth0_macvtap: entered promiscuous mode
[  453.176463][T16745] veth1_macvtap: entered promiscuous mode
[  453.215056][T17101] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  453.233080][T16745] batman_adv: batadv0: Interface activated: batadv_slave_0
[  453.241165][T17101] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  453.304079][T16745] batman_adv: batadv0: Interface activated: batadv_slave_1
[  453.353293][   T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  453.376906][   T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  453.399844][   T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  453.419284][   T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  453.520766][T17111] FAULT_INJECTION: forcing a failure.
[  453.520766][T17111] name failslab, interval 1, probability 0, space 0, times 0
[  453.554049][T17111] CPU: 1 UID: 0 PID: 17111 Comm: syz.4.3066 Not tainted syzkaller #0 PREEMPT(full) 
[  453.554074][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  453.554085][T17111] Call Trace:
[  453.554092][T17111]  <TASK>
[  453.554099][T17111]  dump_stack_lvl+0x189/0x250
[  453.554122][T17111]  ? __pfx____ratelimit+0x10/0x10
[  453.554143][T17111]  ? __pfx_dump_stack_lvl+0x10/0x10
[  453.554160][T17111]  ? __pfx__printk+0x10/0x10
[  453.554196][T17111]  should_fail_ex+0x414/0x560
[  453.554221][T17111]  should_failslab+0xa8/0x100
[  453.554246][T17111]  __kmalloc_cache_noprof+0x6f/0x6f0
[  453.554277][T17111]  ? __sctp_v6_cmp_addr+0x1dc/0x510
[  453.554294][T17111]  ? sctp_v6_cmp_addr+0x15/0xd0
[  453.554309][T17111]  ? sctp_add_bind_addr+0x8c/0x370
[  453.554333][T17111]  sctp_add_bind_addr+0x8c/0x370
[  453.554355][T17111]  sctp_copy_local_addr_list+0x30b/0x4e0
[  453.554376][T17111]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  453.554394][T17111]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  453.554413][T17111]  ? sctp_v6_is_any+0x64/0x80
[  453.554432][T17111]  ? sctp_copy_one_addr+0x93/0x360
[  453.554453][T17111]  sctp_bind_addr_copy+0xb3/0x3c0
[  453.554472][T17111]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  453.554499][T17111]  sctp_connect_new_asoc+0x2e0/0x690
[  453.554523][T17111]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  453.554545][T17111]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  453.554565][T17111]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  453.554584][T17111]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  453.554605][T17111]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  453.554627][T17111]  ? security_sctp_bind_connect+0x7e/0x2e0
[  453.554651][T17111]  sctp_sendmsg+0x155c/0x2810
[  453.554679][T17111]  ? __pfx_sctp_sendmsg+0x10/0x10
[  453.554693][T17111]  ? aa_sk_perm+0x15f/0x920
[  453.554716][T17111]  ? aa_sk_perm+0x7ee/0x920
[  453.554742][T17111]  ? __pfx_aa_sk_perm+0x10/0x10
[  453.554768][T17111]  ? sock_rps_record_flow+0x19/0x410
[  453.554788][T17111]  ? inet_sendmsg+0x2f4/0x370
[  453.554805][T17111]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  453.554827][T17111]  __sock_sendmsg+0x19c/0x270
[  453.554849][T17111]  __sys_sendto+0x3bd/0x520
[  453.554873][T17111]  ? __pfx___sys_sendto+0x10/0x10
[  453.554892][T17111]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  453.554921][T17111]  ? __fget_files+0x3a0/0x420
[  453.554942][T17111]  ? ksys_write+0x22a/0x250
[  453.554963][T17111]  ? __pfx_ksys_write+0x10/0x10
[  453.554986][T17111]  __x64_sys_sendto+0xde/0x100
[  453.555011][T17111]  do_syscall_64+0xfa/0xf80
[  453.555032][T17111]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.555049][T17111]  ? clear_bhb_loop+0x60/0xb0
[  453.555069][T17111]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  453.555085][T17111] RIP: 0033:0x7fe485f8f749
[  453.555100][T17111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  453.555115][T17111] RSP: 002b:00007fe486d8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  453.555133][T17111] RAX: ffffffffffffffda RBX: 00007fe4861e5fa0 RCX: 00007fe485f8f749
[  453.555145][T17111] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  453.555155][T17111] RBP: 00007fe486d8b090 R08: 000020000005ffe4 R09: 000000000000001c
[  453.555166][T17111] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  453.555176][T17111] R13: 00007fe4861e6038 R14: 00007fe4861e5fa0 R15: 00007ffdc1285be8
[  453.555206][T17111]  </TASK>
[  453.936636][ T6745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  453.962948][ T6745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.021724][ T6745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  454.060975][ T6745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  454.074608][T17120] netlink: 'syz.2.3069': attribute type 16 has an invalid length.
[  454.096811][T17120] netlink: 'syz.2.3069': attribute type 17 has an invalid length.
[  454.121081][T17118] syzkaller1: entered promiscuous mode
[  454.126688][T17118] syzkaller1: entered allmulticast mode
[  454.268370][T17120] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.300561][T17120] 8021q: adding VLAN 0 to HW filter on device team0
[  454.312794][T17120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  454.680161][   T52] Bluetooth: hci6: command tx timeout
[  454.782041][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3078'.
[  454.791775][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3078'.
[  454.826863][T17151] netlink: 'syz.0.3076': attribute type 23 has an invalid length.
[  454.871616][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3078'.
[  454.872607][T17157] FAULT_INJECTION: forcing a failure.
[  454.872607][T17157] name failslab, interval 1, probability 0, space 0, times 0
[  454.939994][T17150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3078'.
[  454.941793][T17157] CPU: 1 UID: 0 PID: 17157 Comm: syz.4.3079 Not tainted syzkaller #0 PREEMPT(full) 
[  454.941816][T17157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  454.941826][T17157] Call Trace:
[  454.941833][T17157]  <TASK>
[  454.941840][T17157]  dump_stack_lvl+0x189/0x250
[  454.941863][T17157]  ? __pfx____ratelimit+0x10/0x10
[  454.941883][T17157]  ? __pfx_dump_stack_lvl+0x10/0x10
[  454.941901][T17157]  ? __pfx__printk+0x10/0x10
[  454.941937][T17157]  should_fail_ex+0x414/0x560
[  454.941960][T17157]  should_failslab+0xa8/0x100
[  454.941984][T17157]  __kmalloc_cache_noprof+0x6f/0x6f0
[  454.942003][T17157]  ? __sctp_v6_cmp_addr+0x1dc/0x510
[  454.942019][T17157]  ? sctp_v6_cmp_addr+0x15/0xd0
[  454.942034][T17157]  ? sctp_add_bind_addr+0x8c/0x370
[  454.942049][T17157]  ? sctp_add_bind_addr+0xb0/0x370
[  454.942071][T17157]  sctp_add_bind_addr+0x8c/0x370
[  454.942092][T17157]  sctp_copy_local_addr_list+0x30b/0x4e0
[  454.942111][T17157]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  454.942124][T17157]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  454.942145][T17157]  ? sctp_v6_is_any+0x64/0x80
[  454.942159][T17157]  ? sctp_copy_one_addr+0x93/0x360
[  454.942175][T17157]  sctp_bind_addr_copy+0xb3/0x3c0
[  454.942189][T17157]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  454.942217][T17157]  sctp_connect_new_asoc+0x2e0/0x690
[  454.942241][T17157]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  454.942262][T17157]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  454.942282][T17157]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  454.942300][T17157]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  454.942320][T17157]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  454.942342][T17157]  ? security_sctp_bind_connect+0x7e/0x2e0
[  454.942373][T17157]  sctp_sendmsg+0x155c/0x2810
[  454.942404][T17157]  ? __pfx_sctp_sendmsg+0x10/0x10
[  454.942421][T17157]  ? aa_sk_perm+0x15f/0x920
[  454.942445][T17157]  ? aa_sk_perm+0x7ee/0x920
[  454.942472][T17157]  ? __pfx_aa_sk_perm+0x10/0x10
[  454.942498][T17157]  ? sock_rps_record_flow+0x19/0x410
[  454.942518][T17157]  ? inet_sendmsg+0x2f4/0x370
[  454.942532][T17157]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  454.942556][T17157]  __sock_sendmsg+0x19c/0x270
[  454.942578][T17157]  __sys_sendto+0x3bd/0x520
[  454.942602][T17157]  ? __pfx___sys_sendto+0x10/0x10
[  454.942620][T17157]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  454.942653][T17157]  ? __fget_files+0x3a0/0x420
[  454.942679][T17157]  ? ksys_write+0x22a/0x250
[  454.942700][T17157]  ? __pfx_ksys_write+0x10/0x10
[  454.942723][T17157]  __x64_sys_sendto+0xde/0x100
[  454.942747][T17157]  do_syscall_64+0xfa/0xf80
[  454.942768][T17157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.942784][T17157]  ? clear_bhb_loop+0x60/0xb0
[  454.942804][T17157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  454.942818][T17157] RIP: 0033:0x7fe485f8f749
[  454.942833][T17157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  454.942846][T17157] RSP: 002b:00007fe486d8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  454.942864][T17157] RAX: ffffffffffffffda RBX: 00007fe4861e5fa0 RCX: 00007fe485f8f749
[  454.942875][T17157] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  454.942885][T17157] RBP: 00007fe486d8b090 R08: 000020000005ffe4 R09: 000000000000001c
[  454.942896][T17157] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  454.942905][T17157] R13: 00007fe4861e6038 R14: 00007fe4861e5fa0 R15: 00007ffdc1285be8
[  454.942934][T17157]  </TASK>
[  455.078461][  T937] IPVS: starting estimator thread 0...
[  455.369639][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  455.391545][T17161] IPVS: using max 32 ests per chain, 76800 per kthread
[  455.417549][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  455.433405][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  455.443975][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  455.453172][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  455.490878][ T8778] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  455.502130][ T8778] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.513685][ T8778] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  455.650828][ T8778] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  455.666322][ T8778] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.678883][ T8778] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  455.696933][T17168] lo speed is unknown, defaulting to 1000
[  455.696957][T17176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3086'.
[  455.732671][T17176] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3086'.
[  455.846197][ T8778] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  455.858638][T17192] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3089'.
[  455.878331][ T8778] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  455.910921][ T8778] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  455.946106][T17199] netlink: 'syz.4.3092': attribute type 11 has an invalid length.
[  456.013190][T17187] syzkaller0: entered promiscuous mode
[  456.019189][T17187] syzkaller0: entered allmulticast mode
[  456.020529][T17199] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3092'.
[  456.041612][T17199] netlink: 'syz.4.3092': attribute type 3 has an invalid length.
[  456.360433][T17209] netlink: 'syz.4.3092': attribute type 13 has an invalid length.
[  457.564306][ T5842] Bluetooth: hci0: command tx timeout
[  457.980017][T17168] ip6_vti0 speed is unknown, defaulting to 1000
[  458.007153][T17209] gretap0: refused to change device tx_queue_len
[  458.038128][T17209] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  458.102300][T17212] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.3093'.
[  458.183815][ T8778] bond0: (slave ������): Releasing backup interface
[  458.233907][ T8778] netdevsim netdevsim1 ������ (unregistering): left promiscuous mode
[  458.252613][ T8778] netdevsim netdevsim1 ������ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  458.262852][ T8778] netdevsim netdevsim1 ������ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.273517][ T8778] netdevsim netdevsim1 ������ (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  458.309407][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3095'.
[  458.492194][T17229] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  458.503401][T17223] team0: Port device team_slave_0 removed
[  458.619430][T17229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3100'.
[  458.649744][T17229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3100'.
[  458.801594][T17244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.331712][ T8778] ip6gretap0 (unregistering): left promiscuous mode
[  459.560054][T17288] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  459.607813][ T8778] dvmrp8 (unregistering): left allmulticast mode
[  459.632263][ T8778] dvmrp0 (unregistering): left allmulticast mode
[  459.640405][ T5842] Bluetooth: hci0: command tx timeout
[  459.656624][ T8778] bond5 (unregistering): (slave geneve2): Releasing active interface
[  459.932414][ T8778] bond4 (unregistering): (slave bridge4): Releasing backup interface
[  460.147416][ T8778] bond0 (unregistering): left promiscuous mode
[  460.157666][ T8778] bond0 (unregistering): Released all slaves
[  460.171449][ T8778] bond1 (unregistering): Released all slaves
[  460.184128][ T8778] bond2 (unregistering): Released all slaves
[  460.314137][ T8778] bond3 (unregistering): Released all slaves
[  460.331742][ T8778] bond4 (unregistering): Released all slaves
[  460.346104][ T8778] bond5 (unregistering): Released all slaves
[  460.359631][ T8778] bond6 (unregistering): Released all slaves
[  460.379511][ T8778] bond7 (unregistering): Released all slaves
[  460.393837][ T8778] bond8 (unregistering): Released all slaves
[  460.517866][T17168] chnl_net:caif_netlink_parms(): no params data found
[  460.628505][ T8778] : left promiscuous mode
[  460.714104][T17302] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  460.731605][T17302] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  460.771576][ T8778] tipc: Disabling bearer <udp:syz2>
[  460.808217][ T8778] tipc: Left network mode
[  460.972821][T17168] bridge0: port 1(bridge_slave_0) entered blocking state
[  460.980923][T17168] bridge0: port 1(bridge_slave_0) entered disabled state
[  460.988214][T17168] bridge_slave_0: entered allmulticast mode
[  460.997113][T17168] bridge_slave_0: entered promiscuous mode
[  461.008967][T17168] bridge0: port 2(bridge_slave_1) entered blocking state
[  461.017047][T17321] netlink: 'syz.4.3124': attribute type 9 has an invalid length.
