last executing test programs:

3m40.65228676s ago: executing program 3 (id=533):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x2}, 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a3200000000140007800800064000000000080017"], 0x5c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}]}}]}, 0x3c}}, 0x24000000)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10000)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r1, &(0x7f0000000080), &(0x7f0000000100)=""/122}, 0x20)
writev(r0, &(0x7f00000000c0), 0x0)

3m40.449953644s ago: executing program 3 (id=537):
socket$kcm(0xa, 0x3, 0x87)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
pselect6(0x40, &(0x7f0000000040)={0x3, 0x100000000, 0xffffffffffffffff, 0xfffffffffffffff9, 0x2, 0xc, 0x5, 0x4}, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)=ANY=[], 0xfdef)

3m39.085384733s ago: executing program 3 (id=552):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x29, 0x7, 0x9, 0x2, 0xc, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, 0x20, 0x700, 0x3ff, 0x6}})

3m39.071390967s ago: executing program 3 (id=555):
r0 = socket(0x10, 0x80002, 0x0)
socket$kcm(0x10, 0x400000002, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10)
r2 = accept(r1, 0x0, 0x0)
sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4}], 0x1, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="3c75c2015e8724b5a4c586f2ae924b277f0403ec773eab27570e28988217c9b056128ff16b2a141a2288e717", 0x2c)
recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000000))
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="2000000029000f0100"/20, @ANYRES32=0x0, @ANYBLOB="000025831a23c9fe0cc93efeeecb8200005d06f40061bb609dd5f404e2e8b1c35ccbd522ad049463408f78470ef0ba37e149fff5f6672157f4f2eef93ae4342b49c4ed54d9014bcc3fdccf45b9d3384dc46f63c666dfdc4f0ab5de564ccd4d35d08cd674b8d8aa2d02"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0)

3m38.516275099s ago: executing program 3 (id=559):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010"], 0x78}}, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r1, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10)
recvmmsg(r2, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x7830c3240c0dc35e, 0x0, 0x0, 0x0, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x3}, 0x90)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000380), 0x4)
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000007c0), 0x10)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000140)}, 0x20)

3m38.343279416s ago: executing program 3 (id=560):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000)

3m23.358694064s ago: executing program 32 (id=560):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94)
close(r0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe80, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x2f, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0x70bd26, 0x25dfdbfc, {0x6}}, 0x14}}, 0x20048000)

2m41.034452456s ago: executing program 4 (id=1371):
r0 = socket$inet6(0xa, 0x2, 0x0)
close(0x3)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x11, r1, 0x37e43000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@ipv4={'\x00', '\xff\xff', @local}, 0x800, 0x0, 0x103, 0x1, 0x8000}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000290000003e0000000008000000000000023ee6a4fb83260ee68b88cd865c02f33d4928920872a0d219aef868a745fa99a7e61ec6faf994799ba8f7e9cbd52974d6456cab77a11a9f7e27c7c7b2c872b0ad9340ca1e71d31029039fa47fd7c4a48effd4d59d4bae3aea30c01281846f6afb929b6f"], 0x18}, 0x40c0)

2m40.878518135s ago: executing program 4 (id=1375):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xf) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32)
sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) (async, rerun: 32)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000010104000000000000000002d1dd62240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}, 0x1, 0x0, 0x0, 0x4891}, 0x0) (rerun: 32)

2m40.578311116s ago: executing program 4 (id=1379):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x20040810)
socket$inet_tcp(0x2, 0x1, 0x0)

2m40.371007609s ago: executing program 4 (id=1383):
r0 = socket$inet6(0xa, 0x5, 0x0)
bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c)
r1 = socket$inet6(0xa, 0x5, 0x0)
r2 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 32)
listen(r2, 0x8) (async, rerun: 32)
r3 = accept4(r2, 0x0, 0x0, 0x180000)
poll(&(0x7f00000001c0)=[{r2, 0x2}, {r3, 0x1102}], 0x2, 0xc511) (async, rerun: 64)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64)
sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x1fc, r4, 0x208, 0x7, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0xa}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb8}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x456}, {0x6, 0x11, 0xd7}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2246}, {0x6, 0x11, 0x9}, {0x8, 0x13, 0x523}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x10f5}, {0x6, 0x11, 0xff}, {0x8, 0x13, 0x7ff}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffffe}, {0x6, 0x11, 0xd}, {0x8, 0x13, 0x7}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x800}, {0x5, 0x14, 0x1}}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x800}, 0x80)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x41}}, 0x902}, 0x1c) (async)
connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e22, 0x2, @private1, 0xa1b}, 0x1c) (async)
ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) (async, rerun: 64)
r5 = socket$netlink(0x10, 0x3, 0x4) (rerun: 64)
writev(r5, &(0x7f0000000200)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x7e, '\x00', 0x0, @tracing=0x18}, 0x94)

2m12.55649505s ago: executing program 4 (id=1386):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', <r1=>0x0})
r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
getsockopt$X25_QBITINCL(r2, 0x106, 0x1, 0x0, &(0x7f0000000040)=0xffffffffffffff5f)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffffdd7, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000090800001cfd1143fe0b000100693884e9c0f7de6f62d9ea9d70766c616e00000c0002800600010000000000080005", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0xfffffdd7, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="03150000090800001cfd1143fe0b000100693884e9c0f7de6f62d9ea9d70766c616e00000c0002800600010000000000080005", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)

2m12.54857822s ago: executing program 4 (id=1389):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800001016000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ff"], 0xf8}}, 0x810)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a80"], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000940), 0x0, 0x54004)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004)
r5 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet6_mreq(r5, 0x29, 0x1, 0x0, &(0x7f0000000140))
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2m12.535301184s ago: executing program 33 (id=1389):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x3}, {0xa, 0xffe0}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x12000000}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x44}}, 0x20004055)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800001016000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ff"], 0xf8}}, 0x810)
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x20)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a80"], 0x1c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x1, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r1, 0x0, 0x0)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r1, &(0x7f0000000940), 0x0, 0x54004)
ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140))
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f00000000c0)=""/82, &(0x7f0000000140)=0x52)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000001c0)={0x14, 0x26, 0x1, 0x70bd25, 0x25dfdbfc, {0x5}}, 0x14}}, 0x20006004)
r5 = socket$inet6(0xa, 0x5, 0x0)
getsockopt$inet6_mreq(r5, 0x29, 0x1, 0x0, &(0x7f0000000140))
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x4}, 0x8)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

47.014508435s ago: executing program 6 (id=2307):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000003c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x14, &(0x7f00000001c0), 0x4)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x7, &(0x7f00000000c0)="fdffffff", 0x4)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0xb, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x40d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x484cb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x7fff}]}}}]}, 0x3c}}, 0x0)

46.87933545s ago: executing program 6 (id=2308):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x8)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$netlink(0x10, 0x3, 0x0)
getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x1503, 0x4}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r1, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x64}, 0x1, 0x0, 0x0, 0x88000}, 0x40840)

46.562970502s ago: executing program 6 (id=2315):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000200), 0xe)
listen(r0, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000100), 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x2}, 0x90)

46.411135829s ago: executing program 6 (id=2320):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x60}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1b, 0x6, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x5}, @alu={0x4, 0x1, 0x2, 0x6, 0x1, 0x1, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x82}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xeb5}], &(0x7f0000000380)='syzkaller\x00', 0x9, 0x8d, &(0x7f00000003c0)=""/141, 0x41000, 0x40, '\x00', r2, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0xf, 0x2, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[r0, r0], 0x0, 0x10, 0x2}, 0x94)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
write$tun(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb8847"], 0x72)
pipe(&(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
readv(r6, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/195, 0xc3}], 0x1)
write$cgroup_subtree(r7, &(0x7f0000000700)=ANY=[], 0xfe33)
readv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/42, 0x2a}, {&(0x7f0000000280)=""/145, 0x91}], 0x2)
setsockopt$RDS_RECVERR(r6, 0x114, 0x5, &(0x7f0000000200)=0x1, 0x4)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000580), &(0x7f00000006c0)=r1}, 0x20)
setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000005c0), 0x10)

45.600973847s ago: executing program 6 (id=2329):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x5, 0x4, 0x4000000}]}, {0xf, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x7}]}]}]}}]}, 0xb0}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x40, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x112}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x42)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000230000000c0000000c00000002c1556c0100000000000004000000108141"], 0x0, 0x26}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x500, 0x0)
ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x2})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000711221000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff)
r11 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_SET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r10, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0)
ioctl$TUNSETCARRIER(r8, 0x400454e2, 0x0)

45.219524109s ago: executing program 6 (id=2338):
socket(0xa, 0x3, 0x3a) (async)
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xb4, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0xc928, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @in6={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x22}}, @in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f00000002c0)=0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
gettid() (async)
r6 = gettid()
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r6) (async)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r6)
sendmsg$unix(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, 0x0)
connect$pppoe(r11, &(0x7f0000000440)={0x18, 0x0, {0x1, @local, 'bridge_slave_1\x00'}}, 0x1e)
sendmmsg(r11, &(0x7f0000007640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000008c0)="ab36bb1d1e97066fbddb0a9a7918896e5fe8d16f6e3c3e44446d030467d59627135d4e0ba3c8fecd9797b789e26fcffc39e4541078c61aaf021c38632b253f5dba3cb20a2dca3fd7", 0x48}, {&(0x7f0000000940)="935b825961637eedd13847a2b4d1cfcde13c358b3424954a3d0e1b594854f14578b3a704295041e5ba9ce03aa1a855780284276938d06ed7a033277ce11d486101dc80e052c8c77a98a58a6952f3e3fd981045ab65f4c0caf555ec441ecef9155c99b8ed5d021b27d1fc42271e4d326261a2ca03ad6fa2798f4b070cdefd16593fa491647009f75d0abfa339cae23f3b0a958413ae00bb375bbf66199721b22486b64fbd79ddc0699721432365bbc8cbb144738129f760626ac30e6243f8580cf98cf01ca69f97586de55012288cd0a9a6f16ada47e8f32b1d005d0268aee0ea90ad81cfe5acb5032cd6", 0xea}, {&(0x7f0000000a40)="f0bda5dd40985afe7197", 0xa}, {&(0x7f0000000a80)="4076987192ae1bbfa67d906469ad89929ae093fe37d3d277f0edc5bb2549ac0e7d3cc1deccf9ff822d0dcf0082c5ef8859996416b0d9741fe3f6e2fd319ceb9d8f07e7427dc9859c881662dfa8d8b5be36091d72110e83234c4b9aac6d96863de31fe9518a", 0x65}, {&(0x7f0000000b00)="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", 0x44a}], 0x5}}], 0x2, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000026000100fdff07000010e7ff030000"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)

29.770690097s ago: executing program 34 (id=2338):
socket(0xa, 0x3, 0x3a) (async)
r0 = socket(0xa, 0x3, 0x3a)
ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, 0x0)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xb4, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @loopback}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e24, 0xc928, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in6={0xa, 0x4e20, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}}, @in6={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x22}}, @in={0x2, 0x4e21, @private=0xa010101}]}, &(0x7f0000000080)=0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
socket$l2tp6(0xa, 0x2, 0x73) (async)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
getpeername$l2tp6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, &(0x7f00000002c0)=0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) (async)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
gettid() (async)
r6 = gettid()
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r6) (async)
ioctl$sock_SIOCSPGRP(r4, 0x8902, &(0x7f0000000000)=r6)
sendmsg$unix(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000008c0)="b6", 0x1}], 0x1, 0x0, 0x0, 0x20000000}, 0x4005)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0) (async)
sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8], 0x90}}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = socket$pppoe(0x18, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, 0x0)
connect$pppoe(r11, &(0x7f0000000440)={0x18, 0x0, {0x1, @local, 'bridge_slave_1\x00'}}, 0x1e)
sendmmsg(r11, &(0x7f0000007640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f00000008c0)="ab36bb1d1e97066fbddb0a9a7918896e5fe8d16f6e3c3e44446d030467d59627135d4e0ba3c8fecd9797b789e26fcffc39e4541078c61aaf021c38632b253f5dba3cb20a2dca3fd7", 0x48}, {&(0x7f0000000940)="935b825961637eedd13847a2b4d1cfcde13c358b3424954a3d0e1b594854f14578b3a704295041e5ba9ce03aa1a855780284276938d06ed7a033277ce11d486101dc80e052c8c77a98a58a6952f3e3fd981045ab65f4c0caf555ec441ecef9155c99b8ed5d021b27d1fc42271e4d326261a2ca03ad6fa2798f4b070cdefd16593fa491647009f75d0abfa339cae23f3b0a958413ae00bb375bbf66199721b22486b64fbd79ddc0699721432365bbc8cbb144738129f760626ac30e6243f8580cf98cf01ca69f97586de55012288cd0a9a6f16ada47e8f32b1d005d0268aee0ea90ad81cfe5acb5032cd6", 0xea}, {&(0x7f0000000a40)="f0bda5dd40985afe7197", 0xa}, {&(0x7f0000000a80)="4076987192ae1bbfa67d906469ad89929ae093fe37d3d277f0edc5bb2549ac0e7d3cc1deccf9ff822d0dcf0082c5ef8859996416b0d9741fe3f6e2fd319ceb9d8f07e7427dc9859c881662dfa8d8b5be36091d72110e83234c4b9aac6d96863de31fe9518a", 0x65}, {&(0x7f0000000b00)="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", 0x44a}], 0x5}}], 0x2, 0x0)
sendmsg$nl_generic(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1800000026000100fdff07000010e7ff030000"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)

7.559308502s ago: executing program 0 (id=2860):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10)
close(0x3)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0xa880)
ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}})
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xffffffffffffff04, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x91ee, 0x9, 0x10000000, 0x1, 0x7}, 0x9, 0x8}, [{0xd6c, 0x9, 0x8, 0xff, 0x10001, 0x9}, {0x7f, 0xffff, 0x6, 0x7fffffff, 0x1, 0x7}, {0x6, 0xb37b, 0x6, 0xb38, 0x0, 0xd0cb}, {0x4, 0x3, 0x2, 0xa318, 0x80000000, 0x1}, {0x9, 0xfffffff9, 0x2, 0x4, 0x6, 0x4}, {0x8000, 0x3, 0xe, 0x4, 0xcee8000, 0x1}, {0x9, 0x8, 0xfffffffa, 0x6, 0xa0fd, 0x8}, {0xffffffff, 0xe648, 0x7c0c3ffe, 0x8, 0x0, 0x5}, {0x3, 0x3, 0x9, 0xa}, {0x9, 0x6, 0xb6, 0x7fff, 0x5, 0x7}, {0x304, 0x66, 0x3, 0x101, 0x3, 0x9}, {0xff, 0x1, 0xe, 0x800, 0x3, 0x56}, {0xca, 0x4, 0x9, 0xfffffff8, 0x7, 0x7921bcf1}, {0x1, 0xff, 0x5, 0x80000000, 0xaae6, 0x9}, {0x4, 0x3, 0xa9, 0x8, 0x9, 0x4}, {0x5, 0x1000, 0x200, 0x2, 0x8, 0x6}, {0x3d648283, 0x2, 0x5, 0x9, 0x10000, 0x6}, {0x3, 0xa06, 0x1, 0x1, 0x9, 0x260ba674}, {0x6, 0xc5, 0x8d3, 0x9, 0x3, 0xffffffbc}, {0x3, 0x8, 0x3, 0x5, 0x0, 0xc80}, {0x3, 0xffffffff, 0xffff, 0x2, 0x9}, {0xfffffffa, 0x6, 0x77f, 0x160c, 0x3}, {0x1ff, 0x8, 0x0, 0x6, 0xb, 0x400}, {0x3ff, 0x9, 0xffff8001, 0x100, 0x3, 0x47}, {0x529, 0x4, 0x7, 0xffff, 0xc0a, 0xbad}, {0x8, 0x7, 0x884, 0x100, 0x9}, {0x8, 0x6, 0x6, 0xc, 0x3}, {0x4, 0x40, 0xcd6c, 0x71f, 0x8000, 0x6}, {0x5, 0x30a3, 0xa, 0x200, 0xfff, 0x9}, {0x3, 0x1, 0x5, 0x8, 0x2, 0x81}, {0x81, 0x0, 0x0, 0x49f11005, 0x9, 0x7fffffff}, {0x9, 0x0, 0x5c, 0x3bad, 0x8, 0x480}, {0xe, 0x58000000, 0x9, 0x3, 0x1ff, 0xaa2}, {0x800, 0xd1, 0x0, 0x3e, 0x0, 0x5}, {0x8, 0x0, 0x200, 0xfffffc00, 0x100, 0x10001}, {0x6, 0x7, 0x0, 0x101, 0x6, 0x81}, {0x8, 0x2, 0x200, 0x3, 0x4, 0x101}, {0xad, 0xa, 0x401, 0x0, 0x9, 0xff000000}, {0x8, 0x5, 0xd, 0x24, 0xc, 0x1}, {0xfffffff8, 0x9, 0x1000, 0xc, 0xea, 0x4}, {0x3, 0x0, 0x8, 0x1, 0x1, 0xffffff32}, {0x6, 0x5, 0xd7c9, 0x0, 0x5, 0x2}, {0xffff, 0x1, 0x5, 0x2, 0x7, 0x7}, {0x5, 0x2, 0x0, 0x401, 0x6, 0x1}, {0x3, 0x2, 0x4, 0x6, 0xfffffff8, 0x5}, {0x6, 0x0, 0x3, 0x5, 0x0, 0xffff8000}, {0x1, 0x0, 0x0, 0x9, 0x0, 0x4}, {0x2, 0x6, 0x2, 0x7, 0x9}, {0x0, 0xfffffffd, 0x756183d, 0xfffff801, 0x5, 0x8}, {0x7, 0xa, 0xfffffffc, 0x80000001, 0x407b, 0x2}, {0x7, 0x9, 0xee, 0x800, 0x1000}, {0x10, 0x5, 0x57a2a808, 0x80000000, 0x7fff, 0x5}, {0x729, 0x25, 0x6, 0x6, 0x8, 0x4}, {0x2, 0x406, 0xc209, 0x8, 0x0, 0xfffffffc}, {0x1, 0x7, 0x8, 0xfffffffb, 0x80000000, 0x4}, {0x1, 0x5, 0x8, 0x8000, 0x1, 0x7f}, {0x8001, 0xf42, 0x1, 0x3, 0x5, 0x430}, {0x2, 0xfffffff4, 0x5, 0xf, 0xc8, 0x7}, {0x6, 0x7, 0x9, 0x8, 0x5, 0x5}, {0x5, 0x8000000, 0x7, 0x5, 0x401, 0x9}, {0x1, 0x6, 0x1ff, 0xa8de, 0x0, 0x807b}, {0x0, 0x80000000, 0x7fff, 0x5, 0x2, 0x7}, {0xe, 0xfffffffc, 0x7fffffff, 0x7, 0x5, 0x1ff}, {0x81, 0xaa, 0x1e, 0x9, 0x14fc, 0x8}, {0x9, 0xffffffff, 0x40, 0x6, 0x13b, 0xeacd}, {0x100020, 0xff, 0x6, 0x81, 0x0, 0x6}, {0x2, 0xe, 0xb, 0x0, 0x6, 0x2}, {0x8, 0x3, 0x5, 0x4, 0x4, 0x2}, {0x84, 0x3ff, 0x3d0c, 0x1, 0x8, 0x2}, {0x4, 0x4, 0xb85c, 0x1, 0x7, 0x6}, {0x3, 0xc6, 0x0, 0x1, 0x2, 0x3}, {0x7, 0x2, 0x8000, 0x2, 0x7fffffff, 0x79}, {0x6, 0x80000000, 0xfffffffe, 0x7, 0x3, 0x8}, {0xae, 0x3, 0x600, 0x9, 0xff, 0x3}, {0x1, 0xed5, 0x6de6, 0x10, 0x380000, 0x789}, {0x4, 0x7074, 0x32b, 0x3, 0xf}, {0x1ff, 0x7, 0x1, 0x96, 0x1, 0xc}, {0x9, 0x3, 0x0, 0xfff, 0x1ff, 0x8}, {0x1, 0x7d, 0x8, 0x7, 0x2, 0x3}, {0xfffff001, 0x9, 0x65d, 0x3c10, 0x7, 0x53}, {0x7, 0x0, 0x7, 0x101, 0x9, 0x1}, {0x7, 0x9, 0xd, 0x6, 0xfffffff7, 0x827}, {0x113, 0xfffffffe, 0x2, 0x400, 0x28, 0x81}, {0xfff, 0x6, 0x7, 0x40, 0x6, 0x10}, {0xc, 0x9, 0x8001, 0x0, 0x9, 0x6}, {0x5, 0x11b9, 0x401, 0x4, 0x2, 0x6}, {0x9, 0x100, 0x400, 0x9497, 0x101, 0x84b7}, {0xb4, 0xb85, 0x7, 0x3, 0x51, 0x5}, {0x2, 0x4, 0x5, 0xf, 0xf, 0x1283}, {0xfffffff8, 0x1c0000, 0x2, 0x10001, 0x1, 0x6}, {0x61, 0x80, 0xffffffff, 0x10000, 0x5, 0x8}, {0x8, 0x6, 0xc53, 0x80000000, 0x7, 0x5}, {0x0, 0x6, 0x5, 0x2, 0xdc, 0x6}, {0x0, 0xfffffffc, 0x101, 0x6cb685f2, 0x7, 0x1}, {0x0, 0xc3, 0x4, 0x5, 0x0, 0x9}, {0x8, 0xf7b5, 0x5, 0x5, 0x9, 0x7}, {0x1, 0x67f, 0x5689f935, 0x8, 0x6db, 0xff}, {0x1, 0x400, 0x3, 0x1e1, 0xa, 0x80000000}, {0xea, 0x5, 0x8, 0x5, 0x7fff, 0x1000}, {0x6, 0x5, 0x7, 0x3, 0x6, 0x80000000}, {0x9, 0x6, 0x7, 0x1, 0x9, 0x100}, {0x7202, 0x4, 0x5024, 0xf9, 0x6, 0x40}, {0x5, 0x10, 0x4, 0x5, 0xd, 0x8}, {0x1537, 0x101, 0x6, 0x1, 0x3, 0x6b}, {0x69, 0x400, 0x3, 0x81, 0xc6, 0x7fff}, {0x10001, 0x1, 0x3, 0x7fffffff, 0x7, 0x10001}, {0xcdc, 0x1, 0x7, 0x0, 0x8}, {0x1, 0x168dccf, 0x3, 0x3, 0x7fff, 0x6}, {0x3, 0x4, 0x7fff, 0x7, 0xaf68, 0x403}, {0x9, 0x0, 0x7, 0x6, 0x6, 0x80000001}, {0x5, 0x200, 0x800, 0xd00000, 0x3, 0x8}, {0x8001, 0x5d, 0xffffffff, 0x42e, 0x8, 0x55}, {0x1970, 0x89, 0x6d, 0x460ebb44, 0x2, 0x2}, {0x951, 0x9, 0x3, 0x8, 0x1, 0x2}, {0x3, 0x8, 0x627b, 0x5, 0x6, 0x5}, {0x6, 0x3, 0x9fbc, 0x4, 0x1, 0x2}, {0x401, 0x6, 0x32d84255, 0xfa, 0x27f, 0x8000}, {0x0, 0x6, 0x3, 0xc, 0x8000, 0x40}, {0x5, 0x4, 0x1, 0x3, 0x0, 0x5}, {0x7f, 0x4, 0x7f, 0x10001, 0xff, 0x8}, {0x7, 0x96a3, 0x2, 0xd7, 0x6, 0x200}, {0x1, 0x5, 0x5, 0x37a3, 0x7, 0x8}, {0x81, 0x4, 0xd, 0xffffffff, 0x200, 0x4}, {0x4, 0x3ff, 0x7, 0x4, 0x4, 0x4}, {0x1, 0xffffffa4, 0x9, 0x2, 0x3}, {0xd, 0x0, 0x3ff, 0x9, 0x8, 0x48}, {0x2, 0x10001, 0x9, 0x2, 0x8, 0x9}, {0xf, 0x1, 0x8, 0x101, 0xfffffffd, 0xc88}], [{}, {0x5}, {0x0, 0x1}, {0x1}, {0x4}, {0x2, 0x1}, {0x3}, {}, {0x5}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x8cd778652b20be70, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1, 0x1}, {0x5, 0x3}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x6}, {0x4}, {0x4, 0x1}, {0x4}, {0xa4f33433e7b7e23d, 0x1}, {0x4}, {0x0, 0x1}, {0x6}, {0x2, 0xa5b0c5c50171756a}, {0x5}, {}, {0x4}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x6}, {0x1}, {0x5, 0x1}, {0x5}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x2}, {0x5}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0)