[  461.025391][T17168] bridge0: port 2(bridge_slave_1) entered disabled state
[  461.033662][T17321] netlink: 'syz.4.3124': attribute type 11 has an invalid length.
[  461.038682][T17168] bridge_slave_1: entered allmulticast mode
[  461.048599][T17321] netlink: 'syz.4.3124': attribute type 12 has an invalid length.
[  461.051560][T17168] bridge_slave_1: entered promiscuous mode
[  461.058051][T17321] netlink: 211560 bytes leftover after parsing attributes in process `syz.4.3124'.
[  461.254553][T17168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  461.303562][T17168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  461.525427][T17168] team0: Port device team_slave_0 added
[  461.555614][T17351] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 !
[  461.657226][T17168] team0: Port device team_slave_1 added
[  461.710082][ T5842] Bluetooth: hci0: command tx timeout
[  461.902946][T17168] batman_adv: batadv0: Adding interface: batadv_slave_0
[  461.930093][T17168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  461.969023][T17168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  462.010204][ T8778] hsr_slave_0: left promiscuous mode
[  462.018548][ T8778] hsr_slave_1: left promiscuous mode
[  462.059875][ T8778] veth0_macvtap: left promiscuous mode
[  462.071885][ T8778] veth1_vlan: left promiscuous mode
[  463.024985][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3139'.
[  463.034799][T17386] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3139'.
[  463.199836][   T12] smc: removing ib device s
z1
[  463.273540][T17168] batman_adv: batadv0: Adding interface: batadv_slave_1
[  463.290278][T17168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  463.329724][T17168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  463.377815][ T5938] lo speed is unknown, defaulting to 1000
[  463.394166][ T5938] s
z1: Port: 1 Link DOWN
[  463.424622][T17382] bridge6: entered promiscuous mode
[  463.429879][T17382] bridge6: entered allmulticast mode
[  463.628807][T17410] netlink: 'syz.4.3145': attribute type 1 has an invalid length.
[  463.728921][T17410] 8021q: adding VLAN 0 to HW filter on device bond1
[  463.795029][ T5842] Bluetooth: hci0: command tx timeout
[  464.019059][T17168] hsr_slave_0: entered promiscuous mode
[  464.068731][T17168] hsr_slave_1: entered promiscuous mode
[  464.080883][T17168] debugfs: 'hsr0' already exists in 'hsr'
[  464.086711][T17168] Cannot create hsr debugfs directory
[  464.265736][T17420] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.382525][T17441] sch_tbf: burst 274 is lower than device lo mtu (65550) !
[  464.494163][T17420] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.617599][T17450] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3153'.
[  464.693330][T17453] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3153'.
[  464.957679][T17420] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.020083][T17459] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma?
[  465.026075][T17463] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3155'.
[  465.299234][T17420] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  465.483816][T17470] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3158'.
[  465.505461][T17471] delete_channel: no stack
[  465.585217][T17483] IPv6: NLM_F_REPLACE set, but no existing node found!
[  465.653316][ T1139] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  465.697377][ T6517] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  465.730190][   T11] block nbd0: Possible stuck request ffff888024c90000: control (read@0,1024B). Runtime 240 seconds
[  465.741645][   T11] block nbd0: Possible stuck request ffff888024c901c0: control (read@1024,1024B). Runtime 240 seconds
[  465.752938][   T11] block nbd0: Possible stuck request ffff888024c90380: control (read@2048,1024B). Runtime 240 seconds
[  465.764674][   T11] block nbd0: Possible stuck request ffff888024c90540: control (read@3072,1024B). Runtime 240 seconds
[  465.792986][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  465.813339][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  465.886709][ T8778] IPVS: stop unused estimator thread 0...
[  466.098926][T17496] pim6reg1: entered promiscuous mode
[  466.112947][T17496] pim6reg1: entered allmulticast mode
[  466.141917][T17498] FAULT_INJECTION: forcing a failure.
[  466.141917][T17498] name failslab, interval 1, probability 0, space 0, times 0
[  466.161750][T17498] CPU: 0 UID: 0 PID: 17498 Comm: syz.4.3166 Not tainted syzkaller #0 PREEMPT(full) 
[  466.161776][T17498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  466.161787][T17498] Call Trace:
[  466.161794][T17498]  <TASK>
[  466.161802][T17498]  dump_stack_lvl+0x189/0x250
[  466.161825][T17498]  ? __pfx____ratelimit+0x10/0x10
[  466.161846][T17498]  ? __pfx_dump_stack_lvl+0x10/0x10
[  466.161864][T17498]  ? __pfx__printk+0x10/0x10
[  466.161901][T17498]  should_fail_ex+0x414/0x560
[  466.161925][T17498]  should_failslab+0xa8/0x100
[  466.161949][T17498]  __kmalloc_cache_noprof+0x6f/0x6f0
[  466.161980][T17498]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[  466.161996][T17498]  ? sctp_add_bind_addr+0x8c/0x370
[  466.162020][T17498]  sctp_add_bind_addr+0x8c/0x370
[  466.162043][T17498]  sctp_copy_local_addr_list+0x30b/0x4e0
[  466.162065][T17498]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  466.162082][T17498]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  466.162100][T17498]  ? sctp_v6_is_any+0x64/0x80
[  466.162117][T17498]  ? sctp_copy_one_addr+0x93/0x360
[  466.162135][T17498]  sctp_bind_addr_copy+0xb3/0x3c0
[  466.162148][T17498]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  466.162169][T17498]  sctp_connect_new_asoc+0x2e0/0x690
[  466.162187][T17498]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  466.162204][T17498]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  466.162220][T17498]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  466.162235][T17498]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  466.162251][T17498]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  466.162268][T17498]  ? security_sctp_bind_connect+0x7e/0x2e0
[  466.162287][T17498]  sctp_sendmsg+0x155c/0x2810
[  466.162313][T17498]  ? __pfx_sctp_sendmsg+0x10/0x10
[  466.162326][T17498]  ? aa_sk_perm+0x15f/0x920
[  466.162347][T17498]  ? aa_sk_perm+0x7ee/0x920
[  466.162370][T17498]  ? __pfx_aa_sk_perm+0x10/0x10
[  466.162390][T17498]  ? sock_rps_record_flow+0x19/0x410
[  466.162408][T17498]  ? inet_sendmsg+0x2f4/0x370
[  466.162420][T17498]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  466.162440][T17498]  __sock_sendmsg+0x19c/0x270
[  466.162458][T17498]  __sys_sendto+0x3bd/0x520
[  466.162478][T17498]  ? __pfx___sys_sendto+0x10/0x10
[  466.162495][T17498]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  466.162524][T17498]  ? __fget_files+0x3a0/0x420
[  466.162544][T17498]  ? ksys_write+0x22a/0x250
[  466.162561][T17498]  ? __pfx_ksys_write+0x10/0x10
[  466.162579][T17498]  __x64_sys_sendto+0xde/0x100
[  466.162598][T17498]  do_syscall_64+0xfa/0xf80
[  466.162615][T17498]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.162627][T17498]  ? clear_bhb_loop+0x60/0xb0
[  466.162643][T17498]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.162655][T17498] RIP: 0033:0x7fe485f8f749
[  466.162668][T17498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.162678][T17498] RSP: 002b:00007fe486d8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  466.162693][T17498] RAX: ffffffffffffffda RBX: 00007fe4861e5fa0 RCX: 00007fe485f8f749
[  466.162702][T17498] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  466.162710][T17498] RBP: 00007fe486d8b090 R08: 000020000005ffe4 R09: 000000000000001c
[  466.162718][T17498] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  466.162725][T17498] R13: 00007fe4861e6038 R14: 00007fe4861e5fa0 R15: 00007ffdc1285be8
[  466.162750][T17498]  </TASK>
[  466.509577][T17168] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  466.623525][T17168] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  466.640169][T17507] bridge1: entered allmulticast mode
[  466.645737][T17168] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  466.661850][T17168] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  466.769257][T17520] pimreg: entered allmulticast mode
[  466.778035][T17520] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3169'.
[  466.808645][T17524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3170'.
[  466.862882][T17528] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3170'.
[  466.863234][T17529] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3170'.
[  466.879243][T17520] 8021q: adding VLAN 0 to HW filter on device bond10
[  466.902441][T17506] bridge1: left allmulticast mode
[  467.024461][T17534] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  467.024467][T17536] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3175'.
[  467.087009][T17532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'.
[  467.089573][T17168] 8021q: adding VLAN 0 to HW filter on device bond0
[  467.166083][T17168] 8021q: adding VLAN 0 to HW filter on device team0
[  467.232609][T17542] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  467.244392][T17542] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue
[  467.252990][T17542] gretap1: entered promiscuous mode
[  467.258519][T17542] gretap1: entered allmulticast mode
[  467.292494][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.300038][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  467.357787][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.365206][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  467.748268][T17579] netlink: 'syz.2.3188': attribute type 4 has an invalid length.
[  467.779000][T17579] netlink: 'syz.2.3188': attribute type 4 has an invalid length.
[  467.799267][T17168] 8021q: adding VLAN 0 to HW filter on device batadv0
[  467.895577][T17168] veth0_vlan: entered promiscuous mode
[  467.909174][T17168] veth1_vlan: entered promiscuous mode
[  467.977621][T17168] veth0_macvtap: entered promiscuous mode
[  467.999246][T17168] veth1_macvtap: entered promiscuous mode
[  468.026949][T17168] batman_adv: batadv0: Interface activated: batadv_slave_0
[  468.054298][T17168] batman_adv: batadv0: Interface activated: batadv_slave_1
[  468.077013][ T8778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  468.086965][ T8778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  468.098439][ T8778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  468.123163][ T8778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  468.254250][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.266117][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.328007][T13059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  468.336532][T13059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  468.358415][T17601] FAULT_INJECTION: forcing a failure.
[  468.358415][T17601] name failslab, interval 1, probability 0, space 0, times 0
[  468.421233][T17601] CPU: 1 UID: 0 PID: 17601 Comm: syz.2.3195 Not tainted syzkaller #0 PREEMPT(full) 
[  468.421258][T17601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  468.421268][T17601] Call Trace:
[  468.421275][T17601]  <TASK>
[  468.421282][T17601]  dump_stack_lvl+0x189/0x250
[  468.421305][T17601]  ? __pfx____ratelimit+0x10/0x10
[  468.421324][T17601]  ? __pfx_dump_stack_lvl+0x10/0x10
[  468.421339][T17601]  ? __pfx__printk+0x10/0x10
[  468.421364][T17601]  ? __pfx___might_resched+0x10/0x10
[  468.421379][T17601]  ? fs_reclaim_acquire+0x7d/0x100
[  468.421405][T17601]  should_fail_ex+0x414/0x560
[  468.421426][T17601]  should_failslab+0xa8/0x100
[  468.421464][T17601]  kmem_cache_alloc_noprof+0x74/0x6f0
[  468.421485][T17601]  ? _sctp_make_chunk+0x14e/0x430
[  468.421503][T17601]  ? skb_put+0x11b/0x210
[  468.421528][T17601]  _sctp_make_chunk+0x14e/0x430
[  468.421549][T17601]  sctp_make_datafrag_empty+0x122/0x230
[  468.421569][T17601]  ? __pfx_sctp_make_datafrag_empty+0x10/0x10
[  468.421590][T17601]  ? sctp_user_addto_chunk+0xa8/0x240
[  468.421612][T17601]  sctp_datamsg_from_user+0x729/0xef0
[  468.421650][T17601]  sctp_sendmsg_to_asoc+0xffe/0x1810
[  468.421671][T17601]  ? __asan_memcpy+0x40/0x70
[  468.421696][T17601]  ? sctp_assoc_add_peer+0xce8/0x1390
[  468.421731][T17601]  ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10
[  468.421751][T17601]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  468.421774][T17601]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  468.421795][T17601]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  468.421814][T17601]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  468.421836][T17601]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  468.421858][T17601]  ? security_sctp_bind_connect+0x7e/0x2e0
[  468.421884][T17601]  sctp_sendmsg+0x1941/0x2810
[  468.421917][T17601]  ? __pfx_sctp_sendmsg+0x10/0x10
[  468.421936][T17601]  ? aa_sk_perm+0x15f/0x920
[  468.421962][T17601]  ? aa_sk_perm+0x7ee/0x920
[  468.421990][T17601]  ? __pfx_aa_sk_perm+0x10/0x10
[  468.422018][T17601]  ? sock_rps_record_flow+0x19/0x410
[  468.422041][T17601]  ? inet_sendmsg+0x2f4/0x370
[  468.422057][T17601]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  468.422092][T17601]  __sock_sendmsg+0x19c/0x270
[  468.422116][T17601]  __sys_sendto+0x3bd/0x520
[  468.422141][T17601]  ? __pfx___sys_sendto+0x10/0x10
[  468.422162][T17601]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  468.422197][T17601]  ? __fget_files+0x3a0/0x420
[  468.422225][T17601]  ? ksys_write+0x22a/0x250
[  468.422274][T17601]  ? __pfx_ksys_write+0x10/0x10
[  468.422298][T17601]  __x64_sys_sendto+0xde/0x100
[  468.422323][T17601]  do_syscall_64+0xfa/0xf80
[  468.422345][T17601]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.422361][T17601]  ? clear_bhb_loop+0x60/0xb0
[  468.422378][T17601]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  468.422394][T17601] RIP: 0033:0x7f2646f8f749
[  468.422409][T17601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  468.422423][T17601] RSP: 002b:00007f2647ea5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  468.422441][T17601] RAX: ffffffffffffffda RBX: 00007f26471e5fa0 RCX: 00007f2646f8f749
[  468.422454][T17601] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  468.422465][T17601] RBP: 00007f2647ea5090 R08: 000020000005ffe4 R09: 000000000000001c
[  468.422476][T17601] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  468.422487][T17601] R13: 00007f26471e6038 R14: 00007f26471e5fa0 R15: 00007ffdbe6d4928
[  468.422519][T17601]  </TASK>
[  469.170294][T17614] netlink: 'syz.4.3199': attribute type 11 has an invalid length.
[  469.283107][T17618] netlink: 'syz.5.3200': attribute type 21 has an invalid length.
[  469.344812][T17622] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) !
[  469.403383][   T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  469.414593][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  469.427249][   T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  469.437733][   T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  469.447570][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  469.534335][T17625] ip6_vti0 speed is unknown, defaulting to 1000
[  469.737480][T17640] __nla_validate_parse: 1 callbacks suppressed
[  469.737498][T17640] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3205'.
[  470.173114][T17666] syzkaller0: entered promiscuous mode
[  470.178637][T17666] syzkaller0: entered allmulticast mode
[  470.193319][T17666] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  470.267134][T17625] chnl_net:caif_netlink_parms(): no params data found
[  470.418024][T17625] bridge0: port 1(bridge_slave_0) entered blocking state
[  470.425582][T17625] bridge0: port 1(bridge_slave_0) entered disabled state
[  470.433591][T17625] bridge_slave_0: entered allmulticast mode
[  470.441592][T17625] bridge_slave_0: entered promiscuous mode
[  470.451270][T17625] bridge0: port 2(bridge_slave_1) entered blocking state
[  470.458767][T17625] bridge0: port 2(bridge_slave_1) entered disabled state
[  470.480786][T17625] bridge_slave_1: entered allmulticast mode
[  470.488813][T17625] bridge_slave_1: entered promiscuous mode
[  470.539041][T17625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  470.553973][T17625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  470.608585][T17625] team0: Port device team_slave_0 added
[  470.617256][T17625] team0: Port device team_slave_1 added
[  470.645593][T17625] batman_adv: batadv0: Adding interface: batadv_slave_0
[  470.652798][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.683026][T17625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  470.710549][T17625] batman_adv: batadv0: Adding interface: batadv_slave_1
[  470.717546][T17625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  470.744277][T17625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  470.806024][T17625] hsr_slave_0: entered promiscuous mode
[  470.813284][T17625] hsr_slave_1: entered promiscuous mode
[  470.819882][T17625] debugfs: 'hsr0' already exists in 'hsr'
[  470.837694][T17625] Cannot create hsr debugfs directory
[  470.921063][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  470.945836][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  470.970444][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  470.998857][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  471.030071][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  471.051228][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  471.065543][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  471.075673][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  471.087130][T17688] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3215'.
[  471.117966][T17695] xt_socket: unknown flags 0x50
[  471.179622][T17625] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.242817][T17625] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.282686][T17702] netlink: 'syz.1.3219': attribute type 1 has an invalid length.
[  471.364932][T17625] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.413796][T17708] netlink: 'syz.4.3220': attribute type 1 has an invalid length.
[  471.471593][ T5842] Bluetooth: hci2: command tx timeout
[  471.486252][T17708] bond2: entered promiscuous mode
[  471.502594][T17708] 8021q: adding VLAN 0 to HW filter on device bond2
[  471.531381][T17625] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  471.827166][T17625] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  471.843069][T17625] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  471.869439][T17625] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  471.902574][T17725] netlink: 'syz.0.3227': attribute type 1 has an invalid length.
[  471.946728][T17625] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  472.276371][T17625] 8021q: adding VLAN 0 to HW filter on device bond0
[  472.340008][T17625] 8021q: adding VLAN 0 to HW filter on device team0
[  472.384294][T13058] bridge0: port 1(bridge_slave_0) entered blocking state
[  472.391627][T13058] bridge0: port 1(bridge_slave_0) entered forwarding state
[  472.448265][T17762] FAULT_INJECTION: forcing a failure.
[  472.448265][T17762] name failslab, interval 1, probability 0, space 0, times 0
[  472.476853][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  472.484233][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  472.500100][T17762] CPU: 1 UID: 0 PID: 17762 Comm: syz.0.3238 Not tainted syzkaller #0 PREEMPT(full) 
[  472.500139][T17762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  472.500150][T17762] Call Trace:
[  472.500157][T17762]  <TASK>
[  472.500165][T17762]  dump_stack_lvl+0x189/0x250
[  472.500187][T17762]  ? __pfx____ratelimit+0x10/0x10
[  472.500207][T17762]  ? __pfx_dump_stack_lvl+0x10/0x10
[  472.500226][T17762]  ? __pfx__printk+0x10/0x10
[  472.500261][T17762]  should_fail_ex+0x414/0x560
[  472.500282][T17762]  should_failslab+0xa8/0x100
[  472.500307][T17762]  __kmalloc_cache_noprof+0x6f/0x6f0
[  472.500324][T17762]  ? __sctp_v6_cmp_addr+0x1e6/0x510
[  472.500343][T17762]  ? sctp_add_bind_addr+0x8c/0x370
[  472.500365][T17762]  sctp_add_bind_addr+0x8c/0x370
[  472.500388][T17762]  sctp_copy_local_addr_list+0x30b/0x4e0
[  472.500409][T17762]  ? sctp_copy_local_addr_list+0x9b/0x4e0
[  472.500427][T17762]  ? __pfx_sctp_copy_local_addr_list+0x10/0x10
[  472.500448][T17762]  ? sctp_v6_is_any+0x64/0x80
[  472.500466][T17762]  ? sctp_copy_one_addr+0x93/0x360
[  472.500484][T17762]  sctp_bind_addr_copy+0xb3/0x3c0
[  472.500504][T17762]  ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0
[  472.500531][T17762]  sctp_connect_new_asoc+0x2e0/0x690
[  472.500556][T17762]  ? __pfx_sctp_connect_new_asoc+0x10/0x10
[  472.500578][T17762]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  472.500600][T17762]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  472.500619][T17762]  ? sctp_endpoint_lookup_assoc+0x7b/0x260
[  472.500641][T17762]  ? bpf_lsm_sctp_bind_connect+0x9/0x20
[  472.500664][T17762]  ? security_sctp_bind_connect+0x7e/0x2e0
[  472.500689][T17762]  sctp_sendmsg+0x155c/0x2810
[  472.500730][T17762]  ? __pfx_sctp_sendmsg+0x10/0x10
[  472.500748][T17762]  ? aa_sk_perm+0x15f/0x920
[  472.500774][T17762]  ? aa_sk_perm+0x7ee/0x920
[  472.500802][T17762]  ? __pfx_aa_sk_perm+0x10/0x10
[  472.500827][T17762]  ? sock_rps_record_flow+0x19/0x410
[  472.500846][T17762]  ? inet_sendmsg+0x2f4/0x370
[  472.500860][T17762]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  472.500884][T17762]  __sock_sendmsg+0x19c/0x270
[  472.500908][T17762]  __sys_sendto+0x3bd/0x520
[  472.500933][T17762]  ? __pfx___sys_sendto+0x10/0x10
[  472.500952][T17762]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  472.500987][T17762]  ? __fget_files+0x3a0/0x420
[  472.501015][T17762]  ? ksys_write+0x22a/0x250
[  472.501039][T17762]  ? __pfx_ksys_write+0x10/0x10
[  472.501063][T17762]  __x64_sys_sendto+0xde/0x100
[  472.501089][T17762]  do_syscall_64+0xfa/0xf80
[  472.501111][T17762]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.501126][T17762]  ? clear_bhb_loop+0x60/0xb0
[  472.501145][T17762]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  472.501158][T17762] RIP: 0033:0x7fe38c38f749
[  472.501172][T17762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  472.501186][T17762] RSP: 002b:00007fe38d1c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  472.501205][T17762] RAX: ffffffffffffffda RBX: 00007fe38c5e5fa0 RCX: 00007fe38c38f749
[  472.501215][T17762] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003
[  472.501224][T17762] RBP: 00007fe38d1c2090 R08: 000020000005ffe4 R09: 000000000000001c
[  472.501234][T17762] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002
[  472.501242][T17762] R13: 00007fe38c5e6038 R14: 00007fe38c5e5fa0 R15: 00007fffbe60ab68
[  472.501268][T17762]  </TASK>
[  472.508507][T17764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  472.892229][T17768] team0: Device ipvlan1 failed to register rx_handler
[  473.211695][T17792] xt_check_target: 23 callbacks suppressed
[  473.211718][T17792] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING
[  473.394236][T17625] 8021q: adding VLAN 0 to HW filter on device batadv0
[  473.491657][T17625] veth0_vlan: entered promiscuous mode
[  473.527502][T17625] veth1_vlan: entered promiscuous mode
[  473.551957][ T5842] Bluetooth: hci2: command tx timeout
[  473.643037][T17625] veth0_macvtap: entered promiscuous mode
[  473.678601][T17625] veth1_macvtap: entered promiscuous mode
[  473.704806][T17818] netlink: 'syz.0.3258': attribute type 7 has an invalid length.
[  473.716961][T17818] netlink: 'syz.0.3258': attribute type 8 has an invalid length.
[  473.721310][T17625] batman_adv: batadv0: Interface activated: batadv_slave_0
[  473.781464][T17821] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0)
[  473.797551][T17821] bond1 (unregistering): Released all slaves
[  473.836714][T17625] batman_adv: batadv0: Interface activated: batadv_slave_1
[  473.849120][T17818] netlink: 'syz.0.3258': attribute type 1 has an invalid length.
[  473.913309][T13061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  473.923559][T13061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  473.956232][T13061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  473.970605][T13061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  474.003156][T17833] openvswitch: netlink: Key type 105 is out of range max 32
[  474.027820][T17818] bond1: (slave geneve2): making interface the new active one
[  474.039255][T17818] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  474.049530][ T1155] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20004 - 0
[  474.090348][ T1155] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20004 - 0
[  474.098692][ T1155] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20004 - 0
[  474.114528][ T1155] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20004 - 0
[  474.292160][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.308242][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.369675][ T8797] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  474.384251][T17854] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported
[  474.390092][ T8797] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  474.740943][  T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.760889][ T1139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  474.998054][T17894] netem: change failed
[  475.087220][T17902] __nla_validate_parse: 36 callbacks suppressed
[  475.087242][T17902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3277'.
[  475.144163][T17909] netlink: 'syz.4.3277': attribute type 21 has an invalid length.
[  475.224522][T17914] netlink: 'syz.5.3284': attribute type 15 has an invalid length.
[  475.227661][T17912] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.243019][  T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.251959][ T8778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.287475][ T8778] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.631382][ T5842] Bluetooth: hci2: command tx timeout
[  475.844498][  T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  475.866082][T17946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3293'.