7.331139007s ago: executing program 0 (id=2861):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r1, @ANYBLOB="200001"], 0x38}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000050000000400024000000001ee0000004e006f01005f303000"], 0x0, 0x2d, 0x0, 0x3, 0x1d}, 0x28)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'})
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022abd7000ffdbdf256f0000000a000600ffffffffffff00040500000f000000e7adb59a7ea2ac9ebc00a0fb18ff1574da33e89a4db4245019ef1876d299fafe8c600c718423763bb056368e691a912d91bd8bb32b657e352b9441f211ba27c1931dc2ea3996d2ec567cb8e32a738fbac73783562598f49859ed3383458b9f57dc0f00"], 0x28}, 0x1, 0x0, 0x0, 0x4000090}, 0x20000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)

7.264641965s ago: executing program 0 (id=2863):
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={<r0=>0xffffffffffffffff, 0x101, 0x2, 0xb7e})
recvfrom$rose(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x40000020, &(0x7f0000001180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x40)
r1 = socket$kcm(0x10, 0x2, 0x4)
close(r1)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2048840)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf}, 0x90)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x101, 0x2, 0xb7e}) (async)
recvfrom$rose(r0, &(0x7f0000000180)=""/4096, 0x1000, 0x40000020, &(0x7f0000001180)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x40) (async)
socket$kcm(0x10, 0x2, 0x4) (async)
close(r1) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000000010000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e6182949a3651f668c3664402682fb6e27bbfa83b5cae0300c9f4d1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2048840) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000100010095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x69, '\x00', 0x0, 0xf}, 0x90) (async)

7.119982654s ago: executing program 0 (id=2865):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x200, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850)
sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="e8000000640400012bbd7000fcdbdf25a8f73f3023655c3865f14134ae59739d830f8c1c079186feb5d358899edb5b61db3543d36f64ac1d5b65bf22da3a0d2df3a6cdf6df08be7104274dc169d5acc989c18ae4efdfd545bd44b3d496ff58979971315340e85f5689e8677a51bcf5725241c56de286daf90bf62782b4c17acec4e6222e2d645ca9908384db6b15fb45eea36da56be88ce2d5116442378457b55f0f3c99ea9af5fc9dbbb87bd061b1933c8ac0c51cff1fc3ad39d08bb85e531969229b652ad5c1f4170598e808301dd481467ab123c6e50acd37c1d039b4f5a5382ee14a4a1acf00"], 0xe8}, 0x1, 0x0, 0x0, 0x880}, 0x880)
sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xe}, {}, {0x7, 0x1}}, [@filter_kind_options=@f_route={{0x8}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800)
sendmsg$FOU_CMD_GET(r1, 0x0, 0x40840)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$can_j1939(0x1d, 0x2, 0x7)
r6 = socket(0x1, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r6, 0x89fa, 0x0)
sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x3, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x6, 0xffffc431}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xb06}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004004}, 0x44040)
socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000005c0)={'vxcan0\x00'})
r7 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000280)={'vcan0\x00', <r8=>0x0})
bind$can_j1939(r7, &(0x7f0000000100)={0x1d, r8, 0x0, {}, 0xfd}, 0x18)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r9, 0x400454c9, 0x9)
ioctl$TUNGETFILTER(r9, 0x801054db, &(0x7f00000000c0)=""/123)
r10 = socket$inet6_sctp(0xa, 0x5, 0x84)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001c40)={'wlan0\x00', <r13=>0x0})
sendmsg$NL80211_CMD_DEAUTHENTICATE(r11, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001c80)={0x1c, r12, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0)
connect$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18)
sendmsg$can_j1939(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0)

6.507246771s ago: executing program 7 (id=2872):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000500000018"], 0x44}}, 0x0)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0)

6.42524248s ago: executing program 7 (id=2873):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$TUNSETLINK(r1, 0x400454cd, 0x320)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0)
r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
socket$unix(0x1, 0x5, 0x0)
r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r4, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48)
connect$ax25(r4, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
bind$ax25(r3, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x48)
connect$ax25(r3, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000180001000000000000000000020000000000ff00000000000c0016800800020006000000060015000a"], 0x30}, 0x1, 0x0, 0x0, 0x20008000}, 0x40080)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r8, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4, 0x20}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0)

6.407966781s ago: executing program 0 (id=2874):
r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
r1 = epoll_create(0x8000)
r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x114, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="f4f0a489160a11", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d972df9e99f07976773f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fdc2f4393c05a007d12b505a84dfdb98d568175b62421d726d1e5331e1ddfd4d", @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x114}], 0x1}, 0x0)
epoll_wait(r1, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7)
getsockopt$llc_int(r0, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)={0x0, 0x2}, 0xfffffe49, 0x0, 0xffffffffffffffff, 0x6}, 0x42)

6.203183s ago: executing program 0 (id=2875):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000100bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f01726a067818b990b13bfddb7e78270010720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/187], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
syz_emit_ethernet(0xe, &(0x7f0000000340)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@generic={0x88ca}}}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x40004)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012900b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0)

6.032459307s ago: executing program 7 (id=2878):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x9, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0xe4}}}}]}]}, 0x60}}, 0x0)
bind$netrom(r0, &(0x7f00000000c0)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_ext={0x1c, 0x1d, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000003000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32, @ANYBLOB="000000000400000018180000", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000018180000", @ANYRES32, @ANYBLOB="0000000000000000180000000400000000000000f7ffffff1858000000000000000000000000000085100000feffffff850000002c000000bf91000000000000b7020000010000008500000001000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x87f0, 0xce, &(0x7f0000000200)=""/206, 0x83f00, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xc59c, 0xffffffffffffffff, 0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000380)=[{0x3, 0x1, 0x9, 0x9}, {0x0, 0x4, 0x9, 0x9}], 0x10, 0x3}, 0x94)
connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e24, 0xb717, @loopback, 0xfff}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000dc0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

5.84839658s ago: executing program 7 (id=2880):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x19, 0x8d, 0x1, 0x7}, 0x28)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}})
write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x24044051)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
recvmmsg(r3, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@delchain={0x238, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1fc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x8000001}, @TCA_BPF_ACT={0x12c, 0x1, [@m_ctinfo={0x128, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x98c}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xf3fa}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}}]}, 0x238}, 0x1, 0x0, 0x0, 0x81}, 0x20000080)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

4.693959713s ago: executing program 7 (id=2893):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000000102010800000000000000000a000000440002802c00018014000300fe8000000000000000000000000000bb14000400fc010000000000000008000000000000100002800500010006000000040003"], 0x58}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='&\x00'/12, @ANYRES32, @ANYBLOB="14480039ff215c75cec4b27d8bdcaf81060cbffa67abb6fd4d7c7f3ab07dda141a438754e72238a4cad03aabdaaaa6d61d8f76f90371e03c850b676f8b4f706a4bc8ceb66a69d33ef76dbe8e97cdf83cd854ce1a79a49b28d849e32e990c275929f21c6c29f68f012b5b9ecfdebfeedd0e25afa8fd607c7b47e423d5578d1effd05d1bb15935c3ad27127f00ac1df3064780cde91bb9699e3b2a27c3b2812e0c8afd7fc16eda6d9bb5f38d6275a8e7e0ee59abe3a7ae2f00d478e168748286fe51c02a9f52ba2902dc0f2230a2bd5d425d1716056c2eff218f25", @ANYRES64=0x0], 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r0, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r2)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)={0x1c, r3, 0x1, 0xf0bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004804)
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8624}}}]}, 0x38}}, 0x4000)
sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x3, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x1d}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084)
sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x510f7834f02b5403}, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x84}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)

4.455031306s ago: executing program 7 (id=2896):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x24}}, 0x40)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x200000000000006d, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES64, @ANYRESDEC=r3, @ANYRESDEC], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r6)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x26, 0x301, 0x70bd2b, 0xffbffffc, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x800)
r8 = socket$packet(0x11, 0x2, 0x300)
unshare(0x22020600)
r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f00000006c0)={{r9}, 0x6, 0x40, 0x4b})
r10 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x2, 0x3, 0x0, 0x2, 0x11, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "a3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x88}, 0x1, 0x7}, 0x0)
r11 = socket$inet_udp(0x2, 0x2, 0x0)
r12 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYRES16=r11], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200190000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r13}, &(0x7f0000000380), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r13, r12, 0x26}, 0x10)
r14 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r14, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_MSG_GETSETELEM(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009b80)=ANY=[@ANYBLOB="300000000d0a010800000000000000000ac24149400060a530e1bb0501040003800900010073797a3100080000090002"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r13}, &(0x7f0000000f00), &(0x7f0000000f40)=r6}, 0x20)

1.926493126s ago: executing program 5 (id=2908):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40c001, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x15, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0x17, 0x8, "eda2f765533476bd4dc636adcafc9483ec047f"}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4044)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000140)={0x1, [0x0]}, 0x6)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x0, 0x1, 0x0, 0xa, 0xf, 0x7fff}, 0x20)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x2, @empty, 0x3}}}, 0x84)
r3 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000280), &(0x7f00000002c0)=0x40)
vmsplice(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000300)="aa", 0x1}, {&(0x7f0000000340)="d22806488b42ca3fc8508107a6df493b8e995219e5c973dbbfbb268edf3a9d1ed1e28396cc975b679156a7c1beddba7c32ad7fb7d30c2a5c3b0bc505521afaed6b9eeb92a329b98073b221800913d97b8a3ed8a0c139215834e16da4737d549dca37d25f9a40ab0e1c78a21353ea6537b4273ea62a314c34160941423b4cda6f0f0e3c6f057005f6a2bf2637e9e580fd63cce6efbbdeabf886f9f23197dd74246d6ce14c81b5a6b59aaf4e4c72671cc1709ca0ad7ba4765796037cefb0ff61052bc68c79150c764de2fa8bcaec1f36d256decc801dc52a3ff7ea1c914d8d9960c9efebcd5131b72e1ef47921bbbfc9", 0xef}, {&(0x7f0000000440)="39d4ced305b5ee763937d790f7c76fc9b3a1d0b1d6ea9cd0a59dd15c0607570e3c11dcbdc2fe1ebf76e251c4b8", 0x2d}, {&(0x7f0000000480)="8e47b96ce567648837b7f831c8042cbe5948c5708425d18c92cc", 0x1a}, {&(0x7f00000004c0)="104efd803e8ac295291b22cd005f6ec65a85d2c10e6eb2b1bfc4aaf0efeb2654ad5d7cc7ce3292d4ac6707fbf27d2c11742b2c7177d9170e5cdb19ae095b387ca6c8052e3fc2db81e6e7b86867c58389cc7fbdc50456057763ac07560a8ae4f34a23506edd540e1321b5d3bf29de61d909a759716069c08159fd6f6d054dbbe30caba91add3f969b82c9577081c2166ede90735d0e0a2d06ec0bf7e9a727d309cd3bfb133dbfe2e709015c6026274289c01dba3e9a012b3cae1ba23a183bafb12e0a7f76fc95a436f31abc", 0xcb}, {&(0x7f00000005c0)="7f3e479dabebf5cabcf2055920e21dfc67b30ebe024479ad14f6301205fb39a75a1e3d29d5228cf8947bfde77d370cbc79be019ecdaa1b5f822012fb9e9425561ed28d7c19dfc469c391c91ef52477f1c05d99838b1a4c5039f1790f45b297ce3462e246b096ad97a56d94678e96da2c1b4ae256afc23d0e347fa0b382da6ce615b4ae5448bc014bec37bcf1acbeba82bf70f56b6a50682e1085eb15ce875f1d635f7e", 0xa3}], 0x6, 0x9)
r4 = socket$kcm(0x29, 0x7, 0x0)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000700)={<r5=>0x0, @in6={{0xa, 0x4e20, 0x7, @private1, 0xb}}, 0x9, 0x7, 0xa, 0x8, 0x4, 0xc, 0x69}, &(0x7f00000007c0)=0x9c)
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000800)={r5, 0x1200}, 0x8)
socketpair(0x25, 0x5, 0x48, &(0x7f0000000840)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
getsockopt$kcm_KCM_RECV_DISABLE(r7, 0x119, 0x1, &(0x7f0000000880), 0x4)
sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x202002c1}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0xa, 0x6, 0x3, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000884}, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a00)={'team0\x00', <r8=>0x0})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'ip6_vti0\x00', <r9=>0x0, 0x4, 0xf0, 0x80, 0x4a, 0x8, @private1, @mcast2, 0x10, 0x14b867538a628a5c, 0x8001, 0x3}})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000b00)={'batadv0\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000b40)={'tunl0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000b80)={'wg1\x00', <r12=>0x0})
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000c80)={'syztnl0\x00', &(0x7f0000000bc0)={'erspan0\x00', <r13=>0x0, 0x7, 0x7, 0x4, 0xd5, {{0x22, 0x4, 0x1, 0x2, 0x88, 0x66, 0x0, 0x9, 0x4, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x3f, 0x3, 0x2, [{@broadcast, 0x8}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x30}, 0x2}]}, @rr={0x7, 0x17, 0x7b, [@empty, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @timestamp_prespec={0x44, 0xc, 0x6f, 0x3, 0xa, [{@multicast2, 0x1}]}, @end, @timestamp={0x44, 0xc, 0x33, 0x0, 0x6, [0x911, 0x6]}, @noop, @generic={0x82, 0x8, "04b538d9cf69"}, @end, @rr={0x7, 0x1b, 0xdb, [@private=0xa010100, @private=0xa010102, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000cc0)={'team0\x00', <r14=>0x0})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000d00)={'bridge_slave_1\x00', <r15=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000d40)={'team0\x00', <r16=>0x0})
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x58, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r17=>0x0}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000e40)={'vcan0\x00', <r18=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000001400)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000013c0)={&(0x7f0000000e80)={0x518, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0xfc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8ac5}}, {0x8}}}]}}, {{0x8}, {0x10c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r10}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x9, 0x0, 0x8, 0x86c}, {0x4, 0x6, 0x7, 0x9}, {0x4770, 0x7, 0x40, 0x6}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffff33b5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r12}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r14}, {0x9c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0x0, 0x4, 0x8000}, {0x55ae, 0x9, 0x9, 0xbc14}, {0x7, 0x8, 0x4, 0x7}, {0x3, 0x9, 0xbd, 0x497c}, {0xe27, 0x8, 0xfb, 0xe75d515c}]}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r18}}}]}}]}, 0x518}, 0x1, 0x0, 0x0, 0x4008008}, 0x800)
sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000001500)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x10}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xff000000}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x7}}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x1}}]}, 0x38}}, 0x840)

1.859870892s ago: executing program 2 (id=2909):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x3}}]}}}]}, 0x40}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000a40)=ANY=[@ANYBLOB="400000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="00000000080000002000128008000100687372"], 0x40}}, 0x0)

1.760849561s ago: executing program 5 (id=2911):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000002c0)={0x1000}, 0x4)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x4, 0x7, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000900)=@framed={{0x18, 0x3}, [@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x1b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r4, 0x101, 0x6, &(0x7f0000000dc0)=0x5, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x30, r3, 0x5, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x0)
unshare(0x26020480)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f00000001c0)='blkio.throttle.read_bps_device\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f0000000ac0)=0x2, 0x12)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), r8)
r10 = socket(0x2a, 0x2, 0x0)
ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f000000abc0)={&(0x7f000000aa40)=ANY=[@ANYBLOB="9feb0100180000000002000018000000180000000700000000050000000000ef11020000750a200000006104"], 0x0, 0x37, 0x0, 0x8}, 0x20)
r11 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r12=>0x0})
sendto$packet(r11, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14)
sendmsg$SMC_PNETID_FLUSH(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r9, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)
sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16=r8, @ANYRES32, @ANYRES32=r8], 0x1c}}, 0xc000)

1.518984913s ago: executing program 2 (id=2912):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000001980)={0x0, <r1=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x108, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f09df33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvlan0\x00'}]}]}, 0x4c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48)

1.518456195s ago: executing program 5 (id=2913):
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4})
ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000000))
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) (async)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10)
syz_init_net_socket$ax25(0x3, 0x5, 0xcf)

1.205329271s ago: executing program 5 (id=2914):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14)
syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0)

1.175607225s ago: executing program 2 (id=2915):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4e20, 0x8000, 0x4e22, 0x0, 0x2, 0x0, 0x0, 0x11}, {0x0, 0x4007, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, [@tmpl={0x84, 0x5, [{{@in=@multicast2, 0x4d6, 0x3c}, 0x2, @in6=@mcast2, 0x3505, 0x0, 0x2, 0x7, 0x5, 0x1, 0x80000001}, {{@in=@local, 0x4d2, 0x33}, 0x2, @in=@remote, 0x3502, 0x4, 0x1, 0x7f, 0x6, 0x0, 0x55}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket(0x10, 0x2, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x1, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="45000000000020000a00000008000280040004000886198535077aa692dc6a750b8285"], 0x1c}}, 0x0)