[  475.888461][T17949] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3294'.
[  475.907015][T17946] bridge0: port 2(bridge_slave_1) entered disabled state
[  475.915245][T17946] bridge0: port 1(bridge_slave_0) entered disabled state
[  475.994461][T17949] bond0: entered promiscuous mode
[  476.045293][T17949] ip6gretap0: entered promiscuous mode
[  476.071533][T17949] hsr1: entered promiscuous mode
[  476.216175][T17959] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  476.317497][T17959] wireguard0: entered allmulticast mode
[  476.357116][T17969] netlink: 'syz.1.3299': attribute type 11 has an invalid length.
[  476.392043][T17969] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3299'.
[  476.771904][T17998] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  476.807609][T17995] tipc: Disabling bearer <eth:syzkaller0>
[  477.011239][T18018] syz_tun: entered allmulticast mode
[  477.075644][T18021] syz_tun: left allmulticast mode
[  477.113842][T18023] syzkaller1: entered promiscuous mode
[  477.139811][T18023] syzkaller1: entered allmulticast mode
[  477.224988][T18031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3316'.
[  477.281952][T18033] netlink: 212 bytes leftover after parsing attributes in process `syz.0.3316'.
[  477.414033][T18036] netlink: 'syz.1.3318': attribute type 4 has an invalid length.
[  477.711259][ T5842] Bluetooth: hci2: command tx timeout
[  477.738334][T18057] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  477.802365][ T6002] net_ratelimit: 6 callbacks suppressed
[  477.802378][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.011501][T18074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'.
[  478.046882][ T6002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.217473][T18088] mac80211_hwsim hwsim44 �
: renamed from wlan1 (while UP)
[  478.237089][T18091] netlink: 'syz.0.3331': attribute type 10 has an invalid length.
[  478.260601][T18091] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3331'.
[  478.277342][T18091] dummy0: entered promiscuous mode
[  478.295278][T18091] bridge0: port 3(dummy0) entered blocking state
[  478.300685][T18096] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3331'.
[  478.302365][T18091] bridge0: port 3(dummy0) entered disabled state
[  478.317907][T18091] dummy0: entered allmulticast mode
[  478.350623][  T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.375165][T18091] bridge0: port 3(dummy0) entered blocking state
[  478.381748][T18091] bridge0: port 3(dummy0) entered forwarding state
[  478.428289][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3334'.
[  478.511892][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  478.527036][T18102] syzkaller1: entered promiscuous mode
[  478.549851][T18102] syzkaller1: entered allmulticast mode
[  478.823847][T18125] netlink: 'syz.4.3341': attribute type 1 has an invalid length.
[  479.032489][T18143] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  479.146098][T18140] ip6_vti0 speed is unknown, defaulting to 1000
[  479.174095][T18151] tipc: Started in network mode
[  479.194657][T18151] tipc: Node identity 7eb8853ae79c, cluster identity 4711
[  479.210886][T18151] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  479.337678][T18151] syzkaller0: entered promiscuous mode
[  479.358874][T18151] syzkaller0: entered allmulticast mode
[  479.390640][  T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.405909][T18151] tipc: Resetting bearer <eth:syzkaller0>
[  479.508249][ T1139] tipc: Resetting bearer <eth:syzkaller0>
[  479.517943][T18149] tipc: Resetting bearer <eth:syzkaller0>
[  479.555134][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.806074][ T8776] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.815463][  T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  479.825696][   T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  481.166083][T18149] tipc: Disabling bearer <eth:syzkaller0>
[  481.186338][   T48] tipc: Node number set to 2569307450
[  481.421127][T18193] __nla_validate_parse: 7 callbacks suppressed
[  481.421144][T18193] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3362'.
[  481.484249][T18195] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  481.494593][T18195] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  481.537924][T18193] xt_nat: multiple ranges no longer supported
[  481.544872][T18198] Bluetooth: MGMT ver 1.23
[  481.892388][T18215] syzkaller0: entered promiscuous mode
[  481.897974][T18215] syzkaller0: entered allmulticast mode
[  482.141754][    T9] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x1
[  482.159402][    T9] hid-generic 0005:0C45:1010.0002: ignoring exceeding usage max
[  482.181351][    T9] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x4
[  482.188922][    T9] hid-generic 0005:0C45:1010.0002: unknown main item tag 0x5
[  482.216399][    T9] hid-generic 0005:0C45:1010.0002: hidraw0: BLUETOOTH HID v0.c3 Device [syz0] on aa:aa:aa:aa:aa:aa
[  482.294171][T18244] netlink: 'syz.5.3377': attribute type 12 has an invalid length.
[  482.619542][T18269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3384'.
[  482.694847][T18270] xt_TPROXY: Can be used only with -p tcp or -p udp
[  482.746059][T18269] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3384'.
[  482.746311][T18270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3384'.
[  482.871914][T18287] netlink: 'syz.4.3389': attribute type 2 has an invalid length.
[  482.873736][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'.
[  482.895878][T18287] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3389'.
[  482.951947][T18287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3389'.
[  482.990755][    C1] net_ratelimit: 80 callbacks suppressed
[  482.990775][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.000962][T18287] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3389'.
[  483.005827][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.022801][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.030983][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.039280][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.047783][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.056363][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.064866][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.073525][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.081910][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  483.105440][T18297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  483.177116][T18293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3390'.
[  483.225347][T18302] netlink: 'syz.4.3394': attribute type 1 has an invalid length.
[  483.253287][T18302] netlink: 'syz.4.3394': attribute type 3 has an invalid length.
[  483.293049][T18302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3394'.
[  483.296646][T18306] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  483.360155][T18312] pim6reg: entered allmulticast mode
[  483.631584][   T52] Bluetooth: hci2: command 0x0401 tx timeout
[  483.632026][ T5842] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  483.664131][T18326] netdevsim netdevsim5 netdevsim0: left promiscuous mode
[  483.720881][T18326] hsr1: left promiscuous mode
[  483.725851][T13058] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.749664][T13058] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.771228][T13058] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.797078][T13058] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.863162][T13058] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.884796][T13058] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  483.884826][T18351] delete_channel: no stack
[  483.924010][T18352] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  483.924471][T13058] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  483.982769][T13058] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  484.081214][T18365] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  484.088692][T18363] syzkaller0: entered promiscuous mode
[  484.098316][T18363] syzkaller0: entered allmulticast mode
[  484.202015][T18365] tipc: Resetting bearer <eth:syzkaller0>
[  484.241757][T18365] tipc: Disabling bearer <eth:syzkaller0>
[  484.335615][T18380] netlink: 'syz.0.3415': attribute type 1 has an invalid length.
[  484.351151][T18380] nbd: error processing sock list
[  484.406785][T18384] syzkaller0: entered promiscuous mode
[  484.413735][T18384] syzkaller0: entered allmulticast mode
[  484.757142][T18401] netlink: 'syz.4.3424': attribute type 11 has an invalid length.
[  484.763377][T18405] x_tables: unsorted underflow at hook 4
[  484.768683][T18401] netlink: 'syz.4.3424': attribute type 2 has an invalid length.
[  484.779714][T18401] netlink: 'syz.4.3424': attribute type 11 has an invalid length.
[  485.188347][T18433] smc: net device team0 applied user defined pnetid SYZ2
[  486.006713][T18468] netlink: 'syz.5.3440': attribute type 10 has an invalid length.
[  487.795697][T18492] __nla_validate_parse: 14 callbacks suppressed
[  487.795719][T18492] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3444'.
[  488.074303][T18517] net_ratelimit: 245 callbacks suppressed
[  488.074321][T18517] openvswitch: netlink: Port -1 exceeds max allowable 65535
[  488.094642][T18517] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3453'.
[  488.110315][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  488.196480][T18516] can: request_module (can-proto-3) failed.
[  488.209660][T18529] netlink: 'syz.5.3456': attribute type 1 has an invalid length.
[  488.218005][T18529] netlink: 228 bytes leftover after parsing attributes in process `syz.5.3456'.
[  488.415681][T18542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3460'.
[  488.427506][T18542] netlink: 'syz.0.3460': attribute type 83 has an invalid length.
[  488.492716][T18544] dummy0: left allmulticast mode
[  488.498072][T18544] bridge0: port 3(dummy0) entered disabled state
[  488.510280][T18544] batman_adv: batadv0: Adding interface: dummy0
[  488.516662][T18544] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  488.543091][T18544] batman_adv: batadv0: Interface activated: dummy0
[  488.561363][T18545] batadv0: mtu less than device minimum
[  488.568436][T18545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  488.580272][T18545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  488.591494][T18545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  488.603600][T18545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  488.614811][T18545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  488.626156][T18545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  488.637395][T18545] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  488.840574][T18553] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3465'.
[  488.850173][T18553] block nbd0: Unsupported socket: should be TCP or UNIX.
[  488.954176][T18562] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3468'.
[  489.049060][T18566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3470'.
[  489.292390][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3471'.
[  489.540107][T18600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3479'.
[  489.967008][  T937] IPVS: starting estimator thread 0...
[  490.080804][T18632] IPVS: using max 36 ests per chain, 86400 per kthread
[  490.081550][T18637] netlink: 'syz.2.3490': attribute type 4 has an invalid length.
[  490.421299][T18667] netlink: 'syz.1.3493': attribute type 10 has an invalid length.
[  490.575911][T18672] netlink: 'syz.5.3498': attribute type 21 has an invalid length.
[  490.603719][T18672] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3498'.
[  490.834540][T18694] syzkaller1: entered promiscuous mode
[  490.840420][T18694] syzkaller1: entered allmulticast mode
[  490.881342][T18686] netlink: 'syz.2.3501': attribute type 39 has an invalid length.
[  491.185890][T18706] xt_l2tp: missing protocol rule (udp|l2tpip)
[  491.213504][T18707] xt_l2tp: missing protocol rule (udp|l2tpip)
[  491.301983][T18713] netlink: 'syz.1.3511': attribute type 1 has an invalid length.
[  491.318862][T18713] netlink: 'syz.1.3511': attribute type 4 has an invalid length.
[  491.362462][T18715] x_tables: duplicate underflow at hook 2
[  491.455106][T18721] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma?
[  491.835051][T18751] gtp0: entered promiscuous mode
[  491.841458][T18751] gtp0: entered allmulticast mode
[  491.862897][T18746] hsr_slave_0: left promiscuous mode
[  491.903184][T18746] hsr_slave_1: left promiscuous mode
[  492.007762][T18766] netlink: 'syz.4.3531': attribute type 1 has an invalid length.
[  492.022256][T18765] netlink: 'syz.2.3530': attribute type 9 has an invalid length.
[  492.056340][T18766] bond3: entered promiscuous mode
[  492.063232][T18766] 8021q: adding VLAN 0 to HW filter on device bond3
[  492.152343][T18766] bond3: (slave bridge2): making interface the new active one
[  492.180880][T18766] bridge2: entered promiscuous mode
[  492.204974][T18766] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  492.347929][T18791] netlink: 'syz.1.3537': attribute type 13 has an invalid length.
[  492.383173][T18791] gretap0: refused to change device tx_queue_len
[  492.513832][T18805] chnl_net:caif_netlink_parms(): no params data found
[  492.844605][T18831] netem: change failed
[  493.112141][T18851] netlink: 'syz.4.3551': attribute type 15 has an invalid length.
[  494.355466][T18938] __nla_validate_parse: 14 callbacks suppressed
[  494.355482][T18938] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3574'.
[  494.387349][T18938] team0: No ports can be present during mode change
[  494.489435][T18944] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3574'.
[  494.763374][T18960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3582'.
[  495.057415][T18981] netlink: 1428 bytes leftover after parsing attributes in process `syz.5.3588'.
[  495.140148][T18985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3590'.
[  495.393526][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3597'.
[  495.641597][T19040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3603'.
[  495.674623][T19030] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3603'.
[  495.735701][T19043] validate_nla: 7 callbacks suppressed
[  495.735721][T19043] netlink: 'syz.2.3604': attribute type 21 has an invalid length.
[  495.793169][   T11] block nbd0: Possible stuck request ffff888024c90000: control (read@0,1024B). Runtime 270 seconds
[  495.804194][   T11] block nbd0: Possible stuck request ffff888024c901c0: control (read@1024,1024B). Runtime 270 seconds
[  495.807366][ T8787] net_ratelimit: 28 callbacks suppressed
[  495.807390][ T8787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.815489][   T11] block nbd0: Possible stuck request ffff888024c90380: control (read@2048,1024B). Runtime 270 seconds
[  495.822080][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.830025][   T11] block nbd0: Possible stuck request ffff888024c90540: control (read@3072,1024B). Runtime 270 seconds
[  495.863548][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.931261][T19046] netlink: 'syz.5.3605': attribute type 10 has an invalid length.