1.050083412s ago: executing program 5 (id=2917):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="140000001d000137440000000000487007"], 0x14}, 0x1, 0x0, 0x0, 0x1001}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={<r3=>0x0, 0xb8, "2a2f5ff90ca4572eefcb23eeb80d01b0a8595f14858d6c56ab2ce19e1c96d7be07f34855e7307cb4d5c1d2d08bdd4effb81d599951f9ac049878f068d1a32632a95b977b60018f8806b35c638bd009a25ba4c2db5b91d4a5cb85f3e9974781a756a42ba5bf99e34704f500e12f0abbd7cc1fb167ba17ce0ebf981b80169334a58c088be83e3050cf796ac82e6bbc3c73514a6c116bd608ba033bb53358c35f1a5d40270d149e524ac47d7b51c57ae0f75af02ac946983c6d"}, &(0x7f0000000040)=0xc0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x9160, 0x3eb6, 0x201, 0x6, 0x1000, 0x3, 0x5, 0x7, r3}, &(0x7f0000000200)=0x20)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r4, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r7=>0x0})
sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}}, 0x0)
ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0)

1.040309441s ago: executing program 2 (id=2918):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x45, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x74}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
syz_emit_ethernet(0x4e, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb7e00000000fe880000000000000000000000000001fc0200000000000000000000000000000002000000000000040100010100c204"], 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002100010000000000fcdbdf2502002006a50000010000000008000200ac1414bb"], 0x24}, 0x1, 0x0, 0x0, 0x40004001}, 0x0)

943.27426ms ago: executing program 1 (id=2919):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x4000000, 0x3c, 0x72, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0x0, 0xc4, 0x0, &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x50)
r1 = socket$netlink(0x10, 0x3, 0xd)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d616373656300001800028005000900010000000c000100000000000000000008000500", @ANYRES32=r1], 0x50}}, 0x0)

844.878635ms ago: executing program 2 (id=2920):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x1405, 0x2, 0x70bd2b, 0x25dfdbfc, "", [{{0x8}, {0x8}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x800)
close(r0)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x1411, 0x400, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x3b}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x80)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x0, '\x00', 0x0, r2, 0x3, 0x1, 0x1}, 0x50)
socketpair(0x9, 0xa, 0xff, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', <r6=>0x0})
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=<r7=>0x0, &(0x7f00000004c0)=0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', <r8=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, <r9=>0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000580)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000005c0)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000980)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000600)={0x324, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r8}, {0x224, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r10}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x611}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}]}}]}, 0x324}, 0x1, 0x0, 0x0, 0x24004805}, 0x4000080)
r11 = accept4(r4, 0x0, &(0x7f00000009c0), 0x800)
r12 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r12, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x34, 0x0, 0x300, 0x70bd25, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x8, 0x0, @l2={'eth', 0x3a, 'geneve1\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x4008004)
setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000b80)={0x8, &(0x7f0000000b40)=[{0x6, 0x1, 0x40, 0xe}, {0xb6a2, 0x3, 0xa5, 0xc}, {0x6, 0xd, 0x9, 0x10001}, {0x9, 0x0, 0x5, 0x8}, {0x6, 0x56, 0x8, 0x4}, {0x7, 0x42, 0x56, 0xff}, {0x80, 0xc, 0x6c, 0x9}, {0xf800, 0x1f, 0xb, 0x9}]}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(r12, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@gettfilter={0x6c, 0x2e, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0xffff}, {0x3, 0xfff1}, {0x5, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xff}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc0}, 0x1)
r13 = socket(0x11, 0x5, 0x0)
getsockname$packet(r13, &(0x7f0000000d00)={0x11, 0x0, <r14=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000d40)=0x14)
setsockopt$MRT_DEL_MFC_PROXY(r12, 0x0, 0xd3, &(0x7f0000000d80)={@loopback, @dev={0xac, 0x14, 0x14, 0x1c}, 0xffffffffffffffff, "77aa012b9044f70f36619ed95bf5e54b9110bf5bde681a13f96d538ca389a1a9", 0x9, 0x4d, 0x0, 0x5}, 0x3c)
ioctl$AUTOFS_IOC_PROTOSUBVER(r13, 0x80049367, &(0x7f0000000dc0))
setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r11, 0x84, 0x19, &(0x7f0000000e00)={0x0, 0x800}, 0x8)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000f40)={'ip_vti0\x00', &(0x7f0000000e80)={'syztnl2\x00', <r15=>r7, 0x80, 0x8, 0x7fff, 0x6, {{0x1e, 0x4, 0x2, 0x3, 0x78, 0x65, 0x0, 0x6, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @local, {[@lsrr={0x83, 0x1b, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010102, @multicast1, @broadcast]}, @noop, @timestamp_prespec={0x44, 0x1c, 0xa3, 0x3, 0x8, [{@private=0xa010102, 0x2}, {@broadcast}, {@multicast2}]}, @timestamp_prespec={0x44, 0x2c, 0x9e, 0x3, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x64010102, 0x6}, {@multicast1, 0xffff}, {@private=0xa010102, 0x580ce79c}, {@remote, 0x101}]}]}}}}})
sendmsg$TEAM_CMD_PORT_LIST_GET(r13, &(0x7f00000011c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001180)={&(0x7f0000000f80)={0x1dc, r5, 0x10, 0x70bd26, 0x25dfdbfb, {}, [{{0x8, 0x1, r8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r14}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfe9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x73}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x36c}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x258e}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x14}, 0x4000)
ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001200))
sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r11, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044800}, 0x20000000)

701.239986ms ago: executing program 2 (id=2921):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r1=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80005, {0x0, 0x0, 0x0, 0x0, {}, {0x9, 0xb}, {0xe, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60)
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = socket(0x2d, 0x2, 0x0)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000100)={&(0x7f0000000340)={0x2d, 0x0, 0x1f, 0x40000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004011}, 0x0)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4)
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90)
r8 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r8, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r9=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000001080)=@assoc_value={r9, 0x5}, 0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f00000000c0)="279a004c6588d5d6dc03d5cc2a00", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000300)=@newtaction={0x10c, 0x30, 0x53b, 0x0, 0x0, {}, [{0xf8, 0x1, [@m_simple={0xf4, 0x1, 0x0, 0x0, {{0xb}, {0xc8, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xc2, 0x3, 'ext4_writepages_resu\x00\x00\x00dQ\xc6yYR\xfd\\\xbf\x1c\xcesb\xe8\xed\xba@\xe6\xf7\xd8\"\xc6\xc0\x192\xd4:\xfd\x1d\x92\xe8BM\xe6\xb4\x8a\x19U\x18\x0f\x1f\xdf%\xd8}\xf5\xd9~\fd7\xc6\xf4\xd0;&!\x9c\xc89\xb2\x03\xfbE1\xed\xfe\xa1PN\xcdoQV\xd3[\\j\x0e\xfb\x88S`C\xa3\xb0\xa7`\x0evH\t+\xcb=\xe6d\xfe\x9c\xee\x88\x94#{\x8fTG\xa5Qz\x17\x05aW=\x94\xd4\xea\xfb+\xa0x\xda\x83d@\xdcq\xbd\x82\x9e<\xff&\xdd\xb3z\xb5\xd7\xcc\x8f\x1di\x18H\xe8\x13\xfaU\a)g5\xae\xd3!\xbc~\xfc\x11\xa8\xe2\xb2\xe6\xaeU\x85'}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x10c}}, 0x0)
sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0)

647.75788ms ago: executing program 1 (id=2922):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x0, 0x9}, 0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r2, 0x7}, &(0x7f0000000040)=0x8)
bpf$ENABLE_STATS(0x20, 0x0, 0xb4a42957)

537.225157ms ago: executing program 1 (id=2923):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_udp_int(r2, 0x11, 0x68, &(0x7f0000000540)=0x2000000, 0x4)
setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000500)=0x2, 0x4)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r1, 0x201, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x2851}, 0x4000)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004004}, 0x20008800)

487.757951ms ago: executing program 5 (id=2924):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x14, 0x21, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000140080c10aa563802acfdf00b964860000140000000200000000000000010000060400e5ff0e000000050000000000"], 0x0, 0x2e, 0x0, 0x1, 0x8000}, 0x20)
socket$netlink(0x10, 0x3, 0x0)
r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})
unshare(0x22020600)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08000000040000000400000001"], 0x50)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/221}, 0xffffffb9)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6d4e9a1d78ad62ceef18843080078bb3fb7dbfcebd1f85fc171f748a7b5373a3126", 0x0, 0xffffffff, 0x0, 0x2, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48)

331.07186ms ago: executing program 1 (id=2925):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f0000000180)=[{&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000400)=""/251, 0xfb}, {&(0x7f0000000500)=""/234, 0xea}, {&(0x7f0000000000)=""/10, 0xa}], 0x4}, 0x21) (async, rerun: 32)
r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) (async, rerun: 32)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x0, 0x7, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async, rerun: 32)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000000380)={&(0x7f0000000300)=""/75, 0x4b, 0x7, 0x1}) (async, rerun: 32)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async)
connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async, rerun: 32)
pipe(&(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}) (rerun: 32)
close(r5) (async)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0xfffffc3f) (async)
setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304, 0x3a}, "c4d65a94035ef2fe", "9e8ecc725e100057e7dc25c6519a85ef828f711330ff2bb17b55f00000000200", "dc5df43f"}, 0x38) (async)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/187, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x5d, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async)
sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="729f05879dcdca52efeae268255e8a9a194b5c4497bb967017e311b9fcea00ef92438de322b26b8688ab552048138a52a8794f58babb6fd53af2086bd702b9a4c6cce179b3f3a9c0d0246f65ba3450a5b1"], 0x30}}, 0x0)

263.440552ms ago: executing program 1 (id=2926):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14)
syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0)

0s ago: executing program 1 (id=2927):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', <r1=>0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x12, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x64010100}}}})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0xb}}}}}}, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50)
syz_emit_ethernet(0x66, &(0x7f00000005c0)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "a92fb2", 0x0, 0x3b, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @loopback}}}}}}}, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r3}, 0x10)
r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
unshare(0x40060000)
bind$llc(r4, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10)
listen(r4, 0x2)
accept4(r4, 0x0, 0x0, 0x80800)
poll(0x0, 0x0, 0xffffffffffbffff8)
syz_emit_ethernet(0x46, &(0x7f0000000400)={@local, @random="df00004000", @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@ssrr={0x89, 0x7, 0xa2, [@broadcast]}, @cipso={0x86, 0x6, 0x1}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000780)={'syztnl2\x00', &(0x7f0000000340)={'syztnl2\x00', r1, 0x7, 0x1, 0x7, 0x6, {{0x5, 0x4, 0x1, 0x39, 0x14, 0x65, 0x0, 0xea, 0x2f, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0xd}}}}})

kernel console output (not intermixed with test programs):

  149.271876][ T7248] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  149.299568][ T7248] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  149.342141][ T7248] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  149.745784][ T8949] netlink: 24 bytes leftover after parsing attributes in process `syz.4.871'.
[  149.814203][ T8958] sctp: [Deprecated]: syz.0.873 (pid 8958) Use of struct sctp_assoc_value in delayed_ack socket option.
[  149.814203][ T8958] Use struct sctp_sack_info instead
[  149.837763][ T8958] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'.
[  150.017342][ T8970] 8021q: VLANs not supported on gre0
[  150.061221][ T8962] syzkaller1: entered promiscuous mode
[  150.079167][ T8962] syzkaller1: entered allmulticast mode
[  150.240421][ T5946] IPVS: starting estimator thread 0...
[  150.332514][ T8980] IPVS: using max 31 ests per chain, 74400 per kthread
[  150.431633][ T8983] netlink: 'syz.1.881': attribute type 3 has an invalid length.
[  150.595683][ T8994] netlink: 56 bytes leftover after parsing attributes in process `syz.0.884'.
[  150.960204][ T5834] Bluetooth: hci5: command tx timeout
[  150.992977][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.2.892'.
[  151.156666][ T9029] syzkaller1: entered promiscuous mode
[  151.162986][ T9029] syzkaller1: entered allmulticast mode
[  151.234197][ T9036] syzkaller0: entered promiscuous mode
[  151.245296][ T9036] syzkaller0: entered allmulticast mode
[  151.382571][ T9040] ieee802154 phy0 wpan0: encryption failed: -22
[  151.533039][ T9047] netlink: 'syz.0.901': attribute type 2 has an invalid length.
[  151.608540][ T9047] �9: entered promiscuous mode
[  151.836415][ T9050] netlink: 152 bytes leftover after parsing attributes in process `syz.1.902'.
[  152.050216][ T9065] netlink: 132 bytes leftover after parsing attributes in process `syz.0.906'.
[  152.112455][ T9065] netlink: 'syz.0.906': attribute type 10 has an invalid length.
[  152.417691][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.909'.
[  152.766767][ T9089] netlink: 'syz.0.913': attribute type 1 has an invalid length.
[  152.779383][ T9089] netlink: 96 bytes leftover after parsing attributes in process `syz.0.913'.
[  152.875119][ T9093] netlink: 'syz.5.914': attribute type 29 has an invalid length.
[  154.053204][ T9174] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  154.062425][ T9174] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  154.643482][ T9193] __nla_validate_parse: 9 callbacks suppressed
[  154.643501][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'.
[  154.698628][ T9188] netlink: 224 bytes leftover after parsing attributes in process `syz.4.941'.
[  154.715209][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'.
[  154.892949][ T9196] syzkaller1: entered promiscuous mode
[  154.901618][ T9196] syzkaller1: entered allmulticast mode
[  154.948439][ T9202] bond5: Unable to set down delay as MII monitoring is disabled
[  154.982898][ T9202] bond5 (unregistering): Released all slaves
[  155.214443][ T9221] netlink: 'syz.4.954': attribute type 11 has an invalid length.
[  155.287104][ T9226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.953'.
[  155.354462][ T9232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  155.421726][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.959'.
[  155.476093][ T9245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.960'.
[  155.517236][ T9247] netlink: 'syz.4.961': attribute type 11 has an invalid length.
[  155.570341][ T9245] hsr_slave_1 (unregistering): left promiscuous mode
[  155.605591][ T9250] sctp: [Deprecated]: syz.4.962 (pid 9250) Use of int in maxseg socket option.
[  155.605591][ T9250] Use struct sctp_assoc_value instead
[  155.735052][ T9258] vlan2: entered promiscuous mode
[  155.753153][ T9258] geneve1: entered promiscuous mode
[  155.765613][ T9258] vlan2: entered allmulticast mode
[  155.776328][ T9258] geneve1: entered allmulticast mode
[  155.863931][ T9266] netlink: 20 bytes leftover after parsing attributes in process `syz.2.967'.
[  156.039215][ T9274] xt_hashlimit: overflow, try lower: 18446744073709551613/4
[  156.064545][ T9274] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  156.137049][ T9280] ip6t_srh: unknown srh invflags 4000
[  156.168912][ T9282] IPVS: length: 8 != 1152
[  156.492142][ T9304] SET target dimension over the limit!
[  156.617143][ T9312] ieee802154 phy0 wpan0: encryption failed: -22
[  156.883497][ T9274] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  156.911394][ T9274] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  156.952939][ T9332] Bluetooth: MGMT ver 1.23
[  156.987755][ T9339] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  156.996053][ T9337] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  157.032009][ T9274] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  157.061619][ T9274] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  157.078217][ T9274] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  157.096684][ T9274] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  157.166087][ T9349] xt_socket: unknown flags 0xe4
[  157.185032][ T9336] bond5: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2)
[  157.199503][ T9336] bond5 (unregistering): Released all slaves
[  157.220094][ T9274] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  157.281749][ T9274] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  157.525579][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.5.994'.
[  157.578441][ T9368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.994'.
[  157.710884][ T9371] ieee802154 phy0 wpan0: encryption failed: -22
[  157.848406][ T9376] netlink: 'syz.0.995': attribute type 11 has an invalid length.
[  157.873549][ T9274] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  157.905739][ T9376] netlink: 199820 bytes leftover after parsing attributes in process `syz.0.995'.
[  157.914625][ T9274] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  157.958240][ T9375] netlink: 'syz.0.995': attribute type 11 has an invalid length.
[  159.063928][ T9445] syzkaller0: entered allmulticast mode
[  159.298076][ T9467] 8021q: VLANs not supported on ipvlan1
[  159.331550][ T9470] 8021q: VLANs not supported on ipvlan1
[  159.675916][ T9492] __nla_validate_parse: 3 callbacks suppressed
[  159.675934][ T9492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1022'.
[  159.695045][ T9494] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1023'.
[  159.850553][ T9500] sctp: [Deprecated]: syz.5.1023 (pid 9500) Use of struct sctp_assoc_value in delayed_ack socket option.
[  159.850553][ T9500] Use struct sctp_sack_info instead
[  160.049881][ T9514] tipc: Started in network mode
[  160.062102][ T9514] tipc: Node identity ac14140f, cluster identity 4711
[  160.078401][ T9514] tipc: New replicast peer: 255.255.255.255
[  160.101823][ T9514] tipc: Enabled bearer <udp:syz2>, priority 10
[  160.127917][ T9518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.137098][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  160.280507][ T9534] netlink: 'syz.1.1031': attribute type 26 has an invalid length.
[  160.389473][ T9542] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1032'.
[  160.517979][ T9552] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1036'.
[  161.154926][ T9585] openvswitch: netlink: Tunnel attr 44 out of range max 16
[  161.344901][    T9] tipc: Node number set to 2886997007
[  161.399582][ T9591] sock: sock_set_timeout: `syz.4.1048' (pid 9591) tries to set negative timeout
[  161.425176][ T9593] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1049'.
[  161.434502][ T9593] block nbd0: not configured, cannot reconfigure
[  161.442600][ T9593] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1049'.
[  161.462229][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1049'.
[  161.474084][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'.
[  161.483865][ T9593] bridge_slave_1: left allmulticast mode
[  161.489560][ T9593] bridge_slave_1: left promiscuous mode
[  161.511407][ T9593] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.536348][ T9593] bridge_slave_0: left allmulticast mode
[  161.552007][ T9593] bridge_slave_0: left promiscuous mode
[  161.560510][ T9593] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.818043][ T9613] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1056'.
[  161.964599][ T9627] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1059'.
[  162.007735][ T9630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  162.190288][ T9644] netlink: 'syz.4.1063': attribute type 8 has an invalid length.
[  163.299626][ T9710] nbd: illegal input index 2958377
[  163.313973][ T9710] ip6_vti0 speed is unknown, defaulting to 1000
[  163.353771][ T9710] ip6_vti0 speed is unknown, defaulting to 1000
[  163.376872][ T9710] ip6_vti0 speed is unknown, defaulting to 1000
[  163.522144][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  163.649450][ T9710] infiniband syz2: set active
[  163.654581][ T9710] infiniband syz2: added ip6_vti0
[  163.666704][   T44] ip6_vti0 speed is unknown, defaulting to 1000
[  163.723735][ T9710] RDS/IB: syz2: added
[  163.728608][ T9710] smc: adding ib device syz2 with port count 1
[  163.735134][ T9710] smc:    ib device syz2 port 1 has no pnetid
[  163.755420][   T10] ip6_vti0 speed is unknown, defaulting to 1000
[  163.775847][ T9710] ip6_vti0 speed is unknown, defaulting to 1000
[  163.840717][ T9728] veth1_macvtap: left promiscuous mode
[  164.114398][ T9710] ip6_vti0 speed is unknown, defaulting to 1000
[  164.706971][ T9710] ip6_vti0 speed is unknown, defaulting to 1000
[  164.961922][ T9763] __nla_validate_parse: 9 callbacks suppressed
[  164.961938][ T9763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'.
[  164.995334][ T9763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1092'.
[  166.966194][ T9710] ip6_vti0 speed is unknown, defaulting to 1000
[  167.530976][ T9825] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  167.621968][ T9710] ip6_vti0 speed is unknown, defaulting to 1000
[  167.650604][ T9833] syzkaller1: entered promiscuous mode
[  167.656129][ T9833] syzkaller1: entered allmulticast mode
[  167.977049][ T9848] syzkaller1: tun_chr_ioctl cmd 1074025677
[  168.010828][ T9848] syzkaller1: Refused to change device type
[  168.033792][ T9847] syzkaller1: tun_chr_ioctl cmd 1074025677
[  168.054190][ T9847] syzkaller1: Refused to change device type
[  168.299123][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1114'.
[  168.393368][ T9710] ip6_vti0 speed is unknown, defaulting to 1000
[  168.463042][ T9858] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'.
[  168.595445][ T9877] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1116'.
[  168.663114][ T9877] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1116'.
[  168.756870][ T9884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1119'.
[  168.770855][ T9877] netlink: 144 bytes leftover after parsing attributes in process `syz.5.1116'.
[  169.061236][ T9897] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1122'.
[  169.359238][ T9916] netlink: 'syz.5.1127': attribute type 29 has an invalid length.
[  169.386326][ T9917] netlink: 'syz.5.1127': attribute type 29 has an invalid length.
[  169.712729][ T9944] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1131'.
[  170.066976][ T9961] netlink: 'syz.5.1138': attribute type 24 has an invalid length.
[  170.101494][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1137'.
[  170.173848][ T9963] tipc: Enabled bearer <udp:syz1>, priority 10
[  170.202611][ T9963] netlink: 'syz.0.1139': attribute type 13 has an invalid length.
[  170.230716][ T9963] veth0_macvtap: left promiscuous mode
[  170.259600][ T9963] macvtap0: entered allmulticast mode
[  170.294890][ T9963] macvtap0: refused to change device tx_queue_len
[  170.675081][ T9993] netlink: 'syz.5.1149': attribute type 12 has an invalid length.
[  170.785884][T10001] team0: Device ipvlan3 failed to register rx_handler
[  170.986015][T10010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1155'.
[  171.006192][T10010] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1155'.
[  171.042844][T10010] gretap0: entered promiscuous mode
[  171.064683][T10010] gretap0: left promiscuous mode
[  171.272092][T10024] tipc: Failed to remove unknown binding: 66,1,1/0:2905968049/2905968051
[  171.298068][T10024] tipc: Failed to remove unknown binding: 66,1,1/0:2905968049/2905968051
[  171.648934][T10042] syz.4.1167: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  171.699975][T10042] CPU: 0 UID: 0 PID: 10042 Comm: syz.4.1167 Not tainted syzkaller #0 PREEMPT(full) 
[  171.700008][T10042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  171.700029][T10042] Call Trace:
[  171.700037][T10042]  <TASK>
[  171.700046][T10042]  dump_stack_lvl+0xe8/0x150
[  171.700079][T10042]  warn_alloc+0x214/0x310
[  171.700102][T10042]  ? stack_trace_save+0x9c/0xe0
[  171.700137][T10042]  ? __pfx_warn_alloc+0x10/0x10
[  171.700166][T10042]  ? kasan_save_track+0x4f/0x80
[  171.700185][T10042]  ? kasan_save_track+0x3e/0x80
[  171.700203][T10042]  ? __kasan_kmalloc+0x93/0xb0
[  171.700223][T10042]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  171.700242][T10042]  ? xskq_create+0x56/0x170
[  171.700259][T10042]  ? xsk_setsockopt+0x4dc/0x8d0
[  171.700287][T10042]  ? do_sock_setsockopt+0x17c/0x1b0
[  171.700310][T10042]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  171.700332][T10042]  ? do_syscall_64+0xec/0xf80
[  171.700358][T10042]  __vmalloc_node_range_noprof+0x134/0x16a0
[  171.700414][T10042]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  171.700442][T10042]  ? __kasan_kmalloc+0x93/0xb0
[  171.700482][T10042]  vmalloc_user_noprof+0xad/0xf0
[  171.700500][T10042]  ? xskq_create+0xbf/0x170
[  171.700518][T10042]  xskq_create+0xbf/0x170
[  171.700538][T10042]  xsk_init_queue+0xb0/0x110
[  171.700576][T10042]  xsk_setsockopt+0x4dc/0x8d0
[  171.700607][T10042]  ? __pfx_xsk_setsockopt+0x10/0x10
[  171.700634][T10042]  ? __pfx_aa_sk_perm+0x10/0x10
[  171.700662][T10042]  ? aa_sock_opt_perm+0xff/0x1a0
[  171.700690][T10042]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  171.700707][T10042]  ? __pfx_xsk_setsockopt+0x10/0x10
[  171.700737][T10042]  do_sock_setsockopt+0x17c/0x1b0
[  171.700764][T10042]  __x64_sys_setsockopt+0x13f/0x1b0
[  171.700793][T10042]  do_syscall_64+0xec/0xf80
[  171.700813][T10042]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.700831][T10042]  ? trace_irq_disable+0x37/0x100
[  171.700856][T10042]  ? clear_bhb_loop+0x60/0xb0
[  171.700880][T10042]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  171.700899][T10042] RIP: 0033:0x7fd47498f749
[  171.700922][T10042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  171.700938][T10042] RSP: 002b:00007fd47579b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  171.700959][T10042] RAX: ffffffffffffffda RBX: 00007fd474be5fa0 RCX: 00007fd47498f749
[  171.700973][T10042] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  171.700984][T10042] RBP: 00007fd474a13f91 R08: 0000000000000004 R09: 0000000000000000
[  171.700995][T10042] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  171.701007][T10042] R13: 00007fd474be6038 R14: 00007fd474be5fa0 R15: 00007ffccb5bd818
[  171.701039][T10042]  </TASK>
[  171.739191][T10037] can: request_module (can-proto-0) failed.
[  171.974225][T10042] Mem-Info:
[  171.982090][T10042] active_anon:4258 inactive_anon:6 isolated_anon:0
[  171.982090][T10042]  active_file:2248 inactive_file:40237 isolated_file:0
[  171.982090][T10042]  unevictable:768 dirty:76 writeback:0
[  171.982090][T10042]  slab_reclaimable:11232 slab_unreclaimable:107038
[  171.982090][T10042]  mapped:34035 shmem:1356 pagetables:1250
[  171.982090][T10042]  sec_pagetables:0 bounce:0
[  171.982090][T10042]  kernel_misc_reclaimable:0
[  171.982090][T10042]  free:1224972 free_pcp:27076 free_cma:0
[  172.080706][T10042] Node 0 active_anon:17032kB inactive_anon:24kB active_file:8992kB inactive_file:160744kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136140kB dirty:304kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13476kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  172.126472][T10042] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  172.165181][T10042] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  172.196377][T10042] lowmem_reserve[]: 0 2499 2501 2501 2501
[  172.202360][T10042] Node 0 DMA32 free:1016608kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:16932kB inactive_anon:24kB active_file:8992kB inactive_file:160744kB unevictable:1536kB writepending:304kB zspages:0kB present:3129332kB managed:2559484kB mlocked:0kB bounce:0kB free_pcp:91712kB local_pcp:19168kB free_cma:0kB
[  172.274723][T10042] lowmem_reserve[]: 0 0 1 1 1
[  172.286657][T10042] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  172.290892][T10050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1169'.
[  172.330655][T10042] lowmem_reserve[]: 0 0 0 0 0
[  172.335556][T10042] Node 1 Normal free:3883932kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:18860kB local_pcp:12100kB free_cma:0kB
[  172.379586][T10042] lowmem_reserve[]: 0 0 0 0 0
[  172.400156][T10042] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  172.429224][T10042] Node 0 DMA32: 2874*4kB (U) 1953*8kB (UM) 989*16kB (UME) 286*32kB (UE) 554*64kB (UME) 458*128kB (UME) 288*256kB (UM) 47*512kB (UM) 10*1024kB (UME) 2*2048kB (M) 191*4096kB (UM) = 1040640kB
[  172.459880][T10042] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  172.494661][T10042] Node 1 Normal: 187*4kB (UE) 50*8kB (UME) 40*16kB (UME) 79*32kB (UME) 29*64kB (UME) 9*128kB (UME) 7*256kB (UME) 4*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 944*4096kB (M) = 3883932kB
[  172.513013][T10042] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  172.529518][T10042] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  172.545011][T10042] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  172.566882][T10042] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  172.584595][T10042] 43838 total pagecache pages
[  172.589419][T10042] 0 pages in swap cache
[  172.604877][T10042] Free swap  = 124996kB
[  172.609143][T10042] Total swap = 124996kB
[  172.618728][T10042] 2097051 pages RAM
[  172.632335][T10042] 0 pages HighMem/MovableOnly
[  172.637216][T10042] 425090 pages reserved
[  172.651346][T10042] 0 pages cma reserved
[  173.311287][T10060] netlink: 'syz.4.1174': attribute type 1 has an invalid length.
[  173.625770][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1175'.
[  174.274876][T10071] netlink: 'syz.1.1177': attribute type 2 has an invalid length.
[  174.291585][T10077] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1177'.
[  174.351575][T10077] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1177'.
[  174.372572][T10071] netlink: 'syz.1.1177': attribute type 2 has an invalid length.
[  174.460500][T10087] Can't find ip_set type hash�et,iface
[  174.686998][T10101] Bluetooth: hci0: Opcode 0x080f failed: -22
[  174.860521][T10115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  174.869004][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  175.164015][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1191'.
[  175.175578][T10130] x_tables: duplicate underflow at hook 1
[  175.412078][T10137] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  175.546409][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1196'.
[  175.659684][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1197'.
[  175.791769][T10164] netlink: 'syz.1.1200': attribute type 11 has an invalid length.
[  175.875023][T10170] netlink: 'syz.0.1202': attribute type 1 has an invalid length.
[  175.951951][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'.
[  175.963188][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1204'.
[  175.979076][T10170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1202'.
[  175.979948][ T2223] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  176.022419][T10180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'.
[  176.041274][T10174] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  176.048949][ T2223] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  176.076434][ T2223] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  176.092829][ T2223] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  176.203942][T10188] netlink: 'syz.5.1207': attribute type 4 has an invalid length.
[  176.211872][T10188] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1207'.
[  176.445087][T10207] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1212'.
[  176.526725][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1215'.
[  176.566080][T10209] vxcan0: entered allmulticast mode
[  176.865691][T10235] IPVS: sync thread started: state = BACKUP, mcast_ifn = tunl0, syncid = 4, id = 0
[  177.203684][T10253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  177.889610][T10279] netlink: 'syz.1.1236': attribute type 13 has an invalid length.
[  177.967453][T10282] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  177.977798][T10279] gretap0: refused to change device tx_queue_len
[  177.992463][T10279] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  178.410978][T10311] gretap2: entered promiscuous mode
[  178.762424][T10330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  178.771185][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  179.109506][T10359] IPVS: set_ctl: invalid protocol: 98 172.20.20.187:20004
[  179.676146][T10386] nbd: must specify at least one socket
[  179.891256][T10411] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  179.929607][T10413] macvtap1: entered promiscuous mode
[  179.947167][T10413] macvtap1: entered allmulticast mode
[  179.964109][T10413] veth1_vlan: entered allmulticast mode
[  180.300129][T10439] x_tables: unsorted underflow at hook 1
[  180.355419][T10442] xt_TPROXY: Can be used only with -p tcp or -p udp
[  180.433304][T10446] __nla_validate_parse: 16 callbacks suppressed
[  180.433326][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'.
[  180.627111][T10451] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1291'.
[  180.851995][T10466] netlink: 'syz.0.1299': attribute type 13 has an invalid length.
[  181.038587][T10485] netlink: 'syz.0.1299': attribute type 24 has an invalid length.
[  181.153934][T10492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1304'.
[  181.191358][T10493] macvtap1: entered promiscuous mode
[  181.197017][T10493] macvtap1: entered allmulticast mode
[  181.204537][T10493] veth1_vlan: entered allmulticast mode
[  181.244061][T10485] bond0: (slave macvlan2): Error -98 calling set_mac_address
[  181.329917][T10466] macvtap2: entered promiscuous mode
[  181.346263][T10466] macvtap2: entered allmulticast mode
[  181.385233][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'.
[  181.557288][T10505] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1311'.
[  181.569580][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1311'.
[  181.711401][T10513] netlink: 428 bytes leftover after parsing attributes in process `syz.0.1315'.
[  181.749349][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1314'.
[  181.781451][T10518] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1314'.
[  181.903536][T10525] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1318'.
[  182.054575][T10536] bond0: Caught tx_queue_len zero misconfig
[  182.401904][T10563] netlink: 'syz.5.1329': attribute type 1 has an invalid length.
[  182.651955][T10578] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.660817][T10578] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.702328][T10581] syzkaller1: entered promiscuous mode
[  182.710038][T10581] syzkaller1: entered allmulticast mode
[  183.274600][T10613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.330458][T10613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.339041][T10613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.390452][T10613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  183.406430][T10622] netlink: 'syz.5.1344': attribute type 3 has an invalid length.
[  183.424435][ T5946] IPVS: starting estimator thread 0...
[  183.551218][T10624] IPVS: using max 28 ests per chain, 67200 per kthread
[  183.623777][T10627] netlink: 'syz.1.1346': attribute type 10 has an invalid length.
[  183.769862][T10640] netlink: 'syz.2.1349': attribute type 3 has an invalid length.
[  183.890308][T10650] netlink: 'syz.0.1352': attribute type 10 has an invalid length.
[  183.926232][T10651] netlink: 'syz.5.1353': attribute type 11 has an invalid length.
[  183.941373][T10650] netlink: 'syz.0.1352': attribute type 1 has an invalid length.
[  183.983043][T10650] syzkaller0: entered promiscuous mode
[  184.002035][T10650] syzkaller0: entered allmulticast mode
[  184.148216][T10669] netlink: 'syz.5.1358': attribute type 1 has an invalid length.
[  184.241304][T10667] xt_CT: No such helper "syz1"
[  184.275787][T10672] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address
[  184.387287][T10672] bond1: (slave vxcan1): Error -95 calling set_mac_address
[  184.459012][T10669] gretap2: entered promiscuous mode
[  184.499139][T10669] bond1: (slave gretap2): making interface the new active one
[  184.534205][T10669] bond1: (slave gretap2): Enslaving as an active interface with an up link
[  185.082948][T10721] geneve2: entered promiscuous mode