[  495.954852][  T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.963868][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  495.994344][T19046] dummy0: entered promiscuous mode
[  496.007215][T19054] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3604'.
[  496.011248][T19046] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  496.061931][T19043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3604'.
[  496.072388][T19052] syzkaller1: entered promiscuous mode
[  496.100183][T19052] syzkaller1: entered allmulticast mode
[  496.345039][T19067] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT
[  496.513804][T19075] netlink: 'syz.1.3615': attribute type 5 has an invalid length.
[  496.561476][T19082] netlink: 'syz.0.3616': attribute type 10 has an invalid length.
[  496.632690][T19082] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.649679][T19082] bridge_slave_1: left allmulticast mode
[  496.666982][T19082] bridge_slave_1: left promiscuous mode
[  496.692705][T19082] bridge0: port 2(bridge_slave_1) entered disabled state
[  496.722235][T19082] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  496.992457][T19101] netlink: 'syz.5.3621': attribute type 1 has an invalid length.
[  496.995546][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.001120][T19101] netlink: 'syz.5.3621': attribute type 2 has an invalid length.
[  497.008711][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.049567][T19102] netlink: 'syz.0.3623': attribute type 12 has an invalid length.
[  497.074385][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.083499][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.099057][  T937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  497.133874][T19105] dvmrp6: entered allmulticast mode
[  497.199278][T19109] ipt_REJECT: TCP_RESET invalid for non-tcp
[  497.265778][T19116] netlink: 'syz.1.3628': attribute type 1 has an invalid length.
[  497.370891][T19129] netlink: 'syz.2.3629': attribute type 33 has an invalid length.
[  497.436139][T19119] bridge0: port 3(veth0_to_bridge) entered blocking state
[  497.453953][T19119] bridge0: port 3(veth0_to_bridge) entered disabled state
[  497.464370][T19119] veth0_to_bridge: entered allmulticast mode
[  497.492498][T19119] veth0_to_bridge: entered promiscuous mode
[  497.587457][T19129] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  497.618397][T19129] bond1 (unregistering): Released all slaves
[  497.963635][T19165] C: renamed from lo (while UP)
[  497.995344][T19162] bond0: entered promiscuous mode
[  498.000531][T19162] bond_slave_0: entered promiscuous mode
[  498.006422][T19162] bond_slave_1: entered promiscuous mode
[  498.438890][T19198] netlink: 'syz.1.3651': attribute type 5 has an invalid length.
[  498.492133][T19198] geneve2: entered promiscuous mode
[  499.335353][T19245] syzkaller1: entered promiscuous mode
[  499.343505][T19245] syzkaller1: entered allmulticast mode
[  499.365695][T19261] __nla_validate_parse: 22 callbacks suppressed
[  499.365713][T19261] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3669'.
[  499.753191][T19282] delete_channel: no stack
[  499.758103][T19276] delete_channel: no stack
[  499.760551][T19279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3675'.
[  499.854623][T19281] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3675'.
[  499.894436][T19290] FAULT_INJECTION: forcing a failure.
[  499.894436][T19290] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  499.997063][T19290] CPU: 0 UID: 0 PID: 19290 Comm: syz.2.3677 Not tainted syzkaller #0 PREEMPT(full) 
[  499.997108][T19290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  499.997140][T19290] Call Trace:
[  499.997148][T19290]  <TASK>
[  499.997156][T19290]  dump_stack_lvl+0x189/0x250
[  499.997178][T19290]  ? __pfx____ratelimit+0x10/0x10
[  499.997199][T19290]  ? __pfx_dump_stack_lvl+0x10/0x10
[  499.997217][T19290]  ? __pfx__printk+0x10/0x10
[  499.997251][T19290]  should_fail_ex+0x414/0x560
[  499.997275][T19290]  _copy_to_user+0x31/0xb0
[  499.997300][T19290]  simple_read_from_buffer+0xe1/0x170
[  499.997328][T19290]  proc_fail_nth_read+0x1b3/0x220
[  499.997353][T19290]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  499.997377][T19290]  ? rw_verify_area+0x2a6/0x4d0
[  499.997396][T19290]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  499.997417][T19290]  vfs_read+0x200/0xa30
[  499.997435][T19290]  ? fdget_pos+0x247/0x320
[  499.997455][T19290]  ? __pfx___mutex_lock+0x10/0x10
[  499.997476][T19290]  ? __pfx_vfs_read+0x10/0x10
[  499.997497][T19290]  ? __fget_files+0x2a/0x420
[  499.997515][T19290]  ? __fget_files+0x3a0/0x420
[  499.997529][T19290]  ? __fget_files+0x2a/0x420
[  499.997553][T19290]  ksys_read+0x145/0x250
[  499.997576][T19290]  ? __pfx_ksys_read+0x10/0x10
[  499.997598][T19290]  ? do_syscall_64+0xbe/0xf80
[  499.997623][T19290]  do_syscall_64+0xfa/0xf80
[  499.997643][T19290]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.997660][T19290]  ? clear_bhb_loop+0x60/0xb0
[  499.997680][T19290]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.997696][T19290] RIP: 0033:0x7fef3598e15c
[  499.997711][T19290] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  499.997726][T19290] RSP: 002b:00007fef367b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  499.997744][T19290] RAX: ffffffffffffffda RBX: 00007fef35be5fa0 RCX: 00007fef3598e15c
[  499.997756][T19290] RDX: 000000000000000f RSI: 00007fef367b40a0 RDI: 0000000000000003
[  499.997775][T19290] RBP: 00007fef367b4090 R08: 0000000000000000 R09: 0000000000000000
[  499.997785][T19290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  499.997794][T19290] R13: 00007fef35be6038 R14: 00007fef35be5fa0 R15: 00007ffe5dbb1088
[  499.997822][T19290]  </TASK>
[  500.032900][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3681'.
[  500.188488][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'.
[  500.283780][T19306] x_tables: duplicate underflow at hook 2
[  500.306995][T19301] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  500.340729][T19301] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3682'.
[  500.367458][T19302] xfrm1: entered allmulticast mode
[  500.423975][T19312] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3685'.
[  500.598958][T19325] block nbd5: Unsupported socket: should be TCP or UNIX.
[  500.723643][T19327] bond2: option arp_missed_max: invalid value (0)
[  500.763392][T19327] bond2: option arp_missed_max: allowed values 1 - 255
[  500.769619][T19337] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3693'.
[  500.847397][T19327] bond2 (unregistering): Released all slaves
[  500.945425][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3696'.
[  500.967691][T19346] net_ratelimit: 25 callbacks suppressed
[  500.967707][T19346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  500.983478][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.027934][T19348] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3697'.
[  501.135166][T19357] nbd: couldn't find a device at index 4
[  501.153847][ T5970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.162320][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.279688][T19372] IPVS: Error connecting to the multicast addr
[  501.301990][T19376] SET target dimension over the limit!
[  501.316393][T19374] sctp: [Deprecated]: syz.4.3705 (pid 19374) Use of int in maxseg socket option.
[  501.316393][T19374] Use struct sctp_assoc_value instead
[  501.569202][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[  501.586144][ T1129] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.594556][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  501.891446][T19410] IPv6: addrconf: prefix option has invalid lifetime
[  502.192168][  T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.200911][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.212521][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  502.551404][T19430] bridge0: port 2(bridge_slave_1) entered disabled state
[  502.559189][T19430] bridge0: port 1(bridge_slave_0) entered disabled state
[  503.209405][T19430] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[  503.324559][T19430] gretap1: left promiscuous mode
[  503.337852][T19430] bond2: left promiscuous mode
[  503.362565][T19430] bond3: left promiscuous mode
[  503.367570][T19430] bridge2: left promiscuous mode
[  503.474601][T13059] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.509437][T13059] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.521750][T13059] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.561872][T13059] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.595040][T13059] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.640110][T13059] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.661212][T13059] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  503.680168][T13059] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  503.696874][T19473] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  503.717669][T19475] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  503.811836][T19478] bond4: Unable to set peer notification delay as MII monitoring is disabled
[  503.864134][T19478] bond4 (unregistering): Released all slaves
[  504.392168][T19505] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  504.583031][T19521] ip6t_REJECT: ECHOREPLY is not supported
[  504.606838][T19521] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  505.085085][T19565] __nla_validate_parse: 14 callbacks suppressed
[  505.085106][T19565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3758'.
[  505.234890][T19573] Bluetooth: MGMT ver 1.23
[  505.248886][T19573] validate_nla: 2 callbacks suppressed
[  505.248905][T19573] netlink: 'syz.1.3760': attribute type 1 has an invalid length.
[  505.279453][T19570] ip6_vti0 speed is unknown, defaulting to 1000
[  505.286059][T19573] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3760'.
[  505.446021][T19586] netlink: 'syz.2.3764': attribute type 1 has an invalid length.
[  505.450450][T19585] netlink: 'syz.1.3763': attribute type 1 has an invalid length.
[  505.459199][T19586] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3764'.
[  505.523585][T19585] 8021q: adding VLAN 0 to HW filter on device bond2
[  505.594041][T19586] netlink: 'syz.2.3764': attribute type 5 has an invalid length.
[  505.806375][T19603] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  505.852679][T19603] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  506.009610][T19616] netlink: 'syz.0.3770': attribute type 1 has an invalid length.
[  506.032341][ T8788] net_ratelimit: 21 callbacks suppressed
[  506.032359][ T8788] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.047223][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.276690][T19628] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3773'.
[  506.361725][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.370358][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  506.866893][T19657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3779'.
[  507.238642][T19679] netdevsim netdevsim1 ������: renamed from netdevsim0 (while UP)
[  507.312886][   T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.321325][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.391260][  T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.399646][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  507.571132][T19692] Unsupported ieee802154 address type: 0
[  507.777308][T19709] netlink: 165 bytes leftover after parsing attributes in process `syz.5.3792'.
[  507.874306][T19714] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.3794'.
[  508.113795][T19733] netlink: 'syz.0.3800': attribute type 1 has an invalid length.
[  508.229493][T19733] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address
[  508.241404][T19745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3804'.
[  508.276337][T19733] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode
[  508.346283][T19733] bond2: (slave xfrm1): making interface the new active one
[  508.381602][T19733] bond2: (slave xfrm1): Enslaving as an active interface with an up link
[  508.404368][T19742] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3800'.
[  508.432125][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.440732][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.522338][T19756] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3807'.
[  508.659080][T19776] xt_NFQUEUE: number of queues (27568) out of range (got 68779)
[  508.754329][T19781] netlink: 'syz.2.3813': attribute type 10 has an invalid length.
[  509.320973][T19768] netlink: 'syz.0.3811': attribute type 4 has an invalid length.
[  509.329343][T19772] netlink: 'syz.0.3811': attribute type 4 has an invalid length.
[  509.381946][T19781] bridge_slave_1: left allmulticast mode
[  509.387687][T19781] bridge_slave_1: left promiscuous mode
[  509.432631][T19781] bridge0: port 2(bridge_slave_1) entered disabled state
[  509.469707][T19781] bridge_slave_1: entered promiscuous mode
[  509.477807][T19781] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  509.687776][T19798] vlan2: entered promiscuous mode
[  509.736016][T19798] bridge0: entered promiscuous mode
[  509.891374][T19810] netlink: 'syz.0.3823': attribute type 1 has an invalid length.
[  510.070185][T19816] tipc: Started in network mode
[  510.075591][T19816] tipc: Node identity d20895acf5eb, cluster identity 4711
[  510.098687][T19816] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  510.131100][T19828] syzkaller0: entered promiscuous mode
[  510.136616][T19828] syzkaller0: entered allmulticast mode
[  510.188614][T19816] tipc: Resetting bearer <eth:syzkaller0>
[  510.261039][T19814] tipc: Resetting bearer <eth:syzkaller0>
[  510.327411][T19814] tipc: Disabling bearer <eth:syzkaller0>
[  510.446019][T19855] __nla_validate_parse: 4 callbacks suppressed
[  510.446036][T19855] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3837'.
[  510.504121][T19860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3838'.
[  510.666463][T19869] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3841'.
[  510.690661][T19869] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3841'.
[  510.699769][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3841'.
[  510.800459][T19873] nbd5: detected capacity change from 0 to 63
[  510.810416][T19879] block nbd5: NBD_DISCONNECT
[  510.831617][T19879] block nbd5: Disconnected due to user request.
[  510.851649][T19879] block nbd5: shutting down sockets
[  511.211028][T19902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3849'.
[  511.289466][T19908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3852'.
[  511.305104][T19908] netlink: 'syz.1.3852': attribute type 30 has an invalid length.
[  511.320262][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3852'.
[  511.364856][T19908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3852'.