[  185.102892][T10721] geneve2: entered allmulticast mode
[  185.267290][T10734] syzkaller0: entered promiscuous mode
[  185.299431][T10734] syzkaller0: entered allmulticast mode
[  185.542879][T10750] ip6_vti0 speed is unknown, defaulting to 1000
[  185.660682][T10761] __nla_validate_parse: 26 callbacks suppressed
[  185.660702][T10761] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1386'.
[  185.660801][T10760] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1386'.
[  186.023119][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'.
[  186.048286][T10781] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1391'.
[  186.051964][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'.
[  186.082173][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1389'.
[  186.112045][T10778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'.
[  186.274101][T10785] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:20000
[  194.246009][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  213.445191][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.456282][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.464581][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.475041][T10811] validate_nla: 4 callbacks suppressed
[  213.475059][T10811] netlink: 'syz.0.1400': attribute type 7 has an invalid length.
[  213.490944][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.500287][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  213.521972][ T5843] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  213.529538][ T5843] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  213.538164][ T5843] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  213.546333][ T5843] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  213.564046][ T5843] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  213.833039][T10806] ip6_vti0 speed is unknown, defaulting to 1000
[  213.901831][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1406'.
[  213.923962][T10829] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1406'.
[  213.997233][   T30] audit: type=1804 audit(1768617140.566:2): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1408" name="/newroot/311/cgroup.controllers" dev="tmpfs" ino=1605 res=1 errno=0
[  214.062877][   T30] audit: type=1800 audit(1768617140.566:3): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1408" name="cgroup.controllers" dev="tmpfs" ino=1605 res=0 errno=0
[  214.215595][T10846] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1411'.
[  214.255095][T10849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1412'.
[  214.520535][T10857] syzkaller0: entered promiscuous mode
[  214.528614][T10857] syzkaller0: entered allmulticast mode
[  214.571433][T10863] netlink: 'syz.5.1417': attribute type 10 has an invalid length.
[  214.579489][T10863] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1417'.
[  214.596056][T10868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1419'.
[  215.603333][ T5843] Bluetooth: hci6: command tx timeout
[  215.978761][T10890] netdevsim netdevsim0: Direct firmware load for .. failed with error -2
[  216.014997][T10806] chnl_net:caif_netlink_parms(): no params data found
[  216.030473][T10890] netdevsim netdevsim0: Falling back to sysfs fallback for: ..
[  216.088607][T10899] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1424'.
[  216.112231][T10901] netlink: 'syz.0.1423': attribute type 21 has an invalid length.
[  216.153357][T10901] netlink: 'syz.0.1423': attribute type 22 has an invalid length.
[  216.190581][T10901] netlink: 'syz.0.1423': attribute type 23 has an invalid length.
[  216.210354][T10901] netlink: 'syz.0.1423': attribute type 25 has an invalid length.
[  216.238146][T10901] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1423'.
[  216.483804][T10806] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.510735][T10806] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.518056][T10806] bridge_slave_0: entered allmulticast mode
[  216.552164][T10806] bridge_slave_0: entered promiscuous mode
[  216.583335][T10806] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.595235][T10806] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.616447][T10806] bridge_slave_1: entered allmulticast mode
[  216.630406][T10806] bridge_slave_1: entered promiscuous mode
[  216.685746][T10936] bond0: entered allmulticast mode
[  216.691853][T10936] bond_slave_0: entered allmulticast mode
[  216.698071][T10936] bond_slave_1: entered allmulticast mode
[  216.709466][T10936] syz_tun: entered allmulticast mode
[  216.760917][T10936] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1433'.
[  216.781069][T10806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  216.804191][T10806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  216.814006][T10938] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1433'.
[  216.849699][T10936] bridge0: port 3(team0) entered disabled state
[  216.856496][T10936] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.863909][T10936] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.906390][T10948] team0: Device ip6gre2 is of different type
[  216.949299][T10806] team0: Port device team_slave_0 added
[  216.959361][T10806] team0: Port device team_slave_1 added
[  217.056924][T10806] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.064874][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.092420][T10806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.115641][T10806] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.133819][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  217.189538][T10806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.327131][T10806] hsr_slave_0: entered promiscuous mode
[  217.341750][T10806] hsr_slave_1: entered promiscuous mode
[  217.348236][T10806] debugfs: 'hsr0' already exists in 'hsr'
[  217.361154][T10806] Cannot create hsr debugfs directory
[  217.369223][T10962] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  217.464375][T10962] syzkaller0: entered promiscuous mode
[  217.470473][T10962] syzkaller0: entered allmulticast mode
[  217.476701][T10962] tipc: Resetting bearer <eth:syzkaller0>
[  217.514842][T10960] tipc: Resetting bearer <eth:syzkaller0>
[  217.681019][ T5843] Bluetooth: hci6: command tx timeout
[  218.771614][T10960] tipc: Disabling bearer <eth:syzkaller0>
[  218.802849][ T5946] tipc: Node number set to 1
[  218.948176][T10995] __nla_validate_parse: 4 callbacks suppressed
[  218.948197][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1451'.
[  218.984336][T10995] openvswitch: netlink: Flow actions attr not present in new flow.
[  219.019498][T10997] lo: Caught tx_queue_len zero misconfig
[  219.057014][T10999] openvswitch: netlink: IP tunnel TTL not specified.
[  219.255590][T10806] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  219.268170][T10806] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  219.301393][T10806] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  219.336593][T10806] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  219.603184][T10806] 8021q: adding VLAN 0 to HW filter on device bond0
[  219.665051][T11037] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1462'.
[  219.665063][T10806] 8021q: adding VLAN 0 to HW filter on device team0
[  219.693836][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.701080][ T7247] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.713492][T11039] IPv6: NLM_F_CREATE should be specified when creating new route
[  219.739468][ T3844] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.746733][ T3844] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.765427][ T5843] Bluetooth: hci6: command tx timeout
[  219.852140][T10806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  219.936043][T11046] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1466'.
[  220.116915][T11058] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR
[  220.150637][T10806] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.362132][T11079] netlink: 'syz.0.1472': attribute type 1 has an invalid length.
[  220.426560][T11079] 8021q: adding VLAN 0 to HW filter on device bond7
[  220.429020][T11084] netlink: 'syz.5.1471': attribute type 10 has an invalid length.
[  220.454036][T11084] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1471'.
[  220.504054][T11079] vlan4: entered allmulticast mode
[  220.509729][T11079] veth1: entered allmulticast mode
[  220.593676][T11090] netlink: 'syz.2.1474': attribute type 3 has an invalid length.
[  220.666144][T11079] bond0: (slave team0): Releasing backup interface
[  220.685930][T11079] team0 (unregistering): Port device team_slave_0 removed
[  220.712586][T11079] team0 (unregistering): Port device team_slave_1 removed
[  220.728344][T11079] team0 (unregistering): Port device dummy0 removed
[  220.852143][T10806] veth0_vlan: entered promiscuous mode
[  220.867568][T10806] veth1_vlan: entered promiscuous mode
[  220.938556][T10806] veth0_macvtap: entered promiscuous mode
[  220.956767][T10806] veth1_macvtap: entered promiscuous mode
[  220.984891][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'.
[  221.012025][T10806] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.019680][T11101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1478'.
[  221.041750][T10806] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.085116][ T6812] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.124343][ T6812] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.202518][ T6812] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.241871][T11107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1480'.
[  221.251524][ T6812] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  221.474706][T11119] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1484'.
[  221.497333][ T7247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.518310][ T7247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.594164][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  221.615578][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  221.641398][T11119] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  221.756745][T11131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1490'.
[  221.770952][T11131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1490'.
[  221.816497][T11135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  221.841610][ T5843] Bluetooth: hci6: command tx timeout
[  221.962435][T11147] netlink: 'syz.6.1399': attribute type 83 has an invalid length.
[  222.424036][T11184] 8021q: VLANs not supported on ip6gre0
[  222.999196][T11217] delete_channel: no stack
[  223.007037][T11217] delete_channel: no stack
[  223.130105][ T7253] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  223.165685][ T7253] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  223.196107][ T7253] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  223.242938][ T7253] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  223.353906][T11240] ip6gretap0: entered promiscuous mode
[  223.705997][T11271] syzkaller0: entered promiscuous mode
[  223.714570][T11271] syzkaller0: entered allmulticast mode
[  223.865509][T11280] syzkaller0: entered promiscuous mode
[  223.881770][T11280] syzkaller0: entered allmulticast mode
[  224.004735][T11280] ip6_vti0 speed is unknown, defaulting to 1000
[  224.090637][T11298] __nla_validate_parse: 20 callbacks suppressed
[  224.090658][T11298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1537'.
[  224.626356][T11335] netlink: 'syz.6.1546': attribute type 1 has an invalid length.
[  224.788609][T11338] veth3: entered promiscuous mode
[  224.898909][T11351] netlink: 'syz.0.1553': attribute type 1 has an invalid length.
[  224.934126][T11353] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1551'.
[  224.971188][T11353] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1551'.
[  224.985664][T11346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1550'.
[  225.027242][T11354] gre0: left promiscuous mode
[  225.070298][T11354] gre0: left allmulticast mode
[  225.344489][T11373] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1557'.
[  225.378978][T11354] bond0: left allmulticast mode
[  225.393908][T11354] bond_slave_0: left allmulticast mode
[  225.399693][T11354] bond_slave_1: left allmulticast mode
[  225.408047][T11377] netlink: 'syz.6.1557': attribute type 1 has an invalid length.
[  225.416694][T11354] syz_tun: left allmulticast mode
[  225.471108][T11373] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.479876][T11373] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.826286][T11373] veth3: entered promiscuous mode
[  226.109617][T11406] netlink: 'syz.6.1565': attribute type 1 has an invalid length.
[  226.120168][T11406] netlink: 'syz.6.1565': attribute type 7 has an invalid length.
[  226.127949][T11406] netlink: 'syz.6.1565': attribute type 8 has an invalid length.
[  226.181618][T11406] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1565'.
[  226.204135][T11406] NCSI netlink: No device for ifindex 65584
[  226.354324][T11418] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.969171][T11462] netlink: 2332 bytes leftover after parsing attributes in process `syz.2.1589'.
[  227.189624][T11471] bridge_slave_1: entered promiscuous mode
[  227.324225][T11480] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1594'.
[  227.334162][T11479] delete_channel: no stack
[  227.347059][T11481] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1593'.
[  227.383190][T11481] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1593'.
[  227.490831][T11486] delete_channel: no stack
[  227.696702][T11500] bond0: entered promiscuous mode
[  227.702173][T11500] bond_slave_0: entered promiscuous mode
[  227.708123][T11500] bond_slave_1: entered promiscuous mode
[  227.748260][T11500] syz_tun: entered promiscuous mode
[  227.790263][T11500] bond0: left promiscuous mode
[  227.795672][T11500] bond_slave_0: left promiscuous mode
[  227.804192][T11500] bond_slave_1: left promiscuous mode
[  227.832173][T11500] syz_tun: left promiscuous mode
[  228.013185][T11517] netlink: 'syz.1.1608': attribute type 2 has an invalid length.
[  228.015664][T11516] xt_l2tp: v2 tid > 0xffff: 1114244
[  228.034756][T11517] netlink: 'syz.1.1608': attribute type 2 has an invalid length.
[  228.546859][T11550] bond0: (slave syz_tun): Releasing backup interface
[  228.575215][T11550] bond0: (slave 
3
2
): Releasing backup interface
[  228.593452][T11550] bond0: (slave bond_slave_1): Releasing backup interface
[  228.629888][T11550] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.643811][T11550] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.698744][T11550] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.726926][T11550] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.757861][T11550] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  229.136183][T11583] __nla_validate_parse: 13 callbacks suppressed
[  229.136201][T11583] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1623'.
[  229.180323][T11583] bridge0: entered promiscuous mode
[  229.190784][T11585] netlink: 'syz.5.1624': attribute type 5 has an invalid length.
[  229.191332][T11583] bridge0: entered allmulticast mode
[  229.278296][T11585] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1624'.
[  229.389628][T11603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1628'.
[  229.476968][T11606] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22
[  229.486252][T11606] netdevsim netdevsim2: Direct firmware load for . failed with error -22
[  229.495186][T11606] netdevsim netdevsim2: Falling back to sysfs fallback for: .
[  229.541804][T11603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1628'.
[  229.763507][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1634'.
[  229.981197][T11638] syzkaller0: entered promiscuous mode
[  229.986863][T11638] syzkaller0: entered allmulticast mode
[  230.324125][ T5834] Bluetooth: hci6: command 0x0405 tx timeout
[  230.349854][T11658] 8021q: adding VLAN 0 to HW filter on device bond8
[  230.366281][T11666] ipvlan1: entered promiscuous mode
[  230.371868][T11666] ipvlan1: entered allmulticast mode
[  230.377270][T11666] veth0_vlan: entered allmulticast mode
[  230.446373][T11663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1647'.
[  230.511780][T11672] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1649'.
[  230.692639][T11680] sch_fq: defrate 0 ignored.
[  230.838025][T11689] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1656'.
[  230.863206][T11690] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1656'.
[  231.005785][T11702] nbd: must specify at least one socket
[  231.144438][T11712] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  231.252024][T11721] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1666'.
[  231.358652][T11735] netlink: 'syz.2.1664': attribute type 12 has an invalid length.
[  231.476774][T11739] netlink: 'syz.0.1670': attribute type 1 has an invalid length.
[  231.553028][T11745] netlink: 'syz.6.1672': attribute type 10 has an invalid length.
[  231.605266][T11751] x_tables: duplicate underflow at hook 1
[  231.642951][T11746] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  231.664194][T11746] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  231.750566][T11756] netlink: 'syz.2.1675': attribute type 20 has an invalid length.
[  232.069206][T11776] sctp: [Deprecated]: syz.1.1684 (pid 11776) Use of struct sctp_assoc_value in delayed_ack socket option.
[  232.069206][T11776] Use struct sctp_sack_info instead
[  232.363954][T11795] netlink: 'syz.6.1688': attribute type 21 has an invalid length.
[  232.393437][T11793] bond9: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  232.430186][T11793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.477447][T11797] netlink: 'syz.1.1690': attribute type 1 has an invalid length.
[  232.814562][T11825] syz_tun: entered allmulticast mode
[  232.851115][T11821] openvswitch: netlink: IP tunnel dst address not specified
[  232.937625][T11821] dvmrp0: entered allmulticast mode
[  233.132240][T11839] block nbd0: server does not support multiple connections per device.
[  233.146166][T11839] block nbd0: shutting down sockets
[  234.636789][T11863] __nla_validate_parse: 7 callbacks suppressed
[  234.636808][T11863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1712'.
[  234.736590][T11867] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1714'.
[  235.023012][T11887] ieee802154 phy0 wpan0: encryption failed: -22
[  235.687956][T11904] veth1_vlan: left allmulticast mode
[  235.753923][ T7253] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  235.792863][ T7253] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.828009][ T7253] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  235.861952][ T7253] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.883821][ T7253] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  235.907857][ T7253] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  235.933177][ T7253] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  235.952421][ T7253] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.015644][T11919] syzkaller0: entered promiscuous mode
[  236.022380][T11919] syzkaller0: entered allmulticast mode
[  236.054722][T11928] netlink: 'syz.0.1738': attribute type 2 has an invalid length.
[  237.529040][T11934] ip6_vti0 speed is unknown, defaulting to 1000
[  237.814833][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'.
[  237.854625][ T6805] nci: nci_rsp_packet: unknown rsp opcode 0xd
[  238.686460][T11991] netlink: 'syz.1.1759': attribute type 3 has an invalid length.
[  238.718394][T11991] netlink: 'syz.1.1759': attribute type 1 has an invalid length.
[  238.731347][T11991] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1759'.
[  238.745712][T11993] netlink: 'syz.6.1762': attribute type 61 has an invalid length.
[  239.001967][T12009] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma?
[  239.406098][T12028] openvswitch: netlink: IPv4 tunnel dst address is zero
[  239.847679][T12041] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1783'.
[  240.039210][T12052] netlink: 'syz.2.1786': attribute type 27 has an invalid length.
[  240.176549][T12060] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1787'.
[  240.223747][T12060] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1787'.
[  240.233429][T12063] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1790'.
[  240.261846][T12054] delete_channel: no stack
[  240.313980][T12070] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1791'.
[  240.383240][T12070] vxcan0: entered allmulticast mode
[  240.474699][T12066] ip6_vti0 speed is unknown, defaulting to 1000
[  240.651536][T12098] tipc: Enabled bearer <eth:xfrm0>, priority 11
[  240.941243][T12111] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1803'.
[  240.970901][T12116] batadv_slave_0: Caught tx_queue_len zero misconfig
[  240.994385][T12121] netlink: 'syz.6.1805': attribute type 6 has an invalid length.
[  241.007967][T12116] ip6tnl0: Caught tx_queue_len zero misconfig
[  241.142479][T12124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1806'.
[  241.269323][T12140] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1809'.
[  241.279796][T12140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1809'.
[  241.314969][T12139] bond10: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[  241.326486][T12139] bond10 (unregistering): Released all slaves
[  241.458368][T12145] x_tables: duplicate underflow at hook 2
[  241.517573][T12150] netlink: 'syz.0.1812': attribute type 8 has an invalid length.
[  241.626552][T12155] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1814'.
[  241.774910][ T5946] tipc: Node number set to 4022450669
[  242.513789][T12213] netlink: 'syz.5.1832': attribute type 1 has an invalid length.
[  242.564290][T12216] netlink: 'syz.5.1832': attribute type 1 has an invalid length.
[  242.669824][T12205] "syz.0.1826" (12205) uses obsolete ecb(arc4) skcipher
[  242.741821][T12213] 8021q: adding VLAN 0 to HW filter on device bond2
[  242.822152][T12225] rdma_rxe: rxe_newlink: failed to add lo
[  243.007297][T12246] block nbd0: not configured, cannot reconfigure
[  243.071376][T12251] bridge_slave_0: entered promiscuous mode
[  243.164294][T12257] netlink: 'syz.6.1844': attribute type 1 has an invalid length.
[  243.210697][T12257] netlink: 'syz.6.1844': attribute type 1 has an invalid length.
[  243.592913][T12282] 8021q: adding VLAN 0 to HW filter on device batadv0
[  243.625008][T12282] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  243.665182][T12289] ip6_vti0 speed is unknown, defaulting to 1000
[  243.870679][T12299] bond3: Unable to set up delay as MII monitoring is disabled
[  243.882532][T12299] bond3 (unregistering): Released all slaves
[  244.276471][T12324] Cannot find del_set index 4 as target
[  244.530134][T12341] syzkaller1: entered promiscuous mode
[  244.558696][T12341] syzkaller1: entered allmulticast mode
[  244.909193][T12352] bond7 (unregistering): Released all slaves
[  244.981649][T12354] __nla_validate_parse: 14 callbacks suppressed
[  244.981667][T12354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'.
[  245.296298][T12374] batman_adv: batadv0: Adding interface: dummy0
[  245.323552][T12374] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  245.349383][T12374] batman_adv: batadv0: Interface activated: dummy0
[  245.362434][T12374] syz_tun: entered allmulticast mode
[  245.378792][T12374] dvmrp6: entered allmulticast mode
[  255.683828][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  268.528383][T12380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1884'.
[  268.730438][T12399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'.
[  268.852397][T12406] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1892'.
[  268.870302][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1892'.
[  268.894888][T12406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1892'.
[  269.049594][T12420] validate_nla: 2 callbacks suppressed
[  269.049614][T12420] netlink: 'syz.6.1895': attribute type 1 has an invalid length.
[  269.090124][T12420] netlink: 232 bytes leftover after parsing attributes in process `syz.6.1895'.
[  269.263308][T12429] netlink: 'syz.1.1898': attribute type 1 has an invalid length.
[  269.271652][T12429] netlink: 'syz.1.1898': attribute type 1 has an invalid length.
[  269.850306][T12430] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1897'.
[  270.149788][T12475] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.1910'.
[  270.429369][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1916'.
[  270.465648][T12495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1917'.
[  270.573751][T12501] FAULT_INJECTION: forcing a failure.
[  270.573751][T12501] name failslab, interval 1, probability 0, space 0, times 1
[  270.605543][T12501] CPU: 1 UID: 0 PID: 12501 Comm: syz.0.1920 Not tainted syzkaller #0 PREEMPT(full) 
[  270.605572][T12501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  270.605598][T12501] Call Trace:
[  270.605607][T12501]  <TASK>
[  270.605617][T12501]  dump_stack_lvl+0xe8/0x150
[  270.605670][T12501]  should_fail_ex+0x414/0x560
[  270.605711][T12501]  should_failslab+0xa8/0x100
[  270.605740][T12501]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  270.605774][T12501]  ? __alloc_skb+0x198/0x3a0
[  270.605797][T12501]  ? __alloc_skb+0x1dc/0x3a0
[  270.605817][T12501]  ? __local_bh_enable_ip+0xd0/0x130
[  270.605840][T12501]  ? __alloc_skb+0x198/0x3a0
[  270.605864][T12501]  __alloc_skb+0x1dc/0x3a0
[  270.605892][T12501]  netlink_sendmsg+0x5c6/0xb30
[  270.605932][T12501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.605966][T12501]  ? aa_sock_msg_perm+0xf1/0x1b0
[  270.605996][T12501]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  270.606015][T12501]  ? __pfx_netlink_sendmsg+0x10/0x10
[  270.606045][T12501]  __sock_sendmsg+0x21c/0x270
[  270.606080][T12501]  ____sys_sendmsg+0x505/0x820
[  270.606113][T12501]  ? __pfx_____sys_sendmsg+0x10/0x10
[  270.606149][T12501]  ? import_iovec+0x74/0xa0
[  270.606179][T12501]  ___sys_sendmsg+0x21f/0x2a0
[  270.606215][T12501]  ? __pfx____sys_sendmsg+0x10/0x10
[  270.606281][T12501]  ? __fget_files+0x2a/0x420
[  270.606307][T12501]  ? __fget_files+0x3a0/0x420
[  270.606345][T12501]  __x64_sys_sendmsg+0x19b/0x260
[  270.606375][T12501]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  270.606413][T12501]  ? __pfx_ksys_write+0x10/0x10
[  270.606446][T12501]  do_syscall_64+0xec/0xf80
[  270.606471][T12501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.606491][T12501]  ? trace_irq_disable+0x37/0x100
[  270.606519][T12501]  ? clear_bhb_loop+0x60/0xb0
[  270.606545][T12501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  270.606566][T12501] RIP: 0033:0x7fd72d98f749
[  270.606586][T12501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  270.606605][T12501] RSP: 002b:00007fd72e85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  270.606628][T12501] RAX: ffffffffffffffda RBX: 00007fd72dbe5fa0 RCX: 00007fd72d98f749
[  270.606644][T12501] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003
[  270.606658][T12501] RBP: 00007fd72e85f090 R08: 0000000000000000 R09: 0000000000000000
[  270.606672][T12501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  270.606684][T12501] R13: 00007fd72dbe6038 R14: 00007fd72dbe5fa0 R15: 00007ffd0633c988
[  270.606719][T12501]  </TASK>
[  270.983648][T12513] netlink: 'syz.2.1925': attribute type 1 has an invalid length.
[  271.161305][T12517] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  271.171920][T12517] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  271.324153][T12530] veth5: entered promiscuous mode
[  271.364999][T12534] xt_TCPMSS: Only works on TCP SYN packets
[  271.454389][T12535] nbd: must specify at least one socket
[  271.509667][T12541] ip6gre1: entered promiscuous mode
[  271.524818][T12541] ip6gre1: entered allmulticast mode
[  271.549666][T12547] FAULT_INJECTION: forcing a failure.
[  271.549666][T12547] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  271.578683][T12547] CPU: 1 UID: 0 PID: 12547 Comm: syz.0.1934 Not tainted syzkaller #0 PREEMPT(full) 
[  271.578713][T12547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  271.578727][T12547] Call Trace:
[  271.578735][T12547]  <TASK>
[  271.578744][T12547]  dump_stack_lvl+0xe8/0x150
[  271.578777][T12547]  should_fail_ex+0x414/0x560
[  271.578817][T12547]  _copy_from_iter+0x1cd/0x1630
[  271.578854][T12547]  ? __pfx__copy_from_iter+0x10/0x10
[  271.578878][T12547]  ? __build_skb_around+0x22d/0x3c0
[  271.578904][T12547]  ? __alloc_skb+0x198/0x3a0
[  271.578927][T12547]  ? netlink_sendmsg+0x642/0xb30
[  271.578954][T12547]  ? skb_put+0x11b/0x210
[  271.578982][T12547]  netlink_sendmsg+0x6b2/0xb30
[  271.579021][T12547]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.579054][T12547]  ? aa_sock_msg_perm+0xf1/0x1b0
[  271.579084][T12547]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  271.579103][T12547]  ? __pfx_netlink_sendmsg+0x10/0x10
[  271.579134][T12547]  __sock_sendmsg+0x21c/0x270
[  271.579169][T12547]  ____sys_sendmsg+0x505/0x820
[  271.579201][T12547]  ? __pfx_____sys_sendmsg+0x10/0x10
[  271.579238][T12547]  ? import_iovec+0x74/0xa0
[  271.579268][T12547]  ___sys_sendmsg+0x21f/0x2a0
[  271.579297][T12547]  ? __pfx____sys_sendmsg+0x10/0x10
[  271.579361][T12547]  ? __fget_files+0x2a/0x420
[  271.579394][T12547]  ? __fget_files+0x3a0/0x420
[  271.579432][T12547]  __x64_sys_sendmsg+0x19b/0x260
[  271.579462][T12547]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  271.579500][T12547]  ? __pfx_ksys_write+0x10/0x10
[  271.579533][T12547]  do_syscall_64+0xec/0xf80
[  271.579557][T12547]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.579577][T12547]  ? trace_irq_disable+0x37/0x100
[  271.579605][T12547]  ? clear_bhb_loop+0x60/0xb0
[  271.579631][T12547]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  271.579651][T12547] RIP: 0033:0x7fd72d98f749
[  271.579670][T12547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  271.579689][T12547] RSP: 002b:00007fd72e85f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  271.579713][T12547] RAX: ffffffffffffffda RBX: 00007fd72dbe5fa0 RCX: 00007fd72d98f749
[  271.579729][T12547] RDX: 0000000004000040 RSI: 0000200000000340 RDI: 0000000000000003
[  271.579743][T12547] RBP: 00007fd72e85f090 R08: 0000000000000000 R09: 0000000000000000
[  271.579757][T12547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  271.579770][T12547] R13: 00007fd72dbe6038 R14: 00007fd72dbe5fa0 R15: 00007ffd0633c988
[  271.579804][T12547]  </TASK>
[  272.014808][T12555] 8021q: adding VLAN 0 to HW filter on device bond4
[  272.070792][T12559] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  272.404551][T12571] syzkaller1: entered promiscuous mode
[  272.414771][T12571] syzkaller1: entered allmulticast mode
[  272.884139][T12601] bond10: (slave gretap0): Device is not bonding slave
[  272.913365][T12601] bond10: option active_slave: invalid value (gretap0)
[  272.936181][T12601] bond10 (unregistering): Released all slaves
[  273.541100][T12631] __nla_validate_parse: 8 callbacks suppressed
[  273.541121][T12631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1966'.
[  273.644769][T12638] netlink: 'syz.2.1968': attribute type 1 has an invalid length.
[  273.662929][T12637] netlink: 'syz.1.1969': attribute type 1 has an invalid length.
[  273.751262][T12642] netlink: 'syz.5.1970': attribute type 1 has an invalid length.
[  273.763938][T12638] 8021q: adding VLAN 0 to HW filter on device bond5
[  273.871413][T12636] 8021q: adding VLAN 0 to HW filter on device bond5
[  273.905517][T12636] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address
[  273.943846][T12661] netlink: 620 bytes leftover after parsing attributes in process `syz.0.1971'.
[  273.957600][T12636] bond5: (slave vxcan1): Error -95 calling set_mac_address
[  273.996850][T12637] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR
[  274.083239][T12642] 8021q: adding VLAN 0 to HW filter on device bond3
[  274.098595][ T5834] Bluetooth: hci6: command 0x0405 tx timeout
[  274.296152][T12672] netlink: 'syz.2.1973': attribute type 10 has an invalid length.
[  274.317133][T12672] bridge_slave_1: left allmulticast mode
[  274.328038][T12672] bridge_slave_1: left promiscuous mode
[  274.335746][T12672] bridge0: port 2(bridge_slave_1) entered disabled state
[  274.360320][T12672] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  274.531144][T12682] netlink: 'syz.1.1977': attribute type 10 has an invalid length.
[  274.583614][T12682] syz_tun: entered promiscuous mode
[  274.611646][T12689] netlink: 'syz.1.1977': attribute type 10 has an invalid length.
[  274.619795][T12682] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  274.674518][T12695] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1977'.
[  274.718768][T12689] 8021q: adding VLAN 0 to HW filter on device bond0
[  274.730571][T12689] team0: Port device bond0 added
[  274.834441][T12694] syzkaller0: entered promiscuous mode
[  274.840145][T12694] syzkaller0: entered allmulticast mode
[  275.263893][T12732] netlink: 'syz.1.1994': attribute type 3 has an invalid length.
[  275.384061][T12740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1996'.
[  275.394804][T12738] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1997'.
[  275.461003][T12741] x_tables: duplicate underflow at hook 1
[  275.479337][T12738] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1997'.
[  275.548329][T12742] syzkaller0: entered promiscuous mode
[  275.577014][T12742] syzkaller0: entered allmulticast mode
[  276.165007][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  277.231499][T12779] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  277.363357][T12789] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2011'.
[  277.382705][T12792] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2012'.
[  277.401611][T12792] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2012'.
[  277.448288][T12793] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  277.532176][T12793] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2010'.
[  277.547709][T12793] IPVS: Error connecting to the multicast addr
[  277.883980][T12819] syzkaller0: entered allmulticast mode
[  277.978807][T12834] netlink: 'syz.1.2025': attribute type 6 has an invalid length.
[  278.044341][T12836] bond4: invalid ARP target 0.0.0.0 specified for addition
[  278.069664][T12836] bond4: option arp_ip_target: invalid value (0)
[  278.112746][T12836] bond4 (unregistering): Released all slaves
[  278.218099][T12847] geneve2: entered promiscuous mode
[  278.759379][T12861] __nla_validate_parse: 6 callbacks suppressed
[  278.759402][T12861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'.
[  278.940191][T12871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2038'.
[  279.019348][T12873] netlink: 'syz.6.2039': attribute type 4 has an invalid length.
[  279.074418][T12874] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.2039'.
[  279.341401][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2042'.
[  279.390133][T12887] netlink: 'syz.6.2042': attribute type 30 has an invalid length.
[  279.398012][T12887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2042'.
[  279.409804][T12888] netlink: 'syz.6.2042': attribute type 8 has an invalid length.
[  279.754900][T12906] netlink: 'syz.6.2048': attribute type 1 has an invalid length.
[  279.832724][T12908] ip6erspan0: entered promiscuous mode
[  279.894997][T12906] 8021q: adding VLAN 0 to HW filter on device bond1
[  279.913332][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2049'.
[  279.925603][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2048'.
[  280.201142][T12927] veth0_to_bridge: entered promiscuous mode
[  280.232903][T12929] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2052'.
[  280.262758][T12929] Cannot find set identified by id 65534 to match
[  280.674784][T12934] veth0_to_bridge: left promiscuous mode
[  280.959681][T12960] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2065'.
[  281.037134][T12964] netlink: 'syz.2.2068': attribute type 1 has an invalid length.
[  281.060993][T12964] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  281.130459][T12971] veth1_to_bond: entered allmulticast mode
[  281.137178][T12971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2070'.
[  281.166446][T12970] veth1_to_bond: left allmulticast mode
[  281.516220][T12998] bridge0: entered promiscuous mode
[  281.530444][T12998] macsec2: entered promiscuous mode
[  281.548048][T12998] macsec2: entered allmulticast mode
[  281.576516][T12998] bridge0: entered allmulticast mode
[  281.606078][T12998] bridge0: port 3(macsec2) entered blocking state
[  281.630671][T12998] bridge0: port 3(macsec2) entered disabled state
[  281.655723][T12998] bridge0: left allmulticast mode
[  281.672254][T12998] bridge0: left promiscuous mode
[  281.777413][T13012] bond2: (slave macsec2): Error -34 calling dev_set_mtu
[  282.119366][T13031] netlink: 'syz.2.2089': attribute type 8 has an invalid length.
[  282.180056][T13038] netlink: 'syz.6.2090': attribute type 1 has an invalid length.
[  282.188007][T13038] netlink: 'syz.6.2090': attribute type 1 has an invalid length.
[  282.357244][T13049] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma?
[  282.515125][T13063] syzkaller0: entered promiscuous mode
[  282.526868][T13063] syzkaller0: entered allmulticast mode
[  282.761027][T13078] netlink: 'syz.0.2105': attribute type 1 has an invalid length.
[  282.802484][T13078] netlink: 'syz.0.2105': attribute type 1 has an invalid length.
[  282.851682][T13082] netlink: 'syz.5.2104': attribute type 5 has an invalid length.
[  283.472616][T13140] FAULT_INJECTION: forcing a failure.
[  283.472616][T13140] name failslab, interval 1, probability 0, space 0, times 0
[  283.490316][T13135] veth1_macvtap: left promiscuous mode
[  283.506220][T13140] CPU: 0 UID: 0 PID: 13140 Comm: syz.5.2122 Not tainted syzkaller #0 PREEMPT(full) 
[  283.506251][T13140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  283.506264][T13140] Call Trace:
[  283.506272][T13140]  <TASK>
[  283.506280][T13140]  dump_stack_lvl+0xe8/0x150
[  283.506314][T13140]  should_fail_ex+0x414/0x560
[  283.506359][T13140]  should_failslab+0xa8/0x100
[  283.506389][T13140]  __kmalloc_noprof+0xdf/0x800
[  283.506410][T13140]  ? kfree+0x4d/0x660
[  283.506439][T13140]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  283.506476][T13140]  tomoyo_realpath_from_path+0xe3/0x5d0
[  283.506505][T13140]  ? tomoyo_domain+0xd8/0x130
[  283.506539][T13140]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  283.506562][T13140]  tomoyo_path_number_perm+0x1e8/0x5a0
[  283.506590][T13140]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  283.506614][T13140]  ? __lock_acquire+0x6b6/0x2cf0
[  283.506652][T13140]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  283.506700][T13140]  ? __fget_files+0x2a/0x420
[  283.506731][T13140]  ? __fget_files+0x2a/0x420
[  283.506757][T13140]  ? __fget_files+0x3a0/0x420
[  283.506783][T13140]  ? __fget_files+0x2a/0x420
[  283.506814][T13140]  security_file_ioctl+0xcb/0x2d0
[  283.506840][T13140]  __se_sys_ioctl+0x47/0x170
[  283.506876][T13140]  do_syscall_64+0xec/0xf80
[  283.506900][T13140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.506920][T13140]  ? trace_irq_disable+0x37/0x100
[  283.506948][T13140]  ? clear_bhb_loop+0x60/0xb0
[  283.506980][T13140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  283.507001][T13140] RIP: 0033:0x7f19c0d8f749
[  283.507019][T13140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  283.507037][T13140] RSP: 002b:00007f19c1cd4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  283.507058][T13140] RAX: ffffffffffffffda RBX: 00007f19c0fe5fa0 RCX: 00007f19c0d8f749
[  283.507073][T13140] RDX: 0000200000000600 RSI: 00000000400448c8 RDI: 0000000000000005
[  283.507087][T13140] RBP: 00007f19c1cd4090 R08: 0000000000000000 R09: 0000000000000000
[  283.507101][T13140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  283.507122][T13140] R13: 00007f19c0fe6038 R14: 00007f19c0fe5fa0 R15: 00007ffca2fa7f48
[  283.507158][T13140]  </TASK>
[  283.507168][T13140] ERROR: Out of memory at tomoyo_realpath_from_path.
[  283.755371][T13140] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input5
[  284.013446][T13164] syzkaller0: entered promiscuous mode
[  284.019045][T13164] syzkaller0: entered allmulticast mode
[  285.265202][T13184] __nla_validate_parse: 30 callbacks suppressed
[  285.265221][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2130'.
[  285.836276][T13169] bond0: option ad_select: unable to set because the bond device is up
[  285.892001][T13177] ip6_vti0 speed is unknown, defaulting to 1000
[  286.041495][T13202] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2132'.
[  286.261122][T13213] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.2135'.
[  286.445444][T13219] validate_nla: 38 callbacks suppressed
[  286.445461][T13219] netlink: 'syz.5.2138': attribute type 1 has an invalid length.
[  286.472206][T13219] netlink: 'syz.5.2138': attribute type 7 has an invalid length.
[  286.496005][T13219] netlink: 'syz.5.2138': attribute type 8 has an invalid length.
[  286.506256][T13219] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2138'.
[  286.517311][T13219] NCSI netlink: No device for ifindex 65584
[  286.562430][T13220] netlink: 'syz.5.2138': attribute type 1 has an invalid length.
[  286.575187][T13220] netlink: 'syz.5.2138': attribute type 7 has an invalid length.
[  286.591750][T13220] netlink: 'syz.5.2138': attribute type 8 has an invalid length.
[  286.599814][T13220] netlink: 208 bytes leftover after parsing attributes in process `syz.5.2138'.
[  286.609445][T13220] NCSI netlink: No device for ifindex 65584
[  286.616322][T13226] netlink: 'syz.1.2139': attribute type 1 has an invalid length.
[  286.627724][T13226] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2139'.
[  286.642964][T13226] workqueue: Failed to create a rescuer kthread for wq "phy2-mac-cmds": -EINTR
[  286.655014][T13227] netlink: 'syz.1.2139': attribute type 1 has an invalid length.
[  286.681197][T13227] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2139'.
[  286.710405][T13227] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR
[  286.872394][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2144'.
[  287.074940][T13254] vlan0: entered promiscuous mode
[  287.090411][T13254] vlan0: entered allmulticast mode
[  287.095582][T13254] veth0_vlan: entered allmulticast mode
[  287.179064][T13261] netem: change failed
[  287.276998][T13265] netlink: 'syz.6.2148': attribute type 1 has an invalid length.
[  287.285052][T13265] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2148'.
[  287.332595][T13265] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2148'.
[  287.360260][T13265] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  287.439263][T13265] batman_adv: batadv0: Removing interface: batadv_slave_1
[  287.567356][T13273] netlink: 'syz.5.2150': attribute type 8 has an invalid length.
[  287.673931][T13287] bridge: RTM_NEWNEIGH with invalid ether address
[  287.793100][T13289] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  287.800876][T13289] syzkaller0: entered promiscuous mode
[  287.806635][T13289] syzkaller0: entered allmulticast mode
[  287.848238][T13289] tipc: Resetting bearer <eth:syzkaller0>
[  287.876122][T13288] tipc: Resetting bearer <eth:syzkaller0>
[  287.938873][T13288] tipc: Disabling bearer <eth:syzkaller0>
[  287.956521][T13304] xt_l2tp: v2 doesn't support IP mode
[  288.886513][T13353] 8021q: adding VLAN 0 to HW filter on device bond6
[  288.944106][T13365] ip6t_srh: unknown srh match flags  5F28
[  288.950264][T13362] 8021q: adding VLAN 0 to HW filter on device bond0
[  288.974339][T13362] bond6: (slave bond0): Enslaving as an active interface with an up link
[  289.097457][T13353] bond6 (unregistering): (slave bond0): Releasing backup interface
[  289.117476][T13353] bond6 (unregistering): Released all slaves
[  289.325354][T13375] syzkaller0: entered promiscuous mode
[  289.343064][T13375] syzkaller0: entered allmulticast mode
[  289.470828][T13383] dummy0: entered promiscuous mode
[  289.486989][T13383] batman_adv: batadv0: Interface deactivated: dummy0
[  289.503297][T13383] batman_adv: batadv0: Removing interface: dummy0
[  289.512213][T13383] bridge0: port 3(dummy0) entered blocking state
[  289.529767][T13383] bridge0: port 3(dummy0) entered disabled state
[  289.552834][T13383] dummy0: entered allmulticast mode
[  291.020214][T13423] bond7: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  291.062386][T13423] bond7 (unregistering): Released all slaves
[  291.211143][T13432] __nla_validate_parse: 15 callbacks suppressed
[  291.211162][T13432] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2196'.
[  291.338148][T13443] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2199'.
[  291.349921][T13445] netdevsim netdevsim2 netdevsim0: left promiscuous mode
[  291.363522][T13445] batman_adv: batadv0: Adding interface: netdevsim0
[  291.388170][T13445] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1568 would solve the problem.
[  291.426246][T13445] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  291.497524][T13443] bond7 (unregistering): Released all slaves
[  291.753758][T13474] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  291.820876][T13480] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  291.872123][T13480] validate_nla: 7 callbacks suppressed
[  291.872141][T13480] netlink: 'syz.2.2207': attribute type 10 has an invalid length.
[  291.885917][T13484] netlink: 'syz.2.2207': attribute type 10 has an invalid length.
[  291.893959][ T5984] IPVS: starting estimator thread 0...
[  291.909621][T13484] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  291.981149][T13485] IPVS: using max 26 ests per chain, 62400 per kthread
[  292.146368][T13497] syzkaller0: entered promiscuous mode
[  292.152639][T13497] syzkaller0: entered allmulticast mode
[  292.440474][T13508] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2216'.
[  292.753114][T13519] netlink: 'syz.5.2219': attribute type 1 has an invalid length.
[  293.610935][T13519] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR
[  293.611378][T13509] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2216'.
[  293.775401][T13524] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2220'.
[  293.824309][T13527] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2222'.
[  293.839495][T13527] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes.
[  293.936431][T13535] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2225'.
[  293.971781][T13532] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2224'.
[  293.985194][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2228'.
[  293.994386][T13532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2224'.
[  294.141165][T13540] syzkaller0: entered promiscuous mode
[  294.162900][T13540] syzkaller0: entered allmulticast mode
[  294.498805][T13571] netlink: 'syz.6.2239': attribute type 1 has an invalid length.
[  294.864085][T13592] netlink: 'syz.1.2246': attribute type 2 has an invalid length.
[  294.901362][T13592] netlink: 'syz.1.2246': attribute type 2 has an invalid length.
[  295.762868][T13636] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  295.776157][T13636] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.049629][T13636] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.065386][T13636] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.200585][T13636] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.211670][T13636] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.381194][T13665] __nla_validate_parse: 3 callbacks suppressed
[  296.381214][T13665] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2266'.
[  296.453938][T13636] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  296.465270][T13636] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.502634][T13667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2266'.
[  296.671800][ T6809] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  296.682150][ T6809] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.708274][ T6809] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  296.726881][ T6809] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.768890][ T6809] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  296.788574][ T6809] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.818020][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'.
[  296.827987][T13673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2268'.
[  296.859269][ T6809] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  296.867945][ T6809] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.976293][T13679] netlink: 'syz.6.2270': attribute type 3 has an invalid length.
[  296.994481][T13680] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2269'.
[  297.025820][T13686] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2271'.
[  297.071885][T13680] 8021q: adding VLAN 0 to HW filter on device bond4
[  297.081857][T13684] netlink: 'syz.1.2271': attribute type 13 has an invalid length.
[  297.112526][T13684] 
: left promiscuous mode
[  297.117657][T13684] macvtap0: entered allmulticast mode
[  297.141658][T13684] macvtap0: refused to change device tx_queue_len
[  297.190086][T13687] vlan3: entered allmulticast mode
[  297.203760][T13687] bond4: entered allmulticast mode
[  297.251530][T13697] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2276'.
[  297.260788][T13697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2276'.
[  297.647424][T13724] bond5: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  297.664560][T13724] bond5 (unregistering): Released all slaves
[  297.845636][T13742] sctp: Trying to GSO but underlying device doesn't support it.
[  297.872102][T13727] team0 (unregistering): Port device C removed
[  297.914873][T13727] team0 (unregistering): Port device team_slave_1 removed
[  297.947072][T13727] team0 (unregistering): Port device bond0 removed
[  297.984789][ T5946] syz1: Port: 1 Link DOWN
[  298.231399][T13767] netlink: 'syz.6.2290': attribute type 7 has an invalid length.
[  298.239206][T13767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2290'.
[  298.305592][T13770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2294'.
[  298.423188][   T24] IPVS: starting estimator thread 0...
[  298.444186][T13780] netlink: 'syz.2.2298': attribute type 10 has an invalid length.
[  298.463076][T13780] syz_tun: entered promiscuous mode
[  298.520198][T13777] IPVS: using max 28 ests per chain, 67200 per kthread
[  298.614695][T13791] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  298.744621][T13802] syzkaller0: entered promiscuous mode