[  511.495279][T19923] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  511.504148][T19924] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  511.512183][T19923] netlink: 'syz.2.3857': attribute type 2 has an invalid length.
[  511.520981][T19924] netlink: 'syz.2.3857': attribute type 2 has an invalid length.
[  511.529689][T19923] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  511.541601][T19923] netlink: 'syz.2.3857': attribute type 2 has an invalid length.
[  511.554763][T19923] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  511.580130][T19923] netlink: 'syz.2.3857': attribute type 2 has an invalid length.
[  511.591594][T19923] netlink: 'syz.2.3857': attribute type 1 has an invalid length.
[  511.661460][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3862'.
[  511.676446][T19940] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  511.813101][ T5973] net_ratelimit: 3 callbacks suppressed
[  511.813120][ T5973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.191282][T19974] syzkaller0: entered promiscuous mode
[  512.197006][T19974] syzkaller0: entered allmulticast mode
[  512.208165][T19974] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.431481][T19458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.440435][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  512.755002][T19986] �9: entered promiscuous mode
[  513.072036][T20013] bond0: (slave dummy0): Releasing backup interface
[  513.126189][T20013] dummy0: left promiscuous mode
[  513.178595][T20013] batman_adv: batadv0: Adding interface: dummy0
[  513.227259][T20013] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  513.300075][T20013] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[  513.333382][T20023] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  513.874609][T20051] syzkaller0: entered promiscuous mode
[  513.888271][T20051] syzkaller0: entered allmulticast mode
[  514.381278][T20078] veth0: entered promiscuous mode
[  514.411279][T20082] veth0 (unregistering): left promiscuous mode
[  514.550707][T20088] ipt_ECN: cannot use operation on non-tcp rule
[  515.045899][T20126] syzkaller0: entered promiscuous mode
[  515.052154][T20126] syzkaller0: entered allmulticast mode
[  515.296745][T20144] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048)
[  515.319482][T20148] nft_compat: unsupported protocol 0
[  515.629506][T20156] bridge3: the hash_elasticity option has been deprecated and is always 16
[  515.872121][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  515.956763][T20179] __nla_validate_parse: 22 callbacks suppressed
[  515.956782][T20179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3935'.
[  516.203409][T20187] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  516.307157][T20189] bond4: ARP target 1.0.0.0 is already present
[  516.336020][T20189] bond4: option arp_ip_target: invalid value (1)
[  516.345176][T20189] bond4 (unregistering): Released all slaves
[  516.375239][T20198] syzkaller0: entered promiscuous mode
[  516.381705][T20198] syzkaller0: entered allmulticast mode
[  516.422892][T20198] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  516.443534][T20197] tipc: Resetting bearer <eth:syzkaller0>
[  516.465907][T20197] tipc: Disabling bearer <eth:syzkaller0>
[  516.478474][T20204] validate_nla: 65 callbacks suppressed
[  516.478551][T20204] netlink: 'syz.4.3943': attribute type 8 has an invalid length.
[  516.507339][T20206] netlink: 'syz.2.3944': attribute type 11 has an invalid length.
[  516.520466][T20204] team0: No ports can be present during mode change
[  516.590258][   T30] audit: type=1800 audit(1765383000.598:3): pid=20208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3945" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1307 res=0 errno=0
[  516.793863][T20224] netlink: 'syz.4.3948': attribute type 3 has an invalid length.
[  516.833729][T20224] netlink: 'syz.4.3948': attribute type 1 has an invalid length.
[  516.851483][T20224] netlink: 212 bytes leftover after parsing attributes in process `syz.4.3948'.
[  516.875651][T20224] NCSI netlink: No device for ifindex 813332851
[  516.879816][T20231] netlink: 'syz.5.3950': attribute type 1 has an invalid length.
[  516.918663][  T181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.927648][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  516.968652][T20242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3952'.
[  517.081827][T20248] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3955'.
[  517.103054][T20249] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3954'.
[  517.384871][T20268] openvswitch: netlink: Key type 31 is not supported
[  517.411919][T20272] siw: device registration error -23
[  517.422610][T20268] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3963'.
[  517.508332][T20274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3967'.
[  517.552912][T20282] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3968'.
[  517.734677][T20295] netlink: 'syz.4.3971': attribute type 1 has an invalid length.
[  517.944564][T20307] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3973'.
[  517.986313][T20309] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  518.011400][T20310] syzkaller0: entered promiscuous mode
[  518.035505][T20310] syzkaller0: entered allmulticast mode
[  518.139044][T20326] netlink: 'syz.1.3979': attribute type 42 has an invalid length.
[  518.151602][T20326] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3979'.
[  518.182280][  T181] IPVS: starting estimator thread 0...
[  518.300109][T20330] IPVS: using max 30 ests per chain, 72000 per kthread
[  518.539793][T20362] netlink: 'syz.4.3990': attribute type 12 has an invalid length.
[  518.641396][T20371] netlink: 'syz.5.3994': attribute type 1 has an invalid length.
[  518.664735][T20371] netlink: 'syz.5.3994': attribute type 4 has an invalid length.
[  518.681978][T20364] veth0_to_bridge: left allmulticast mode
[  518.691819][T20364] veth0_to_bridge: left promiscuous mode
[  518.701463][T20364] bridge0: port 3(veth0_to_bridge) entered disabled state
[  518.709853][T20381] netlink: 'syz.4.3995': attribute type 8 has an invalid length.
[  518.749888][T20364] bridge_slave_0: left allmulticast mode
[  518.756308][T20364] bridge_slave_0: left promiscuous mode
[  518.783153][T20364] bridge0: port 1(bridge_slave_0) entered disabled state
[  518.832301][T20364] bond0: (slave bridge_slave_1): Releasing backup interface
[  518.843318][T20364] bridge_slave_1: left promiscuous mode
[  518.865865][T20364] bond0: (slave bond_slave_0): Releasing backup interface
[  518.873865][T20364] bond_slave_0: left promiscuous mode
[  518.892195][T20364] bond0: (slave bond_slave_1): Releasing backup interface
[  518.930323][T20364] bond_slave_1: left promiscuous mode
[  518.963277][T20364] team0: Port device team_slave_0 removed
[  518.989389][T20364] team0: Port device team_slave_1 removed
[  519.008911][T20364] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  519.022305][T20364] batman_adv: batadv0: Removing interface: batadv_slave_0
[  519.052009][T20364] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  519.059540][T20364] batman_adv: batadv0: Removing interface: batadv_slave_1
[  519.085455][T20364] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  519.457279][T20419] Bluetooth: MGMT ver 1.23
[  519.478461][T20419] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma?
[  519.605569][T20429] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  519.815818][T20431] delete_channel: no stack
[  519.981863][T20443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  520.064401][T20447] xt_CT: You must specify a L4 protocol and not use inversions on it
[  520.110287][ T5842] Bluetooth: hci2: command 0x0401 tx timeout
[  521.089196][T20494] syzkaller0: entered promiscuous mode
[  521.109434][T20494] syzkaller0: entered allmulticast mode
[  521.220873][T20526] __nla_validate_parse: 10 callbacks suppressed
[  521.220891][T20526] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4036'.
[  521.442287][T20541] netlink: 'syz.2.4038': attribute type 11 has an invalid length.
[  522.520137][ T5842] Bluetooth: hci1: command tx timeout
[  523.299690][T20555] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4041'.
[  523.366326][T20558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  523.493277][T20568] bond0: entered allmulticast mode
[  523.509378][T20568] 8021q: adding VLAN 0 to HW filter on device bond0
[  523.529130][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.549263][T20571] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4046'.
[  523.559065][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.579559][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.601223][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.630392][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.638989][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.654538][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.668824][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.688091][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.706910][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.729407][T20577] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  523.741957][T20584] xt_hashlimit: max too large, truncated to 1048576
[  523.792185][T20582] gtp0: entered promiscuous mode
[  523.798177][T20582] gtp0: entered allmulticast mode
[  523.809677][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.847656][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.858470][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.867446][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.877986][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.886881][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.898744][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.908235][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.918228][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.927275][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.939452][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.970824][T20568] bond0: option ad_select: unable to set because the bond device is up
[  523.995868][T20598] can: request_module (can-proto-0) failed.
[  524.024940][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.054109][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.082602][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.096428][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.126047][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.141117][T20598] ip6_vti0 speed is unknown, defaulting to 1000
[  524.148572][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.170983][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4055'.
[  524.262320][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.282550][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.291857][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.301627][T20568] bond0: option ad_select: unable to set because the bond device is up
[  524.379513][T20617] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4061'.
[  524.412996][T20617] !
: renamed from dummy0
[  524.718859][T20638] ip6_vti0 speed is unknown, defaulting to 1000
[  525.022586][T20646] pim6reg527: entered allmulticast mode
[  525.117503][T20650] bond3: option packets_per_slave: invalid value (18446744073709551615)
[  525.143948][T20650] bond3: option packets_per_slave: allowed values 0 - 65535
[  525.186283][T20650] bond3 (unregistering): Released all slaves
[  525.572641][T20672] rdma_rxe: rxe_newlink: failed to add ipvlan0
[  525.832702][T20685] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  525.874029][   T11] block nbd0: Possible stuck request ffff888024c90000: control (read@0,1024B). Runtime 300 seconds
[  525.897430][   T11] block nbd0: Possible stuck request ffff888024c901c0: control (read@1024,1024B). Runtime 300 seconds
[  525.908778][   T11] block nbd0: Possible stuck request ffff888024c90380: control (read@2048,1024B). Runtime 300 seconds
[  525.920274][   T11] block nbd0: Possible stuck request ffff888024c90540: control (read@3072,1024B). Runtime 300 seconds
[  526.024071][T20688] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4081'.
[  526.113040][T20685] bond5: ARP target 1.0.0.0 is already present
[  526.119246][T20685] bond5: option arp_ip_target: invalid value (1)
[  526.142544][T20685] bond5 (unregistering): Released all slaves
[  526.305259][T20693] bond3: (slave bridge2): Enslaving as an active interface with an up link
[  526.888074][T20733] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4096'.
[  526.912850][T20730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4095'.
[  526.922647][T20730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4095'.
[  527.316517][T20758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4107'.
[  527.331668][T20758] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4107'.
[  527.352449][T20758] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4107'.
[  527.494592][T20775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4111'.
[  527.506255][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'.
[  527.566417][T20778] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4113'.
[  527.583552][T20778] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4113'.
[  527.897440][T20801] validate_nla: 3 callbacks suppressed
[  527.897513][T20801] netlink: 'syz.4.4121': attribute type 10 has an invalid length.
[  528.081651][T20805] syzkaller0: entered promiscuous mode
[  528.087613][T20805] syzkaller0: entered allmulticast mode
[  528.107658][T20803] netlink: 'syz.2.4122': attribute type 10 has an invalid length.
[  528.149097][T20803] 8021q: adding VLAN 0 to HW filter on device team0
[  528.171785][T20803] team0: entered promiscuous mode
[  528.177042][T20803] team0: entered allmulticast mode
[  528.200689][T20803] bond0: (slave team0): Enslaving as an active interface with an up link
[  528.805284][T20845] sctp: [Deprecated]: syz.2.4135 (pid 20845) Use of int in max_burst socket option.
[  528.805284][T20845] Use struct sctp_assoc_value instead
[  528.853282][T20837] IPVS: Unknown mcast interface: nicvf0
[  529.812716][T20879] syzkaller0: entered promiscuous mode
[  529.818261][T20879] syzkaller0: entered allmulticast mode
[  530.905120][T20950] IPv6: NLM_F_REPLACE set, but no existing node found!
[  530.913536][T20947] netlink: 'syz.2.4161': attribute type 4 has an invalid length.
[  530.933115][T20947] netlink: 'syz.2.4161': attribute type 4 has an invalid length.
[  530.955689][T20947] openvswitch: netlink: Flow key attr not present in new flow.
[  530.990917][ T5938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  530.999749][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.009389][T19461] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.018241][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.330281][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  531.453485][T20987] IPVS: ip_vs_edit_dest(): server weight less than zero
[  531.470950][T20985] netlink: 'syz.0.4175': attribute type 4 has an invalid length.
[  531.613801][T20993] syzkaller0: entered promiscuous mode
[  531.619500][T20993] syzkaller0: entered allmulticast mode
[  531.628767][T20993] 0: reclassify loop, rule prio 0, protocol 800
[  531.701778][T20999] netlink: 'syz.0.4179': attribute type 4 has an invalid length.
[  531.714017][T21003] netlink: 'syz.4.4180': attribute type 5 has an invalid length.
[  531.726579][T20999] netlink: 'syz.0.4179': attribute type 4 has an invalid length.
[  531.903722][T21014] __nla_validate_parse: 145 callbacks suppressed
[  531.903739][T21014] netlink: 1044 bytes leftover after parsing attributes in process `syz.5.4186'.