[  298.753600][T13802] syzkaller0: entered allmulticast mode
[  298.766152][T13805] netlink: 'syz.1.2306': attribute type 1 has an invalid length.
[  298.816664][T13805] 8021q: adding VLAN 0 to HW filter on device bond7
[  298.892162][T13811] netlink: 'syz.6.2308': attribute type 1 has an invalid length.
[  298.990876][T13815] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  299.004120][T13815] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  299.015826][T13815] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  299.381118][T13835] netlink: 'syz.1.2318': attribute type 1 has an invalid length.
[  299.509098][T13835] gretap2: entered allmulticast mode
[  300.019523][T13865] netlink: 'syz.0.2323': attribute type 11 has an invalid length.
[  300.028414][T13865] netlink: 'syz.0.2323': attribute type 11 has an invalid length.
[  300.289553][T13883] netlink: 'syz.6.2329': attribute type 4 has an invalid length.
[  300.396035][T13883] netlink: 'syz.6.2329': attribute type 83 has an invalid length.
[  300.627018][T13913] netlink: 'syz.6.2338': attribute type 7 has an invalid length.
[  300.757623][T13923] tipc: Enabling of bearer <ib:ca> rejected, failed to enable media
[  300.781985][T13923] syzkaller1: entered promiscuous mode
[  300.787530][T13923] syzkaller1: entered allmulticast mode
[  300.847485][T13930] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.927855][T13930] tipc: Disabling bearer <eth:syzkaller0>
[  301.190357][T13953] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  301.274994][T13957] xt_hashlimit: max too large, truncated to 1048576
[  301.522967][T13975] 8021q: adding VLAN 0 to HW filter on device bond11
[  301.551667][T13975] __nla_validate_parse: 12 callbacks suppressed
[  301.551686][T13975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2357'.
[  301.627654][T13975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2357'.
[  301.641656][T13975] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2357'.
[  301.726085][T13990] syzkaller1: entered promiscuous mode
[  301.750128][T13990] syzkaller1: entered allmulticast mode
[  301.799068][T13994] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2364'.
[  301.915123][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2369'.
[  302.172938][T14027] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'.
[  302.246761][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'.
[  302.471101][T14038] syzkaller1: entered promiscuous mode
[  302.477631][T14043] validate_nla: 5 callbacks suppressed
[  302.477648][T14043] netlink: 'syz.0.2376': attribute type 3 has an invalid length.
[  302.477767][T14038] syzkaller1: entered allmulticast mode
[  302.484875][T14044] netlink: 'syz.0.2376': attribute type 3 has an invalid length.
[  302.508425][T14043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2376'.
[  302.516175][T14044] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2376'.
[  302.692723][T14053] netlink: 'syz.1.2379': attribute type 18 has an invalid length.
[  302.700884][T14053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'.
[  302.712401][T14053] netlink: 'syz.1.2379': attribute type 18 has an invalid length.
[  302.777257][T14053] syzkaller0: entered promiscuous mode
[  302.782894][T14053] syzkaller0: entered allmulticast mode
[  302.824443][T14052] Cannot find add_set index 0 as target
[  303.029764][T14070] x_tables: ip_tables: icmp match: only valid for protocol 1
[  303.308602][T14084] syzkaller0: entered promiscuous mode
[  303.339861][T14084] syzkaller0: entered allmulticast mode
[  305.520871][T14160] bond12: option lp_interval: invalid value (0)
[  305.527226][T14160] bond12: option lp_interval: allowed values 1 - 2147483647
[  305.542647][T14160] bond12 (unregistering): Released all slaves
[  305.773251][T14175] netlink: 'syz.5.2405': attribute type 2 has an invalid length.
[  305.958892][T14185] netlink: 'syz.0.2409': attribute type 2 has an invalid length.
[  305.988539][T14185] netlink: 'syz.0.2409': attribute type 11 has an invalid length.
[  306.155596][T14199] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  306.621115][T14220] __nla_validate_parse: 9 callbacks suppressed
[  306.621133][T14220] netlink: 61 bytes leftover after parsing attributes in process `syz.1.2422'.
[  306.723246][T14223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2424'.
[  306.768064][T14224] syzkaller0: entered promiscuous mode
[  306.781013][T14224] syzkaller0: entered allmulticast mode
[  307.550343][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2431'.
[  307.759682][T14252] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2433'.
[  307.912397][T14255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'.
[  308.013534][T14257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2436'.
[  308.295599][T14268] unsupported nla_type 33542
[  308.571177][T14284] IPVS: Error joining to the multicast group
[  308.581147][T14284] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2445'.
[  308.646197][T14284] bond8 (unregistering): Released all slaves
[  308.692530][T14293] netlink: 'syz.2.2447': attribute type 3 has an invalid length.
[  308.700681][T14293] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2447'.
[  308.803106][T14299] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci6/hci6:200/input6
[  308.879621][T14304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2450'.
[  308.958956][T14308] syzkaller0: entered promiscuous mode
[  308.967072][T14308] syzkaller0: entered allmulticast mode
[  308.988100][T14309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2452'.
[  309.058914][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ace9c00: rx timeout, send abort
[  309.069030][    C0] vcan0: j1939_tp_rxtimer: 0xffff88807ace9000: rx timeout, send abort
[  309.078762][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ace9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  309.094140][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ace9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  309.191217][T14316] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  309.283257][T14316] batman_adv: batadv0: Removing interface: batadv_slave_1
[  309.322382][T14319] sctp: [Deprecated]: syz.1.2456 (pid 14319) Use of int in maxseg socket option.
[  309.322382][T14319] Use struct sctp_assoc_value instead
[  309.340806][T14320] netlink: 'syz.1.2456': attribute type 39 has an invalid length.
[  309.348762][T14319] netlink: 'syz.1.2456': attribute type 39 has an invalid length.
[  309.383771][T14320] syz_tun (unregistering): left allmulticast mode
[  309.393068][T14323] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR
[  309.394603][T14323] block (null): Could not allocate knbd recv work queue.
[  309.411831][T14320] bond0: (slave syz_tun): Releasing backup interface
[  309.452111][T14323] nbd: failed to add new device
[  309.592358][T14335] delete_channel: no stack
[  309.787285][T14349] netlink: 'syz.1.2461': attribute type 2 has an invalid length.
[  310.842433][T14383] netlink: 'syz.2.2472': attribute type 16 has an invalid length.
[  310.852918][T14383] netlink: 'syz.2.2472': attribute type 3 has an invalid length.
[  310.862486][T14383] netlink: 'syz.2.2472': attribute type 1 has an invalid length.
[  310.882684][T14383] netlink: 'syz.2.2472': attribute type 1 has an invalid length.
[  311.106303][T14400] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  311.181759][T14404] netlink: zone id is out of range
[  311.186939][T14404] netlink: zone id is out of range
[  311.193296][T14404] netlink: zone id is out of range
[  311.198513][T14404] netlink: zone id is out of range
[  311.205724][T14404] netlink: zone id is out of range
[  311.212602][T14404] netlink: zone id is out of range
[  311.217829][T14404] netlink: zone id is out of range
[  311.223486][T14404] netlink: zone id is out of range
[  311.228675][T14404] netlink: zone id is out of range
[  311.411238][T14415] netlink: 'syz.2.2485': attribute type 83 has an invalid length.
[  311.507448][T14419] netlink: 'syz.0.2487': attribute type 1 has an invalid length.
[  311.531524][T14419] xt_hashlimit: size too large, truncated to 1048576
[  311.828786][T14442] __nla_validate_parse: 14 callbacks suppressed
[  311.828805][T14442] netlink: 120 bytes leftover after parsing attributes in process `syz.5.2497'.
[  311.880580][T14442] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2497'.
[  313.104629][T14481] gre1: entered promiscuous mode
[  313.109718][T14481] gre1: entered allmulticast mode
[  313.526084][T14510] tipc: Enabled bearer <eth:veth0_to_team>, priority 0
[  313.582184][T14513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2519'.
[  313.608505][T14517] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2518'.
[  313.746473][T14526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2522'.
[  313.769773][T14526] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2522'.
[  313.956754][T14534] syzkaller0: entered promiscuous mode
[  313.962515][T14534] syzkaller0: entered allmulticast mode
[  313.971175][T14544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2527'.
[  314.065879][T14550] ieee802154 phy0 wpan0: encryption failed: -22
[  314.107329][T14549] veth1_to_bridge: entered promiscuous mode
[  314.120830][T14549] macvtap1: entered promiscuous mode
[  314.126380][T14549] macvtap1: entered allmulticast mode
[  314.134720][T14549] veth1_to_bridge: entered allmulticast mode
[  314.667165][T14592] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2542'.
[  314.776148][T14596] validate_nla: 2 callbacks suppressed
[  314.776166][T14596] netlink: 'syz.1.2545': attribute type 1 has an invalid length.
[  314.828416][T14600] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2546'.
[  316.134311][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  316.144347][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  316.152597][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  316.161564][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  316.169340][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  316.199496][T14601] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address
[  316.211360][T14601] bond8: (slave vxcan1): Error -95 calling set_mac_address
[  316.236002][T14610] macvlan3: entered promiscuous mode
[  316.242053][T14610] macvlan3: entered allmulticast mode
[  316.248358][T14610] bond8: entered promiscuous mode
[  316.256297][T14610] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  316.268916][T14610] bond8: left promiscuous mode
[  316.316637][T14622] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 !
[  316.331625][T14623] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 !
[  316.377657][T14618] ip6_vti0 speed is unknown, defaulting to 1000
[  316.557451][T14635] netlink: 'syz.2.2554': attribute type 3 has an invalid length.
[  316.580575][T14637] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2551'.
[  316.700454][T14640] bond5: option lp_interval: invalid value (0)
[  316.738368][T14640] bond5: option lp_interval: allowed values 1 - 2147483647
[  316.746850][T14646] xt_CT: You must specify a L4 protocol and not use inversions on it
[  316.762550][T14640] bond5 (unregistering): Released all slaves
[  316.799680][T14647] tipc: Enabling of bearer <eth:s> rejected, failed to enable media
[  316.954645][T14659] __nla_validate_parse: 1 callbacks suppressed
[  316.954664][T14659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2560'.
[  317.105167][T14618] chnl_net:caif_netlink_parms(): no params data found
[  317.129290][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.142763][T14668] netlink: 'syz.5.2563': attribute type 1 has an invalid length.
[  317.248951][T14675] bond5: (slave veth7): Enslaving as an active interface with a down link
[  317.264801][T14668] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2563'.
[  317.282233][T14668] 8021q: adding VLAN 0 to HW filter on device bond5
[  317.407121][T14685] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2567'.
[  317.430572][T14685] block nbd0: not configured, cannot reconfigure
[  317.448923][T14685] nbd: must specify an index to disconnect
[  317.457255][T14618] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.482488][T14618] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.492842][T14618] bridge_slave_0: entered allmulticast mode
[  317.508533][T14618] bridge_slave_0: entered promiscuous mode
[  317.518650][T14618] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.527084][T14618] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.534592][T14618] bridge_slave_1: entered allmulticast mode
[  317.542520][T14618] bridge_slave_1: entered promiscuous mode
[  317.605092][T14618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  317.640214][T14692] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2570'.
[  317.657219][T14618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  317.659643][T14692] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2570'.
[  317.701006][T14692] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2570'.
[  317.710456][T14692] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2570'.
[  317.719678][T14692] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2570'.
[  317.729070][T14692] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2570'.
[  317.740564][T14692] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2570'.
[  317.788715][T14618] team0: Port device team_slave_0 added
[  317.808231][T14618] team0: Port device team_slave_1 added
[  317.896803][T14618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.912734][T14618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  317.984582][T14618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.997320][T14618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  318.005364][T14618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  318.033110][T14618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  318.216425][T14618] hsr_slave_0: entered promiscuous mode
[  318.240986][ T5834] Bluetooth: hci7: command tx timeout
[  318.253089][T14618] hsr_slave_1: entered promiscuous mode
[  318.267995][T14618] debugfs: 'hsr0' already exists in 'hsr'
[  318.287605][T14618] Cannot create hsr debugfs directory
[  318.524039][T14753] x_tables: duplicate underflow at hook 3
[  318.734830][T14758] rdma_op ffff8880573579f0 conn xmit_rdma 0000000000000000
[  319.112857][T14618] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  319.160547][T14618] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  319.206605][T14618] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  319.237341][T14618] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  319.283292][T14798] syzkaller0: entered promiscuous mode
[  319.289196][T14798] syzkaller0: entered allmulticast mode
[  319.297312][T14800] netlink: 'syz.1.2600': attribute type 9 has an invalid length.
[  319.391245][T14808] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  319.643311][T14826] veth0_virt_wifi: renamed from veth0_vlan (while UP)
[  319.777894][T14618] 8021q: adding VLAN 0 to HW filter on device bond0
[  319.836626][T14618] 8021q: adding VLAN 0 to HW filter on device team0
[  319.889240][ T3913] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.896490][ T3913] bridge0: port 1(bridge_slave_0) entered forwarding state
[  319.962574][ T3913] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.969869][ T3913] bridge0: port 2(bridge_slave_1) entered forwarding state
[  320.297930][T14860] syzkaller1: entered promiscuous mode
[  320.320954][ T5834] Bluetooth: hci7: command tx timeout
[  320.339595][T14860] syzkaller1: entered allmulticast mode
[  320.447872][T14618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  320.715109][T14879] syzkaller0: entered promiscuous mode
[  320.721365][T14879] syzkaller0: entered allmulticast mode
[  320.756090][T14883] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR
[  322.295680][T14912] bond0: entered promiscuous mode
[  322.311478][T14912] bond_slave_0: entered promiscuous mode
[  322.317348][T14912] bond_slave_1: entered promiscuous mode
[  322.326254][T14912] batadv0: entered promiscuous mode
[  322.335996][T14912] hsr1: entered allmulticast mode
[  322.341790][T14912] bond0: entered allmulticast mode
[  322.347091][T14912] bond_slave_0: entered allmulticast mode
[  322.354262][T14912] bond_slave_1: entered allmulticast mode
[  322.360792][T14912] batadv0: entered allmulticast mode
[  322.366579][T14912] 8021q: adding VLAN 0 to HW filter on device hsr1
[  322.379437][T14912] bond0: left promiscuous mode
[  322.392337][T14912] bond_slave_0: left promiscuous mode
[  322.399172][T14912] bond_slave_1: left promiscuous mode
[  322.404894][ T5834] Bluetooth: hci7: command tx timeout
[  322.414657][T14912] batadv0: left promiscuous mode
[  322.461180][T14921] netlink: 'syz.1.2629': attribute type 10 has an invalid length.
[  322.523914][T14921] netlink: 'syz.1.2629': attribute type 1 has an invalid length.
[  322.558095][T14916] net_ratelimit: 111 callbacks suppressed
[  322.558115][T14916] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  322.627963][T14916] bond12: option packets_per_slave: mode dependency failed, not supported in mode active-backup(1)
[  322.654067][T14916] bond12 (unregistering): Released all slaves
[  322.699320][T14618] veth0_vlan: entered promiscuous mode
[  322.727761][T14618] veth1_vlan: entered promiscuous mode
[  322.773301][T14937] __nla_validate_parse: 7 callbacks suppressed
[  322.773320][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2631'.
[  322.893326][T14618] veth0_macvtap: entered promiscuous mode
[  322.916687][T14618] veth1_macvtap: entered promiscuous mode
[  322.946467][T14618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  322.984797][T14618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  323.028409][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'.
[  323.038715][ T7253] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  323.051304][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'.
[  323.062867][ T7253] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  323.072062][T14942] netlink: 'syz.1.2635': attribute type 6 has an invalid length.
[  323.084528][ T7253] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  323.095175][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2635'.
[  323.110319][ T7253] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  323.129824][T14940] syzkaller0: entered promiscuous mode
[  323.137962][T14940] syzkaller0: entered allmulticast mode
[  323.152215][T14942] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2635'.
[  323.186481][T14942] netlink: 'syz.1.2635': attribute type 6 has an invalid length.
[  323.332141][ T7255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.356823][ T7255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.410443][T14950] netlink: zone id is out of range
[  323.415722][T14950] netlink: zone id is out of range
[  323.432270][T14955] netlink: 'syz.2.2640': attribute type 1 has an invalid length.
[  323.434318][ T7255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  323.448565][ T7255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  323.462204][T14950] netlink: zone id is out of range
[  323.467450][T14950] netlink: zone id is out of range
[  323.477811][T14950] netlink: zone id is out of range
[  323.483353][T14955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2640'.
[  323.497667][T14950] netlink: zone id is out of range
[  323.503726][T14950] netlink: zone id is out of range
[  323.509247][T14950] netlink: zone id is out of range
[  323.516064][T14950] netlink: zone id is out of range
[  323.532531][T14955] netlink: 'syz.2.2640': attribute type 3 has an invalid length.
[  323.609025][T14950] bond0: entered promiscuous mode
[  323.636065][T14950] bond_slave_0: entered promiscuous mode
[  323.647549][T14950] bond_slave_1: entered promiscuous mode
[  323.656110][T14950] batadv0: entered promiscuous mode
[  323.711186][T14950] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  323.725630][T14950] hsr1: entered allmulticast mode
[  323.735698][T14950] bond0: entered allmulticast mode
[  323.752389][T14950] bond_slave_0: entered allmulticast mode
[  323.767518][T14950] bond_slave_1: entered allmulticast mode
[  323.773560][T14950] batadv0: entered allmulticast mode
[  323.785111][T14950] 8021q: adding VLAN 0 to HW filter on device hsr1
[  323.797639][T14950] bond0: left promiscuous mode
[  323.803399][T14950] bond_slave_0: left promiscuous mode
[  323.809198][T14950] bond_slave_1: left promiscuous mode
[  323.820748][T14950] batadv0: left promiscuous mode
[  324.009339][T14983] xt_policy: output policy not valid in PREROUTING and INPUT
[  324.024628][T14988] netlink: 720 bytes leftover after parsing attributes in process `syz.5.2647'.
[  324.417413][T15023] sctp: [Deprecated]: syz.0.2655 (pid 15023) Use of struct sctp_assoc_value in delayed_ack socket option.
[  324.417413][T15023] Use struct sctp_sack_info instead
[  324.480054][ T5834] Bluetooth: hci7: command tx timeout
[  324.509565][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'.
[  324.520947][T15026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2656'.
[  324.531236][T15026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'.
[  325.078839][T15058] netlink: 'syz.7.2665': attribute type 1 has an invalid length.
[  325.148816][T15066] netlink: 'syz.5.2668': attribute type 4 has an invalid length.
[  325.349360][T15074] bond6: entered promiscuous mode
[  325.376023][T15074] bond6: entered allmulticast mode
[  325.391262][T15074] 8021q: adding VLAN 0 to HW filter on device bond6
[  325.892222][T15111] ip6_vti0 speed is unknown, defaulting to 1000
[  326.194139][T15133] sctp: [Deprecated]: syz.2.2690 (pid 15133) Use of struct sctp_assoc_value in delayed_ack socket option.
[  326.194139][T15133] Use struct sctp_sack_info instead
[  326.272275][T15137] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20000
[  326.495942][T15141] xt_hashlimit: size too large, truncated to 1048576
[  326.521054][T15145] netlink: 'syz.2.2693': attribute type 4 has an invalid length.
[  326.565633][T15145] netlink: 'syz.2.2693': attribute type 4 has an invalid length.
[  326.723715][T15141] bond12: Unable to set peer notification delay as MII monitoring is disabled
[  326.736407][T15141] bond12 (unregistering): Released all slaves
[  327.425007][T15198] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  327.684299][T15214] net_ratelimit: 53 callbacks suppressed
[  327.684318][T15214] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  327.700735][T15211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  327.795668][T15219] validate_nla: 4 callbacks suppressed
[  327.795688][T15219] netlink: 'syz.2.2713': attribute type 2 has an invalid length.
[  327.817658][T15225] netlink: 'syz.1.2714': attribute type 2 has an invalid length.
[  327.826657][T15225] __nla_validate_parse: 27 callbacks suppressed
[  327.826672][T15225] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2714'.
[  328.319265][T15255] IPVS: set_ctl: invalid protocol: 25965 114.121.46.101:30309
[  328.331139][T15257] netdevsim netdevsim1: Direct firmware load for . failed with error -2
[  328.352471][T15257] netdevsim netdevsim1: Falling back to sysfs fallback for: .
[  328.449787][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'.
[  328.525984][T15271] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2727'.
[  328.537831][T15271] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2727'.
[  328.684355][T15279] openvswitch: netlink: IPv4 tunnel dst address is zero
[  328.699129][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2730'.
[  328.816546][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2732'.
[  328.921466][T15286] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2732'.
[  329.005050][T15299] netlink: 212304 bytes leftover after parsing attributes in process `syz.7.2735'.
[  329.017983][T15299] openvswitch: netlink: Message has 6 unknown bytes.
[  329.027595][T15299] netlink: 'syz.7.2735': attribute type 2 has an invalid length.
[  329.042285][T15299] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2735'.
[  329.056446][T15299] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2735'.
[  329.131831][T15303] netlink: 'syz.5.2736': attribute type 11 has an invalid length.
[  329.764406][T15350] gretap0: entered promiscuous mode
[  329.785763][T15350] gretap0: left promiscuous mode
[  329.812744][T15350] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  330.085742][T15307] delete_channel: no stack
[  330.204546][T15371] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  330.215503][T15368] sctp: [Deprecated]: syz.7.2755 (pid 15368) Use of int in maxseg socket option.
[  330.215503][T15368] Use struct sctp_assoc_value instead
[  330.507918][T15368] netlink: 'syz.7.2755': attribute type 1 has an invalid length.
[  331.035937][T15425] gretap2: entered promiscuous mode
[  331.043506][T15425] gretap2: entered allmulticast mode
[  331.243100][T15437] ieee802154 phy0 wpan0: encryption failed: -22
[  331.289693][T15445] netlink: 'syz.2.2780': attribute type 15 has an invalid length.
[  331.505466][T15461] openvswitch: netlink: IPv4 tunnel dst address is zero
[  331.552541][T15456] TCP: TCP_TX_DELAY enabled
[  331.629602][T15449] syzkaller0: entered promiscuous mode
[  331.635437][T15449] syzkaller0: entered allmulticast mode
[  333.490094][T15503] veth0_virt_wifi: entered promiscuous mode
[  333.491430][T15504] __nla_validate_parse: 17 callbacks suppressed
[  333.491479][T15504] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2796'.
[  333.496102][T15503] veth0_virt_wifi: entered allmulticast mode
[  333.556105][ T5843] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  333.567382][ T5843] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  333.578525][ T5843] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  333.591152][T15502] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2796'.
[  333.606336][ T5843] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  333.614154][ T5843] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  333.623833][T15511] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  333.704471][T15506] ip6_vti0 speed is unknown, defaulting to 1000
[  333.942379][T15529] netlink: 'syz.1.2801': attribute type 2 has an invalid length.
[  334.090618][ T5839] bond0: (slave syz_tun): Releasing backup interface
[  334.131693][T15534] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2803'.
[  334.190400][T15536] netlink: 'syz.1.2804': attribute type 1 has an invalid length.
[  334.383105][T15544] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0
[  334.485598][T15549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'.
[  334.546249][T15555] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2807'.
[  334.557729][T15551] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  334.687149][T15506] chnl_net:caif_netlink_parms(): no params data found
[  334.833376][T15574] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2813'.
[  334.864720][T15506] bridge0: port 1(bridge_slave_0) entered blocking state
[  334.872760][T15506] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.881385][T15506] bridge_slave_0: entered allmulticast mode
[  334.889540][T15506] bridge_slave_0: entered promiscuous mode
[  334.901090][T15506] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.908468][T15506] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.916894][T15506] bridge_slave_1: entered allmulticast mode
[  334.924877][T15506] bridge_slave_1: entered promiscuous mode
[  334.994267][T15506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  335.018758][T15506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  335.086749][T15506] team0: Port device team_slave_0 added
[  335.094110][T15580] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2816'.
[  335.121333][T15580] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2816'.
[  335.143439][T15506] team0: Port device team_slave_1 added
[  335.205566][T15585] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2817'.
[  335.223201][T15585] netlink: 'syz.0.2817': attribute type 2 has an invalid length.
[  335.231414][T15585] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2817'.
[  335.261136][T15506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  335.278692][T15506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.317649][T15506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.333134][T15506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.341460][T15506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  335.409899][T15506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.497736][T15595] netlink: 'syz.1.2822': attribute type 3 has an invalid length.
[  335.527700][T15506] hsr_slave_0: entered promiscuous mode
[  335.535420][T15506] hsr_slave_1: entered promiscuous mode
[  335.549034][T15506] debugfs: 'hsr0' already exists in 'hsr'
[  335.555506][T15506] Cannot create hsr debugfs directory
[  335.561310][ T3913] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  335.624555][ T3913] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  335.657176][ T3913] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  335.682695][ T5843] Bluetooth: hci8: command tx timeout
[  335.737827][ T3913] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  336.132477][T15506] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.196080][T15629] sctp: [Deprecated]: syz.1.2830 (pid 15629) Use of int in maxseg socket option.
[  336.196080][T15629] Use struct sctp_assoc_value instead
[  336.359128][T15506] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.441922][T15641] bridge0: port 1(bridge_slave_0) entered disabled state
[  336.631382][T15506] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.671921][T15654] netlink: 'syz.5.2840': attribute type 1 has an invalid length.
[  336.735391][T15506] batman_adv: batadv0: Removing interface: netdevsim0
[  336.744479][T15506] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.782722][T15654] xt_HMARK: proto mask must be zero with L3 mode
[  336.816416][T15658] bond6: (slave ip6gretap1): making interface the new active one
[  336.838541][T15658] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link
[  336.938021][T15663] bond12: entered promiscuous mode
[  336.968883][T15663] bond12: entered allmulticast mode
[  336.986039][T15663] 8021q: adding VLAN 0 to HW filter on device bond12
[  337.173631][T15506] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  337.242151][T15506] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  337.329428][T15679] netlink: 'syz.1.2847': attribute type 2 has an invalid length.
[  337.399807][T15679] �9: entered promiscuous mode
[  337.416308][T15506] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  337.677727][T15506] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  337.760558][ T5843] Bluetooth: hci8: command tx timeout
[  337.829304][T15707] tls_set_device_offload_rx: netdev not found
[  337.978287][T15506] 8021q: adding VLAN 0 to HW filter on device bond0
[  338.009399][T15506] 8021q: adding VLAN 0 to HW filter on device team0
[  338.025590][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.032804][ T7249] bridge0: port 1(bridge_slave_0) entered forwarding state
[  338.067560][T15719] netlink: 'syz.0.2858': attribute type 6 has an invalid length.
[  338.077019][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.084210][ T7249] bridge0: port 2(bridge_slave_1) entered forwarding state
[  338.098746][T15719] block nbd0: not configured, cannot reconfigure
[  338.267913][T15729] netlink: 'syz.0.2860': attribute type 10 has an invalid length.
[  338.293434][T15729] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  338.544745][T15506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  338.616957][T15506] veth0_vlan: entered promiscuous mode
[  338.641630][T15506] veth1_vlan: entered promiscuous mode
[  338.686669][T15506] veth0_macvtap: entered promiscuous mode
[  338.703634][T15506] veth1_macvtap: entered promiscuous mode
[  338.757172][T15506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.795742][T15506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  338.813080][T15756] __nla_validate_parse: 9 callbacks suppressed
[  338.813101][T15756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2865'.
[  338.837780][ T7253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  338.872726][ T7253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  338.894541][ T2973] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  338.914583][ T2973] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  339.059098][T15760] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.066765][T15760] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.144309][T15749] tap0: tun_chr_ioctl cmd 2148553947
[  339.204163][T15767] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  339.219180][T15767] syzkaller0: entered promiscuous mode
[  339.225462][T15767] syzkaller0: entered allmulticast mode
[  339.249059][ T7254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.262174][ T7254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.307126][T15771] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2871'.
[  339.369396][T15772] tipc: Resetting bearer <eth:syzkaller0>
[  339.405904][T15771] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2871'.
[  339.421041][T15766] tipc: Resetting bearer <eth:syzkaller0>
[  339.435407][T15766] tipc: Disabling bearer <eth:syzkaller0>
[  339.457234][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  339.486913][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  339.515604][T15771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2871'.
[  339.698560][T15789] netlink: 'syz.2.2791': attribute type 33 has an invalid length.
[  339.737072][T15789] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2791'.
[  339.842934][ T5843] Bluetooth: hci8: command tx timeout
[  340.051436][T15806] netlink: 'syz.7.2880': attribute type 11 has an invalid length.
[  340.075362][T15806] netlink: 199816 bytes leftover after parsing attributes in process `syz.7.2880'.
[  340.175138][T15809] netlink: 'syz.5.2884': attribute type 1 has an invalid length.
[  340.217600][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  340.230480][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  340.242063][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  340.252257][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  340.261187][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  340.297836][T15809] 8021q: adding VLAN 0 to HW filter on device bond7
[  340.319075][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2885'.
[  340.334283][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2885'.
[  340.396555][T15814] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2884'.
[  340.479263][ T5832] bond0: (slave syz_tun): Releasing backup interface
[  340.494553][T15811] ip6_vti0 speed is unknown, defaulting to 1000
[  340.505309][T15820] netlink: 280 bytes leftover after parsing attributes in process `syz.1.2886'.
[  340.594682][T15822] netlink: zone id is out of range
[  340.614059][T15822] netlink: zone id is out of range
[  340.623981][T15822] netlink: zone id is out of range
[  340.644659][T15822] netlink: get zone limit has 4 unknown bytes
[  340.664481][T15825] SET target dimension over the limit!
[  340.791132][T15827] netlink: 'syz.5.2888': attribute type 10 has an invalid length.
[  340.906410][T15833] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  340.939194][T15833] netlink: 'syz.5.2888': attribute type 3 has an invalid length.
[  341.100240][T15844] netlink: 'syz.7.2893': attribute type 3 has an invalid length.
[  341.413115][T15859] openvswitch: netlink: Key type 217 is out of range max 32
[  341.498698][T15864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  341.922235][ T5834] Bluetooth: hci8: command tx timeout
[  342.321195][ T5834] Bluetooth: hci2: command tx timeout
[  342.375697][ T7251] bond3 (unregistering): (slave gretap1): Releasing active interface
[  342.386746][ T7251] gretap1 (unregistering): left allmulticast mode
[  342.851303][ T7251] bond0 (unregistering): Released all slaves
[  342.972517][ T7251] bond1 (unregistering): Released all slaves
[  342.993156][ T7251] bond2 (unregistering): Released all slaves
[  343.115754][ T7251] bond3 (unregistering): Released all slaves
[  343.134938][ T7251] bond4 (unregistering): Released all slaves
[  343.151925][ T7251] bond5 (unregistering): Released all slaves
[  343.173208][ T7251] bond6 (unregistering): Released all slaves
[  343.294302][ T7251] bond7 (unregistering): Released all slaves
[  343.407954][ T7251] bond8 (unregistering): Released all slaves
[  343.425903][ T7251] bond9 (unregistering): Released all slaves
[  343.443459][ T7251] bond10 (unregistering): Released all slaves
[  343.562697][ T7251] bond11 (unregistering): Released all slaves
[  343.672063][ T7251] bond12 (unregistering): Released all slaves
[  343.775431][T15811] chnl_net:caif_netlink_parms(): no params data found
[  343.835189][ T7251] �9: left promiscuous mode
[  343.969467][T15905] __nla_validate_parse: 9 callbacks suppressed
[  343.969488][T15905] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2909'.
[  344.045536][ T7251] tipc: Disabling bearer <udp:syz2>
[  344.070967][ T7251] tipc: Disabling bearer <udp:syz1>
[  344.078330][ T7251] tipc: Left network mode
[  344.413074][ T5834] Bluetooth: hci2: command tx timeout
[  344.457431][T15811] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.475484][T15811] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.493376][T15811] bridge_slave_0: entered allmulticast mode
[  344.512086][T15811] bridge_slave_0: entered promiscuous mode
[  344.552064][T15811] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.569215][T15811] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.577343][T15811] bridge_slave_1: entered allmulticast mode
[  344.585479][T15811] bridge_slave_1: entered promiscuous mode
[  344.846579][T15811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.893958][T15811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  345.106809][T15811] team0: Port device team_slave_0 added
[  345.152671][T15811] team0: Port device team_slave_1 added
[  345.310924][T15950] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2921'.
[  345.411771][ T7251] hsr_slave_0: left promiscuous mode
[  345.422417][ T7251] hsr_slave_1: left promiscuous mode
[  345.660609][ T7251] pim6reg (unregistering): left allmulticast mode
[  346.480776][ T5834] Bluetooth: hci2: command tx timeout
[  346.565696][   T31] INFO: task syz.4.1389:10775 blocked for more than 143 seconds.
[  346.590114][   T31]       Not tainted syzkaller #0
[  346.595116][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  346.604757][   T31] task:syz.4.1389      state:D stack:25400 pid:10775 tgid:10774 ppid:5838   task_flags:0x400140 flags:0x00080002
[  346.622853][   T31] Call Trace:
[  346.626240][   T31]  <TASK>
[  346.629306][   T31]  __schedule+0x149b/0x4fd0
[  346.634409][   T31]  ? __pfx___schedule+0x10/0x10
[  346.639374][   T31]  ? schedule+0x91/0x360
[  346.644504][   T31]  schedule+0x165/0x360
[  346.648824][   T31]  schedule_preempt_disabled+0x13/0x30
[  346.654748][   T31]  __mutex_lock+0x7e6/0x1350
[  346.659454][   T31]  ? __mutex_lock+0x5bb/0x1350
[  346.665872][   T31]  ? nfsd_nl_version_get_doit+0x16e/0xb60
[  346.672461][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  346.677614][   T31]  ? __nlmsg_put+0xef/0x1b0
[  346.684105][   T31]  ? genlmsg_put+0x137/0x2e0
[  346.688823][   T31]  nfsd_nl_version_get_doit+0x16e/0xb60
[  346.694951][   T31]  ? kmem_cache_free+0x197/0x620
[  346.700401][   T31]  ? nlmon_xmit+0xb0/0x100
[  346.704885][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  346.712542][   T31]  ? dev_hard_start_xmit+0x793/0x800
[  346.717868][   T31]  genl_family_rcv_msg_doit+0x215/0x300
[  346.724752][   T31]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  346.731284][   T31]  ? __dev_queue_xmit+0x280/0x3100
[  346.736460][   T31]  genl_rcv_msg+0x60e/0x790
[  346.741057][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  346.746114][   T31]  ? __pfx_nfsd_nl_version_get_doit+0x10/0x10
[  346.752274][   T31]  ? __asan_memcpy+0x40/0x70
[  346.756914][   T31]  ? __pfx_ref_tracker_free+0x10/0x10
[  346.762662][   T31]  ? __skb_clone+0x63/0x7a0
[  346.768210][   T31]  netlink_rcv_skb+0x208/0x470
[  346.773144][   T31]  ? __pfx_genl_rcv_msg+0x10/0x10
[  346.778308][   T31]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  346.783765][   T31]  ? genl_rcv+0x19/0x40
[  346.787980][   T31]  ? down_read+0x274/0x2e0
[  346.792834][   T31]  ? genl_rcv+0xd/0x40
[  346.796938][   T31]  genl_rcv+0x28/0x40
[  346.801599][   T31]  netlink_unicast+0x82f/0x9e0
[  346.806399][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[  346.811806][   T31]  ? __alloc_skb+0x198/0x3a0
[  346.816424][   T31]  ? netlink_sendmsg+0x642/0xb30
[  346.821881][   T31]  ? skb_put+0x11b/0x210
[  346.826160][   T31]  netlink_sendmsg+0x805/0xb30
[  346.831436][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.836772][   T31]  ? aa_sock_msg_perm+0xf1/0x1b0
[  346.841967][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  346.847289][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[  346.853051][   T31]  __sock_sendmsg+0x21c/0x270
[  346.857779][   T31]  ____sys_sendmsg+0x505/0x820
[  346.862614][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[  346.868014][   T31]  ? import_iovec+0x74/0xa0
[  346.873488][   T31]  ___sys_sendmsg+0x21f/0x2a0
[  346.878266][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[  346.885047][   T31]  ? futex_wake+0x4b2/0x560
[  346.889636][   T31]  ? __fget_files+0x2a/0x420
[  346.894403][   T31]  ? __fget_files+0x3a0/0x420
[  346.899135][   T31]  __x64_sys_sendmsg+0x19b/0x260
[  346.904800][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  346.910799][   T31]  ? rcu_is_watching+0x15/0xb0
[  346.915620][   T31]  do_syscall_64+0xec/0xf80
[  346.920224][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.926332][   T31]  ? trace_irq_disable+0x37/0x100
[  346.931523][   T31]  ? clear_bhb_loop+0x60/0xb0
[  346.936232][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.942522][   T31] RIP: 0033:0x7fd47498f749
[  346.946977][   T31] RSP: 002b:00007fd47579b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  346.955538][   T31] RAX: ffffffffffffffda RBX: 00007fd474be5fa0 RCX: 00007fd47498f749
[  346.963695][   T31] RDX: 0000000020006004 RSI: 0000200000000140 RDI: 0000000000000007
[  346.972836][   T31] RBP: 00007fd474a13f91 R08: 0000000000000000 R09: 0000000000000000
[  346.980901][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.988905][   T31] R13: 00007fd474be6038 R14: 00007fd474be5fa0 R15: 00007ffccb5bd818
[  346.997051][   T31]  </TASK>
[  347.000600][   T31] 
[  347.000600][   T31] Showing all locks held in the system:
[  347.008972][   T31] 1 lock held by khungtaskd/31:
[  347.014252][   T31]  #0: ffffffff8df41aa0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  347.024246][   T31] 3 locks held by kworker/u8:14/3577:
[  347.029622][   T31]  #0: ffff88813ff29948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  347.041959][   T31]  #1: ffffc9000c917bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  347.053032][   T31]  #2: ffffffff8f312108 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  347.062140][   T31] 1 lock held by klogd/5192:
[  347.066750][   T31] 2 locks held by getty/5594:
[  347.071776][   T31]  #0: ffff8880344990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  347.082453][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x449/0x1460
[  347.092712][   T31] 4 locks held by kworker/u8:28/7251:
[  347.098118][   T31]  #0: ffff88801aa9f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770
[  347.110159][   T31]  #1: ffffc90003387bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770
[  347.124095][   T31]  #2: ffffffff8f304d30 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7a0
[  347.133765][   T31]  #3: ffffffff8df474c0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570
[  347.143986][   T31] 2 locks held by syz.3.560/7889:
[  347.149037][   T31]  #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  347.158472][   T31]  #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x137/0x1660
[  347.169175][   T31] 2 locks held by syz.4.1389/10775:
[  347.174422][   T31]  #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  347.183698][   T31]  #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x16e/0xb60
[  347.194383][   T31] 2 locks held by syz.6.2338/13912:
[  347.199605][   T31]  #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  347.208488][   T31]  #1: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0
[  347.218614][   T31] 3 locks held by syz-executor/15811:
[  347.224507][   T31]  #0: ffffffff8ea95988 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  347.234922][   T31]  #1: ffffffff8f312108 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90
[  347.244147][   T31]  #2: ffffffff8df475f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2b1/0x6e0
[  347.255403][   T31] 3 locks held by syz.7.2896/15857:
[  347.261447][   T31]  #0: ffffffff8f379e70 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  347.269711][   T31]  #1: ffff88803adca6f0 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0
[  347.281782][   T31]  #2: ffffffff8e2379a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdf/0x1290
[  347.292447][   T31] 1 lock held by syz.5.2924/15953:
[  347.297614][   T31]  #0: ffffffff8f312108 (rtnl_mutex){+.+.}-{4:4}, at: wext_ioctl_dispatch+0xa2/0x410
[  347.307190][   T31] 1 lock held by syz.1.2927/15966:
[  347.312605][   T31]  #0: ffffffff8f312108 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[  347.321562][   T31] 2 locks held by syz.1.2927/15967:
[  347.326791][   T31]  #0: ffffffff8f304d30 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570
[  347.336314][   T31]  #1: ffffffff8f312108 (rtnl_mutex){+.+.}-{4:4}, at: register_netdevice_notifier_net+0x1a/0xa0
[  347.348225][   T31] 1 lock held by syz.1.2927/15971:
[  347.353653][   T31]  #0: ffffffff8f312108 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[  347.362609][   T31] 
[  347.366501][   T31] =============================================
[  347.366501][   T31] 
[  347.392272][   T31] NMI backtrace for cpu 1
[  347.392291][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  347.392313][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  347.392324][   T31] Call Trace:
[  347.392331][   T31]  <TASK>
[  347.392339][   T31]  dump_stack_lvl+0xe8/0x150
[  347.392369][   T31]  nmi_cpu_backtrace+0x274/0x2d0
[  347.392398][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  347.392431][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  347.392462][   T31]  sys_info+0x135/0x170
[  347.392484][   T31]  watchdog+0xf95/0xfe0
[  347.392515][   T31]  ? watchdog+0x20a/0xfe0
[  347.392548][   T31]  kthread+0x711/0x8a0
[  347.392576][   T31]  ? __pfx_watchdog+0x10/0x10
[  347.392601][   T31]  ? __pfx_kthread+0x10/0x10
[  347.392629][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  347.392651][   T31]  ? __pfx_kthread+0x10/0x10
[  347.392670][   T31]  ret_from_fork+0x510/0xa50
[  347.392685][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  347.392697][   T31]  ? __switch_to+0xc9e/0x1480
[  347.392718][   T31]  ? __pfx_kthread+0x10/0x10
[  347.392736][   T31]  ret_from_fork_asm+0x1a/0x30
[  347.392766][   T31]  </TASK>
[  347.392776][   T31] Sending NMI from CPU 1 to CPUs 0:
[  347.514976][    C0] NMI backtrace for cpu 0
[  347.514993][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) 
[  347.515012][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  347.515023][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  347.515049][    C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 61 0e 00 f3 0f 1e fa fb f4 <e9> 08 e3 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  347.515064][    C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c6
[  347.515081][    C0] RAX: 00000000001716b9 RBX: ffffffff8197149e RCX: 0000000080000001
[  347.515093][    C0] RDX: 0000000000000001 RSI: ffffffff8d793695 RDI: ffffffff8bc086e0
[  347.515105][    C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  347.515119][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822e70
[  347.515131][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  347.515143][    C0] FS:  0000000000000000(0000) GS:ffff888125e1e000(0000) knlGS:0000000000000000
[  347.515157][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  347.515173][    C0] CR2: 00007fe1dcfb7198 CR3: 000000007b05a000 CR4: 00000000003526f0
[  347.515189][    C0] Call Trace:
[  347.515197][    C0]  <TASK>
[  347.515204][    C0]  default_idle+0x13/0x20
[  347.515226][    C0]  default_idle_call+0x73/0xb0
[  347.515248][    C0]  do_idle+0x1be/0x4d0
[  347.515268][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  347.515289][    C0]  ? __pfx_do_idle+0x10/0x10
[  347.515313][    C0]  cpu_startup_entry+0x44/0x60
[  347.515333][    C0]  rest_init+0x2de/0x300
[  347.515357][    C0]  start_kernel+0x381/0x3d0
[  347.515379][    C0]  x86_64_start_reservations+0x24/0x30
[  347.515406][    C0]  x86_64_start_kernel+0x143/0x1c0
[  347.515431][    C0]  common_startup_64+0x13e/0x147
[  347.515463][    C0]  </TASK>
[  347.703067][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  347.710013][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  347.719148][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  347.729228][   T31] Call Trace:
[  347.732529][   T31]  <TASK>
[  347.735477][   T31]  vpanic+0x1e0/0x670
[  347.739482][   T31]  panic+0xb9/0xc0
[  347.743226][   T31]  ? __pfx_panic+0x10/0x10
[  347.747660][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  347.753051][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  347.759231][   T31]  watchdog+0xfdf/0xfe0
[  347.763422][   T31]  ? watchdog+0x20a/0xfe0
[  347.767777][   T31]  kthread+0x711/0x8a0
[  347.771866][   T31]  ? __pfx_watchdog+0x10/0x10
[  347.776561][   T31]  ? __pfx_kthread+0x10/0x10
[  347.781198][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  347.786421][   T31]  ? __pfx_kthread+0x10/0x10
[  347.791040][   T31]  ret_from_fork+0x510/0xa50
[  347.795671][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  347.800807][   T31]  ? __switch_to+0xc9e/0x1480
[  347.805519][   T31]  ? __pfx_kthread+0x10/0x10
[  347.810125][   T31]  ret_from_fork_asm+0x1a/0x30
[  347.814945][   T31]  </TASK>
[  347.818663][   T31] Kernel Offset: disabled
[  347.823022][   T31] Rebooting in 86400 seconds..