[  531.911578][T21013] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4184'.
[  532.017639][T21025] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2
[  532.047576][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4188'.
[  532.075616][T21031] netlink: 'syz.5.4191': attribute type 1 has an invalid length.
[  532.083744][T21031] netlink: 'syz.5.4191': attribute type 2 has an invalid length.
[  532.114124][T21029] bond0: left promiscuous mode
[  532.118915][T21029] team0: left promiscuous mode
[  532.126029][T21029] bond0: left allmulticast mode
[  532.131116][T21029] team0: left allmulticast mode
[  532.301108][T21031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4191'.
[  532.342748][ T8787] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.372475][ T8787] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.410518][ T8787] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.463740][ T8787] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  532.739391][T21066] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4198'.
[  532.776699][T21066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4198'.
[  532.871911][T21076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4201'.
[  532.890604][T21079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4202'.
[  532.899847][T21083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4202'.
[  533.405380][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4212'.
[  533.486174][T21126] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20000
[  533.626433][T21132] netem: unknown loss type 0
[  533.632097][T21132] netem: change failed
[  533.762656][T21145] validate_nla: 2 callbacks suppressed
[  533.762674][T21145] netlink: 'syz.0.4221': attribute type 1 has an invalid length.
[  533.780079][T21145] netlink: 'syz.0.4221': attribute type 1 has an invalid length.
[  533.836555][T21151] netlink: 'syz.4.4222': attribute type 6 has an invalid length.
[  533.845804][T21151] netlink: 'syz.4.4222': attribute type 6 has an invalid length.
[  533.845888][T21152] syzkaller0: entered promiscuous mode
[  533.868101][T21152] syzkaller0: entered allmulticast mode
[  533.880744][T21150] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  533.918169][T21149] tipc: Resetting bearer <eth:syzkaller0>
[  533.943239][T21147] tipc: Resetting bearer <eth:syzkaller0>
[  533.961713][T21147] tipc: Disabling bearer <eth:syzkaller0>
[  533.984347][T21158] bond3: down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms
[  534.016750][T21157] syzkaller0: entered promiscuous mode
[  534.025392][T21157] syzkaller0: entered allmulticast mode
[  534.416762][T21180] syzkaller0: entered promiscuous mode
[  534.447706][T21180] syzkaller0: entered allmulticast mode
[  534.457632][T21184] tipc: New replicast peer: 255.255.255.255
[  534.465279][T21184] tipc: Enabled bearer <udp:syz2>, priority 10
[  535.112000][T21240] netlink: 'syz.0.4250': attribute type 10 has an invalid length.
[  535.133968][T21240] batman_adv: batadv0: Interface deactivated: dummy0
[  535.147951][T21240] dummy0: left promiscuous mode
[  535.156396][T21240] batman_adv: batadv0: Removing interface: dummy0
[  535.174011][T21246] netlink: 'syz.0.4250': attribute type 10 has an invalid length.
[  535.194409][T21240] team0: Failed to send options change via netlink (err -105)
[  535.202376][T21240] team0: Port device dummy0 added
[  535.245825][T21246] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  535.266583][T21246] team0: Failed to send options change via netlink (err -105)
[  535.276208][T21246] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  535.288797][T21246] team0: Port device dummy0 removed
[  535.301385][T21246] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  535.615596][T21280] Can't find ip_set type bitmap:ip,mac
[  535.674755][T21285] netlink: 'syz.0.4262': attribute type 10 has an invalid length.
[  535.977649][T21303] bridge0: port 2(bridge_slave_1) entered disabled state
[  535.985548][T21303] bridge0: port 1(bridge_slave_0) entered disabled state
[  535.990836][T21309] netlink: 'syz.0.4270': attribute type 2 has an invalid length.
[  536.128630][T21309] : entered promiscuous mode
[  536.424997][T21337] syz_tun: entered allmulticast mode
[  536.464552][T21337] pimreg: entered allmulticast mode
[  536.477551][T21336] syz_tun: left allmulticast mode
[  536.708499][T21350] syzkaller0: entered promiscuous mode
[  536.723832][T21350] syzkaller0: entered allmulticast mode
[  537.006131][T21365] __nla_validate_parse: 13 callbacks suppressed
[  537.006151][T21365] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4282'.
[  537.037543][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4283'.
[  537.227389][T21372] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  537.287064][T21372] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  537.306603][T21372] syzkaller0: entered promiscuous mode
[  537.307203][T21378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4286'.
[  537.323747][T21380] netlink: 'syz.0.4287': attribute type 13 has an invalid length.
[  537.332932][T21380] netlink: 'syz.0.4287': attribute type 58 has an invalid length.
[  537.338282][T21372] syzkaller0: entered allmulticast mode
[  537.341724][T21378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4286'.
[  537.358754][T21380] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4287'.
[  537.382717][T21372] tipc: Resetting bearer <eth:syzkaller0>
[  537.438586][T21372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4285'.
[  537.554734][T21371] tipc: Resetting bearer <eth:syzkaller0>
[  537.677332][T21371] tipc: Disabling bearer <eth:syzkaller0>
[  537.770679][T21413] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.4292'.
[  538.130466][T21417] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4293'.
[  538.372398][T21437] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  538.492175][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'.
[  538.598602][T21456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4305'.
[  538.724675][T21462] smc: removing net device team0 with user defined pnetid SYZ2
[  538.795805][T21473] validate_nla: 3 callbacks suppressed
[  538.795821][T21473] netlink: 'syz.2.4311': attribute type 29 has an invalid length.
[  538.943258][T21485] netlink: 'syz.4.4315': attribute type 25 has an invalid length.
[  539.000960][   T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  539.020315][   T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  539.039635][   T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  539.068108][   T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  539.135389][T21505] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1
[  539.161595][T21504] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  539.194017][T21512] netlink: 'syz.4.4322': attribute type 1 has an invalid length.
[  539.220096][T21512] netlink: 'syz.4.4322': attribute type 1 has an invalid length.
[  539.244110][T21512] netlink: 'syz.4.4322': attribute type 2 has an invalid length.
[  539.344822][T21518] netlink: 'syz.5.4326': attribute type 1 has an invalid length.
[  539.717967][T21538] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  539.831522][T21548] tap0: tun_chr_ioctl cmd 1074025676
[  539.836953][T21548] tap0: owner set to 0
[  539.846685][T21550] SET target dimension over the limit!
[  539.926154][T21556] netlink: 'syz.5.4337': attribute type 12 has an invalid length.
[  540.554906][T21599] netlink: 'syz.5.4348': attribute type 9 has an invalid length.
[  540.678223][T21612] hsr_slave_0: left promiscuous mode
[  540.690774][T21612] hsr_slave_1: left promiscuous mode
[  540.757358][T21616] netlink: 'syz.1.4353': attribute type 8 has an invalid length.
[  540.793927][T21617] x_tables: ip6_tables: mh match: only valid for protocol 135
[  541.530659][T21662] netlink: 'syz.5.4369': attribute type 1 has an invalid length.
[  541.588058][T21662] 8021q: adding VLAN 0 to HW filter on device bond2
[  541.630945][T21662] bond2: (slave veth1): Enslaving as an active interface with a down link
[  541.685961][T21662] vlan2: entered allmulticast mode
[  541.700160][T21662] veth1: entered allmulticast mode
[  541.706657][T21662] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[  542.059272][T21702] geneve2: entered promiscuous mode
[  542.090430][T21702] geneve2: entered allmulticast mode
[  542.107285][   T13] netdevsim netdevsim1 ������: set [1, 1] type 2 family 0 port 19999 - 0
[  542.127025][   T13] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0
[  542.144832][   T13] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0
[  542.174015][   T13] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0
[  542.233117][T21710] IPv6: NLM_F_CREATE should be specified when creating new route
[  542.277647][T21710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  542.284957][T21710] IPv6: NLM_F_CREATE should be set when creating new route
[  542.293013][T21710] IPv6: NLM_F_CREATE should be set when creating new route
[  542.300298][T21710] IPv6: NLM_F_CREATE should be set when creating new route
[  542.337268][T21721] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  542.386387][T21720] __nla_validate_parse: 13 callbacks suppressed
[  542.386407][T21720] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4384'.
[  542.438996][T21720] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4384'.
[  542.476900][T21720] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4384'.
[  542.505329][T21720] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4384'.
[  542.543496][T21720] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4384'.
[  542.569395][T21737] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4389'.
[  542.586296][T21720] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4384'.
[  542.613068][T21720] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4384'.
[  542.640513][T21720] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4384'.
[  542.651900][T21720] netlink: 324 bytes leftover after parsing attributes in process `syz.4.4384'.
[  542.791170][T21739] netem: incorrect gi model size
[  542.800066][T21739] netem: change failed
[  542.929320][T21754] tipc: Started in network mode
[  542.940459][T21754] tipc: Node identity 72424bd7f771, cluster identity 4711
[  542.955264][T21754] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  542.990890][T21758] IPv6: sit1: Disabled Multicast RS
[  543.011295][T21758] sit1: entered allmulticast mode
[  543.052451][T21756] syzkaller0: entered promiscuous mode
[  543.057954][T21756] syzkaller0: entered allmulticast mode
[  543.074133][T21754] vxcan1: mtu less than device minimum
[  543.084890][T21753] tipc: Resetting bearer <eth:syzkaller0>
[  543.098209][T21771] netlink: 'syz.2.4401': attribute type 11 has an invalid length.
[  543.141041][T21753] tipc: Disabling bearer <eth:syzkaller0>
[  545.562993][T21838] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  546.517227][T21899] xt_TCPMSS: Only works on TCP SYN packets
[  546.709553][T21911] pimreg: left allmulticast mode
[  546.961530][T21919] syzkaller0: create flow: hash 3483491901 index 1
[  547.179392][T21919] syzkaller0: delete flow: hash 3483491901 index 1
[  548.959181][T21960] validate_nla: 4 callbacks suppressed
[  548.959198][T21960] netlink: 'syz.1.4449': attribute type 32 has an invalid length.
[  548.984590][T21960] __nla_validate_parse: 38 callbacks suppressed
[  548.984609][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4449'.
[  549.096066][T21960] bond4: Setting coupled_control to off (0)
[  549.104357][T21978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4451'.
[  549.324809][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  549.337459][T21994] syzkaller1: entered promiscuous mode
[  549.344165][T21994] syzkaller1: entered allmulticast mode
[  549.358226][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  549.372286][T21994] netlink: 'syz.1.4457': attribute type 27 has an invalid length.
[  549.386488][T21994] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4457'.
[  549.397433][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  549.412136][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  549.457294][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  549.464672][T22002] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4461'.
[  549.477203][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'.
[  549.477946][T22000] netlink: 'syz.5.4460': attribute type 1 has an invalid length.
[  549.559193][T22003] syzkaller0: entered promiscuous mode
[  549.569303][T22003] syzkaller0: entered allmulticast mode
[  549.619686][T22009] syzkaller1: entered promiscuous mode
[  549.625466][T22009] syzkaller1: entered allmulticast mode
[  550.120240][T22039] syzkaller0: entered allmulticast mode
[  552.142410][T22055] wireguard0: entered allmulticast mode
[  554.332541][T22078] __nla_validate_parse: 62 callbacks suppressed
[  554.332559][T22078] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4478'.
[  554.474169][T22089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4483'.
[  554.485139][T22090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4483'.
[  554.516180][T22094] netlink: 'syz.0.4484': attribute type 1 has an invalid length.
[  554.906296][T22121] netlink: 'syz.5.4491': attribute type 11 has an invalid length.
[  555.047998][T22132] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4494'.
[  555.086191][T22132] syz_tun: entered allmulticast mode
[  555.134746][T22132] dvmrp8: entered allmulticast mode
[  555.198742][T22127] syz_tun: left allmulticast mode
[  555.240980][T22141] veth1_to_team: mtu less than device minimum
[  555.247994][T22143] wg2: mtu less than device minimum
[  555.253847][T22141] wg2: mtu less than device minimum
[  555.261204][T22141] netlink: 'syz.2.4498': attribute type 83 has an invalid length.
[  555.271515][T22143] netlink: 'syz.2.4498': attribute type 83 has an invalid length.
[  555.318112][T22152] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4499'.
[  555.360787][T22155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4500'.
[  555.566348][T22169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4504'.
[  555.747384][T22190] netlink: 'syz.0.4508': attribute type 1 has an invalid length.
[  555.865009][T22192] 8021q: adding VLAN 0 to HW filter on device bond0
[  555.904795][T22198] nbd: must specify an index to disconnect
[  555.972846][   T11] block nbd0: Possible stuck request ffff888024c90000: control (read@0,1024B). Runtime 330 seconds
[  555.984335][   T11] block nbd0: Possible stuck request ffff888024c901c0: control (read@1024,1024B). Runtime 330 seconds
[  555.998226][   T11] block nbd0: Possible stuck request ffff888024c90380: control (read@2048,1024B). Runtime 330 seconds
[  556.009809][   T11] block nbd0: Possible stuck request ffff888024c90540: control (read@3072,1024B). Runtime 330 seconds
[  556.063140][T22206] netlink: 'syz.2.4514': attribute type 1 has an invalid length.
[  556.128472][T22207] netlink: 'syz.2.4514': attribute type 1 has an invalid length.
[  556.188207][T22207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4514'.
[  556.189556][T22214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4516'.
[  556.198949][T22212] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4515'.
[  556.211326][T22214] 8021q: VLANs not supported on sit0
[  556.352080][T22222] lo: entered promiscuous mode
[  556.366979][T22222] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  556.504735][T22239] xt_time: invalid argument - start or stop time greater than 23:59:59
[  556.790706][T22259] x_tables: unsorted entry at hook 3
[  557.049554][T22274] veth3: entered promiscuous mode
[  557.104976][T22278] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  557.235549][T22286] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  557.258834][T22286] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  557.280446][T22286] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  557.321767][T22289] netlink: 'syz.4.4537': attribute type 13 has an invalid length.
[  557.474652][T22289] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  557.483597][T22289] syzkaller0: entered promiscuous mode
[  557.489352][T22289] syzkaller0: entered allmulticast mode
[  557.507588][T22310] netlink: 'syz.5.4542': attribute type 1 has an invalid length.
[  557.518830][T22307] netlink: 'syz.5.4542': attribute type 1 has an invalid length.
[  557.644515][ T5973] IPVS: starting estimator thread 0...
[  557.676666][T22313] tipc: Cannot configure node identity twice
[  557.740933][T22317] IPVS: using max 33 ests per chain, 79200 per kthread
[  557.921844][T22335] netlink: 'syz.1.4550': attribute type 4 has an invalid length.
[  558.092350][T22343] : entered promiscuous mode
[  558.200435][T22358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.238781][T22358] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  558.371615][T22372] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  558.478320][T22384] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  558.497345][T22384] +
: renamed from syzkaller0
[  558.507418][T22384] tipc: Disabling bearer <eth:syzkaller0>
[  558.563098][T22392] team0: Caught tx_queue_len zero misconfig
[  558.803396][T22397] tc_dump_action: action bad kind
[  558.808648][T22404] macvlan0: entered promiscuous mode
[  558.854857][T22396] pim6reg1: entered promiscuous mode
[  558.877844][T22396] pim6reg1: entered allmulticast mode
[  559.087607][T22426] xt_ecn: cannot match TCP bits for non-tcp packets
[  559.480912][T22455] __nla_validate_parse: 14 callbacks suppressed
[  559.480933][T22455] netlink: 240 bytes leftover after parsing attributes in process `syz.4.4585'.
[  559.572622][T22450] syzkaller0: entered promiscuous mode
[  559.578142][T22450] syzkaller0: entered allmulticast mode
[  559.624921][T22458] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT
[  559.652486][T22462] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4589'.
[  559.742701][T22470] netlink: 'syz.1.4590': attribute type 11 has an invalid length.
[  559.759406][T22466] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4589'.
[  559.775527][T22470] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.4590'.
[  559.787325][T22474] validate_nla: 1 callbacks suppressed
[  559.787342][T22474] netlink: 'syz.4.4589': attribute type 10 has an invalid length.
[  559.804617][T22474] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4589'.
[  559.820302][T22473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4591'.
[  559.825294][T22474] team0: Port device geneve0 added
[  559.873582][ T8793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  559.905196][ T8793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  559.925451][ T8793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  559.951478][   T52] Bluetooth: hci5: command 0x0405 tx timeout
[  559.956459][T22473] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4591'.
[  559.989749][ T8793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.018693][T22473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4591'.
[  560.170976][T22492] syzkaller0: entered promiscuous mode
[  560.185649][T22492] syzkaller0: entered allmulticast mode
[  560.275346][T22500] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4599'.
[  560.324263][T22514] netlink: 'syz.0.4601': attribute type 1 has an invalid length.
[  560.474235][T22521] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  560.633849][T22532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4607'.
[  561.082321][   T31] INFO: task syz.3.2468:15082 blocked for more than 143 seconds.
[  561.114161][T22563] netlink: 'syz.4.4618': attribute type 12 has an invalid length.
[  561.123727][T22563] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20001
[  561.132445][   T31]       Not tainted syzkaller #0
[  561.137511][   T31]       Blocked by coredump.
[  561.155430][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  561.173418][   T31] task:syz.3.2468      state:D stack:24632 pid:15082 tgid:15078 ppid:5840   task_flags:0x40054c flags:0x00080000
[  561.213795][   T31] Call Trace:
[  561.222892][   T31]  <TASK>
[  561.229329][   T31]  __schedule+0x14bc/0x5000
[  561.236671][   T31]  ? __pfx___schedule+0x10/0x10
[  561.241936][   T31]  ? schedule+0x91/0x360
[  561.250069][   T31]  schedule+0x165/0x360
[  561.269993][   T31]  schedule_preempt_disabled+0x13/0x30
[  561.276077][   T31]  rwsem_down_write_slowpath+0x872/0xfe0
[  561.281877][   T31]  ? rwsem_down_write_slowpath+0x472/0xfe0
[  561.287727][   T31]  ? __pfx_rwsem_down_write_slowpath+0x10/0x10
[  561.294133][   T31]  ? exit_mmap+0x281/0xb20
[  561.298584][   T31]  down_write+0x1ab/0x1f0
[  561.303336][   T31]  ? __pfx_down_write+0x10/0x10
[  561.308538][   T31]  exit_mmap+0x281/0xb20
[  561.313167][   T31]  ? uprobe_clear_state+0x20f/0x290
[  561.318469][   T31]  ? __pfx_exit_mmap+0x10/0x10
[  561.323369][   T31]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  561.329055][   T31]  ? __pfx_exit_aio+0x10/0x10
[  561.333850][   T31]  ? uprobe_clear_state+0x27c/0x290
[  561.339186][   T31]  __mmput+0x118/0x430
[  561.343323][   T31]  exit_mm+0x1da/0x2c0
[  561.347452][   T31]  ? __pfx_exit_mm+0x10/0x10
[  561.352093][   T31]  do_exit+0x658/0x2310
[  561.356249][   T31]  ? do_raw_spin_lock+0x121/0x290
[  561.361313][   T31]  ? __pfx_do_exit+0x10/0x10
[  561.365923][   T31]  do_group_exit+0x21c/0x2d0
[  561.370581][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  561.375802][   T31]  get_signal+0x1285/0x1340
[  561.380490][   T31]  arch_do_signal_or_restart+0x9a/0x7a0
[  561.386046][   T31]  ? fput+0xa0/0xd0
[  561.389893][   T31]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  561.396375][   T31]  ? exit_to_user_mode_loop+0x55/0x4f0
[  561.401926][   T31]  exit_to_user_mode_loop+0x87/0x4f0
[  561.407618][   T31]  ? rcu_is_watching+0x15/0xb0
[  561.412623][   T31]  do_syscall_64+0x2e3/0xf80
[  561.417268][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.423601][   T31]  ? clear_bhb_loop+0x60/0xb0
[  561.428550][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.434489][   T31] RIP: 0033:0x7f2e43f8f749
[  561.438906][   T31] RSP: 002b:00007f2e44dde0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  561.447352][   T31] RAX: 0000000000000001 RBX: 00007f2e441e5fa8 RCX: 00007f2e43f8f749
[  561.455582][   T31] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2e441e5fac
[  561.463849][   T31] RBP: 00007f2e441e5fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  561.472889][   T31] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000000
[  561.480923][   T31] R13: 00007f2e441e6038 R14: 00007fffb7649b20 R15: 00007fffb7649c08
[  561.488915][   T31]  </TASK>
[  561.492436][   T31] 
[  561.492436][   T31] Showing all locks held in the system:
[  561.503356][   T31] 1 lock held by khungtaskd/31:
[  561.508239][   T31]  #0: ffffffff8df41cc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  561.519503][   T31] 1 lock held by dhcpcd/5497:
[  561.528459][   T31]  #0: ffff8880b883a7d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  561.538611][   T31] 2 locks held by getty/5593:
[  561.543345][   T31]  #0: ffff888033ec80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  561.563876][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  561.576136][   T31] 1 lock held by syz-executor/5840:
[  561.582124][   T31]  #0: ffff888033990f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x281/0xb20
[  561.591326][   T31] 1 lock held by udevd/6759:
[  561.595927][   T31]  #0: ffff888024bb7358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  561.605266][   T31] 1 lock held by syz.3.2468/15082:
[  561.610905][   T31]  #0: ffff888078eb1bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x281/0xb20
[  561.620475][   T31] 2 locks held by dhcpcd/22572:
[  561.625398][   T31]  #0: ffff8880419d6260 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  561.636293][   T31]  #1: ffffffff8df477f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  561.647378][   T31] 
[  561.649728][   T31] =============================================
[  561.649728][   T31] 
[  561.658354][   T31] NMI backtrace for cpu 0
[  561.658368][   T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  561.658380][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  561.658387][   T31] Call Trace:
[  561.658391][   T31]  <TASK>
[  561.658396][   T31]  dump_stack_lvl+0x189/0x250
[  561.658414][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  561.658424][   T31]  ? __pfx__printk+0x10/0x10
[  561.658443][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  561.658455][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  561.658466][   T31]  ? __pfx__printk+0x10/0x10
[  561.658480][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  561.658495][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  561.658506][   T31]  watchdog+0xf3c/0xf80
[  561.658521][   T31]  ? watchdog+0x1e2/0xf80
[  561.658535][   T31]  kthread+0x711/0x8a0
[  561.658549][   T31]  ? __pfx_watchdog+0x10/0x10
[  561.658559][   T31]  ? __pfx_kthread+0x10/0x10
[  561.658571][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  561.658582][   T31]  ? lockdep_hardirqs_on+0x98/0x140
[  561.658593][   T31]  ? __pfx_kthread+0x10/0x10
[  561.658605][   T31]  ret_from_fork+0x599/0xb30
[  561.658620][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  561.658639][   T31]  ? __switch_to_asm+0x39/0x70
[  561.658654][   T31]  ? __switch_to_asm+0x33/0x70
[  561.658667][   T31]  ? __pfx_kthread+0x10/0x10
[  561.658679][   T31]  ret_from_fork_asm+0x1a/0x30
[  561.658698][   T31]  </TASK>
[  561.658702][   T31] Sending NMI from CPU 0 to CPUs 1:
[  561.807652][    C1] NMI backtrace for cpu 1
[  561.807670][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  561.807689][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  561.807699][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  561.807724][    C1] Code: 53 ec 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 0d 1f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  561.807740][    C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6
[  561.807754][    C1] RAX: adba296cf64ec900 RBX: ffffffff8197438a RCX: adba296cf64ec900
[  561.807767][    C1] RDX: 0000000000000001 RSI: ffffffff8d76bd90 RDI: ffffffff8bbfc660
[  561.807779][    C1] RBP: ffffc90000197f10 R08: ffff8880b893359b R09: 1ffff110171266b3
[  561.807791][    C1] R10: dffffc0000000000 R11: ffffed10171266b4 R12: ffffffff8f805a70
[  561.807803][    C1] R13: 1ffff11003952b70 R14: 0000000000000001 R15: 0000000000000001
[  561.807814][    C1] FS:  0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000
[  561.807828][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  561.807839][    C1] CR2: 0000564c06113168 CR3: 000000007524e000 CR4: 00000000003526f0
[  561.807854][    C1] Call Trace:
[  561.807863][    C1]  <TASK>
[  561.807870][    C1]  default_idle+0x13/0x20
[  561.807892][    C1]  default_idle_call+0x73/0xb0
[  561.807925][    C1]  do_idle+0x1ea/0x520
[  561.807942][    C1]  ? irqentry_exit+0x5ba/0x660
[  561.807963][    C1]  ? __pfx_do_idle+0x10/0x10
[  561.807987][    C1]  cpu_startup_entry+0x44/0x60
[  561.808004][    C1]  start_secondary+0x101/0x110
[  561.808025][    C1]  common_startup_64+0x13e/0x147
[  561.808051][    C1]  </TASK>
[  562.992005][ T1304] aoe: packet could not be sent on bond0.  consider increasing tx_queue_len
[  570.191129][ T5846] Bluetooth: hci1: command 0x0406 tx timeout
[  570.195432][T22576] Bluetooth: hci6: command 0x0406 tx timeout